Empowering Employees to be Data Privacy Champions We want everyone at T-Mobile to be a data privacy champion. We provide annual data privacy training through i365 and year-round awareness programs so that employees know how to keep customer data confidential in different scenarios, with additional training for roles that involve handling personal information. All employees are required to uphold the privacy and security obligations outlined in our internal corporate policies, including our Code of Business Conduct, Information Security Policy, Records Management Policy, Information Handling Policy, Information Handling Procedure, Information Classification Standard, and Acceptable Use Policy. We work to further weave a culture of privacy and security throughout the business by engaging our Security and Privacy Ambassador Network (SPAN), which acts as an extension of our Privacy Office. Members of SPAN are embedded across the company and equipped with enhanced privacy knowledge to raise awareness, oversee adoption of privacy and security practices, and proactively elevate important matters to the Privacy Office. SAFER CHOICES FOR FAMILIES Digital connectivity allows us to keep connected to loved ones, but it also opens up a world that can be tricky to navigate, especially for families with children. Parenting in the digital age isn’t always easy, but T-Mobile is giving parents and guardians better options for managing their children’s online activities and screen time so they can feel confident about the way their family interacts with digital technology. With T-Mobile, parents and guardians can choose what’s right for their family through both free and paid services. Our free Web Guard service lets customers apply different filter levels to restrict adult content from being seen or accessed by family members. FamilyMode® can be selected for a cost for those who want to keep track of their family members’ locations in real time, set content filters, and monitor screen time to help develop good digital habits. Parents can even use the FamilyMode® app to give extra screen time as a reward or to pause the internet when a break is called for. We’re always looking for new ways to safeguard children and protect their privacy through the products and services we offer. We piloted our Kid’s Line in 2021 for our postpaid customers, with plans to expand access to all of our customers. This feature enables parents and guardians to designate any line on their account as a Kid’s Line if it’s being used by a child under the age of 16. Once designated a Kid’s Line, we won’t use that line’s data for advertising, and we’ll opt the line out of our marketing communications. To learn more, check out our Children’s Privacy Notice . Our Privacy Office routinely evaluates our corporate policies, procedures, and training programs to provide employees with evolving data privacy and security requirements and ensure they have the resources they need to protect customer privacy. Data Privacy Oversight and Controls T-Mobile has an established governance and controls p rocess in place to help ensure that our data privacy policies and practices are effectively implemented. The highest level of oversight comes from our Nominating and Corporate Governance Committee of the Board of Directors. In addition to Board level oversight, T-Mobile’s data p rivacy team and cybersecurity team jointly report to the Information Security and Privacy Council, which includes members of the Senior Leadership Team. Together, these groups monitor the effectiveness of T-Mobile’s data privacy programs. Safety through Innovation: T-Mobile’s SyncUP KIDS Watch helps parents protect their children by enabling a safe entry into the digital world. Parents are able to track their kid’s location in real time and get alerts when they enter or exit a virtual boundary. The watch also allows the child to alert their contacts if they need help or hit a button to call 911 in an emergency. GIVING CUSTOMERS CONTROL OF HOW THEIR DATA IS USED We use some information, like adult age range and apps installed on a customer’s device, for advertising purposes. This information is attributed to Advertising IDs, which are pooled to create audience segments based on customer interests, like sports or entertainment. When we share data, we only share the audience segment name, like “business traveler.” We do not share underlying customer broadband or device usage data with third parties for advertising purposes. And we never share information for advertising purposes that directly identifies customers, such as name, address, email, or precise location information. This enables the delivery of offers and ads for pr oducts and services based on customer interests. As always, our goal is to deliver the best experience to our customers. Through their My T-Mobile account, customers can opt out or change their advertising preferences at any time. For more information about customers’ choices, please visit our Privacy Notice . Data Privacy Continued 2021 CORPORATE RESPONSIBILITY REPORT OUR PEOPLE OUR COMMUNITIES THE NUMBERS AND SMALL PRINT 21 OUR COMPANY THE ENVIRONMENT OUR GOVERNANCE