CSB Bancorp, Inc.

General

CSB Bancorp, Inc. (“CSB”), is a registered financial holding company under the Bank Holding Company Act of 1956, as amended, and was incorporated under the laws of the State of Ohio in 1991. The Commercial and Savings Bank of Millersburg, Ohio (the “Bank”), an Ohio bank chartered in 1879, is a wholly owned subsidiary of CSB. The Bank is a member of the Federal Reserve System, and its deposits are insured up to the maximum amount provided by law by the Federal Deposit Insurance Corporation (“FDIC”). The primary regulators of the Bank are the Federal Reserve Board and the Ohio Division of Financial Institutions. CSB Investment Services, LLC, an Ohio limited liability company (“CSB Investment”), is a wholly owned subsidiary of CSB that is licensed to engage in the business of insurance in the State of Ohio. In this Annual Report on Form 10-K, CSB and its subsidiaries are sometimes collectively referred to as the “Company.”

Cautionary Statement Regarding Forward-Looking Information

Certain statements contained in this Annual Report on Form 10-K, which are not statements of historical fact, constitute forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. Words such as “anticipate”, “estimates”, “may”, “feels”, “expects”, “believes”, “plans”, “will”, “would”, “should”, “could” and similar expressions are intended to identify these forward-looking statements but are not the exclusive means of identifying such statements. Examples of forward-looking statements include: (i) projections of income or expense, earnings per share, the payment or non-payment of dividends, capital structure, and other financial items; (ii) statements of plans and objectives of the Company and of its management or Board of Directors, including those relating to products or services; (iii) statements of future economic performance; and (iv) statements of assumptions underlying such statements. Forward-looking statements are subject to risks and uncertainties that may cause actual results to differ materially.

Other factors not currently anticipated may also materially and adversely affect the Company’s business, financial condition, results of operations, or cash flows. There can be no assurance that future results will meet expectations. While the Company believes that the forward-looking statements in this Annual Report on Form 10-K are reasonable, the reader should not place undue reliance on any forward-looking statement. In addition, these statements speak only as of the date made. The Company does not undertake, and expressly disclaims, any obligation to update or alter any statements whether as a result of new information, future events, or otherwise, except as may be required by applicable law.

The Private Securities Litigation Reform Act of 1995 provides a “safe harbor” for forward-looking statements to encourage companies to provide prospective information so long as those statements are identified as forward-looking and are accompanied by meaningful cautionary statements identifying important factors that could cause actual results to differ materially from those discussed in the forward-looking statements. The Company desires to take advantage of the “safe harbor” provisions of the Private Securities Litigation Reform Act of 1995.

Business Overview and Lending Activities

CSB operates primarily through the Bank and CSB Investment Services, LLC, providing a wide range of banking, trust, financial, and brokerage services to corporate, institutional, and individual customers throughout northeast Ohio. The Bank provides retail and commercial banking services to its customers, including checking and savings accounts, time deposits, IRAs, safe deposit facilities, personal loans, commercial loans, real estate mortgage loans, installment loans, night depository facilities, brokerage, and trust services.

The Bank provides residential real estate, commercial real estate, commercial, and consumer loans to customers located primarily in Holmes, Stark, Tuscarawas, Wayne, and portions of surrounding counties in Ohio. The Bank’s market area has historically exhibited relatively stable economic conditions. Economic activity in the Company’s market area increased slightly in the fourth quarter of 2025, but consumer demand for goods and services declined moderately and is expected to flatten out in the near future. Reported unemployment levels in December 2025 ranged from 2.8% to 4.4% in the four primary counties served by the Company. These levels decreased from the December 2024 unemployment range of 2.9% to 4.6%. Labor demand remained fairly flat, while competition for workers with specialized skills has put upward pressure on labor costs. The local housing market has increasing inventory levels compared to prior years. Commercial loan demand, including commercial real estate, increased steadily during 2025 along with increased demand for consumer mortgage, home equity lines of credit and consumer construction loans as stable interest rates contributed to the growth. Nonresidential construction loan balances declined as projects were completed and moved to permanent financing. Demand for consumer installment and indirect loans softened in 2025. All deposit types increased and customers continue to move funds into higher yielding interest-bearing accounts.

