Biggest changeGeneral Data Protection Regulation (GDPR) and the California Privacy Rights Act (CPRA), could adversely affect our financial condition, operating results and our reputation; • Our business performance and growth plans could be negatively affected if we are not able to develop and implement improvements in technology or respond effectively to the threat of digital disruption and other technological change; • We are subject to significant uninsured exposures arising from errors and omissions, breach of fiduciary duty and other claims; • We cannot guarantee that we are or will be in compliance with all current and potentially applicable U.S. federal and state or foreign laws and regulations, and actions by regulatory authorities or changes in legislation and regulation in the jurisdictions in which we operate could have a material adverse effect on our business; • O ur business or reputation could be harmed by our reliance on third-party providers or introducers; • We may not be able to effectively identify and manage actual and apparent conflicts of interest; • The loss of members of our senior management team or other key colleagues, or if we are unsuccessful in our efforts to attract, retain and develop talent, could have a material adverse effect on our business; • Failure to maintain our corporate culture, particularly in a hybrid work environment, could damage our reputation; • Increasing scrutiny and changing laws and expectations from regulators, investors, clients and our colleagues with respect to our environmental, social and governance (ESG) practices and disclosure may impose additional costs on us or expose us to new or additional risks; • We face significant competitive pressures in each of our businesses, including from disintermediation, as our competitive landscape continues to evolve; • We rely on a large number of vendors and other third parties to perform key functions of our business operations and to provide services to our clients.
Biggest changeSUMMARY RISK FACTORS Some of the factors that could materially and adversely affect our business, financial condition, results of operations or prospects, include the following: • Our results of operations and investments could be adversely affected by geopolitical or macroeconomic conditions; • We are subject to significant uninsured exposures arising from errors and omissions, breach of fiduciary duty and other claims; • We cannot guarantee that we are or will be in compliance with all current and potentially applicable U.S. federal and state or foreign laws and regulations, and actions by regulatory authorities or changes in legislation and regulation in the jurisdictions in which we operate could have a material adverse effect on our business; • O ur business or reputation could be harmed by our reliance on third-party providers or introducers; • We may not be able to effectively identify and manage actual and apparent conflicts of interest; • We could incur significant liability or our reputation could be damaged if our information systems are breached or we otherwise fail to protect client or Company data or information systems; • The costs to comply with, or our failure to comply with, U.S. and foreign laws related to privacy, data security and data protection, such as the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, (CCPA), could adversely affect our financial condition, operating results and our reputation; • Our business performance and growth plans could be negatively affected if we are not able to develop and implement improvements in technology or respond effectively to the threat of digital disruption and other technological change such as AI; • The loss of members of our senior management team or other key colleagues, or if we are unsuccessful in our efforts to attract, retain and develop talent, could have a material adverse effect on our business; • Failure to maintain our corporate culture, particularly in a hybrid work environment, could damage our reputation; • Increasing scrutiny and changing laws and expectations from regulators, investors, clients and our colleagues with respect to our environmental, social and governance (ESG) practices and disclosure may impose additional costs on us or expose us to new or additional risks; • We face significant competitive pressures in each of our businesses, including from disintermediation, as our competitive landscape continues to evolve; • We rely on a large number of vendors and other third parties to perform key functions of our business operations and to provide services to our clients.
We are at risk of a cyberattack involving a vendor or other third party, which could result in a breakdown of such third party’s data protection processes or the cyberattackers gaining access to our infrastructure through a supply chain attack.
We are at risk of a cyberattack involving a vendor or other third party, which could result in a breakdown of such third party’s data protection processes or the cyberattackers gaining access to our infrastructure or data through a supply chain attack.
In the future, these types of incidents could result in personal, sensitive, confidential or proprietary information being lost or stolen, surreptitiously modified, rendered inaccessible for any period of time, or maliciously made public, including client, employee or Company data, which could have a material adverse effect on our business.
In the future, these types of incidents could result in personal, sensitive, confidential or proprietary information, including client, employee or Company data, being lost or stolen, surreptitiously modified, rendered inaccessible for any period of time, or maliciously made public, which could have a material adverse effect on our business.
Our utilization rates are affected by a number of factors, including: • general economic conditions; • our ability to transition consultants promptly from completed projects to new assignments, and to engage newly-hired consultants quickly in revenue-generating activities; • our ability to continually secure new business engagements, particularly because a portion of our work is project-based rather than recurring in nature; • our ability to forecast demand for our services and thereby maintain appropriate headcount in each of our geographies and workforces; • our ability to retain key colleagues and consulting professionals; • unanticipated changes in the scope of client engagements; • the potential for conflicts of interest that might require us to decline client engagements that we otherwise would have accepted; • our need to devote time and resources to sales, training, professional development and other non-billable activities; and • the potential disruptive impact of acquisitions and dispositions.
Our utilization rates are affected by a number of factors, including: • general economic conditions; 31 • our ability to transition consultants promptly from completed projects to new assignments, and to engage newly-hired consultants quickly in revenue-generating activities; • our ability to continually secure new business engagements, particularly because a portion of our work is project-based rather than recurring in nature; • our ability to forecast demand for our services and thereby maintain appropriate headcount in each of our geographies and workforces; • our ability to retain key colleagues and consulting professionals; • unanticipated changes in the scope of client engagements; • the potential for conflicts of interest that might require us to decline client engagements that we otherwise would have accepted; • our need to devote time and resources to sales, training, professional development and other non-billable activities; and • the potential disruptive impact of acquisitions and dispositions.
Bribery Act 2010; • limitations or restrictions that foreign or U.S. governments and regulators may impose on the products or services we sell, the methods by which we sell our products and services and the manner in which and the amounts we are compensated; • potential limitations or difficulties in protecting our intellectual property in various foreign jurisdictions; • limitations that foreign governments may impose on the conversion of currency or the payment of dividends or other remittances to us from our non-U.S. subsidiaries; • engaging and relying on third parties to perform services on behalf of the Company; and • potential difficulties in monitoring employees in geographically dispersed locations.
Bribery Act 2010; 28 • limitations or restrictions that foreign or U.S. governments and regulators may impose on the products or services we sell, the methods by which we sell our products and services and the manner in which and the amounts we are compensated; • potential limitations or difficulties in protecting our intellectual property in various foreign jurisdictions; • limitations that foreign governments may impose on the conversion of currency or the payment of dividends or other remittances to us from our non-U.S. subsidiaries; • engaging and relying on third parties to perform services on behalf of the Company; and • potential difficulties in monitoring employees in geographically dispersed locations.
