AURORA CANNABIS INC

proxy statements. Quarterly Interim Financial Statements (f) Quarterly Interim Review. The Committee must review and discuss the quarterly interim financial statements with management and the independent auditor, including the Company’s disclosures under “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” (g) Approval. The Committee, as delegated by the Board, has the authority to approve the quarterly interim financial statements and accompanying “Management’s Discussion and Analysis of Financial Condition and Results of Operations” for the first three quarters of each fiscal year, as permitted by statute. Other Duties and Responsibilities (h) Compliance, Risk and Assurance. The Compliance Risk and Assurance (“CRA”) function provides management and the Committee with ongoing assessment and information regarding the Company’s risk management processes and system of internal control, including the delivery of internal audit services and assurance projects. CRA will report functionally to the Committee and administratively to the EVP, General Counsel and Corporate Secretary. Oversight responsibilities of the Committee include: (i) Implementation. The Committee must assist with Board oversight of the design and implementation of the CRA function. (ii) Risk Assessment, Risk Management and Compliance. The Committee must discuss the Company’s policies with respect to risk assessment, risk management and compliance with relevant laws and regulations. (iii) Enterprise Risk and Assurance Charter. The Committee must approve the Enterprise Risk and Assurance Charter, any significant revisions thereto, as well as receive communication from the function’s leadership at least annually, confirming the scope, mandate, and independence of the CRA function. (iv) Internal Control over Financial Reporting. The Committee must review management’s assessment of the adequacy and effectiveness of the organization’s system of internal control and management information systems through discussion with management, CRA, and the external auditor, including the adequacy of processes for assessing the risk of material misstatement of the financial statements and for detecting control weaknesses or fraud to ensure the organization meets its obligations under the Sarbanes-Oxley Act to support Section 404 Chief Executive Officer and Chief Financial Officer certifications. (v) Annual Risk-Based Audit and Advisory Plan. The Committee must annually approve the annual Risk-Based Audit and Advisory Plan and associated budget, which includes the planned projects for the upcoming fiscal year, as well as any significant changes to the plan during the fiscal year to accommodate changes in circumstances and any ad-hoc Committee or management requests. (vi) Quarterly Reporting. The Committee must receive quarterly communications from the function’s leadership on performance relative to the Risk-Based Audit and Advisory Plan, results of planned projects, the ERM Framework, selected risk mitigation plans and strategies, corporate compliance, and other matters. (vii) Function Performance. The Committee must annually assess the effectiveness of the CRA function, provide

