Quiver Quantitative

Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - CVS

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. In addition, throughout this 10-K and our other reports and communications, we use the following words or variations or negatives of these words and similar expressions when we intend to identify forward-looking statements:

All statements addressing the future operating performance of CVS Health or any segment or any subsidiary and/or future events or developments, including, but not limited to, statements relating to the Company’s investment portfolio, operating results, cash flows and/or financial condition, statements relating to corporate strategy, statements relating to future revenue, operating income or adjusted operating income, earnings per share or adjusted earnings per share, Health Care Benefits segment business, sales results and/or trends, medical cost trends, medical membership, Medicare Part D membership, medical benefit ratios and/or operations, Health Services segment business, sales results and/or trends and/or operations, Pharmacy & Consumer Wellness segment business, sales results and/or trends and/or operations, incremental investment spending, interest expense, effective tax rate, weighted-average share count, cash flow from operations, net capital expenditures, cash available for debt repayment, statements related to possible, proposed, pending or completed acquisitions, joint ventures, investments or combinations that involve, among other things, the timing or likelihood of receipt of regulatory approvals, the timing of completion, integration synergies, net synergies and integration risks and other costs, enterprise modernization, transformation, leverage ratio, cash available for enhancing shareholder value, inventory reduction, turn rate and/or loss rate, debt ratings and actions taken by ratings agencies, the Company’s ability to attract or retain customers and clients, store development and/or relocations, new product development, and the impact of industry and regulatory developments, as well as statements expressing optimism or pessimism about future operating results or events, are forward-looking statements within the meaning of the Reform Act.

Forward-looking statements rely on a number of estimates, assumptions and projections concerning future events, and are subject to a number of significant risks and uncertainties and other factors that could cause actual results to differ materially from those statements. Many of these risks and uncertainties and other factors are outside our control.

Certain additional risks and uncertainties and other factors are described under “Risk Factors” included in Item 1A of this 10-K; these are not the only risks and uncertainties we face. There can be no assurance that the Company has identified all the risks that may affect it. Additional risks and uncertainties not presently known to the Company or that the Company currently believes to be immaterial also may adversely affect the Company’s businesses. If any of those risks or uncertainties develops into actual events, those events or circumstances could have a material adverse effect on the Company’s businesses, operating results, cash flows, financial condition and/or stock price, among other effects.

You should not put undue reliance on forward-looking statements. Any forward-looking statement speaks only as of the date of this 10-K, and we disclaim any intention or obligation to update or revise forward-looking statements, whether as a result of new information, future events, uncertainties or otherwise.

Table of Contents

PART I

Item 1. Business.

Overview

CVS Health Corporation, together with its subsidiaries (collectively, “CVS Health,” the “Company,” “we,” “our” or “us”), is a leading health solutions company building a world of health around every consumer it serves and connecting care so that it works for people wherever they are. As of December 31, 2024, we had more than 9,000 retail locations, more than 1,000 walk-in and primary care medical clinics, a leading pharmacy benefits manager with approximately 90 million plan members and expanding specialty pharmacy solutions, and a dedicated senior pharmacy care business serving more than 800,000 patients per year. We are creating new sources of value through our integrated model allowing us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs.

The Company has four reportable segments: Health Care Benefits, Health Services, Pharmacy & Consumer Wellness and Corporate/Other.

Business Strategy

We are building a world of health around every consumer we serve, seeking to make it easier and more affordable to live a healthier life. We address holistic health – physical, emotional, social and economic – and we are creating new sources of value through our integrated care model which allows us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs.

Health Care Benefits Segment

The Health Care Benefits segment operates as one of the nation’s leading diversified health care benefits providers, serving an estimated more than 36 million people as of December 31, 2024. The Health Care Benefits segment has the information and resources to help members, in consultation with their health care professionals, make more informed decisions about their health care. The Health Care Benefits segment’s primary customers, its members, primarily access the segment’s products and services through employer groups, government-sponsored plans or individually. The Health Care Benefits segment also serves customers who purchase products and services that are ancillary to its health insurance products.

Health Care Benefits Products and Services

The Company refers to insurance products (where it assumes all or a majority of the risk for medical and dental care costs) as “Insured” and administrative services contract products (where the plan sponsor assumes all or a majority of the risk of medical and dental care costs) as “ASC.” Health Care Benefits segment products and services consist of the following:

•Commercial Medical: The Health Care Benefits segment offers point-of-service (“POS”), preferred provider organization (“PPO”), health maintenance organization (“HMO”) and indemnity benefit (“Indemnity”) plans. Commercial medical products also include health savings accounts (“HSAs”) and consumer-directed health plans that combine traditional POS or PPO and/or dental coverage, subject to a deductible, with an accumulating benefit account (which may be funded by the plan sponsor and/or the member in the case of HSAs). Principal products and services are targeted specifically to large multi-site national, mid-sized and small employers, individual insureds and expatriates. The Company offers medical stop loss insurance coverage for certain employers who elect to self-insure their health benefits. Under medical stop loss insurance products, the Company assumes risk for costs associated with large individual claims and/or aggregate loss experience within an employer’s plan above a pre-set annual threshold. The segment also has a portfolio of additional health products and services that complement its medical products such as dental plans, behavioral health and employee

assistance products, provider network access and vision products. The Company sold Insured plans directly to individual consumers through the individual public health insurance exchanges (“Public Exchanges”) in 17 states as of December 31, 2024.

•Government Medical: In select geographies, the Health Care Benefits segment offers Medicare Advantage plans, Medicare Supplement plans and prescription drug coverage for Medicare beneficiaries; participates in Medicaid and subsidized Children’s Health Insurance Programs (“CHIP”); and participates in demonstration projects for members who are eligible for both Medicare and Medicaid (“Duals”). These Government Medical products are further described below:

•Medicare Advantage: Through annual contracts with the U.S. Centers for Medicare & Medicaid Services (“CMS”), the Company offers HMO and PPO products for eligible individuals in certain geographic areas through the Medicare Advantage program. Members typically receive enhanced benefits over traditional fee-for-service Medicare coverage (“Original Medicare”), including reduced cost-sharing for preventive care, vision and other services. The Company offered network-based HMO and/or PPO plans in 46 states and Washington, D.C. in 2024. For certain qualifying employer groups, the Company offers Medicare PPO products nationally. When combined with the Company’s PDP product, these national PPO plans form an integrated national Insured Medicare product for employers that provides medical and pharmacy benefits.

•Medicare PDP: The Company is a national provider of drug benefits under the Medicare Part D prescription drug program. All Medicare eligible individuals are eligible to participate in this voluntary prescription drug plan. Members typically receive coverage for certain prescription drugs, usually subject to a deductible, co-insurance and/or co-payment. The Company offered PDP plans in all 50 states and Washington, D.C. in 2024.

•Medicare Supplement: For certain Medicare eligible members, the Company offers supplemental coverage for certain health care costs not covered by Original Medicare. The products included in the Medicare Supplement portfolio help to cover some of the gaps in Original Medicare, and include coverage for Medicare deductibles and coinsurance amounts. The Company offered a wide selection of Medicare Supplement products in 49 states and Washington, D.C. in 2024.

•Medicaid and CHIP: The Company offers health care management services to individuals eligible for Medicaid and CHIP under multi-year contracts with government agencies in various states that are subject to annual appropriations. CHIP are state-subsidized insurance programs that provide benefits for families with uninsured children. The Company offered these services on an Insured or ASC basis in 16 states in 2024.

•Duals: The Company provides health coverage to beneficiaries who are dually eligible for both Medicare and Medicaid coverage. These members must meet certain income and resource requirements in order to qualify for this coverage. The Company coordinates 100% of the care for these members and may provide them with additional services in order to manage their health care costs.

The Company also has a portfolio of transformative products and services aimed at creating a holistic and integrated approach to individual health and wellness. These products and services complement the Commercial Medical and Government Medical products and aim to provide innovative solutions, create integrated experience offerings and enable enhanced care delivery to customers.

Health Care Benefits Provider Networks

The Company contracts with physicians, hospitals and other providers for services they provide to the Company’s members. The Company uses a variety of techniques designed to help encourage appropriate utilization of medical services (“utilization”) and maintain affordability of quality coverage. In addition to contracts with providers for negotiated rates of reimbursement, these techniques include creating risk sharing arrangements that align economic incentives with providers, the development and implementation of guidelines for the appropriate utilization and the provision of data to providers to enable them to improve health care quality. At December 31, 2024, the Company’s underlying nationwide provider network had approximately 1.9 million participating providers. Other providers in the Company’s provider networks also include laboratory, imaging, urgent care and other freestanding health facilities.

Health Care Benefits Quality Assessment

CMS uses a 5-star rating system to monitor Medicare health care and drug plans and ensure that they meet CMS’s quality standards. CMS uses this rating system to provide Medicare beneficiaries with a tool that they can use to compare the overall quality of care and level of customer service of companies that provide Medicare health care and drug plans. The rating system considers a variety of measures adopted by CMS, including quality of preventative services, chronic illness management and overall customer satisfaction. See “Health Care Benefits Pricing” below in this Item 1 for further discussion of star ratings. The

Company seeks Health Plan accreditation for Aetna Inc. (“Aetna”) HMO plans from the National Committee for Quality Assurance (“NCQA”), a private, not-for-profit organization that evaluates, accredits and certifies a wide range of health care organizations. Health care plans seeking accreditation must pass a rigorous, comprehensive review and must annually report on their performance.

Aetna Life Insurance Company (“ALIC”), a wholly-owned subsidiary of the Company, has received nationwide NCQA PPO Health Plan accreditation. As of December 31, 2024, all of the Company’s Commercial HMO and all of ALIC’s PPO members who were eligible participated in HMOs or PPOs that are accredited by the NCQA.

The Company’s provider selection and credentialing/re-credentialing policies and procedures are consistent with NCQA and URAC, a health care accrediting organization that establishes quality standards for the health care industry, as well as state and federal, requirements. In addition, the Company is certified under the NCQA Credentials Verification Organization (“CVO”) certification program for all certification options and has URAC CVO accreditation.

Quality assessment programs for contracted providers who participate in the Company’s networks begin with the initial review of health care practitioners. Practitioners’ licenses and education are verified, and their work history is collected by the Company or in some cases by the practitioner’s affiliated group or organization. The Company generally requires participating hospitals to be certified by CMS or accredited by The Joint Commission, the American Osteopathic Association, or Det Norske Veritas Healthcare.

The Company also offers quality and outcome measurement programs, quality improvement programs and health care data analysis systems to providers and purchasers of health care services.

Health Care Benefits Information Systems

The Health Care Benefits segment currently operates and supports an end-to-end suite of information technology platforms to support member engagement, enrollment, health benefit administration, care management, service operations, financial reporting and analytics. There is continued focus and investment in enterprise data platforms, cloud capabilities, digital products to offer innovative solutions and a seamless experience to the Company’s members through mobile and web channels. The Health Care Benefits segment is utilizing the full breadth of the Company’s assets to build enterprise technology that will help guide our members through their health care journey, provide them a high level of service, enable healthier outcomes and encourage them to take next best actions to lead healthier lives.

Health Care Benefits Customers

Medical membership is dispersed throughout the U.S., and the Company also serves medical members in certain countries outside the U.S. The Company offers a broad range of traditional, voluntary and consumer-directed health insurance products and related services, many of which are available nationwide. For additional information on medical membership, see “Health Care Benefits Segment” in the Management’s Discussion and Analysis of Financial Condition and Results of Operations (the “MD&A”) included in Item 7 of this 10-K.

The Company markets both Commercial Insured and ASC products and services primarily to employers that sponsor the Company’s products for the benefit of their employees and their employees’ dependents. Frequently, larger employers offer employees a choice among coverage options from which the employee makes his or her selection during a designated annual open enrollment period. Typically, employers pay all of the monthly premiums to the Company and, through payroll deductions, obtain reimbursement from employees for a percentage of the premiums that is determined by each employer. Some Health Care Benefits products are sold directly to employees of employer groups on a fully employee-funded basis. In some cases, the Company bills the covered individual directly. The Company also sells Insured plans directly to individual consumers in certain geographies through the Public Exchanges.

The Company offers Insured Medicare coverage on an individual basis as well as through employer groups to their retirees. Medicaid and CHIP members are enrolled on an individual basis. The Company also offers Insured health care coverage to members who are dually-eligible for both Medicare and Medicaid.

Health Care Benefits products are sold through: the Company’s sales personnel; independent brokers, agents and consultants who assist in the production and servicing of business; as well as private health insurance exchanges (“Private Exchanges”) and Public Exchanges (together with Private Exchanges, “Insurance Exchanges”). For large employers or other entities that sponsor the Company’s products (“plan sponsors”), independent consultants and brokers are frequently involved in employer health plan selection decisions and sales. In some instances, the Company may pay commissions, fees and other amounts to brokers, agents, consultants and sales representatives who place business with the Company. In certain cases, the customer pays the broker for services rendered, and the Company may facilitate that arrangement by collecting the funds from the customer and transmitting them to the broker. The Company supports marketing and sales efforts with an advertising program that may include television, radio, billboards, print media and social media, supplemented by market research and direct marketing efforts.

The U.S. federal government is a significant customer of the Health Care Benefits segment through contracts with CMS for coverage of Medicare-eligible individuals and federal employee-related benefit programs. Other than the contracts with CMS, the Health Care Benefits segment is not dependent upon a single customer or a few customers the loss of which would have a significant effect on the earnings of the segment. The loss of business from any one or a few independent brokers or agents would not have a material adverse effect on the earnings of the Health Care Benefits segment. Health Care Benefits segment revenues from the federal government accounted for 18% of the Company’s consolidated total revenues in 2024, 2023 and 2022. Contracts with CMS for coverage of Medicare-eligible individuals in the Health Care Benefits segment accounted for approximately 74%, 73% and 74%, respectively, of the Company’s consolidated revenues from the federal government in 2024, 2023 and 2022.

Health Care Benefits Pricing

For Commercial Insured plans, contracts containing the pricing and other terms of the relationship are generally established in advance of the policy period and typically have a duration of one year. Fees under ASC plans are generally fixed for a period of one year.

Generally, a fixed premium rate is determined at the beginning of the policy period for Commercial Insured plans. The Company typically cannot recover unanticipated increases in health care and other benefit costs in the current policy period; however, it may consider prior experience for a product in the aggregate or for a specific customer, among other factors, in determining premium rates for future policy periods. Where required by state laws, premium rates are filed and approved by state regulators prior to contract inception. Future operating results could be adversely affected if the premium rates requested are not approved or are adjusted downward or their approval is delayed by state or federal regulators.

The Company has Medicare Advantage and PDP contracts with CMS to provide HMO, PPO and prescription drug coverage to Medicare beneficiaries in certain geographic areas. Under these annual contracts, CMS pays the Company a fixed per member (or “capitation”) payment and/or a portion of the premium, both of which are based on membership and adjusted for demographic and health risk factors. CMS also considers inflation, changes in utilization patterns and average per capita fee-for-service Medicare costs in the calculation of the fixed capitation payment or premium. PDP contracts also provide a risk-sharing arrangement with CMS to limit the Company’s exposure to unfavorable expenses or benefit from favorable expenses. Amounts payable to the Company under the Medicare arrangements are subject to annual revision by CMS, and the Company elects to participate in each Medicare service area or region on an annual basis. Premiums paid to the Company for Medicare products are subject to federal government reviews and audits, which can result, and have resulted, in retroactive and prospective premium adjustments and refunds to the government and/or members. In addition to payments received from CMS, some Medicare Advantage products and all PDP products require a supplemental premium to be paid by the member or sponsoring employer. In some cases, these supplemental premiums are adjusted based on the member’s income and asset levels. Compared to Commercial Medical products, Medicare contracts generate higher per member per month revenues and higher health care and other benefit costs.

The Patient Protection and Affordable Care Act and the Health Care and Education Reconciliation Act of 2010 (collectively, the “ACA”) ties a portion of each Medicare Advantage plan’s reimbursement to the plan’s “star ratings.” Plans must have a star rating of 4 or higher (out of 5) to qualify for bonus payments. CMS released the Company’s 2025 star ratings in October 2024. The Company’s 2025 star ratings will be used to determine which of the Company’s Medicare Advantage plans have ratings of four stars or higher and qualify for bonus payments in 2026. Based on the Company’s membership at December 31, 2024, 88% of the Company’s Medicare Advantage members were in plans with 2025 star ratings of at least 4.0 stars, compared to 91% of the Company’s Medicare Advantage members being in plans with 2024 star ratings of at least 4.0 stars based on the Company’s membership at December 31, 2023.

Rates for Medicare Supplement products are regulated at the state level and vary by state and plan.

Under Insured Medicaid contracts, state government agencies pay the Company fixed monthly rates per member that vary by state, line of business and demographics; and the Company arranges, pays for and manages the health care services provided to Medicaid beneficiaries. These rates are subject to change by each state, and, in some instances, provide for adjustment for health risk factors. CMS requires these rates to be actuarially sound. The Company also receives fees from customers where it provides services under ASC Medicaid contracts. ASC Medicaid contracts generally are for periods of more than one year, and certain of them contain performance incentives and limited financial risk sharing with respect to certain medical, financial and operational metrics. Under these arrangements, performance is evaluated annually, with associated financial incentive opportunities, and financial risk share obligations are typically limited to a percentage of the fees otherwise payable to the Company. Payments to the Company under Medicaid contracts are subject to the annual appropriation process in the applicable state.

Under Duals contracts, the rate setting process is generally established by CMS in partnership with the state government agency participating in the demonstration project. Both CMS and the state government agency may seek premium and other refunds under certain circumstances, including if the Company fails to comply with CMS regulations or other contractual requirements.

The Company offers HMO and consumer-directed medical and dental plans to federal employees under the Federal Employees Health Benefits (“FEHB”) Program and the Federal Employees Dental and Vision Insurance Program. Premium rates and fees for those plans are subject to federal government review and audit, which can result, and have resulted, in retroactive and prospective premium and fee adjustments and refunds to the government and/or members.

Health Care Benefits Seasonality

The Health Care Benefits segment’s quarterly operating income progression is impacted by (i) the seasonality of benefit costs which generally increase during the year as Insured members progress through their annual deductibles and out-of-pocket expense limits, (ii) continued changes in product mix between Commercial and Government medical membership and (iii) the seasonality of operating expenses, which are generally the highest during the fourth quarter due primarily to spending to support readiness for the start of the upcoming plan year and marketing associated with Medicare annual enrollment. The Health Care Benefit segment’s quarterly operating income progression may be impacted by exogenous factors, which include regulatory or legal changes, as well as shifting care patterns.

Health Care Benefits Competition

The health care benefits industry is highly competitive, primarily due to a large number of for-profit and not-for-profit competitors, competitors’ marketing and pricing and a proliferation of competing products, including new products that are continually being introduced into the marketplace. New entrants into the marketplace, as well as consolidation within the industry, have contributed to and are expected to intensify the competitive environment. In addition, the rapid pace of change as the industry evolves towards a consumer-focused retail marketplace, including Insurance Exchanges, and the increased use of technology to interact with members, providers and customers, increase the risks the Company faces from new entrants and disruptive actions by existing competitors compared to prior periods.

The Company believes that the significant factors that distinguish competing health plans include the perceived overall quality (including accreditation status), quality of service, comprehensiveness of coverage, cost (including premium rates, provider discounts and member out-of-pocket costs), product design, financial stability and ratings, breadth and quality of provider networks, ability to offer different provider network options, providers available in such networks, and quality of member support and care management programs. The Company believes that it is competitive on each of these factors. The Company’s ability to increase the number of persons covered by its health plans or to increase Health Care Benefits segment revenues is affected by its ability to differentiate itself from its competitors on these factors. Competition may also affect the availability of services from providers, including primary care physicians, specialists and hospitals.

Insured products compete with local and regional health care benefits plans, health care benefits and other plans sponsored by other large commercial health care benefit insurance companies, health system owned health plans, new entrants into the marketplace and numerous for-profit and not-for-profit organizations operating under licenses from the Blue Cross and Blue Shield Association. The largest competitor in Medicare products is Original Medicare. Additional Health Care Benefits segment competitors include other types of medical and dental provider organizations, various specialty service providers

(including PBM services providers), health care consultants, financial services companies, integrated health care delivery organizations (networks of providers who also coordinate administrative services for and assume insurance risk of their members), third party administrators (“TPAs”) and, for certain plans, programs sponsored by the federal or state governments. The Company’s ability to increase the number of persons enrolled in Insured Commercial Medical products also is affected by the desire and ability of employers to self-fund their health coverage.