Privacy violations, including unauthorized use disclosure or transfer of sensitive or confidential client or Company data, whether through systems failure, employee negligence, fraud or misappropriation, by the Company, our vendors or other parties with whom we do business (if they fail to meet the standards we impose) could damage our reputation and subject us to significant litigation, monetary damages, regulatory enforcement actions, fines and criminal prosecution in one or more jurisdictions.
Privacy violations, including unauthorized use disclosure or transfer of sensitive, personal or confidential client or Company data, whether through systems failure, employee negligence, fraud or misappropriation, by the Company, our vendors or other parties with whom we do business (if they fail to meet the standards we impose) could damage our reputation and subject us to significant litigation, monetary damages, regulatory enforcement actions, fines and criminal prosecution in one or more jurisdictions.
Given the 29 significant complexity of the rules, and the potential for additional guidance from the U.S. Treasury, the Securities and Exchange Commission, the Financial Accounting Standards Board or other regulatory authorities, recognized impacts in future periods could be significantly different from our current estimates. Such uncertainty may also result in increased scrutiny from, or disagreements with, tax authorities.
Given the significant complexity of the rules, and the potential for additional guidance from the U.S. Treasury, the Securities and Exchange Commission, the Financial Accounting Standards Board or other regulatory authorities, recognized impacts in future periods could be significantly different from our current estimates. Such uncertainty may also result in increased scrutiny from, or disagreements with, tax authorities.
Mercer may also be perceived as making inaccurate or misleading statements regarding the investment strategies of our offerings with respect to ESG or sustainability, commonly referred to as “greenwashing,” or recommending certain asset managers to clients or offering delegated solutions to an investment consulting client, solely to enhance its own compensation or due to other perceived conflicts of interest.
Mercer may also be perceived as making inaccurate or misleading statements regarding the investment strategies of our offerings or investments with respect to ESG or sustainability, commonly referred to as “greenwashing,” or recommending certain asset managers to clients or offering delegated solutions to an investment consulting client, solely to enhance its own compensation or due to other perceived conflicts of interest.
Global economic conditions, including slower GDP growth or recession, inflationary pressure and foreign exchange rate volatility, may negatively impact businesses and financial institutions. Many of our clients, including financial institutions, corporations, government entities and pension plans, have reduced expenses, including amounts spent on consulting services, and used internal resources instead of consultants during difficult economic periods.
Global economic conditions, including slower GDP growth or recession, inflationary pressure and foreign exchange rate volatility, may negatively impact businesses and financial institutions. Many of our clients, including 30 financial institutions, corporations, government entities and pension plans, have reduced expenses, including amounts spent on consulting services, and used internal resources instead of consultants during difficult economic periods.
We also may be unable to detect an incident, assess its severity or impact, or appropriately respond in a timely manner. In addition, our liability insurance, which includes cyber insurance, may not be sufficient in type or amount to cover us against claims related to security breaches, cyberattacks and other related data and system incidents.
We also may be unable to detect an incident, assess its severity or impact, or appropriately respond in a timely or adequate manner. In addition, our liability insurance, which includes cyber insurance, may not be sufficient in type or amount to cover us against claims related to security breaches, cyberattacks and other related data and system incidents.
The inability to implement, maintain and upgrade adequate safeguards could have a material adverse effect on our business. Our information systems must be continually updated, patched, and upgraded to protect against known vulnerabilities. The volume of new software vulnerabilities has increased markedly, as has the criticality of patches and other remedial measures.
The inability to implement, maintain and upgrade adequate safeguards could have a material adverse effect on our business. Our information systems must be continually updated, patched, and upgraded to protect against known vulnerabilities. The volume of new software vulnerabilities has increased markedly, as has the criticality of patches and other mitigation and remedial measures.
For example, hackers have increasingly targeted companies by attacking internet-connected industrial control and safety control systems. An extended outage could result in the loss of clients and a decline in our revenues. In the worst case, any manipulation of the control systems of critical infrastructure may even result in the loss of life.
For example, hackers have 24 increasingly targeted companies by attacking internet-connected industrial control and safety control systems. An extended outage could result in the loss of clients and a decline in our revenues. In the worst case, any manipulation of the control systems of critical infrastructure may even result in the loss of life.
In operating our business and providing services and solutions to clients, we collect, use, store, transmit and otherwise process certain electronic information, including personal, confidential, proprietary and sensitive data such as information related to financial records, health care, mergers and acquisitions and personal data of our clients, colleagues and vendors.
In operating our business and providing services and solutions to clients, we collect, use, store, transmit and otherwise process certain electronic information, including personal, confidential, proprietary and sensitive data such as financial records, health care, mergers and acquisitions and personal data of our clients, colleagues and vendors.
As a U.S.-domiciled company, any such increases would likely have a disproportionate impact on us compared to our foreign-based competitors. Global Operations We are exposed to multiple risks associated with the global nature of our operations. We conduct business globally.
As a U.S.-domiciled company, any such increases would likely have a disproportionate impact on us compared to our foreign-based competitors. 27 Global Operations We are exposed to multiple risks associated with the global nature of our operations. We conduct business globally.
In addition, our ability to obtain financing will depend in part upon prevailing conditions in credit and capital markets, which are beyond our control. Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate.
In addition, our ability to obtain financing will depend in part upon prevailing conditions in credit and capital markets, which are beyond our control. 25 Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate.
Our policies, employee training (including phishing prevention training), procedures and technical safeguards may also be insufficient to prevent or detect improper access to confidential, personal or proprietary information.
Our policies, employee training (including phishing prevention training), procedures and technical safeguards may also be insufficient to prevent, detect or remediate improper access to confidential, personal or proprietary information.
If we fail to comply or are accused of failing to comply with applicable laws and regulations, including those referred to above, or new and evolving regulations regarding cybersecurity, artificial intelligence or environmental, social and governance matters, we may become subject to investigations, criminal penalties, civil remedies or other consequences, including fines, injunctions, loss of an operating license or approval, increased scrutiny or oversight by regulatory authorities, the suspension of individual employees, limitations on engaging in a particular business or redress to clients or other parties, and we may become exposed to negative publicity or reputational damage.
If we fail to comply or are accused of failing to comply with applicable laws and regulations, including those referred to above, or new and evolving regulations regarding cybersecurity, AI or environmental, social and governance matters, we may become subject to investigations, criminal penalties, civil remedies or other consequences, including fines, injunctions, loss of an operating license or approval, increased scrutiny or oversight by regulatory authorities, the suspension of individual employees, limitations on engaging in a particular business or redress to clients or other parties, and we may become exposed to negative publicity or reputational damage.
In our Consulting segment, we compete for business with numerous consulting firms and similar organizations, many of which also provide, or are affiliated with firms that provide, accounting, information systems, technology and financial services. Such competitors may be able to offer more comprehensive 25 products and services to potential clients, which may give them a competitive advantage.