Certain risks are involved in providing loans, including, but not limited to, the borrowers’ ability and willingness to repay the debt. Before the Bank extends a new loan or renews an existing loan to a customer, these risks are assessed through a review of the borrower’s past and current credit history, the collateral being used to secure the transaction, if any, and other factors. For all commercial loan relationships greater than $500,000, the Bank’s internal credit department performs an annual risk rating review. In addition to this review, an independent, outside loan review firm is engaged to review a sample of watch list and adversely classified credits over $500,000 and a sample of commercial loan relationships greater than $1,000,000. The outside loan review also assesses management’s current credit grades and provides commentary with regard to assigned ratings, as well as assesses management’s specific loan loss reserves for loans included in their sample that are considered to be impaired. In addition, any loan over $100,000 identified as a problem credit by management and/or the external loan review consultants is assigned to the Bank’s “loan watch list,” has a written action plan created specifically for the loan relationship and is subject to ongoing review at least quarterly by the Bank’s credit department and the assigned loan officer to ensure appropriate action is taken if deterioration continues. These "watch list action plans" are reviewed with the Executive Committee of the Board quarterly.

Commercial loan rates are variable and fixed and include operating lines of credit and term loans made to businesses, primarily based on their ability to repay the loan from the cash flow of the business. Business assets such as equipment, accounts receivable, and inventory typically secure such loans. When the borrower is not an individual, the Bank generally obtains the personal guarantee of the business owner. These loans typically involve larger loan balances, are generally dependent on the cash flow of the business, and thus may be subject to a greater extent to adverse conditions in the general economy or in a specific industry. Management reviews the borrower’s cash flows when deciding whether to grant the credit in order to evaluate whether estimated future cash flows will be adequate to service principal and interest of the new obligation in addition to existing obligations.

Commercial real estate loans are primarily secured by borrower-occupied business real estate and are dependent on the ability of the related business to generate adequate cash flow to service the debt. Commercial real estate loans are generally originated with a loan-to-value ratio of 80% of the lower of cost or appraised value. Commercial construction loans are secured by commercial real estate and in most cases the Bank also provides the permanent financing. The Bank monitors advances and the maximum loan to value ratio is typically limited to the lesser of 80% of cost or appraised value. Management performs much of the same analysis when deciding whether to grant a commercial real estate loan as when deciding whether to grant a commercial loan.

Residential real estate loans carry both fixed and variable rates and are secured by the borrower’s residence. Such loans are made based on the borrower’s ability to make repayment from employment and other income. Management assesses the borrower’s ability and willingness to repay the debt through review of credit history and ratings, verification of employment and other income, review of debt-to-income ratios, and other measures of repayment ability. The Bank generally makes these loans in amounts of 80% or less of the value of the collateral or up to 95% of collateral value with private mortgage insurance. An appraisal from a qualified real estate appraiser or an evaluation based on comparable market values is obtained for substantially all loans secured by real estate. Residential construction loans are secured by residential real estate that generally will be occupied by the borrower upon completion. The Bank usually makes the permanent loan at the end of the construction phase. Generally, construction loans are made in amounts of 80% or less of the value of the as-completed collateral.

Home equity lines of credit are made to individuals and are secured by second or first mortgages on the borrower’s residence. Loans are based on similar credit and appraisal criteria used for residential real estate loans; however, loans up to 90% of the value of the property may be approved for borrowers with excellent credit histories. These loans typically bear interest at variable rates and require minimum monthly payments of the accrued interest.

Installment loans to individuals include unsecured loans and loans secured by recreational vehicles (“RVs”), automobiles, and other consumer assets. Consumer loans for the purchase of new RV’s and new automobiles generally do not exceed 125% of Dealer Invoice on RV’s or 110% of the Manufacturer’s Suggested Retail Price (MSRP) of an automobile. Loans for used RV’s and automobiles do not exceed 120% of the “clean trade-in value” as reported in the current “J.D. Power” used vehicle guides. Overdraft protection loans are unsecured personal lines of credit to individuals who have demonstrated good credit character with reasonably assured sources of income and satisfactory credit histories. Consumer loans generally involve more risk than residential mortgage loans because of the type and nature of collateral and, in certain types of consumer loans, absence of collateral. Since these loans are generally repaid from ordinary income of the individual or family unit, repayment may be adversely affected by job loss, divorce, ill health, or by a general decline in economic conditions. The Bank assesses the borrower’s ability and willingness to repay through a review of credit history, credit ratings, debt-to-income ratios, and other measures of repayment ability.

