Centene Corporation: 10-K Risk Factor Changes

Operations in a number of states have accounted for a significant portion of our premium revenues to date. If we were unable to continue to operate in any of those states or if our current operations in any portion of one of those states were significantly curtailed, our revenues could decrease materially. For example, as part of the normal course of business, several of our Medicaid contracts are up for reprocurement in 2024 (for contracts largely commencing in 2025), including but not limited to Florida, Georgia, a portion of our business in Texas and Michigan. Our reliance on operations in a limited number of states could cause our revenues and profitability to change suddenly and unexpectedly depending on legislative or other governmental or regulatory actions and decisions or changes in governmental administrations, economic conditions and similar factors in those states. Government entities in states we currently serve could open the bidding for their Medicaid or other healthcare programs to other health insurers through a request for proposal process. For example, as a result of Medicaid reprocurement process in California, in January 2024 our subsidiary, Health Net of California, began subcontracting a portion of its Medicaid membership in Los Angeles, which reduced our membership compared to December 2023. Reductions in our service area or services provided in any of the states in which we operate could harm our business.

Operations in a number of states have accounted for a significant portion of our premium revenues to date. If we were unable to continue to operate in any of those states or if our current operations in any portion of one of those states were significantly curtailed, our revenues could decrease materially. Our reliance on operations in a limited number of states could cause our revenues and profitability to change suddenly and unexpectedly depending on legislative or other governmental or regulatory actions and decisions, economic conditions, and similar factors in those states. Government entities in states we currently serve may open the bidding for their Medicaid or other healthcare programs to other health insurers through a request for proposal process. For example, our subsidiary, Health Net of California, was selected by the California DHCS for direct Medicaid contracts in 10 counties, including Los Angeles (in which a portion will be subcontracted). The contracts are anticipated to begin in January 2024. Reductions in our service area or services provided in any of the states in which we operate could harm our business.

From time to time, we are a defendant in lawsuits and regulatory actions and are subject to investigations relating to our business, including, without limitation, medical malpractice claims; claims by members and providers alleging failure to timely and accurately pay for or provide healthcare; claims related to non-payment or insufficient payments for out-of-network services; claims related to network adequacy; claims alleging bad faith; compliance with CMS Medicare and Marketplace regulations, including risk adjustment and broker compensation; claims related to the False Claims Act, the calculation of minimum MLR and rebates related thereto, claims related to privacy, intellectual property and vendor disputes; investigations regarding our submission of risk adjuster claims; putative securities class actions; protests and appeals related to Medicaid procurement awards; cybersecurity issues, including those related to our or our third-party vendors' information systems; employment-related disputes, including wage and hour claims; submissions to state agencies related to payments or state false claims acts, preauthorization penalties, timely review of grievance and appeals; and claims related to the imposition of new taxes, including but not limited to claims that may have retroactive application. For example, several states have made claims related to services previously provided by Envolve, which historically provided PBM and specialty pharmacy services, including among other things, (i) claims seeking payment for services already reimbursed, (ii) claims alleging the failure to accurately disclose the true cost of the PBM services and (iii) claims alleging inflation of dispensing fees for prescription drugs. For additional information, see Note 17. Contingencies to the consolidated financial statements included in Part II of this Annual Report on Form 10-K. Additional claims, reviews or investigations may be brought by other states, the federal government or shareholder litigants, and there is no guarantee we will have the ability to settle such claims with other states within the reserve estimate we have recorded, on other acceptable terms, or at all. Although we maintain some third-party insurance coverage, including excess liability insurance with third-party insurance carriers, certain liabilities or types of damages, such as punitive damages, may not be covered by insurance, insurers may dispute coverage or the amount of insurance may be insufficient to cover the entire damages awarded. In addition, regardless of the outcome of any litigation or regulatory proceedings, such proceedings are costly and time-consuming and require significant attention from our management and could therefore have a material adverse effect on our business and financial condition, results of operations or cash flows. 31 31 31 Table of Contents Table of Contents

From time to time, we are a defendant in lawsuits and regulatory actions and are subject to investigations relating to our business, including, without limitation, medical malpractice claims, claims by members alleging failure to pay for or provide healthcare, claims related to non-payment or insufficient payments for out-of-network services, claims related to network adequacy, claims alleging bad faith, investigations regarding our submission of risk adjuster claims, putative securities class actions, protests and appeals related to Medicaid procurement awards, cybersecurity issues, including those related to our or our third-party vendors' information systems; employment-related disputes, including wage and hour claims, submissions to state agencies related to payments or state false claims acts and claims related to the imposition of new taxes, including but not limited to claims that may have retroactive application. For example, several states have made claims related to services previously provided by Envolve, which historically provided PBM and specialty pharmacy services, including among other things, (i) seeking payment for services already reimbursed, (ii) not accurately disclosing the true cost of the PBM services and (iii) inflating dispensing fees for prescription drugs. For additional information, see Note 18. Contingencies to the consolidated financial statements included in Part II of this Annual Report on Form 10-K. Additional claims, reviews, or investigations may be brought by other states, the federal government, or shareholder litigants, and there is no guarantee we will have the ability to settle such claims with other states within the reserve estimate we have recorded, on other acceptable terms, or at all. In addition, regardless of the outcome of any litigation or regulatory proceedings, such proceedings are costly and time-consuming and require significant attention from our management, and could therefore have a material adverse effect on our business and financial condition, results of operations, or cash flows.