In our Consulting segment, we compete for business with numerous consulting firms and similar organizations, many of which also provide, or are affiliated with firms that provide, accounting, information systems, technology and financial services. Such competitors may be able to offer more comprehensive products and services to 23 potential clients, which may give them a competitive advantage.
Certain of 27 our businesses also rely on financings by the Company to fund the underwriting of their client's debt and equity capital raising transactions.
Certain of our businesses also rely on financings by the Company to fund the underwriting of their client's debt and equity capital raising transactions.
These include: • the number of client engagements during a quarter; • the possibility that clients may decide to delay or terminate a current or anticipated project as a result of factors unrelated to our work product or progress; 28 • fluctuations in capacity and utilization rates and clients' ability to terminate engagements without penalty; • our net colleague hires and related compensation and benefits expense; • potential limitations on the clients or industries we serve resulting from increased regulation or changing stakeholder expectations on ESG issues; • the impact of changes in accounting standards or in our accounting estimates or assumptions; • the impact on us or our clients of changes in legislation, regulation and legal guidance or interpretations in the jurisdictions in which we operate, in particular as a result of increased regulatory activity and enforcement; • seasonality due to the impact of regulatory deadlines, policy renewals and other timing factors to which our clients are subject; • the success of our acquisitions or investments; • macroeconomic factors such as changes in foreign exchange rates, interest rates and global public and private capital markets, particularly in the case of Mercer, where fees in its investments business and certain other business lines are derived from the value of assets under management, advisement or administration; and • general economic conditions, including factors beyond our control affecting economic conditions such as global health crises or pandemics, severe weather, climate change, geopolitical unrest such as the war in Ukraine, protests and riots or other catastrophic events, since our results of operations are directly affected by the levels of business activity of our clients, which in turn are affected by the level of economic activity in the industries and markets that they serve.
These include: • the number of client engagements during a quarter; • the possibility that clients may decide to delay or terminate a current or anticipated project as a result of factors unrelated to our work product or progress; • fluctuations in capacity and utilization rates and clients' ability to terminate engagements without penalty; • our net colleague hires and related compensation and benefits expense; • potential limitations on the clients or industries we serve resulting from increased regulation or changing stakeholder expectations on ESG issues; 26 • the impact of changes in accounting standards or in our accounting estimates or assumptions; • the impact on us or our clients of changes in legislation, regulation and legal guidance or interpretations in the jurisdictions in which we operate, in particular as a result of increased regulatory activity and enforcement; • seasonality due to the impact of regulatory deadlines, policy renewals and other timing factors to which our clients are subject; • the success of our acquisitions or investments; • macroeconomic factors such as changes in foreign exchange rates, interest rates and global public and private capital markets, particularly in the case of Mercer, where fees in its investments business and certain other business lines are derived from the value of assets under management, advisement or administration; and • general economic conditions, including factors beyond our control affecting economic conditions such as global health crises or pandemics, severe weather, climate change, geopolitical unrest such as the war in Ukraine and the escalating conflict throughout the Middle East, protests and riots or other catastrophic events, since our results of operations are directly affected by the levels of business activity of our clients, which in turn are affected by the level of economic activity in the industries and markets that they serve.
Improper collection, use disclosure, cross border transfer, and retention of confidential, personal, or proprietary data could result in regulatory scrutiny, legal and financial liability, or harm to our reputation. In operating our business and providing services and solutions to clients, we store and transfer sensitive employee and client data, including personal data, in and across multiple jurisdictions.
Improper collection, use, disclosure, cross border transfer, retention and other processing of confidential, personal, or proprietary data could result in regulatory scrutiny, legal and financial liability, or harm to our reputation. In operating our business and providing services and solutions to clients, we store and transfer sensitive employee and client data, including personal data, in and across multiple jurisdictions.
In particular, heightened demand for, and scrutiny of, ESG and sustainable-related products, funds, investment 24 strategies and advice has increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements, commonly referred to as "greenwashing" or that we have otherwise run afoul of regulation.
In particular, heightened 22 demand for, and scrutiny of, ESG and sustainable-related products, funds, investment strategies and advice has increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements, commonly referred to as "greenwashing" or that we have otherwise run afoul of regulation.
We may be unable to effectively limit our potential liability in certain jurisdictions, including through insurance, or in connection with certain types of claims, particularly those concerning claims of a breach of fiduciary duty. In establishing liabilities for E&O claims under U.S. generally accepted accounting principles ("U.S.
We may be unable to effectively limit our potential liability in certain jurisdictions, including through insurance, or in connection with certain types of claims, particularly those concerning claims of a breach of fiduciary duty. In establishing liabilities for E&O claims in accordance with U.S. generally accepted accounting principles ("U.S.
Such perceptions or accusations could damage our reputation, result in litigation or regulatory enforcement actions, and adversely affect our business. Furthermore, perceptions of our efforts to achieve ESG goals or advance ESG and sustainable-related products, funds, investment strategies or advice may differ widely among stakeholders and could present risks to our reputation and business.
Such perceptions or accusations could damage our reputation, result in litigation or regulatory enforcement actions, and adversely affect our business. Furthermore, perceptions of our efforts to achieve ESG goals or advance ESG and sustainable-related products, funds, investment strategies or advice may differ widely among stakeholders and could present risks to our reputation and business, including litigation risk.
Changes in the value of equity, debt, currency real estate, commodities, alternatives or other asset classes, in particular as a 32 result of a downturn in the global markets, could cause the value of our assets under management or advisement, and the fees earned by Mercer to decline.
Changes in the value of equity, debt, currency, real estate, commodities, alternatives or other asset classes, in particular as a result of a downturn in the global markets, could cause the value of assets under management or advisement, and the fees earned by Mercer to decline.
The amount of other compensation that we receive from insurance companies, separate from retail fees and commissions, has increased in the last several years, both on an underlying basis and through acquisition an d represented approximately 6% of Marsh's revenue in 2022.
The amount of other compensation that we receive from insurance companies, separate from retail fees and commissions, has increased in the last several years, both on an underlying basis and through acquisition an d represented approximately 6% of Marsh's revenue in 2023.
In addition to remediating newly identified vulnerabilities, previously identified vulnerabilities must also be continuously addressed. Accordingly, we are at risk that cyberattackers exploit these known vulnerabilities before they have been communicated by vendors or addressed.
In addition to mitigating and remediating newly identified vulnerabilities, previously identified vulnerabilities must also be continuously addressed. Accordingly, we are at risk that cyberattackers exploit these known vulnerabilities before they have been communicated by vendors or addressed.