While CSB’s chief decision-makers monitor the revenue streams of the various financial products and services, operations are managed, and financial performance is evaluated, on a Company-wide basis. Accordingly, all of the Company’s banking operations are considered by management to be aggregated in one reportable operating segment. For a discussion of the Company’s financial performance for the fiscal year ended December 31, 2025, see item 7, Management's Discussion and Analysis of Financial Condition and Results of Operations and item 8, Financial Statements and Supplementary Data, of this Annual Report on Form 10-K.

Employees

On December 31, 2025, the Company had 190 employees, 168 of which were employed on a full-time basis. CSB has no separate employees not also employed by the Bank. No employees are covered by collective bargaining agreements. Employees are provided benefit programs, some of which are contributory. Management considers its employee relations to be good.

Competition

The financial services industry is highly competitive. In its primary market area of Holmes, Stark, Tuscarawas, Wayne and surrounding Ohio counties, the Bank competes for new deposit dollars and loans with other commercial banks, including both large regional banks and smaller community banks, as well as savings and loan associations, credit unions, finance companies, insurance companies, brokerage firms, investment companies, private lenders, and technology-based providers of financial services (sometimes referred to as “fintech” companies).

Competition within the financial service industry continues to increase as a result of mergers between, and expansion of, financial service providers within and outside of the Company’s primary market areas. In addition, securities firms and insurance companies that have elected to become financial holding companies may acquire commercial banks and other financial institutions, which can create additional competitive pressure.

Management believes the primary factors in competing for loans and deposits are interest rates, availability of services, quality of customer service, convenience, and name recognition. Some of the Company’s competitors may have greater resources and as such, higher lending limits, or fewer regulatory constraints and lower cost structures, all of which may adversely affect the Company’s ability to compete.

Investor Relations

The Company’s website address iswww.csb1.com. The Company makes available its Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and all amendments to those reports, free of charge on its website as soon as reasonably practicable after such material is electronically filed with the Securities and Exchange Commission (the “SEC”). The Company also makes available through its website, other reports filed with the SEC under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), including its proxy statements and reports filed by officers and directors under Section 16(a) of the Exchange Act, as well as the Company’s Code of Ethics. References to our website in this Annual Report on Form 10-K are provided as a convenience and do not constitute, and should not be deemed, an incorporation by reference of the information contained on, or available through, the website, and such information should not be considered part of this Annual Report on Form 10-K.

In addition, the Company’s filings are available on the SEC’s website atwww.sec.gov free of charge as soon as reasonably practicable after the Company has filed the above referenced reports.

Supervision and Regulation of CSB and the Bank

CSB and the Bank are subject to extensive regulation by federal and state regulatory agencies. The regulation of financial holding companies and their subsidiaries by bank regulatory agencies is intended primarily for the protection of consumers, depositors, borrowers, the deposit insurance fund of the FDIC (the “DIF”), and the banking system as a whole and not for the protection of shareholders.

CSB is a bank holding company that has registered with the Federal Reserve Board (“FRB”) as a financial holding company under the Bank Holding Company Act of 1956, as amended (the “BHC Act”). Pursuant to the Gramm-Leach-Bliley Act of 1999 (“GLBA”), a qualifying bank holding company may elect to become a financial holding company and thereby affiliate with securities firms and insurance companies and engage in other activities that are financial in nature and not otherwise permissible for a bank holding company, if: (i) the holding company is "well managed" and "well capitalized" and (ii) each of its subsidiary banks (a) is well capitalized under the Federal Deposit Insurance Corporation Act of 1991 prompt corrective action provisions, (b) is well managed, and (c) has at least a "satisfactory" rating under the Community Reinvestment Act (the “CRA”). CSB has been a financial holding company since 2005. No regulatory approval is required for a financial holding company to acquire a company, other than a bank or savings association, engaged in activities that are financial in nature or incidental to activities that are financial in nature, as determined by the FRB. The financial holding company and its subsidiaries must continue to meet the above-described requirements in order to continue to engage in activities that are financial in nature without being subjected to regulatory action or restriction, which could include divestiture of the subsidiary or subsidiaries.