43 | P a g e input into the performance appraisal process for the Head of the CRA function (“CRA Lead”) and approve any decisions regarding the appointment and removal of the CRA Lead. (i) Review of Earnings Releases. The Committee must discuss the Company’s earnings press releases, as well as financial information and earnings guidance provided to analysts and rating agencies. (j) Oversight of Treasury Functions. The committee must provide oversight of liquidity and broader balance sheet management by the Company, including debt and equity financing decisions. (k) Oversight of Investments and Investment Policy. The Committee must provide oversight of investments and an investment policy, following adoption by the Board. Once an investment policy is established by the Board, the Committee is responsible for reviewing and approving any subsequent changes. (l) Oversight of Related Party Transactions. The Committee must establish, maintain and oversee compliance with a related party transactions policy applying to employees and members of the Board. (m) Oversight of Cyber-Risk. The Committee must regularly review and discuss reports on the Company’s cyber risk exposure and the adequacy of associated protections. (n) Hiring of Independent Auditor Employees. The Committee must set clear hiring policies for employees or former employees of the Company’s independent auditor. (o) Complaint Procedures. The Committee must establish procedures for the receipt, retention and treatment of complaints received by the Company regarding accounting, internal accounting controls or auditing matters, and for the confidential and anonymous submission by Company employees of concerns regarding questionable accounting or auditing matters and review and ensure resolution of such concerns on a timely basis. (p) Oversight of Insurance Policies and Procedures: The Committee must discuss and approve all significant policies and procedures relating to insurance coverages of whatever type, as well as associated coverage limits. (q) Reports to the Board of Directors. The Committee must report regularly to the Board regarding the activities of the Committee. (r) Committee Self-Evaluation. The Committee must at least annually perform an evaluation of the performance of the Committee. Pre-Approval of Non-Audit Services The Committee may delegate to the Chair the authority to pre-approve audit and non-audit services to be provided to the Company or its subsidiaries by the Company’s external auditor. The pre- approval of non-audit services must be presented to the Committee at its first scheduled meeting following such pre-approval. The Committee may satisfy its duty to pre-approve non-audit services by adopting specific policies and procedures for the engagement of the non-audit services, provided the policies and procedures are detailed as to the particular service, the Committee is informed of each non-audit service and the procedures do not include delegation of the Committee’s responsibilities to management. External Advisors The Committee has the authority to conduct any investigation appropriate to fulfilling its responsibilities, and it has direct access to the external auditors as well as anyone in the organization. The Committee has the ability to retain, at the Company’s expense, special legal, accounting or other consultants or experts it deems necessary in the performance of its duties. External Auditors The external auditors are ultimately accountable to the Committee and the Board, as representatives of the shareholders. The external auditors will report directly to the Committee. The Committee will: (a) review the independence and performance of the external auditors and annually recommend to the Board the nomination of the external auditors or approve any discharge of external auditors when circumstances warrant; (b) approve the fees and other significant compensation to be paid to the external auditors; (c) on an annual basis, or more often if circumstances warrant, review and discuss with the external auditors all significant relationships they have with the Company that could impair the external auditors’ independence; (d) review the external auditors’ audit plan to see that it is sufficiently detailed and reflects any significant areas of focus that the Committee deems important; (e) before the financial statements are issued, discuss certain matters required to be communicated to audit committees in accordance with the standards established by Chartered Professional Accountants Canada (CPA

44 | P a g e Canada); (f) consider the external auditors’ judgments about the quality and appropriateness of the Company’s accounting principles as applied in the Company’s financial reporting; (g) resolve any disagreements between management and the external auditors regarding financial reporting; (h) approve in advance all audit services and any non-prohibited non-audit services to be undertaken by the external auditors for the Company; and (i) receive from the external auditor’s timely reports of: (i) any and all critical accounting policies and key audit matters; (ii) any alternative treatments of financial information within generally accepted accounting principles that have been discussed with management, ramifications of the use of such alternative disclosures and treatments and the treatment preferred by the externalauditors, together with rationale; (iii) any internal control issues which they deem significant; and (iv) any other material written communications between the external auditors and management. (j) hold regular private sessions with the external auditors without management present. Legal Compliance On an annual basis, or more frequently as required, the Committee will review with the Company’s legal counsel any legal matters that could have a significant impact on the organization’s financial statements, the Company’s compliance with applicable laws and regulations and inquiries received from regulators or governmental agencies. Complaints The Company has in place whistleblower reporting mechanisms to allow individuals to bring to the attention of the Committee any complaints regarding accounting, internal accounting controls or auditing matters. The Committee will periodically establish and reconfirm procedures for the submission, receipt and treatment of such complaints and concerns. In all cases, the Committee will conduct a prompt, sufficient and fair examination, document the situation and, if appropriate, recommend to the Board appropriate corrective action. To the extent practicable, all complaints will be kept confidential. The Company will not condone any retaliation for a complaint made in good faith. Review and Disclosure The Committee will annually review and reassess this Charter as it deems appropriate and submit any recommend changes to the Board for approval. The Committee will ensure that this Charter is disclosed on the Company’s website and that this Charter or a summary of it which has been approved by the Committee is disclosed in accordance with all applicable securities laws or regulatory requirements. Last presented for review and approval to, and so approved by the Board on March 27, 2025.