Bristol-Myers Squibb Company: 10-K Risk Factor Changes

We derive a majority of our revenue and earnings from several key products. We expect that Revlimid, Eliquis, and Opdivo will represent a significant percentage of our revenue, earnings and cash flows during the next few years. A reduction in revenue from any of these products due to loss of market exclusivity or other factors could adversely impact our earnings and cash flows. For additional information, see “Item 1A. Risk Factors—We could lose market exclusivity of a product earlier than expected.” 29 29 29 Also, if one of our major products were to become subject to issues such as loss of patent protection, significant changes in demand, formulary access changes, material product liability, unexpected side effects, regulatory proceedings, negative publicity, supply disruption from our manufacturing operations or third-party supplier or a significant advancement of competing products, we may incur an adverse impact on our business, financial condition, results of operations or the trading price of our stock. In addition, in the U.S., most of our products are distributed through wholesalers, and if one of these wholesalers should encounter financial or other difficulties, we might be unable to timely collect the amounts that the wholesaler owes us, which could negatively impact our results of operations.

We derive a majority of our revenue and earnings from several key products. We expect that Revlimid, Eliquis, and Opdivo will represent a significant percentage of our revenue, earnings and cash flows during the next few years. A reduction in revenue from any 28 28 28 of these products due to loss of market exclusivity or other factors could adversely impact our earnings and cash flows. For additional information, see “Item 1A. Risk Factors—We could lose market exclusivity of a product earlier than expected.” Also, if one of our major products were to become subject to issues such as loss of patent protection, significant changes in demand, formulary access changes, material product liability, unexpected side effects, regulatory proceedings, negative publicity, supply disruption from our manufacturing operations or third-party supplier or a significant advancement of competing products, we may incur an adverse impact on our business, financial condition, results of operations or the trading price of our stock.

We have entered into several arrangements which entitle us to potential royalties from third parties for out-licensed intellectual property, commercialization rights and sales-based contingent proceeds related to the divestiture of businesses. In many of these arrangements we have minimal, if any, continuing involvement that contribute to the financial success of those activities. Royalties have continued to represent a significant percentage of our pretax income, including royalties related to the divestiture of our diabetes business (including the transfer of certain future royalty rights pertaining to Amylin, Onglyza* and Farxiga* product sales), out-licensed intellectual property and the Merck patent infringement settlement. Pretax income generated from royalties was approximately $2.6 billion in 2023. Our pretax income could be adversely affected if the royalty streams decline in future periods. For example, royalties related to Keytruda* decreased from 6.5% to 2.5% on January 1, 2024 and are expected to terminate on December 31, 2026, and royalties related to Tecentriq* are expected to terminate on December 31, 2026. In addition, our royalties from our divested diabetes business, specifically Amylin, Farxiga and Onglyza, terminate on December 31, 2025.

We have entered into several arrangements which entitle us to potential royalties from third parties for out-licensed intellectual property, commercialization rights and sales-based contingent proceeds related to the divestiture of businesses. In many of these arrangements we have minimal, if any, continuing involvement that contribute to the financial success of those activities. Royalties have continued to represent a significant percentage of our pretax income, including royalties related to the divestiture of our diabetes business (including the transfer of certain future royalty rights pertaining to Amylin, Onglyza* and Farxiga* product sales), out-licensed intellectual property and the Merck patent infringement settlement. Pretax income generated from royalties was approximately $2.5 billion in 2022. Our pretax income could be adversely affected if the royalty streams decline in future periods.