In addition to competitive pressures affecting the Company’s ability to obtain new customers or retain existing customers, the Health Care Benefits segment’s medical membership has been and may continue to be adversely affected by adverse and/or uncertain economic conditions and reductions in workforce by existing customers due to adverse and/or uncertain general economic conditions, especially in the U.S. and industries where such membership is concentrated.

Health Care Benefits Reinsurance

The Company currently has several reinsurance agreements with non-affiliated insurers that relate to Health Care Benefits insurance policies. The Company entered into these contracts to reduce the risk of catastrophic losses which in turn reduces capital and surplus requirements. The Company frequently evaluates reinsurance opportunities and refines its reinsurance and risk management strategies on a regular basis.

Health Services Segment

The Health Services segment provides a full range of PBM solutions, delivers health care services in its medical clinics, virtually, and in the home, and offers provider enablement solutions. PBM solutions include plan design offerings and administration, formulary management, retail pharmacy network management services, and specialty and mail order pharmacy services. In addition, the Company provides clinical services, disease management services, medical spend management and pharmacy and/or other administrative services for providers and federal 340B drug pricing program covered entities (“Covered Entities”). During 2023, the Company completed the acquisition of two key health care delivery assets – Signify Health, Inc. (“Signify Health”) a leader in health risk assessments, value-based care and provider enablement services, and Oak Street Health, Inc. (“Oak Street Health”) a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. The Company also launched CordavisTM, a wholly owned subsidiary that works directly with pharmaceutical manufacturers to commercialize and/or co-produce high quality biosimilar products. The Health Services segment’s clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Medicaid managed care (“Managed Medicaid”) plans, CMS, plans offered on Insurance Exchanges and other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities. During the year ended December 31, 2024, the Company’s PBM filled or managed 1.9 billion prescriptions on a 30-day equivalent basis.

Health Services Products and Services

PBM Solutions

The Health Services segment manages prescription drug distribution directly through the Company’s specialty and mail order pharmacies and through pharmacies in its retail network. All prescriptions processed by the Company are analyzed, processed and documented by the Company’s proprietary prescription management systems. These systems provide essential features and functionality to allow plan members to utilize their prescription drug benefits. These systems also streamline the process by which prescriptions are processed by staff and network pharmacists by enhancing review of various items through automation, including plan eligibility, early refills, duplicate dispensing, appropriateness of dosage, drug interactions or allergies, over-utilization and potential fraud.

Plan Design Offerings and Administration

The Company assists its PBM clients in designing pharmacy benefit plans that help improve health outcomes while minimizing the costs to the client. The Company also assists PBM clients in monitoring the effectiveness of their plans through frequent, informal communications, the use of proprietary software, as well as through formal annual, quarterly and sometimes monthly performance reviews. The Company administers pharmacy benefit plans for clients who contract with it to facilitate prescription drug coverage and claims processing for their eligible plan members. The Company also provides administrative services for Covered Entities.

The Company makes recommendations to help PBM clients design benefit plans that promote the use of lower cost, clinically appropriate drugs and helps its PBM clients control costs by recommending plan designs that encourage the use of generic equivalents of brand name drugs when such equivalents are available. Clients also have the option, through plan design, to further lower their pharmacy benefit plan costs by setting different member payment levels for different products on their drug lists or “formularies,” which helps guide members to choose lower cost alternatives through appropriate financial incentives.

Formulary Management

The Company utilizes an independent panel of doctors, pharmacists and other medical experts, referred to as the CVS Caremark National Pharmacy and Therapeutics Committee, to review and approve the selection of drugs that meet the Company’s standards of safety and efficacy for inclusion on one of the Company’s template formularies. The Company’s formularies provide recommended products in numerous drug classes to help ensure member access to clinically appropriate drugs with alternatives within a class under the client’s pharmacy benefit plan, while helping to drive the lowest net cost for clients that select one of the Company’s formularies. To help improve clinical outcomes for members and clients, the Company conducts ongoing, independent reviews of all drugs, including those appearing on the formularies and generic equivalent products. Many of the Company’s clients choose to adopt a template formulary offering as part of their plan design.

Retail Pharmacy Network Management Services

The Company maintains a national network of approximately 65,000 retail pharmacies, consisting of approximately 37,000 chain pharmacies (which include CVS pharmacy locations) and approximately 28,000 independent pharmacies, in the U.S., including Puerto Rico, the District of Columbia, Guam and the U.S. Virgin Islands. When a customer fills a prescription in a retail pharmacy, the pharmacy sends prescription data electronically to the Company from the point-of-sale. This data interfaces with the Company’s proprietary prescription management systems, which verify relevant plan member data and eligibility, while also performing a drug utilization review to help evaluate clinical appropriateness and safety and confirming that the pharmacy will receive payment for the prescription.

Specialty and Mail Order Pharmacy Services

The Company operates mail order pharmacies, specialty mail order pharmacies and retail specialty pharmacy stores in the U.S. The mail order pharmacies are used primarily for maintenance medications, while the specialty mail order pharmacies and retail specialty pharmacy stores are used for the delivery of advanced medications to individuals with chronic or genetic diseases and disorders. The Health Services segment pays an administrative service fee to the Pharmacy & Consumer Wellness segment, in exchange for which the Pharmacy & Consumer Wellness segment provides pharmacy fulfillment and patient management services to support the Health Services segment’s specialty and mail order pharmacy offerings.

The Company’s mail order pharmacies and specialty mail order pharmacies have been awarded Mail Service Pharmacy and Specialty Pharmacy accreditation, respectively, from URAC. Substantially all of the Company’s specialty mail order pharmacies also have been accredited by The Joint Commission and the Accreditation Commission for Health Care (“ACHC”), which are independent, not-for-profit organizations that accredit and certify health care programs and organizations in the U.S. The ACHC accreditation includes an additional accreditation by the Pharmacy Compounding Accreditation Board, which certifies compliance with the highest level of pharmacy compounding standards, and a distinction in Rare Diseases and Orphan Drugs.

Clinical Services

The Company offers multiple clinical programs and services to help clients manage overall pharmacy and health care costs in a clinically appropriate manner. These programs are primarily designed to promote better health outcomes and to help target inappropriate medication utilization and non-adherence to medication, each of which may result in adverse medical events that

negatively affect member health and client pharmacy and medical spend. These programs include utilization management (“UM”), medication management, quality assurance, adherence and counseling programs to complement the client’s plan design and clinical strategies. The Company offers an integrated strategy that aims to help decrease the potential for inappropriate opioid use while preserving access for those with genuine chronic pain needs through concurrent and retrospective claims’ review. In addition, this strategy aims to address potential fraud, waste, and abuse across multiple drug classes through surveillance and communications to prescribers and pharmacies. Core medication support products such as Pharmacy Advisor and Drug Savings Review optimize utilization through digital, phone, in-person, and provider-facing outreach to help participating plan members with certain chronic diseases to identify gaps in care, adhere to their prescribed medications, ensure efficient use of those medications, and manage their overall health conditions. The CVS Weight Management program optimizes utilization of GLP-1 medication and provides the label-recommended lifestyle support and coaching to maximize and maintain weight loss on these therapies, while addressing new indications (e.g., cardiovascular disease). The Company also has digital connectivity that helps to lower drug costs for patients by providing expanded visibility to lower cost alternatives through enhanced analytics and data sharing.

Disease Management Programs

The Company’s clinical programs and services utilize advanced protocols and offer clients convenience in working with providers and other third parties. The Company’s care management program covers diseases such as rheumatoid arthritis, Parkinson’s disease, epilepsy and multiple sclerosis and is accredited by the NCQA. The Company’s UM program covers similar diseases and is accredited by the NCQA and URAC.

Medical Benefit Management

The Company’s NovoLogix® online preauthorization tool helps identify and capture cost savings opportunities for specialty drugs billed under the medical benefit by identifying outliers to appropriate dosages and costs, and helps to ensure clinically appropriate use of specialty drugs.

Group Purchasing Organization Services

The Company operates a group purchasing organization that negotiates pricing for the purchase of pharmaceuticals and rebates with pharmaceutical manufacturers on behalf of its participants. The Company also provides various administrative, management and reporting services to pharmaceutical manufacturers.

Value-Based Care

In response to rising healthcare spending in the U.S., commercial, government and other payors are shifting away from fee-for-service payment models towards value-based models, including risk-based payment models that tie financial incentives to quality, efficiency and coordination of care. Value-based care (“VBC”) refers to the goal of incentivizing healthcare providers to simultaneously increase quality while lowering the cost of care for patients. More specifically, providers in a VBC model are incentivized to focus on more preventative care, higher quality of care and better coordination of care to create better health outcomes and avoid potentially expensive complications from illnesses that could be managed more conveniently and cost effectively.

The Company is committed to expanding value-based care in the U.S. and delivering higher quality care to patients at a lower overall cost to the industry. The Company operates in value-based care through two primary means: providing comprehensive primary care through its Oak Street Health primary care centers and enabling independent health systems transition to value-based care through contracting and care management services. The Company’s value-based care assets typically contract with payors, primarily Medicare Advantage plans, and/or CMS.

The Company’s Oak Street Health business operates retail-like, community-based centers that provide medical primary care services and support Medicare eligible patients in the management of chronic illnesses and the prevention of unnecessary acute events. The Company integrates population health analytics, social support services and primary care into the care model to drive improved patient outcomes. The Company contracts with health plans and CMS to generate medical costs savings, assume full financial risk of its patients and realize a return on its investment in primary care.

The Company’s clinics implement a branded and consumer-focused design to create a welcoming environment that engages patients in highly accessible, convenient locations close to where patients live, work and shop. As of December 31, 2024, the Company operated 239 centers across 27 states.

In addition to its primary care centers, the Company provides enablement services to independent health systems, assisting these groups with their transition to value-based care. The Company’s customers practice value-based care primarily through

two programs administered by CMS, the Accountable Care Organization (“ACO”) Realizing Equity, Access, and Community Health (“REACH”) Model (collectively, “ACO REACH”) and the Medicare Shared Savings Program (“MSSP”), under which the Company served a total of more than 1 million covered lives as of December 31, 2024.

ACOs are networks of healthcare providers and suppliers that work together to invest in infrastructure and redesign delivery processes to attempt to achieve high quality and efficient delivery of services. ACOs that achieve performance standards established by the U.S. Department of Health and Human Services (“HHS”) are eligible to share in a portion of the amounts saved by the Medicare program.

In-Home Health Evaluations

As a complement to its value-based care delivery, the Company operates a large mobile network of credentialed providers in the U.S. through its Signify Health business. These credentialed providers are deployed into the home primarily to conduct in-home health evaluations (“IHEs”) and perform select diagnostic services. IHEs may also be performed virtually or at a healthcare provider facility. During the year ended December 31, 2024, the Company performed more than 3 million IHEs. While in the home, providers perform IHEs with the assistance of the Company’s longitudinal patient records and proprietary clinical workflow software with its integrated device hub. The Company’s software guides clinical workflows as well as in-home diagnostic screenings, yielding a rich patient report of hundreds of data points. The Company also offers diagnostic and preventive services and provides comprehensive medication review services while in the home. Through its IHEs, the Company creates a comprehensive, documented record of the clinical, social and behavioral needs of its health plan customers’ medically complex populations and seek to further engage them with the healthcare system.

The evaluation results of IHEs are provided to individuals’ primary care physicians. The Company believes sharing these results helps to fill gaps in care, while encouraging individuals who have not regularly visited their PCP to schedule a visit. The IHEs also provide health plans with insights into member health without taking members out of the home and contribute to health plans’ ability to effectively participate in value-based and risk-adjusted government programs such as Medicare Advantage. The data gathered during an IHE is also a resource that can be used by health plans to improve their Healthcare Effectiveness Data and Information Set (“HEDIS”) scores and Medicare Advantage star ratings.

MinuteClinic

As of December 31, 2024, the Company operated more than 900 MinuteClinic locations in the U.S. The clinics are staffed by nurse practitioners and physician assistants who utilize nationally established guidelines to deliver a variety of health care services. Payors value these clinics because they provide convenient, high-quality, cost-effective care, in many cases offering an attractive alternative to more expensive sites of care. MinuteClinic also offers virtual care services to connect customers with licensed providers to provide access to health services remotely. MinuteClinic also maintains relationships with leading hospitals, clinics and physicians in the communities we serve to support and enhance quality, access and continuity of care.

Cordavis

The Company launched Cordavis, a wholly owned subsidiary that works directly with pharmaceutical manufacturers to commercialize and/or co-produce high quality biosimilar products. Through Cordavis, the Company intends to develop a portfolio of products that will provide broader access to biosimilars in the U.S. As access to biosimilars increases, it is expected to generate more competition in the market which should lead to lower costs and result in higher savings for our clients.

Health Services Information Systems

The Health Services segment’s claim adjudication platform incorporates architecture that centralizes the data generated from adjudicating retail pharmacy, specialty and mail order claims and delivering other solutions to PBM clients. The Health Engagement Engine® technology and proprietary clinical algorithms help connect various parts of the enterprise and serve an essential role in cost management and health improvement, leveraging cloud-native technologies and practices. This capability transforms pharmacy data into actionable interventions at key points of care, including in retail, mail and specialty pharmacies as well as in customer care call center operations, leveraging our enterprise data platform to improve the quality of care. The technology leverages assisted artificial intelligence to deliver insights to the business and bring automation to otherwise manual tasks. Specialty services also connects with our claim adjudication platform and various health plan adjudication platforms with a centralized architecture servicing many clients and members. Operating services, such as Specialty Expedite®, provide an interconnected onboarding solution for specialty medications and branding solutions ranging from fulfillment to total patient management. These services are managed through our new innovative specialty workflow and web platform.

The Health Services segment’s custom-built proprietary Canopy technology is a key driver of the success of its value-based care model and foundation for patients receiving a consistent, high-quality level of care. Canopy underlies every aspect of the Company’s day-to-day clinical and operational workflows, allowing care teams to tailor care plans to the needs of both the patient and the business. Canopy integrates an immense amount of data about patients from a broad set of sources, including payor claims data, pharmacy data and medical records from hospitals and specialists and provides actionable insights and workflows to accelerate effective clinical management and oversight. Canopy leverages artificial intelligence and machine learning capabilities to create and refine a clinical rules engine (predictive models and prescriptive algorithms) that informs care delivery and addresses hospital admissions and readmissions, medical costs and patient retention.

com. Key elements of the offerings include landing pages which highlight services and answer common questions, screening capabilities to determine patient eligibility, service location locator and appointment selection tools to efficiently identify the requested service on a specified date, time, and location and registration pages to collect required patient information, accelerating check-in once at the MinuteClinic.

Health Services Clients & Customers

The Company’s Health Services clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Managed Medicaid plans, CMS, plans offered on Insurance Exchanges, other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities. Pharmaceuticals are provided to eligible members in benefit plans maintained by clients and utilize the Company’s information systems, among other things, to help perform safety checks, drug interaction screening and identify opportunities for generic substitution.

The Company’s primary care operations rely on its value-based capitated partnerships with payors and CMS which manage and market Medicare Advantage plans across the U.S. The Company had strategic value-based relationships with over 25 different payors as of December 31, 2024, including each of the top 5 national payors by number of Medicare Advantage patients. These existing contracts and relationships and their understanding of the value of the Company’s model reduces the risk of entering into new markets as the Company typically has payor contracts before entering a new market. Maintaining, supporting and growing these relationships, particularly as the Company enters new geographies, is critical to its long-term success.

The Company’s value-based care arrangements are primarily directed at independent health systems, including community hospitals, physician practices and clinics, participating in, or seeking to participate in, ACOs or contract with Medicare Advantage plans.

The Company’s IHE operations customers are primarily Medicare Advantage health plans, making up approximately 86% of its total IHE volume. In 2024, the Company had IHE contracts with 51 health plans in the U.S., including 22 of the 50 largest Medicare Advantage plans.

Health Services Seasonality

The majority of the Health Services segment revenues, including revenues generated from its PBM services, are not seasonal in nature.

The Company’s primary care operations experience some variability depending upon the time of year in which they are measured. Typically, a significant portion of the Company’s at-risk patient growth is experienced during the first quarter, after plan enrollment selections made during the fourth quarter of the prior annual enrollment period take effect. Finally, medical costs will vary seasonally depending on a number of factors including the weather, which can be a driver of certain illnesses such as the influenza virus.

Revenues generated from the Company’s IHEs and related services are generally lowest in the fourth quarter of each calendar year. Annually, IHE customers provide a member list, which may be supplemented or amended during the year. Customers generally limit the number of times the Company may attempt to contact their members. Throughout the year, as IHEs are completed and the Company attempts to contact members, the number of members who have not received an IHE and whom

the Company is still able to contact declines, typically resulting in fewer IHEs scheduled during the fourth quarter of each calendar year.

Health Services Competition

The Company believes the primary competitive factors in the health services industry include: (i) the ability to negotiate favorable discounts from drug manufacturers as well as to negotiate favorable discounts from, and access to, retail pharmacy networks; (ii) the ability to identify and apply effective cost management programs utilizing clinical strategies, including the development and utilization of preferred formularies; (iii) the ability to market PBM and other health products and services; (iv) the commitment to provide flexible, clinically-oriented services to clients and be responsive to clients’ needs; (v) the ability to attract and retain physicians, nurse practitioners, physician assistants and other medical personnel; (vi) the quality, scope and costs of products and services offered to clients and their members, as well as the care delivered to customers; and (vii) operational excellence in delivering services.

The Health Services segment has a significant number of competitors offering PBM services, including large, national PBM companies (e.g., Prime Therapeutics and MedImpact), PBMs owned by large national health plans (e.g. The Health Services segment’s MinuteClinic offerings compete with retail health clinics, urgent care and primary care offices.

The Company’s primary care operations compete with large and medium-sized local and national providers of primary care services and health system affiliated practices, for, among other things, contracts with payors, recruitment of physicians and other medical and non-medical personnel and individual patients. Principal primary care competitors for patients and payor contracts vary considerably in type and identity by market. Because of the low barriers of entry into the primary care business and the ability of physicians to own primary care centers and/or also be medical directors for their own centers, competition for growth in existing and expanding markets is not limited to large competitors with substantial financial resources.

The Company’s ACO operations compete with healthcare risk management providers. Key competitors are companies that work directly with providers to enable them to successfully take risk in value-based care arrangements. Some of these competitors focus on a specific function – like analytics – while others offer more comprehensive services. Some key competitors operate nationally, while other competitors are more geographically focused.

The Company’s IHE and related services operations compete with a wide variety of local and national providers of in-home, virtual and in-person diagnostic and evaluative services. Competitors include pure-play companies whose principal business is providing health risk assessments and similar services, as well as large payors, which may use a variety of different providers to perform health risk assessments across care settings or may perform some or all of their health risk assessments utilizing their own in-house capabilities.

Pharmacy & Consumer Wellness Segment

The Pharmacy & Consumer Wellness segment dispenses prescriptions in its retail pharmacies and through its infusion operations, provides ancillary pharmacy services including pharmacy patient care programs, diagnostic testing and vaccination administration, and sells a wide assortment of health and wellness products and general merchandise. The segment also conducts long-term care pharmacy (“LTC”) operations, which distribute prescription drugs and provide related pharmacy consulting and ancillary services to long-term care facilities and other care settings, and provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. As of December 31, 2024, the Pharmacy & Consumer Wellness segment operated more than 9,000 retail locations, as well as online retail pharmacy websites, LTC pharmacies and on-site pharmacies, retail specialty pharmacy stores, compounding pharmacies and branches for infusion and enteral nutrition services. During the year ended December 31, 2024, the Pharmacy & Consumer Wellness segment filled 1.7 billion prescriptions on a 30-day equivalent basis and dispensed approximately 27.2% of total retail pharmacy prescriptions in the U.S.

Pharmacy & Consumer Wellness Products and Services

A typical retail store sells prescription drugs and a wide assortment of high-quality, nationally advertised brand name and proprietary brand merchandise. Pharmacy locations may also contract with Covered Entities under the federal 340B drug

pricing program. The Company purchases merchandise from numerous manufacturers and distributors. The Company believes that competitive sources are readily available for substantially all of the products carried in its retail stores and the loss of any one supplier would not likely have a material effect on the Pharmacy & Consumer Wellness segment. LTC operations include distribution of prescription drugs and related consulting and ancillary services.

Pharmacy & Consumer Wellness revenues by major product group are as follows:

_____________________________________________

(1)Pharmacy includes LTC sales and sales in pharmacies within Target Corporation (“Target”) and other retail stores.

(2)“Other” represents less than 11% of the “Front store and other” revenue category in all periods presented.

