T. Rowe Price Group Inc.: 10-K Risk Factor Changes

As part of our normal operations, we maintain and transmit personal and confidential data about our clients, personnel and other parties, as well as proprietary data and intellectual property relating to our business operations. Our business operations rely on such data being available as and when needed, and not being subjected to loss or unauthorized access or alteration. We maintain a system of internal controls designed to provide reasonable assurance that both inadvertent errors and fraudulent activity, including misappropriation of assets, fraudulent financial reporting, and unauthorized access to sensitive or confidential data, is either prevented or detected in a timely manner. We also leverage cloud-based solutions for the transmission and storage of data. Our systems, or those of the third-party service providers we use to maintain or transmit such data, could be accessed by unauthorized users or corrupted by computer viruses or other malicious software code. Additionally, authorized persons could inadvertently or intentionally release or alter confidential or proprietary data. Any of these types of events could, among other things: •seriously damage our reputation, •result in a loss of confidence in our business and products, •allow competitors access to our proprietary business data, •materially impair our business operations, •subject us to liability for a failure to safeguard data of clients, personnel, and other parties, •result in the termination of contracts by our existing clients, •subject us to disclosure obligations, regulatory investigations, actions or fines, and potential litigation involving regulators, stockholders, or other members of the public, and •require significant capital and operating expenditures to investigate and remediate the breach, and organizational costs to mitigate against future incidents. Page 22 Page 22 Page 22 Table of Contents Table of Contents Furthermore, if any person, including any of our personnel, negligently disregards or intentionally overrides or circumvents our established controls with respect to personal or confidential data, or otherwise mismanages or misappropriates that data, we could be subject to significant monetary damages, regulatory enforcement actions, fines and/or criminal prosecution in one or more jurisdictions.

As part of our normal operations, we maintain and transmit confidential data about our clients, associates and other parties, as well as proprietary data relating to our business operations. Our business operations rely on such data being available as and when needed and not being subjected to loss or unauthorized access or alteration. We maintain a system of internal controls designed to provide reasonable assurance that both inadvertent errors and fraudulent activity, including misappropriation of assets, fraudulent financial reporting, and unauthorized access to sensitive or confidential data, is either prevented or detected in a timely manner. We also leverage cloud-based solutions for the transmission and storage of data. Our systems, or those of the third-party service providers we use to maintain or transmit such data, could be accessed by unauthorized users or corrupted by computer viruses or other malicious software code. Additionally, authorized persons could inadvertently or intentionally release or alter confidential or proprietary data. Any of these types of events could, among other things: •seriously damage our reputation, •result in a loss of confidence in our business and products, •allow competitors access to our proprietary business data, •materially impair our business operations, •subject us to liability for a failure to safeguard data of clients, associates, and other parties, •result in the termination of contracts by our existing clients, •subject us to disclosure obligations, regulatory investigations, actions or fines, and potential litigation involving regulators, stockholders, or other members of the public, and •require significant capital and operating expenditures to investigate and remediate the breach, and organizational costs to mitigate against future incidents. Furthermore, if any person, including any of our associates, negligently disregards or intentionally overrides or circumvents our established controls with respect to confidential data, or otherwise mismanages or misappropriates that data, we could be subject to significant monetary damages, regulatory enforcement actions, fines and/or criminal prosecution in one or more jurisdictions. As noted above, we are subject to numerous laws and regulations governing privacy and the protection of personal or other data in the U.S., EU and other jurisdictions we operate in. Any failure to properly safeguard and maintain confidential data creates risk that we could be found to be in violation of laws and regulations and subject us to disclosure obligations, regulatory investigations, actions or fines, and litigation.

