ESG Disclosures: SASB Multi-line and Specialty Retailers & Distributors O INTR TOPIC ACCOUNTING METRIC CODE RESPONSE REFERENCE ANET Energy Management in (1) Total energy consumed, (2) CG-MR-130a. 1 (1) 963,231 GJ 2021 Impact Report: Climate & Energy, pages 21-26 PL Retail & Distribution percentage grid electricity, (3) (2) 98.8% CDP Climate Disclosure percentage renewable (3) 1.2% Data Security Description of approach to CG-MR-230a. 2 As the consumer and our business continue to shift online, we are dedicated to 2021 Impact Report: Cybersecurity & identifying and addressing safeguarding our customers’ personal information and prioritizing cybersecurity. This Data Privacy, page 78 data security risks commitment is reflected in our governance structure; our data security policies and Annual Report, page 10 procedures; and our systems to measure, monitor, and respond to data breaches and WSI Privacy Policy OPLE cyberattacks. See references for full description of approach. PE (1) Number of data breaches, CG-MR-230a. 2 We use a series of technologies and practices to prevent data security breaches, detect 2021 Impact Report: Cybersecurity & (2) percentage involving and respond to potential data security issues. In the event of a policy change or data Data Privacy, page 78 personally identifiable breach, our policy requires that we notify data subjects in a timely manner. Our WSI Annual Report, page 10 information (PII), (3) number of associates, as well as third parties who provide services on our behalf, are required by customers affected policy, practice, and contract, if applicable, to treat customer information with care. Our policies and standards are reinforced by training and engagement to ensure that the privacy and security of our customers is central. WSI discloses this information in accordance with the SEC’s Commission Statement and Guidance on Public Company Cybersecurity Disclosures. See references for partial reporting. PURPOSE T 2021 T REPOR C A APPENDIX IMP 107 108