Pharmacy

Pharmacy revenues represented over three-fourths of Pharmacy & Consumer Wellness segment revenues in each of 2024, 2023 and 2022. The Company believes that retail pharmacy operations will continue to represent a critical part of the Company’s business due to industry demographics, e.g., an aging American population consuming a greater number of prescription drugs, prescription drugs being used more often as the first line of defense for managing illness, the introduction of new pharmaceutical products, the need for vaccinations and Medicare Part D growth. The Company believes the retail pharmacy business benefits from investment in both people and technology, as well as innovative collaborations with health plans, PBMs and providers. Given the nature of prescriptions, consumers want their prescriptions filled accurately by professional pharmacists using the latest tools and technology, and ready when promised. Consumers also need medication management programs and better information to help them get the most out of their health care dollars. To assist consumers with these needs, the Company has introduced integrated pharmacy health care services that provide an earlier, easier and more effective approach to engaging consumers in behaviors that can help lower costs, improve health and save lives.

Front Store

Front store revenues reflect the Company’s strategy of innovating with new and unique products and services, using innovative personalized marketing and adjusting the mix of merchandise to match customers’ needs and preferences. A key component of the front store strategy is the ExtraCare® card program, which is one of the largest and most successful retail loyalty programs in the U.S. The ExtraCare program allows the Company to balance marketing efforts so it can reward its best customers by providing them with automatic sale prices, customized coupons, ExtraBucks® rewards and other benefits. The Company also offers a subscription-based membership program, ExtraCare PlusTM, under which members are entitled to a suite of benefits delivered over the course of the subscription period, as well as a promotional reward that can be redeemed for future goods and services. The Company currently carries approximately 4,500 proprietary brand products, which accounted for approximately 21% of front store revenues during 2024.

On-site Pharmacies

The Company also operates a limited number of pharmacies located at client sites, which provide certain health plan members and customers with a convenient alternative for filling their prescriptions and receiving vaccinations.

Specialty and Mail Order Pharmacy Fulfillment Services

The Pharmacy & Consumer Wellness segment provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings, in exchange for which the Health Services segment pays an administrative service fee to the Pharmacy & Consumer Wellness segment.

Long-term Care Pharmacy Operations

The Pharmacy & Consumer Wellness segment provides LTC pharmacy services through the Omnicare® business. Omnicare’s customers consist of skilled nursing facilities, assisted living facilities, independent living communities, hospitals, correctional facilities, and other health care service providers. The Company provides pharmacy consulting, including monthly patient drug therapy evaluations, to assist in compliance with state and federal regulations and provide proprietary clinical and health

management programs. It also provides pharmaceutical case management services for retirees, employees and dependents who have drug benefits under corporate-sponsored health care programs.

Community Location Development

CVS Health’s community health destinations are an integral part of its ability to meet the needs of consumers and maintain its leadership position in the changing health care landscape. When paired with its rapidly expanding digital presence, the Company’s physical presence in thousands of communities across the country represents a competitive advantage by allowing it to develop deep and trusted relationships through everyday engagement in consumer health. The Company’s community health destinations have played, and will continue to play, a key role in the Company’s continued growth and success. During 2024, the Company opened 39 new locations, relocated 3 locations and closed 299 locations.

The Company’s continuous assessment of its national footprint is an essential component of competing effectively in the current health care environment. On an ongoing basis, the Company evaluates changes in population, consumer buying patterns and future health needs to assess the ability of its existing stores and locations to meet the needs of its consumers and the business. During the fourth quarter of 2021, the Company completed a strategic review of its retail business and announced its plans to reduce store density in certain locations through the closure of approximately 900 retail stores between 2022 and 2024. As of December 31, 2024, the Company had closed approximately 900 retail stores in connection with these actions.

During the third quarter of 2024, in connection with an enterprise-wide restructuring plan, the Company completed a strategic review of its retail business and determined that it plans to close an additional 271 retail stores in 2025.

Pharmacy & Consumer Wellness Information Systems

The Company has continued to invest in information systems to enable it to deliver exceptional customer service, enhance safety and quality, and expand patient care services while lowering operating costs. The proprietary WeCARE Workflow tool supports pharmacy teams by prioritizing work to meet customer expectations, facilitating prescriber outreach, and seamlessly integrating clinical programs. This solution delivers improved efficiency and enhances customer experience, as well as provides a framework to accommodate the evolution of pharmacy practice and the expansion of clinical programs. The Company’s digital strategy is to empower the consumer to navigate their pharmacy experience and manage their condition through integrated online and mobile solutions that offer utility and convenience. The Company has also established tools which enable customers to schedule diagnostic testing and vaccination appointments through CVS.com, provide instructions and notifications to the customer regarding the services, and, following administration, allow customers to access digital results for tests and records for vaccinations.

Pharmacy & Consumer Wellness Customers

The success of the Pharmacy & Consumer Wellness segment’s businesses is dependent upon the Company’s ability to establish and maintain contractual relationships with pharmacy benefit managers and other payors on acceptable terms. Substantially all of the Pharmacy & Consumer Wellness segment’s pharmacy revenues are derived from pharmacy benefit managers, managed care organizations (“MCOs”), government funded health care programs, commercial employers and other third-party payors. No single Pharmacy & Consumer Wellness payor accounted for 10% or more of the Company’s consolidated total revenues in 2024, 2023 or 2022.

Pharmacy & Consumer Wellness Seasonality

The majority of Pharmacy & Consumer Wellness segment revenues, particularly pharmacy revenues, generally are not seasonal in nature. However, front store revenues tend to be higher during the December holiday season. Uncharacteristic or extreme weather conditions also can adversely affect consumer shopping patterns and Pharmacy & Consumer Wellness revenues, expenses and operating results.

Pharmacy & Consumer Wellness Competition

The retail pharmacy business is highly competitive. The Company believes that it competes principally on the basis of: (i) store location and convenience, (ii) customer service and satisfaction, (iii) product selection and variety, and (iv) price. In the areas it serves, the Company competes with other drugstore chains (e.g., Walgreens and Rite Aid), supermarkets, discount retailers (e.g., Walmart), independent pharmacies, restrictive pharmacy networks, online retailers (e.g.

LTC pharmacy services are highly regional or local in nature, and within a given geographic area of operation, highly competitive. The Company’s largest LTC pharmacy competitor nationally is PharMerica. The Company also competes with numerous local and regional institutional pharmacies, pharmacies owned by long-term care facilities and local retail pharmacies. Some states have enacted “freedom of choice” or “any willing provider” requirements as part of their state Medicaid programs or in separate legislation, which may increase the competition that the Company faces in providing services to long-term care facility residents in these states.

Corporate/Other Segment

The Company presents the remainder of its financial results in the Corporate/Other segment, which primarily consists of:

•Management and administrative expenses to support the Company’s overall operations, which include certain aspects of executive management and the corporate relations, legal, compliance, human resources and finance departments, information technology, digital, data and analytics, as well as acquisition-related transaction and integration costs; and

•Products for which the Company no longer solicits or accepts new customers such as its large case pensions and long-term care insurance products.

Generic Sourcing Venture

The Company and Cardinal Health, Inc. (“Cardinal”) each have a 50% ownership in Red Oak Sourcing, LLC (“Red Oak”), a generic pharmaceutical sourcing entity. Under this arrangement, the Company and Cardinal contributed their sourcing and supply chain expertise to Red Oak and agreed to source and negotiate generic pharmaceutical supply contracts for both companies through Red Oak. Red Oak does not own or hold inventory on behalf of either company.

Working Capital Practices

The Company funds the growth of its businesses through a combination of cash flow from operations, commercial paper and other short-term borrowings, as well as long-term borrowings. For additional information on the Company’s working capital practices, see “Liquidity and Capital Resources” in the MD&A included in Item 7 of this 10-K. Employer groups, individuals, college students, part-time and hourly workers, health plans, providers, governmental units, government-sponsored plans (with the exception of Medicare Part D services, which are described below), labor groups and expatriates, which represent the vast majority of Health Care Benefits segment revenues, typically settle in less than 30 days. As a provider of Medicare Part D services, the Company contracts annually with CMS. Utilization of services each plan year results in the accumulation of either a receivable from or a payable to CMS. The timing of settlement of the receivable or payable with CMS takes several quarters, which impacts working capital from year to year. The majority of the Pharmacy & Consumer Wellness segment non-pharmacy revenues are paid in cash, or with debit or credit cards. The remainder of the Company’s consolidated pharmacy revenues are paid in cash, or with debit or credit cards.

Human Capital

Overview

At CVS Health, we share a single, clear purpose: building a world of health around every consumer. As of December 31, 2024, we employed over 300,000 colleagues primarily in the U.S. including in all 50 states, the District of Columbia and Puerto Rico, approximately 73% of whom were full-time.

We believe engaged colleagues produce stronger business results and are more likely to build a career with the Company. Each year we conduct engagement surveys that provide colleagues the opportunity to share opinions and experiences with respect to

their role, their team, and the enterprise to help CVS Health Corporation’s Board of Directors (the “Board”) and our management identify where we can improve colleague experience. In 2024, we conducted engagement surveys in both April and September. More than 150,000 colleagues participated in each survey and overall engagement stayed consistent across surveys.

Workforce Strategy

At CVS Health, our goal is to attract the most talented and qualified workforce in health care and to develop and retain a work force to support and advance our strategic priorities. We believe that our workforce strategy should be responsive to and reflect the broad and diverse communities whose health care needs we serve.

We are committed to developing a pipeline of critical skills to power CVS Health for the future. We partner with colleges and universities across many professional fields. For example, the CVS Health PharmD tuition assistance program is available to all eligible CVS Pharmacy interns. In addition, CVS Health is creating transformational solutions to workforce development through dynamic community Workforce Innovation and Talent Centers (WITCs), tailored to the specific needs of each community, incorporating education and skill development, as we help advance future leaders.

Our broad training practices include updated, tech-enabled tools and keep our colleagues informed of new developments in our industry that are relevant to their roles. During the year ended December 31, 2024, our colleagues invested approximately 16 million hours in learning and development courses.

Respect is a cornerstone of our culture, and a centerpiece of our workplace strategy. To do our best when people need us the most means we strive every day to achieve the highest level of trust and respect from our colleagues, our customers, and our communities. Our Heart At Work behaviors are guiding principles for how we lead. We emphasize trust, collaboration, and innovation. Those aspects of our culture show up in our Respect Works Here campaign.

Our comprehensive and well-executed workforce practices have allowed us to be recognized as a VETSIndexes 3-Star Employer and to earn a 100 percent score on the Disability Equality Index, meaning the Company is recognized as a “Best Place to Work for Disability Inclusion”.

We disclose more information on our workforce strategy in our annual Impact Report.

Total Rewards

We strive to offer a comprehensive and competitive mix of pay and benefits to meet the varying needs of our colleagues and their families.

Health, Safety and Environment

We have a strong commitment to providing a safe working environment. We have implemented an environmental health and safety management system to support adherence and monitoring of programs designed to make our various business operations compliant with applicable occupational safety and health regulations and requirements.

We utilize a Management Information System to track compliance, analyze data and concentrate on key areas of risk to reduce the chance of workplace incidents. We focus on identifying causes and improving performance when workplace incidents occur. We capture colleague observations and feedback through programs like our Behavior Based Safety and our Safety

Hazard and Awareness Reporting Program. We also engage leaders in promoting a culture of safety and measure performance through a comprehensive safety index that leverages both leading and lagging indicators. With safety task forces in place at each distribution center, we empower leaders and safety business partners to identify policies, procedures and processes that could improve their own operations.

Impact Strategy

Overview

Our Healthy 2030 impact strategy outlines how we are creating a more equitable health care system and sustainable future. It reinforces our company’s strategy and is embedded in our purpose-driven culture. Healthy 2030 is constructed through our four-pillar framework – Healthy People, Healthy Business, Healthy Community and Healthy Planet. We are focused on making a meaningful, measurable impact within each of the pillars outlined below.

Healthy People

We are building a world of health around every individual. We connect people to the care they need, put medicine and wellness within reach and drive greater affordability, simplicity, and convenience in everything we do. Whether we are increasing access to health care and services or making investments to support our communities to improve health outcomes, we are utilizing our expertise and resources to improve people’s health.

Healthy Business

We are purpose-driven – all of us. We have an opportunity to harness the power of our greatest strength - our talented and diverse workforce of more than 300,000 colleagues - to reimagine health care in America and make health care more affordable, accessible, and simpler. Together, we set high standards and hold ourselves to them. We work daily to create value for everyone who trusts and relies on us and ensure every action we take is done ethically and transparently. We support our colleagues’ education and growth with scholarships, promote and develop leadership skills through training and development courses and continue strengthening our pipeline to our workforce through job training and skill building programs in our communities. We integrate governance and partnership across our business units.

Healthy Community

We are strengthening our communities by addressing the unique barriers to improving health outcomes locally. We support organizations centering their work on heart health, mental health, women’s health, healthy aging and climate-related health impacts. We also invest in the resources needed for communities to take proactive steps toward a healthier future. This includes addressing food insecurity, improving access to workforce training and educational opportunities nationwide. When a natural disaster or other incident affects the communities where we live and work, we swiftly take action to ensure our response addresses our colleagues' and customers' evolving needs. Our colleagues are also making a difference by donating their time and talents with organizations that are meaningful to them. Together, we make a lasting impact by driving a holistic approach and collaboration across these community programs, investments, and organizations.

Healthy Planet

We continue to invest in initiatives and programs that focus on improving the health of our planet by advancing our sustainability commitments and addressing the environmental factors that contribute to poor health and exacerbation of chronic illnesses. We were one of the first companies in the world to have our net-zero targets validated by the Science-Based Targets Initiative’s (SBTi) net-zero methodology. We continue to reduce greenhouse gas emissions and source renewable energy on the path to achieving net-zero emissions across our value chain by 2050. We also drive packaging innovation and efforts to reduce unnecessary plastics and waste across the enterprise.

Intellectual Property

The Company has registered and/or applied to register a variety of trademarks and service marks used throughout its businesses, as well as domain names, and relies on a combination of copyright, patent, trademark and trade secret laws, in addition to contractual restrictions, to establish and protect the Company’s proprietary rights. The Company regards its intellectual property as having significant value in the Health Care Benefits, Health Services and Pharmacy & Consumer

Wellness segments. The Company is not aware of any facts that could materially impact the continuing use of any of its intellectual property.

Government Regulation

Overview

The Company’s operations are subject to comprehensive federal, state and local laws and regulations and comparable multiple levels of international regulation in the jurisdictions in which it does business. There also continues to be a heightened level of review and/or audit by federal, state and international regulators of the health and related benefits industry’s business and reporting practices. In addition, many of the Company’s PBM clients and the Company’s payors in the Pharmacy & Consumer Wellness segment, including insurers, Medicare plans, Managed Medicaid plans and MCOs, are themselves subject to extensive regulations that affect the design and implementation of prescription drug benefit plans that they sponsor. Similarly, the Company’s LTC clients, such as skilled nursing facilities, are subject to government regulations, including many of the same government regulations to which the Company is subject.

The federal, state and local laws, regulations and rules and the international laws and regulations governing the Company’s businesses, the contracts they enter into, and interpretations of those laws, regulations and rules continue to change and expand, grow more complex and become more restrictive each year. The application of these complex legal and regulatory requirements to the detailed operation of the Company’s businesses creates areas of uncertainty. Further, there are numerous proposed health care, financial services and other laws and regulations at the federal, state and international levels, some of which could adversely affect the Company’s businesses if they are enacted. Possible regulatory or legislative changes include the federal or one or more state governments fundamentally restructuring the Commercial, Medicare or Medicaid marketplace; reducing payments to the Company in connection with Medicare, Medicaid, dual eligible or special needs programs; increasing its involvement in drug reimbursement, pricing, purchasing, and/or importation; or changing the laws governing PBMs.

The Company has internal control policies and procedures and conducts training and compliance programs for its employees to help prevent, detect and correct prohibited practices. Any failure or alleged failure to comply with applicable laws and regulations summarized below, or any adverse applications or interpretations of, or changes in, the laws and regulations affecting the Company and/or its businesses, could have a material adverse effect on the Company’s operating results, financial condition, cash flows and/or stock price. See Item 1A of this 10-K, “Risk Factors—Risks from Changes in Public Policy and Other Legal and Regulatory Risks,” and Item 3 of this 10-K, “Legal Proceedings,” for further information.

The Company can give no assurance that its businesses, financial condition, operating results and/or cash flows will not be materially adversely affected, or that the Company will not be required to materially change its business, practices or strategy, based on: (i) future enactment of new health care or other laws or regulations; (ii) the interpretation or application of existing laws or regulations, including the laws and regulations described in this Government Regulation section, as they may relate to one or more of the Company’s businesses, one or more of the industries in which the Company competes and/or the health care industry generally; (iii) pending or future federal or state governmental investigations of one or more of the Company’s businesses, one or more of the industries in which the Company competes and/or the health care industry generally; (iv) pending or future government audits, investigations or enforcement actions against the Company; or (v) adverse developments in pending or future legal proceedings against or affecting the Company, including qui tam lawsuits, or affecting one or more of the industries in which the Company competes and/or the health care industry generally.

Laws and Regulations Related to Multiple Segments of the Company’s Business

Laws Related to Reimbursement by Government Programs - The Company is subject to various federal and state laws concerning its submission of claims and other information to Medicare, Medicaid and other federal and state government-sponsored health care programs. Potential sanctions for violating these laws include recoupment or reduction of government reimbursement amounts, civil penalties, treble damages, and exclusion from participation in government health care programs. Such laws include the federal False Claims Act (the “False Claims Act”), the federal anti-kickback statute (the “AKS”), state

false claims acts and anti-kickback statutes in most states, the federal “Stark Law” and related state laws. In particular, the False Claims Act prohibits intentionally submitting, conspiring to submit, or causing to be submitted, false claims, records, or statements to the federal government, or intentionally failing to return overpayments, in connection with reimbursement by federal government programs. In addition, any claim for government reimbursement also violates the False Claims Act where it results from a violation of the AKS.

The AKS prohibits, among other things, knowingly and willfully offering, paying, soliciting or receiving remuneration, directly or indirectly, in cash or kind, to induce or reward either the referral of an individual for, or the purchase, order or recommendation of, any good or service, for which payment may be made in whole or in part under federal health care programs, such as Medicare and Medicaid. Certain of the Company’s programs involve arrangements with payments intended to influence behavior relative to Medicare and other federal health care program beneficiaries, including risk sharing and “gainsharing” arrangements. While there is no fixed definition of a gainsharing arrangement, the term typically refers to an arrangement in which a share of cost savings for patient care attributable in part to a physician’s efforts are shared with the physician. The Office of the Inspector General of HHS (the “OIG”) has recognized that there are legitimate interests in enlisting physicians in effort to reduce unnecessary costs from the health care system and, if appropriately structured, such gainsharing arrangements should not violate the AKS. Effective in early 2021, CMS and the OIG established new safe harbors that protect certain value-based arrangements, and the Company has integrated its understanding of these safe harbors into its new and existing programs.

The Stark Law prohibits a physician who has a financial relationship, or who has an immediate family member who has a financial relationship, with entities providing “designated health services” (“DHS”) from referring Medicare patients to such entities for the furnishing of DHS, unless an exception applies. The Stark Law prohibits any entity providing DHS that has received a prohibited referral from presenting, or causing to be presented, a claim or billing for the services arising out of the prohibited referral. Similarly, the Stark Law prohibits an entity from “furnishing” DHS to another entity with which it has a financial relationship when that entity bills for the service. The prohibition applies regardless of the reasons for the financial relationship and the referral. Unlike the AKS, the Stark Law is a strict liability statute where unlawful intent need not be demonstrated. Although uncertainty exists, some federal agencies and some courts have taken the position that the Stark Law also applies to Medicaid. With respect to certain CMS innovation models in which we may participate, the OIG and CMS jointly issued waivers of the Stark Law. In early 2021, CMS established new exceptions to the Stark Law that protect certain value-based arrangements, and the Company has integrated exceptions into its processes and procedures. Various states have enacted similar laws.

Both federal and state false claims laws permit private individuals to file qui tam or “whistleblower” lawsuits on behalf of the federal or state government. Participants in the health and related benefits industry, including the Company, frequently are subject to actions under the False Claims Act or similar state laws and the Stark Law or similar state laws.

The ACA - The ACA significantly increased federal and state oversight of health plans. Among other requirements, it specifies minimum medical loss ratios (“MLRs”) for Commercial and Medicare Insured products, specifies features required to be included in commercial benefit designs, limits commercial individual and small group rating and pricing practices, encourages additional competition (including potential incentives for new participants to enter the marketplace), and includes regulations and processes that could delay or limit the Company’s ability to appropriately increase its health plan premium rates. This in turn could adversely affect the Company’s ability to continue to participate in certain product lines and/or geographies that it serves today.

