FISERV INC

Previous wording

We believe that data, and the insights enabled by data, can be used to create or enhance the products and services that we offer to our clients. As a result, we are using, and expect to continue to expand our use of, artificial intelligence and machine learning. However, legislation that would govern the development or use of artificial intelligence is under consideration in the U.S. at the state and local level, as well as abroad. As a result, the ability to use artificial intelligence and machine learning may be constrained by current or future laws, regulatory or self-regulatory requirements.

Current wording

We believe that data, and the insights enabled by data, can be used to create or enhance the products and services that we offer to our clients. As a result, we are using, and expect to continue to expand our use of, artificial intelligence and machine learning in our product development processes, services and operations. Our use of artificial intelligence technologies carries inherent risks, and there can be no assurance that our use of artificial intelligence will enhance our products or services or achieve any improvements in innovation or efficiency. In addition, we could be exposed to liability as a result of any misuse of artificial intelligence and machine learning-technology by our personnel while carrying out company responsibilities. In addition, our competitors and other third parties may incorporate artificial intelligence into their products and offerings more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. If the content, analyses or recommendations that artificial intelligence applications assist in producing are or are alleged to be inaccurate, deficient or biased, our business, financial condition and results of operations may be adversely affected. Furthermore, the integration of third-party artificial intelligence models with our services relies on certain safeguards implemented by the third-party developers of the underlying artificial intelligence models, including those related to the accuracy, bias and other variables of the data, and these safeguards may be insufficient. Legislation and regulations governing the development or use of artificial intelligence have been implemented or are under consideration in the U.S. at the state and local level, as well as internationally. Such legislation and regulations may impose obligations related to our development, offering, and use of artificial intelligence and expose us to increased risk of regulatory enforcement and litigation. As a result, the ability to use artificial intelligence and machine learning may be constrained by current or future laws, regulatory or self-regulatory requirements.

Previous wording

Our operations depend on receiving, storing, processing and transmitting sensitive information pertaining to our business, our employees, our clients and their customers. Under the card network rules, various federal, state and international laws, and client contracts, we are responsible for information provided to us by financial institutions, merchants, ISOs, third-party service providers and others. Preserving the confidentiality of sensitive business and personal information is critical to our business. Any unauthorized access, intrusion, infiltration, network disruption, ransom, denial of service or similar incident could disrupt the integrity, continuity, security and trust of our systems or data, or the systems or data of our clients, partners or vendors. These incidents are often difficult to detect and are constantly evolving. We expect that unauthorized parties will continue to attempt to gain access to our systems or facilities, and those of our clients, partners and vendors, through various means and with increasing sophistication, particularly as cybercriminals attempt to profit from increased online banking, e-commerce and other online activity. These events could create costly litigation, significant financial liability, increased regulatory scrutiny, financial sanctions and a loss of confidence in our ability to serve clients and cause current or potential clients to choose another service provider, all of which could have a material adverse impact on our business. In addition, we have invested and expect to continue to invest significant resources to maintain and enhance our information security and controls or to investigate and mitigate security vulnerabilities. Although we believe that we maintain a robust program of information security and controls and that none of the events that we have encountered to date have materially affected us, we cannot be certain that the security measures and procedures we have in place to detect security incidents and protect sensitive data, will be successful or sufficient to counter all current and emerging risks and threats. The impact of a material event involving our systems and data, or those of our clients, partners or vendors, could have a material adverse effect on our business, results of operations and financial condition.