We provide these services to a broad client base, including clients in the public sector for our investment services. Matters often relate to services provided by the Company dating back many years. Such claims may subject us to significant liability for monetary damages, including punitive and treble damages, negative publicity and reputational harm, and may divert personnel and management resources.
We provide these services to a broad client base, including clients in the public sector. Matters may relate to services provided by the Company dating back many years. Such claims may subject us to significant liability for monetary damages, including punitive and treble damages, negative publicity and reputational harm, and may divert personnel and management resources.
We rely on a large number of vendors and other third parties to perform key functions of our business operations and to provide services to our clients. These vendors and third parties may act in ways that could harm our business.
We rely on a large number of vendors and other third parties to perform key functions of our business operations and to provide services to our clients. These vendors and third parties may act or fail to act in ways that could harm our business.
Some of the laws enacted in recent years, including those in China and the Kingdom of Saudi Arabia, the laws include data localization elements that will require that certain personal data stay within their borders.
Some of the global laws enacted in recent years, including those in China and the Kingdom of Saudi Arabia, also include data localization elements that will require that certain personal data stay within their borders.
Currently, the use of these assumptions results in a lower funded status than determined under U.S. GAAP and may result in contributions irrespective of the U.S. GAAP funded status. The financial calculations relating to our defined benefit pension plans are complex. Pension plan assets could decrease as the result of poor future asset performance.
Currently, the use of these assumptions results in a lower funded status than determined in accordance with U.S. GAAP and may result in contributions irrespective of the U.S. GAAP funded status. The financial calculations relating to our defined benefit pension plans are complex. Pension plan assets could decrease as the result of poor future asset performance.
Outside the United States, contributions are generally based on statutory requirements and local funding practices, which may differ from measurements under U.S. GAAP. In the U.K., for example, the assumptions used to determine pension contributions are the result of legally-prescribed negotiations between the Company and the plan trustees.
Outside the United States, contributions are generally based on statutory requirements and local funding practices, which may differ from measurements in accordance with U.S. GAAP. In the U.K., for example, the assumptions used to determine pension contributions are the result of legally-prescribed negotiations between the Company and the plan trustees.
Our activities are subject to extensive regulation under the laws of the United States and its various states, the United Kingdom, the European Union and its member states, Australia and the other jurisdictions in which we operate.
Our activities are subject to extensive regulation under the laws of the U.S. and its various states, the United Kingdom, the European Union and its member states, Australia and the other jurisdictions in which we operate.
Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers, operational and technology risks, conflicts of interest, ESG and greenwashing, asset perfor mance and regulatory compliance, that, if realized, could result in significant damage to our business.
Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers and custodians, operations and technology risks, conflicts of interest, ESG and greenwashing, asset perfor mance and regulatory compliance, that, if realized, could result in significant damage to our business.
Our business depends on our ability to obtain payment from our clients of the amounts they owe us for the work we perform. As of December 31, 2022, our receivables for our commissions and fees were approximately $5.3 billion, or approximately one-quarter of our total annual revenues, and portions of our receivables are increasingly concentrated in certain businesses and geographies.
Our business depends on our ability to obtain payment from our clients of the amounts they owe us for the work we perform. As of December 31, 2023, our receivables for our commissions and fees were approximately $5.8 billion, or approximately one-quarter of our total annual revenues, and portions of our receivables are increasingly concentrated in certain businesses and geographies.
These include, among others, risks relating to: • economic and political conditions in the countries in which we operate; • client concentration in certain high-growth countries in which we operate; • the length of payment cycles and potential difficulties in collecting accounts receivable; • unexpected increases in taxes or changes in U.S. or foreign tax laws, rulings, policies or related legal and regulatory interpretations, including upcoming changes to the U.K. statutory rate; • the implementation of the Organization for Economic Cooperation and Development (OECD) international tax framework, including the Pillar 2 minimum tax regime and the Pillar 1 profit reallocation regime, which could substantially increase the Company’s effective tax rate; • international initiatives to require multinational enterprises, like ours, to calculate and report profitability on a country-by-country basis, which could increase scrutiny by, or cause disagreements with, foreign tax authorities; • potential transfer pricing-related tax exposures that may result from the flow of funds among our subsidiaries and affiliates in the various jurisdictions in which we operate; • unexpected reassessment by tax authorities of interpretations of existing rules which may require companies to defend previously accepted positions and may create both new and prior-year exposures; • permanent establishments created due to colleagues traveling to and doing work in countries where the company has no presence, or living in such countries and working remotely post-pandemic, which are not properly compensated through transfer pricing; • our ability to obtain dividends or repatriate funds from our non-U.S. subsidiaries, including as a result of the imposition of currency controls and other government restrictions on repatriation in the jurisdictions in which our subsidiaries operate, fluctuations in foreign exchange rates and the imposition of withholding and other taxes on such payments; • geopolitical tensions, such as the war in Ukraine, in countries where we operate, international hostilities, international trade disputes, terrorist activities, natural disasters, pandemics, and infrastructure disruptions; • local investment or other financial restrictions that foreign governments may impose; • potential lawsuits, investigations, market studies, reviews or other activity by foreign regulatory or law enforcement authorities or legislatively appointed commissions, which may result in potential modifications to our businesses, related private litigation or increased scrutiny from U.S. or other regulators; • potential costs and difficulties in complying with a wide variety of foreign laws and regulations (including tax systems) administered by foreign government agencies, some of which may conflict with U.S. or other sources of law; 30 • potential costs and difficulties in complying, or monitoring compliance, with foreign and U.S. laws and regulations that are applicable to our operations abroad, including trade sanctions laws relating to countries such as Afghanistan, Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine (Russia-controlled territories) and Venezuela, anti-corruption laws such as the U.S.
