QUEST DIAGNOSTICS INC
For the period ended Dec 31, 2025. Filed Feb 26, 2026.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2025 · Filed Feb 26, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2024-12-31; filed 2025-02-20.
0001022079-25-000044
Item 1A. Risk FactorsCautionary Factors That May Affect Future ResultsCurrent report: 10-K
Period ended 2025-12-31; filed 2026-02-26.
0001022079-26-000015
Item 1A. Risk FactorsCautionary Factors That May Affect Future ResultsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 161 previous paragraphs and 162 current paragraphs.
125 unchanged; 32 reworded; 2 added; 3 removed; 1 previous and 3 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (2)
Current report
•the laws and regulations administered by foreign governments where we conduct clinical trials and operate outside of the United States;
Current report
In May 2024, the FDA announced it was phasing out its general enforcement discretion approach so that LDTs manufactured by a laboratory would generally fall under the same enforcement approach as medical devices. However, in March 2025, a U.S. District Court set aside and vacated the FDA’s LDT rule and the FDA did not appeal the court’s decision. Accordingly, the FDA does not have the authority to regulate LDTs. However, it is the purvey of Congress to enact new laws or amendments to CLIA or the Food, Drug and Cosmetic Act. If this were to occur, any new legislation could have a significant impact on us and the clinical laboratory testing industry. This new legislation could include the regulation of LDTs in a manner that is different than the prior LDT rule, while creating new avenues of opportunity and competition in clinical laboratory testing. New competitors may enter the industry, and competition may come in new forms.
Removed paragraphs (3)
Previous report
From time to time, the federal government has considered whether competitive bidding could be used to provide clinical testing services for Medicare beneficiaries while maintaining quality and access to care. Congress also periodically considers cost-saving initiatives, which have included coinsurance for clinical testing services, co-payments for clinical testing and further laboratory physician fee schedule reductions.
Previous report
The FDA's regulation of clinical laboratory testing is expected to impact industry practices and participants, new competitors may enter the industry, and competition may come in new forms. As of May 6, 2024, the FDA announced it was phasing out its general enforcement discretion approach so that LDTs manufactured by a laboratory will generally fall under the same enforcement approach as medical devices. A number of advanced tests we develop internally are offered as LDTs. Pursuant to the FDA’s decision to remove enforcement discretion with regard to most LDTs performed by high complexity CLIA-certified laboratories like ours, all new and significantly modified previously offered laboratory tests that do not benefit from continued enforcement discretion will have to comply with the FDCA over a four-year, five-stage process. Compliance with the FDCA includes, among other things, new quality system regulations and premarket authorization. One major area of the continued FDA enforcement discretion will apply to many tests that were offered for clinical use prior to May 6, 2024 and that do not afterwards undergo certain material modifications. The removal of enforcement discretion for LDTs could result in a revitalization and passage of legislation or other Congressional action. The current FDA policy to remove enforcement discretion and/or new legislation is expected to have a significant impact on the clinical laboratory testing industry, including regulating LDTs in new ways, while creating new avenues of opportunity and competition regarding clinical laboratory testing. New competitors may enter the industry, and competition may come in new forms.
Previous report
(dd) Any future public health emergency or pandemic.
Reworded paragraphs (32)
Previous wording
The diagnostic information services industry also is faced with changing technology and new product introductions. Competitors may compete using advanced technology, including technology that enables more convenient or cost-effective testing (e.g., technology enabled by AI). Digital pathology is an example of this. Competitors also may compete on the basis of new service offerings. Competitors also may offer new testing services that can be performed outside of a commercial clinical laboratory, such as point-of-care testing that can be administered by physicians in their offices, complex testing that can be performed by hospitals in their own laboratories, and home testing that can be carried out without requiring the services of outside providers.
Current wording
The diagnostic information services industry also is faced with changing technology and new product introductions. Competitors may compete using advanced technology, including technology that enables more convenient or cost-effective testing (e.g., technology enabled by AI). Digital pathology is an example of this. Competitors also may compete on the basis of new service offerings. Competitors also may offer new testing services that can be performed outside of a commercial clinical laboratory, such as point-of-care testing that can be administered by physicians in their offices, complex testing that can be performed by hospitals in their own laboratories, and home testing that can be carried out without requiring the services of providers like us.
Previous wording
Pursuant to PAMA, reimbursement rates for many clinical laboratory tests provided under Medicare were reduced during 2018 - 2020. Unfortunately, as a result of a flawed implementation of PAMA, the data collected did not accurately represent the laboratory market as required under PAMA. Independent laboratories were overrepresented, and hospitals and physician office laboratories were underrepresented, making the first round of PAMA cuts too extreme. The three years of cuts exceeded the original 10-year savings projections. PAMA calls for further revision of the Medicare CLFS for years after 2020, based on future surveys of market rates. Congress has delayed cuts five times (2021 - 2025) and delayed 2019 reporting six times (2020 - 2025). Reimbursement rate reduction from 2026-28 is capped by PAMA at 15% annually. Congress reintroduced federal legislation in 2023 (the Saving Access to Laboratory Services Act), which would reform PAMA and create a true market-based CLFS.