Current wording

Our operations depend on receiving, storing, processing and transmitting sensitive information pertaining to our business, our employees, our clients and their customers. Under the card network rules, various federal, state and international laws, and client contracts, we are responsible for information provided to us by financial institutions, merchants, ISOs, third-party service providers and others. Preserving the confidentiality of sensitive business and personal information is critical to our business. Any unauthorized access, intrusion, infiltration, network disruption, ransom, denial of service or similar incident could disrupt the integrity, continuity, security and trust of our systems or data, or the systems or data of our clients, partners, vendors or service providers. These incidents are often difficult to detect and are constantly evolving. We expect that unauthorized parties will continue to attempt to gain access to our systems or facilities, and those of our clients, partners, vendors and service providers, through various means and with increasing sophistication, particularly as cybercriminals attempt to profit from increased online banking, e-commerce and other online activity. State-sponsored cybersecurity attacks on the U.S. financial system or U.S. financial service providers could also adversely affect our business. These events could create costly litigation, significant financial liability, increased regulatory scrutiny, financial sanctions and a loss of confidence in our ability to serve clients and cause current or potential clients to choose another service provider, all of which could have a material adverse impact on our business. In addition, we have invested and expect to continue to invest significant resources to maintain and enhance our information security and controls or to investigate and mitigate security vulnerabilities. Although we believe that we maintain a robust program of information security and controls and that none of the events that we have encountered to date have materially affected us, we cannot be certain that the security measures and procedures we have in place to detect security incidents and protect sensitive data, will be successful or sufficient to counter all current and emerging risks and threats. While we maintain cybersecurity insurance, our insurance may be insufficient or may not cover all liabilities incurred by such attacks. The impact of a material event involving our systems and data, or those of our clients, partners, vendors or service providers, could have a material adverse effect on our business, results of operations and financial condition.

Previous wording

•inflation, foreign currency fluctuations, declining economies, social unrest, natural disasters, public health crises, including the occurrence of a contagious disease or illness, and the pace of economic recovery can change consumer spending behaviors, on which a significant portion of our revenues are dependent;

Current wording

•inflation, trade policy and tariffs, taxes, foreign currency fluctuations, declining economies, social unrest, natural disasters, public health crises, including the occurrence of a contagious disease or illness, and the pace of economic recovery can change consumer spending behaviors, on which a significant portion of our revenues are dependent;

Previous wording

The U.S. has imposed tariffs on certain imports from China, including on some of our hardware devices manufactured in China. If the U.S. administration imposes additional tariffs, or if additional tariffs or trade restrictions are implemented by the U.S. or other countries, our hardware devices produced in China could be impacted. Although it is difficult to predict how current or future tariffs on items imported from China or elsewhere will impact our business, the cost of our products manufactured in China and imported into the U.S. or other countries could increase, which in turn could adversely affect the demand for these products and have a material adverse effect on our business and results of operations.

Current wording

The U.S. has imposed tariffs, and may impose new or increased tariffs, on certain imports from other countries, which may lead to retaliatory tariffs imposed by other governments. If the U.S. administration or other countries impose new or increased tariffs, trade restrictions or restrictions on the cross-border flow of data, our manufacturing of hardware devices, supply of raw materials and access to certain markets, could be impacted. Although it is difficult to predict how current or future tariffs on items imported from other countries will impact our business, the cost of our products manufactured in other countries and imported into the U.S. or elsewhere could increase, which could adversely affect the demand for these products and have a material adverse effect on our business and results of operations.

Previous wording

Our businesses are subject to state, federal, and foreign laws and regulations, including payment, cybersecurity, consumer protection, money transmission, data privacy, anti-money laundering, economic and trade sanctions, payment institution, electronic money licensing, credit reporting and debt collection laws and regulations. Our clients are also subject to numerous laws and regulations applicable to banks, financial institutions and card issuers in the U.S. and abroad, and, consequently, we are at times affected by these federal, state, local and foreign laws and regulations. These laws and regulations are subject to change, and new laws, regulations and interpretations are regularly adopted.

Current wording

Our businesses are subject to state, federal, and foreign laws and regulations, including payment, cybersecurity, consumer protection, money transmission, data privacy, anti-money laundering, anti-bribery, economic and trade sanctions, payment institution, electronic money licensing, credit reporting and debt collection laws and regulations. Our clients are also subject to numerous laws and regulations applicable to banks, financial institutions and card issuers in the U.S. and abroad, and, consequently, we are at times affected by these federal, state, local and foreign laws and regulations. These laws and regulations are subject to change, and new laws, regulations and interpretations are regularly adopted.