We have spent many years developing our reputation for integrity, strong investment performance, and superior client service. Our brand is a valuable intangible asset, but it is vulnerable to a variety of threats that can be difficult or impossible to control, and costly or even impossible to remediate, if damaged. Regulatory inquiries and rumors can tarnish or substantially damage our reputation, even if those inquiries are satisfactorily addressed. For example, ESG issues have been the subject of increased focus by regulators, clients and other stakeholders. Various clients and stakeholders have divergent views on ESG matters, with some aiming to increase their exposure to ESG investing and some choosing not to invest in products or strategies with an ESG investment objective, including in the countries in which we operate and invest, as well as states and localities where we serve public sector clients. These differences pose challenges for us to manage divergent goals and preferences, and increase the risk that any action or lack thereof by us concerning ESG, or any actual or perceived failure to adequately address the ESG expectations will be viewed negatively by some stakeholders, which could adversely impact our reputation and business. We also communicate certain initiatives and goals for our corporate and investing activities related to ESG matters. We could be scrutinized or criticized for the scope or nature of any such initiatives or goals, and may not be able to accomplish them within our anticipated timeframe or at all. Our global presence and investments on behalf of our clients around the world could also lead to heightened scrutiny and criticism in an increasingly fragmented geopolitical landscape. Misconduct by our personnel or third-party service providers could likewise adversely impact our reputation and lead to a loss of client assets. While we maintain policies, procedures, and controls to reduce the likelihood of unauthorized activities, we are subject to the risk that our personnel or third parties acting on our behalf may circumvent controls or act in a manner inconsistent with our policies and procedures. Real or perceived conflicts between our clients’ interests and our own, as well as any fraudulent activity or other exposure of client assets or information, may impair our reputation and subject us to litigation or regulatory action. Any damage to our brand could impede our ability to attract and retain clients and key personnel, and reduce the amount of assets under our management, any of which could have a material adverse effect on our revenues and net income.

We have spent many years developing our reputation for integrity, strong investment performance, and superior client service. Our brand is a valuable intangible asset, but it is vulnerable to a variety of threats that can be difficult or impossible to control, and costly or even impossible to remediate, if damaged. Regulatory inquiries and rumors can tarnish or substantially damage our reputation, even if those inquiries are satisfactorily addressed. Actual or perceived failure to adequately address the ESG expectations, or failure to manage conflicts of interests of our various stakeholders could lead to a tarnished reputation and loss of client assets or harm our access to capital. Furthermore, ESG issues have been the subject of increased focus by regulators and stakeholders. Any inability to meet applicable requirements or expectations may adversely impact our reputation. Additionally, various stakeholders have divergent views on ESG matters, including in the countries in which we operate and invest, as well as states and localities where we serve public sector clients. These differences increase the risk that any action or lack thereof by us concerning ESG will be perceived negatively by some stakeholders and could adversely impact our reputation and business. Our global presence and investments on behalf of our clients around the world could also lead to heightened scrutiny and criticism in an increasingly fragmented geopolitical landscape. Misconduct by our employees or third-party service providers could likewise adversely impact our reputation and lead to a loss of client assets. While we maintain policies, procedures, and controls to reduce the likelihood of unauthorized activities, we are subject to the risk that our associates or third parties acting on our behalf may circumvent controls or act in a manner inconsistent with our policies and procedures. Real or perceived conflicts between our clients’ interests and our own, as well as any fraudulent activity or other exposure of client assets or information, may impair our reputation and subject us to litigation or regulatory action. Any damage to our brand could impede our ability to attract and retain clients and key personnel, and reduce the amount of assets under our management, any of which could have a material adverse effect on our revenues and net income.