Current wording
Pursuant to PAMA, reimbursement rates for many clinical laboratory tests provided under Medicare were reduced during 2018 - 2020. Unfortunately, by relying on laboratory reported data alone in 2017, CMS did not receive comprehensive and representative data needed to set Medicare rates that reflected the commercial market, as required under PAMA. Independent laboratories were overrepresented, and hospitals and physician office laboratories were underrepresented, making the first round of PAMA cuts excessive. The first three years of cuts greatly exceeded the original 10-year savings projections. Starting in 2020, Congress has repeatedly acted to delay PAMA implementation by delaying the next round of data reporting (2020-2026) and Medicare cuts (2021-2026). However, the structural flaws of PAMA still need to be addressed to mitigate future excessive cuts. Congress introduced legislation in 2025, the Results Act, which would reform PAMA and create a true market-based CLFS.
Previous wording
There is uncertainty surrounding potential changes to the regulatory environment in the United States, particularly as it relates to healthcare regulation and related programs, following the outcome of the U.S. Presidential election in November 2024, which may have a material adverse effect on our business. For example, the incoming administration announced a planned advisory commission to reform federal government processes and reduce expenditures. Pressures on and uncertainty surrounding the U.S. federal government’s budget, and potential changes in budgetary priorities, could adversely affect the funding for individual programs, including Medicare and other government programs upon which our business depends. Additionally, changes in legislation and regulations (including those related to taxation, trade and importation), economic and monetary policies, geopolitical matters, among other potential impacts, could adversely impact the global economy and our operating results. The potential impact of new policies that may be implemented as a result of the new administration is currently uncertain.
Current wording
The political environment impacting healthcare regulation in the United States continues to be uncertain. The services that we offer and our result of operations could be adversely affected by legislative, enforcement, regulatory and public policy changes at the federal or state level, many of which we cannot anticipate at this time. There continues to be pressures on and uncertainty surrounding the U.S. federal government’s budget, and potential changes in budgetary priorities, which could adversely affect the funding for individual programs, including Medicare and other government programs upon which our business depends. Additionally, changes in legislation and regulations (including those related to taxation, trade and importation), economic and monetary policies, geopolitical matters, among other potential impacts, could adversely impact the global economy and our operating results. The potential impact of any new policies or changes to existing policies that have been or may be implemented is currently uncertain.
Previous wording
These laws and regulations may be interpreted or applied by a prosecutorial, regulatory or judicial authority in a manner that could require us to make changes in our operations, including our pricing and/or billing practices. We may not be able to maintain, renew or secure required permits, licenses or any other regulatory approvals needed to operate our business or commercialize our services. If we fail to comply with applicable laws and regulations, or if we fail to maintain, renew or obtain necessary permits, licenses and approvals, we could suffer civil and criminal penalties, fines, exclusion from participation in governmental healthcare programs and the loss of various licenses, certificates and authorizations necessary to operate our business, as well as incur additional liabilities from third-party claims. If any of the foregoing were to occur, our reputation could be damaged and important business relationships with third parties could be adversely affected.
Current wording
These laws and regulations may be interpreted or applied by a governmental, prosecutorial, regulatory or judicial authority in a manner that could require us to make changes in our operations, including our pricing and/or billing practices. We may not be able to maintain, renew or secure required permits, licenses or any other regulatory approvals needed to operate our business or commercialize our services. If we fail to comply with applicable laws and regulations, or if we fail to comply with settlement obligations, or if we fail to maintain, renew or obtain necessary permits, licenses and approvals, we could suffer civil and criminal penalties, fines, exclusion from participation in governmental healthcare programs and the loss of various licenses, certificates and authorizations necessary to operate our business, as well as incur additional liabilities from third-party claims. If any of the foregoing were to occur, our reputation could be damaged and important business relationships with third parties could be adversely affected.
Previous wording
The FDA has regulatory responsibility over, among other areas, instruments, software, test systems, collection kits, reagents and other devices used by clinical laboratories to perform diagnostic testing in the United States. We offer companion diagnostic testing services to pharmaceutical companies that are regulated by the FDA. A number of tests we develop internally are offered as LDTs.
Current wording
The FDA has regulatory responsibility over, among other areas, instruments, software, test systems, collection kits, reagents and other devices used by clinical laboratories to perform diagnostic testing in the United States. The FDA also regulates drugs-of-abuse testing for employers and insurers, testing for blood bank purposes and testing of donors of human cells for purposes such as in vitro fertilization. We offer companion and complementary diagnostic tests to pharmaceutical companies that are regulated by the FDA.
Previous wording
Our international operations increase our exposure to risks inherent in doing business in non-U.S. markets, which may vary by market and include: intellectual property legal protections and remedies; weak legal systems which may, among other things, affect our ability to enforce contractual rights; trade regulations and procedures and actions affecting approval, production, pricing, supply, reimbursement and marketing of products and services; existing and emerging data privacy regulations affecting the processing and transfer of personal data; new regulations relating to the use of AI; and challenges based on differing languages, cultures and unfamiliar practices. International operations also require us to devote management resources to implement our controls and systems in new markets, and to comply with the U.S. Foreign Corrupt Practices Act and similar anti-corruption laws in non-U.S. jurisdictions.