Previous wording

Cybersecurity and data privacy risks have received heightened legislative and regulatory attention. In Europe, the General Data Protection Regulation (“GDPR”) extends the scope of the E.U. data protection law to all companies processing data of individuals within the E.U., regardless of the company’s location, subject to certain limitations. The law requires companies to meet stringent requirements regarding the handling of personal data. E.U. data protection law continuously develops and requires significant changes to our policies and procedures. We are also subject to U.K. GDPR following the U.K.’s exit from the E.U. Single Market and Customs Union. Our efforts to comply with E.U., U.K. and other privacy and data protection laws around the world that apply to our businesses could involve substantial expenses, divert resources from other initiatives and projects and limit the services we are able to offer. There is also increased focus on data localization requirements around the world in countries such as the United Arab Emirates, China and India which could impact our business model with respect to our storage and transfer of personal data.

Current wording

Cybersecurity and data privacy risks have received heightened legislative and regulatory attention. In Europe and the U.K., their respective General Data Protection Regulations (collectively, “GDPR”) extends the scope of their data protection laws to all companies processing data of individuals within the E.U. and the U.K., regardless of the company’s location, subject to certain limitations. The law requires companies to meet stringent requirements regarding the handling of personal data. E.U. and U.K. data protection law continuously develops and requires significant changes to our policies and procedures. GDPR imposes strict rules on the transfer of personal data out of the E.U. or U.K. to a “third country,” including the United States, unless particular transfer mechanisms are implemented. The mechanisms that we and many other companies rely upon for such data transfers are the subject of legal challenge, regulatory interpretation, and judicial decisions. In the E.U., U.K. and other markets, potential new rules and restrictions on the flow of data across borders could increase the cost and complexity of doing business in those regions. Additionally, we are subject to the E.U. Regulation known as the Digital Operational Resilience Act (“DORA”). DORA is intended to strengthen the information technology systems of covered financial entities to mitigate risks associated with operational disruptions. Our efforts to comply with E.U., U.K. and other cybersecurity, privacy and data protection laws around the world that apply to our businesses could involve substantial expenses, divert resources from other initiatives and projects and limit the services we are able to offer. There is also increased focus on data localization requirements around the world in countries such as the United Arab Emirates, China and India which could impact our business model with respect to our storage and transfer of personal data.

Previous wording

In addition, U.S. regulators, including the U.S. Federal Banking Agencies and the U.S. Federal Trade Commission have adopted or proposed enhanced cyber and privacy security standards that apply to us and our financial institution clients and address cyber risk governance and management, management of internal and external dependencies, and incident response, cyber resilience and situational awareness. Legislation and regulations on cybersecurity, data privacy and data localization may compel us to enhance or modify our systems, invest in new systems or alter our business practices or our policies on data governance and privacy. If any of these outcomes were to occur, our operational costs could increase significantly. Failure to comply with applicable laws in this area could also result in significant fines, penalties and reputational damage.

Current wording

In addition, U.S. regulators, including the U.S. Federal Banking Agencies and the U.S. Federal Trade Commission (“FTC”) have adopted or proposed enhanced cyber and privacy security standards that apply to us and our financial institution clients and address privacy requirements for processing data of individuals, cyber risk governance and management, management of internal and external dependencies, and incident response, cyber resilience and situational awareness. The FTC and many state attorneys general are also interpreting federal and state consumer protection laws as imposing standards for the collection, use, dissemination, and security of data. Additionally, over a third of U.S. states have proposed or enacted comprehensive consumer privacy laws (such as the California Consumer Privacy Act) that have taken effect or will take effect in coming years. We cannot fully predict the impact of recently proposed or enacted laws or regulations on our business or operations, but compliance may require us to modify our data processing practices and policies incurring costs and expense. Legislation and regulations on cybersecurity, data privacy and data localization may compel us to enhance or modify our systems, invest in new systems or alter our business practices or our policies on how we process personal information, data governance and privacy. If any of these outcomes were to occur, our operational costs could increase significantly. Failure to comply with applicable laws in this area could also result in significant fines, penalties and reputational damage.

Previous wording

Through our merchant alliances, we hold an ownership interest in several competing merchant acquiring businesses while serving as an electronic processor for those businesses. In order to satisfy state and federal antitrust requirements, we actively maintain an antitrust compliance program. Notwithstanding our compliance program, it is possible that perceived or actual violations of state or federal antitrust requirements could give rise to regulatory enforcement investigations or actions. Regulatory scrutiny of, or regulatory enforcement action in connection with, compliance with state and federal antitrust requirements could have a material adverse effect on our reputation and business.