GLBA defines “financial in nature” to include securities underwriting, dealing, and market making; sponsoring mutual funds and investment companies; insurance underwriting and agency; merchant banking; and activities that the FRB has determined to be closely related to banking. CSB is also subject to the disclosure and regulatory requirements of the Securities Act of 1933, as amended, the Exchange Act, and the regulations rules and regulations promulgated thereunder, as administered by the SEC.

The Bank, as an Ohio state-chartered bank and member of the Federal Reserve System, is subject to regulation, supervision, and examination by the Ohio Division of Financial Institutions and the FRB. Because the FDIC insures its deposits, the Bank is also subject to certain FDIC regulations. The FDIC is an independent federal agency which insures the deposits, up to prescribed statutory limits, of federally insured banks and savings associations, and safeguards the safety and soundness of the financial institution industry. The Bank’s deposits are insured up to applicable limits by the DIF, and the Bank is subject to deposit insurance assessments to maintain the DIF. In addition, the Bank is subject to regulations promulgated by the Consumer Financial Protection Bureau (the “CFPB”), which was established by the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, as amended (the “Dodd-Frank Act”).

The earnings, dividends, and other aspects of the operations and activities of CSB and the Bank are affected by state and federal laws and regulations, and by policies of various regulatory authorities. These policies include, for example, statutory maximum lending rates, requirements on maintenance of reserves against deposits, domestic monetary policies of the FRB, United States fiscal and economic policies, international currency regulations and monetary policies, certain restrictions on relationships with many phases of the securities business, and capital adequacy and liquidity restraints.

The following information describes selected federal and state statutory and regulatory provisions that have, or could have, a material impact on the Company’s business. This discussion is qualified in its entirety by reference to the full text of the particular statutory or regulatory provisions contained or referenced herein.

Regulation of Bank Holding Companies

As a financial holding company, CSB’s activities are subject to regulation by the FRB. CSB is subject to regular examinations by the FRB and is required to file reports and such additional information as the FRB may require. The FRB has extensive enforcement authority over bank holding companies, including the ability to assess civil money penalties, issue cease and desist orders, and require that a bank holding company divest subsidiaries (including subsidiary banks). The FRB may initiate enforcement actions for violations of laws and regulations, and for unsafe and unsound practices. Under FRB policies, a bank holding company is expected to act as a “source of strength” to its subsidiary banks and to commit resources to support those subsidiary banks. Under this policy, the FRB may require a bank holding company to contribute additional capital to an undercapitalized subsidiary bank.

The BHC Act requires the prior approval of the FRB in cases where a bank holding company proposes to acquire direct or indirect ownership or control of more than 5% of the voting shares of any bank that is not already majority-owned by it, acquire all or substantially all of the assets of another bank or another financial or bank holding company, or merge or consolidate with any other financial or bank holding company.

Economic Growth, Regulatory Relief and Consumer Protection Act

On May 25, 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the “Regulatory Relief Act”) was signed into law. The Regulatory Relief Act repealed or modified certain provisions of the Dodd-Frank Act and eased regulations on all but the largest banks (those with consolidated assets in excess of $250 billion). Bank holding companies with consolidated assets of less than $100 billion, including CSB, are no longer subject to enhanced prudential standards. The Regulatory Relief Act also relieves bank holding companies and banks with consolidated assets of less than $100 billion, including CSB, from certain record-keeping, reporting and disclosure requirements.

Current Expected Credit Loss Model

In December 2019, the federal banking agencies issued a final rule to address regulatory treatment of credit loss allowances under the current expected credit loss ("CECL”) models. The rule revised the federal banking agencies’ regulatory capital rules to identify which credit loss allowances under the CECL model are eligible for inclusion in regulatory capital and to provide banking organizations the option to phase in over three years the day-one adverse effects on regulatory capital that may result from the adoption of the CECL model. Concurrent with the enactment of the Coronavirus Aid, Relief, and Economic Security Act of 2020, as amended, federal banking agencies issued an interim final rule that delayed the estimated impact on regulatory capital resulting from the adoption of CECL. The interim final rule provided banking organizations that implemented CECL prior to the end of 2020 the option to delay for two years the estimated impact of CECL on regulatory capital relative to regulatory capital determined under the prior incurred loss methodology, followed by a three-year transition period to phase out the aggregate amount of capital benefit provided during the initial two-year delay. On August 26, 2020, the federal banking agencies issued a final rule that made certain technical changes to the interim final rule, including expanding the pool of eligible institutions. The Bank adopted the CECL model January 1, 2023, since it is a smaller reporting company.

