Company: GDOT
Filing Date: 2025-04-11
Form Type: DEF 14A
Source: 0001386278-25-000020
Chunk: 23

Company: GREEN DOT CORP
Filing Date: 2025-04-11
Form: DEF 14A
Chunk 23
---
 Board or one of our executive officers will be disclosed on our website at the above-referenced address.

#### Insider Trading Policy
We have adoptedan Insider Trading Policy governing the purchase, sale, and other dispositions of our securities by our directors, officers, employees and other individuals associated with us, as well as by Green Dot itself, that we believe is reasonably designed to promote compliance with insider trading laws, rules and regulations, and listing standards applicable to us. A copy of our Insider Trading Policy was filed as Exhibit 19.1 to our Annual Report on Form 10-K for the fiscal year ended December 31, 2024.

#### Information Security and Privacy Risk Oversight
The Green Dot Information Security Program applies to all our business operations and activities as well as those of our subsidiaries and seeks to:

• Ensure the security, confidentiality, and integrity of Green Dot’s information assets, including customer information, and to ensure the proper disposal of customer and consumer information;

• Protect all electronic information systems maintained by Green Dot and/or connected to Green Dot’s network against any anticipated threats or hazards to the security or integrity of the systems;

• Promote and achieve a strong culture of safeguarding customer information throughout Green Dot by implementing a training program for employees and senior management so they have a working knowledge of the Green Dot policies associated with their responsibilities; and

• Ensure adequate senior management and Board oversight of Green Dot’s Information Security Program.

Governance, Roles and Responsibilities

Our Chief Information Security Officer (“CISO”) is responsible for maintaining and implementing the Information Security Program. The CISO and his staff are also tasked with establishing and maintaining adequate IT standards, system architecture standards, and internal controls. The Risk Committee oversees our Information Security Program and reviews and approves the program no less than annually. The Risk Committee works with our CISO to help validate that our technology direction is consistent with business objectives and that IT resources are used in an effective, efficient and risk appropriate manner. As discussed above, our Risk Committee is comprised entirely of independent directors, and Mr. Brewster, Ms. Razon, Ms. Richey and Mr. Millard have significant work experience related to information security issues and oversight.

The CISO reports to the Risk Committee quarterly on the overall status of the Information Security Program and Green Dot’s compliance with the program. At least annually, the CISO reviews the Information Security Program and any related policies and procedures and recommends any necessary changes. This review includes consideration of applicable law, feedback on the effectiveness of the program, and any superv