Sustainability For Our For Our Creating Value For the For Our Managing Appendix at MetLife Workforce Customers as an Investor Environment Communities Responsibly GRI Standard Index Disclosure Number Disclosure Title Response/Reference GRI 417: Marketing and Labeling 417-3 Incidents of non-compliance concerning For MetLife’s disclosure on material legal proceedings, other than ordinary routine litigation incidental marketing communications to the business, see Note 21 of the 2021 Form 10-K and Note 14 of the 1Q22 Form 10-Q. We consider “significant” fines as those listed in our 10-K. GRI 418: Customer Privacy 103-1 Explanation of the material topic and its Boundary Managing Responsibly >> Cybersecurity and Data Privacy Privacy Policy 103-2 The management approach and its components Managing Responsibly >> Cybersecurity and Data Privacy Privacy Policy 418-1 Substantiated complaints concerning breaches of The number of complaints received is confidential information. MetLife has a long-standing customer privacy and losses of customer data commitment to protect the security, confidentiality and integrity of personal information, and to comply with all applicable privacy and data protection laws and regulations. To this end, MetLife has a global privacy policy that establishes enterprise-wide minimum standards on the collection, use and protection of personal information. Like other organizations, MetLife occasionally experiences security breaches, which may be described generally as the unauthorized access, loss, disclosure or misdirection of personal information. Should one of these incidents occur, MetLife has an incident response team that takes immediate steps to minimize any impact on the subject, follow applicable legal requirements, and investigate and correct the root cause, if needed, to help prevent future incidents. The team includes privacy and security professionals, lawyers and associates in our lines of business. GRI 419: Socioeconomic Compliance 419-1 Non-compliance with laws and regulations in the For MetLife’s disclosure on material legal proceedings, other than ordinary routine litigation social and economic area incidental to the business, see Note 21 of the 2021 Form 10-K and Note 14 of the 1Q22 Form 10-Q. We consider “significant” fines as those listed in our 10-K. 2021 SUSTAINABILITY REPORT 131