Our regulatory environment is frequently altered by new laws and regulations and by revisions to, and evolving interpretations of, existing regulations. New laws and regulations present areas of uncertainty susceptible to alternative interpretations; regulators and prospective litigants may not agree with reasoned interpretations we adopt. Future changes could require us to modify or curtail our investment offerings and business operations which may impact our expenses and profitability. Additionally, some laws and regulations may not directly apply to our business but may impact the capital markets, service providers, or have other indirect effects on our ability to provide services to our clients. Potential impacts of current or proposed legal or regulatory requirements include, without limitation, the following: •There has been increasing focus on the framework of the U.S. retirement system at the federal and state levels. We could experience adverse business impacts if legislative and regulatory changes limit retirement plans to certain products and services, or favor certain investment vehicles, that we do not offer, materially limit retirement savings opportunities or foster substantial outflows from retirement savings plans for non-retirement purposes. •There has been substantial regulatory and legislative activity at federal and state levels regarding standards of care for financial services firms, related to both retirement and taxable accounts. Actions taken by applicable regulatory or legislative bodies may impact our business activities and increase our costs. In September 2024, a new rule expanding the definition of, and requirements for, an investment advice fiduciary under ERISA (“Retirement Security Rule”) became effective, which applies to retirement plans and accounts that comprise a majority of our accounts. We are assessing the impact of the Retirement Security Rule on our business. •The Commodity Futures Trading Commission ("CFTC") regulations may limit the ability of certain investment products to use futures, swaps, and other derivatives. We have registered certain subsidiaries with the CFTC, subjecting us to additional regulatory requirements and costs, but also providing us additional flexibility to utilize such products. Nonetheless, there are still certain limitations on our investment products due to CFTC rules. •There has been increased global regulatory focus on the manner in which intermediaries are paid for distribution of mutual funds or other collective investments funds. Changes to long-standing market practices related to fees or enhanced disclosure requirements may negatively impact sales of mutual funds or other collective investments funds by intermediaries, especially if such requirements are not applied to other investment products. •We remain subject to various state, federal and international laws and regulations (and associated judicial decisions) related to privacy, data collection and use, including the EU’s GDPR and laws enacted by a growing number of U.S. states; cybersecurity; current and emerging technology, including AI and automated decision-making; storage, localization, retention and destruction of data; disclosure, transfer, availability, security and integrity of data; notification of regulators and/or impacted parties regarding adverse data-related events, including the SEC’s cybersecurity disclosure rules; amended Regulation S-P; and other similar matters that can concern the data of our clients and/or personnel. Requirements in these areas continue to expand and evolve throughout the globe, most commonly in ways that increase the complexity and costs of compliance. For example, the SEC proposed new rules in 2023 that would require broker-dealers and investment advisers, when engaging or communicating with investors using predictive data analytics, to evaluate such technologies for conflicts of interest and, where identified, eliminate or neutralize the conflict of interest. If adopted as proposed, these rules could encompass a wide range of forward-looking uses of technology applications and impose significant operational burdens and costs. Future changes to laws and regulations in these areas Page 24 Page 24 Page 24 Table of Contents Table of Contents could impose significant limitations on our operations, require changes to our business, or restrict our collection, use or storage of data or related technologies, which may increase our compliance expenses and make our business more costly or less efficient to conduct. •Regulators have imposed certain clearing, margin, trade reporting, electronic trading and recordkeeping requirements on market participants aimed at market stabilization and risk reduction, such as the Dodd-Frank Wall Street Reform and Consumer Protection Act and related regulations in the U.S. and the European Market Infrastructure Regulation in the EU. These requirements have introduced operational complexity and additional costs to derivatives portfolios. •New laws or regulations involving ESG integration and disclosure may materially impact the asset management industry. For example, the EU’s Sustainable Finance Disclosure Regulation imposes mandatory ESG disclosure obligations on asset managers and other financial markets participants, requiring all covered firms to disclose how financial products integrate sustainability risks in the investment process, including whether they consider adverse sustainability impacts, and sustainability-related information for products promoting sustainable objectives. The availability of such disclosures may impact the investment decisions of European investors. In addition, the EU’s Corporate Sustainability Reporting Directive imposes enhanced sustainability reporting requirements for certain EU companies and non-EU companies, with phased reporting requirements beginning in 2025 for certain companies. In the U.S., states have proposed or adopted laws and regulations to pursue similar initiatives, such as California’s Climate Accountability Package, federal regulations on ESG disclosures, such as the SEC's proposed climate disclosure rules that have been stayed, are expected to halt under the new administration in the U.S. Conversely, some U.S. states have adopted or proposed legislation or otherwise have taken official positions restricting or prohibiting state government entities from doing certain business with entities they believe are discriminating against particular industries or considering ESG factors in their investment processes and proxy voting. As jurisdictions globally continue to develop legal frameworks on ESG and sustainability regulations, our industry and business may face increasingly fragmented regulatory frameworks, which may result in complex and potentially conflicting compliance obligations and legal and regulatory uncertainty. •Recently, several significant administrative law cases were decided by the U.S. Supreme Court, most notably Loper Bright Enterprises v. Raimondo, which overruled Chevron U.S.A., Inc. v. Natural Resources Defense Council, Inc. In Loper Bright, the Supreme Court held that the U.S. Administrative Procedure Act required courts to exercise their independent judgment when deciding whether an agency had acted within its statutory authority, and that courts may not defer to an agency interpretation solely because a statute is ambiguous, overruling the long-held Chevron decision that had required that courts defer to reasonable agency interpretations of statutes and agency action. These decisions may result in additional legal challenges to regulations and guidance issued by federal regulatory agencies that we or the companies we invest in have relied on and intend to rely on in the future. Any such challenges, if successful, could have a material impact on our business because we may make decisions based on legal guidance that may be overruled. In addition to potential changes to regulations and agency guidance as a result of legal challenges, these decisions may result in increased regulatory uncertainty and delays in and other impacts to the agency rulemaking process, any of which could adversely impact our business and operations. We cannot predict the nature of future changes to the legal and regulatory requirements applicable to our business, nor the extent of the impacts that will result from current or future proposals. However, any such changes are likely to increase the costs of compliance and the complexity of our operations, as well as result in changes to our product or service offerings. The changing regulatory landscape may also impact a number of service providers that provide services to us and, to the extent such service providers alter their operations or increase their fees, it may impact our expenses or those of the products we offer.