The majority of our revenues come from government subsidized healthcare programs including Medicaid, Medicare, TRICARE, CHIP, LTSS, ABD, Foster Care and Health Insurance Marketplace premiums. Changes in these programs could change the number of persons enrolled in or eligible for these programs and increase our administrative and healthcare costs under these programs. For example, due to the declaration of the end of the public health emergency (PHE) and the subsequent expiration of the eligibility determination waivers, we expect the resumption of the Medicaid eligibility redeterminations to significantly reduce our membership in our Medicaid programs. We do not expect to fully offset the loss of this membership by increased enrollment in our Health Insurance Marketplace products. States may decide to reduce reimbursement or reduce benefits in order for states to afford to maintain or increase eligibility levels. If any state in which we operate were to decrease premiums paid to us or pay us less than the amount necessary to keep pace with our cost trends, it could have a material adverse effect on our results of operations, financial condition and cash flows. 27 27 27 Table of Contents Table of Contents Under most of these programs, the base premium rate paid for each program differs, depending on a combination of factors such as defined upper payment limits, a member's health status, age, gender, county or region and benefit mix. Since Medicaid was created in 1965, the federal government and states have shared the costs for this program, with the federal government share currently averaging approximately 60%. We are therefore exposed to risks associated with federal and state government contracting or participating in programs involving a government payor, including but not limited to the general ability of the federal and/or state governments to terminate or modify contracts with them, in whole or in part, without prior notice, for convenience or for default based on performance; potential regulatory or legislative action that may materially modify amounts owed; our dependence upon Congressional or legislative appropriation and allotment of funds and the impact that delays in government payments could have on our operating cash flow and liquidity; responses to pandemics, resurgences and new emergent diseases and other regulatory, legislative or judicial actions that may have an impact on the operations of government subsidized healthcare programs including ongoing litigation involving the ACA. For example, future levels of funding and premium rates may be affected by continuing government efforts to contain healthcare costs and may further be affected by state and federal budgetary constraints. Governments periodically consider reducing or reallocating the amount of money they spend for Medicaid, Medicare, TRICARE, CHIP, LTSS, ABD and Foster Care. Additionally, as a result of the CMS Medicare Advantage 2024 rate decrease, combined with our quality scores, we have established a premium deficiency reserve in connection with the 2024 Medicare Advantage business as of December 31, 2023. Furthermore, Medicare remains subject to the automatic spending reductions imposed by the Budget Control Act of 2011 and the American Taxpayer Relief Act of 2012 (sequestration), subject to a 2% cap, which was extended by the Bipartisan Budget Act of 2019 through 2029, which was reinstated on July 1, 2022, after a temporary suspension due to the COVID pandemic. The IRA enacts significant changes to the Medicare Part D program beginning on January 1, 2025. These changes create additional uncertainty for 2025 Medicare Part D bids, including their profitability and the competitive market landscape. If our future Part D premium bids are not profitable or below the CMS benchmarks or competitors price their products with significantly lower premiums, membership, revenue and profitability of this product could be materially reduced, which in turn could have a material adverse effect on our results of operations and financial conditions. In addition, proposed CMS regulations may require beneficiaries dually enrolled in Medicare and Medicaid to receive integrated care through Medicare Advantage D-SNPs, which may restrict our product offerings in some geographic service areas. In addition, reductions in defense spending could have an adverse impact on certain government programs in which we currently participate by, among other things, terminating or materially changing such programs, or by decreasing or delaying payments made under such programs. Adverse economic conditions may put pressures on state budgets as tax and other state revenues decrease while the population that is eligible to participate in these programs remains steady or increases, creating more need for funding. We anticipate this will require government agencies to find funding alternatives, which may result in reductions in funding for programs, contraction of covered benefits and limited or no premium rate increases or premium rate decreases. A reduction (or less than expected increase), a protracted delay or a change in allocation methodology in government funding for these programs, as well as termination of one or more contracts for the convenience of the government, may materially and adversely affect our results of operations, financial condition and cash flows. Also, if legislation increasing the federal debt ceiling is not enacted and the debt ceiling is reached, the federal government may stop or delay making payments on its obligations. In addition, if another federal government shutdown were to occur for a prolonged period of time, federal government payment obligations, including its obligations under Medicaid, Medicare, TRICARE, CHIP, LTSS, ABD, Foster Care and the Health Insurance Marketplace, may be delayed. Similarly, if state government shutdowns were to occur, state payment obligations may be delayed. If the federal or state governments fail to make payments under these programs on a timely basis, our business could suffer, and our financial condition, results of operations or cash flows may be materially affected. Payments from government payors may be delayed in the future, which, if extended for any significant period of time, could have a material adverse effect on our results of operations, financial condition, cash flows or liquidity. In addition, delays in obtaining, or failure to obtain or maintain, governmental approvals, or moratoria imposed by regulatory authorities, could adversely affect our revenues or membership, increase costs or adversely affect our ability to bring new products to market as forecasted. Other changes to our government programs could affect our willingness or ability to participate in any of these programs or otherwise have a material adverse effect on our business, financial condition or results of operations. 28 28 28 Table of Contents Table of Contents

The majority of our revenues come from government subsidized healthcare programs including Medicaid, Medicare, TRICARE, CHIP, LTSS, ABD, Foster Care, and Health Insurance Marketplace premiums. Changes in these programs could change the number of persons enrolled in or eligible for these programs and increase our administrative and healthcare costs under these programs. For example, we currently expect Medicaid eligibility redeterminations, which have been suspended as a result of COVID-19, to begin on April 1, 2023, which we expect to significantly reduce our membership in our Medicaid programs. We may not be able to offset the loss of this membership by increased enrollment in our Health Insurance Marketplace products. Maintaining current eligibility levels could cause states to reduce reimbursement or reduce benefits in order for states to afford to maintain eligibility levels. If any state in which we operate were to decrease premiums paid to us or pay us less than the amount necessary to keep pace with our cost trends, it could have a material adverse effect on our results of operations, financial condition, and cash flows. Under most of these programs, the base premium rate paid for each program differs, depending on a combination of factors such as defined upper payment limits, a member's health status, age, gender, county or region, and benefit mix. Since Medicaid was created in 1965, the federal government and the states have shared the costs for this program, with the federal share currently averaging approximately 60%. We are therefore exposed to risks associated with federal and state government contracting or participating in programs involving a government payor, including but not limited to the general ability of the federal and/or state governments to terminate or modify contracts with them, in whole or in part, without prior notice, for convenience or for default based on performance; potential regulatory or legislative action that may materially modify amounts owed; our dependence upon Congressional or legislative appropriation and allotment of funds and the impact that delays in government payments could have on our operating cash flow and liquidity; and other regulatory, legislative or judicial actions that may have an impact on the operations of government subsidized healthcare programs including ongoing litigation involving the ACA. For example, future levels of funding and premium rates may be affected by continuing government efforts to contain healthcare costs and may further be affected by state and federal budgetary constraints. Governments periodically consider reducing or reallocating the amount of money they spend for Medicaid, Medicare, TRICARE, CHIP, LTSS, ABD, and Foster Care. Furthermore, Medicare remains subject to the automatic spending reductions imposed by the Budget Control Act of 2011 and the American Taxpayer Relief Act of 2012 (sequestration), subject to a 2% cap, which was extended by the Bipartisan Budget Act of 2019 through 2029. The Coronavirus Aid, Relief, and Economic Security Act of 2020 temporarily suspended the Medicare sequestration for the period of May 1, 2020 through December 31, 2020, while also extending the mandatory sequestration policy by an additional one year, through 2030. The Bipartisan-Bicameral Omnibus COVID Relief Deal passed in December 2020 further extended the suspension of the Medicare sequestration until March 31, 2021, and the Protecting Medicare and American Farmers from Sequester Cuts Act passed in December 2021 extended the sequester through March 31, 2022 and adjusted the sequester to 1% for the period between April 1, 2022 and June 30, 2022. 25 25 25 Table of Contents Table of Contents In addition, reductions in defense spending could have an adverse impact on certain government programs in which we currently participate by, among other things, terminating or materially changing such programs, or by decreasing or delaying payments made under such programs. Adverse economic conditions may put pressures on state budgets as tax and other state revenues decrease while the population that is eligible to participate in these programs remains steady or increases, creating more need for funding. We anticipate this will require government agencies to find funding alternatives, which may result in reductions in funding for programs, contraction of covered benefits, and limited or no premium rate increases or premium rate decreases. A reduction (or less than expected increase), a protracted delay, or a change in allocation methodology in government funding for these programs, as well as termination of one or more contracts for the convenience of the government, may materially and adversely affect our results of operations, financial condition, and cash flows. As has been widely reported, the United States Treasury Secretary has stated that the federal government may not be able to meet its debt payments in the relatively near future unless the federal debt ceiling is raised. If legislation increasing the debt ceiling is not enacted and the debt ceiling is reached, the federal government may stop or delay making payments on its obligations, or if another federal government shutdown were to occur for a prolonged period of time, federal government payment obligations, including its obligations under Medicaid, Medicare, TRICARE, CHIP, LTSS, ABD, Foster Care, and the Health Insurance Marketplace, may be delayed. Similarly, if state government shutdowns were to occur, state payment obligations may be delayed. If the federal or state governments fail to make payments under these programs on a timely basis, our business could suffer, and our financial condition, results of operations, or cash flows may be materially affected. Payments from government payors may be delayed in the future, which, if extended for any significant period of time, could have a material adverse effect on our results of operations, financial condition, cash flows or liquidity. In addition, delays in obtaining, or failure to obtain or maintain, governmental approvals, or moratoria imposed by regulatory authorities, could adversely affect our revenues or membership, increase costs or adversely affect our ability to bring new products to market as forecasted. Other changes to our government programs could affect our willingness or ability to participate in any of these programs or otherwise have a material adverse effect on our business, financial condition, or results of operations.

