Data privacy Training and awareness We collect, process and store personal data where necessary for our operations. As outlined by our Data Management Policy Statement, we are committed to respecting the privacy of individuals. We take great care to manage personal data appropriately and in compliance with applicable laws, in particular the UAE Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR). In 2024, we introduced the Group Privacy and Data Protection Standard and accompanying procedure to help us continue to handle personal data in an ethical and lawful manner. Our Information Classification Standard sets mandatory rules for classifying digital information, defines data categories, Our people are the strongest link in our cyber defence and data protection. Through our CyberAware program we continue to invest in training them to prevent, protect against and respond to emerging cyber threats and risks, as well as handling data securely. Our training and awareness programs include regular phishing simulations, people engagement through internal ‘cyber events,’ specialized on-the-job training programs, tabletop exercises, e-learning and gamification, as well as a community and family cyber outreach program. Our programs are delivered Group-wide to help everyone be well- informed with customized training provided for specific roles with unique needs and responsibilities. and outlines roles and responsibilities for consistent sensitivity labelling. This labelling is integrated and enforced through technology across all digital information exchange channels. We are implementing a Group-wide data protection and privacy (DPP) program to automate and centralize key processes such as data mapping, consent tracking, impact assessment and third park risk assessments to improve compliance. Companies that wish to conduct business and register with us must comply with all controls under our Data Management Policy Statement. artificial intelligence. During the session we hosted a cyber incident simulation for our industry colleagues and held the largest national ‘Capture the Flag’ competition, where university students identified and fixed system vulnerabilities in a simulated industrial environment. Our CyberAware program promotes practical cyber resilience, teamwork and real-time problem- solving, empowering future talent and supporting the national cybersecurity agenda. ADNOC’s CyberAware program supports our commitment to building a cyber-resilient workforce and raising digital safety awareness. In 2024, more than 21,000 employees across 100-plus ADNOC Group sites participated in awareness sessions. CyberAware also engaged more than 3,800 students across Abu Dhabi, providing essential cybersecurity knowledge and skills to securely navigate the digital world. In 2024, we showcased our CyberAware program at ADIPEC to raise cyber awareness around ADNOC CyberAware – building cyber resilience 141 ADNOC Sustainability Report 2024 HOW WE OPERATE KEEPING OUR PEOPLE SAFE ADVANCING NET ZERO EMPOWERING LIVES SUSTAINABILITY AT ADNOC ABOUT ADNOC PROTECTING NATURE AND BIODIVERSITY