The 2022 Ranking Digital Rights Telco Giants Scorecard Privacy 9/18/25, 10:38 AM 30% Despite some improvement in its privacy policy, Telenor still provided only partial information about how it collects, shares, or retains user information (P3a, P4, P6, P9) and o#ered only limited options for users to manage and control their own data (P7). Meanwhile, Telenor disclosed the least amount of information about data security policies among European and U.S. telecommunication companies. The company was silent about how it responds to data breaches (P15). Indicators P1. Access to policies affecting users’ privacy 42% P2. Notification of changes 39% 13% P3. User information collection and inference P11. Data about demands for user information 30% 25% P4. Sharing of user information 38% P5. Purpose for collecting, inferring, and sharing user information 50% P6. Retention of user information 30% P7. Users' control over their own user information 19% P8. Users' access to their own user information 33% P9. Collection of user information from third parties 13% https://rankingdigitalrights.org/tgs22/companies/Telenor P10. Process for responding to demands for user information P12. User notification about third-party requests for user information 0% P13. Security oversight 50% P14. Addressing security vulnerabilities 4% P15. Data breaches 0% P16. Encryption of user communication and private content (digital platforms) NA P17. Account security (digital platforms) NA Page 12 of 13