Business Description

– Supervision and Regulation.” We are subject to laws regarding the privacy, information security and protection of personal information, and any violation of these laws or unauthorized disclosure of such information could damage our reputation and otherwise adversely affect our operations and financial condition. Our business requires the collection and retention of large volumes of customer data, including personally identifiable information in various information systems that we maintain and in those maintained by third parties with whom we contract to provide data services. We also maintain important internal data, such as personally identifiable information about our employees and 22 information relating to our operations. We are subject to complex and evolving laws and regulations governing the privacy and protection of personal information of individuals (including customers, employees, suppliers and other third parties). For example, our business is subject to the Gramm-Leach-Bliley Act, which, among other things: (1) imposes certain limitations on our ability to share nonpublic personal information about our customers with nonaffiliated third parties; (2) requires us to provide certain disclosures to customers about our information collection, sharing and security practices and to afford customers the right to “opt out” of any information sharing by us with nonaffiliated third parties (with certain exceptions); and (3) requires us to develop, implement and maintain a written comprehensive information security program containing appropriate safeguards based on our size and complexity, the nature and scope of our activities, and the sensitivity of customer information we process, as well as plans for responding to data security breaches. Various state and federal banking regulators and state legislatures have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in the event of a security breach. Ensuring that our collection, use, transfer and storage of personal information complies with all applicable laws and regulations can increase our costs. Furthermore, we may not be able to ensure that all of our clients, suppliers, counterparties and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. If personal, confidential or proprietary information of customers or others were to be mishandled or misused (in situations where, for example, such information was erroneously provided to unauthorized persons, or where such information was intercepted or otherwise compromised by third parties), we could be exposed to litigation or regulatory sanctions under applicable laws and regulations. Concerns about the effectiveness of our measures to safeguard personal information could cause us to lose customers or potential customers for our products and services and thereby reduce our revenues. Accordingly, any failure or perceived failure to comply with applicable privacy or data protection laws and regulations may subject us to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices or in significant liabilities, fines or penalties, and could damage our reputation and otherwise adversely affect our business, consolidated financial condition, results of operations and cash flows. Our FDIC deposit insurance premiums and assessments may increase and thereby adversely affect our financial results. The Bank’s deposits are insured by the FDIC up to legal limits, and, accordingly, the Bank is subject to periodic insurance assessments by the FDIC. The Bank’s regular assessments are determined by its risk classification, which is based on its regulatory capital levels and the level of supervisory concern that it poses. Numerous bank failures during the financial crisis and increases in the statutory deposit insurance limits increased resolution costs to the FDIC and put significant pressure on the Deposit Insurance Fund. The FDIC has authority to increase insurance assessments, and any significant increase in insurance assessments would likely have an adverse effect on us. We face a risk of noncompliance and enforcement action under the Bank Secrecy Act and other anti-money laundering statutes and regulations.…