Although the U.S. Supreme Court dismissed a challenge to the constitutionality of the ACA and issued an opinion preserving the ACA and its consumer protections, there may be continued efforts to invalidate, modify, repeal or replace portions of it. In addition to litigation, parts of the ACA continue to evolve through the promulgation of executive orders, legislation, regulations and guidance at the federal or state level. The Company expects the ACA, including potential changes thereto, to continue to significantly impact its business operations and operating results, including pricing, medical benefit ratios (“MBRs”) and the geographies in which the Company’s products are available.

Medicare Regulation - The Company’s Medicare Advantage, PDP and other Medicare products are highly regulated by CMS. The regulations and contractual requirements applicable to the Company and other private participants in Medicare programs are complex, expensive to comply with and subject to change. Medicare regulations also have the potential to impact products and services used by Medicare beneficiaries, including services provided by Oak Street Health and Signify Health.

The provisions of the ACA significantly increased the Company’s exposure to funding and regulation of, and changes in government policy with respect to and/or funding or regulation of, the various Medicare programs in which the Company participates, including changes in the amounts payable to us under those programs and/or new reforms or surcharges on existing programs. For example, the ACA requires minimum MLRs for Medicare Advantage and Medicare Part D plans of 85%. If a Medicare Advantage or Medicare Part D contract pays minimum MLR rebates for three consecutive years, it will become ineligible to enroll new members. If a Medicare Advantage or Medicare Part D contract pays such rebates for five consecutive years, it will be terminated by CMS. It is possible that certain Medicare Advantage contracts may not meet the 85% MLR for consecutive years.

Elements of that risk adjustment mechanism continue to be challenged by the U.S. Department of Justice (the “DOJ”), the OIG and CMS itself. For example, CMS made significant changes to the structure of the hierarchical condition category model in version 28, which may impact risk adjustment factor (“RAF”) scores for a larger percentage of Medicare Advantage beneficiaries and could result in changes to beneficiary RAF scores with or without a change in the patient’s health status. CMS continuously evaluates how and where risk adjustment is captured, which from time-to-time has included the capture of diagnosis codes in home visits. A legislative or regulatory change to the ability of Medicare Advantage plans to use home visits as a means to evaluate and diagnosis their members’ health conditions, or substantial changes in the risk adjustment mechanism, including changes that result from enforcement or audit actions, could: materially affect the amount of the Company’s Medicare reimbursement; require the Company to raise prices or reduce the benefits offered to Medicare beneficiaries; impact the services provided by, or the financial performance of, Oak Street Health and Signify Health; and potentially limit the Company’s (and the industry’s) participation in the Medicare program.

The Company will continue to offer a wide range of Medicare products across the country to meet the diverse health care needs of its customers, including Individual Medicare Advantage, Group Medicare, Special Needs Plans, Medicare Supplement plans and Prescription Drug Plans.

Additionally, there is growing interest among policymakers in re-evaluating how benchmarks are constructed in Medicare Advantage compared to Medicare Fee-For-Service programs, such as MSSP and ACO REACH. Policymakers could pursue various strategies including, among other things, re-evaluating benchmark construction, risk adjustment methodology and alignment in quality measures. In addition, the CMS Innovation Center could offer new models or suspend present models that could have a material impact on the success of the Company’s ACO and Oak Street Health businesses. For example, the CMS Innovation Center could mandate or offer participation in certain models that require providers and/or risk-bearing entities to take risk for a geographic population of patients, or it could look to methodologies that infer risk, survey data and non-diagnosis-based data with potential impacts to the Company’s businesses. Uncertainties about how policymakers and CMS may re-evaluate how benchmarks are constructed in Medicare Advantage, including the future of VBC and mandatory participation, could create new considerations for the Company.

The Company has invested significant resources to comply with Medicare standards, and its Medicare compliance efforts will continue to require significant resources.

Going forward, the Company expects CMS, the OIG, the DOJ, other federal agencies and the U.S. Congress to continue to scrutinize closely each component of the Medicare program (including Medicare Advantage, PDPs, dual eligible plans, broker compensation and marketing, prior authorization, and provider network access and adequacy), modify the terms and requirements of the program and possibly seek to recast or limit private insurers’ roles. Any of the federal agencies noted above or U.S. Congress may also recommend changes or take additional action with respect to the way in which brokers and agents are compensated for selling our Medicare Advantage and Part D plans. For example, CMS finalized new requirements imposing limitations on the amounts and types of payments that brokers and agents can earn for marketing and enrollment services with respect to Medicare Advantage and Part D plans. The effectiveness of these requirements is currently subject to an injunction. If the injunction is lifted or CMS attempts to impose restrictions on broker and agent compensation in the future, the Company will be required to comply with the new restrictions.

In addition, the Inflation Reduction Act, enacted in August 2022 (the “IRA”) contains changes to the Part D program that took effect in 2023 and will continue to 2032 that has and will shift more of the claim liability to plans and away from the government, including a complete redesign of the Part D standard benefit effective in 2025, which may reduce the Company’s flexibility to design competitive offerings. Given the significant changes, CMS is conducting a voluntary demonstration to test whether additional premium stabilization and revised risk corridors for stand-alone PDPs increase the efficiency and economy of services for Medicare Part D members. The Company has opted to participate in the demonstration, which may be in effect for up to three years.

It is not possible to predict the outcome of such regulatory or Congressional activity, any of which could materially and adversely affect the Company.

Medicaid Regulation - The Company is seeking to grow its Medicaid, dual eligible and dual eligible special needs plan businesses over the next several years.

In addition to a quality rating system that applies to Medicaid and Managed Medicaid plans, federal regulations give states the option to choose to establish a minimum MLR of at least 85% for their Managed Medicaid plans, including those offered by the Company. Regardless of whether a state establishes a minimum MLR, it must use plan-reported MLR data to set future payment rates for managed care, so that its plans will “reasonably achieve” an MLR of at least 85%. Minimum MLR requirements and similar actions further limit the level of margin the Company can earn in its Insured Medicaid products while leaving the Company exposed to medical costs that are higher than those reflected in its pricing. The Company also may be subject to significant fines, penalties, premium refunds and litigation if it fails to comply with minimum MLR laws and regulations.

States may also establish their own standards and use discretion in choosing what determines compliance within Medicaid contracts, including, among other provisions, standards for determining provider network adequacy, staffing, service operations, utilization management, beneficiary care management, provider support, data maintenance and reporting and claims payment.

States continue to consider Medicaid expansion; however, ten states have not yet expanded and may not do so. States may opt out of the elements of the ACA requiring expansion of Medicaid coverage without losing their current federal Medicaid funding. In addition, the election of new Governors and/or state legislatures may impact states’ previous decisions regarding Medicaid expansion. Although Congress enacted incentives for states that had not yet done so to expand Medicaid, this incentive alone has not persuaded holdout states to expand.

The economic aspects of the Medicaid, dual eligible and dual eligible special needs plan business vary from state to state and are subject to frequent change. Medicaid premiums are paid by each state and differ from state to state. The federal government and certain states also are considering proposals and legislation for Medicaid and dual eligible program reforms or redesigns, including restrictions on the collection of manufacturer’s rebates on pharmaceuticals by Medicaid MCOs and their contracted PBMs, further program, population and/or geographic expansions of risk-based managed care, increasing beneficiary cost-sharing or payment levels, and changes to benefits, reimbursement, eligibility criteria (and redeterminations of eligibility), provider network adequacy requirements (including requiring the inclusion of specified high cost providers in the Company’s networks) and program structure. In some states, current Medicaid and dual eligible funding and premium revenue may not be adequate for the Company to continue program participation. The Company’s Medicaid and dual eligible contracts with states (or sponsors of Medicaid managed care plans) are subject to cancellation by the state (or the sponsors of the managed care plans) after a short notice period without cause (e.g., when a state discontinues a managed care program) or in the event of insufficient state funding.

The Company’s Medicaid, dual eligible and dual eligible special needs plan products also are heavily regulated by CMS and state Medicaid agencies, which have the right to audit the Company’s performance to determine compliance with CMS contracts and regulations. The Company’s Medicaid products, dual eligible products and CHIP contracts also are subject to complex federal and state regulations and oversight by state Medicaid agencies regarding the services provided to Medicaid enrollees, payment for those services, network requirements (including mandatory inclusion of specified high-cost providers), and other aspects of these programs, and by external review organizations which audit Medicaid plans on behalf of state Medicaid agencies. The laws, regulations and contractual requirements applicable to the Company and other participants in Medicaid and dual eligible programs, including requirements that the Company submit encounter data to the applicable state agency, are extensive, complex and subject to change. For example, in April 2024, CMS finalized the Managed Care Rule, which addresses five primary areas: (1) access in managed care, including network adequacy; (2) state directed payments; (3) medical loss ratio standards; (4) in lieu of services and settings and (5) quality and performance assessment. The Company has invested significant resources to comply with these standards, and its Medicaid and dual eligible program compliance efforts will continue to require significant resources. CMS and/or state Medicaid agencies may fine the Company, withhold payments to the Company, seek premium and other refunds, terminate the Company’s existing contracts, elect not to award the Company new contracts or not to renew the Company’s existing contracts, prohibit the Company from continuing to market and/or enroll members in or refuse to automatically assign members to one or more of the Company’s Medicaid or dual eligible products, exclude the Company from participating in one or more Medicaid or dual eligible programs and/or institute other sanctions and/or civil monetary penalties against the Company if it fails to comply with CMS or state regulations or contractual requirements. CMS has proposed requiring that health plans offering certain dual eligible programs must also offer Medicaid programs, which has resulted in the Company refraining from bidding in certain jurisdictions and could impact the Company’s ability to obtain or retain membership in its dual eligible programs.

The Company cannot predict whether pending or future federal or state legislation or court proceedings will change various aspects of the Medicaid program, nor can it predict the impact those changes will have on its business operations or operating results, but the effects could be materially adverse.

Medicare and Medicaid Audits - CMS regularly audits the Company’s performance to determine its compliance with CMS’ regulations and its contracts with CMS and to assess the quality of services it provides to Medicare Advantage and PDP beneficiaries. For example, CMS conducts risk adjustment data validation (“RADV”) audits of a subset of Medicare Advantage contracts for each contract year. Since 2011, CMS has selected certain of the Company’s Medicare Advantage contracts for various years for RADV audit, and the number of RADV audits continues to increase. The OIG also is auditing the Company’s risk adjustment data and that of other companies, and the Company expects CMS and the OIG to continue auditing risk adjustment data.

On January 30, 2023, CMS released the final rule concerning Part C contract-level Risk Adjustment Data Validation Audits (the “RADV Audit Rule”). The RADV Audit Rule eliminated the application of a fee-for-service adjuster (“FFS Adjuster”) in contract-level RADV audits but continued the use of extrapolation in such audits of Medicare Advantage organizations. The FFS Adjuster that was announced in 2012 was to be used by CMS to determine a permissible level of payment error. By applying the FFS Adjuster, Medicare Advantage organizations would have been liable for repayments only to the extent that their extrapolated payment errors exceeded the error rate in Original Medicare, which could have impacted the extrapolated repayments to which Medicare Advantage organizations are subject. CMS is conducting RADV audits of Medicare Advantage organizations, including the Company’s Medicare Advantage plans, for payment year 2018 and subsequent payment years and may use extrapolation without the application of a FFS Adjuster. The RADV Audit Rule may have potential adverse effects, which could be material, on the Company’s operating results, financial condition, and cash flows. CMS also has announced that it will not conduct RADV audits on all contracts; instead, it will only audit contracts it believes are at the highest risk for overpayments based on its statistical modeling. The RADV Audit Rule is subject to ongoing litigation and the outcome and future impacts are uncertain.

In addition, state Medicaid agencies regularly audit, and state Attorneys General regularly investigate, the Company’s performance across all areas of its contractual obligations to the state to determine compliance and quality of services. The Company may be subject to, among other penalties, significant fines, sanctions, corrective actions, and enrollment freezes depending on the findings of these audits and reviews. The Company’s ongoing performance and compliance with program requirements can impact our ability to expand and retain Medicaid business. State Medicaid agencies are also increasingly using the audit process to challenge the legality of PBM practices, such as guaranteed effective rate reconciliations with retail pharmacies and transmission fees.

Medicare Star Ratings - A portion of each Medicare Advantage plan’s reimbursement is tied to the plan’s “star ratings.” The star rating system considers a variety of measures adopted by CMS, including quality of preventative services, chronic illness management, compliance and overall customer satisfaction. Only Medicare Advantage plans with an overall star rating of 4 or more stars (out of 5 stars) are eligible for a quality bonus in their basic premium rates. The Company’s 2024 star ratings were used to determine which of its Medicare Advantage plans have ratings of 4 stars or higher and qualify for bonus payments in 2025. Based on the 2024 ratings, 88% of the Company’s Medicare Advantage members are in 2025 Medicare Advantage plans that are rated 4 stars or higher. Additionally, more than two out of three of the Company’s Medicare Advantage members are in a 4.5-star plan for 2025. CMS also gives PDPs star ratings that affect each PDP’s enrollment. The Company’s PDP plans were rated 3.5 stars for 2025. Medicare Advantage and PDP plans that are rated less than 3 stars for three consecutive years are subject to contract termination by CMS. CMS continues to revise its star ratings system to make it harder to achieve 4 or more stars. There can be no assurances that the Company will be successful in maintaining or improving its star ratings in future years. Accordingly, the Company’s Medicare Advantage plans may not continue to be or become eligible for full level quality bonuses, which could adversely affect the benefits such plans can offer, reduce membership and/or reduce profit margins.

Medicare Payment Rates - In April 2024, CMS issued its final notice detailing final 2025 Medicare Advantage payment rates. Based on CMS’ notice, Medicare Advantage rates resulted in an expected average increase in revenue for the Medicare Advantage industry of 3.70%, which includes a risk score trend increase of 3.86%. Risk scores vary among Medicare Advantage plans depending on the specific population served, so this increase does not represent an actual guaranteed payment increase. Without including the risk score trend increase, the 2025 rates result in an expected average decrease in revenue for the Medicare Advantage industry of 0.16%, though the rates may vary widely depending on the provider group and patient demographics. On January 10, 2025, CMS issued an advance notice detailing proposed 2026 Medicare Advantage payment rates. Without including the risk score trend increase, the advance 2026 rates will result in an expected average increase in revenue for the Medicare Advantage industry of 2.23%, though the rates may vary widely depending on the provider group and patient demographics. CMS intends to publish the final 2026 rate announcement no later than April 7, 2025.

The Company faces a challenge from the impact of the increasing cost of medical care (including prescription medications), changes to methodologies for determining payments and CMS local and national coverage decisions that require the Company to pay for services and supplies that are not factored into the Company’s bids. The federal government may seek to impose restrictions on the configuration of pharmacy or other provider networks for Medicare Advantage and/or PDP plans, or otherwise restrict the ability of these plans to alter benefits, negotiate prices or establish other terms to improve affordability or maintain viability of products. The Company currently believes that the payments it has received and will receive in the near term are adequate to justify the Company’s continued participation in the Medicare Advantage and PDP programs, although there are economic and political pressures to continue to reduce spending on the program, and this outlook could change.

340B Drug Pricing Program – The 340B Drug Pricing Program, which is overseen by the HHS and the Health Resources and Services Administration (“HRSA”), allows eligible Covered Entities to purchase prescription drugs from manufacturers at a steep discount. In 2020, a number of pharmaceutical manufacturers began programs that limited Covered Entities’ participation in the program through contract pharmacies arrangements. In May 2021, HRSA sent enforcement letters to multiple manufacturers to curb these practices. In September 2021, HRSA forwarded the enforcement actions to the OIG for potential imposition of civil monetary penalties. Those enforcement actions are currently subject to ongoing litigation.

The revisions are designed to make the process more accessible by making it more expeditious and less formal, as well as more equitable by requiring fewer resources to participate. A reduction in Covered Entities’ participation in contract pharmacy arrangements, as a result of the pending enforcement actions or otherwise, a reduction in the use of the Company’s administrative services by Covered Entities, or a reduction in drug manufacturers’ participation in the program could materially and adversely affect the Company.

Anti-Remuneration Laws - Federal law prohibits, among other things, an entity from knowingly and willfully offering, paying, soliciting or receiving, subject to certain exceptions and “safe harbors,” any remuneration to induce the referral of individuals or the purchase, lease or order of items or services for which payment may be made under Medicare, Medicaid or certain other federal and state health care programs. A number of states have similar laws, some of which are not limited to services paid for with government funds. Sanctions for violating these federal and state anti-remuneration laws may include

imprisonment, criminal and civil fines, and exclusion from participation in Medicare, Medicaid and other federal and state government-sponsored health care programs. Companies involved in public health care programs such as Medicare and/or Medicaid are required to maintain compliance programs to detect and deter fraud, waste and abuse, and are often the subject of fraud, waste and abuse investigations and audits. The Company has invested significant resources to comply with Medicare and Medicaid program standards. Ongoing vigorous law enforcement and the highly technical regulatory scheme mean that the Company’s compliance efforts in this area will continue to require significant resources.

Antitrust and Unfair Competition - The U.S. Federal Trade Commission (“FTC”) investigates and prosecutes practices that are “unfair trade practices” or “unfair methods of competition.” Numerous lawsuits have been filed throughout the U.S against pharmaceutical manufacturers, retail pharmacies and/or PBMs under various federal and state antitrust and unfair competition laws challenging, among other things: (i) brand name drug pricing and rebate practices of pharmaceutical manufacturers, (ii) the maintenance of retail or specialty pharmacy networks by PBMs, and (iii) various other business practices of PBMs and retail pharmacies. In July 2021, the FTC approved several resolutions that direct agency staff to use compulsory process, such as subpoenas, to investigate seven specific enforcement priorities. Priority targets include, among other businesses, health care businesses, such as pharmaceutical companies, pharmacy benefits managers and hospitals.

Privacy and Confidentiality Requirements - Many of the Company’s activities involve the receipt, use and disclosure by the Company of personally identifiable information (“PII”) as permitted in accordance with applicable federal and state privacy and data security laws, which require organizations to provide appropriate privacy and security safeguards for such information. In addition to PII, the Company uses and discloses de-identified data for analytical and other purposes when permitted. Additionally, there are industry standards for handling credit card data known as the Payment Card Industry Data Security Standard, which are a set of requirements designed to help ensure that entities that process, store or transmit credit card information maintain a secure environment. Certain states have incorporated these requirements into state laws or enacted other requirements relating to the use and/or disclosure of PII.

In 2024, HIPAA was further amended to add additional rules requiring the safeguarding of reproductive health records. The Company is taking appropriate measures to ensure it is in compliance with the obligations created by this new rule.

In addition to HIPAA, state laws apply to the extent they are more protective of individual privacy than is HIPAA, including laws that place stricter controls on the release of information relating to specific diseases or conditions, reproductive health records and requirements to notify members of unauthorized release or use of or access to PHI. States also have adopted regulations to implement provisions of the Financial Modernization Act of 1999 (also known as the Gramm-Leach-Bliley Act (“GLBA”)) which generally require insurers, including health insurers, to provide customers with notice regarding how their non-public personal health and financial information is used and the opportunity to “opt out” of certain disclosures before the insurer shares such information with a non-affiliated third party. Like HIPAA, GLBA sets a “floor” standard, allowing states to adopt more stringent requirements governing privacy protection. Complying with additional state requirements requires us to make additional investments beyond those the Company has made to comply with HIPAA and GLBA.

Complying with conflicting cybersecurity regulations, which may differ from state to state, requires significant resources. Widely-reported large scale cyberattacks in the U.S. and abroad increase the likelihood that additional data security legislation will be considered by additional states or by the federal government. These legislative and regulatory developments will impact the design and operation of the Company’s businesses, its privacy and security strategy and its web-based and mobile assets.

Finally, each Public Exchange is required to adhere to privacy and security standards with respect to PII, and to impose privacy and security standards that are at least as protective of PII as those the Public Exchange has implemented for itself or non-Public Exchange entities, which include insurers offering plans through the Public Exchange and their designated downstream entities, including PBMs and other business associates. These standards may differ from, and be more stringent than, HIPAA.

See Item 1C of this 10-K, “Cybersecurity,” for more information on the Company’s cybersecurity risk management and governance.