Current wording

Through our merchant alliances, we hold an ownership interest in and have commercial relationships with competing merchant acquiring businesses while serving as an electronic processor for those businesses. In order to satisfy state and federal antitrust requirements, we actively maintain an antitrust compliance program. Notwithstanding our compliance program, it is possible that perceived or actual violations of state or federal antitrust requirements could give rise to regulatory enforcement investigations or actions. Regulatory scrutiny of, or regulatory enforcement action in connection with, compliance with state and federal antitrust requirements could have a material adverse effect on our reputation and business.

Previous wording

Our ability to compete depends upon proprietary systems and technology. We actively seek to protect our intellectual property and proprietary rights. Nevertheless, unauthorized parties may attempt to copy aspects of our services or to obtain and use information that we regard as proprietary. In addition, use of AI tools may result in the release of confidential or proprietary information which could limit our ability to protect, or prevent us from protecting, our intellectual property rights. The steps we have taken may not prevent misappropriation of technology. Agreements entered into for that purpose may not be enforceable or provide us with an adequate remedy. It is also possible that others will independently develop the same or similar technology. Further, we use open source software in connection with our solutions. Companies that incorporate open source software into their solutions have, from time to time, faced claims challenging the ownership of solutions developed using open source software. As a result, we could be subject to suits by parties claiming ownership of what we believe to be open source software. Effective patent, trademark, service mark, copyright and trade secret protection may not be available in every country in which our applications and services are made available. The laws of certain non-U.S. countries where we do business or contemplate doing business in the future may not recognize intellectual property rights or protect them to the same extent as do the laws of the U.S. Misappropriation of our intellectual property or potential litigation concerning such matters could have a material adverse effect on our business, results of operations and financial condition.

Current wording

Our ability to compete depends upon proprietary systems and technology. We actively seek to protect our intellectual property and proprietary rights. Nevertheless, unauthorized parties may attempt to copy aspects of our services or to obtain and use information that we regard as proprietary. In addition, use of artificial intelligence tools may result in the release of confidential or proprietary information which could limit our ability to protect, or prevent us from protecting, our intellectual property rights. The steps we have taken may not prevent misappropriation of technology. Agreements entered into for that purpose may not be enforceable or provide us with an adequate remedy. It is also possible that others will independently develop the same or similar technology. Further, we use open source software in connection with our solutions. Companies that incorporate open source software into their solutions have, from time to time, faced claims challenging the ownership of solutions developed using open source software. As a result, we could be subject to suits by parties claiming ownership of what we believe to be open source software. Some of our solutions integrate licensed software, including open source software, and any failure to comply with the terms of one or more of the licenses could adversely affect our business. Effective patent, trademark, service mark, copyright and trade secret protection may not be available in every country in which our applications and services are made available. The laws of certain non-U.S. countries where we do business or contemplate doing business in the future may not recognize intellectual property rights or protect them to the same extent as do the laws of the U.S. Misappropriation of our intellectual property or potential litigation concerning such matters could have a material adverse effect on our business, the results of which could affect our operations and financial condition.

Previous wording

Our balance sheet includes goodwill and intangible assets that represent 53% of our total assets at December 31, 2023. These assets consist primarily of goodwill and identified intangible assets associated with our acquisitions. On at least an annual basis, we assess whether there have been impairments in the carrying value of goodwill. In addition, we review intangible assets for impairment whenever events or changes in circumstances indicate the carrying amount of the asset may not be recoverable. If the carrying value of the asset is determined to be impaired, then it is written down to fair value by a non-cash charge to operating earnings. An impairment of a significant portion of goodwill or intangible assets could have a material negative effect on our results of operations.

Current wording

Our balance sheet includes goodwill and intangible assets that represent 60% of our total assets at December 31, 2024. These assets consist primarily of goodwill and identified intangible assets associated with our acquisitions. On at least an annual basis, we assess whether there have been impairments in the carrying value of goodwill. In addition, we review intangible assets for impairment whenever events or changes in circumstances indicate the carrying amount of the asset may not be recoverable. If the carrying value of the asset is determined to be impaired, then it is written down to fair value by a non-cash charge to operating earnings. An impairment of a significant portion of goodwill or intangible assets could have a material negative effect on our results of operations.