Regulatory Capital

The FRB adopted risk-based capital guidelines for bank holding companies and state member banks, designed to absorb losses. The guidelines provide a systematic analytical framework, which makes regulatory capital requirements sensitive to differences in risk profiles among banking organizations, takes off-balance sheet exposures expressly into account in evaluating capital adequacy and incentivizes holding liquid, low-risk assets. Capital levels as measured by these standards are also used to categorize financial institutions for purposes of certain Prompt Corrective Action regulatory provisions.

In July 2013, the United States banking regulators issued capital rules applicable to smaller banking organizations which also implement certain of the provisions of the Dodd-Frank Act (the “Basel III Capital Rules”). The Basel III Capital Rules include (i) a minimum common equity tier 1 capital ratio of 4.5%, (ii) a minimum tier 1 capital ratio of 6.0%, (iii) a minimum total capital ratio of 8.0%, and (iv) a minimum leverage ratio of 4.0%. Common equity for the common equity tier 1 capital ratio includes common stock (plus related surplus) and retained earnings, plus limited amounts of minority interests in the form of common stock, less the majority of certain regulatory deductions.

Tier 1 capital includes common equity as defined for the common equity tier 1 capital ratio, plus certain non-cumulative preferred stock and related surplus, cumulative preferred stock and related surplus, and trust preferred securities that have been grandfathered (but which are not permitted going forward), and limited amounts of minority interests in the form of additional tier 1 capital instruments, less certain deductions.

Tier 2 capital, which can be included in the total capital ratio, includes certain capital instruments (such as subordinated debt) and limited amounts of the allowance for loan and lease losses, subject to new eligibility criteria, less applicable deductions.

The deductions from common equity tier 1 capital include goodwill and other intangibles, certain deferred tax assets, mortgage-servicing assets above certain levels, gains on sale in connection with a securitization, investments in a banking organization’s own capital instruments, and investments in the capital of unconsolidated financial institutions (above certain levels).

Under the guidelines, capital is compared to the relative risk related to the balance sheet. To derive the risk included in the balance sheet, one of several risk weights is applied to different balance sheet and off-balance sheet assets, primarily based on the relative credit risk of the counterparty. The capital amounts and classification are also subject to qualitative judgments by the regulators about components, risk weightings, and other factors.

The Basel III Capital Rules place restrictions on the payment of capital distributions, including dividends, and certain discretionary bonus payments to executive officers in the event the Company does not hold a capital conservation buffer of greater than 2.5% composed of common equity tier 1 capital above its minimum risk-based capital requirements, or if its eligible retained income is negative in that quarter and its capital conservation buffer ratio was less than 2.5% at the beginning of the quarter. Pursuant to the FRB’s Small Bank Holding Company Policy statement (“SBHC Policy”), a bank holding company with assets of less than $3 billion and meeting certain other requirements is not required to comply with the consolidated capital requirements until such company exceeds $3 billion in assets or is otherwise determined by the FRB not to qualify as a small bank holding company. On December 31, 2023, CSB was deemed to be a small bank holding company under the SBHC Policy and was not required to comply with the FRB’s regulatory capital requirements. The Bank, however, must comply with the new capital requirements.

Prompt Corrective Action

The federal banking agencies have established a system of “prompt corrective action” to resolve certain of the problems of undercapitalized institutions. This system is based on five capital level categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized”, and “critically undercapitalized.”

The federal banking agencies may (or in some cases must) take certain supervisory actions depending upon a bank’s capital level. For example, the banking agencies must appoint a receiver or conservator for a bank within 90 days after it becomes “critically undercapitalized” unless the bank’s primary regulator determines, with the concurrence of the FDIC, that other action would better achieve regulatory purposes. Banking operations otherwise may be significantly affected depending on a bank’s capital category. For example, a bank that is not “well capitalized” generally is prohibited from accepting brokered deposits and offering interest rates on deposits higher than the prevailing rate in its market, and the holding company of any undercapitalized depository institution must guarantee, in part, specific aspects of the bank’s capital plan for the plan to be acceptable.

