Company: KMX
Filing Date: 2025-05-08
Form Type: DEF 14A
Source: 0001170010-25-000073
Chunk: 6

Company: CARMAX INC
Filing Date: 2025-05-08
Form: DEF 14A
Chunk 6
---
#### CARING FOR OUR COMMUNITIES
We view the success of our business as fundamentally linked to the health and well-being of our local communities. From encouraging volunteering to investing in nonprofits that support our communities, we strive to make a meaningful impact where we operate. In fiscal 2025, we equipped our associates to connect with their communities in meaningful ways as we continued our work with nonprofits providing individuals with access to economic opportunities, built playgrounds, packaged care kits for our most vulnerable community members, and volunteered our time to support our communities’ most pressing needs. Since 2003, CarMax and The CarMax Foundation have donated more than $110 million to support the growth and well-being of our local communities. In fiscal year 2025, more than 23,000 associates participated in our Care Card program in conjunction with Giving Tuesday, by allocating funds to a nonprofit of their choice. These are just a few of the many ways CarMax and our associates supported our local communities over the past year.

#### ENSURING RESPONSIBLE GOVERNANCE AND ETHICS

#### Sound Corporate Governance
Our Board and management have adopted governance standards and practices that seek to further our commitment to integrity while ensuring effective enterprise risk management. Our compliance and ethics program works to drive legal and regulatory compliance across all aspects of our business.

#### Ethics
Our fundamental principle of integrity is reflected in the way we serve our customers, treat each other, and deliver our products. We rely on our fair and responsible business practices, our code of business conduct training, and benchmarking and improvements to our compliance and ethics program to maintain our culture of integrity. This culture is a distinct competitive advantage and allows us to attract and maintain a high-performing workforce.

#### Data Security and Consumer Privacy
Our comprehensive, risk-based approach to safeguarding information reflects our commitment to do the right thing and protect the sensitive data of those who trust in us.

#### 11
As an auto retailer and financial institution, we are required to collect a significant amount of sensitive information to protect our business and our customers from fraudulent activity and to comply with regulatory requirements. As such, we take the responsibility to collect and protect sensitive data seriously and maintain a comprehensive program of technical solutions, procedural requirements and policies, guided by recognized industry cybersecurity frameworks and staffed by well-trained and experienced cybersecurity and privacy professionals. Although the risks of cybersecurity breaches are dynamic, and only growing as our reliance on digital operations increases, to our knowledge the Company has not experienced any material cybersecurity incidents or incurred any material expenses resulting from a cybersecurity