We, like other financial companies, are subject to a number of risks that may adversely affect our financial condition or results of operations, many of which are outside of our direct control, though efforts are made to manage thosecontrol. Among these risks while optimizing returns. Among the risks assumed are:

In addition to the other information included or incorporated by reference into this report, readers should carefully consider that the following important factors, among others, could negatively impact our business, future results of operations, and future cash flows materially.

Our business depends on the creditworthiness of our customers. Our ACL of $670$778 million at December 31, 2015,2017, represented Management’s estimate of probable losses inherent in our loan and lease portfolio (ALLL) as well as our unfunded loan commitments and letters of credit.credit (AULC). We periodicallyregularly review our ACL for appropriateness. In doing so, we consider economic conditions and trends, collateral values, and credit quality indicators, such as past charge-off experience, levels of past due loans, and NPAs. There is no certainty that our ACL will be appropriate over time to cover losses in the portfolio because of unanticipated adverse changes in the economy, market conditions, or events adversely affecting specific customers, industries, or markets. If the credit quality of our customer base materially decreases, if the risk profile of a market, industry, or group of customers changes materially, or if the ACL is not appropriate, our net income and capital could be materially adversely affected, which could have a material adverse effect on our financial condition and results of operations.

In addition, regulatory review of risk ratings and loan and lease losses may impact the level of the ACL and could have a material adverse effect on our financial condition and results of operations.

Our performance could be negatively affected to the extent there is deterioration in business and economic conditions which have direct or indirect material adverse impacts on us, our customers, and our counterparties. These conditions could result in one or more of the following:

An increase in the number of delinquencies, bankruptcies, or defaults could result in a higher level of NPAs, NCOs, provision for credit losses, and valuation adjustments on loans held for sale. The markets we serve are dependent on industrial and manufacturing businesses and, thus, are particularly vulnerable to adverse changes in economic conditions affecting these sectors.

Our results of operations depend substantially on net interest income, which is the difference between interest earned on interest earning assets (such as investments and loans) and interest paid on interest bearing liabilities (such as deposits and borrowings). Interest rates are highly sensitive to many factors, including governmental monetary policies and domestic and international economic and political conditions. Conditions such as inflation, deflation, recession, unemployment, money supply, and other factors beyond our control may also affect interest rates. In addition, the Federal Reserve has stated its intention to end its quantitative easing program and has begun to reduce the size of its balance sheet by selling securities, which might also affect interest rates. If our interest earning assets mature or reprice faster than interest bearing liabilities in a declining interest rate environment, net interest income could be materially adversely impacted. Likewise, if interest bearing liabilities mature or reprice more quickly than interest earning assets in a rising interest rate environment, net interest income could be adversely impacted. The continuation of the current low interest rate environment or a deflationary environment with negative interest rates could affect consumer and business behavior in ways that are adverse to us and could also constrict our net interest income margin which may restrict our ability to increase net interest income.

Changes in interest rates can affect the value of loans, securities, assets under management, and other assets, including mortgage and nonmortgage servicing rights. An increase in interest rates that adversely affects the ability of borrowers to pay the principal or interest on loans and leases may lead to an increase in NPAs and a reduction of income recognized, which could have a material adverse effect on our results of operations and cash flows. When we place a loan on nonaccrual status, we reverse any accrued but unpaid interest receivable, which decreases interest income. However, we continue to incur interest expense as a cost of funding NALs without any corresponding interest income. In addition, transactional income, including trust income, brokerage income, and gain on sales of loans can vary significantly from period-to-period based on a number of factors, including the interest rate environment. A decline in interest rates along with a flattening yield curve limits our ability to reprice deposits given the current historically low level of interest rates and could result in declining net interest margins if longer duration assets reprice faster than deposits.

Rising interest rates reduce the value of our fixed-rate securities and cash flow hedging derivatives portfolio.securities. Any unrealized loss from these portfolios impacts OCI, shareholders’ equity, and the Tangible Common Equity ratio. Any realized loss from these portfolios impacts regulatory capital ratios. In a rising interest rate environment, pension and other post-retirement obligations somewhat mitigate negative OCI impacts from securities and financial instruments. For more information, refer to “Market Risk” of the MD&A.

Certain investment securities, notably mortgage-backed securities, are very sensitive to rising and falling rates. Generally, when rates rise, prepayments of principal and interest will decrease and the duration of mortgage-backed securities will increase. Conversely, when rates fall, prepayments of principal and interest will increase and the duration of mortgage-backed securities will decrease. In either case, interest rates have a significant impact on the value of mortgage-backed securities.