Previous wording

At December 31, 2023, we had approximately $23.1 billion of debt. We and our subsidiaries may incur additional indebtedness in the future. Our indebtedness could: decrease our ability to obtain additional financing for working capital, capital expenditures, general corporate or other purposes; limit our flexibility to make acquisitions; increase our cash requirements to support the payment of interest; limit our flexibility in planning for, or reacting to, changes in our business and our industry; and increase our vulnerability to adverse changes in general economic and industry conditions. Our ability to make payments of principal and interest on our indebtedness depends upon our future performance, which will be subject to general economic conditions and financial, business and other factors affecting our consolidated operations, many of which are beyond our control. In addition, if certain of our outstanding senior notes or commercial paper notes are downgraded to below investment grade, we may incur additional interest expense. If we are unable to generate sufficient cash flow from operations in the future to service our debt and meet our other cash requirements, including due to further deterioration in economic and market conditions, we may be required, among other things: to seek additional financing in the debt or equity markets; to refinance or restructure all or a portion of our indebtedness; or to reduce or delay planned capital or operating expenditures. Such measures might not be sufficient to enable us to service our debt and meet our other cash requirements. In addition, any such financing, refinancing or sale of assets might not be available at all or on economically favorable terms.

Current wording

At December 31, 2024, we had approximately $25 billion of debt. We and our subsidiaries may incur additional indebtedness in the future. Our indebtedness could: decrease our ability to obtain additional financing for working capital, capital expenditures, general corporate or other purposes; limit our flexibility to make acquisitions; increase our cash requirements to support the payment of interest; limit our flexibility in planning for, or reacting to, changes in our business and our industry; and increase our vulnerability to adverse changes in general economic and industry conditions. Our ability to make payments of principal and interest on our indebtedness depends upon our future performance, which will be subject to general economic conditions and financial, business and other factors affecting our consolidated operations, many of which are beyond our control. In addition, if certain of our outstanding senior notes or commercial paper notes are downgraded to below investment grade, we may incur additional interest expense. If we are unable to generate sufficient cash flow from operations in the future to service our debt and meet our other cash requirements, including due to deterioration in economic and market conditions, we may be required, among other things: to seek additional financing in the debt or equity markets; to refinance or restructure all or a portion of our indebtedness; or to reduce or delay planned capital or operating expenditures. Such measures might not be sufficient to enable us to service our debt and meet our other cash requirements. In addition, any such financing, refinancing or sale of assets might not be available at all or on economically favorable terms.

Previous wording

Certain of our borrowings, including borrowings under our revolving credit facility, term loan, foreign lines of credit and commercial paper programs, are at variable rates of interest. Beginning in 2022, and continuing through mid-2023, interest rates increased significantly and interest rates may continue to increase or remain at higher than recent historical levels in the future. An increase in interest rates would have a negative impact on our results of operations by causing an increase in interest expense. At December 31, 2023, we had approximately $2.3 billion in variable rate debt, which includes $516 million drawn on our revolving credit facility and foreign lines of credit, and an aggregate amount of $1.7 billion outstanding under our U.S. dollar and Euro commercial paper programs. Based on outstanding debt balances and interest rates at December 31, 2023, a 1% increase in variable interest rates would result in an increase to annual interest expense of $23 million.

Current wording

Certain of our borrowings, including borrowings under our revolving credit facility, foreign lines of credit and commercial paper programs, are at variable rates of interest. Beginning in 2022, and continuing through mid-2023, interest rates increased significantly and interest rates may continue to increase or remain at higher than recent historical levels in the future. An increase in interest rates would have a negative impact on our results of operations by causing an increase in interest expense. At December 31, 2024, we had approximately $2.4 billion in variable rate debt, which includes $899 million drawn on our revolving credit facility and foreign lines of credit, and an aggregate amount of $1.5 billion outstanding under our U.S. dollar and Euro commercial paper programs. Based on outstanding debt balances and interest rates at December 31, 2024, a 1% increase in variable interest rates would result in an increase to annual interest expense of $24 million.