Consumer Protection Laws - The federal government has many consumer protection laws, such as the Federal Trade Commission Act, the Federal Postal Service Act and the Consumer Product Safety Act. Most states also have similar consumer protection laws and a growing number of states regulate subscription programs. In addition, the federal government and most states have adopted laws and/or regulations requiring places of public accommodation, health care services and other goods and services to be accessible to people with disabilities. These consumer protection and accessibility laws and regulations have been the basis for investigations, lawsuits and multistate settlements relating to, among other matters, the marketing of loyalty programs, and health care products and services, pricing accuracy, expired front store products, financial incentives provided by drug manufacturers to pharmacies in connection with therapeutic interchange programs, disclosures related to how personal data is used and protected and the accessibility of goods and services to people with disabilities. As a result of the Company’s direct-to-consumer activities, including mobile and web-based solutions offered to members and to other consumers, the Company also is subject to federal and state regulations applicable to electronic communications and to other general consumer protection laws and regulations. For example, the CCPA became effective in 2020, and additional federal and state regulation of consumer privacy protection may be proposed or enacted in the future. The Company expects these new laws and regulations to impact the design of its products and services and the management and operation of its businesses and to increase its compliance costs.

Transparency in Coverage Rule - In October 2020, the HHS, the U.S. Department of Labor (“DOL”) and the U.S. Internal Revenue Service (“IRS,” and together with the HHS and DOL, the “Tri-Departments”) released a final rule, referred to as the Transparency in Coverage Rule, requiring health insurers to disclose negotiated prices of drugs, medical services, supplies and other covered items. The rule requires group health plans and health insurance issuers in the individual and group markets to disclose cost-sharing information upon request, to a participant, beneficiary, or enrollee and require plans and issuers to publicly disclose in-network provider rates, historical out-of-network allowed amounts and the associated billed charges, and negotiated rates and historical net prices for prescription drugs. Insurers are required to implement a consumer tool and disclose data in a machine readable file. The Transparency in Coverage Rule’s requirements related to prescription drug prices have yet to be implemented, but once implemented, the public disclosure of insurer- or PBM-negotiated price concessions may result in drug manufacturers lowering discounts or rebates, resulting in higher drug costs for patients and impacting the ability of the Company to negotiate drug prices and provide competitive products and services to consumers. In addition, most group health plans and issuers of group or individual health insurance coverage are required to offer an online price comparison tool allowing for personalized pricing information to their participants, beneficiaries, and enrollees, including access by phone, or in paper form, upon request. Cost estimates must be provided in real-time based on cost-sharing information that is accurate at the time of the request.

Telemarketing and Other Outbound Contacts - Certain federal and state laws, such as the Telephone Consumer Protection Act and the Telemarketing Sales Rule, give the FTC, the Federal Communications Commission and state Attorneys General the ability to regulate, and bring enforcement actions relating to, telemarketing practices and certain automated outbound contacts such as phone calls, texts or emails. Under certain circumstances, these laws provide consumers with a private right of action. Violations of these laws could result in substantial statutory penalties and other sanctions.

Pharmacy and Professional Licensure and Regulation - The Company is subject to a variety of intersecting federal and state statutes and regulations that govern the wholesale distribution of drugs; operation of retail, specialty, infusion, LTC and mail order pharmacies; licensure of facilities and professionals, including pharmacists, technicians, nurses and other health care professionals; registration of facilities with the U.S. Drug Enforcement Administration (the “DEA”) and analogous state agencies that regulate controlled substances; packaging, storing, shipping and tracking of pharmaceuticals; repackaging of drug products; labeling, medication guides and other consumer disclosures; interactions with prescribers and health care professionals; compounding of prescription medications; dispensing of controlled and non-controlled substances; counseling of

patients; transfers of prescriptions; advertisement of prescription products and pharmacy services; security; inventory control; recordkeeping; reporting to Boards of Pharmacy, the U.S. Food and Drug Administration (the “FDA”), the U.S. Consumer Product Safety Commission, the DEA and related state agencies; and other elements of pharmacy practice. Pharmacies are highly regulated and have contact with a wide variety of federal, state and local agencies with various powers to investigate, inspect, audit or solicit information, including Boards of Pharmacy and Nursing, the DEA, the FDA, the DOJ, HHS and others. Many of these agencies have broad enforcement powers, conduct audits on a regular basis, can impose substantial fines and penalties, and may revoke the license, registration or program enrollment of a facility or professional.

Telehealth Laws - States generally require providers providing professional health care services, whether in person or via telehealth, to a patient residing within the state to be licensed in that state. States have established a variety of licensing and other regulatory requirements around the provision of telehealth services. These requirements vary from state to state. Many states require notification of certain material events be provided to the applicable licensing agency. In addition, there are federal telehealth requirements applicable to Medicare and state program specific requirements applicable to Medicaid. The Company has established systems for ensuring that its providers are appropriately licensed under applicable state law and that their provision of telehealth service to patients with whom we interact occurs in compliance with applicable laws and regulations. Failure to comply with these laws and regulations could result in licensure actions against the providers as well as civil, criminal or administrative penalties against the providers and/or entities engaging the services of the providers.

State Insurance, HMO and Insurance Holding Company Regulation - A number of states regulate affiliated groups of insurers and HMOs such as the Company under holding company statutes. These laws may, among other things, require prior regulatory approval of dividends and material intercompany transfers of assets and transactions between the regulated companies and their affiliates, including their parent holding companies. The Company expects the states in which its insurance and HMO subsidiaries are licensed to continue to expand their regulation of the corporate governance and internal control activities of its insurance companies and HMOs. Changes to state insurance, HMO and/or insurance holding company laws or regulations or changes to the interpretation of those laws or regulations, including due to regulators’ increasing concerns regarding insurance company and/or HMO solvency due, among other things, to past and expected payor insolvencies, could negatively affect the Company’s businesses in various ways, including through increases in solvency fund assessments, requirements that the Company hold greater levels of capital and/or delays in approving dividends from regulated subsidiaries.

PBM offerings of prescription drug coverage under certain risk arrangements may be subject to laws and regulations in various states. Such laws may require that the party at risk become licensed as an insurer, establish reserves or otherwise demonstrate financial viability. Laws that may apply in such cases include insurance laws and laws governing MCOs and limited prepaid health service plans. PBM licensure laws may include oversight of certain PBM activities and operations and may include auditing of those activities.

The states of domicile of the Company’s regulated subsidiaries have statutory risk-based capital (“RBC”) requirements for health and other insurance companies and HMOs based on the National Association of Insurance Commissioners’ (the “NAIC”) Risk-Based Capital for Insurers Model Act (the “RBC Model Act”). These RBC requirements are intended to assess the capital adequacy of life and health insurers and HMOs, taking into account the risk characteristics of a company’s investments and products. The RBC Model Act sets forth the formula for calculating RBC requirements, which are designed to take into account asset risks, insurance risks, interest rate risks and other relevant risks with respect to an individual company’s business. In general, under these laws, an insurance company or HMO must submit a report of its RBC level to the insurance department or insurance commissioner of its state of domicile for each calendar year.

For information regarding restrictions on certain payments of dividends or other distributions by the Company’s HMO and insurance company subsidiaries, see Note 14 ‘‘Shareholders’ Equity’’ included in Item 8 of this 10-K.

The holding company laws for the states of domicile of certain of the Company’s subsidiaries also restrict the ability of any person to obtain control of an insurance company or HMO without prior regulatory approval. Under those statutes, without such approval (or an exemption), no person may acquire any voting security of an insurance holding company (such as the Company’s ultimate parent company, CVS Health Corporation) that controls an insurance company or HMO, or merge with such a holding company, if as a result of such transaction such person would control the insurance holding company. Control is generally defined as the direct or indirect power to direct or cause the direction of the management and policies of a person and is presumed to exist if a person directly or indirectly owns or controls 10% or more of the voting securities of another person.

Certain states have laws that prohibit submitting a false claim or making a false record or statement in order to secure reimbursement from an insurance company. These state laws vary, and violation of them may lead to the imposition of civil or criminal penalties.

Government Agreements and Mandates - From time to time, the Company and/or its various affiliates are subject to certain consent decrees, settlement and other agreements, corrective action plans and corporate integrity agreements with various federal, state and local authorities relating to such matters as privacy practices, controlled substances, PDPs, expired products, environmental and safety matters, marketing and advertising practices, PBM, LTC and other pharmacy operations and various other business practices. Certain of these agreements contain ongoing reporting, monitoring and/or other compliance requirements for the Company. Failure to meet the Company’s obligations under these agreements could result in civil or criminal remedies, financial penalties, administrative remedies, and/or exclusion from participation in federal health care programs.

Environmental and Safety Regulation - The Company’s businesses are subject to various federal, state and local laws, regulations and other requirements pertaining to protection of the environment, public health and employee safety, including, for example, regulations governing the management of hazardous substances, the cleaning up of contaminated sites, and the maintenance of safe working conditions in the Company’s retail locations, distribution centers and other facilities. Governmental agencies at the federal, state and local levels continue to focus on the retail and health care sectors’ compliance with such laws and regulations, and have at times pursued enforcement activities. Any failure to comply with these regulations could result in fines or other sanctions by government authorities.

ERISA Regulation - The Employee Retirement Income Security Act of 1974 (“ERISA”), provides for comprehensive federal regulation of certain employee pension and benefit plans, including private employer and union sponsored health plans and certain other plans that contract with us to provide PBM services. In general, the Company assists plan sponsors in the administration of their health benefit plans, including the prescription drug benefit portion of those plans, in accordance with the plan designs adopted by the plan sponsors. In addition, the Company may have fiduciary duties where it has specifically contracted with a plan sponsor to accept limited fiduciary responsibility, such as for the adjudication of initial prescription drug benefit claims and/or the appeals of denied claims under a plan. In addition to its fiduciary provisions, ERISA imposes civil and criminal liability on service providers to health plans and certain other persons if certain forms of illegal remuneration are made or received. These provisions of ERISA are broadly written and their application to specific business practices is often uncertain.

Some of the Company’s health and related benefits and large case pensions products and services and related fees also are subject to potential issues raised by judicial interpretations relating to ERISA. Under those interpretations, together with DOL regulations, the Company may have ERISA fiduciary duties with respect to medical members, PBM members and/or certain general account assets held under contracts that are not guaranteed benefit policies. As a result, certain transactions related to those general account assets are subject to conflict of interest and other restrictions, and the Company must provide certain disclosures to policyholders annually. The Company must comply with these restrictions or face substantial penalties.

Preemption - ERISA generally preempts most state and local laws that relate to employee benefit plans, but the extent of the preemption continues to be reviewed by courts, including the U.S. Supreme Court. For example, in December 2020, the U.S. Supreme Court upheld an Arkansas law that, among other things, mandates a particular pricing methodology, establishes an appeals process for a pharmacy when the reimbursement is below the pharmacy’s acquisition cost, permits a pharmacy to reverse and rebill if they cannot procure the drug from its wholesaler at a price equal to or less than the reimbursement rate, prohibits a PBM from reimbursing a pharmacy less than the amount it reimburses an affiliate on a per unit basis, and permits a pharmacy to decline to dispense if the reimbursement is lower than the pharmacy’s acquisition cost. Subsequently, in November 2021, the U.S. Court of Appeals for the Eighth Circuit upheld a North Dakota law that regulates employer-sponsored ERISA health plans and certain PBM practices within Medicare. The U.S. Court of Appeals for the Tenth Circuit overturned a lower district court in Oklahoma and affirmed that the Oklahoma Insurance Department could not enforce a state law against PBMs that contained provisions that alter and limit some of the options that an ERISA plan can use and decided that the Oklahoma law was preempted by ERISA and, in part, by Medicare Part D. The Oklahoma Attorney General has filed a writ of certiorari with the U.S. Supreme Court to have the case heard during the next term.

Other Legislative Initiatives and Regulatory Initiatives - The U.S. federal and state governments, as well as governments in other countries where the Company does business, continue to enact and seriously consider many broad-based legislative and regulatory proposals that have had a material impact on or could materially impact various aspects of the health care and related benefits system and the Company’s businesses, operating results and/or cash flows. For example:

•Under the Budget Control Act of 2011 and the American Taxpayer Relief Act of 2012 significant, automatic across-the-board budget cuts (known as sequestration) began in March 2013, including Medicare spending cuts of not more than 2% of total program costs per year through 2024. Since then, Congress has extended and modified the Medicare sequester a number of times. The CARES Act temporarily suspended the Medicare sequester and extended mandatory sequestration to 2030. In July 2022, the 2% Medicare sequester resumed. Significant uncertainty remains as to whether and how the U.S. Congress will proceed with actions that create additional federal revenue and/or with entitlement reform. The Company cannot predict future federal Medicare or federal or state Medicaid funding levels or the impact that future federal or state budget actions or entitlement program reform, if it occurs, will have on the Company’s businesses, operations or operating results, but the effects could be materially adverse, particularly on the Company’s Medicare and/or Medicaid revenues, MBRs and operating results.

•The European Union’s (“EU’s”) General Data Protection Regulation (“GDPR”) began to apply across the EU during 2018.

•Other significant legislative and/or regulatory measures which are or recently have been under consideration include the following:

•Increasing the corporate tax rate.

•Eliminating payment of manufacturer’s rebates on prescription drugs to PBMs, PDPs and Managed Medicaid organizations in connection with federally funded health care programs.

•Imposing requirements and restrictions on the design and/or administration of pharmacy benefit plans offered by the Company’s and its clients’ health plans and/or its PBM clients and/or the services the Company provides to those clients, including prohibiting “differential” or “spread” pricing in PBM contracts; restricting or eliminating the use of formularies for prescription drugs; restricting the Company’s ability to require members to obtain drugs through a home delivery or specialty pharmacy; restricting the Company’s ability to place certain specialty or other drugs in the higher cost tiers of its pharmacy formularies; restricting the Company’s ability to make changes to drug formularies and/or clinical programs; limiting or eliminating rebates on pharmaceuticals; requiring the use of up front purchase price discounts on pharmaceuticals in lieu of rebates; restricting the Company’s ability to configure and reimburse its health plan and retail pharmacy provider networks, including use of CVS pharmacy locations; and mandating client use of PBM compensation structures based on flat, fee-for-service or "bona fide service fee" arrangements instead of value-based designs or eliminating the use of certain drug pricing methodologies.

•Broader application of state insurance- and PBM-related laws to national and multi-state plans that cover residents of that state.

•Increasing federal or state government regulation of, or involvement in, the pricing and/or purchasing of drugs, including Glucagon-like peptide 1 (“GLP-1”) drugs.

•Restricting the Company’s ability to limit providers’ participation in its networks and/or remove providers from its networks by imposing network adequacy requirements or otherwise (including in its Medicare and Commercial Health Care Benefits products).

•Imposing assessments on (or to be collected by) health plans or health carriers that may or may not be passed through to their customers. These assessments may include assessments for insolvency, the uninsured, uncompensated care, Medicaid funding or defraying health care provider medical malpractice insurance costs.

•Mandating coverage by the Company’s and its clients’ health plans for additional conditions and/or specified procedures, drugs or devices (e.g., high cost pharmaceuticals, experimental pharmaceuticals and oral chemotherapy regimens).

•Regulating electronic connectivity.

•Mandating or regulating the disclosure of provider fee schedules, manufacturer’s rebates and other data about the Company’s payments to providers and/or payments the Company receives from pharmaceutical manufacturers.

•Mandating or regulating disclosure of provider outcome and/or efficiency information.

•Prescribing or limiting members’ financial responsibility for health care or other covered services they utilize, including restricting “surprise” bills by providers and by specifying procedures for resolving “surprise” bills.

•Prescribing payment levels for health care and other covered services rendered to the Company’s members by providers who do not have contracts with the Company.

•Assessing the medical device status of home infusion therapy products and/or solutions, mobile consumer wellness tools and clinical decision support tools, which may require compliance with FDA requirements in relation to some of these products, solutions and/or tools.

•Restricting the ability of employers and/or health plans to establish or impose member financial responsibility.

•Proposals to expand benefits under Original Medicare.

•Amending or supplementing ERISA to impose greater requirements on PBMs or the administration of employer-funded benefit plans or limit the scope of current ERISA pre-emption, which would among other things expose the Company and other health plans to expanded liability for punitive and other extra-contractual damages and additional state regulation.

•Amending the Mental Health Parity and Addiction Equity Act to add additional provisions that could significantly increase compliance requirements.

•Eliminating enhanced premium tax credits, which could impact consumers ability to choose individual coverage on the Exchange.

It is uncertain whether the Company can counter the potential adverse effects of such potential legislation or regulation on its operating results or cash flows, including whether it can recoup, through higher premium rates, expanded membership or other measures, the increased costs of mandated coverage or benefits, assessments, fees, taxes or other increased costs, including the cost of modifying its systems to implement any enacted legislation or regulations.

The Company’s businesses also may be affected by other legislation and regulations. The Dodd-Frank Wall Street Reform and Consumer Protection Act creates incentives for whistleblowers to speak directly to the government rather than utilizing internal compliance programs and reduces the burden of proof under the Foreign Corrupt Practices Act of 1977 (the “FCPA”). There also are laws and regulations that set standards for the escheatment of funds to states.

Health savings accounts, health reimbursement arrangements and flexible spending accounts and certain of the tax, fee and subsidy provisions of the ACA also are regulated by the U.S. Department of the Treasury and the IRS.

The Company also may be adversely affected by court and regulatory decisions that expand or revise the interpretations of existing statutes and regulations or impose medical malpractice or bad faith liability. Federal and state courts, including the U.S. Supreme Court, continue to consider cases, and federal and state regulators continue to issue regulations and interpretations, addressing bad faith liability for denial of medical claims, the scope of ERISA’s fiduciary duty requirements, the scope of the False Claims Act and the pre-emptive effect of ERISA and Medicare Part D on state laws.

Contract Audits - The Company is subject to audits of many of its contracts, including its PBM client contracts, its PBM rebate contracts, its PBM network contracts, its contracts relating to Medicare Advantage and/or Medicare Part D, the agreements the Company’s pharmacies enter into with other payors, its Medicaid contracts and its customer contracts. Because some of the Company’s contracts are with state or federal governments or with entities contracted with state or federal agencies, audits of these contracts are often regulated by the federal or state agencies responsible for administering federal or state benefits programs, including those which operate Medicaid fee for service plans, Managed Medicaid plans, Medicare Part D plans or Medicare Advantage organizations.

Federal Employee Health Benefits Program - The Company’s subsidiaries contract with the Office of Personnel Management (the “OPM”) to provide managed health care services under the FEHB program in their service areas. These contracts with the OPM and applicable government regulations establish premium rating arrangements for this program. In addition to other requirements, such as the Transparency in Coverage Rule note above, OPM regulations require that community-rated FEHB plans meet a FEHB program-specific minimum MLR by plan code and market. Managing to these rules is complicated by the simultaneous application of the minimum MLR standards and associated premium rebate requirements of the ACA. The Company also has a contractual arrangement with carriers for the FEHB program, such as the BlueCross BlueShield Association, to provide pharmacy services to federal employees, postal workers, annuitants, and their dependents under the Government-wide Service Benefit Plan, as authorized by the FEHB Act and as part of the FEHB program. Additionally, the Company manages certain FEHB plans on a “cost-plus” basis. These arrangements subject the Company to certain aspects of the FEHB Act, and other federal regulations, such as the FEHB Acquisition Regulation, that otherwise would not be applicable to the Company. The OPM also is auditing the Company and its other contractors to, among other things, verify that plans meet their applicable FEHB program-specific MLR and the premiums established under the OPM’s Insured contracts and costs allocated pursuant to the OPM’s cost-based contracts are in compliance with the requirements of the applicable FEHB program. The OPM may seek premium refunds or institute other sanctions against the Company if it fails to comply with the FEHB program requirements.

Clinical Services Regulation - The Company provides clinical services to health plans, PBMs and providers for a variety of complex and common medical conditions, including arranging for certain members to participate in disease management programs. State laws regulate the practice of medicine, the practice of pharmacy, the practice of nursing and certain other

clinical activities. Clinicians engaged in a professional practice in connection with the provision of clinical services must satisfy applicable state licensing requirements and must act within their scope of practice.

Third Party Administration and Other State Licensure Laws - Many states have licensure or registration laws governing certain types of administrative organizations, such as PPOs, TPAs and companies that provide utilization review services. Several states also have licensure or registration laws governing the organizations that provide or administer consumer card programs (also known as cash card or discount card programs).

International Regulation - The Company previously held insurance licenses in several foreign jurisdictions (the United Kingdom, Ireland, Singapore and Hong Kong) but these have been cancelled following the transfer of its insurance business in those jurisdictions to a third party. The Company is also in the process of closing down its remaining insurance operations outside of the Americas.

The Company’s international operations, including its remaining international insurance operations until they are closed down, are subject to different, and sometimes more stringent, legal and regulatory requirements, which vary widely by jurisdiction, including anti-corruption laws; economic sanctions laws; various privacy, insurance, tax, tariff and trade laws and regulations; corporate governance, privacy, data protection (including the EU’s General Data Protection Regulation which began to apply across the EU during 2018), data mining, data transfer, labor and employment, intellectual property, consumer protection and investment laws and regulations; discriminatory licensing procedures; compulsory cessions of reinsurance; required localization of records and funds; higher premium and income taxes; limitations on dividends and repatriation of capital; and requirements for local participation in an insurer’s ownership. In addition, the presence of operations in foreign countries potentially increases the Company’s exposure to the anti-bribery, anti-corruption and anti-money laundering provisions of U.S. law, including the FCPA, and corresponding foreign laws, including the U.K. Bribery Act 2010 (the “UK Bribery Act”).