The value of our MSR asset is also a function of changesfair values are sensitive to movements in interest rates, and prepayment expectations. Decliningas expected future net servicing income depends on the projected outstanding principal balances of the underlying loans, which can be reduced by prepayments. Prepayments usually increase when mortgage interest rates primarily in the longer end of the yield curve reduces the value of the MSR asset.decline and decrease when mortgage interest rates rise.

In addition to volatility associated with interest rates, the Company also has exposure to equity markets related to the investments within the benefit plans and other income from client based transactions.

Our profitability depends on our ability to compete successfully. We operate in a highly competitive environment, and we expect competition to intensify due in part to the sustained low interest rate and ongoing low-growth economic environment.intensify. Certain of our competitors are larger and have more resources than we do, enabling them to be more aggressive than us in competing for loans and deposits. In our market areas, we face competition from other banks and financial service companies that offer similar services. Some of our non-bank competitors are not subject to the same extensive regulations we are and, therefore, may have greater flexibility in competing for business. Technological advances have made it possible for our non-bank competitors to offer products and services that traditionally were banking products and for financial institutions and other companies to provide electronic and internet-based financial solutions, including online deposit accounts, electronic payment processing and marketplace lending, without having a physical presence where their customers are located. Our ability to compete successfully depends on a number of factors, including customer convenience, quality of service by investing in new products and services, electronic platforms, personal contacts, pricing, and range of products. If we are unable to successfully compete for new customers and retain our current customers, our business, financial condition, or results of operations may be adversely affected. In particular, if we experience an outflow of deposits as a result of our customers seeking investments with higher yields or greater financial stability, or a desire to do business with our competitors, we may be forced to rely more heavily on borrowings and other sources of funding to operate our business and meet withdrawal demands, thereby adversely affecting our net interest margin.  For more information, refer to “Competition” section of Item 1: Business.

Liquidity is the ability to meet cash flow needs on a timely basis at a reasonable cost. The Bank uses its liquidity to extend credit and to repay liabilities as they become due or as demanded by customers. The board of directors establishes liquidity policies, including contingency funding plans, and limits and management establishes operating guidelines for liquidity.

Our primary source of liquidity is our large supply of deposits from consumer and commercial customers. The continued availability of this supply depends on customer willingness to maintain deposit balances with banks in general and us in particular. The availability of deposits can also be impacted by regulatory changes (e.g. changes in FDIC insurance, the Liquidity Coverage Ratio,LCR, etc.), changes in the financial condition of Huntington, other banks or the banking industry in general, and other events which can impact the perceived safety or economic benefits of bank deposits. While we make significant efforts to consider and plan for hypothetical disruptions in our deposit funding, market related, geopolitical, or other events could impact the liquidity derived from deposits.

Wholesale funding sources include securitization, federal funds purchased, securities sold under repurchase agreements, non-core deposits, and long-term debt. The Bank is also a member of the Federal Home Loan Bank of Cincinnati, which provides members access to funding through advances collateralized with mortgage-related assets. We maintain a portfolio of highly-rated, marketable securities that is available as a source of liquidity.

Capital markets disruptions can directly impact the liquidity of Huntington and the Bank and Corporation.Bank. The inability to access capital markets funding sources as needed could adversely impact our financial condition, results of operations, cash flows, and level of regulatory-qualifying capital. We may, from time-to-time, consider using our existing liquidity position to opportunistically retire outstanding securities in privately negotiated or open market transactions.

Our computer systems and network infrastructure and those of third parties, on which we are highly dependent, are subject to security risks and could be susceptible to cyber-attacks, such as denial of service attacks, hacking, terrorist activities or identity theft. FinancialOur business relies on the secure processing, transmission, storage and retrieval of confidential, proprietary and other information in our computer and data management systems and networks, and in the computer and data management systems and networks of third parties. In addition, to access our network, products and services, our customers and other third parties may use personal mobile devices or computing devices that are outside of our network environment and are subject to their own cybersecurity risks.

