Disclosure# Disclosure Topic 2021 Response Diversity of employees 2021 Corporate Responsibility Report: Our People > DE&I 2021 Corporate Responsibility Report: Our Governance > Corporate Governance Material Topic: Digital Security and Privacy GRI 418: Customer Privacy 103-1 Explanation of the material topic and its Boundaries 2021 Corporate Responsibility Report: Our Company > ESG Approach 2021 Corporate Responsibility Report: The Numbers and Small Print > Material Topic Definitions 103-2 The management approach and its components 2021 Corporate Responsibility Report: Our Governance > Data Privacy 103-3 Evaluation of the management approach 2021 Corporate Responsibility Report: Our Company > ESG Approach 418-1 Substantiated complaints concerning breaches of customer privacy and losses of customer data T-Mobile does not report on all complaints concerning customer privacy or data loss. As required by FCC rules, T-Mobile has implemented policies and procedures to capture (and investigate) all customer complaints made to any company business channel (e.g., customer care, retail, Web, etc.) concerning alleged unauthorized release of CPNI. We report this number (for both substantiated and unsubstantiated complaints) annually to the FCC in a public filing available from T-Mobile or from the FCC’s website under Docket 06-36. For 2021, that filing reported a total of 913 complaints concerning CPNI (some of which were determined not to be substantiated). GRI Index Continued 2021 CORPORATE RESPONSIBILITY REPORT OUR PEOPLE OUR GOVERNANCE OUR COMMUNITIES 87 OUR COMPANY THE ENVIRONMENT THE NUMBERS AND SMALL PRINT