In order to be “well-capitalized,” a bank must have a minimum common equity tier 1 capital ratio of 6.5%, a total risk-based capital ratio of at least 10.0%, a tier 1 risk-based capital ratio of at least 8.0%, and a leverage ratio of at least 5.0%, and the bank must not be subject to any written agreement, order, capital directive, or prompt corrective action directive to meet and maintain a specific capital level for any capital measure.

As of December 31, 2025, the Bank met the ratio requirements in effect at that date to be deemed “well-capitalized.” See Note 12 – Regulatory Matters of the Notes to Consolidated Financial Statements, located in Item 8 Financial Statements and Supplementary Data of this 10-K.

Deposit Insurance

Substantially all of the deposits of the Bank are insured up to applicable limits by the DIF, and the Bank is assessed quarterly deposit insurance premiums to maintain the DIF. Insurance premiums for each insured institution are determined based upon the institution’s capital level and supervisory rating provided to the FDIC by the institution’s primary federal regulator and other information deemed by the FDIC to be relevant to the risk posed to the DIF by the institution. The assessment rate is then applied to the amount of the institution’s assessment base to determine the institution’s insurance premium. The deposit insurance assessment base is calculated on average assets less average tangible equity.

The FDIC assesses a quarterly deposit insurance premium on each insured institution based on risk characteristics of the insured institution and may also impose special assessments in emergency situations. The premiums fund the DIF. Pursuant to the Dodd-Frank Act, the FDIC has established reserve ratios. On June 30, 2019, the reserve ratios were met and the FDIC applied credits for banks with assets of less than $10 billion ("small bank credits") beginning September 30, 2019 through the June 2020 premium payment. The FDIC rules further changed the method of determining risk-based assessment rates for established banks with less than $10 billion in assets to better ensure that banks taking on greater risks pay more for deposit insurance than banks that take on less risk. As of June 30, 2020, the FDIC’s designated reserve ratio (“DRR”) fell below the statutory minimum DRR of 1.35%, to 1.30%. As a result, the FDIC adopted a restoration plan requiring the restoration of the DRR to 1.35% within eight years (September 30, 2028).

As insurer, the FDIC is authorized to conduct examinations of, and to require reporting by, federally insured institutions. It also may prohibit any federally insured institution from engaging in any activity the FDIC determines by regulation or order to pose a serious threat to the DIF. The FDIC also has the authority to take enforcement actions against insured institutions. Insurance of deposits may be terminated by the FDIC upon a finding that the institution has engaged or is engaging in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order, or condition imposed by the FDIC or written agreement entered into with the FDIC.

The management of the Bank does not know of any practice, condition, or violation that might lead to termination of deposit insurance.

Audits

The FDIC requires insured depository institutions with total assets in excess of $1 billion to have an annual independent audit made of the institution’s financial statements by an independent public accountant to verify that the financial statements of the institution are presented fairly and in accordance with generally accepted accounting principles and comply with such other disclosure requirements as prescribed by the FDIC. Effective January 1, 2026, the FDIC amended its rules and regulations to, in part, increase the threshold requirement for insured depository institutions to obtain an independent auditor’s report on the institution’s internal control over financial reporting from $1 billion in total assets to $5 billion in total assets.

Limits on Dividends and Other Payments

There are various legal limitations on the extent to which subsidiary banks may finance or otherwise supply funds to their parent holding company. Under applicable federal and state laws, a subsidiary bank may not, subject to certain limited exceptions, make loans or extensions of credit to, or investments in the securities of, its parent holding company. Subsidiary banks are also subject to collateral security requirements for any loan or extension of credit permitted by such exceptions.

Payments of dividends by the Bank are limited by applicable state and federal laws and regulations. The ability of CSB to obtain funds for the payment of dividends and for other cash requirements is largely dependent on the amount of dividends that may be declared by the Bank. However, the FRB expects CSB to serve as a source of strength for the Bank and may require CSB to retain capital for further investment in the Bank, rather than pay dividends to CSB shareholders. Payment of dividends by the Bank may be restricted at any time at the discretion of its applicable regulatory authorities if they deem such dividends to constitute an unsafe or unsound banking practice. These provisions could have the effect of limiting CSB’s ability to pay dividends on its common shares.