We, our customers, regulators and other third parties, including other financial services institutions and companies engaged in data processing, have reportedbeen subject to, and are likely to continue to be the target of, cyber-attacks. These cyber-attacks include computer viruses, malicious or destructive code, phishing attacks, denial of service or information, ransomware, improper access by employees or vendors, attacks on personal email of employees, ransom demands to not expose security vulnerabilities in our systems or the systems of third parties or other security breaches that could result in the securityunauthorized release, gathering, monitoring, misuse, loss or destruction of their websitesconfidential, proprietary and other information of ours, our employees, our customers or of third parties, damage our systems or otherwise materially disrupt our or our customers’ or other third parties’ network access or business operations. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities or incidents. Despite efforts to ensure the integrity of our systems some of which have involved sophisticated and targeted attacks intended to obtain unauthorized access to confidential information, destroy data, disable or degrade service, or sabotage systems, often through the introduction of computer viruses or malware, cyber-attacksimplement controls, processes, policies and other means. Denial of service attacks have been launchedprotective measures, we may not be able to anticipate all security breaches, nor may we be able to implement guaranteed preventive measures against a number of large financial services institutions, including us. None of these events against us resulted in a breach of our client data or account information; however, the performance of our website, www.huntington.com, was adversely affected, and in some instances customers were prevented from accessing our website. We expect to be subject to similar attacks in the future. While events to date primarily resulted in inconvenience, future cyber-attacks could be more disruptive and damaging. Hacking and identity theft risks, in particular, could cause serious reputational harm.such security breaches. Cyber threats

Cyber-attacks or other information or security breaches, whether directed at us or third parties, may result in a material loss or have material consequences. Furthermore, the public perception that a cyber-attack on our systems has been successful, whether or not this perception is correct, may damage our reputation with customers and third parties with whom we do business. Hacking of personal information and identity theft risks, in particular, could cause serious reputational harm. A successful penetration or circumvention of system security could cause us serious negative consequences, including our loss of customers and business opportunities, costs associated with maintaining business relationships after an attack or breach; significant business disruption to our operations and business, misappropriation, exposure, or destruction of operations, misappropriation ofour confidential information, intellectual property, funds, and/or those of our customers; or damage to our or our customers’ and/or third parties’ computers or systems, or those of our customers and counterparties. A successful security breach could result in violationsa violation of applicable privacy laws and other laws, financial loss to uslitigation exposure, regulatory fines, penalties or to our customers,intervention, loss of confidence in our security measures, significant litigation exposure,reputational damage, reimbursement or other compensatory costs, additional compliance costs, and harmcould adversely impact our results of operations, liquidity and financial condition. In addition, we may not have adequate insurance coverage to our reputation, all of which could havecompensate for losses from a material adverse effect on the Company.cybersecurity event.

We face legal risks in our businesses, and the volume of claims and amount of damages and penalties claimed in litigation and regulatory proceedings against financial institutions remain high. Substantial legal liability against us could have material adverse financial effects or cause significant reputational harm to us, which in turn could seriously harm our business prospects. It is possible that the ultimate resolution of these matters, if unfavorable, may be material to the results of operations for a particular reporting period.

Note 2021 of the Notes to Consolidated Financial Statements updates the status of certain material litigation including litigation related to the bankruptcy of Cyberco Holdings, Inc.litigation.

We are exposed to many types of operational risks, including the risk of fraud or theft by colleagues or outsiders, unauthorized transactions by colleagues or outsiders, operational errors by colleagues, business disruption, and system failures. Huntington executes against a significant number of controls, a large percent of which are manual and dependent on adequate execution by colleagues and third-party service providers. There is inherent risk that unknown single points of failure through the execution chain could give rise to material loss through inadvertent errors or malicious attack. These operational risks could lead to financial loss, expensive litigation, and loss of confidence by our customers, regulators, and the capital markets.

Moreover, negative public opinion can result from our actual or alleged conduct in any number of activities, including clients, products and business practices; corporate governance; acquisitions; and from actions taken by government regulators and community organizations in response to those activities. Negative public opinion can adversely affect our ability to attract and retain customers and can also expose us to litigation and regulatory action.