Current wording
Our international operations (including in Canada) increase our exposure to risks inherent in doing business in non-U.S. markets, which may vary by market and include: intellectual property legal protections and remedies; weak legal systems which may, among other things, affect our ability to enforce contractual rights; trade regulations and procedures and actions affecting approval, production, pricing, supply, reimbursement and marketing of products and services; existing and emerging data privacy regulations affecting the processing and transfer of personal data; new regulations relating to the use of AI; and challenges based on differing languages, cultures and unfamiliar practices. Tariffs, sanctions and other barriers imposed or threatened by the U.S. government, and the responses to those actions from other countries, may result in adverse impacts to the global economic environment, including the global financial and trading markets, which could have a negative impact on our results of operations and financial condition. These actions could also negatively impact our supply chain costs or availability of products we need to operate our business. The ongoing uncertainty with the current state of global trade policy magnifies these risks.
Previous wording
As of December 31, 2024, we had approximately $6.2 billion of debt outstanding. Other than credit facilities in the normal course of business, we do not have any off-balance sheet financing arrangements in place or available. Our debt agreements contain various restrictive covenants. These restrictions could limit our ability to use operating cash flow in other areas of our business because we must use a portion of these funds to make principal and interest payments on our debt. We have obtained ratings on our public debt from Standard and Poor's, Moody's Investor Services and Fitch Ratings. There can be no assurance that any rating so assigned will remain for any given period of time or that a rating will not be lowered or withdrawn entirely by a rating agency if in that rating agency's judgment future circumstances relating to the basis of the rating, such as adverse changes in our Company or our industry, so warrant. If such ratings are lowered, our borrowing costs could increase. Changes in our credit ratings, however, do not require repayment or acceleration of any of our debt.
Current wording
As of December 31, 2025, we had approximately $5.7 billion of debt outstanding. Other than credit facilities in the normal course of business, we do not have any off-balance sheet financing arrangements in place or available. Our debt agreements contain various restrictive covenants. These restrictions could limit our ability to use operating cash flow in other areas of our business because we must use a portion of these funds to make principal and interest payments on our debt. We have obtained ratings on our public debt from Standard and Poor's, Moody's Investor Services and Fitch Ratings. There can be no assurance that any rating so assigned will remain for any given period of time or that a rating will not be lowered or withdrawn entirely by a rating agency if in that rating agency's judgment future circumstances relating to the basis of the rating, such as adverse changes in our Company or our industry, so warrant. If such ratings are lowered, our borrowing costs could increase. Changes in our credit ratings, however, do not require repayment or acceleration of any of our debt.
Previous wording
The diagnostic information services industry is facing rapidly changing technology and innovations in product offerings, including technology that enables more convenient, accessible and cost-effective testing. For example, digital pathology is a technology that we are currently deploying that may change the practice of pathology and our role in it. Competitors also may offer new testing services that can be performed outside of a commercial clinical laboratory, such as point-of-care testing that can be administered by physicians in their offices, complex testing that can be performed by hospitals in their own laboratories, and home testing that can be carried out without requiring the services of outside providers. Further, diagnostic tests approved or cleared by the FDA for home use are automatically deemed to be “waived” tests under CLIA and may be performed by consumers in their homes; test kit manufacturers could seek to increase sales to patients of such test kits. Additionally, some traditional customers for anatomic pathology services, including specialty physicians that generate biopsies through surgical procedures, such as dermatologists, gastroenterologists, urologists and oncologists, are consolidating, have added in-office histology labs or have retained pathologists to read cases on site. Hospitals also are internalizing clinical laboratory testing, including some non-routine and advanced testing. These technological advances (and the ones yet to come) and the continued internalization of testing services may lead to the need for less frequent testing and/or less use of the testing services we offer.
Current wording
The diagnostic information services industry is facing rapidly changing technology and innovations in product offerings, including technology that enables more convenient, accessible and cost-effective testing. For example, digital pathology is a technology that we are currently deploying that may change the practice of pathology and our role in it. Competitors also may offer new testing services that can be performed outside of a commercial clinical laboratory, such as point-of-care testing that can be administered by physicians in their offices, complex testing that can be performed by hospitals in their own laboratories, and home testing that can be carried out without requiring the services of providers like us. Further, diagnostic tests approved or cleared by the FDA for home use are automatically deemed to be “waived” tests under CLIA and may be performed by consumers in their homes; test kit manufacturers could seek to increase sales to patients of such test kits. Additionally, some traditional customers for anatomic pathology services, including specialty physicians that generate biopsies through surgical procedures, such as dermatologists, gastroenterologists, urologists and oncologists, are consolidating, have added in-office histology labs or have retained pathologists to read cases on site. Hospitals also are internalizing clinical laboratory testing, including some non-routine and advanced testing. These technological advances (and the ones yet to come) and the continued internalization of testing services may lead to the need for less frequent testing and/or less use of the testing services we offer.
