Johnson Controls International plc

Current report

On August 7, 2025, the Company entered into accelerated share repurchase transactions (the “ASR Transactions”) to repurchase an aggregate of $5.0 billion (the “Repurchase Price”) of the Company’s ordinary shares (the “Shares”). The ASR Transactions are being completed under the Company’s current share repurchase authorization. Under the terms of the ASR Transactions, on August 11, 2025, the Company paid the Repurchase Price to the Counterparties in exchange for an initial delivery of approximately 43,140,640 Shares. The total number of Shares to be repurchased under the ASR Transactions will be based on volume-weighted average prices of the Shares during the term of the ASR Transactions, less a discount and subject to customary adjustments. The ASR Transactions are scheduled to terminate in the second quarter of fiscal 2026.

Previous report

Data privacy, identity protection and information security compliance may require significant resources and presents certain risks.

Previous report

We collect, store, have access to and otherwise process certain confidential or sensitive data, including proprietary business information, customer data, personal data or other information that is subject to privacy and security laws, regulations and/or customer-imposed controls. Despite our efforts to protect such data, our business, data and our products have been and will in the future be vulnerable to security incidents, theft, misplaced or lost data, programming errors, or errors that could potentially lead to the compromise or further compromise of such data, improper use of our products, systems, software solutions or networks, unauthorized access, use, disclosure, modification or destruction of information, defective products, production downtimes and operational disruptions. During September 2023, we became aware of a cybersecurity event consisting of unauthorized access, data exfiltration and deployment of ransomware to a portion of our internal IT infrastructure. The Company determined that certain data, primarily employee, job applicant and personal information and other related data, was impacted by the incident. The Company has taken appropriate actions to notify individuals and regulatory authorities.

Previous report

The actual or perceived risk of theft, loss, fraudulent use or misuse of customer, employee or other data as a result of the foregoing or any other cybersecurity incident, as well as non-compliance with applicable industry standards or our contractual or other legal obligations or privacy and information security policies regarding such data, could result in litigation and/or regulatory activity and associated fines, damages, costs, awards, or settlements. In addition, we may be required to make certain third-party notifications to individuals and regulators following the completion of our analysis of the data impacted by the cybersecurity incident.

Previous report

We could face similar consequences in the future if we, our employees, our suppliers, channel partners, customers or other third parties experience the actual or perceived risk of theft, loss, fraudulent use or misuse of data, including as a result of employee error or malfeasance, non-compliance with required or expected security practices, or as a result of the imaging, software, security and other products we incorporate into our products. Such an event could lead customers to select the products and services of our competitors. Both the September 2023 cybersecurity incident and any future incidents could harm our reputation, cause unfavorable publicity or otherwise adversely affect certain existing and potential customers’ perception of the security and reliability of our services as well as our credibility and reputation, which could result in lost sales.

Previous report

We operate in an environment in which there are different and potentially conflicting data privacy laws in effect in the various U.S. states and foreign jurisdictions in which we operate and we must understand and comply with each law and standard in each of these jurisdictions while ensuring the data is secured. For example, proposed regulations restricting the use of biometric security technology could impact the products and solutions offered by our security business. Similarly the Executive Order 14117, and its implementing regulations Preventing Access to Americans’ Bulk Sensitive Personal Data and US Government Related Data By Countries of Concern, may limit our ability to share information with China and other designated countries. Government enforcement actions can be costly and interrupt the regular operation of our business, and violations of data privacy laws can result in fines, reputational damage and civil lawsuits, any of which may adversely affect our business, reputation and financial statements.

Previous report

Some of our contracts do not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. While we maintain general liability insurance coverage and coverage for errors or omissions, such coverage might not be adequate or otherwise protect us from liabilities or damages with respect to claims alleging compromises, including relevant to compromises of our systems or data, that such coverage will continue to be available to us on acceptable terms or at all, or that such coverage will pay future claims including claims and other costs related to the September 2023 cybersecurity incident. The successful assertion of one or more large claims against us that exceeds our available insurance coverage, or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements), could have an adverse effect on our business.

Previous report

Changes in U.S. or foreign trade policies and other factors beyond our control may adversely impact our business and operating results.

Previous report

Geopolitical tensions and trade disputes can disrupt supply chains and increase the cost of our products. This could cause our products to be more expensive for customers, which could reduce the demand for, or attractiveness of, such products. In addition, a geopolitical conflict in a region where we operate could disrupt our ability to conduct business operations in that region. Countries also could adopt restrictive trade measures, such as tariffs, laws and regulations concerning investments and limitations on foreign ownership of businesses, taxation, foreign exchange controls, capital controls, employment regulations and the repatriation of earnings and controls on imports or exports of goods, technology, or data, any of which could adversely affect our operations and supply chain and limit our ability to offer our products and services as intended. Changes in laws or policies governing the terms of foreign trade, and in particular increased trade restrictions, tariffs or taxes on imports from countries where we manufacture products or from where we import products or raw materials (either directly or through our suppliers) could have an impact on our competitive position, business operations and financial results. For example, the U.S., China and other countries continue to implement restrictive trade actions, including tariffs, export controls, sanctions, legislation favoring domestic investment and other actions impacting the import and export of goods, foreign investment and foreign operations in jurisdictions in which we operate.

Previous report

Recently, the United States has announced tariffs and reciprocal tariffs on a wide range of products manufactured or produced worldwide, including Canada, China, the European Union, Japan and Mexico, among others. Several countries have similarly announced reciprocal or other tariffs impacting products manufactured or produced in the United States. The United States has and may in the future pause, reimpose or increase tariffs, and countries subject to such tariffs have and in the future may impose reciprocal tariffs or other restrictive trade measures in response to the imposition of tariffs by the United States. We are actively monitoring and evaluating the development and potential impacts of tariffs on our supply chain and results of operations. We maintain operations worldwide, including the jurisdictions impacted by the recently announced and contemplated tariffs. If the actual and potential tariffs and reciprocal tariffs are implemented as currently proposed, we expect that such actions could negatively impact our revenue growth and margins in future periods through increased costs, decreased demand and other adverse economic impacts. We could also experience increased material cost inflation and component shortages, as well as disruptions and delays in our supply chain. The net effect of these actions will depend on our ability to successfully mitigate and offset their impact, which may not be effective.

Previous report

Trade restrictions could be adopted with little to no advanced notice, and we may not be able to effectively mitigate the adverse impacts from such measures. Political uncertainty surrounding trade or other international disputes also could have a negative impact on customer confidence and willingness to invest capital, which could impair our future growth. Any of these events could increase the cost of our products, create disruptions to our supply chain and impair our ability to effectively operate and compete in the countries where we do business.