Anti-Corruption Laws - The FCPA prohibits offering, promising or authorizing others to give anything of value to a foreign government official to obtain or retain business or otherwise secure a business advantage. The Company also is subject to applicable anti-corruption laws of the jurisdictions in which it operates. In many countries outside the U.S., health care professionals are employed by the government. Therefore, the Company’s dealings with them are subject to regulation under the FCPA. Violations of the FCPA and other anti-corruption laws may result in severe criminal and civil sanctions as well as other penalties, and there continues to be a heightened level of FCPA enforcement activity by the SEC and the DOJ. The UK Bribery Act is an anti-corruption law that is broader in scope than the FCPA and applies to all companies with a nexus to the United Kingdom. Disclosures of FCPA violations may be shared with the UK authorities, thus potentially exposing companies to liability and potential penalties in multiple jurisdictions.

Anti-Money Laundering Regulations - Certain lines of the Company’s businesses are subject to Treasury anti-money laundering regulations. Those lines of business have implemented anti-money laundering policies designed to ensure their compliance with the regulations. The Company also is subject to anti-money laundering laws in non-U.S. jurisdictions where it operates.

Office of Foreign Assets Control - The Company also is subject to regulation by the Office of Foreign Assets Control of the U.S. Department of Treasury (“OFAC”). OFAC administers and enforces economic and trade sanctions based on U.S. foreign policy and national security goals against targeted foreign countries and regimes, terrorists, international narcotics traffickers, those engaged in activities related to the proliferation of weapons of mass destruction, and other threats to the national security, foreign policy or economy of the U.S. In addition, the Company is subject to similar regulations in the non-U.S. jurisdictions in which it operates.

FDA Regulation - The FDA regulates the Company’s compounding pharmacy and clinical research operations. The FDA also generally has authority to, among other things, regulate the manufacture, distribution, sale and labeling of medical devices (including hemodialysis devices such as the device the Company is developing and mobile medical devices) and many products sold through retail pharmacies, including prescription drugs, over-the-counter medications, cosmetics, dietary supplements and certain food items. In addition, the FDA regulates the Company’s activities as a distributor of store brand products.

Laws and Regulations Related to the Health Care Benefits Segment

In addition to the laws and regulations discussed above that may affect multiple segments of the Company’s business, the Company is subject to federal, state, local and international statutes and regulations, as well as government program contracts, governing its Health Care Benefits segment specifically.

Overview - Differing approaches to state insurance regulation and varying enforcement philosophies may materially and adversely affect the Company’s ability to standardize its Health Care Benefits products and services across state lines. These laws and regulations, including the ACA, restrict how the Company conducts its business and result in additional burdens and costs to the Company. Significant areas of governmental regulation include premium rates and rating methodologies, underwriting rules and procedures, required benefits, sales and marketing activities, provider rates of payment, restrictions on health plans’ ability to limit providers’ participation in their networks and/or remove providers from their networks and financial condition (including reserves and minimum capital or risk based capital requirements). These laws and regulations are different in each jurisdiction and vary from product to product.

Each health insurer and HMO must file periodic financial and operating reports with the states in which it does business. In addition, health insurers and HMOs are subject to state examination and periodic license renewal. Applicable laws also restrict the ability of the Company’s regulated subsidiaries to pay dividends, and certain dividends require prior regulatory approval. In addition, some of the Company’s businesses and related activities may be subject to PPO, MCO, utilization review or TPA-related licensure requirements and regulations. These licensure requirements and regulations differ from state to state, but may contain provider network, contracting, product and rate, financial and reporting requirements. There also are laws and regulations that set specific standards for the Company’s delivery of services, payment of claims, fraud prevention, protection of consumer health information, and payment for covered benefits and services.

Required Regulatory Approvals - The Company must obtain and maintain regulatory approvals to price, market and administer many of its Health Care Benefits products. Supervisory agencies, including CMS, the Center for Consumer Information and Insurance Oversight and the DOL, as well as state health, insurance, managed care and Medicaid agencies, have broad authority to take one or more of the following actions:

•Grant, suspend and revoke the Company’s licenses to transact business;

•Suspend or exclude the Company from participation in government programs;

•Suspend or limit the Company’s authority to market products;

•Regulate many aspects of the products and services the Company offers, including the pricing and underwriting of many of its products and services;

•Assess damages, fines and/or penalties;

•Terminate the Company’s contract with the government agency and/or withhold payments from the government agency to the Company;

•Impose retroactive adjustments to premiums and require the Company to pay refunds to the government, customers and/or members;

•Restrict the Company’s ability to conduct acquisitions or dispositions;

•Require the Company to maintain minimum capital levels in its subsidiaries and monitor its solvency and reserve adequacy;

•Regulate the Company’s investment activities on the basis of quality, diversification and other quantitative criteria; and/or

•Exclude the Company’s plans from participating in Public Exchanges if they are deemed to have a history of “unreasonable” premium rate increases or fail to meet other criteria set by HHS or the applicable state.

The Company’s operations, current and past business practices, current and past contracts, and accounts and other books and records are subject to routine, regular and special investigations, audits, examinations and reviews by, and from time to time the Company receives subpoenas and other requests for information from, federal, state and international supervisory and enforcement agencies, Attorneys General and other state, federal and international governmental authorities and legislators.

Commercial Product Pricing and Underwriting Restrictions - Pricing and underwriting regulation by states limits the Company’s underwriting and rating practices and those of other health insurers, particularly for small employer groups, and varies by state. In general, these limitations apply to certain customer segments and limit the Company’s ability to set prices for new or renewing groups, or both, based on specific characteristics of the group or the group’s prior claim experience. In some

states, these laws and regulations restrict the Company’s ability to price for the risk it assumes and/or reflect reasonable costs in the Company’s pricing.

The ACA expanded the premium rate review process by, among other things, requiring the Company’s Commercial Insured rates to be reviewed for “reasonableness” at either the state or the federal level. HHS established a federal premium rate review process that generally applies to proposed premium rate increases equal to or exceeding a federally (or lower state) specified threshold. HHS’s rate review process imposes additional public disclosure requirements as well as additional review on filings requesting premium rate increases equal to or exceeding this “reasonableness” threshold. These combined state and federal review requirements may prevent, further delay or otherwise affect the Company’s ability to price for the risk it assumes, which could adversely affect its MBRs and operating results, particularly during periods of increased utilization of medical services and/or medical cost trend or when such utilization and/or trend exceeds the Company’s projections.

The ACA also specifies minimum MLRs of 85% for large group Commercial products and 80% for individual and small group Commercial products. Because the ACA minimum MLRs are structured as “floors” for many of their requirements, states have the latitude to enact more stringent rules governing these restrictions. For Commercial products, states have and may adopt higher minimum MLR requirements, use more stringent definitions of “medical loss ratio,” incorporate minimum MLR requirements into prospective premium rate filings, require prior approval of premium rates or impose other requirements related to minimum MLR. Minimum MLR requirements and similar actions further limit the level of margin the Company can earn in its Insured Commercial products while leaving the Company exposed to medical costs that are higher than those reflected in its pricing. The Company also may be subject to significant fines, penalties, premium refunds and litigation if it fails to comply with minimum MLR laws and regulations.

In addition, the Company requested increases in its premium rates in its Commercial Health Care Benefits business for 2025 and expects to request future increases in those rates in order to adequately price for projected medical cost trends, required expansions of coverage and rating limits, and significant assessments, fees and taxes imposed by the federal and state governments, including as a result of the ACA. The Company’s rates also must be adequate to reflect adverse selection in its products, particularly in small group Commercial products. These rate increases may be significant and thus heighten the risks of adverse publicity, adverse regulatory action and adverse selection and the likelihood that the Company’s requested premium rate increases will be denied, reduced or delayed, which could lead to operating margin compression.

Many of the laws and regulations governing the Company’s pricing and underwriting practices also limit the differentials in premium rates insurers and other carriers may charge between new and renewal business, and/or between groups based on differing characteristics. They may also require that carriers disclose to customers the basis on which the carrier establishes new business and renewal premium rates and limit the ability of a carrier to terminate customers’ coverage.

Federal and State Reporting - The Company is subject to extensive financial and business reporting requirements, including penalties for inaccuracies and/or omissions, at both the federal and state level. The Company’s ability to comply with certain of these requirements depends on receipt of information from third parties that may not be readily available or reliably provided in all instances. The Company is and will continue to be required to modify its information systems, dedicate significant resources and incur significant expenses to comply with these requirements. However, the Company cannot eliminate the risks of unavailability of or errors in its reports.

Product Design and Administration and Sales Practices - State and/or federal regulatory scrutiny of health care benefit product design and administration and marketing and advertising practices, including the filing of insurance policy forms, the adequacy of provider networks, the accuracy of provider directories, and the adequacy of disclosure regarding products and their administration, is increasing as are the penalties being imposed for inappropriate practices. Medicare, Medicaid and dual eligible products and products offering more limited benefits in particular continue to attract increased regulatory scrutiny.

Guaranty Fund Assessments/Solvency Protection - Under guaranty fund laws existing in all states, insurers doing business in those states can be assessed (in most states up to prescribed limits) for certain obligations of insolvent insurance companies to policyholders and claimants. The life and health insurance guaranty associations in which the Company participates that operate under these laws respond to insolvencies of long-term care insurers as well as health insurers. The Company’s assessments generally are based on a formula relating to the Company’s health care premiums in the state compared to the premiums of other insurers. Certain states allow assessments to be recovered over time as offsets to premium taxes. Some states have similar laws relating to HMOs and/or other payors such as not-for-profit consumer governed health plans established under the ACA. While historically the Company has ultimately recovered more than half of guaranty fund assessments through statutorily permitted premium tax offsets, significant increases in assessments could lead to legislative and/or regulatory actions that limit future offsets.

Laws and Regulations Related to the Health Services Segment

PBM Laws and Regulation - Legislation and/or regulations seeking to regulate PBM activities in a comprehensive manner have been proposed or enacted in a majority of states. This legislation could adversely affect the Company’s ability to conduct business on commercially reasonable terms in states where the legislation is in effect and the Company’s ability to standardize its PBM products and services across state lines. Similarly, credentialing organizations such as URAC have established voluntary standards regarding PBM, mail order pharmacy and/or specialty pharmacy activities. While the actions of these quasi-regulatory or standard-setting organizations do not have the force of law, they may influence states to adopt their requirements or recommendations and influence client requirements for PBM, mail order pharmacy and/or specialty pharmacy services. Moreover, any standards established by these organizations could also impact the Company’s health plan clients and/or the services provided to those clients and/or the Company’s health plans.

The Company’s PBM activities also are regulated directly and indirectly at the federal and state levels, including being subject to the False Claims Act and state false claims acts and the AKS and state anti-kickback laws. These laws and regulations govern, and proposed legislation and regulations may govern and/or further restrict, critical PBM practices, including disclosure, receipt and retention of rebates and other payments received from pharmaceutical manufacturers; use of, administration of and/or changes to drug formularies, maximum allowable cost (“MAC”) list pricing, average wholesale prices (“AWP”) and/or clinical programs; the offering to plan sponsors of pricing that includes retail network “differential” or “spread” (i.e., a difference between the drug price charged to the plan sponsor by a PBM and the price paid by the PBM to the dispensing provider); reconciliation to pricing guarantees; disclosure of data to third parties; drug UM practices; the level of duty a PBM owes its customers; configuration of pharmacy networks; the operations of the Company’s pharmacies (including audits of its pharmacies); disclosure of negotiated provider reimbursement rates; disclosure of fees associated with administrative service agreements and patient care programs that are attributable to members’ drug utilization; and registration or licensing of PBMs. Failure by the Company or one of its PBM services suppliers to comply with these laws or regulations could result in material fines and/or sanctions and could have a material adverse effect on the Company’s operating results and/or cash flows.

The Company’s PBM service contracts, including those in which the Company assumes certain risks under performance guarantees or similar arrangements, are generally not subject to insurance regulation by the states. In addition, rulemaking in a number of states expands the underlying statutory law particularly with respect to the scope of application to pharmacy appeals and reimbursement, transparency reporting, PBM compensation, network design, member cost sharing and pharmacy audits.

Pharmacy Network Access Legislation - Medicare Part D and a majority of states now have some form of legislation affecting the Company’s (and its health plans’ and its health plan clients’) ability to limit access to a pharmacy provider network or remove pharmacy network providers. For example, certain “any willing provider” legislation may require the Company or its clients to admit a nonparticipating pharmacy if such pharmacy is willing and able to meet the plan’s price and other applicable terms and conditions for network participation. These laws could negatively affect the services and economic benefits achievable through a limited pharmacy provider network. Several states apply these laws to the administration of plans that are not typically subject to such laws, e.g. national and multi-state ERISA self-funded plans. These laws could negatively affect the Company’s ability to recover overpayments of claims submitted by network pharmacies that the Company identifies through pharmacy audits. Finally, several states have passed legislation that limits the ability of PBMs and health insurers to provide special benefit structures for use with affiliated pharmacies, which could result in reduced savings to clients and consumers.

Pharmacy Pricing Legislation - Multiple states have passed legislation regulating the Company’s ability to manage pricing practices, including mandated pharmacy reimbursement rates and the collection of transmission fees. A number of states have also established MACs for generic prescription drugs. MAC methodology is a common cost management practice used by

private and public payors (including CMS) to pay pharmacies for dispensing generic prescription drugs. MAC prices specify the allowable reimbursement by a PBM for a particular strength and dosage of a generic drug that is available from multiple manufacturers but sold at different prices. State legislation can regulate the disclosure of MAC prices and MAC price methodologies, the kinds of drugs that a PBM can pay for at a MAC price, and the rights of pharmacies to appeal a MAC price established by a PBM. Some states now require the PBM to reimburse a pharmacy’s actual acquisition cost. These laws could negatively affect the Company’s ability to establish MAC prices for generic drugs. Additionally, some states have passed legislation that would restrict certain types of retroactive reconciliation or recoupment from pharmacies in the network or create a reimbursement benchmark mandate, such as the national average drug acquisition cost and/or the wholesale acquisition cost (“WAC”), plus a set dispensing fee, for pharmacies in the network.

Formulary and Plan Design Regulation - A number of government entities regulate the administration of prescription drug benefits. HHS regulates how Medicare Part D formularies are developed and administered, including requiring the inclusion of all drugs in certain classes and categories, subject to limited exceptions. Under the ACA, CMS imposes drug coverage requirements for health plans required to cover essential health benefits, including plans offered through federal or state Public Exchanges. Additionally, the NAIC and health care accreditation agencies like NCQA and URAC have developed model acts and standards for formulary development that are often incorporated into government requirements. Many states regulate the scope of prescription drug coverage, as well as the delivery channels to receive prescriptions, for insurers, MCOs and Medicaid managed care plans. The increasing government regulation of formularies could significantly affect the Company’s ability to develop and administer formularies, pharmacy networks and other plan design features. Similarly, some states prohibit health plan sponsors from implementing certain restrictive pharmacy benefit plan design features. This regulation could limit or preclude (i) limited networks, (ii) a requirement to use particular providers, (iii) copayment differentials among providers and (iv) formulary tiering practices.

Accountable Care Organization Regulation - An ACO is a network of health care providers and suppliers that work together to invest in infrastructure and redesign delivery processes to attempt to achieve high quality and efficient delivery of services. Promoting accountability and coordination of care, ACOs are an alternative payment model intended to produce savings as a result of improved quality and operational efficiency. The goals of an ACO are assessed using a set of quality measures and spending benchmarks. Medicare-approved ACOs that achieve performance standards established by HHS are eligible to share in a portion of the amounts saved by the Medicare program. There are several types of ACO programs, including the MSSP and ACO REACH models. The CMS Innovation Center can add models at their discretion that have overlap implications for MSSP and ACO REACH. Overlap policies may impact risks and opportunities within the MSSP and ACO REACH models, including but not limited to attribution methodologies, inclusion and exclusion, provider overlap permissions, and model attrition. Models may be updated at any time in ways that make the model less favorable to participants, and HHS has significant discretion to determine key elements of ACO programs. Certain waivers and exceptions are available from fraud and abuse laws for ACOs. Currently, ACO REACH is set to expire at the end of 2026.

Corporate Practice of Medicine - The Company is subject to various state laws, regulations and legal and administrative decisions that restrict the corporate practice of medicine and fee splitting. The corporate practice of medicine doctrine generally prohibits corporate entities from practicing medicine or employing physicians (and, in some cases, other providers) to provide professional medical services. The doctrine reflects a variety of historical public policy concerns, including concerns that (a) allowing corporations to practice medicine or employ physicians will result in the commercialization of the practice of medicine, (b) a corporation’s obligation to its shareholders may not align with a physician’s obligation to his/her patients and (c) employment of a physician by a corporation may interfere with the physician’s independent medical judgment. While many states have some form of the corporate practice of medicine doctrine, the scope and enforcement varies widely. In those states where the doctrine exists, it typically arises from the state’s medical practice act, but has been shaped over the years by state statutes, regulations, court decisions, attorney general opinions and actions by state medical licensing boards. In addition, some states may have corporate practice restrictions that apply to other providers, such as nurse practitioners and physician assistants.

Historically, the medical profession has recognized an ethical prohibition against physicians (and often other providers) paying professional peers and others for referrals and fee splitting. Fee splitting generally occurs when a physician splits part of the professional fee earned from treating a referred patient with the source of the referral. Among the public policy harms that have been cited in support of fee splitting prohibitions are (a) unnecessary medical services, and (b) incompetent specialists. In response to these legitimate concerns, many states have adopted prohibitions against fee splitting. States have taken a variety of legislative approaches to fee splitting, from near complete bans, to bans with various exceptions, to no prohibition at all. Some of the prohibitions, have a broad reach and also prohibit otherwise legitimate business relationships with entities that are not health care providers, such as billing agencies or management companies.

Table of Contents

Legal structures have been developed to comply with various state corporate practice of medicine and fee splitting laws. The “captive” or “friendly” professional corporation model allows a legal entity (typically a professional corporation or professional limited liability company) whose shareholders are all physicians to employ the physicians (and other providers). The physician entity then contracts with a corporate entity referred to as a management services organization (“MSO”) to provide various management services. The physician entity is kept “friendly” through a stock transfer restriction agreement and/or other relationship between the MSO and the physician owners of the professional corporation. The fees under the management services arrangement must be carefully structured to comply with state fee splitting laws, which in some states may prohibit percentage-based fees.

Retail Medical Clinics - States regulate retail medical clinics operated by nurse practitioners or physician assistants through physician oversight, clinic and lab licensure requirements and the prohibition of the corporate practice of medicine. A number of states have implemented or proposed laws or regulations that impact certain components of retail medical clinic operations such as physician oversight, signage, third party contracting requirements, bathroom facilities, and scope of services. These laws and regulations may affect the operation and expansion of the Company’s owned and managed retail medical clinics.

Laws and Regulations Related to the Pharmacy & Consumer Wellness Segment

In addition to the laws and regulations discussed above that may affect multiple segments of the Company’s business, the Company is subject to federal, state and local statutes and regulations governing the operation of its Pharmacy & Consumer Wellness segment specifically, including laws and regulations that limit the sale of alcohol, mandate a minimum wage, govern the practices of optometry or audiology, or impact the provision of dietician services and the sale of durable medical equipment, contact lenses, eyeglasses and hearing aids.

Available Information

CVS Health Corporation was incorporated in Delaware in 1996. The corporate office is located at One CVS Drive, Woonsocket, Rhode Island 02895, telephone (401) 765-1500. CVS Health Corporation’s common stock is listed on the New York Stock Exchange under the trading symbol “CVS.” General information about the Company is available through the Company’s website at http://www.cvshealth.com. The Company’s financial press releases and filings with the SEC are available free of charge within the Investors section of the Company’s website at http://investors.cvshealth.com. In addition, the SEC maintains an internet site that contains reports, proxy and information statements and other information regarding issuers, such as the Company, that file electronically with the SEC. The address of that website is http://www.sec.gov. The information on or linked to the Company’s website is neither a part of nor incorporated by reference in this 10-K or any of the Company’s other SEC filings.