We are subject to income taxes in the U.S. and various other countries globally. Changes in tax laws and regulations can and do occur. Significant judgment is required for determining the Company’s tax liabilities, and the Company’s tax returns are periodically examined by various tax authorities. We have faced, and may continue to face, audit challenges on how we apply a tax law or regulation. The ultimate resolution of any tax matters may result in payments greater or less than amounts accrued, which could have a negative impact on our provision for income taxes. In addition, our future earnings could be negatively impacted by further changes in tax legislation, including changes in tax rates and tax base such as limiting, phasing-out or eliminating deductions or tax credits, increase taxing of certain excess income from intellectual property, revising tax law interpretations in domestic or foreign jurisdictions, changes in rules for earnings repatriations and changes in other tax laws in the U.S. or other countries. Notably, in July and October 2021 OECD/G20 Inclusive Framework agreed on the general rules for redefined jurisdictional taxation rights and a global minimum tax. In December 2022, the EU member states voted unanimously to adopt a Directive implementing the Pillar Two (global minimum tax) rules giving member states until December 31, 2023 to implement the Directive into national legislation. Certain jurisdictions in which we operate, under the OECD/G20 Inclusive Framework, have enacted legislation that adopts a subset of such rules effective January 1, 2024, with the remaining rules becoming effective January 1, 2025. These rules and associated legislative changes may significantly impact our tax provision and results of operations. The implementation of Pillar Two is currently expected to increase our effective tax rate excluding specified items by approximately 1% in 2024.

We are subject to income taxes in the U.S. and various other countries globally. Changes in tax laws and regulations can and do occur. For example, the Tax Cuts and Jobs Act of 2017 (the "TCJA") reduced the U.S. tax rate to 21% and introduced broad and complex changes resulting in numerous new regulations and interpretations. Significant judgment is required for determining the Company’s tax liabilities, and the Company’s tax returns are periodically examined by various tax authorities. We have faced, and may continue to face, audit challenges on how we apply a tax law or regulation. The ultimate resolution of any tax matters may result in payments greater or less than amounts accrued, which could have a negative impact on our provision for income taxes. In addition, our future earnings could be negatively impacted by further changes in tax legislation, including changes in tax rates and tax base such as limiting, phasing-out or eliminating deductions or tax credits, increase taxing of certain excess income from intellectual property, revising tax law interpretations in domestic or foreign jurisdictions, changes in rules for earnings repatriations and changes in other tax laws in the U.S. or other countries. Notably, in July and October 2021 OECD/G20 Inclusive Framework agreed on the general rules for redefined jurisdictional taxation rights and a global minimum tax. In December 2022, the EU member states voted unanimously to adopt a Directive implementing the Pillar 2 (global minimum tax) rules giving member states until December 31, 2023 to implement the Directive into national legislation. Further details regarding implementation of these rules are expected and if implemented could have a material impact on our tax provision and results of operations.

