5 GRI 403-5: Worker training on occupational health and safety Annual safety related enterprise training is required of all employees and is compliant with applicable laws, rules and regulations. Additionally, safety and health training is provided for specific work environment hazards/risks in accordance with laws, rules and regulations (i.e., Chemical Inventory and Material Safety Data Sheets and Powered Industrial Truck Operator Training Assessment and Asset Inventory). See also the Bank of America Annual Report (pages 38-41, 120) for information on well-being-related trainings and other expanded resources. GRI 403-6: Promotion of worker health Throughout 2021, we supported our employees as they adapted to the developing global health crisis. We expanded our health and wellness programs, increased benefits for child and adult care, provided flexible time off and offered free COVID-19 testing as well as vaccine clinics in some of our workspaces. Please refer to our Annual Report (pages 38-41) for additional worker health programs. GRI 403-7: Prevention and mitigation of occupational health and safety impacts directly linked by business relationships Where the Bank does not own the building, we manage safety and health risk through contractual agreements, and relationships with landlords and third party suppliers to identify and resolve unfavorable safety and health conditions in the workplace. Suppliers are bound by contract to adhere to Bank policies and standards while performing services for or on behalf of Bank of America and/or when on Bank premises. Customers, employees and visitors are required to adhere to all posted safety signage, including, but not limited to mask use and social distancing (compliance with which is monitored daily), no smoking, firearms prohibitions, etc. Also refer to our Annual Report (pages 38-41) for additional COVID response information. GRI 403-8: Workers covered by an occupational health and safety management system As mentioned previously, all employees are covered under the Bank’s Enterprise Safety Program. The Bank has 212,505 employees and 53,414 non-employees for an Enterprise total of 265,919. Note non-employee number includes contractors, consultants, outsourced/access only and joint venture. Bank of America’s Safety Program is subject to the Bank’s internal Audit process as well as Federal OSHA and state and local safety and health agency inspections. GRI 404-2: Programs for upgrading employee skills and transition assistance programs Working here, Being a great place to work, Wellness & benefits Working here, Being a great place to work, Recognizing and rewarding performance GRI 404-3: Percentage of employees receiving regular performance and career development reviews Working here, Being a great place to work, Wellness & benefits Omission - Part of Disclosure Omitted: Percentage of employees receiving regular performance and career development reviews Reason for Omission: Not applicable. The percentage of completed reviews does not necessarily speak to our overall pay-for-performance methodology, and this detail has not been included in the past for ESG purposes. GRI 405-1: Diversity of governance bodies and employees Working here, Being a great place to work, Diversity & inclusion GRI 405-2: Ratio of basic salary and remuneration of women to men 2022 Proxy Statement , 2021 Annual Report

Bank of America ESG Report - Page 5 Bank of America ESG Report Page 4 Page 6