Previous wording
We have been and expect to continue to use AI technology in our testing services, and we anticipate it will become increasingly important to us over time. This technology, including generative AI, which is in its early stages of commercial implementation, presents a number of risks inherent in its use, including risks related to cybersecurity, privacy and data security and use practices. Additionally, AI technology can create accuracy issues and other outcomes that could harm our customers and negatively impact our reputation and our business. Further, our competitors may develop new testing services and other products relying on AI more rapidly or more successfully than us, which could hinder our ability to compete effectively and adversely affect our results of operations. Using AI successfully will require significant resources, including having the technical expertise required to develop, test and maintain AI-based testing services. In addition, we anticipate that there will continue to be new regulatory requirements concerning the use of AI, which may aim to regulate, limit, or block the use of AI in our testing and other services or otherwise impose other restrictions that may hinder their usability or effectiveness.
Current wording
We have been and expect to continue to use AI technology in our testing services, and we anticipate it will become increasingly important to us over time. This technology, including generative AI, which is in its early stages of broader commercial implementation, presents a number of risks inherent in its use, including risks related to cybersecurity, privacy and data security and use practices and our oversight of how we use AI. Additionally, AI technology can create accuracy issues and other outcomes that could harm our customers and negatively impact our reputation and our business. Further, our competitors may develop new testing services and other products relying on AI more rapidly or more successfully than us, which could hinder our ability to compete effectively and adversely affect our results of operations. Using AI successfully will require significant resources, including having the technical expertise required to develop, test and maintain AI-based testing services and continually developing the appropriate governance and oversight of our use of AI. In addition, we anticipate that there will continue to be new regulatory requirements concerning the use of AI, which may aim to regulate, limit, or block the use of AI in our testing and other services or otherwise impose other restrictions that may hinder their usability or effectiveness.
Previous wording
IT systems are used extensively in virtually all aspects of our business, including clinical testing, test reporting, billing, customer service, logistics and management of medical data. Our success depends, in part, on the continued and uninterrupted performance of our IT systems. A failure or delay in our IT systems could impede our ability to serve our customers and patients and protect their confidential data. Despite redundancy and backup measures and precautions that we have implemented, our IT systems may be vulnerable to damage, disruptions and shutdown from a variety of sources, including the age of the technology, telecommunications or network failures, system conversion, standardization or modernization initiatives, human acts and natural disasters. For example, in February 2025, we committed to a multi-year project ("Project Nova") to modernize our "Order to Cash" business processes including related information technology infrastructure and underlying enabling technologies. These issues can also arise as a result of failures by third parties with whom we do business, including manufacturers and developers of the hardware and software we use, and over which we have limited control. Any disruption or failure of our IT systems, including in connection with Project Nova, could have a material impact on our ability to serve our customers and patients, including negatively affecting our reputation in the marketplace, or otherwise adversely impact our business.
Current wording
IT systems are used extensively in virtually all aspects of our business, including clinical testing, test reporting, billing, customer service, logistics and management of medical data. Our success depends, in part, on the continued and uninterrupted performance of our IT systems. A failure or delay in our IT systems could impede our ability to serve our customers and patients and protect their confidential data. Despite redundancy and backup measures and precautions that we have implemented, our IT systems may be vulnerable to damage, disruptions and shutdown from a variety of sources, including the age of the technology, telecommunications or network failures, system conversion, standardization or modernization initiatives, human acts and natural disasters. For example, in connection with Project Nova, we committed to a multi-year project to modernize our "Order to Cash" business processes, including the related information technology infrastructure and underlying enabling technologies. We are partnering with Epic, a third-party licensor, to assist in the implementation of Project Nova. These issues can also arise as a result of failures by third parties with whom we do business, including manufacturers and developers of the hardware and software we use, and over which we have limited control. Any disruption or failure of our IT systems, including in connection with Project Nova, could have a material impact on our ability to serve our customers and patients, including negatively affecting our reputation in the marketplace, or otherwise adversely impact our business.
Previous wording
It is important that we continue to strengthen our efficiency to promote our competitive position and enable us to mitigate the impact on our profitability of steps taken by government payers and health insurers to reduce the utilization and reimbursement of diagnostic information services, and to partly offset pressures from the current inflationary environment, including labor and benefit cost increases, and reimbursement pressures.
Current wording
It is important that we continue to strengthen our efficiency, including through the use of technology and automation, to promote our competitive position and enable us to mitigate the impact on our profitability of steps taken by government payers and health insurers to reduce the utilization and reimbursement of diagnostic information services, and to partly offset pressures from an inflationary environment, including labor and benefit cost increases, and reimbursement pressures.
Previous wording
We are subject to laws and regulations regarding protecting the security and privacy of certain healthcare and personal information, including: (a) the federal Health Insurance Portability and Accountability Act and the regulations thereunder, which establish (i) a complex regulatory framework including requirements for safeguarding protected health information and (ii) comprehensive federal standards regarding the uses and disclosures of protected health information; (b) state laws (e.g., California) and similar laws in other states; and (c) laws outside the United States, including the European Union's General Data Protection Regulation, Canada’s Personal Information Protection and Electronic Documents Act and provincial health privacy laws, and similar laws in other jurisdictions.