The enactment of the ACA in March 2010 transformed the U.S. healthcare delivery system through a series of complex initiatives; however, the ACA has faced, and continues to face, administrative, judicial and legislative challenges to repeal or change certain of its significant provisions. Changes to portions or the entirety of the ACA, as well as judicial interpretations in response to constitutional and other legal challenges, as well as the uncertainty generated by such actual or potential challenges, could materially and adversely affect our business and financial condition, results of operations or cash flows. The ultimate content, timing or effect of any potential future legislation or litigation and the outcome of other lawsuits cannot be predicted. Among the most significant of the ACA's provisions was the establishment of the Health Insurance Marketplace for individuals and small employers to purchase health insurance coverage that included a minimum level of benefits and restrictions on coverage limitations and premium rates, as well as the expansion of Medicaid coverage to all individuals under age 65 with incomes up to 138% of the federal poverty level beginning January 1, 2014, subject to each state's election. The HHS additionally indicated that it would consider a limited number of premium assistance demonstration proposals from states that want to privatize Medicaid expansion. Several states in which we operate have obtained Section 1115 waivers to implement the ACA's Medicaid expansion in ways that extend beyond the flexibility provided by the federal law, with additional states pursuing Section 1115 waivers regarding eligibility criteria, benefits, and cost-sharing, and provider payments across their Medicaid programs. Litigation challenging Section 1115 waiver activity for both new and previously approved waivers is expected to continue both through administrative actions and the courts. The enhanced eligibility for the advance premium tax credit for Marketplace members that was extended by the Inflation Reduction Act expires December 31, 2025. If this credit is not renewed or extended, or if eligibility for this credit is limited, it could materially adversely impact our Marketplace membership. Additionally, the U.S. Department of Labor issued a final rule on June 19, 2018, which expanded flexibility regarding the regulation and formation of association health plans (AHPs) provided by small employer groups and associations. On June 13, 2019, the HHS, the U.S. Department of Labor and the U.S. Treasury issued a final rule allowing employers of all sizes that do not offer a group coverage plan to fund a new kind of health reimbursement arrangement (HRA), known as an individual coverage HRA (ICHRA). Beginning January 1, 2020, employees became able to use employer-funded ICHRAs to buy individual-market insurance, including insurance purchased on the public exchanges formed under the ACA. It remains uncertain whether or when the current or future administrations will propose changes to restrict these insurance plan options that are not required to meet ACA requirements, and what the impact of such potential changes may be. These changes and other potential changes involving the functioning of the Health Insurance Marketplace as a result of additional new state and federal legislation, regulation, executive action or litigation, including those related to extending enrollment periods, increasing eligibility in the program design, changing the eligibility and amount of the advanced premium tax credit and expanding navigator services, could impact our business and results of operations adversely or in other ways that we do not currently anticipate.

The enactment of the ACA in March 2010 transformed the U.S. healthcare delivery system through a series of complex initiatives; however, the ACA has faced, and continues to face, administrative, judicial and legislative challenges to repeal or change certain of its significant provisions. Changes to portions or the entirety of the ACA, as well as judicial interpretations in response to constitutional and other legal challenges, as well as the uncertainty generated by such actual or potential challenges, could materially and adversely affect our business and financial condition, results of operations or cash flows. The ultimate content, timing, or effect of any potential future legislation or litigation and the outcome of other lawsuits cannot be predicted. Among the most significant of the ACA's provisions was the establishment of the Health Insurance Marketplace for individuals and small employers to purchase health insurance coverage that included a minimum level of benefits and restrictions on coverage limitations and premium rates, as well as the expansion of Medicaid coverage to all individuals under age 65 with incomes up to 138% of the federal poverty level beginning January 1, 2014, subject to each state's election. The HHS additionally indicated that it would consider a limited number of premium assistance demonstration proposals from states that want to privatize Medicaid expansion. Several states in which we operate have obtained Section 1115 waivers to implement the ACA's Medicaid expansion in ways that extend beyond the flexibility provided by the federal law, with additional states pursuing Section 1115 waivers regarding eligibility criteria, benefits, and cost-sharing, and provider payments across their Medicaid programs. Litigation challenging Section 1115 waiver activity for both new and previously approved waivers is expected to continue both through administrative actions and the courts. There have been significant efforts from the previous administration to repeal or amend certain provisions of the ACA through changes in regulations. Such initiatives included repeal of the individual mandate effective in 2019, as well as easing the regulatory restrictions placed on short-term health plans and association health plans (AHPs), which plans often provide fewer benefits than the traditional ACA insurance benefits. Additionally, the U.S. Department of Labor issued a final rule on June 19, 2018, which expanded flexibility regarding the regulation and formation of AHPs provided by small employer groups and associations. On June 13, 2019, the HHS, the U.S. Department of Labor, and the U.S. Treasury issued a final rule allowing employers of all sizes that do not offer a group coverage plan to fund a new kind of health reimbursement arrangement (HRA), known as an individual coverage HRA (ICHRA). Beginning January 1, 2020, employees became able to use employer-funded ICHRAs to buy individual-market insurance, including insurance purchased on the public exchanges formed under the ACA. 26 26 26 Table of Contents Table of Contents It remains uncertain whether or when the current administration will propose changes to restrict these insurance plan options that are not required to meet ACA requirements, and what the impact of such potential changes may be. The constitutionality of the ACA itself continues to face judicial challenge. The ultimate content, timing or effect of any potential future legislation or litigation and the outcome of other lawsuits cannot be predicted and may be delayed as a result of court closures and reduced court dockets as a result of the COVID-19 pandemic. In contrast to previous executive and legislative efforts to restrict or limit certain provisions of the ACA, the American Rescue Act, enacted on March 11, 2021, contained provisions aimed at leveraging Medicaid and the Health Insurance Marketplace to expand health insurance coverage and affordability to consumers. The American Rescue Act authorized an additional $1.9 trillion in federal spending to address the COVID-19 public health emergency (PHE), and contained several provisions designed to increase coverage of certain healthcare services, expand eligibility and benefits, incentivize state Medicaid expansion, and adjust federal financing for state Medicaid programs, the ultimate impact of which remain uncertain. The American Rescue Act enhanced eligibility for the advance premium tax credit for certain enrollees in the Health Insurance Marketplace. The Inflation Reduction Act, enacted on August 16, 2022, extended the enhanced eligibility for the advance premium tax credit for Marketplace members through the 2025 tax year. These changes and other potential changes involving the functioning of the Health Insurance Marketplace as a result of additional new legislation, regulation, executive action, or litigation, including those related to extending enrollment periods, increasing eligibility in the program design, changing the eligibility and amount of the advanced premium tax credit and expanding navigator services, could impact our business and results of operations adversely or in other ways that we do not currently anticipate.