Our regulatory environment is frequently altered by new laws and regulations and by revisions to, and evolving interpretations of, existing regulations. New laws and regulations present areas of uncertainty susceptible to alternative interpretations; regulators and prospective litigants may not agree with reasoned interpretations we adopt. Future changes could require us to modify or curtail our investment offerings and business operations which may impact our expenses and profitability. Additionally, some laws and regulations may not directly apply to our business but may impact the capital markets, service providers or have other indirect effects on our ability to provide services to our clients. Potential impacts of current or proposed legal or regulatory requirements include, without limitation, the following: •There has been increasing focus on the framework of the U.S. retirement system at the federal and state levels. We could experience adverse business impacts if legislative and regulatory changes limit retirement plans to certain products and services, or favor certain investment vehicles, that we do not offer, materially limit retirement savings opportunities or foster substantial outflows from retirement savings plans for non-retirement purposes. •There has been substantial regulatory and legislative activity at federal and state levels regarding standards of care for financial services firms, related to both retirement and taxable accounts. Actions taken by applicable regulatory or legislative bodies may impact our business activities and increase our costs. In October 2023, the U.S. Department of Labor proposed a new rule updating the definition of an investment advice fiduciary under ERISA (“Retirement Security Rule”), which would apply to retirement plans and accounts that comprise a majority of our accounts. We are monitoring the rulemaking process and the potential impact the Retirement Security Rule may have on our business. •The Commodity Futures Trading Commission ("CFTC") regulation may limit the ability of certain sponsored investment products to use futures, swaps, and other derivatives. We have registered certain subsidiaries with the CFTC, subjecting us to additional regulatory requirements and costs, but also providing us additional flexibility to utilize such products. Nonetheless, there are still certain limitations on our investment products due to CFTC rules. •There has been increased global regulatory focus on the manner in which intermediaries are paid for distribution of mutual funds or other collective investments funds. Changes to long-standing market practices related to fees or enhanced disclosure requirements may negatively impact sales of mutual funds or other collective investments funds by intermediaries, especially if such requirements are not applied to other investment products. •We remain subject to various state, federal and international laws and regulations (and associated judicial decisions) related to privacy, data collection and use, including the EU’s GDPR and the CCPA; cybersecurity; current and emerging technology, including generative AI technology; storage, localization, retention and destruction of data; disclosure, transfer, availability, security and integrity of data; notification of regulators and/or impacted parties regarding adverse data-related events, including the SEC’s cybersecurity disclosure rules; and other similar matters that can concern the data of our clients and employees. Requirements in these areas continue to expand and evolve throughout the globe, most commonly in ways that increase the complexity and costs of compliance. For example, in addition to the EU's GDPR data protection rules, we also are or may become subject to or affected by additional country, federal and state laws, regulations and guidance impacting consumer privacy, such as the California Consumer Privacy Act. Future changes to laws 20Page 21 20Page 21 20 Page 21 Table of Contents Table of Contents and regulations in these areas could impose significant limitations on our operations, require changes to our business, or restrict our collection, use or storage of data or related technologies, which may increase our compliance expenses and make our business more costly or less efficient to conduct. •Regulators have imposed certain clearing, margin, trade reporting, electronic trading and recordkeeping requirements on market participants aimed at market stabilization and risk reduction, such as the Dodd-Frank Wall Street Reform and Consumer Protection Act in the U.S. and the European Market Infrastructure Regulation in the EU. These requirements have introduced operational complexity and additional costs to derivatives portfolios. •The revised Markets in Financial Instruments Directive ("MiFID II Directive") and Regulation ("MiFIR") (together “MiFID II”) applies across the EU and member states of the European Economic Area beginning on January 3, 2018. Implementation of MiFID II has significantly impacted both the structure and operation of EU financial markets. Some of the main changes introduced under MiFID II include applying enhanced disclosure requirements, enhancing conduct of business and governance requirements, broadening the scope of pre and post trade transparency, increasing transaction reporting requirements, transforming the relationship between client commissions and research, and further regulation of trading venues. Compliance with MiFID II has increased operational complexity and increased our costs. For example, we began to pay for third-party investment research used by our UK-based investment manager, T. Rowe Price International Ltd, in 2018, and we pay for all the research needs of our investment professionals globally. •New laws or regulations involving ESG integration and disclosure may materially impact the asset management industry. For example, the EU’s Sustainable Finance Disclosure Regulation imposes mandatory ESG disclosure obligations on asset managers and other financial markets participants, requiring all covered firms to disclose how financial products integrate sustainability risks in the investment process, including whether they consider adverse sustainability impacts, and sustainability-related information for products promoting sustainable objectives. The availability of such disclosures may impact the investment decisions of European investors. Furthermore, federal regulators, as well as state legislatures and regulators in the U.S. have proposed or adopted laws and regulations to pursue similar initiatives, such as the SEC’s proposed climate disclosure rules. Conversely, some U.S. states have adopted or proposed legislation or otherwise have taken official positions restricting or prohibiting state government entities from doing certain business with entities they believe are discriminating against particular industries or considering ESG factors in their investment processes and proxy voting. As jurisdictions globally continue to develop legal frameworks on ESG and sustainability regulations, our industry and business may face increasingly fragmented regulatory frameworks, which may result in complex and potentially conflicting compliance obligations and legal and regulatory uncertainty. We cannot predict the nature of future changes to the legal and regulatory requirements applicable to our business, nor the extent of the impacts that will result from current or future proposals. However, any such changes are likely to increase the costs of compliance and the complexity of our operations, as well as result in changes to our product or service offerings. The changing regulatory landscape may also impact a number of service providers that provide services to us and, to the extent such service providers alter their operations or increase their fees, it may impact our expenses or those of the products we offer.