In accordance with guidance provided by the SEC regarding use by a company of its websites and social media channels as a means to disclose material information to investors and to comply with its disclosure obligations under SEC Regulation FD, CVS Health Corporation (the “Registrant”) hereby notifies investors, the media and other interested parties that it intends to continue to use its media and investor relations website (http://investors.cvshealth.com/) to publish important information about the Registrant, including information that may be deemed material to investors. The list of social media channels that the Registrant uses may be updated on its media and investor relations website from time to time. The Registrant encourages investors, the media, and other interested parties to review the information the Registrant posts on its website and social media channels as described above, in addition to information announced by the Registrant through its SEC filings, press releases and public conference calls and webcasts.

Item 1A. Risk Factors.

You should carefully consider each of the following risks and uncertainties and all of the other information set forth in this 10-K. These risks and uncertainties and other factors may affect forward-looking statements, including those we make in this 10-K or elsewhere, such as in news releases or investor or analyst calls, meetings or presentations, on our websites or through our social media channels. The risks and uncertainties described below are not the only ones we face. There can be no assurance that we have identified all the risks that affect us. Additional risks and uncertainties not presently known to us or that we currently believe to be immaterial also may adversely affect our businesses. Any of these risks or uncertainties could cause our actual results to differ materially from our expectations and the expected results discussed in our forward-looking statements. You should not consider past results to be an indication of future performance.

If any of the following risks or uncertainties develops into actual events or if the circumstances described in the risks or uncertainties occur or continue to occur, those events or circumstances could have a material adverse effect on our businesses,

operating results, cash flows, financial condition and/or stock price, among other effects on us. You should read the following section in conjunction with the MD&A, included in Item 7 of this 10-K, our consolidated financial statements and the related notes, included in Item 8 of this 10-K, and our “Cautionary Statement Concerning Forward-Looking Statements” in this 10-K.

Summary

The following is a summary of the principal risks we face that could negatively impact our businesses, operating results, cash flows and/or financial condition:

Risks Relating to Our Businesses

•We may not be able to accurately forecast health care and other benefit costs.

•Adverse economic conditions in the U.S. and abroad can materially and adversely impact our businesses, operating results, cash flows and financial condition.

•Each of our segments operates in a highly competitive and evolving business environment.

•A change in our Health Care Benefits product mix may adversely affect our profit margins.

•Our health care delivery businesses face unique risks

•We can provide no assurance that we will be able to compete successfully and profitably on Public Exchanges.

•Negative public perception of the industries in which we operate can adversely affect our businesses, operating results, cash flows and prospects.

•We must maintain and improve our relationships with our retail and specialty pharmacy customers and increase the demand for our products and services.

•We face risks relating to the availability, pricing and safety profiles of prescription drugs that we purchase and sell.

•The reserves we hold for expected claims in our Insured Health Care Benefits products are based on estimates that involve an extensive degree of judgment and are inherently variable, and any reserve, including a premium deficiency reserve, may be insufficient.

•We are exposed to risks relating to the solvency of other insurers.

Risks From Changes in Public Policy and Other Legal and Regulatory Risks

•We are subject to potential changes in public policy, laws and regulations, including reform of the U.S. health care system and entitlement programs.

•If we fail to comply with applicable laws and regulations, or fail to change our operations in line with any new legal or regulatory requirements, we could be subject to significant adverse regulatory actions.

•If our compliance or other systems and processes fail or are deemed inadequate, we may suffer brand and reputational harm and become subject to contractual damages, regulatory actions and/or litigation.

•We routinely are subject to litigation and other adverse legal proceedings, including class actions and qui tam actions. Many of these proceedings seek substantial damages which may not be covered by insurance.

•We frequently are subject to regular and special governmental audits, investigations and reviews that could result in changes to our business practices and also could result in material refunds, fines, penalties, civil liabilities, criminal liabilities and other sanctions.

•

•We face unique regulatory and other challenges in our PBM, Public Exchange, Medicare and Medicaid businesses.

•Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues.

•We may not be able to obtain adequate premium rate increases in our Insured Health Care Benefits products, MBRs and operating results, which could magnify the adverse impact of increases in health care and other benefit costs and of ACA assessments, fees and taxes.

•Minimum MLR rebate requirements limit the level of margin we can earn in our Insured Health Care Benefits products while leaving us exposed to higher than expected medical costs. Challenges to our minimum MLR rebate methodology and/or reports could adversely affect our operating results.

•Our operating results may be adversely affected by changes in laws and policies governing employers and by union organizing activity.

Risks Associated with Mergers, Acquisitions, and Divestitures

•We may be unable to successfully integrate companies we acquire.

•

Risks Related to Our Operations

•Failure to meet customer and investor expectations, including with respect to corporate responsibility and sustainability goals, may harm our brand and reputation, our ability to retain and grow our customer base and membership.

•A cyberattack or other information security incident could significantly disrupt our operations.

•Data governance failures or the failure or disruption of our information technology or infrastructure can adversely affect our reputation, businesses and prospects. Our use and disclosure of members’, customers’ and other constituents’ personal information is subject to complex regulations.

•Pursuing multiple information technology improvement initiatives simultaneously could make continued development and implementation significantly more challenging.

•Product liability, product recall, professional liability or personal injury issues could damage our reputation.

•We face significant competition in attracting and retaining talented employees. Further, managing succession for, and retention of, key executives is critical to our success.

•Sales of our products and services are dependent on our ability to attract and motivate internal sales personnel and independent third-party brokers, consultants and agents. We may be subject to penalties or other regulatory actions as a result of the marketing practices of brokers and agents selling our products.

•Failure of our businesses to effectively collaborate could prevent us from maximizing our operating results.

•We are subject to payment-related risks that could increase our operating costs, expose us to fraud or theft, subject us to potential liability and disrupt our business operations.

•Both our and our vendors’ operations are subject to a variety of business continuity hazards and risks that could interrupt our operations or otherwise adversely affect our performance and operating results.

Financial Risks

•We would be adversely affected by downgrades or potential downgrades in our credit ratings, should they occur, or if we do not effectively deploy our capital.

•Goodwill and other intangible assets could, in the future, become impaired.

•Adverse conditions in the U.S. and global capital markets can significantly and adversely affect the value of our investments in debt and equity securities, mortgage loans, alternative instruments and other investments.

Risks Related to Our Relationships with Manufacturers, Providers, Suppliers and Vendors

•We face risks relating to the market availability, pricing, suppliers and safety profiles of prescription drugs and other products that we purchase and sell.

•We need to be able to maintain our ability to contract with providers on competitive terms and develop and maintain attractive networks with high quality providers.

•If our suppliers or service providers fail to meet their contractual obligations to us or to comply with applicable laws or regulations, we may be exposed to brand and reputational harm, litigation and/or regulatory action.

•We may experience increased medical and other benefit costs, litigation risk and customer and member dissatisfaction when providers that do not have contracts with us render services to our Health Care Benefits members.

•Continuing consolidation and integration among providers and other suppliers may increase our costs and increase competition.

Risks Relating to Our Businesses

We may not be able to accurately forecast health care and other benefit costs, including as a result of pandemics or disease outbreaks, which could adversely affect our Health Care Benefits segment’s operating results. There can be no assurance that future health care and other benefits costs will not exceed our projections.

These forecasts are typically developed several months before the fixed premium period begins, are influenced by historical data (and recent historical data in particular), are dependent on our ability to anticipate and detect medical cost trends and changes in our members’ behavior and health care utilization patterns and medical claim submission patterns and require a significant degree of judgment. Cost increases in excess of our projections cannot be recovered in the fixed premium period through higher premiums. As a result, our profits are particularly sensitive to the accuracy of our forecasts of the increases in health care and other benefit costs that we expect to incur and our ability to anticipate and detect medical cost trends. Even relatively small differences between predicted and actual health care and other benefit costs as a percentage of premium revenues can result in significant adverse changes in our Health Care Benefits segment’s operating results.

While the public health emergency related to COVID-19 expired in May 2023, COVID-19 still exists and it may, like many other respiratory viruses, wax and wane depending on geography and seasonality. The future impact COVID-19 will have on the Company and its ability to accurately forecast health care and other benefit costs is uncertain, and will depend on geographies impacted, whether new variants emerge and their severity, the availability and costs of testing, vaccination and treatment, and legal and regulatory actions. COVID-19 may also impact provider behavior, utilization trends, membership, and overall economic conditions. These impacts could be adverse and material.

A number of factors contribute to rising health care and other benefit costs, including previously uninsured members entering the health care system; Medicare members’ utilization of supplemental benefits; other changes in members’ behavior, health care utilization patterns and utilization management; turnover in our membership, health care provider and member fraud; additional government mandated benefits or other regulatory changes, including changes to or as a result of the ACA and IRA; changes in the health status of our members; the aging of the population and other changing demographic characteristics; advances in medical technology; increases in the number and cost of prescription drugs (including specialty pharmacy drugs and ultra-high cost drugs and therapies); direct-to-consumer marketing by drug manufacturers; the increasing influence of social media on our members’ health care utilization and other behaviors; the shift to a consumer-driven business model; changes in health care practices and general economic conditions (such as inflation and employment levels); increases in labor costs; pandemics, epidemics or disease outbreaks; influenza-related health care costs (which may be substantial and higher than we expected); clusters of high-cost cases; natural disasters and extreme weather events (which may increase in frequency or intensity as a result of climate change); and numerous other factors that are or may be beyond our control. For example, the length and severity of the influenza season can have an impact on health care and other benefit costs. In 2022-2023 influenza season had an earlier than average start, including as compared to the 2023-2024 influenza season; the 2020-2021 influenza season was impacted by efforts taken to reduce the spread of COVID-19; and the 2019-2020 influenza season maintained a high level of severity for a longer period of time than average. In addition, government-imposed limitations on Medicare and Medicaid reimbursements to health plans and providers have caused the private sector to bear a greater share of increasing health care and other benefits costs over time, and future amendments to the ACA that increase the uninsured population may amplify this issue.

Our Health Care Benefits segment’s operating results and competitiveness depend in large part on our ability to appropriately manage future health care and other benefit costs through underwriting criteria, product design, provider network configuration, negotiation of favorable provider contracts and medical management programs. Our medical cost management programs may not be successful and may have a smaller impact on health care and benefit costs than we expect. The factors described above may adversely affect our ability to predict and manage health care and other benefit costs, which can adversely affect our competitiveness and operating results.

Furthermore, if we are not able to accurately and promptly anticipate and detect medical cost trends or accurately estimate the cost of incurred but not yet reported claims or reported claims that have not been paid, our ability to take timely corrective actions to limit future health care costs and reflect our current benefit cost experience in our pricing process may be limited, which would further amplify the extent of any adverse impact on our operating results. Such risks are further magnified by the ACA and other existing and future legislation and regulations that limit our ability to price for our projected and/or experienced increases in utilization and/or medical cost trends.

Adverse economic conditions in the U.S. and abroad can materially and adversely impact our businesses, operating results, cash flows and financial condition.

Adverse economic conditions in the U.S. and abroad, including those caused by inflation, high interest rates, declines in consumer confidence, increases in unemployment and supply chain disruptions, all of which we have experienced over the last number of years, can materially and adversely impact our businesses, operating results, cash flows and financial condition, including:

•In our Health Care Benefits segment, by causing unanticipated increases and volatility in utilization of covered services, increases in fraudulent claims and disputes, changes in medical claim submission patterns and/or increases in medical unit costs and/or provider behavior as hospitals and other providers attempt to maintain revenue levels in response to economic conditions, each of which would increase our costs and limit our ability to accurately detect, forecast, manage, reserve and price for our (and our self-insured customers’) medical cost trends and incurred and future health care and other benefits costs; causing customers and potential customers of our Health Care Benefits segment, particularly smaller employers and individuals, to forego obtaining or renewing their health and other coverage with us; and also affect our ability to profitably grow and diversify our Health Care Benefits membership.

•In our Health Services segment, by causing drug utilization to decline, reducing demand for PBM services and adversely affecting the financial health of our PBM clients.

•In our Pharmacy & Consumer Wellness segment, by causing drug utilization to decline, changing consumer purchasing power, preferences and/or spending patterns leading to reduced consumer demand for products sold in our stores, potentially increasing levels of theft at our retail locations and adversely affecting the financial health of our LTC pharmacy customers.

•By causing our existing customers to reduce workforces (including due to business failures), which would reduce our revenues, the number of covered lives in our PBM clients and/or the number of members our Health Care Benefits segment serves. For example, our business associated with members who have elected to receive benefits under Consolidated Omnibus Budget Reconciliation Act (known as “COBRA”) typically has an MBR that is significantly higher than our overall Commercial MBR.

•By affecting the ability of our customers to obtain adequate financing, which could result in an inability of our customers to pay timely, or at all, the amounts owed to us.

•By causing both state and federal government payers, as a result of budget deficits or spending reductions, to suspend or seek to reduce their health care expenditures resulting in our customers delaying payments to us or renegotiating their contracts with us.

•By causing our clients and customers and potential clients and customers, particularly those with the most employees or members, and state and local governments, to force us to compete more vigorously on factors such as price and service, including service, discount and other performance guarantees, to retain or obtain their business.

•By causing members and other consumers to decide to postpone, or not to seek, medical treatment which may lead them to incur more expensive medical treatment in the future and/or decrease our prescription volumes.

•By causing an increasing in the prevalence of high deductible health plans and health plan designs favoring co-insurance over co-payments.

•By weakening the ability or perceived ability of the issuers and/or guarantors of the debt or other securities we hold in our investment portfolio to perform on their obligations to us, which could result in defaults in those securities and has reduced, and may further reduce, the value of those securities and has created, and may continue to create, net realized capital losses for us that reduce our operating results.

•By causing customers, including self-insured customers in our Health Care Benefits segment, medical members, medical providers and the other companies to be unable to perform their obligations to us which could reduce our operating results.

•By affecting our ability to obtain necessary financing on acceptable terms, our ability to secure suitable store locations under acceptable terms and our ability to execute sale-leaseback transactions under acceptable terms.

•By weakening the ability of our former subsidiaries and/or their purchasers to satisfy their lease obligations that we have guaranteed and causing the Company to be required to satisfy those obligations.

•By weakening the financial condition of other insurers, including long-term care insurers and life insurers, which increases the risk that we will receive significant assessments for obligations of insolvent insurers to policyholders and claimants.

•By continuing to cause inflation that could cause interest rates to further increase and thereby further increase our interest expense and reduce our operating results, as well as further decrease the value of the debt securities we hold in our investment portfolio, which would further reduce our operating results and/or adversely affect our financial condition.

Each of our segments operates in a highly competitive and evolving business environment; and operating income in the industries in which we compete may decline.

Each of our segments, Health Care Benefits, Health Services, which includes our PBM business, and Pharmacy & Consumer Wellness, operates in a highly competitive and evolving business environment. Specifically:

•As competition increases in the geographies in which we operate, including competition from new entrants, a significant increase in price compression and/or reimbursement pressures could occur, and this could require us to reevaluate our pricing structures to remain competitive.

•In our Health Care Benefits segment, we must often bid against our competitors in a highly competitive environment to acquire and retain our government customers’ business. Winning bids for Medicaid and dual eligible programs often are challenged successfully by unsuccessful bidders, and may also be withdrawn or cancelled by the issuing agency. CMS has proposed requiring that health plans offering certain dual eligible programs must also offer Medicaid programs, which has resulted in the Company refraining from bidding in certain jurisdictions and could further impact the Company’s ability to obtain or retain membership in its dual eligible programs.

•In our Health Care Benefits segment, our customers have considerable flexibility in moving between us and our competitors. We may lose members to competitors with more favorable pricing, or our customers may purchase different types of products from us that are less profitable, adversely affecting our revenues and operating results. In addition, our Medicare, Medicare Advantage, Medicaid and CHIP products may be subject to termination without cause, periodic re-bid, rate adjustment and program redesign, as customers seek to contain their benefit costs, particularly in an uncertain economy. These actions may adversely affect our membership, revenues and operating results.

•We requested increases in our premium rates in our Commercial Health Care Benefits business for 2025 and expect to request future increases in those rates in order to adequately price for projected medical cost trends, required expansions of coverage and rating limits, and significant assessments, fees and taxes imposed by federal and state governments, including as a result of the ACA. Our rates also must be adequate to reflect the risk that our products will be selected by people with a higher risk profile or utilization rate than the pool of participants we anticipated when we established pricing for the applicable products (also known as “adverse selection”), particularly in small group Commercial products. These rate increases may be significant and thus heighten the risks of adverse publicity, adverse regulatory action and adverse selection and the likelihood that our requested premium rate increases will be denied, reduced or delayed, which could lead to operating margin compression.

•The competitive success of our Health Services segment is dependent on our ability to establish and maintain contractual relationships with network pharmacies.

•The competitive success of our Pharmacy & Consumer Wellness segment and our specialty pharmacy operations is dependent on our ability to establish and maintain contractual relationships with PBMs and other payors on acceptable terms as the payors’ clients evaluate adopting narrow or restricted retail pharmacy networks.

•In our PBM business, we maintain contractual relationships with brand name drug manufacturers that provide for purchase discounts and/or rebates on drugs dispensed by pharmacies in our retail network and by our specialty and mail order pharmacies (all or a portion of which may be passed on to clients). Manufacturer’s rebates often depend on a PBM’s ability to meet contractual requirements, including the placement of a manufacturer’s products on the PBM’s formularies. If we lose our relationship with one or more drug manufacturers, or if the discounts or rebates provided by drug manufacturers decline, our operating results, cash flows and/or prospects could be adversely affected.

•If laws or regulations are promulgated that limit the number of PBMs available in a particular business or geography, competition in those businesses and geographies could be amplified and could adversely affect our revenues and operating results.

•The PBM industry has been experiencing price compression as a result of competitive pressures and increased client demands for lower prices; increased revenue sharing, including sharing in a larger portion of payments, including rebates and fees, to PBMs and group purchasing organizations received from drug manufacturers; enhanced service offerings and/or higher service levels. Marketplace dynamics and regulatory changes also have adversely affected our ability to offer plan sponsors pricing that includes the use of retail “differential” or “spread,” which could adversely affect our future profitability, and we expect these trends to continue.

•Our retail pharmacy, specialty pharmacy and LTC pharmacy operations have been affected by reimbursement pressure caused by competition, including client demands for lower prices, generic drug pricing, earlier than expected generic drug introductions and network reimbursement pressure. If we are unable to increase our prices to reflect, or otherwise mitigate the impact of, increasing costs, our profitability will be adversely affected. If we are unable to limit our price increases, we may lose customers to competitors with more favorable pricing, adversely affecting our revenues and operating results.

•A shift in the mix of our pharmacy prescription volume towards programs offering lower reimbursement rates as a result of competition or otherwise could adversely affect our margins, including the ongoing shift in pharmacy mix towards 90-day prescriptions at retail and the ongoing shift in pharmacy mix towards Medicare Part D prescriptions.

•PBM client contracts often are for a period of approximately three years. However, PBM clients may require early or periodic re-negotiation of pricing prior to contract expiration. PBM clients are generally well informed, can move between us and our competitors and often seek competing bids prior to expiration of their contracts. We are therefore under pressure to contain price increases despite being faced with increasing drug costs and increasing operating costs. If we are unable to increase our prices to reflect, or otherwise mitigate the impact of, increasing costs, our profitability will be adversely affected. If we are unable to limit our price increases, we may lose customers to competitors with more favorable pricing, adversely affecting our revenues and operating results.

•The operating results and margins of our LTC business are further affected by the increased efforts of health care payors to negotiate reduced or capitated pricing arrangements and by the financial health of, and purchases and sales of, our LTC customers.

In addition, competitors in each of our businesses may offer services and pricing terms that we may not be willing or able to offer. Competition also may come from new entrants and other sources in the future. Unless we can demonstrate enhanced value to our clients through innovative product and service offerings in the rapidly changing health care industry, we may be unable to remain competitive.

g., Medicare Advantage plans and PDPs) or through Public Exchanges and private health insurance exchanges that allow individual choice. Consumers also are increasingly seeking to access consumer goods and health care products and services locally and through other direct channels such as mobile devices and websites. To compete effectively in the consumer-driven marketplace, we will be required to develop or acquire new capabilities, attract new talent and develop new service and distribution relationships that respond to consumer needs and preferences.

Changes in marketplace dynamics or the actions of competitors or manufacturers, including industry consolidation, the emergence of new competitors and strategic alliances, and decisions to exclude us from new narrow or restricted retail pharmacy networks could materially and adversely affect our businesses, operating results, cash flows and/or prospects.

Our Health Care Delivery Businesses Face Unique Risks.

Our health care delivery businesses, which we expanded with acquisitions to include health risk assessments, value-based care and provider enablement services through our Signify Health business, and additional senior-focused value-based primary care services for Medicare eligible patients through our Oak Street Health business, face unique risks.

