Royal Gold, Inc. 2021 ESG Report 24 Whistleblower Policy Effective governance is only possible if our directors, officers and employees feel safe to report violations of company standards without fear of reprisal. Our Whistleblower Policy establishes the basis for our workforce to report suspected illegal activities, unethical behavior and other misconduct through internal channels, and in confidence. The Whistleblower Policy also details the manner in which reports will be investigated and corrective actions taken, where appropriate. Whistleblower Policy Human Rights Policy Human rights are basic standards aimed to secure dignity and equality for all people. Our Human Rights Policy reflects Royal Gold’s commitment to the International Council on Mining and Metals’ 10 Principles of Sustainable Development, as well as the World Gold Council’s Responsible Gold Mining Principles, each of which incorporates the United Nations Guiding Principles on Business and Human Rights. Human Rights Policy Tax Policy Consistent with our commitment to the highest ethical standards, Royal Gold’s Tax Policy provides a framework to ensure that our company-wide tax strategy and tax compliance measures are consistent with applicable laws. Tax Policy Cyber Disclosure Like many businesses, Royal Gold faces constant and evolving cyber threats. Our systems, and those of our third- party service providers, could be vulnerable to damage or disruption caused by catastrophic events, power outages, natural disasters, computer system or network failures, viruses or malware, physical or electronic break-ins, unauthorized access, or other cyber-attacks. Our Board of Directors and senior management oversee matters relating to cybersecurity. Under its Charter, the AF Committee of our Board is responsible for reviewing the security of our information technology systems and operations, including programs and defenses against cyber threats. The full Board of Directors is briefed on cybersecurity at least annually and receives more frequent updates as warranted by the business operating environment. At the management level our Chief Financial Officer and Treasurer are responsible for cybersecurity matters. Royal Gold has a number of physical and technical safeguards in place to address cybersecurity risks. Employees engage in regular cybersecurity training as warranted by the business operating environment, and the company maintains an Incident Response Plan to respond in case of any cybersecurity breaches. Cyber Disclosure