These include, among others, risks relating to: • economic and political conditions in the countries in which we operate; • client concentration in certain high-growth countries in which we operate; • the length of payment cycles and potential difficulties in collecting accounts receivable; • unexpected increases in taxes or changes in U.S. or foreign tax laws, rulings, policies or related legal and regulatory interpretations, including recent changes to the U.K. statutory rate; • the implementation of the Organization for Economic Cooperation and Development (OECD) international tax framework, including the implementation of the Pillar 2 minimum tax regime by key jurisdictions in 2024 and the Pillar 1 profit reallocation regime, which could have an adverse effect on our effective tax rate, tax payments and results of operations; • international initiatives to require multinational enterprises, like ours, to calculate and report profitability on a country-by-country basis, which could increase scrutiny by, or cause disagreements with, foreign tax authorities; • potential transfer pricing-related tax exposures that may result from the flow of funds among our subsidiaries and affiliates in the various jurisdictions in which we operate; • unexpected reassessment by tax authorities of interpretations of existing rules which may require companies to defend previously accepted positions and may create both new and prior-year exposures; • litigation arising from ongoing and future controversies with tax authorities; • permanent establishments created due to colleagues traveling to and doing work in countries where the Company has no presence, or living in such countries and working remotely post-pandemic, which are not properly compensated through transfer pricing; • our ability to obtain dividends or repatriate funds from our non-U.S. subsidiaries, including as a result of the imposition of currency controls and other government restrictions on repatriation in the jurisdictions in which our subsidiaries operate, fluctuations in foreign exchange rates and the imposition of withholding and other taxes on such payments; • geopolitical tensions, such as the war in Ukraine and the escalating conflict throughout the Middle East, in countries where we operate, international hostilities, international trade disputes, terrorist activities, natural disasters, pandemics, and infrastructure disruptions; • local investment or other financial restrictions that foreign governments may impose; • potential lawsuits, investigations, market studies, reviews or other activity by foreign regulatory or law enforcement authorities or legislatively appointed commissions, which may result in potential modifications to our businesses, related private litigation or increased scrutiny from U.S. or other regulators; • potential costs and difficulties in complying with a wide variety of foreign laws and regulations (including tax systems) administered by foreign government agencies, some of which may conflict with U.S. or other sources of law; • potential costs and difficulties in complying, or monitoring compliance, with foreign and U.S. laws and regulations that are applicable to our operations abroad, including trade sanctions laws relating to countries such as Afghanistan, Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine (Russia-controlled territories) and Venezuela, anti-corruption laws such as the U.S.
Adverse regulatory, legal or other developments could have a material adverse effect on our business and expose the Company to negative publicity and reputational harm. RISKS RELATING TO OUR CONSULTING SEGMENT Our Consulting segment, conducted through Mercer and Oliver Wyman Group, represented 39% of our total revenue in 2022. Our businesses in this segment are subject to particular risks.
Adverse regulatory, legal or other developments could have a material adverse effect on our business and expose the Company to negative publicity and reputational harm. RISKS RELATING TO OUR CONSULTING SEGMENT Our Consulting segment, conducted through Mercer and Oliver Wyman Group, represented 38% of our total revenue in 2023. Our businesses in this segment are subject to particular risks.
Mercer's administration services include calculating benefits within complicated pension plan structures. Mercer's investments services include investment advice and management relating to defined benefit pension plan assets intended to fund present and future benefit obligations. Clients dissatisfied with our 33 services have brought, and may bring, significant claims against us, particularly in the United States and the United Kingdom.
Mercer's administration services include calculating benefits within complicated pension plan structures. Mercer's investments services include investment advice and management relating to defined benefit pension plan assets intended to fund present and future benefit obligations. Clients dissatisfied with our services have brought, and may bring, significant claims against us, particularly in the U.S. and the United Kingdom.
Our business performance and growth plans could be negatively affected if we are not able to develop and implement improvements in technology or respond effectively to the threat of digital disruption and other technological change.
Our business performance and growth plans could be negatively affected if we are not able to develop and implement improvements in technology or respond effectively to the threat of digital disruption and other technological change such as AI.
There is increased focus, including from governmental organizations, regulators (including the SEC in the United States), investors, colleagues and clients, on ESG issues such as environmental stewardship, climate change, greenhouse gas emissions, inclusion and diversity, human rights, racial justice, pay equity, workplace conduct, cybersecurity and data privacy.
There is increased focus, including from governmental organizations, regulators (including the SEC in the U.S.), investors, colleagues and clients, on ESG issues such as environmental stewardship, climate change, greenhouse gas emissions, inclusion and diversity, human rights, racial justice, pay equity, workplace conduct, cybersecurity and data privacy.
A downgrade to a rating below investment-grade could result in greater operational risks through increased operating costs and increased competitive pressures. Our current debt level could adversely affect our financial flexibility. As of December 31, 2022, we had total consolidated debt outstanding of approximately $11.5 billion.
A downgrade to a rating below investment-grade could result in greater operational risks through increased operating costs and increased competitive pressures. Our current debt level could adversely affect our financial flexibility. As of December 31, 2023, we had total consolidated debt outstanding of approximately $13.5 billion.
We collect data from client and individuals located all over the world and leverage systems and teams to process it. As a result, we are subject to a variety of laws and regulations in the United States, Europe and around the world regarding privacy, data protection, data security and cyber security. These laws and regulations are continuously evolving and developing.
We collect data from client and individuals located all over the world and leverage systems and teams to process it. As a result, we are subject to a variety of laws and regulations in the U.S., Europe and around the world regarding privacy, data protection, data security and cyber security. These laws and regulations are continuously evolving and developing.
These vendors and third parties may act in ways that could harm our business; • Our inability to successfully recover should we experience a disaster or other business continuity or data recovery problem could cause material financial loss, loss of human capital, regulatory actions, reputational harm or legal liability; • We face risks when we acquire businesses; • If we are unable to collect our receivables, our results of operations and cash flows could be adversely affected; • We may not be able to obtain sufficient financing on favorable terms; 15 • Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate; • Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business; • Our quarterly revenues and profitability may fluctuate significantly; • Credit rating downgrades would increase our financing costs and could subject us to operational risk; • Our current debt level could adversely affect our financial flexibility; • The current U.S. tax regime makes our results more difficult to predict; • We are exposed to multiple risks associated with the global nature of our operations; • Results in our Risk and Insurance Services segment may be adversely affected by a general decline in economic activity; • Volatility or declines in premiums and other market trends may significantly impede our ability to grow revenues and profitability; • Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest more broadly, could have a material adverse effect on Marsh’s business, results of operations and financial condition; • Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers, operational and technology risks, conflicts of interest, ESG and greenwashing, asset performance and regulatory compliance, that, if realized, could result in significant damage to our business; • Revenues for the services provided by our Consulting segment may decline for various reasons, including as a result of changes in economic conditions, the value of equity, debt and other asset classes, our clients’ or an industry's financial condition or government regulation or an accelerated trend away from actively managed investments to passively managed investments; • Factors affecting defined benefit pension plans and the services we provide relating to those plans could adversely affect Mercer; and • The profitability of our Consulting segment may decline if we are unable to achieve or maintain adequate utilization and pricing rates for our consultants.