Relative to acquisitions, we incur risks and challenges associated with the integration of employees, accounting systems, and technology platforms from acquired businesses and institutions in a timely and efficient manner, and we cannot guarantee that we will be successful in retaining existing customer relationships or achieving anticipated operating efficiencies expected from such acquisitions (including our pending acquisition of FirstMerit Corporation).acquisitions.  Acquisitions may be subject to, and our pending acquisition of FirstMerit Corporation is subject to the receipt of approvals from certain governmental authorities, including the Federal Reserve, the OCC, and the United States Department of Justice, as well as the approval of our shareholders and the shareholders of companies that we seek to acquire. These approvals for acquisitions may not be received, may take longer than expected, or may impose conditions that are not presently anticipated or that could have an adverse effect on the combined company following the acquisitions. Subject to requisite regulatory approvals, future business acquisitions may result in the issuance and payment of additional shares of stock, which would dilute current shareholders’ ownership interests.  Additionally, acquisitions may also involve the payment of a premium over book and market values. Therefore, dilution of our tangible book value and net income per common share could occur in connection with any future transaction.

Effective internal controls over financial reporting are necessary to provide reliable financial reports and prevent fraud. As a financial holding company, weWe are subject to regulation that focuses on effective internal controls and procedures. Such controls and procedures are modified, supplemented, and changed from time-to-time as necessitated by our growth and in reaction to external events and developments. Any failure to maintain in the future, an effective internal control environment could impact our ability to report our financial results on an accurate and timely basis, which could result in regulatory actions, loss of investor confidence, and an adverse impact on our business and our stock price.

Quantitative models may be used to help manage certain aspects of our business and to assist with certain business decisions, including estimating probable loan losses, measuring the fair value of financial instruments when reliable market prices are unavailable, estimating the effects of changing interest rates and other market measures on our financial condition and results of operations, managing risk, and for capital planning purposes (including during the CCAR capital planning and capital adequacy process). Our measurement methodologies rely on many assumptions, historical analyses, and correlations. These assumptions may not capture or fully incorporate conditions leading to losses, particularly in times of market distress, and the historical correlations on which we rely may no longer be relevant. Additionally, as businesses and markets evolve, our measurements may not accurately reflect this evolution. Even if the underlying assumptions and historical correlations used in our models are adequate, our models may be deficient due to errors in computer code, badinaccurate data, misuse of data, or the use of a model for a purpose outside the scope of the model’s design.

All models have certain limitations. Reliance on models presents the risk that our business decisions based on information incorporated from models will be adversely affected due to incorrect, missing, or misleading information. In addition, our models may not capture or fully express the risks we face, may suggest that we have sufficient capitalization when we do not, or may lead us to misjudge the business and economic environment in which we will operate. If our models fail to produce reliable results on an ongoing basis, we may not make appropriate risk management, capital planning, or other business or financial decisions. Strategies that we employ to manage and govern the risks associated with our use of models may not be effective or fully reliable. Also, information that we provide to the public or regulators based on poorly designed models could be inaccurate or misleading.

Banking regulators continue to focus on the models used by banks and bank holding companies in their businesses. Some of our decisions that the regulators evaluate, including distributions to our shareholders, could be affected adversely due to their perception that the quality of the models used to generate the relevant information is insufficient.

We rely on third-party service providers to leverage subject matter expertise and industry best practice, provide enhanced products and services, and reduce costs. Although there are benefits in entering into third-party relationships with vendors and others, there are risks associated with such activities. When entering a third-party relationship, the risks associated with that activity are not passed to the third-party but remain our responsibility. The Technology Committee of the board of directors provides oversight related to the overall risk management process associated with third-party relationships. Management is accountable for the review and evaluation of all new and existing third-party relationships. Management is responsible for ensuring that adequate controls are in place to protect us and our customers from the risks associated with vendor relationships.

Increased risk could occur based on poor planning, oversight, and control, and inferior performance or service on the part of the third-party, and may result in legal costs or loss of business. While we have implemented a vendor management program to actively

The FASB, regulatory agencies, and other bodies that establish accounting standards periodically change the financial accounting and reporting standards governing the preparation of our financial statements. Additionally, those bodies that establish and interpret the accounting standards (such as the FASB, SEC, and banking regulators) may change prior interpretations or positions on how these standards should be applied. These changesIn June 2016, the FASB issued a new current expected credit loss rule, which will require banks to record, at the time of origination, credit losses expected throughout the life of the asset portfolio on loans and held-to-maturity securities, as opposed to the current practice of recording losses when it is probable that a loss event has occurred. Changes in accounting policies, standards and interpretations can be difficult to predict and can materially affect how we record and report our financial condition and results of operations.