Our products continue to be subject to increasing pressures across the portfolio from pharmaceutical market access and pricing controls, required rebates and other discounts, in the U.S., the EU and other regions around the world that result in lower prices, lower reimbursement rates and smaller populations for whom payers will reimburse. We expect that these market access constraints, pricing controls and discounting and other restrictions will become more acute as public and private payers continue to take aggressive steps to control their expenditures. Our future revenues and profit margins could be negatively affected, including as a result of (i) changes in laws and regulations relating to the pricing and reimbursement of pharmaceutical products (including potential penalties for increasing prices over the rate of inflation, new discounts to fund a redesign of the Medicare Part D benefit, and government negotiations/price controls that may change the determination of the "best price" and establish a maximum allowed price/reimbursement rate), as well as other changes relating to federal healthcare programs, such as modifying the federal Anti-Kickback statute discount safe harbor and the IRA, which includes a number of provisions intended to lower the costs of some drugs covered under Medicare Part D and Medicare Part B and to limit Medicare beneficiaries’ out-of-pocket spending under the Medicare Part D benefit, (ii) cost-cutting measures by federal healthcare programs, such as Medicare and Medicaid, MCOs and other institutional and governmental purchasers, (iii) the grant of additional authority to governmental agencies to manage drug utilization and negotiate drug prices (including the implementation of the 2020 regulation issued by the U.S. federal government authorizing states and private parties to develop and implement programs to import certain prescription drugs from Canada and sell them in the U.S., and the American Rescue Plan Act of 2021, which eliminated the Medicaid Prescription Drug Rebate cap starting January 1, 2024), (iv) expanded utilization under the 340B Drug Pricing Program ("340B program"), (v) competition related to placements on applicable commercial and Medicare Part D formularies; (vi) changes to U.S. federal pharmaceutical coverage and reimbursement policies and practices, (vii) the increased scrutiny of drug manufacturers (including any additional review of BMS or Celgene by the House Oversight and Reform Committee), (viii) reimbursement delays, (ix) government price erosion mechanisms across Europe and in other countries resulting in deflation for pharmaceutical product pricing, (x) the increased purchasing power of entities that negotiate on behalf of Medicare, Medicaid and private sector beneficiaries, (xi) collection delays or failures to pay in government-funded public hospitals outside the U.S., (xii) developments in technology and/or industry practices that could impact the reimbursement policies and practices of third-party payers, and (xiii) inhibited market access due to real or perceived differences in value propositions for our products compared to competing products. In particular, the IRA will have the effect of reducing prices and reimbursements for certain of our products, which could significantly impact our business. Under the IRA, the U.S Department of Health and Human Services can effectively set prices for certain single-source drugs and biologics reimbursed under Medicare Part B and Part D. Generally, these government prices apply nine years (for small molecule drugs) or 13 years (for biological products) following FDA approval and will be capped at a statutory ceiling price that is likely to represent a significant discount from average prices to wholesalers and direct purchasers. In August 2023, the U.S. Department of Health and Human Services selected Eliquis as one of the first 10 medicines subject to government-set prices beginning in 2026. The Medicare price setting process began in February 2024 and will conclude by August 1, 2024. On September 1, 2024, CMS will publish prices that will be applicable to the ten drugs in the Medicare program beginning January 1, 2026. It is possible that more of our products will be selected in future years, which could, among other things, accelerate revenue erosion prior to expiry of intellectual property protections. The IRA also requires drug manufacturers to provide rebates for Medicare Part B and Part D medicines under certain circumstances. The Part D benefit redesign will replace the Part D CGDP with a new manufacturer discount program. Beginning in January 2025, under the IRA, the 70 percent CGDP discount will be replaced by a 10 percent manufacturer discount for all Medicare Part D beneficiaries that have met their deductible and incurred out of pocket drug costs below a $2,000 threshold and a 20 percent discount for beneficiaries that have incurred out of pocket drug costs above the $2,000 threshold under the new Part D benefit redesign. Manufacturers that fail to comply with the IRA may be subject to various penalties, including civil monetary penalties, which could be significant. The IRA has and will continue to meaningfully impact our business strategies and those of others in the pharmaceutical industry. The full impact of the IRA on our business and the pharmaceutical industry, including the implications to us of our or a competitor's product being selected for price setting, remains uncertain. 23 23 23 At the state level, multiple states are pursuing government actions and ballot initiatives to address or limit drug pricing and reimbursement for their Medicaid programs. These initiatives include attempts to use the IRA's referenced drug price at the state level. Some of these state-level proposals may also influence federal policy and legislation. Given the uncertainty surrounding the adoption and timing of these potential legislative, policy, or administrative changes, we are unable to predict their impact on our business. However, if enacted, these changes could modify or decrease access, coverage, or reimbursement of our products, impact our rebates, or shift costs to us, which could in turn have a material impact on our business and results of operations. Additionally, manufacturers who are found to have knowingly and intentionally overcharged 340B program covered entities could be subject to significant monetary penalties. Over the course of the past few years, Celgene had received inquiries from Human Resources and Services Administration regarding the limited distribution networks for Revlimid, Pomalyst, and Thalomid and compliance with the 340B program. As part of our broader integration strategy and alignment of our distribution model (post our acquisition of Celgene Corporation) we had announced that beginning March 1, 2022, we would recognize up to two designated 340B program contract pharmacy locations per 340B program hospital that lacks an entity-owned pharmacy. Although we believe that we have complied with, and continue to comply with, all applicable legal requirements, additional legal or legislative changes with respect to the 340B program may cause us to update our approach. Significant changes to our sales or pricing practices with regard to the distribution of drugs under the 340B program, or any material changes in our U.S. payer channel mix, could have an adverse effect on our revenues and profitability. In addition, if we are required to pay penalties under the applicable regulations, there would be an adverse effect on our revenues and profitability. For additional information on pricing pressures and other constraints, refer to “Item 1. Business—Pricing, Price Constraints and Market Access.”