These vendors and third parties may act or fail to act in ways that could harm our business; • Our inability to successfully recover should we experience a disaster or other business continuity or data recovery problem could cause material financial loss, loss of human capital, regulatory actions, reputational harm or legal liability; • We face risks when we acquire or dispose of businesses; • If we are unable to collect our receivables, our results of operations and cash flows could be adversely affected; • We may not be able to obtain sufficient financing on favorable terms; • Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate; 13 • Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business; • Our quarterly revenues and profitability may fluctuate significantly; • Credit rating downgrades would increase our financing costs and could subject us to operational risk; • Our current debt level could adversely affect our financial flexibility; • The current U.S. tax regime has provisions which have unintended consequences and may also impact our tax rate in varying degrees based on where our global income is earned; • We are exposed to multiple risks associated with the global nature of our operations; • Results in our Risk and Insurance Services segment may be adversely affected by a general decline in economic activity; • Volatility or declines in premiums and other market trends may significantly impede our ability to grow revenues and profitability; • Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest, could have a material adverse effect on Marsh’s business, results of operations and financial condition; • Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers and custodians, operations and technology risks, conflicts of interest, ESG and greenwashing, asset performance and regulatory compliance, that, if realized, could result in significant damage to our business; • Revenues for the services provided by our Consulting segment may decline for various reasons, including as a result of changes in economic conditions, the value of equity, debt and other asset classes, our clients’ or an industry's financial condition or government regulation or an accelerated trend away from actively managed investments to passively managed investments; • Factors affecting defined benefit pension plans and the services we provide relating to those plans could adversely affect Mercer; and • The profitability of our Consulting segment may decline if we are unable to achieve or maintain adequate utilization and pricing rates for our consultants.
It is therefore important for us to attract, incentivize and retain significant revenue-producing employees and the key managerial and other professionals who support them. We face numerous challenges in this regard, including the intense competition for talent, which has accelerated through the pandemic.
It is therefore important for us to attract, incentivize and retain significant revenue-producing employees and the key managerial and other professionals who support them. We face numerous challenges in this regard, including the intense competition for talent, which has accelerated in recent years.
RISKS RELATING TO OUR RISK AND INSURANCE SERVICES SEGMENT Our Risk and Insurance Services segment, conducted through Marsh and Guy Carpenter, represented 61% of the Company's total revenue in 2022. Our business in this segment is subject to particular risks. Results in our Risk and Insurance Services segment may be a dversely affected by a general decline in economic activity.
RISKS RELATING TO OUR RISK AND INSURANCE SERVICES SEGMENT Our Risk and Insurance Services segment, conducted through Marsh and Guy Carpenter, represented 62% of the Company's total revenue in 2023. Our business in this segment is subject to particular risks. Results in our Risk and Insurance Services segment may be a dversely affected by a general decline in economic activity.
For example, these claims could include allegations related to losses incurred by policyholders arising from the COVID-19 pandemic, or losses from cyberattacks associated with policies where cyber risk was not specifically included or excluded in policies, commonly referred to as “silent cyber.” In our Consulting 21 segment, where we increasingly act in a fiduciary capacity through our investments business, such claims could include allegations of damages arising from the provision of consulting, investment management (including, for example, from trading or other operational errors), actuarial, pension administration and other services.
For example, these claims could include allegations related to losses from cyberattacks associated with policies where cyber risk was not specifically included or excluded in policies, commonly referred to as “silent cyber.” In our Consulting segment, where we increasingly act in a fiduciary capacity through our investments business, such claims could include allegations of damages arising from the provision of consulting, investment management (including, for example, from trading or other operational errors), actuarial, pension administration and other services.
We are at risk of attack by a variety of adversaries, including state-sponsored organizations, organized crime and hackers, through use of 17 increasingly sophisticated methods of attack, including the deployment of artificial intelligence to find and exploit vulnerabilities, "deep fakes", long-term, persistent attacks (referred to as advanced persistent threats) and the use of the IT supply chain to introduce malware through software updates or compromised suppliers accounts or hardware.
We are at risk of attack by a variety of adversaries, including nation states, state-sponsored organizations, organized crime and hackers, through use of increasingly sophisticated methods of attack, including the deployment of AI to find and exploit vulnerabilities, "deep fakes", long-term, persistent attacks (referred to as advanced persistent threats) and the use of the IT supply chain to introduce malware through software updates or compromised suppliers accounts or hardware.
Credit rating downgrades would increase our financing costs and could subject us to operational risk. Currently, the Company's senior debt is rated A- by S&P and Fitch and Baa1 by Moody's. The Company carries a Stable outlook with both S&P and Fitch and Positive outlook with Moody's.
Credit rating downgrades would increase our financing costs and could subject us to operational risk. Currently, the Company's senior debt is rated A- by S&P, A3 by Moody's and A- by Fitch. The Company carries a Stable outlook with S&P, Moody's and Fitch.
The Company's policy for funding its defined benefit pension plans is to contribute amounts at least sufficient to meet the funding requirements set forth by law. In the United States, contributions to these plans are based on ERISA guidelines.
The Company's policy for funding its defined benefit pension plans is to contribute amounts at least sufficient to meet the funding requirements set forth by law. In the U.S., contributions to these plans are based on ERISA guidelines.
Macroeconomic or geopolitical conditions, such as a slower economic growth or recession, the war in Ukraine, inflationary pressures or supply chain challenges, could result in financial difficulties for our clients, which could cause clients to delay payments to us, request modifications to their payment arrangements that could increase our receivables balance or default on their payment obligations to us.
Macroeconomic or geopolitical conditions, such as a slower economic growth or recession, the war in Ukraine and the escalating conflict throughout the Middle East, inflationary pressures or supply chain challenges, could result in financial difficulties for our clients, which could cause clients to delay payments to us, request modifications to their payment arrangements that could increase our receivables balance or default on their payment obligations to us.
In addition, we have migrated certain data, and may increasingly migrate data, to the cloud hosted by third-party providers. Some of these vendors and third parties also have direct access to our systems.
In addition, we have migrated certain data, and may increasingly migrate data, to the cloud where it is hosted by third-party providers. Some of these vendors and third parties also have direct access to our systems or data.
In addition, geopolitical conflict, such as the war in Ukraine, has resulted in, and may continue to result in, new and rapidly evolving trade sanctions, which 22 may increase our costs, negatively impact our revenues or impose additional operational limitations on our businesses.
In addition, geopolitical conflict, such as the war in Ukraine and the escalating conflict throughout the Middle East, has resulted in, and may continue to result in, new and rapidly evolving trade sanctions, which may increase our costs, negatively impact our revenues or impose additional operational limitations on our businesses.
We could experience significant financial and reputational harm if our information systems are breached, sensitive client or Company data are compromised, surreptitiously modified, rendered inaccessible for any period of time or maliciously made public, or if we fail to make adequate or timely disclosures to the public or law enforcement agencies following any such event, whether due to delayed discovery or a failure to follow existing protocols.
