Company: RTNTF
Filing Date: 2025-02-20
Form Type: 20-F
Source: 0001628280-25-006642
Chunk: 498

Company: RIO TINTO LTD
Filing Date: 2025-02-20
Form: 20-F
Chunk 498
---
 out of such foreign currency)–Any other charge payable by the depositary or its agents | Expenses payable at the solediscretion of the depositary bybilling holders or by deductingcharges from one or more cashdividends or other cashdistributions                                                        |

Fees and payments made by the depositary to the issuer JPMorgan has agreed to reimburse certain company expenses related to the Rio Tinto plc ADR programme and incurred by the Group in connection with the programme. The Group received US $1,749,507.54 in respect of expenses incurred by the Group in connection with the ADR programme for the year ended 31 December 2024. JPMorgan did not pay any amount on the Group’s behalf to third parties. JPMorgan also waived certain of its standard fees and expenses associated with the administration of the programme relating to routine programme maintenance, reporting, distribution of cash dividends, annual meeting services and report mailing services. Under certain circumstances, including removal of JPMorgan as depositary or termination of the ADR programme by the Company, the Company is required to repay JPMorgan any amounts of administrative fees and expenses waived during the 12- month period prior to notice of removal or termination. Document on display Rio Tinto is subject to the SEC reporting requirements for foreign companies. This Form 20-F , which corresponds with the Form 10-K for US public companies, was filed with the SEC on 20 February 2025. Rio Tinto’s Form 20-F and other filings can be viewed on the Rio Tinto website as well as the SEC website at www.sec.gov

| Annual Report on Form 20-F 2024 | 335 | riotinto.com |

Additional information | US Disclosure

Cyber security Strategy Our vision is to create an environment where cyber security is implicit in everything we do, enabling the business to operate and grow, while actively managing cyber risks to our people, information and assets. Our Cyber Security Strategy (2023-2025) (Cyber Security Strategy) builds upon foundations established by the Cyber Security Strategy and multi‐phased Cyber Security Remediation Program implemented between 2020 and 2022. This program improved segregation of corporate and process control networks, and allowed us to strengthen privileged identity management and close control gaps on the corporate network. Our Cyber Security Strategy has 4 strategic objectives that guide how, together, we can build and maintain cyber security resilience. These objectives will enable us to strengthen and evolve our current cyber security approach, while keeping pace with