Our products continue to be subject to increasing pressures across the portfolio from pharmaceutical market access and pricing controls, required rebates and other discounts, in the U.S., the EU and other regions around the world that result in lower prices, lower reimbursement rates and smaller populations for whom payers will reimburse. We expect that these market access constraints, pricing controls and discounting and other restrictions will become more acute as public and private payers continue to take aggressive steps to control their expenditures. Our future revenues and profit margins could be negatively affected, including as a result of (i) changes in laws and regulations relating to the pricing and reimbursement of pharmaceutical products (including potential penalties for increasing prices over the rate of inflation, new discounts to fund a redesign of the Medicare Part D benefit, government negotiations/price controls that may establish a maximum allowed price/reimbursement rate), as well as other changes relating to federal healthcare programs, such as modifying the federal Anti-Kickback statute discount safe harbor and the IRA, which includes a number of provisions intended to lower the costs of some drugs covered under Medicare Part D and Medicare Part B and to limit Medicare beneficiaries’ out-of-pocket spending under the Medicare Part D benefit, (ii) cost-cutting measures by federal healthcare programs, such as Medicare and Medicaid, MCOs and other institutional and governmental purchasers, (iii) the grant of additional authority to governmental agencies to manage drug utilization and negotiate drug prices (including the implementation of the 2020 regulation issued by the U.S. federal government authorizing states and private parties to develop and implement programs to import certain prescription drugs from Canada and sell them in the U.S., and the American Rescue Plan Act of 2021, which eliminates the Medicaid Prescription Drug Rebate cap starting January 1, 2024), (iv) expanded utilization under the 340B Drug Pricing Program ("340B program"), (v) competition related to placements on applicable commercial and Medicare Part D formularies; (vi) changes to U.S. federal pharmaceutical coverage and reimbursement policies and practices, (vii) the increased scrutiny of drug manufacturers (including any additional review of BMS or Celgene by the House Oversight and Reform Committee), (viii) reimbursement delays, (ix) government price erosion mechanisms across Europe and in other countries resulting in deflation for pharmaceutical product pricing, (x) the increased purchasing power of entities that negotiate on behalf of Medicare, Medicaid and private sector beneficiaries, (xi) collection delays or failures to pay in government-funded public hospitals outside the U.S., (xii) developments in technology and/or industry practices that could impact the reimbursement policies and practices of third-party payers, and (xiii) inhibited market access due to real or perceived differences in value propositions for our products compared to competing products. Additionally, manufacturers who are found to have knowingly and intentionally overcharged 340B program covered entities could be subject to significant monetary penalties. Over the course of the past few years, Celgene had received inquiries from Human Resources and Services Administration regarding the limited distribution networks for Revlimid, Pomalyst, and Thalomid and compliance with the 340B program. As part of our broader integration strategy and alignment of our distribution model (post our acquisition of Celgene Corporation) we had announced that beginning March 1, 2022, we would recognize up to two designated 340B program contract pharmacy locations per 340B program hospital that lacks an entity-owned pharmacy. Although we believe that we have complied with, and continue to comply with, all applicable legal requirements, additional legal or legislative changes with respect to the 340B program may cause us to update our approach. Significant changes to our sales or pricing practices with regard to the distribution of drugs under the 340B program, or any material changes in our U.S. payer channel mix, could have an adverse effect on our revenues and profitability. In addition, if we are required to pay penalties under the applicable regulations, there would be an adverse effect on our revenues and profitability. For additional information on pricing pressures and other constraints, refer to “Item 1. Business—Pricing, Price Constraints and Market Access.”