From time to time, we consider strategic opportunities, including potential acquisitions, dispositions, consolidations, organizational restructurings, joint ventures or similar transactions, any of which may impact our business. We cannot be certain that we will be able to identify, consummate and successfully complete such transactions, and no assurance can be given with respect to the timing, likelihood or business effect of any possible transaction. These initiatives typically involve a number of risks and present financial, managerial and operational challenges to our ongoing business operations. In addition, acquisitions and related transactions involve risks, including unanticipated problems regarding integration of investor account and investment security recordkeeping, additional or new regulatory requirements, operating facilities and technologies, and new personnel; adverse effects on our earnings in the event acquired intangible assets or goodwill become impaired; distracting management and other key personnel from our existing businesses; and the existence of liabilities or contingencies not disclosed to or otherwise known by us prior to closing a transaction. Page 19 Page 19 Page 19 Table of Contents Table of Contents We own a 23% investment in UTI Asset Management Company Ltd ("UTI"), an Indian asset management company, and we may consider non-controlling minority investments in other entities in the future. We may not realize future returns from such investments or any collaborative activities that may develop in the future.

From time to time, we consider strategic opportunities, including potential acquisitions, dispositions, consolidations, organizational restructurings, joint ventures or similar transactions, any of which may impact our business. We cannot be certain that we will be able to identify, consummate and successfully complete such transactions, and no assurance can be given with respect to the timing, likelihood or business effect of any possible transaction. These initiatives typically involve a number of risks and present financial, managerial and operational challenges to our ongoing business operations. In addition, acquisitions and related transactions involve risks, including unanticipated problems regarding integration of investor account and investment security recordkeeping, additional or new regulatory requirements, operating facilities and technologies, and new employees; adverse effects on our earnings in the event acquired intangible assets or goodwill become impaired; distracting management and other key personnel from our existing businesses; and the existence of liabilities or contingencies not disclosed to or otherwise known by us prior to closing a transaction. We own a 23% investment in UTI Asset Management Company Ltd ("UTI"), an Indian asset management company, and we may consider non-controlling minority investments in other entities in the future. We may not realize future returns from such investments or any collaborative activities that may develop in the future. On December 29, 2021, we completed our acquisition of OHA. Important ongoing integration-related risks, including that the anticipated benefits of the transaction may not be fully realized, or may take longer to realize than expected, or that the integration may cost more or take longer than expected, could adversely impact our operating results. Furthermore, a significant portion of OHA's revenue is derived from performance fees on investment advisory agreements and carried interest from general partner interests in affiliated private investment funds. Generally, OHA is entitled to a performance fee and carried interest under these agreements only in cases where the related portfolio investment return exceeds agreed-upon relative or absolute investment return thresholds, and there can be no assurance that these thresholds will be met.