We could experience significant financial and reputational harm if our information systems are breached, sensitive client or Company data are compromised, surreptitiously modified, rendered inaccessible for any period of time or maliciously made public, or if we fail to make adequate or timely disclosures to the public, law enforcement agencies or regulators following any such event, whether due to delayed discovery or a failure to follow existing protocols. 17 Cyberattacks are increasing in frequency and evolving in nature.
These players are focused on using technology and innovation, including artificial intelligence (AI), digital platforms, data analytics, robotics and blockchain, to simplify and improve the client experience, increase efficiencies, alter business models and effect other potentially disruptive changes in the industries in which we operate.
These players are focused on using technology and innovation, including AI, digital platforms, data analytics, robotics and blockchain, to simplify and improve the client experience, increase efficiencies, alter business models and effect other potentially disruptive changes in the industries in which we operate. We are actively investing in generative AI tools.
The risk of business disruption is more pronounced in certain geographic areas, including major metropolitan centers, like New York or London, where we have significant operations and approximately 3,500 and 5,600 colleagues in those respective locations, and in certain countries and regions in which we operate that are subject to higher potential threat of terrorist attacks or military conflicts.
The risk of business disruption is more pronounced in certain geographic areas, including major metropolitan centers, like New York or London, where we have significant operations and approximate ly 3,700 and 5,700 colleagues i n those respective locations, and in certain countries and regions in which we operate that are subject to higher potential threat of terrorist attacks or military conflicts.
In particular, we are at increased risk of a cyberattack during periods of heightened geopolitical conflict, such as the war in Ukraine, as diplomatic events and economic policies may trigger espionage or retaliatory cyber incidents.
Further, we are at increased risk of a cyberattack during periods of heightened geopolitical conflict, such as the war in Ukraine and the escalating conflict throughout the Middle East, as diplomatic events and economic policies may trigger espionage or retaliatory cyber incidents.
A disruption of physical infrastructure could impact our ability to conduct business and service clients. This may include deliberate or unintentional disruption of service to electrical systems, satellite communications, undersea or terrestrial cable systems, Internet services, or other systems our colleagues or third parties rely on us to conduct business in a multitude of jurisdictions across the globe.
This may include deliberate or unintentional disruption of service to electrical systems, satellite communications, undersea or terrestrial cable systems, Internet services, or other systems our colleagues or third parties rely on us to conduct business in a multitude of jurisdictions across the globe.
Given the breadth and depth of changes in data protection obligations, including classifying data and committing to a range of administrative, technical and physical controls to protect data and enable data transfers outside of the E.U., our compliance with laws such as the GDPR and the CPRA will continue to require time, resources and review of the technology and systems we use.
Given the breadth and depth of changes in data protection obligations, including classifying data and committing to a range of administrative, technical and physical controls to protect data and enable data transfers across borders, our compliance with such laws will continue to require time, resources and review of the technology and systems we use.
The costs to comply with, or our failure to comply with, U.S. and foreign laws related to privacy, data security and data protection, such as the E.U. General Data Protection Regulation (GDPR) and the California Privacy Rights Act (CPRA), could adversely affect our financial condition, operating results and our reputation.
The costs to comply with, or our failure to comply with, U.S. and foreign laws related to privacy, data security and data protection, such as the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, (CCPA), could adversely affect our financial condition, operating results and our reputation.
Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business. Approximately 51% of our total revenue reported in 2022 was from business outside of the United States.
Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business. Approximately 53% of our total revenue reported in 2023 was from business outside of the U.S.
In 2022, approximately 51% of the Company's total revenue was generated from operations outside the United States, and over one-half of our employees were located outside the United States. In addition, we conduct our operations through four separate businesses. Potential conflicts of interest may arise across our businesses given the significant volume of our engagements.
In 2023, approximately 53% of the Company's total revenue was generated from operations outside the U.S., and over one-half of our employees were located outside the U.S. In addition, we conduct our operations through four separate businesses. Potential conflicts of interest may arise across our businesses given the significant volume of our engagements.
Because these techniques change frequently and new techniques may not be identified until they are launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures, resulting in potential data loss, data unavailability, data corruption or other damage to information technology systems.
The techniques used to achieve such unauthorized access, damage or interruption change frequently and new techniques may not be identified until they are launched against a target, and we may be unable to anticipate these techniques or implement adequate preventative or remedial measures, resulting in potential data loss, data unavailability, data corruption or other damage to information technology systems.
Some of our competitors may have greater financial resources, or may be better positioned to respond to technological and other changes in the industries we serve, and they may be able to compete more effectively.
Additionally, some of our competitors may have greater financial resources, or may be better positioned to respond to technological and other changes in the industries we serve, and they may be able to compete more effectively. Furthermore, the competition for talent continues to accelerate.
Given the complexity of operationalizing the various privacy laws such as the GDPR and the CPRA, the maturity level of proposed compliance frameworks and the continued lack of certainty on how to implement their requirements, we and our clients are at risk of enforcement actions taken by E.U. and other data protection authorities or litigation from consumer advocacy groups acting on behalf of data subjects.
Given the complexity of operationalizing the various privacy laws mentioned above, the maturity level of proposed compliance frameworks and the continued lack of certainty on how to implement their requirements, we and our clients are at risk of enforcement actions taken by data protection authorities around the world or litigation from consumer advocacy groups acting on behalf of data subjects.
The Company has significant defined benefit pension obligations to its current and former employees, totaling approximately $11.8 billion, and related plan assets of approximately $13.0 billion, at December 31, 2022 on a U.S. GAAP basi s.
The Company has significant defined benefit pension obligations to its current and former employees, totaling approximately $12.2 billion, and related plan assets of approximately $13.5 billion, at December 31, 2023 on a U.S. GAAP basi s.
Remote and hybrid work arrangements may also negatively impact our ability to maintain and promote our culture, as we believe being together is integral to promoting our culture.
Remote and hybrid work arrangements, particularly following the COVID-19 pandemic, may also negatively impact our ability to maintain and promote our culture, as we believe being together is integral to promoting our culture.
In many cases, the Company has not recorded a liability, other than for legal fees to defend the claim, because we are unable, at the present time, to make a determination that a loss is both probable and reasonably estimable. Given the judgment involved in estimating and establishing liabilities in accordance with U.S.
In many cases, the Company has not recorded a liability, other than for legal fees to defend a claim, because we are unable, at the present time, to make a determination that a loss is both probable and reasonably estimable.
We may also be exposed to claims related to assets or solutions offered by the Consulting segment in complement to its traditional consulting services.
We may also be exposed to claims related to services or solutions offered by the Consulting segment in addition to consulting services.
