Top ic Code Accounting Metric Response Data Security CG-MR-230a.1 Description of approach to identifying and addressing data security risks See the DATA PROTECTION AND PRIVACY section of this report. CG-MR-230a.2 (1) Number of data breaches, (2) percentage involving personally identifiable information (PII), (3) number of customers affected Not rep orted Code Activity Metric Response CG-MR-000.A Retail locations 727 Distribution centers 25 CG-MR-000.B Retail space 113 sq m Distribution centers 15.9 sq m CG-AA-000.A Tier 1 suppliers 270 | Sustainability Report 2020 Return to Table of Contents 39