2021 GRI Content Index GRI 200-400: Topic-Specific Disclosures 2016* Topic Description FY21 Cross-Reference, Omissions, and Explanations SOCIAL GRI 412: Human Rights Assessment 2016 412-2 Employee training on human rights policies or Governance, Ethics, p. 36 procedures Our Code of Conduct 412-3 Significant investment agreements and contracts Governance, Supply Chain Management, pp. 42-43 that include human rights clauses or that underwent Supplier Code of Conduct human rights screening GRI 413: Local Communities 2016 413-1 Operations with local community engagement, Social, NetApp and Social Impact, pp. 22-25 impact assessments, and development programs GRI 418: Customer Privacy 2016 418-1 Substantiated complaints concerning breaches of Governance, Data Privacy and Security, pp. 40-41 customer privacy and losses of customer data *NetApp’s 2021 ESG Report applies the 2016 version of the GRI Standards; “2016” refers to the Standards issue date, not the date of information presented in this report.