The market price of our common stock is generally subject to volatility, and there can be no assurances regarding the level or stability of our share price at any time. The market price of our common stock may decline as a result of previous or future acquisitions and divestitures if, among other things, we are unable to achieve the expected cost and revenue synergies or growth in earnings, the operational cost savings estimates are not realized as rapidly or to the extent anticipated, the transaction costs related to the acquisitions or divestitures are greater than expected or if any financing related to the transactions is on unfavorable terms. The market price of our common stock also may decline if we do not achieve the perceived benefits of such acquisitions and divestitures as rapidly or to the extent anticipated by financial or industry analysts or if the effect of the acquisitions and divestitures on our financial condition, results of operations or cash flows is not consistent with the expectations of financial or industry analysts. 34 34 34 Table of Contents Table of Contents

The market price of our common stock is generally subject to volatility, and there can be no assurances regarding the level or stability of our share price at any time. The market price of our common stock may decline as a result of acquisitions and divestitures if, among other things, we are unable to achieve the expected cost and revenue synergies or growth in earnings, the operational cost savings estimates are not realized as rapidly or to the extent anticipated, the transaction costs related to the acquisitions or divestitures are greater than expected or if any financing related to the transactions is on unfavorable terms. The market price also may decline if we do not achieve the perceived benefits of the acquisitions and divestitures as rapidly or to the extent anticipated by financial or industry analysts or if the effect of the acquisitions and divestitures on our financial condition, results of operations, or cash flows is not consistent with the expectations of financial or industry analysts. 31 31 31 Table of Contents Table of Contents

A significant portion of our PDP membership is obtained from the auto-assignment of beneficiaries in CMS-designated regions where our PDP premium bids are below benchmarks of other plans' bids. In general, our premium bids are based on assumptions regarding PDP membership, utilization, drug costs, drug rebates and other factors for each region. Our 2024 PDP bids resulted in 30 of the 34 CMS regions in which we were below the benchmarks and 4 regions in which we were within the de minimis range, largely consistent with our 2023 PDP bids. As of January 1, 2024, we experienced an increase of 1.7 million PDP members compared to December 2023, due to our 2024 bid positioning. If our future Part D premium bids are not below the CMS benchmarks, we risk losing PDP members who were previously assigned to us and we may not have additional PDP members auto-assigned to us, which could materially reduce our revenue. 21 21 21 Table of Contents Table of Contents The Inflation Reduction Act (IRA) is expected to substantially increase PDP's risk exposure in 2025. Under IRA, PDP plan costs will increase significantly due to a reduction in members cost share (close of coverage gap, and the $2,000 cap on member out of pocket expenses) and a decrease in federal reinsurance (from 80% to 20%, while a greater portion of the plan drug costs will fall into the catastrophic phase). In the meantime, Part D risk sharing program thresholds would be applied to the increased Part D plan costs, so the plan cost at risk will be much greater before any risk sharing kicks in. These changes may lead to heightened underwriting risks and increased market volatility and uncertainty for 2025 bids, which could materially reduce our revenue and profit.

A significant portion of our PDP membership is obtained from the auto-assignment of beneficiaries in CMS-designated regions where our PDP premium bids are below benchmarks of other plans' bids. In general, our premium bids are based on assumptions regarding PDP membership, utilization, drug costs, drug rebates, and other factors for each region. Our 2023 PDP bids resulted in 34 of the 34 CMS regions in which we were below the benchmarks, consistent with our 2022 PDP bids. If our future Part D premium bids are not below the CMS benchmarks, we risk losing PDP members who were previously assigned to us and we may not have additional PDP members auto-assigned to us, which could materially reduce our revenue and profits.

Our operations depend significantly on effective information systems and networks. The information gathered and processed by information systems and networks assists us in, among other things, monitoring utilization and other cost factors, processing provider claims and providing data to our regulators. Our healthcare providers also depend upon our information systems and networks for membership verifications, claims status and other information. Our information systems, networks and applications require continual maintenance, upgrading and enhancement to meet our operational needs and regulatory requirements. We regularly upgrade and expand our information systems' and networks' capabilities. If we, our healthcare providers, brokers' or our third-party vendors experience difficulties with the transition to or from information systems or networks or do not appropriately integrate, maintain, enhance or expand information systems or networks, we could suffer, among other things, operational disruptions, loss of existing members and providers and difficulty in attracting new members and providers, complaints, regulatory problems and increases in administrative expenses. In addition, our, our healthcare providers', our brokers' or our third-party vendors' ability to integrate and manage information systems and networks may be impaired as the result of events outside our control, including natural disasters, such as earthquakes or fires, or acts of wars, aggression or terrorism, which may include cyber-attacks or other data security incidents by terrorists or other governmental or non-governmental actors. We may from time to time obtain significant portions of our systems-related or other services or facilities from independent third parties, which may make our operations vulnerable if such third parties fail to perform adequately. In addition, our ability to use outsourcing resources in certain jurisdictions might be limited by legislative action or contracts, with the result that the work must be performed at greater expense or we may be subject to sanctions for non-compliance. Any of these risks might have a materially adverse impact on our business, results of operations and financial condition. 25 25 25 Table of Contents Table of Contents

Our operations and our value creation strategy depend significantly on effective information systems. The information gathered and processed by information systems assists us in, among other things, monitoring utilization and other cost factors, processing provider claims, and providing data to our regulators. Our healthcare providers also depend upon our information systems for membership verifications, claims status, and other information. Our information systems and applications require continual maintenance, upgrading, and enhancement to meet our operational needs and regulatory requirements. We regularly upgrade and expand our information systems' capabilities. If we or our third-party vendors experience difficulties with the transition to or from information systems or do not appropriately integrate, maintain, enhance, or expand information systems, we could suffer, among other things, operational disruptions, loss of existing members and providers, and difficulty in attracting new members and providers, complaints, regulatory problems and increases in administrative expenses. In addition, our or our third-party vendors' ability to integrate and manage information systems may be impaired as the result of events outside our control, including acts of nature, such as earthquakes or fires, or acts of terrorists, which may include cyber-attacks by terrorists or other governmental or non-governmental actors. In addition, we may from time to time obtain significant portions of our systems-related or other services or facilities from independent third parties, which may make our operations vulnerable if such third parties fail to perform adequately.