Current wording
In our business, we collect, generate, process or maintain sensitive information, such as patient data and other personal information. We are subject to laws and regulations regarding protecting the security and privacy of certain healthcare and personal information, including: (a) the federal Health Insurance Portability and Accountability Act and the regulations thereunder, which establish (i) a complex regulatory framework including requirements for safeguarding protected health information and (ii) comprehensive federal standards regarding the uses and disclosures of protected health information; (b) state laws (e.g., California) and similar laws in other states; and (c) laws outside the United States, including the European Union's General Data Protection Regulation, Canada’s Personal Information Protection and Electronic Documents Act and provincial health privacy laws, and similar laws in other jurisdictions.
Previous wording
In our business, we collect, generate, process or maintain sensitive information, such as patient data and other personal information. If we do not use or adequately safeguard that information in compliance with applicable requirements under federal, state and international laws, or if it were disclosed to persons or entities that should not have access to it, our business could be materially impaired, our reputation could suffer, and we could be subject to fines, penalties and litigation. These issues can also arise as a result of failures by third parties with whom we do business and over which we have limited control. In the event of a data security breach, we may be subject to notification obligations, litigation and governmental investigation or sanctions, and may suffer reputational damage, which could have an adverse impact on our business.
Current wording
If we do not use or adequately safeguard that information in compliance with applicable requirements under federal, state and international laws, or if it were disclosed to persons or entities that should not have access to it, our business could be materially impaired, our reputation could suffer, and we could be subject to fines, penalties and litigation. These issues can also arise as a result of failures by third parties with whom we do business and over which we have limited control. We are increasingly collaborating with new entrants in the health services industry who are facilitating consumers’ growing interest in taking direct responsibility for their own healthcare, where we provide the underlying testing services for their consumer health service offerings. These companies are increasingly handling and processing highly sensitive consumer health data and our contractual relationship with these companies could expose us to legal or regulatory risk and reputational harm if they are unable to adequately safeguard this information. In the event of a data security breach, we may be subject to notification obligations, litigation and governmental investigation or sanctions, and may suffer reputational damage, which could have an adverse impact on our business.
Previous wording
We regularly assess opportunities and risks related to corporate responsibility, which includes sustainability, social and governance matters. As part of this process, we make decisions related to these matters and may set goals and targets related to sustainability and social matters. We have a broad range of stakeholders, including our stockholders, employees, patients and communities we serve, some of whom increasingly focus on corporate responsibility considerations. In addition, some of our stockholders, employees and patients may consider corporate responsibility factors in making investment, employment and service provider decisions. Our ability to achieve the goals we may set related to corporate responsibility matters are subject to numerous risks and uncertainties, many of which are outside of our control. Despite our efforts, we may not achieve our goals on the timetable we set or at all. Additionally, certain of our stakeholders may not be satisfied with our decisions related to corporate responsibility matters, the goals we set, our progress towards these goals or the resulting outcomes. This could lead to negative perceptions of, or loss of support for, our business, difficulty recruiting or attracting new employees and our stock price being negatively impacted.
Current wording
We regularly assess opportunities and risks related to corporate responsibility, which includes sustainability, social and governance matters. As part of this process, we make decisions related to these matters and may set goals and targets related to sustainability and social matters. We have a broad range of stakeholders, including our stockholders, employees, customers, which include government entities, patients and communities we serve, some of whom increasingly focus on corporate responsibility considerations and many have different or conflicting expectations with respect to corporate responsibility and related matters. Some of our stockholders, employees, customers and patients may consider corporate responsibility factors in making investment, employment and service provider decisions. Our ability to achieve the goals we may set related to corporate responsibility matters are subject to numerous risks and uncertainties, many of which are outside of our control. Despite our efforts, we may not achieve our goals on the timetable we set or at all. Additionally, certain of our stakeholders may not be satisfied with our decisions related to corporate responsibility matters, the goals we set, our progress towards these goals or the resulting outcomes. This could lead to negative perceptions of, or loss of support for, our business, difficulty recruiting or attracting new employees and our stock price being negatively impacted.
Previous wording
External actors may develop and deploy viruses, other malicious software programs, ransomware attacks, distributed denial of service attacks or other attempts to harm or obtain unauthorized access to our systems, including through the use of AI and other emerging technologies. External actors may also deploy programs targeting our employees which are designed to attack our IT systems or otherwise exploit security vulnerabilities through programs such as electronic spamming, phishing, smishing, spear phishing or similar tactics. As a result of the difficulty in detecting many of these attacks, intrusions and breaches, failures or losses may be repeated or compounded before they are discovered or rectified, which could further increase these costs and consequences. Additionally, new technology that we deploy to automate processes, improve customer service, generate insights from lab and other data and stimulate innovation to improve operational efficiency, including the expanded use of AI, may further expose our IT systems to the risk of cyberattacks and may create the need for rapid modifications to our cybersecurity program. Also, an increasing risk of civil unrest, political tensions, wars or other military conflicts may also impact the cybersecurity threat risk landscape.
Current wording
External actors may develop and deploy viruses, other malicious software programs, ransomware attacks, distributed denial of service attacks or other attempts to harm or obtain unauthorized access to our systems, including through the increased use of AI and other emerging technologies. External actors may also deploy programs targeting our employees which are designed to attack our IT systems or otherwise exploit security vulnerabilities through programs such as electronic spamming, phishing, smishing, spear phishing or similar tactics. As a result of the difficulty in detecting many of these attacks, intrusions and breaches, failures or losses may be repeated or compounded before they are discovered or rectified, which could further increase these costs and consequences. Additionally, new technology that we deploy to automate processes, improve customer service, generate insights from lab and other data and stimulate innovation to improve operational efficiency, including the expanded use of AI, may further expose our IT systems to the risk of cyberattacks and may create the need for rapid modifications to our cybersecurity program. Also, an increasing risk of civil unrest, political tensions, wars or other military conflicts may also impact the cybersecurity threat risk landscape.