FRB policy requires CSB to provide notice to the FRB in advance of the payment of a dividend to CSB’s shareholders under certain circumstances and states that insured banks and bank holding companies should generally only pay dividends out of current operating earnings. Additionally, the Ohio Revised Code restricts the amount a Bank can dividend if the total amount of all dividends, including the proposed dividend, declared by the Bank in any calendar year exceeds the total of its retained net income of that year to date, combined with its retained net income of the two preceding years, unless the dividend is approved by the Ohio Division of Financial Institutions.

Consumer Protection Laws and Regulations

Banks are subject to regular examination to ensure compliance with federal statutes and regulations applicable to their business, including consumer protection statutes and implementing regulations. The Dodd-Frank Act established the CFPB, which has extensive regulatory and enforcement powers over consumer financial products and services. The CFPB has adopted numerous rules with respect to consumer protection laws, amending some existing regulations and adopting new ones, and has commenced enforcement actions against various parties. The following are just some of the consumer protection laws applicable to the Bank:

•

Equal Credit Opportunity Act: prohibits discrimination in any credit transaction on the basis of any of various criteria.

•

Truth in Lending Act: requires that credit terms are disclosed in a manner that permits a consumer to understand and compare credit terms more readily and knowledgeably.

•

Fair Housing Act: makes it unlawful for a lender to discriminate in its housing-related lending activities against any person on the basis of any of certain criteria.

•

Home Mortgage Disclosure Act: requires financial institutions to collect data that enables regulatory agencies to determine whether the financial institutions are serving the housing credit needs of the communities in which they are located.

•

Real Estate Settlement Procedures Act: requires that lenders provide borrowers with disclosures regarding the nature and cost of real estate settlements and prohibits abusive practices that increase borrowers’ costs.

•

Privacy provisions of the Gramm-Leach-Bliley Act: requires financial institutions to establish policies and procedures to restrict the sharing of non-public customer data with non-affiliated parties and to protect customer information from unauthorized access.

The banking regulators also use their authority under the Federal Trade Commission Act to take supervisory or enforcement action with respect to unfair or deceptive acts or practices by banks that may not necessarily fall within the scope of specific banking or consumer finance law.

Community Reinvestment Act

CRA requires depository institutions to assist in meeting the credit needs of their market areas, including low- and moderate-income areas, consistent with safe and sound banking practice. Under this Act, each institution is required to adopt a statement for each of its market areas describing the depository institution’s efforts to assist in its community’s credit needs. Depository institutions are periodically examined for compliance and assigned one of four ratings: outstanding, satisfactory, needs improvement, or substantial noncompliance. The rating assigned to a financial institution is considered in connection with various applications submitted by a financial institution or its holding company to its banking regulators, including applications to acquire another financial institution or to open a new branch office. In addition, all subsidiary banks of a financial holding company must maintain a satisfactory or outstanding rating in order for the financial holding company to avoid limitations on its activities. The Bank received a rating of “outstanding" in its most recent CRA examination.

Customer Privacy

Under the GLBA, federal banking agencies have adopted rules that limit the ability of banks and other financial institutions to disclose non-public information about consumers to nonaffiliated third parties. These limitations require distribution of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to nonaffiliated third parties.

USA Patriot Act

The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001, as amended (the “Patriot Act”), and related regulations require regulated financial institutions to establish a program specifying procedures for obtaining identifying information from customers seeking to open new accounts and establish enhanced due diligence policies, procedures and controls designed to detect and report suspicious activity.

The Anti-Money Laundering Act of 2020 (the “AMLA”), which amends the Bank Secrecy Act of 1970 (the “BSA”), was enacted in January 2021. The AMLA is intended to be a comprehensive reform and modernization to U.S. bank secrecy and anti-money laundering laws. Among other things, it codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the development of standards for evaluating technology and internal processes for BSA compliance; expands enforcement-related and investigation-related authority, including increasing available sanctions for certain BSA violations and instituting BSA whistleblower initiatives and protections.

The Bank has established policies and procedures to be compliant with the requirements of the Patriot Act and the AMLA.

Office of Foreign Assets Control Regulation

The United States Treasury Department’s Office of Foreign Assets Control (“OFAC”) administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. CSB is responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious financial, legal and reputational consequences, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required. Regulatory authorities have imposed cease and desist orders and civil money penalties against institutions found to be violating these obligations.