Our acquisitions of Celgene, MyoKardia and Mirati increased the amount of our debt resulting in additional interest expense, and we intend to incur more debt to finance future acquisitions, including the Karuna and RayzeBio acquisitions. This could reduce our financial flexibility to continue capital investments, develop new products and declare future dividends. For example, following the announcements of recent acquisitions, Standard & Poor’s downgraded BMS’s long term-credit rating from A+ to A (with a stable long-term credit outlook).

Our acquisitions of Celgene and MyoKardia increased the amount of our debt resulting in additional interest expense. This could reduce our financial flexibility to continue capital investments, develop new products and declare future dividends.

We are currently subject to a number of government laws and regulations and, in the future, could become subject to new government laws and regulations. The costs of compliance with such laws and regulations, or the negative results of non-compliance, could adversely affect our business, our operating results and the financial condition of our Company. These laws and regulations control and regulate key aspects of our business including but not limited to (i) market access, pricing controls and discounting; (ii) tax liabilities, returns and payments; (iii) imports and other trade restrictions; (iv) intellectual property protection and enforcement; (v) good practice guidelines and regulations; (vi) accounting standards; (vii) data storage and privacy, particularly in the EU and the U.S.; (viii) requirements for reporting payments and other value transfers to healthcare professionals (such as those provided under the Federal Anti-Kickback Statute); and (ix) compliance with anti-bribery and anti-corruption practices of the U.S. and other countries. In addition, the U.S. healthcare industry is highly regulated and subject to frequent and substantial changes, including as a result of new judicial or governmental decisions. For example, Congress passed the Food and Drug Omnibus Reform Act in December 2022, which gave the U.S. FDA additional authority to require confirmatory trials to be underway at the time of approval and offered an additional enforcement mechanism if sponsors do not complete such studies with due diligence. We cannot predict how other future federal or state legislative or administrative changes relating to healthcare reform will affect our business. For additional information, refer to “Item 1. Business—Government Regulation,” “Item 1. Business—Pricing, Price Constraints and Market Access” and “—Adverse outcomes in legal matters could negatively affect our business.” Similarly, the legislative and regulatory environment regarding privacy and data protection is continuously evolving and the subject of significant attention by regulators and private parties globally. Regulators are imposing new data privacy and security requirements, including new and greater monetary fines or penalties for privacy violations, and jurisdictions where we operate have passed, or continue to propose, data privacy legislation and or regulations. Failure to comply with these current and future laws could result in significant penalties and reputational harm and could have a material adverse effect on our business and results of operations.

We are currently subject to a number of government laws and regulations and, in the future, could become subject to new government laws and regulations. The costs of compliance with such laws and regulations, or the negative results of non-compliance, could adversely affect our business, our operating results and the financial condition of our Company. These laws and regulations control and regulate key aspects of our business including but not limited to (i) market access, pricing controls and discounting; (ii) tax liabilities, returns and payments; (iii) imports and other trade restrictions; (iv) intellectual property protection and enforcement; (v) good practice guidelines and regulations; (vi) accounting standards; (vii) data storage and privacy, particularly in the EU and the U.S.; (viii) requirements for reporting payments and other value transfers to healthcare professionals (such as those provided under the Federal Anti-Kickback Statute); and (ix) compliance with anti-bribery and anti-corruption practices of the U.S. and other countries. In addition, the U.S. healthcare industry is highly regulated and subject to frequent and substantial changes, including as a result of new judicial or governmental decisions. For example, the U.S. FDA has indicated it is undertaking an industry-wide review of indications that received accelerated approval and for which the confirmatory studies did not meet their primary endpoints. Also, we anticipate continued U.S. congressional interest in modifying provisions of the Patient Protection and Affordable Care Act (the “ACA”), particularly given its numerous legal challenges (such as the California v. Texas case) and polarized public support. The 26 26 26 revenues that we generate by the health insurance exchanges and Medicaid expansion under the ACA are not material, so the impact of the change in law and similar recent administration actions is expected to be limited. Any future replacement, modification or repeal of the ACA may adversely affect our business and financial results, particularly if the legislation reduces incentives for employer-sponsored insurance coverage. We cannot predict how other future federal or state legislative or administrative changes relating to healthcare reform will affect our business. For additional information, refer to “Item 1. Business—Government Regulation” and “Item 1. Business—Pricing, Price Constraints and Market Access.”

