4 GRI 403-1: Occupational health and safety management system See the Human Capital Management content in the 2021 Annual Report (pages 38- 41) for information on how Bank of America supports employee safety and health throughout the pandemic, and for examples of safety processes implemented based on CDC guidance. In addition, Bank of America’s Enterprise Occupational Safety & Health Policy complies with relevant statutory requirements relating to health, safety and the physical environment, as they affect employees, suppliers, clients and the public. Bank of America Corporation is committed to providing a safe working environment for its employees, customers, third party suppliers and any others operating within Company premises or at the behest of the Company. a. Bank of America maintains a global safety program that aligns with applicable laws, rules and regulations and is supplemented by regional safety and health systems that support the Bank’s policy. b. The Bank’s Safety Program covers all employees, workplaces, and activities conducted on behalf of the Bank. The Bank’s Safety Program incorporates the following statement: Safety is everyone’s responsibility. Supporting workplace safety assures your own protection and the protection of other employees, customers, contractors/suppliers and the general public. GRI 403-2: Hazard identification, risk assessment, and incident investigation The Bank’s Occupational Safety & Health Council advises on direction and changes of the Enterprise Occupational Safety & Health Policy. It reviews the safety and health metric dashboard and corresponding action plans quarterly in line with Policy objectives and resolves issues and risks that have been escalated. a. Objective of the Bank of America Safety Program is to provide a safe work environment and to identify, correct and eliminate workplace hazards. Employees may raise issues regarding workplace health or safety to the 24/7 security hotline. Additionally, workplace hazards should be reported to an appropriate member of management, the site safety coordinator (if applicable), Corporate Workplace (Facility Management) or anonymously through the Ethics and Compliance Hotline. b. Bank of America’s Employee Handbook states the following: “All employees have the right to raise issues or file a workplace health or safety complaint without fear of retaliation. To anonymously report any complaints, contact the Ethics and Compliance Hotline...” Additionally, there are numerous Whistleblower Policies in place across the globe. GRI 403-3: Occupational health services See the 2021 Annual Report (pages 38-41) for information on how Bank of America supports employee safety and health throughout the pandemic. In addition, the Bank ensures the availability of health services for all employees who require consultations and/or care related to a workplace hazard or incident, including dedicated Life Events Services or Employee Assistance Program resources as needed to facilitate a smooth transition back to work. Our Life Safety team facilitates the Occupational Safety & Health Council at an enterprise level, ensuring multiples lines of business work together to identify and minimize risk across their functions and our global footprint. Regionally-based security/safety managers proactively assess and mitigate many situational and physical risks while also responding to workplace safety concerns escalated through our numerous reporting channels (24/7 Security Hotline, See Something Say Something anonymous reporting, direct engagement, etc.). The Bank has further prioritized the safety and health of our employees in direct response to the coronavirus. GRI 403-4: Worker participation, consultation, and communication on occupational health and safety The Bank engages in a variety of consultation and communication activities dependent upon sizes of offices ranging from direct senior management face to face meetings through to health and safety committees and works councils at which employee representatives are attendees. The Bank’s Occupational Safety & Health Council advises on direction and changes of the Enterprise Occupational Safety & Health Policy. It reviews the safety and health metric dashboard and corresponding action plans quarterly in line with Policy objectives and resolves issues and risks that have been escalated to the Council. See also the Bank of America Annual Report (page 38-41). PEOPLE

Bank of America ESG Report - Page 4 Bank of America ESG Report Page 3 Page 5