Previous wording
Although the Company has robust security measures implemented, which are monitored and routinely tested both by internal resources and external parties, cybersecurity threats against us continue to evolve and may not be recognized until after an incident. In August 2021, ReproSource, our subsidiary, experienced a data security incident in which an unauthorized party may have accessed or acquired protected health information and personally identifiable information of ReproSource patients (in connection with the incident, ReproSource discovered and contained ransomware). The Company’s other systems were not impacted or compromised by this incident. Although the attacks we have experienced have not materially disrupted, interrupted, damaged or shutdown the Company's IT systems, or materially disrupted the Company's performance of its business, the mitigation or remediation efforts that we have undertaken, and may undertake in the future, require the attention of management and expenditures of resources, which can be significant. There can be no assurance that the Company can anticipate all evolving future attacks, viruses or intrusions, implement adequate preventative measures, or remediate any security vulnerabilities on a timely basis or at all. If our IT systems are successfully attacked, it could result in major and/or prolonged disruption of our business, compromise confidential information, and result in litigation and potential liability for the Company, government investigation, significant damage to our reputation or otherwise adversely affect our business.
Current wording
Although the Company has implemented robust security measures, which are monitored and routinely tested both by internal resources and external parties, cybersecurity threats and attacks against us continue to evolve and occur and may not be recognized until after an incident. Although the attacks we have experienced in the past have not materially disrupted, interrupted, damaged or shutdown the Company's IT systems, or materially disrupted the Company's performance of its business, the mitigation or remediation efforts that we have undertaken, and may undertake in the future, require the attention of management and expenditures of resources, which can be significant. There can be no assurance that the Company can anticipate all evolving future attacks, viruses or intrusions, implement adequate preventative measures, or remediate any security vulnerabilities on a timely basis or at all. If our IT systems are successfully attacked, it could result in major and/or prolonged disruption of our business, compromise confidential information, and result in litigation and potential liability for the Company, government investigation, significant damage to our reputation or otherwise adversely affect our business.
Previous wording
In addition, third parties to whom we outsource certain of our services or functions, or with whom we interface, store or process confidential patient and employee data or other confidential information, as well as those third parties’ providers, are also subject to the risks outlined above. For example, in June 2019, the Company reported that Retrieval-Masters Creditors Bureau, Inc./American Medical Collection Agency (AMCA), informed the Company that an unauthorized user had access to AMCA’s system. AMCA previously provided debt collection services for the Company and provided debt collection services for a company that provides revenue management services to the Company. AMCA’s affected system included financial, medical and other personal information. The Company’s systems or databases were not involved in this incident. A breach or attack affecting third parties with whom we engage could also harm our business, results of operations and reputation and subject us to liability. Additionally, many of the third-party service providers we rely on use generative AI for a variety of purposes, which increases the risk that our sensitive and proprietary data, and the data of our patients and customers, could be inadvertently or maliciously exposed.
Current wording
In addition, third parties to whom we outsource certain of our services or functions, or with whom we interface, store or process confidential patient and employee data or other confidential information, as well as those third parties’ providers, have experienced and remain subject to the risks outlined above. For example, in June 2019, the Company reported that Retrieval-Masters Creditors Bureau, Inc./American Medical Collection Agency (AMCA), informed the Company that an unauthorized user had access to AMCA’s system. AMCA previously provided debt collection services for the Company and provided debt collection services for a company that provides revenue management services to the Company. AMCA’s affected system included financial, medical and other personal information. The Company’s systems or databases were not involved in this incident. A breach or attack affecting third parties with whom we engage could also harm our business, results of operations and reputation and subject us to liability. Additionally, many of the third-party service providers we rely on use AI for a variety of purposes, which increases the risk that our sensitive and proprietary data, and the data of our patients and customers, could be inadvertently or maliciously exposed.
Previous wording
In addition, we believe that our overall relations with our employees are good. However, unfavorable labor environments, unionization activity, or a failure to comply with labor or employment laws could result in, among other things, labor unrest, strikes, work stoppages, slowdowns by the affected workers, fines and penalties. If any of these events were to occur, the Company could experience a disruption of its operations or higher ongoing labor costs, either of which could have a material adverse effect upon the Company's business.
Current wording
In addition, we believe that our overall relations with our employees are good. However, unfavorable labor environments, unionization activity (including in non-U.S. markets), a failure to comply with labor or employment laws or reputational considerations triggered by any of the risks described in this Report could result in, among other things, labor unrest, strikes, work stoppages, slowdowns by the affected workers, fines, penalties and a loss of employees. If any of these events were to occur, the Company could experience a disruption of its operations or higher ongoing labor costs, either of which could have a material adverse effect upon the Company's business.