Our goodwill could become impaired in the future. If goodwill were to become impaired, it could limit the ability of the Bank to pay dividends to Huntington, adversely impacting Huntington liquidity and ability to pay dividends or repay debt. The FASBmost significant assumptions affecting our goodwill impairment evaluation are variables including the market price of our Common Stock, projections of earnings, the discount rates used in the income approach to fair value, and the control premium above our current stock price that an acquirer would pay to obtain control of us. We are required to test goodwill for impairment at least annually or when impairment indicators are present. If an impairment determination is currently close to issuing several new accounting standards thatmade in a future reporting period, our earnings and book value of goodwill will be reduced by the amount of the impairment. If an impairment loss is recorded, it will have significant impactslittle or no impact on the banking industry.  Most notably, new guidancetangible book value of our Common Stock, or our regulatory capital levels, but such an impairment loss could significantly reduce the Bank’s earnings and thereby restrict the Bank's ability to make dividend payments to us without prior regulatory approval, because Federal Reserve policy states the bank holding company dividends should be paid from current earnings. At December 31, 2017, the book value of our goodwill was $2.0 billion, substantially all of which was recorded at the Bank. Any such write down of goodwill or other acquisition related intangibles will reduce Huntington’s earnings, as well.

We believe that our continued growth and future success will depend in large part on the calculationskills of credit reserves using expected losses (Current Expected Credit Losses) versus incurred losses is closeour management team and our ability to being finalizedmotivate and upon implementation,retain these individuals and other key personnel. The loss of service of one or more of our executive officers or key personnel could

The Federal Reserve administers the annual CCAR, an annual forward-looking quantitative assessment of theHuntington’s capital adequacy of bank holding companies with consolidated assets of $50 billion or more and planned capital distributions and a review of the strength of Huntington’s practices used by covered banks to assess capital needs. Under CCAR,We generally may pay dividends and repurchase stock only in accordance with a capital plan that has been reviewed by the Federal Reserve makes a qualitative assessment of capital adequacy on a forward-looking basis and reviewsas to which the strength of a bank holding company’s capital adequacy process.Federal Reserve has not objected. The Federal Reserve also makes a quantitative assessment of capital based on supervisory-run stress tests that assess the ability to maintain capital levels above each minimum regulatory capital ratio and above a CET1 ratio of 4.5%, after making all capital actions included in a bank holding company’sHuntington’s capital plan, under baseline and stressful conditions throughout a nine-quarter planning horizon. Capital plans for 2016 are required to be submitted by April 5, 2016, and the Federal Reserve will either object to the capital plan and/or planned capital actions, or provide a notice of non-objection, no later than June 30, 2016. We intend to submit our capital plan to the Federal Reserve on or before April 5, 2016. The Bank also must submit a capital plan to the OCC on or before April 5, 2016.OCC. There can be no assurance that the Federal Reserve or OCC will respond favorably to our capital plan,plans, planned capital actions or stress test results, and the Federal Reserve, OCC, or other regulatory capital requirements may limit or otherwise restrict how we utilize our capital, including common stock dividends and stock repurchases.

In 2013,We are also required to maintain minimum capital ratios and the Federal Reserve and OCC may determine that Huntington and/or the OCC adopted final rulesBank, based on size, complexity or risk profile, must maintain capital ratios above these minimums in order to implementoperate in a safe and sound manner. In the Basel IIIevent we are required to raise capital rules for U.S. Banking organizations. The final rules establish an integrated regulatory capital framework and will implement in the United States the Basel III regulatory capital reforms from the Basel Committee on Banking Supervision and certain changesto maintain required by the Dodd-Frank Act. Under the final rule, minimum requirements will increase for both the quantity and quality of capital held by banking organizations. As a Standardized Approach institution, the Basel III minimum capital requirements became effective forand leverage ratios or ratios above the required applicable minimums, we may be forced to do so in when market conditions are undesirable or on terms that are less favorable to us than we would otherwise require. Furthermore, in order to prevent becoming subject to restrictions on January 1, 2015, and will be fully phased-in on January 1, 2019.our ability to distribute capital or make certain discretionary bonus payments to management, we must maintain a Capital Conservation Buffer (of 1.875% in 2018), which is in addition to our required minimum capital ratios.