There is uncertainty associated with the regulatory and compliance environments in which we operate. Our business is subject to extensive and complex, overlapping and/or conflicting, and frequently changing rules, regulations, policies and legal interpretations, around the world. Additionally, over the past several years the pace and scope of new rules, regulations, policies and legal interpretations has increased both in the U.S. and globally, which requires additional resources and expense in order for us to digest and institute processes to comply. Furthermore, in recent years several governments have proposed or enacted policies, legislation, and executive actions relating to ESG and DEI initiatives for the private sector. More recently, interested parties on both sides of the debate have sought to utilize the courts, social media and other means to change the practices of companies. We communicate certain approaches regarding environmental, social, diversity, and other ESG-related matters in our regulatory filings or in other public disclosures. We could be criticized for the accuracy or completeness of the disclosure and for the scope or nature of such initiatives or approaches, or for any changes to them over time. Page 23 Page 23 Page 23 Table of Contents Table of Contents If we are unable to maintain compliance with applicable laws and regulations, we could be subject to criminal and civil liability, the suspension of our personnel, fines, penalties, sanctions, injunctive relief, exclusion from certain markets, or temporary or permanent loss of licenses or registrations necessary to conduct our business. A regulatory proceeding, even if it does not result in a finding of wrongdoing or sanctions, could consume a substantial amount of time, management attention, and expense. Any regulatory investigation and any failure to maintain compliance with applicable laws and regulations could severely damage our reputation, adversely affect our ability to conduct business and decrease revenue and net income, and potentially result in complex and costly litigation.

There is uncertainty associated with the regulatory and compliance environments in which we operate. Our business is subject to extensive and complex, overlapping and/or conflicting, and frequently changing rules, regulations, policies and legal interpretations, around the world. Additionally, over the past several years the pace 20Page 20 20Page 20 20 Page 20 Table of Contents Table of Contents and scope of new rules, regulations, policies and legal interpretations has increased both in the U.S. and globally, which requires additional resources and expense in order for us to digest and institute process to comply. If we are unable to maintain compliance with applicable laws and regulations, we could be subject to criminal and civil liability, the suspension of our employees, fines, penalties, sanctions, injunctive relief, exclusion from certain markets, or temporary or permanent loss of licenses or registrations necessary to conduct our business. A regulatory proceeding, even if it does not result in a finding of wrongdoing or sanctions, could consume substantial amount of time, management attention and expense. Any regulatory investigation and any failure to maintain compliance with applicable laws and regulations could severely damage our reputation, adversely affect our ability to conduct business and decrease revenue and net income, and potentially result in complex and costly litigation.

Our business and the assets we manage on behalf of clients could be impacted by climate change-related risks. Climate change may present risk to our business through changes in the physical climate or from the process of transitioning to a lower-carbon economy. Climate-related physical risks arise from the direct impacts of a changing climate in the short-, medium- and long-term. Such risks may include an increase in the intensity and frequency of extreme weather events, changes in temperature, rising sea levels and increase of wildfires, which may damage infrastructure and facilities, increase energy costs, negatively impact workforces, as well as disrupt connectivity or supply chains. Within our investment portfolios, changes in weather patterns around the world can impact companies in which we invest on behalf of our clients. Weather pattern changes may cause investment professionals to re-evaluate investments in affected companies. Valuations may be impacted resulting in declines in asset values and potential loss of revenue. Climate-related transition risks arise from exposure to the transition to a lower-carbon economy through policy, regulatory, technology and market changes. For instance, new regulations and changes in existing regulations may lead to increased compliance costs, enhanced reporting obligations, regulation of existing products and/or services, exposure to litigation, and aggressive or inconsistent levels of regulatory enforcement globally. Additionally, climate change may influence client preferences by increasing the demand for investment products oriented toward climate change mitigation. Conversely, a climate-related backlash could negatively impact demand for climate or transition related products. Climate change may also impact our reputation if we are perceived to fall short of our own corporate commitments or stakeholder expectations. Any of these risks may have a material adverse effect on our AUM, revenue and earnings.