Previous wording
We plan selectively to enhance our business from time to time through business development activities, such as acquisitions, licensing arrangements, investments and alliances. However, these plans are subject to the availability of appropriate opportunities and competition from other companies seeking similar opportunities. Moreover, the success of any such effort may be affected by a number of factors, including our ability to properly assess and value the potential business opportunity, and to integrate the new businesses, manage the costs related to any such integration and to retain key technical, professional or management personnel. The success of our strategic alliances depends not only on our contributions and capabilities, but also on the property, resources, efforts and skills contributed by our strategic partners. Further, disputes may arise with strategic partners, due to conflicting priorities or conflicts of interests.
Current wording
We plan selectively to enhance our business from time to time through business development activities, such as acquisitions, licensing arrangements, investments and alliances, including joint ventures. However, these plans are subject to the availability of appropriate opportunities and competition from other companies seeking similar opportunities. Moreover, the success of any such effort may be affected by a number of factors, including our ability to properly assess and value the potential business opportunity, obtain any necessary regulatory clearance (including due to antitrust concerns), integrate the new businesses and manage the costs related to any such integration, and retain key technical, professional or management personnel. The success of our strategic alliances depends not only on our contributions and capabilities, but also on the property, resources, efforts and skills contributed by our strategic partners. Further, disputes may arise with strategic partners, due to conflicting priorities or conflicts of interests.
Previous wording
Acquisitions are not all the same (e.g., asset acquisitions differ from acquisitions of equity interests); different acquisitions offer different risks. Acquisitions may involve the integration of a separate company that has different systems, processes, policies and cultures. Integration of acquisitions involves a number of risks including the diversion of management's attention to the assimilation of the operations of assets or businesses we have acquired, difficulties in the diligence and integration of operations and systems and the realization of potential operating synergies, or introduction of IT security vulnerabilities not adequately investigated during diligence or managed after acquisition, the integration and retention of the personnel of the acquired businesses and of our existing business, challenges in retaining the customers of the combined businesses, and potential adverse effects on operating results. The process of combining acquisitions may be disruptive to our businesses and may cause an interruption of, or a loss of momentum in, such businesses as a result of the following difficulties, among others:
Current wording
Acquisitions are not all the same (e.g., asset acquisitions differ from acquisitions of equity interests); different acquisitions offer different risks and require different levels of effort to obtain regulatory clearance. Acquisitions may involve the integration of a separate company that has different systems, processes, policies and cultures. Integration of acquisitions involves a number of risks including the diversion of management's attention to the integration of the operations of assets or businesses we have acquired, difficulties in the diligence and integration of operations and systems and the realization of potential operating synergies, or introduction of IT security vulnerabilities not adequately investigated during diligence or managed after acquisition, the integration and retention of the personnel of the acquired businesses and of our existing business, challenges in retaining the customers of the combined businesses, and potential adverse effects on operating results. The process of negotiating, completing and integrating acquisitions may be disruptive to our businesses (especially as transactions become increasingly complex) and may cause an interruption of, or a loss of momentum in, such businesses as a result of the following difficulties, among others:
Previous wording
•failure to maintain the quality or timeliness of services that our Company has historically provided;
Current wording
•failure to maintain the quality or timeliness of services and profitability that our Company has historically provided;
Previous wording
If we are unable successfully to integrate strategic acquisitions in a timely manner, our business and our growth strategies could be negatively affected. Even if we are able to successfully complete the integration of the operations of other assets or businesses we may acquire in the future, we may not be able to realize all or any of the benefits that we expect to result from such integration, either in monetary terms or in a timely manner.
Current wording
If we are unable successfully to integrate strategic acquisitions in a timely manner, our business and our growth strategies could be negatively affected. Even if we are able to successfully complete the integration of the operations of other assets or businesses we may acquire in the future, we may not be able to realize all or any of the benefits that we expect to result from such integration, either in monetary terms or in a timely manner. We have also entered into arrangements with a number of new entrants in the health services industry who are leveraging the increasing trend for consumers to manage and take direct responsibility for their own healthcare, where we provide the underlying testing services for their consumer health service offerings. These companies are operating in a new, rapidly evolving and uncertain regulatory landscape that subjects them to several risks, including those related to application of regulatory requirements (e.g., under CLIA, for testing performed outside of a commercial laboratory), unlicensed and corporate practice of medicine laws that differ across the United States, reimbursement uncertainty of direct-to-consumer health services, specimen collection errors and logistics, cybersecurity and health data privacy risks and clinical and professional liability. Our contractual relationship with these companies could expose us to these legal or regulatory risks and reputational harm.
Previous wording
Our operations may be adversely impacted by the effects of natural disasters such as hurricanes and earthquakes, public health emergencies and pandemics, geopolitical matters, hostilities or acts of terrorism and other criminal activities.
Current wording
Our operations may be adversely impacted by the effects of natural disasters such as hurricanes and earthquakes, public health emergencies and pandemics, geopolitical conflicts, hostilities or acts of terrorism and other criminal activities.