On September 3, 2014, the U.S. banking regulators approvedWe are also subject to a final rule to implement a minimum liquidity coverage ratio (LCR) requirement for banking organizations with total consolidated assets of $250 billion or more, and a less stringent modified LCR requirement to depository institution holding companies below the threshold but with total consolidated assets of $50 billion or more. The LCRthat requires covered banking organizationsHuntington to maintain HQLA equalan adequate amount of unencumbered high-quality liquid assets, such as Treasury securities and other sovereign debt, to cover projected stressednet cash outflows over a 30 calendar-day stress scenario. We are covered byscenario window. Because the modified LCR requirement and therefore subject to the phase-in of the rule beginning January 2016 at 90% and January 2017 at 100%. We will also be required to calculate the LCR monthly. The LCR assigns less severe outflow assumptions to certain types of customer deposits, which should increase thebanks’ demand for and perhaps the cost among banks forof these deposits.deposits may increase. Additionally, the HQLA requirements will increaseLCR has increased the demand for direct USU.S. government and US government- guaranteedU.S. government-guaranteed debt that, while high quality, generally carry lower yields than other securities that banksBHCs hold in their investment portfolios.

We are subject to the supervision and regulation of various state and federal regulators, including the OCC, Federal Reserve, FDIC, SEC, CFPB, Financial Industry Regulatory Authority,FINRA, and various state regulatory agencies. As such, we are subject to a wide variety of laws and regulations, many of which are discussed in theItem 1. Regulatory Matters section.Matters. As part of their supervisory process, which includes periodic examinations and continuous monitoring, the regulators have the authority to impose restrictions or conditions on our activities and the manner in which we manage the organization. Such actions could negatively impact us in a variety of ways, including charging monetary fines,

WithUnder the additionsupervision of the CFPB, our consumerConsumer and Business Banking products and services are subject to increasingheightened regulatory oversight and scrutiny with respect to compliance under consumer laws and regulations. We may face a greater number or wider scope of investigations, enforcement actions, and litigation in the future related to consumer practices, thereby increasing costs associated with responding to or defending such actions. Also, federal and state regulators have been increasingly focused on sales practices of branch personnel, including taking regulatory action against other financial institutions. In addition, increased regulatory inquiries and investigations, as well as any additional legislative or regulatory developments affecting our consumer businesses, and any required changes to our business operations resulting from these developments, could result in significant loss of revenue, require remuneration to our customers, trigger fines or penalties, limit the products or services we offer, require us to increase our prices and, therefore, reduce demand for our products, impose additional compliance costs on us, increase the cost of collection, cause harm to our reputation, or otherwise adversely affect our consumer businesses.

The Dodd-Frank Act represents a comprehensive overhaulBoth the scope of the laws and regulations and the intensity of the supervision to which we are subject have increased in recent years, in response to the financial crisis as well as other factors such as technological and market changes. Regulatory enforcement and fines have also increased across the banking and financial services industry within the United States, establishes the CFPB, and requires the bureau and other federal agencies to implement many new and significant rules and regulations. It is not possible to predict the full extent to which the Dodd-Frank Act, or the resulting rules and regulations in their entirety, will impact our business.sector. Compliance with these new laws and regulations have resulted in and will continue to result in additional costs, which could be significant, and may have a material and adverse effect on our results of operations. In addition, if we do not appropriately comply with current or future legislation and regulations, especially those that apply to our consumer operations, which has been an area of heightened focus, we may be subject to fines, penalties or judgments, or material regulatory restrictions on our businesses, which could adversely affect operations and, in turn, financial results.

The Dodd-Frank Act and implementing regulations jointly issued by Federal Reserve and the FDIC require bank holding companies with more than $50 billion in assetsHuntington is required to annually submit a resolution planannually to the Federal Reserve and the FDIC that, in the event of material financial distress or failure, establish the rapid,a resolution plan for its orderly resolution of the Company under the U.S. Bankruptcy Code. If the Federal Reserve and the FDIC jointly determine that our 2015 resolution plan is not “credible,”credible, we could become subjected to more stringent capital, leverage or liquidity requirements or restrictions, or restrictions on our growth, activities or operations, andoperations. If we were to fail to address deficiencies in our resolution plan when required, we could eventually be required to divest certain assets or operations in ways that could negatively impact its operations and strategy.

There is also increased scrutiny of compliance with the rules enforced by the OFAC. If our policies, procedures and systems are deemed deficient or the policies, procedures and systems of the financial institutions that we have already acquired or may acquire in the future are deficient, we would be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain planned business activities, including acquisition plans, which would negatively impact our business, financial condition and results of operationsoperations. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us.

We may become subject to new legislation or regulation concerning cybersecurity or the privacy of personally identifiable information and personal financial information or of any other information we may store or maintain. We could be adversely affected if we lose our financial holding company status.