We maintain a significant investment portfolio of cash equivalents and short-term and long-term investments in a variety of securities, which are subject to general credit, liquidity, market and interest rate risks and will decline in value if interest rates increase or one of the issuers' credit ratings is reduced. As a result, we may experience a reduction in value or loss of our investments, which may have an adverse effect on our results of operations, liquidity and financial condition. In addition, changes in the economic environment, including periods of increased volatility in the securities markets, and recent increases in interest rates, can increase the difficulty of assessing investment impairment and increase the risk of potential impairment of these assets. There is continuing risk that declines in the fair value of our investments may occur and material impairments may be charged to income in future periods, resulting in recognized losses. 33 33 33 Table of Contents Table of Contents

We maintain a significant investment portfolio of cash equivalents and short-term and long-term investments in a variety of securities, which are subject to general credit, liquidity, market, and interest rate risks and will decline in value if interest rates increase or one of the issuers' credit ratings is reduced. As a result, we may experience a reduction in value or loss of our investments, which may have an adverse effect on our results of operations, liquidity, and financial condition. 30 30 30 Table of Contents Table of Contents

Changes in business strategy, divestitures, government regulations or economic or market conditions and non-renewal of government contracts have resulted and may result in impairments of our real estate portfolio, goodwill and other intangible assets at any time in the future. We have recorded a total of $529 million in impairment charges during the year ended December 31, 2023, which were largely attributed to recent divestitures. For additional information, see Note 7. Goodwill and Intangible Assets to the consolidated financial statements included in Part II of this Annual Report on Form 10-K. We may have additional impairment charges in connection with our periodic evaluation of our goodwill and intangible assets using assumptions and judgments regarding the estimated fair value of our reporting units. Our assumptions and judgments regarding the existence of impairment indicators are based on, among other things, legal factors, contract terms, market conditions and operational performance. Further, the estimated value of our reporting units may be impacted because of business decisions we make associated with any future changes to laws and regulations, which could unfavorably affect the carrying value of certain goodwill and other intangible assets and result in impairment charges in future periods. If an event or events occur that would cause us to revise our estimates and assumptions used in analyzing the value of our goodwill and other intangible assets, such revision could result in a non-cash impairment charge that could have a material impact on our results of operations and shareholders' equity in the period in which the impairment occurs.

Changes in business strategy, divestitures, government regulations, or economic or market conditions and non-renewal of government contracts have resulted and may result in impairments of our real estate portfolio, goodwill, and other intangible assets at any time in the future. In connection with our real estate optimization initiative, divestitures and the DoD's December 2022 announcement to not award Health Net Federal Services a TRICARE Managed Care Support Contract, we have recorded a total of $2.3 billion in impairment charges during the year ended December 31, 2022. We anticipate additional future charges of approximately $60 million related to real estate optimization. For additional information, see Note 7. Goodwill and Intangible Assets to the consolidated financial statements included in Part II of this Annual Report on Form 10-K. We may have additional impairment charges in connection with our periodic evaluation of our goodwill and intangible assets. Our judgments regarding the existence of impairment indicators are based on, among other things, legal factors, contract terms, market conditions, and operational performance. If an event or events occur that would cause us to revise our estimates and assumptions used in analyzing the value of our goodwill and other intangible assets, such revision could result in a non-cash impairment charge that could have a material impact on our results of operations in the period in which the impairment occurs.

In the Health Insurance Marketplace, we may be adversely impacted if we have not accurately predicted the health needs of our members, including due to individuals exiting the market causing the morbidity of the risk pool to rise without a proportionate change to risk adjustment. In addition, the risk adjustment provisions of the ACA established to apportion risk amongst insurers may not be effective in appropriately mitigating the financial risks related to the Health Insurance Marketplace product, are affected by our members' acuity relative to the membership acuity of other insurers and are subject to a high degree of estimation and variability, including estimation of the ultimate level of program funding based on the financial performance of other participants. Further, changes in the competitive market for both Health Insurance Marketplace and the Medicare Advantage products over time, changes to member eligibility in the program design or changes in the financial incentives of individuals, brokers and competitors to participate in such products may make pricing difficult to predict. For example, competitors may introduce pricing, broker incentives or broker distribution channels that we may not be able to match, which may adversely affect our ability to compete effectively. Competitors may also choose to exit the market altogether or otherwise suffer financial difficulty, which could adversely impact the pool of potential insured, affect collectability of risk adjustment payable or require us to increase premium rates. Any significant variation from our expectations regarding acuity, enrollment levels, adverse selection, out-of-network costs or other assumptions utilized in setting adequate premium rates could have a material adverse effect on our results of operations, financial condition and cash flows for both our Health Insurance Marketplace and Medicare Advantage products. In addition, we may be unable to accurately predict demand for both our Health Insurance Marketplace and Medicare Advantage products, as demand depends on factors outside of our control such as the competitiveness of our bids, the broker distribution channels and the entry and exit of other competitors in the markets. If we experience higher demand for our products than anticipated, we may not have adequate staffing to be able to adequately meet service level requirements in our call centers, which could negatively impact our quality scores, our relationships with our members and providers, as well as our regulators.

In the Health Insurance Marketplace, we may be adversely impacted by being selected by individuals who have higher acuity levels than those individuals who selected us in the past and healthy individuals may decide to opt out of the pool altogether. In addition, the risk adjustment provisions of the ACA established to apportion risk amongst insurers may not be effective in appropriately mitigating the financial risks related to the Health Insurance Marketplace product, are subject to a high degree of estimation and variability and are affected by our members' acuity relative to the membership acuity of other insurers. Further, changes in the competitive market for both Health Insurance Marketplace and the Medicare Advantage products over time, changes to member eligibility in the program design or changes in the financial incentives of individuals and competitors to participate in such products may make pricing difficult to predict. For example, competitors may introduce pricing, or broker incentives that we may not be able to match, which may adversely affect our ability to compete effectively. Competitors may also choose to exit the market altogether or otherwise suffer financial difficulty, which could adversely impact the pool of potential insured, or require us to increase premium rates. Any significant variation from our expectations regarding acuity, enrollment levels, adverse selection, out-of-network costs, or other assumptions utilized in setting adequate premium rates could have a material adverse effect on our results of operations, financial condition, and cash flows for both our Health Insurance Marketplace and Medicare Advantage products. 19 19 19 Table of Contents Table of Contents

