FARMERS & MERCHANTS BANCORP INC

Current report

Compliance Obligations of Bank Holding Companies and Insured Depositories

Current report

We and our bank subsidiary operate within an extensive and evolving framework of federal and state laws, regulations, and supervisory expectations that govern nearly all aspects of our operations. As a bank holding company, we are subject to the Bank Holding Company Act and related regulations, while our bank is overseen by federal and state regulators through examination and enforcement authority. We are also subject to numerous requirements under consumer protection, privacy, anti-money laundering, sanctions, community reinvestment, and securities laws, as well as payment system and third-party risk management standards.

Current report

These obligations restrict permissible activities, affect capital, liquidity, and growth strategies, and impose significant compliance and operational costs. Examinations may result in Matters Requiring Attention or enforcement actions, and deficiencies in our risk, compliance, or governance programs could lead to penalties, remediation orders, restrictions on dividends or expansion, and reputational harm.

Current report

The regulatory landscape continues to evolve through new legislation, rulemaking, and supervisory guidance in areas such as consumer protection, AML and sanctions, fintech partnerships, model risk, payments modernization, data privacy, and fair access. Future changes—or differing federal and state requirements—could increase compliance costs, limit product or service offerings, or otherwise adversely affect our business, financial condition, and results of operations.

Current report

“Debanking,” Fair Access, and Supervisory Expectations

Current report

Evolving federal and state scrutiny of account onboarding, offboarding, and access to banking services—often referred to as “debanking” or “fair access”—could increase our compliance, legal, and reputational risks. Policymakers and regulators are reconsidering the role of “reputation risk” in supervision and adopting laws that limit account decisions based on perceived political or non-risk factors. These measures may conflict with each other or with our obligations under existing law.

Current report

Supervisory expectations emphasizing individualized, risk-based decisions and enhanced documentation may require policy and system changes and greater resources. We could face criticism or penalties if regulators find our account actions insufficiently supported or discriminatory, or if we must maintain accounts beyond our risk appetite. Conflicting standards and rising public attention to alleged “debanking” may increase complaint volume, compliance costs, and reputational exposure. Any of these developments could materially affect our business, financial condition, or results of operations.

Current report

Data Privacy, Cybersecurity, and Information Security Compliance

Current report

We are subject to extensive federal and state data privacy, cybersecurity, and information security requirements. Expanding state privacy regimes, incident-notification rules, and vendor-oversight standards have increased the complexity and cost of compliance, particularly across multiple jurisdictions and third-party relationships. Failure to comply with applicable laws or to safeguard customer or confidential information could result in regulatory inquiries, penalties, litigation, remediation costs, and reputational harm. Ongoing changes in privacy and cybersecurity laws may require additional investment in systems, controls, and personnel, and could adversely affect our operations and financial results.

Current report

Consumer Compliance, CRA Modernization, and Fair Lending

Current report

We are subject to extensive consumer protection, fair lending, and Community Reinvestment Act (CRA) obligations. CRA modernization and evolving fair-lending expectations may require changes to our assessment areas, data collection, monitoring, product offerings, and governance. The use of models or analytics in pricing, marketing, or underwriting increases fair-lending and conduct risk if not properly controlled. Failure to meet supervisory expectations could result in criticism, penalties, remediation obligations, restrictions on growth or activities, or reputational harm.

Current report

Payments, Fee Practices, and Operational Risk

Current report

Regulatory and supervisory scrutiny of consumer fees—including overdraft and other service charges—continues to evolve. Changes to fee practices, disclosure requirements, or remediation obligations could reduce noninterest income and increase compliance costs. Adoption of faster payment systems and real-time networks heightens operational, fraud, and funds-availability risks, requiring ongoing enhancements to risk controls, vendor oversight, and reconciliation processes. Network rule changes or settlement obligations could further increase costs or operational complexity and adversely affect our results.

Current report

Consumer Credit Normalization and Portfolio Risk

Current report

Consumer credit performance is normalizing from historically strong conditions, reflecting higher interest rates, elevated prices, and reduced savings. Deterioration in borrower cash flows, labor-market weakness, or persistent inflation could increase delinquencies and charge-offs in our retail portfolios, including unsecured consumer loans. Higher loss emergence would increase our allowance for credit losses under CECL, potentially leading to earnings volatility, elevated provision levels, and slower loan growth.