Our business and those of our clients could be impacted by climate change-related risks. Climate change may present risk to our business through changes in the physical climate or from the process of transitioning to a lower-carbon economy. Climate-related physical risks arise from the direct impacts of a changing climate in the short- and long-term. Such risks may include an increase in the intensity and frequency of extreme weather events, changes in temperature and rising sea level, which may damage infrastructure and facilities, increase our energy costs, negatively impact our workforce, as well as disrupt connectivity or supply chains. Climate-related transition risks arise from exposure to the transition to a lower-carbon economy through policy, regulatory, technology and market changes. For instance, new regulations or guidance relating to climate change, as well as the perspectives of stakeholders regarding climate change, may impact our business and reputation, which could increase costs on our business. Climate-related physical and transition risks could impact us both directly and indirectly through adverse impacts to our clients and the global economy in general, including as a result of interruptions to infrastructure and our operations, declines in asset values and stranded assets, changes in client preferences, increased regulatory and compliance costs and significant business disruptions. Any of these risks may have a material adverse effect on our AUM, revenue and earnings. 20Page 19 20Page 19 20 Page 19 Table of Contents Table of Contents

Pandemics, epidemics or disease outbreaks, as well as measures enacted to prevent their spread, may create significant volatility, uncertainty and disruption to the global economy and may impact our business, financial condition and results of operations. For example, the coronavirus pandemic adversely affected global financial markets and impacted global supply chains. Concerns and uncertainty regarding pandemics, epidemics or disease outbreaks could lead to increased volatility in global capital and credit markets, adversely affect our operations, key executives and other personnel, clients, investors, service providers and other vendors, suppliers, and other third parties, and negatively impact our assets under management, revenues, income, business and operations. Since our revenue is based on the market value and composition of the assets under our management, the impact of such Page 18 Page 18 Page 18 Table of Contents Table of Contents events on global financial markets and our clients’ investment decisions could adversely affect our revenue and operating results. Furthermore, while we have in place robust and well-established plans for operational resiliency and business continuity that address the potential impact of pandemics, epidemics or disease outbreaks to our personnel and our facilities, and to date have been successful in navigating the challenges presented by the COVID-19 pandemic, no assurance can be given that the steps we have taken will continue to be effective or appropriate against future pandemics, epidemics or disease outbreaks. In the event that our personnel become incapacitated by pandemics, epidemics or disease outbreaks, our business operations may be impacted, which could lead to reputational and financial harm.

Pandemics, epidemics or disease outbreaks, as well as measures enacted to prevent their spread, may create significant volatility, uncertainty and disruption to the global economy and may impact our business, financial condition and results of operations. For example, the coronavirus pandemic has adversely affected global financial markets and impacted global supply chains. Concerns and uncertainty regarding pandemics, epidemics or disease outbreaks could lead to increased volatility in global capital and credit markets, adversely affect our operations, key executives and other personnel, clients, investors, service providers and other vendors, suppliers, and other third parties, and negatively impact our assets under management, revenues, income, business and operations. Since our revenue is based on the market value and composition of the assets under our management, the impact of such events on global financial markets and our clients’ investment decisions could adversely affect our revenue and operating results. Furthermore, while we have in place robust and well-established plans for operational resiliency and business continuity that address the potential impact to our associates and our facilities, and a comprehensive suite of technologies which enable our associates to work remotely and conduct business, and to date while we have been successful in navigating these challenges, no assurance can be given that the steps we have taken will continue to be effective or appropriate. Additionally, we must effectively ensure a safe working environment for associates working onsite in our offices, and adequately manage the post-pandemic transition from remote to onsite or a hybrid working environment. In the event that our associates become incapacitated by the coronavirus, our business operations may be impacted, which could lead to reputational and financial harm.