A number of our health plans rely on other state-operated systems or subcontractors to qualify, solicit, educate and assign eligible members into managed care plans. The effectiveness of these state operations and subcontractors can have a material effect on a health plan's enrollment in a particular month or over an extended period. When a state implements either new programs to determine eligibility or new processes to assign or enroll eligible members into health plans, or when it chooses new subcontractors, or has not adequately maintained systems, there is an increased potential for an unanticipated impact on the overall number of members assigned to managed care plans. 22 22 22 Table of Contents Table of Contents Additionally, we rely on the accuracy of eligibility lists provided by state governments and their vendors. Inaccuracies in those lists would negatively affect our results of operations. Premium payments to our health plans are based upon eligibility lists produced by state governments and their vendors. From time to time, states require us to reimburse them for premiums paid to us based on an eligibility list that a state later discovers contains individuals who are not in fact eligible for a government sponsored program or are eligible for a different premium category or a different program. Our results of operations would be adversely affected as a result of such reimbursement to the state if we make or have made related payments to providers and are unable to recoup such payments from the providers. Alternatively, a state could fail to pay us for members for whom we are entitled to payment. Such factors could have an adverse effect on our premium revenues and results of operations, financial condition and cash flows.

A number of our health plans rely on other state-operated systems or subcontractors to qualify, solicit, educate, and assign eligible members into managed care plans. The effectiveness of these state operations and subcontractors can have a material effect on a health plan's enrollment in a particular month or over an extended period. When a state implements either new programs to determine eligibility or new processes to assign or enroll eligible members into health plans, or when it chooses new subcontractors, or has not adequately maintained systems, there is an increased potential for an unanticipated impact on the overall number of members assigned to managed care plans.

We historically provided PBM services and continue to provide certain pharmacy benefits administration and specialty pharmacy services. We have transitioned substantially all of our PBM business to a third party as of January 1, 2023. These businesses are subject to federal and state laws and regulations that, among other requirements, govern the relationships of the business with pharmaceutical manufacturers, physicians, pharmacies, customers, and consumers. For example, several states have made claims related to PBM services including among other things, (i) claims seeking payment for services already reimbursed, (ii) claims alleging the failure to accurately disclose the true cost of the PBM services, and (iii) claims alleging inflation of dispensing fees for prescription drugs. For additional information, see Note 17. Contingencies to the consolidated financial statements included in Part II of this Annual Report on Form 10-K. Additional claims, reviews, or investigations may still be brought by other states, the federal government, or shareholder litigants. Our specialty pharmacy business is subject to extensive federal, state and local laws and regulations. In addition, federal and state legislatures and regulators regularly consider new regulations for the industry that could materially and adversely affect current industry practices, including the receipt or disclosure of rebates from pharmaceutical companies, the development and use of formularies and the use of average wholesale prices. Our specialty pharmacy business would be materially and adversely affected by an inability to contract on favorable terms with pharmaceutical manufacturers and other suppliers, though we use a network of specialty pharmacies beyond AcariaHealth. Disruptions at any of our specialty pharmacies due to an event that is beyond our control could affect our ability to process and dispense prescriptions in a timely manner and could materially and adversely affect our results of operations, financial condition and cash flows. Contracts in the prescription drug industry generally use pricing metrics published by third parties as benchmarks to establish pricing for prescription drugs. If these benchmarks are no longer published by third parties, or we, or our contractual partners, adopt other pricing benchmarks for establishing prices within the industry, or legislation or regulation requires the use of other pricing benchmarks, or future changes in drug prices substantially deviate from our expectations, the short- or long-term impacts may have a material adverse effect on our business and results of operations.

Our Centene Pharmacy Services (formerly Envolve Pharmacy Solutions) product historically provided PBM services and continues to provide pharmacy benefits administration and specialty pharmacy services. We have transitioned substantially all of our PBM business to a third party as of January 1, 2023. These businesses are subject to federal and state laws and regulations that, among other requirements, govern the relationships of the business with pharmaceutical manufacturers, physicians, pharmacies, customers, and consumers. For example, several states have made claims related to services provided by Envolve including among other things, (i) seeking payment for services already reimbursed, (ii) not accurately disclosing the true cost of the PBM services, and (iii) inflating dispensing fees for prescription drugs. For additional information, see Note 18. Contingencies to the consolidated financial statements included in Part II of this Annual Report on Form 10-K. Additional claims, reviews, or investigations may still be brought by other states, the federal government, or shareholder litigants. We also conduct business as a mail order pharmacy and specialty pharmacy, which subjects these businesses to extensive federal, state, and local laws and regulations. In addition, federal and state legislatures and regulators regularly consider new regulations for the industry that could materially and adversely affect current industry practices, including the receipt or disclosure of rebates from pharmaceutical companies, the development and use of formularies, and the use of average wholesale prices. 28 28 28 Table of Contents Table of Contents Our specialty pharmacy businesses would be materially and adversely affected by an inability to contract on favorable terms with pharmaceutical manufacturers and other suppliers, including with respect to the structuring of rebates and pricing of new specialty and generic drugs. In addition, our specialty pharmacy businesses could face potential claims in connection with purported errors by our mail order or specialty pharmacies, including in connection with the risks inherent in the authorization, compounding, packaging, and distribution of pharmaceuticals and other healthcare products. Disruptions at any of our mail order or specialty pharmacies due to an event that is beyond our control could affect our ability to process and dispense prescriptions in a timely manner and could materially and adversely affect our results of operations, financial condition, and cash flows.

If we fail to design and maintain programs that are attractive to Medicare participants; if our Medicare operations are subject to negative outcomes from program audits, sanctions, penalties or other actions; if we do not submit adequate bids in our existing markets or any expansion markets; if our existing contracts are modified or terminated; or if we fail to maintain or improve our quality Star ratings, our current Medicare business and our ability to expand our Medicare operations could be materially and adversely affected, negatively impacting our results of operations and financial performance. As of October 2023, approximately 87% of membership was associated with contracts rated 3.0 stars or better. Our quality improvement goal is to move 85% of our members into contracts with 3.5 stars or better for rating year 2026 (anticipated to be published in October 2025), which may not be achieved. Additionally, although we expect to have a higher percentage of D-SNP members than most of our competitors, we may be unsuccessful in advocating for adjustments in the Star score rating system or other risk adjustment criteria to reflect the socio-economic barriers to health for this population. Despite our operational efforts to improve our Star ratings, there can be no assurances that we will be successful in maintaining or improving our Star ratings in future years. Our quality bonus and rebates may continue to be negatively impacted and our Medicare Advantage and PDP contracts may be terminated by CMS. For example, two of our Medicare Advantage contracts have received notice of termination for plan year 2025 and other Medicare Advantage contracts have received Star scores of below 3.0 stars for two consecutive years and accordingly could be terminated for plan year 2026 if their Star scores do not improve. The attractiveness of our Medicare Advantage plans may be reduced if we are unable to maintain or improve these ratings, or if there are changes to the ratings system that make achieving and maintaining ratings of 3.0 stars or higher more difficult. CMS establishes annually different pricing components of the Medicare Advantage program that may not adequately reflect changes in the underlying health care costs, and which may reduce the profitability or desirability of various Medicare Advantage plans. For calendar year 2024, CMS estimates that the risk model revisions together with the impact of normalization will reduce payments by 2.16%. As a result of these changes, and our 2024 Medicare Advantage bid design and membership projections, we have established a premium deficiency reserve in connection with the 2024 Medicare Advantage business as of December 31, 2023. In addition, CMS' new risk model may not account for the full severity of several chronic conditions, which could also disproportionately affect the dual eligible population who are more medically complex and face additional socio-economic barriers to health compared to others. As a result of these changes and potential future changes to Medicare Advantage pricing components, we may not be able to design products that will be profitable, attractive or competitive for this population. In addition, proposed CMS regulations may require beneficiaries dually enrolled in Medicare and Medicaid to receive integrated care through Medicare Advantage D-SNPs, which may restrict our product offerings in some geographic service areas. There are also specific additional risks under Title XVIII, Part D of the Social Security Act associated with our provision of Medicare Part D prescription drug benefits as part of our Medicare Advantage plan offerings. These risks include potential uncollectibility of receivables, inadequacy of pricing assumptions, inability to receive and process information and increased pharmaceutical costs, as well as the underlying seasonality of this business, and extended settlement periods for claims submissions. Our failure to comply with Part D program requirements can result in financial and/or operational sanctions on our Part D products, as well as on our Medicare Advantage products that offer no prescription drug coverage.