We rely extensively on information technology systems, networks and services, including internet sites, data hosting and processing facilities and tools, physical security systems and other hardware, software and technical applications and platforms, some of which are managed, hosted, provided by and/or used for third parties or their vendors, to assist in conducting our business. We have faced, and will continue to face, risks of incidents, whether through cyber attacks or cyber intrusions through the Cloud, the Internet, phishing attempts, ransomware and other forms of malware, computer viruses, email attachments, extortion, and other scams. Although we make efforts to maintain the security and integrity of our information technology systems, these systems and the proprietary, confidential and personal information that resides on or is transmitted through them, are subject to the risk of a cybersecurity incident or disruption, and there can be no assurance that our security efforts and measures, and those of our third-party vendors, will prevent breakdowns or incidents to our or our third-party vendors’ systems that could adversely affect our business strategy, results of operations, or financial condition. Cybersecurity risks continue to develop, including as a result of threat actors increasingly targeting employees and supply chains and geopolitical tensions leading to an increase in sabotage, espionage and cyber attacks. As the cyber-threat landscape evolves, these attacks are growing in frequency, sophistication and intensity, and due to the nature of some of these attacks, there is also a risk that they may remain undetected for a period of time. A significant breakdown, invasion, corruption, destruction or interruption of critical information technology systems or leak or theft of proprietary, confidential or personal information could negatively impact operations. There can be no assurance that our continuing efforts will prevent breakdowns or incidents to our or our third-party providers’ systems or databases that could adversely affect our business. Under certain circumstances, such incidents when detected could require disclosure to government authorities and/or regulators and could require notification to impacted individuals and any such incident could result in material financial, legal, business and reputational harm to us.

We rely extensively on information technology systems, networks and services, including internet sites, data hosting and processing facilities and tools, physical security systems and other hardware, software and technical applications and platforms, some of which are managed, hosted, provided and/or used for third-parties or their vendors, to assist in conducting our business. A significant breakdown, invasion, corruption, destruction or interruption of critical information technology systems or infrastructure, by our workforce, others with authorized access to our systems or unauthorized persons could negatively impact operations. The ever-increasing use and evolution of technology, including cloud-based computing, creates opportunities for the unintentional dissemination or intentional destruction or modification of confidential information stored in our, or our third-party providers’ systems, portable media or storage devices. We could also experience a business interruption, theft of confidential information or reputational damage from industrial espionage attacks, malware or other cyber-attacks, which may compromise our system infrastructure or lead to data leakage, either internally or at our third-party providers. As the COVID-19 pandemic progressed, we observed an increase in cybersecurity incidents across the industry, predominantly ransomware and social engineering attacks. Further, government entities have also been the subject of cyberattacks. As the cyber-threat landscape evolves, these attacks are growing in frequency, sophistication and intensity, and due to the nature of some of these attacks, there is also a risk that they may remain undetected for a period of time. Although the aggregate impact of cybersecurity breaches and data leakage on our operations and financial condition have not been material to date, we have been the target of cyber-attacks and expect them to continue as cybersecurity threats have been rapidly evolving in sophistication and becoming more prevalent in the industry. We have invested in industry-appropriate protections and monitoring practices of our data and IT to reduce these risks and continue to monitor our systems on an ongoing basis for any current or potential threats. While we maintain cyber insurance, this insurance may not, however, be sufficient to cover the financial, legal, business or reputational losses that may result from an interruption or breach of our systems. There can be no assurance that our continuing efforts will prevent breakdowns or breaches to our or our third-party providers’ databases or systems that could adversely affect our business.