Macy's, Inc.

Evaluation of Disclosure Controls and Procedures

The Company's Chief Executive Officer (Principal Executive Officer) and Chief Financial Officer (Principal Financial Officer) have carried out, as of January 31, 2026, with the participation of the Company's management, an evaluation of the effectiveness of the Company's disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act. Based upon this evaluation, the Chief Executive Officer (Principal Executive Officer) and Chief Financial Officer (Principal Financial Officer) have concluded that as of January 31, 2026 the Company's disclosure controls and procedures were effective to provide reasonable assurance that information required to be disclosed by the Company in reports the Company files under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC rules and forms, and that information required to be disclosed by the Company in the reports the Company files or submits under the Exchange Act is accumulated and communicated to the Company's management, including its Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Management's Annual Report on Internal Control over Financial Reporting

The Company's management is responsible for establishing and maintaining adequate internal control over financial reporting, as defined in Exchange Act Rules 13a-15(f) and 15d-15(f). The Company's internal control over financial reporting is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of consolidated financial statements in accordance with generally accepted accounting principles. There are inherent limitations to the effectiveness of any system of internal control over financial reporting. These limitations include the possibility of human error, the circumvention or overriding of the system and reasonable resource constraints. Because of its inherent limitations, the Company's internal control over financial reporting may not prevent or detect misstatements.

The Company's management conducted an assessment of the Company's internal control over financial reporting based on the framework established by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control – Integrated Framework (2013). Based on this assessment, the Company's management has concluded that, as of January 31, 2026, the Company's internal control over financial reporting was effective. The Company's independent registered public accounting firm, KPMG LLP, has audited the Company's Consolidated Financial Statements included in this Annual Report on Form 10-K and the effectiveness of the Company's internal control over financial reporting as of January 31, 2026 and has issued an attestation report expressing an unqualified opinion on the effectiveness of the Company's internal control over financial reporting, as stated in their report located on page 35.

Changes in Internal Control over Financial Reporting

From time to time adoption of new accounting pronouncements, major organizational restructuring and realignment occurs for which the Company reviews its internal control over financial reporting. As a result of this review, there were no changes in the Company's internal control over financial reporting that occurred during the Company's most recently completed quarter that materially affected, or are reasonably likely to materially affect, the Company's internal control over financial reporting.