If we fail to design and maintain programs that are attractive to Medicare participants; if our Medicare operations are subject to negative outcomes from program audits, sanctions, penalties or other actions; if we do not submit adequate bids in our existing markets or any expansion markets; if our existing contracts are modified or terminated; or if we fail to maintain or improve our quality Star ratings, our current Medicare business and our ability to expand our Medicare operations could be materially and adversely affected, negatively impacting our financial performance. For example, the achievement of Star ratings of 4-star or higher qualifies Medicare Advantage plans for premium bonuses. For rating year 2023, only 3% of our total December 31, 2022 Medicare Advantage membership is in a plan that received an overall rating of 4.0 stars or higher. 18 18 18 Table of Contents Table of Contents Despite our operational efforts to improve our Star ratings, there can be no assurances that we will be successful in improving our Star ratings in future years. Our quality bonus and rebates may continue to be negatively impacted and the attractiveness of our Medicare Advantage plans may be reduced if we are unable to improve these ratings. There are also specific additional risks under Title XVIII, Part D of the Social Security Act associated with our provision of Medicare Part D prescription drug benefits as part of our Medicare Advantage plan offerings. These risks include potential uncollectibility of receivables, inadequacy of pricing assumptions, inability to receive and process information and increased pharmaceutical costs, as well as the underlying seasonality of this business, and extended settlement periods for claims submissions. Our failure to comply with Part D program requirements can result in financial and/or operational sanctions on our Part D products, as well as on our Medicare Advantage products that offer no prescription drug coverage.

Data security risks have significantly increased in recent years in part because of the proliferation of new technologies, the use of the internet and telecommunications technologies to conduct our operations and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties, including foreign states and state-supported actors. Data security risks also may derive from fraud or malice on the part of our team members or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. As these threats continually evolve, we may be required to devote substantial additional resources to modify or enhance our operational or security systems and networks and our cybersecurity program. Our operations rely on the secure transmission, storage and other processing of confidential, personal, proprietary, sensitive and other information in our computer systems and networks as well as those of third parties with which we do business. Security breaches of such systems and networks may arise from external or internal threats. External breaches may result from, among other things, a threat actor hacking personal information for financial gain, attempting to cause harm or interruption to our operations or intending to obtain competitive information. Internal breaches may result from, among other things, inappropriate security access to confidential information by rogue team members, consultants or third-party service providers. Any security breach could result in the misappropriation, loss or other unauthorized access, disclosure or use of confidential member information, including personal information, financial data, competitively sensitive information or other proprietary data, whether by us or a third party, and could have a material adverse effect on our business reputation, financial condition, cash flows or results of operations. We maintain a system of prevention and detection controls through our security programs; however, our prevention and detection controls may not prevent or identify all such attacks on a timely basis, or at all. Despite our best attempts to maintain adherence to data privacy and security best practices, as well as compliance with applicable laws, regulations, rules, standards and contractual requirements, our facilities, systems and networks, and those of our third-party service providers, may be vulnerable to data privacy or security breaches, acts of vandalism or theft, malware, ransomware, social engineering attacks (including phishing attacks), denial-of-service attacks or other forms of cyber-attack, misplaced or lost data including paper or electronic media, programming and/or human errors or other similar events. We experience attempted external hacking or malicious attacks on a regular basis. In the past, we have had data breaches resulting in disclosure of confidential or protected health information that have not resulted in any material financial loss or penalty to date. For example, in 2021, we learned that Accellion, a third-party data transfer provider with whom we contract, had a system vulnerability that resulted in unauthorized access to certain sensitive data of our customers, including protected health information, as well as unauthorized access to the data of several of Accellion's other clients. This incident led to putative class action lawsuits that were filed against us and our subsidiaries, Health Net, LLC, Health Net of California, Inc., HNL, Health Net Community Solutions, Inc., and California Health & Wellness, and Accellion on behalf of the affected customers. There can be no assurance that this incident and other privacy or security breaches will not require us to expend significant resources to remediate any damage, interrupt our operations and damage our business or reputation, subject us to state, federal, or international agency review, and result in enforcement actions, material fines and penalties, litigation or other actions which could have a material adverse effect on our business, reputation, results of operations, financial condition and cash flows. While we generally perform data security due diligence on our key service providers, we do not control our service providers and our ability to monitor their data security practices is limited. Some of our vendors may store or have access to our data and may not have effective controls, processes, or practices to protect our information from loss, unauthorized disclosure, unauthorized use or misappropriation, cyber-attacks or other data security incidents. A vulnerability in our service providers' software or systems, a failure of our service providers' safeguards, policies or procedures, or a cyber-attack or other data security incident affecting any of these third parties could harm our business. Additionally, we cannot be certain that our insurance coverage will be adequate for data security liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that our insurer will not deny coverage as to any future claim. 26 26 26 Table of Contents Table of Contents

Information security risks have significantly increased in recent years in part because of the proliferation of new technologies, the use of the internet and telecommunications technologies to conduct our operations, and the increased sophistication and activities of organized crime, hackers, terrorists, and other external parties, including foreign state agents. Our operations rely on the secure processing, transmission, and storage of confidential, proprietary, and other information in our computer systems and networks as well as those of third parties with which we do business. Security breaches may arise from external or internal threats. External breaches include hacking personal information for financial gain, attempting to cause harm or interruption to our operations, or intending to obtain competitive information. We experience attempted external hacking or malicious attacks on a regular basis. We maintain a rigorous system of prevention and detection controls through our security programs; however, our prevention and detection controls may not prevent or identify all such attacks on a timely basis, or at all. Internal breaches may result from inappropriate security access to confidential information by rogue employees, consultants, or third-party service providers. Any security breach involving the misappropriation, loss, or other unauthorized disclosure or use of confidential member information, financial data, competitively sensitive information, or other proprietary data, whether by us or a third party, could have a material adverse effect on our business reputation, financial condition, cash flows, or results of operations.