Previous wording
We operate facilities primarily across the United States, and consumers frequently visit our facilities in person. The ability of our employees and consumers to access our facilities may be adversely impacted by the effects of extreme weather events and natural disasters, such as hurricanes, earthquakes, tropical storms, floods, fires, or other extreme weather conditions, including major winter storms, droughts and heat waves; public health emergencies and pandemics; geopolitical matters, hostilities or acts of terrorism or other activities. Although we maintain a business continuity program to prepare for and respond to such events, because of their unpredictable nature, these events may limit or interrupt our ability to conduct operations. Additionally, such events may interrupt our ability to transport specimens, to receive materials from our suppliers or otherwise to provide our services. These events also may result in a decline in the number of patients who seek clinical testing services or in our employees' ability to perform their job duties.
Current wording
We operate facilities primarily across the United States, and consumers frequently visit our facilities in person. The ability of our employees and consumers to access our facilities may be adversely impacted by the effects of extreme weather events and natural disasters, such as hurricanes, earthquakes, tropical storms, floods, fires, or other extreme weather conditions, including major winter storms, droughts and heat waves; public health emergencies and pandemics; geopolitical conflicts, hostilities or acts of terrorism or other activities. Although we maintain a business continuity program to prepare for and respond to such events, because of their unpredictable nature, these events may limit or interrupt our ability to conduct operations. Additionally, such events may interrupt our ability to transport specimens, to receive materials from our suppliers or otherwise to provide our services. These events also may result in a decline in the number of patients who seek clinical testing services or in our employees' ability to perform their job duties.
Previous wording
Inflationary pressures over the last number of years have resulted in increases in the costs of the testing equipment, supplies and other goods and services that we purchase from manufacturers, suppliers and others. Inflationary pressures, along with the competition for labor, have also resulted in a rise of our labor costs, which include the costs of compensation, benefits, and recruiting and training new hires. Our ability to raise the prices and fees we charge for the services we provide is limited. Continuation of the current inflationary environment may adversely impact us.
Current wording
Inflationary pressures over the last number of years have resulted in increases in the costs of the testing equipment, supplies and other goods and services that we purchase from manufacturers, suppliers and others. Inflationary pressures, along with the competition for labor, have also resulted in a rise of our labor costs, which include the costs of compensation, benefits, and recruiting and training new hires. Our ability to raise the prices and fees we charge for the services we provide is limited. An inflationary environment may adversely impact us.
Previous wording
(c) A decline in economic conditions, including the impact of an inflationary environment.
Current wording
(c) Uncertain and volatile economic conditions, including the impact of an inflationary environment and changes in government policies, including related to trade.
Previous wording
(h) Failure to efficiently integrate acquired businesses and to manage the costs related to any such integration, or to retain key technical, professional or management personnel.
Current wording
(h) Failure to efficiently integrate acquired businesses, integrate our business with our joint ventures, and to manage the costs related to any such integration and implementation requirements, or to retain key technical, professional or management personnel.
Previous wording
(k) Inability to achieve expected benefits from our acquisitions of other businesses.
Current wording
(k) Inability to identify, consummate or achieve expected benefits from our acquisitions of other businesses.
Previous wording
(p) Challenges with properly managing the development and use of AI.
Current wording
(p) Challenges, including the associated competitive pressures, with properly managing the development, implementation, oversight and use of AI.
Previous wording
(r) Development of tests by our competitors or others which we may not be able to license, or usage (or theft) of our technology or similar technologies or our trade secrets or other intellectual property by competitors, any of which could negatively affect our competitive position.
Current wording
(r) Development of tests by our competitors or others which we may not be able to license, or usage (or theft) of our technology, similar technologies, our trade secrets or other intellectual property by competitors, any of which could negatively affect our competitive position.
Previous wording
(w) Terrorist and other criminal activities, hurricanes, earthquakes or other natural disasters, geopolitical matters, public health emergencies and pandemics, which could affect our customers or suppliers, transportation or systems, or our facilities, and for which insurance may not adequately reimburse us.
Current wording
(w) Terrorist and other criminal activities, hurricanes, earthquakes or other natural disasters, geopolitical hostilities or other global conflicts, public health emergencies and pandemics, which could affect our customers or suppliers, transportation or systems, or our facilities, and for which insurance may not adequately reimburse us.
Previous wording
(ee) The other factors that are discussed within “Item 1. Business,” “Item 1A. Risk Factors” and “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations” of this Annual Report on Form 10-K.
Current wording
(dd) The other factors that are discussed within “Item 1. Business,” “Item 1A. Risk Factors” and “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations” of this Annual Report on Form 10-K.
Rearranged current paragraphs (3)
Current report — wording carried from elsewhere
In addition, the diagnostic information services industry is faced with potential changes in government regulations that could impact patient access to healthcare. We expect that the evolution of the healthcare industry will continue, and that industry change is likely to be extensive.
Current report — wording carried from elsewhere
Our international operations also require us to devote management resources to implement our controls and systems in new markets, and to comply with the U.S. Foreign Corrupt Practices Act and similar anti-corruption laws in non-U.S. jurisdictions.
Current report — wording carried from elsewhere
•regulatory delay or failure to develop, acquire licenses for, introduce, or commercialize newly-acquired tests, technology and services;
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
We also believe that health plans and consumers increasingly are focusing on driving better value in laboratory testing services. We expect that the evolution of the healthcare industry will continue, and that industry change is likely to be extensive.