108 2021 Sustainability Report Responsible Business Practices Performance Data Our People and Culture A Modern, High-Performing Health System Introduction Environmental Health Sustainability Accounting Standards Board (SASB) Index The Sustainability Accounting Standards Board (SASB) is an independent, standards-setting organization that has developed voluntary industry-specific standards for companies to disclose consistent and decision-useful environmental, social and governance (ESG) information for investors. We have expanded our reporting of sustainability performance this year by aligning our disclosures to the SASB framework. The table below is UnitedHealth Group’s SASB Index, which includes disclosures in the three SASB industry standards that are most relevant to our business: Managed Care, Health Care Delivery, and Professional and Commercial Services. Topic Code/Metric UnitedHealth Group Disclosure Activity Metric HC-MC-000.A Number of enrollees by plan type Form 10-K Table summarizes the number of individuals (in thousands) served by our UnitedHealthcare businesses as of December 21, 2021, by major market segment and funding arrangement, page 30. Commercial Risk-based 7,9 8 5 Fee-based 18,595 Total 26,580 Medicare Advantage 6,490 Medicaid 7,6 5 5 Medicare Supplement (Standardized) 4,395 Total Community and Senior 18,540 Total UnitedHealthcare – Domestic Medical 45,120 Global 5,510 Total UnitedHealthcare – Medical 50,630 Supplemental Data Medicare Part D Standalone 3,700 Customer Privacy and Technology Standards HC-MC-230a.1 Description of policies and practices to secure customers’ protected health information (PHI) records and other personally identifiable information (PII) • 2 021 Sustainability Report: Responsible Business Practices — Data privacy and security, page 94 . • Code of Conduct . • F orm 10-K Privacy, Security and Data Standards Regulation, page 7. • A udit and Finance Committee Charter . HC-MC-230a.2 (1) Number of data breaches, (2) percentage involving (a) personally identifiable information (PII) only and (b) protected health information (PHI), (3) number of customers affected in each category, (a) PII only and (b) PHI • W e promptly investigate data privacy complaints and report required data breaches to the U.S. Department of Health & Human Services (HHS) — Office for Civil Rights (OCR). Refer to the U.S. Department of Health & Human Services — Office for Civil Rights website . Access to Coverage HC-MC-240a.1 Medical Loss Ratio (MLR) • F orm 10-K Denoted as “Medical Care Ratio,” page 28. • 8 2.6% for the 12 months ending December 31, 2021. Managed Care