Mercer’s Investments business is subject to a number of risks, including risks related to litigation (both by clients and by plan participants, particularly as we increasingly act in a fiduciary capacity), liquidity and market volatility, third-parties, our operations and technology, trading errors, conflicts of interest, asset performance and regulatory compliance and scrutiny, which could arise in connection with these offerings.
Mercer’s Investments business is subject to a number of risks, including risks related to litigation (both by clients and by plan participants, particularly as we increasingly act in a fiduciary capacity), liquidity and market volatility, an inability to obtain contractual limitations of liability for errors & omissions in certain jurisdictions or parts of our business, third-parties, our operations and technology (including the use of AI), trading errors, conflicts of interest, asset performance and regulatory compliance and scrutiny, which could arise in connection with these offerings.
Our operations depend in particular upon our ability to protect our technology infrastructure against damage. If a business continuity event occurs, we could lose client or Company data or experience interruptions to our operations or delivery of services to our clients, which could have a material adverse 26 effect.
Our operations depend in particular upon our ability to protect our technology infrastructure against damage. If a business continuity event occurs, we could lose client or Company data or experience interruptions to our operations or delivery of services to our clients, which could have a material adverse effect. Such risks have increased significantly due to hybrid and remote work environments.
Our information technology systems and safety control systems, and those of our numerous third-party providers, as well as the control systems of critical infrastructure they rely on, such as power grids, and undersea cables, are potentially vulnerable to unauthorized access, damage or interruption from a variety of external threats, including physical attack, cyberattacks, computer viruses and other malware, ransomware and other types of data and systems-related modes of attack.
Our information technology systems and information security control systems, and those of our numerous third-party providers, as well as the control systems of critical infrastructure they rely on, such as power grids, and undersea cables, are potentially vulnerable to unauthorized access, damage or interruption from a variety of external threats, including software bugs, physical attack, cyberattacks, computer viruses and other malware, malicious or destructive code, ransomware, social engineering attacks (including phising and digital or telephonic impersonation), hacking, denial-of-service attacks and other types of data and systems-related modes of attack.
In addition, we are subject to risks that, at the time any of our outstanding debt matures, we will not be able to retire or refinance the debt on terms that are acceptable to us. The current U.S. tax regime makes our results more difficult to predict.
In addition, we are subject to risks that, at the time any of our outstanding debt matures, we will not be able to retire or refinance the debt on terms that are acceptable to us.
For example, the war in Ukraine has continued to result in worldwide geopolitical and macroeconomic uncertainty and may negatively impact other regional and global economic markets (including Europe and the United States), companies in other countries (particularly those that have done business with Russia) and various sectors, industries and markets for securities and commodities globally, such as oil and natural gas, and may increase financial market volatility and adversely impact regional and global economic markets, industries and companies.
For example, the war in Ukraine and the escalating conflict throughout the Middle East have resulted in worldwide geopolitical and macroeconomic uncertainty and may negatively impact other regional and global economic markets (including Europe, the Middle East and the U.S.), companies in other countries (particularly those that have done business with Russia or have substantial exposure to, or operations in, impacted countries) and various sectors, industries and markets for securities and commodities globally, such as oil and natural gas, and may increase financial market volatility and adversely impact regional and global economic markets, industries and companies.
Additional information regarding certain ongoing investigations and certain other legal and regulatory proceedings is set forth in Note 16, Claims, Lawsuits and Other Contingencies, in the notes to the consolidated financial statements included under Part II, Item 8 of this report.
Additional information regarding certain ongoing investigations and certain other legal and regulatory proceedings is set forth in Note 16, Claims, Lawsuits and Other Contingencies, in the notes to the consolidated financial statements included under Part II, Item 8 of this report. 16 Our business or reputation could be harmed by our reliance on third-party providers or introducers.
Disruptions may be the result of weather, natural disaster, war, terrorism, pandemic, or other natural or geopolitical event. Our systems are also subject to compromise from internal threats such as improper action by employees, vendors and other third parties with otherwise legitimate access to our systems. Moreover, we face the ongoing challenge of managing access controls in a complex environment.
Disruptions may be the result of weather, natural disaster, war, terrorism, pandemic, or other natural or geopolitical events. Our systems are also subject to compromise from internal threats such as fraud, mistake, misconduct or other improper action by employees, vendors and other third parties with otherwise legitimate access to our systems.
These inquiries consume significant management attention, and the cost of compliance and the consequences of failing to be in compliance could therefore have a material adverse effect on our business. In addition, we may be responsible for the legal and regulatory liabilities of companies that we acquire.
These inquiries consume significant management attention, and the cost of compliance and the consequences of failing to be in compliance could therefore have a material adverse effect on our business.
Our business disruption insurance may also not fully cover, in type or amount, the cost of a successful recovery in the event of such a disruption. Acquisitions and Dispositions Risks We face risks when we acquire businesses. We have a history of making acquisitions and investments, including a total of 93 in the period from 2017 to 2022.
Our business disruption insurance may also not fully cover, in type or amount, the cost of a successful recovery in the event of such a disruption. Acquisitions and Dispositions Risks We face risks when we acquire or dispose of businesses.
For example, the GDPR, which became effective in May 2018, greatly increased the 19 European Commission’s jurisdictional reach of its laws and added a broad array of requirements for handling personal data, such as the public disclosure of data breaches, privacy impact assessments, data portability and the appointment of data protection officers in some cases.
Many of these laws, which are modeled after the GDPR, have greatly increased the jurisdictional reach of privacy laws and added a broad array of requirements for handling personal data, such as the public disclosure of data breaches, data protection impact assessments, data portability and the appointment of data protection officers in some cases.
There is a risk that we may not effectively identify and manage potential conflicts of interest, including but not limited to where our services to a client conflict, or are perceived to conflict, with the interests of another client or our own interests, where we receive revenue or benefits from third-parties with whom we conduct business (including but not limited to insurers, investment managers and vendors) and where our colleagues have personal interests. 23 Competitive Risks The loss of members of our senior management team or other key colleagues, or if we are unsuccessful in our efforts to attract, retain and develop talent, could have a material adverse effect on our business.
There is a risk that we may not effectively identify and manage potential conflicts of interest, including but not limited to where our services to a client conflict, or are perceived to conflict, with the interests of another client or our own interests, where we receive revenue or benefits from third-parties with whom we conduct business (including but not limited to insurers, investment managers and vendors) and where our colleagues have personal interests.
Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest more broadly, could have a material adverse effect on our business, results of operations and financial condition.
If we are unable to achieve and maintain adequate billing rates for all of our services, our margins and profitability could decline. 29 Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest, could have a material adverse effect on our business, results of operations and financial condition.