As part of our normal operations, we and our third party vendors collect, retain and otherwise process confidential member information, including personal information. We and our third party vendors are subject to various federal, state and international laws, regulations, rules, standards and contractual requirements regarding the use, disclosure and other processing of confidential member information (including personal information), including HIPAA, the HITECH Act, the Gramm-Leach-Bliley Act, the GDPR and its equivalent in the United Kingdom (U.K. GDPR), which require us to protect the privacy of medical records and safeguard personal health information we maintain, use and otherwise process. These laws, rules and contractual requirements are subject to change and the regulatory environment surrounding data privacy and security laws is increasingly demanding. Compliance with existing or new data privacy and security laws, regulations and requirements may result in increased operating costs, and may constrain or require us to alter our business model or operations. In some cases, such laws, rules, regulations and contractual requirements also apply to our third-party providers and require us to obtain written assurances of their compliance with such requirements. Certain of our businesses are also subject to the Payment Card Industry Data Security Standard, which is a multifaceted security standard that is designed to protect credit card account data as mandated by payment card industry entities. From time to time, Congress also has considered, and may currently be considering, various proposals for other data privacy and security laws to which we may become subject if passed. At the U.S. state level, we may be subject to laws and regulations such as the California Consumer Privacy Act (as amended by the California Privacy Rights Act, collectively, the CCPA), which broadly defines personal information and gives California residents expanded privacy rights and protections, such as affording them the right to access and request deletion of their information and to opt out of certain sharing and sales of personal information. Numerous other states also have enacted, or are in the process of enacting or considering, comprehensive state-level data privacy and security laws and regulations that share similarities with the CCPA. Moreover, laws in all 50 U.S. states require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a data breach. We are subject to the data privacy laws of non-U.S. jurisdictions, such as the GDPR and U.K. GDPR, which impose stringent operational requirements on both data controllers and data processors and introduces significant penalties for non-compliance. While the GDPR and the U.K. GDPR remain substantially similar for the time being, the U.K. government has announced that it would seek to chart its own path on data protection and reform its relevant laws, including in ways that may differ from the GDPR. Legal developments in the European Economic Area (EEA) and the U.K. also have created complexity and uncertainty regarding processing and transfers of personal data from the EEA and the U.K. to the United States and other so-called third countries outside the EEA and the U.K. that have not been determined by the relevant data protection authorities to provide an adequate level of protection for privacy rights. Further, while we strive to publish and prominently display privacy policies that are accurate, comprehensive, and compliant with applicable laws, regulations, rules and industry standards, we cannot ensure that our privacy policies and other statements regarding our practices will be sufficient to protect us from claims, proceedings, liability or adverse publicity relating to data privacy and security. Although we endeavor to comply with our privacy policies and to obtain written assurances of our third party providers' compliance, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other documentation that provide promises and assurances about data privacy and security can subject us to potential government or legal action if they are found to be deceptive, unfair, or misrepresentative of our actual practices. Any concerns about our data privacy and security practices, even if unfounded, could damage our reputation and adversely affect our business. Any failure or perceived failure by us to comply with our privacy policies, or applicable data privacy and security laws, regulations, rules, standards or contractual obligations, or any compromise of security that results in unauthorized access to, or unauthorized loss, destruction, use, modification, acquisition, disclosure, release or transfer of personal information, may result in requirements to modify or cease certain operations or practices, the expenditure of substantial costs, time and other resources, proceedings or actions against us, legal liability, governmental investigations, enforcement actions, claims, fines, judgments, awards, penalties, sanctions and costly litigation (including class actions). Any of the foregoing could harm our reputation, distract our management and technical personnel, increase our costs of doing business, adversely affect the demand for our products and services, and ultimately result in the imposition of liability, any of which could have a material adverse effect on our business, financial condition and results of operations. 32 32 32 Table of Contents Table of Contents

As part of our normal operations, we collect, process, and retain confidential member information. We are subject to various federal, state, and international laws, regulations, rules, and contractual requirements regarding the use and disclosure of confidential member information, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the HITECH Act of 2009, the Gramm-Leach-Bliley Act, and the General Data Protection Regulation, which require us to protect the privacy of medical records and safeguard personal health information we maintain and use. Certain of our businesses are also subject to the Payment Card Industry Data Security Standard, which is a multifaceted security standard that is designed to protect credit card account data as mandated by payment card industry entities. Despite our best attempts to maintain adherence to information privacy and security best practices, as well as compliance with applicable laws, rules, and contractual requirements, our facilities and systems, and those of our third-party service providers may be vulnerable to privacy or security breaches, acts of vandalism or theft, malware or other forms of cyber-attack, misplaced or lost data including paper or electronic media, programming and/or human errors or other similar events. In the past, we have had data breaches resulting in disclosure of confidential or protected health information that have not resulted in any material financial loss or penalty to date. For example, in 2021, we learned that Accellion, a third-party data transfer provider with whom we contract, had a system vulnerability that resulted in unauthorized access to certain sensitive data of our customers, including protected health information, as well as unauthorized access to the data of several of Accellion's other clients. This incident led to putative class action lawsuits that were filed against us and our subsidiaries, Health Net, LLC, Health Net of California, Inc., Health Net Life Insurance Company, Health Net Community Solutions, Inc., and California Health & Wellness, and Accellion on behalf of the affected customers. To date, this incident has not had, and we do not believe that this incident is likely to have a material adverse effect on our business, reputation, results of operations, financial condition, and cash flows. However, there can be no assurance that this incident and other privacy or security breaches will not require us to expend significant resources to remediate any damage, interrupt our operations and damage our business or reputation, subject us to state, federal, or international agency review, and result in enforcement actions, material fines and penalties, litigation or other actions which could have a material adverse effect on our business, reputation, results of operations, financial condition, and cash flows. 29 29 29 Table of Contents Table of Contents In addition, HIPAA broadened the scope of fraud, waste and abuse laws applicable to healthcare companies and established enforcement mechanisms to combat fraud, waste and abuse, including civil and, in some instances, criminal penalties for failure to comply with specific standards relating to the privacy, security and electronic transmission of protected health information. The HITECH Act expanded the scope of these provisions by mandating individual notification in instances of breaches of protected health information, providing enhanced penalties for HIPAA violations, and granting enforcement authority to states' Attorneys General in addition to the HHS Office for Civil Rights. It is possible that Congress may enact additional legislation in the future to increase the amount or application of penalties and to create a private right of action under HIPAA, which could entitle patients to seek monetary damages for violations of the privacy rules.