Our Signify Health business faces risks which include, but are not limited to, the following:

•ability to recruit, retain and grow its network of credentialed, high-quality physicians, physician assistants and nurse practitioners to provide clinical services in highly competitive markets for talent;

•successful challenges to Signify Health’s treatment of health care providers as independent contractors, which could result in increased costs and subject the business to regulatory sanction;

•dependence on a concentrated number of key health plan customers;

•the quality of the information received about plan members of such health plans for whom Signify Health will seek to provide in-home evaluations and other services, and the regulatory restrictions and requirements associated with directly contacting plan members;

•ability to perform and ensure the quality of health risk assessments;

•ability to achieve and receive shared health care cost savings;

•the regulatory and business risks associated with participation in certain government health care programs, including, among others, the MSSP and ACO REACH models, and identification of diagnosis codes related to risk adjustment payments under Part C of the Medicare program;

•health reform initiatives and changes in the rules governing government health care programs, including rules related to the use of in-home health risk assessments for the purpose of capturing individual risk use to calculate an individual’s risk adjustment factor or a change to how patient-level risk is determined for CMS programs;

•participation in CMS Innovation Center models, such as ACO REACH, which are subject to changes annually, generally in ways meant to reduce available payments to participants, including benchmarks that can be changed after the end of the performance year, and which has an end date without a plan for ongoing participation in a model by those participating;

•impacts of fraud or anomalous billing on shared savings in CMS Innovation Center models;

•use of “open source” software in its technology, which may make it easier for others to gain access or compromise its proprietary technology;

•success in large, national ACOs is dependent on the collective efforts and compliance of a wide range of participating clients, and for those clients to be able to meet new and changing requirements such as changes to interoperability and reporting requirements; and

•challenges in rural and post-acute reimbursement due to their significant dependence on fee-for-service revenue.

Our Oak Street Health business is subject to additional risks including, but not limited to, the following:

•ability to attract new Medicare-eligible patients and credentialed, high-quality physicians and other providers for senior-focused primary care in a highly competitive market for such patients and providers;

•satisfying the enrollment requirements under government health care programs for physicians and other providers in a timely manner;

•dependence on a significant portion of revenue from Medicare or Medicare Advantage plans, which subjects Oak Street Health to reductions in Medicare reimbursement rates or changes in the rules governing the Medicare program;

•dependence for a significant portion of revenue from agreements with a limited number of key payors with whom Oak Street Health contracts to provide services under terms that may permit a payor to amend the compensation arrangements or terminate the agreements without cause;

•dependence on reimbursements from third-party payors, which can result in substantial delay, and on patients, through copayments and deductibles, which subjects Oak Street Health to additional reimbursement risk;

•under the fixed fee (or capitated) agreements Oak Street Health enters into with health plans, the assumption of the risk that the actual cost of a service it provides to a patient exceeds the reimbursement provided by the health plan;

•reductions in the quality ratings of Medicare health plans Oak Street Health serves could result in a shift of patients from, or the termination of, a health plan Oak Street Health serves;

•submission of inaccurate, incomplete or erroneous data, including risk adjustment data, to health plans and government payors could result in inaccuracies in the revenue Oak Street Health records or receipt of overpayments, which may subject it to repayment obligations and penalties;

•geographic concentration of its primary care centers;

•risks associated with its existing legal proceedings and litigations;

•laws regulating the corporate practice of medicine and the associated agreements entered into with physician practice groups restrict the manner in which the Oak Street Health business is able to direct the operations and otherwise exercise control of its physician practice groups

•changes in the legal treatment of its contractual arrangements with its physician practice groups could impact the ability to consolidate the revenue of these groups; and

•ability to maintain and enhance its reputation and brand recognition.

The additional risks faced by our health care delivery businesses may also compound, or be heightened by, many of our other risks, including the risks related to adverse economic conditions in the U.S. and abroad, cybersecurity, and compliance with applicable laws and regulations, among others.

To compete effectively on Public Exchanges, we have developed or acquired the technology, systems, tools and talent necessary to interact with Public Exchanges and engage Public Exchange consumers through enhanced consumer-focused sales, marketing channels and customer interfaces. Due to the price transparency provided by Public Exchanges, when we market products we face competitive pressures from existing and new competitors who may have lower cost structures. Our competitors may bring their Public Exchange and other consumer products to market more quickly, have greater experience marketing to consumers and/or may be targeting the higher margin portions of our business. We can provide no assurance that we will be able to compete successfully or profitably on Public Exchanges or that we will be able to benefit from any opportunities presented by Public Exchanges.

In addition, there can be no assurance that our pricing or other actions will result in the profitability of our Public Exchange products in 2025 or any future year. We have set 2025 premium rates for our Public Exchange products based on our projections, including as to the health status and quantity of membership and utilization of medical and/or other covered services by members.

A change in our Health Care Benefits product mix may adversely affect our profit margins.

We also serve, and expect to grow our business with, government-sponsored programs, including Medicare and Medicaid, that are subject to competitive bids and have lower profit margins than our Commercial Insured Health Care Benefits products.

Negative public perception of the industries in which we operate, or of our industries’ or our practices, can adversely affect our businesses, operating results, cash flows and prospects.

Our brand and reputation are two of our most important assets, and the industries in which we operate have been and are negatively perceived by the public from time to time. This risk may increase as we continue to offer products and services that make greater use of data and as our business model becomes more focused on delivering health care to consumers.

Negative public perception and/or publicity of our industries in general, or of us or our key vendors, brokers or product distribution networks in particular, can further increase our costs of doing business and adversely affect our operating results and our stock price by:

•adversely affecting our brand and reputation;

•adversely affecting our ability to market and sell our products and/or services and/or retain our existing customers and members;

•requiring us to change our products and/or services;

•reducing or restricting the revenue we can receive for our products and/or services; and/or

•increasing or significantly changing the regulatory and legislative requirements with which we must comply.

We must maintain and improve our relationships with our retail and specialty pharmacy customers and increase the demand for our products and services, including proprietary brands.

The success of our businesses depends in part on customer loyalty, superior customer service and our ability to persuade customers to frequent our retail stores and online sites and to purchase products in additional categories and our proprietary brands.

We offer our retail customers proprietary brand products that are available exclusively at our retail stores and through our online retail sites. The sale of proprietary products subjects us to unique risks including potential product liability risks, mandatory or voluntary product recalls, potential supply chain and distribution chain disruptions for raw materials and finished products, our ability to successfully protect our intellectual property rights and the rights of applicable third parties, and other risks generally encountered by entities that source, market and sell private-label products. We also face similar risks for the other products we sell in our retail operations, including supply chain and distribution chain disruption risk. Any failure to adequately address some or all of these risks could have an adverse effect on our retail business, operating results, cash flows and/or financial condition. Additionally, an increase in the sales of our proprietary brands may adversely affect our sales of products owned by our suppliers and adversely impact certain of our supplier relationships. Our ability to locate qualified, economically stable suppliers who satisfy our requirements, and to acquire sufficient products in a timely and effective manner, is critical to ensuring, among other things, that customer confidence is not diminished. Any failure to develop sourcing relationships with a broad and deep supplier base could adversely affect our operating results and erode customer loyalty.

We also could be adversely affected if we fail to identify or effectively respond to changes in marketplace dynamics. For example, specialty pharmacy represents a significant and growing proportion of prescription drug spending in the U.S., a significant portion of which is dispensed outside of traditional retail pharmacies. Because our specialty pharmacy business focuses on complex and high-cost medications, many of which are made available by manufacturers to a limited number of pharmacies (so-called limited distribution drugs) that serve a relatively limited universe of patients, the future growth of our specialty pharmacy business depends largely upon expanding our access to key drugs and penetration in certain treatment categories. Any contraction of our base of patients or reduction in demand for the prescriptions we currently dispense could have an adverse effect on our specialty pharmacy business, operating results and cash flows.

We face risks relating to the availability, pricing and safety profiles of prescription drugs that we purchase and sell.

The profitability of our Pharmacy & Consumer Wellness and Health Services segments is dependent upon the utilization of prescription drug products. We dispense significant volumes of brand name and generic drugs from our retail, LTC, specialty and mail order pharmacies, and the retail pharmacies in our PBM’s network also dispense significant volumes of brand name and generic drugs. Our revenues, operating results and cash flows may decline if physicians cease writing prescriptions for drugs or the utilization of drugs is reduced, including due to:

•increased safety risk profiles or regulatory restrictions;

•manufacturing or other supply issues;

•a reduction in drug manufacturers’ participation in federal programs;

•certain products being withdrawn by their manufacturers or transitioned to over-the-counter products;

•future FDA rulings restricting the supply or increasing the cost of products;

•the introduction of new and successful prescription drugs or lower-priced generic alternatives to existing brand name products; or

•inflation in the price of drugs.

In addition, increased utilization of generic drugs (which normally yield a higher gross profit rate than equivalent brand name drugs) has resulted in pressure to decrease reimbursement payments to retail, mail order, specialty and LTC pharmacies for generic drugs, causing a reduction in our margins on sales of generic drugs. Consolidation within the generic drug manufacturing industry and other external factors may enhance the ability of manufacturers to sustain or increase pricing of generic drugs and diminish our ability to negotiate reduced generic drug acquisition costs. Any inability to offset increased brand name or generic prescription drug acquisition costs or to modify our activities to lessen the financial impact of such increased costs could have a significant adverse effect on our operating results.

The reserves we hold for expected claims in our Insured Health Care Benefits products are based on estimates that involve an extensive degree of judgment and are inherently variable. Any reserve, including a premium deficiency reserve, may be insufficient. If actual claims exceed our estimates, our operating results could be materially adversely affected, and our ability to take timely corrective actions to limit future costs may be limited.

A large portion of health care claims are not submitted to us until after the end of the quarter in which services are rendered by providers to our members. Our reported health care costs payable for any particular period reflect our estimates of the ultimate cost of such claims as well as claims that have been reported to us but not yet paid. We also must estimate the amount of rebates payable under the MLR rules of the ACA, CMS and the OPM and the amounts payable by us to, and receivable by us from, the U.S. federal government under the ACA’s remaining premium stabilization program.

Our estimates of health care costs payable are based on a number of factors, including those derived from historical claim experience, but this estimation process also makes use of extensive judgment. Considerable variability is inherent in such estimates, and the accuracy of the estimates is highly sensitive to changes in medical claims submission and processing patterns and/or procedures, turnover and other changes in membership, changes in product mix, changes in the utilization of medical and/or other covered services, including prescription drugs, changes in medical cost trends, changes in our medical management practices and the introduction of new benefits and products. We estimate health care costs payable periodically, and any resulting adjustments, including premium deficiency reserves, are reflected in current-period operating results within health care costs. For example, during the third quarter of 2024, we recorded premium deficiency reserves of approximately $1.1 billion related to our Medicare, individual exchange and Medicaid product lines within the Health Care Benefits segment, primarily related to anticipated losses for the 2024 coverage year. The Company did not have any premium deficiency reserves as of December 31, 2024. The Company did not establish any premium deficiency reserves during 2023 or 2022. A worsening (or improvement) of health care cost trend rates or changes in claim payment patterns from those that we assumed in estimating health care costs payable as of December 31, 2024 would cause these estimates to change in the near term, and such a change could be material.

Furthermore, if we are not able to accurately and promptly anticipate and detect medical cost trends or accurately estimate the cost of incurred but not yet reported claims or reported claims that have not been paid, our ability to take timely corrective actions to limit future health care costs and reflect our current benefit cost experience in our pricing process may be limited, which would further exacerbate the extent of any adverse impact on our operating results. These risks are particularly acute during and following periods when utilization of medical and/or other covered services and/or medical cost trends are below recent historical levels and in products where there is significant turnover in our membership each year, and such risks are further magnified by the ACA and other legislation and regulations that limit our ability to price for our projected and/or experienced increases in utilization and/or medical cost trends.

We are exposed to risks relating to the solvency of other insurers.

We are subject to assessments under guaranty fund laws existing in all states for obligations of insolvent insurance companies (including long-term care insurers), HMOs, ACA co-ops and other payors to policyholders and claimants. For example, in the first quarter of 2017, Aetna recorded a discounted estimated liability expense of $231 million pretax for our estimated share of future assessments for long-term care insurer Penn Treaty Network America Insurance Company and one of its subsidiaries. Guaranty funds are maintained by state insurance commissioners to protect policyholders and claimants in the event that an insurer, HMO, ACA co-op and/or other payor becomes insolvent or is unable to meet its financial obligations. These funds are usually financed by assessments against insurers regulated by a state. Future assessments may have an adverse effect on our operating results and cash flows.

The occurrence of natural disasters or extreme weather events, such as hurricanes, tropical storms, floods, wildfires, earthquakes, tsunamis, cyclones, typhoons, extended winter storms, droughts and tornadoes; epidemics, pandemics or disease

outbreaks and other extreme events and man-made disasters, such as nuclear or biological attacks or other acts of violence, such as active shooter situations, whether as a result of war or terrorism or otherwise, can have a material adverse effect on the U.S. economy in general, our industries and us specifically. In particular, the long-term effects of climate change are expected to be widespread and unpredictable. The physical effects of climate change, such as an increase in the frequency or intensity of extreme weather events described above and rising sea levels, could adversely affect our operations, including by increasing our energy costs, disrupting our supply chain, negatively impacting our workforce, damaging our facilities and threatening the habitability of the locations in which we operate. Climate change also presents transition risks, including risks posed by regulatory and technology changes and the associated costs as the economy and our business transitions from reliance on carbon-based energy.

Extreme events or the threat of extreme events could result in significant health care costs, including those associated with behavior health offerings, waiving certain medical requirements or assisting with replacement medications or transfer prescriptions, which could also be affected by the government’s actions and the responsiveness of public health agencies and other insurers. For example, during the COVID-19 pandemic, we waived various member cost sharing and prior authorization requirements and expanded support for our members.

We are dedicated to corporate social responsibility and sustainability and we established certain goals as part of our overall strategy. We face pressures from our colleagues, customers, stockholders and other stakeholders to meet our goals. Achievement of our goals is subject to risks and uncertainties, many of which are outside of our control, and it is possible that we may fail to achieve these goals or that our colleagues, customers, stockholders or other stakeholders may not be satisfied with the goals we set or our efforts to achieve them. These risks and uncertainties include, but are not limited to: our ability to set and execute on our operational strategies and achieve our goals within the currently projected costs and the expected timeframes; the availability and cost of technological advancements, renewable energy and other materials necessary to meet our goals and expectations; compliance with, and changes or additions to, global and regional regulations, taxes, charges, mandates or requirements relating to climate-related goals; labor-related regulations and requirements that restrict or prohibit our ability to impose requirements on third party contractors; the actions of competitors and competitive pressures; and an acquisition of or merger with another company that has not adopted similar goals or whose progress towards reaching its goals is not as advanced as ours. A failure to meet our goals could adversely affect public perception of our business, employee morale or customer or stockholder support.

Further, an increasing percentage of colleagues, customers, stockholders and other stakeholders consider corporate social responsibility and sustainability factors in making employment, consumer health care and investment decisions. If we are unable to meet our goals, we may have difficulty retaining or attracting colleagues, investors, customers, or partners or competing effectively, which would negatively impact our brand and reputation, as well as our business, operating results, and financial condition.

In addition, we could face increased regulatory, reputational and legal scrutiny as a result of our corporate social responsibility and sustainability related commitments and disclosures, and we could also face challenges with managing conflicting regulatory requirements and our various stakeholders’ expectations.

Risks From Changes in Public Policy and Other Legal and Regulatory Risks

We are subject to potential changes in public policy, laws and regulations, including reform of the U.S. health care system and entitlement programs, which could have a material adverse effect on our businesses, operations and/or operating results.

The political environment in which we operate remains uncertain. It is reasonably possible that our business operations and operating results could be materially adversely affected by legislative, enforcement, regulatory and public policy changes at the federal or state level, including, but not limited to: changes to the regulatory environment for health care and related benefits, including Medicare, Medicare Advantage, the ACA, and related Public Exchange regulations; efforts to amend the ACA and related regulations, including through litigation aimed at challenging the ability to enforce portions of the ACA, such as the preventative services mandate; changes to laws or regulations governing drug reimbursement, pricing, purchasing and/or importation; changes to or adoption of laws or regulations governing PBMs, including those related to network restrictions,

formulary management, affiliate reimbursement, contractual guarantees and reconciliations, reimbursement mandates, required reporting, compensation, purchase discount and/or rebate arrangements with drug manufacturers and/or other PBM services; changes to the laws and regulations governing PBMs’, PDPs’ and/or Managed Medicaid organizations’ interactions with government funded health care programs; changes to or adoption of laws and/or regulations relating to claims processing and billing; changes to immigration policies; changes to patent laws; changes with respect to tax and trade policies, tariffs and other government regulations affecting trade between the U.S. and other countries; and other public policy initiatives.

Our businesses, profitability and growth also may be adversely affected by (i) judicial and regulatory decisions that change and/or expand the interpretations of existing statutes and regulations, expand fiduciary obligations, impose medical or bad faith liability, increase our responsibilities under ERISA or the remedies available under ERISA, or reduce the scope of ERISA and Medicare Part D preemption of state law claims or (ii) other legislation and regulations. For example, laws in Arkansas, North Dakota and Oklahoma have attempted to limit PBM practices and have been subject to recent lawsuits. Additional litigation has been filed in several states to challenge ERISA and Medicare Part D preemption.

It is not possible to predict the enactment or content of new legislation or regulations or changes to existing laws or regulations or their enforcement, interpretation or application, or the form they will take (for example, through the use of U.S. Presidential Executive Orders or executive orders by governors or key regulators). If we fail to respond adequately to such changes, including by implementing strategic and operational initiatives, or do not respond as effectively as our competitors, our businesses, operations and operating results may be materially adversely affected. The likelihood of adverse changes remains high due to state and federal budgetary pressures, and our businesses and operating results could be materially and adversely affected by such changes, even if we correctly predict their occurrence.

There is also uncertainty surrounding potential changes to the health care regulatory environment in the U.S. For example, potential efforts to reform federal government processes and reduce expenditures as well as pressures on and uncertainty surrounding the U.S. federal government’s budget and potential changes in budgetary priorities could adversely affect the funding for individual programs, including government programs, upon which our business depends. Executive orders covering health care and other subjects including immigration, AI, energy and the federal work force as well as the work force of public and private companies, if implemented through agency action, may also impact the Company. Potential regulatory changes related to tax, trade, economic and monetary policy and heightened diplomatic tensions or political and civil unrest, among other potential changes, could adversely impact the global economy and our operating results.

If we fail to comply with applicable laws and regulations, many of which are highly complex, we could be subject to significant adverse regulatory actions, including monetary penalties, or suffer brand and reputational harm.

Our businesses are subject to extensive regulation and oversight by state, federal and international governmental authorities. The laws and regulations governing our operations and interpretations of those laws and regulations, including those related to human capital and climate change, are increasing in number and complexity, change frequently and can be inconsistent or conflict with one another. In general, these laws and regulations are designed to benefit and protect customers, members and providers rather than us or our investors. In addition, the governmental authorities that regulate our businesses have broad latitude to make, interpret and enforce the laws and regulations that govern us and continue to interpret and enforce those laws and regulations more strictly and more aggressively each year. We also must follow various restrictions on certain of our businesses and the payment of dividends by certain of our subsidiaries put in place by certain state regulators.

Certain of our Health Services and Pharmacy & Consumer Wellness operations, products and services are subject to:

•the clinical quality, patient safety and other risks inherent in the dispensing, packaging and distribution of drugs and other health care products and services, including claims related to purported dispensing and other operational errors (any failure by our Health Services and/or Pharmacy & Consumer Wellness operations to adhere to the laws and regulations applicable to the dispensing of drugs could subject us to civil and criminal penalties);

•federal and state anti-kickback and other laws that govern our relationship with drug manufacturers, customers and consumers;

•compliance requirements under ERISA, including fiduciary obligations in connection with the development and implementation of items such as drug formularies and preferred drug listings; and

•federal and state legislative proposals and/or regulatory activity that could adversely affect pharmacy benefit industry practices.

Our Health Care Benefits products are highly regulated, particularly those that serve Public Exchange, Medicare, Medicaid, dual eligible, dual eligible special needs and small group Commercial customers and members. The laws and regulations governing participation in the Public Exchanges, Medicare Advantage (including dual eligible special needs plans), Medicare Part D, Medicaid, and Managed Medicaid plans are complex, are subject to interpretation and can expose us to penalties for non-compliance.

The scope of the practices and activities that are prohibited by federal and state false claims acts is the subject of pending litigation. Claims under federal and state false claims acts can be brought by the government or by private individuals on behalf of the government through a qui tam or “whistleblower” suit, and we are a defendant in a number of such proceedings. If we are convicted of fraud or other criminal conduct in the performance of a government program or if there is an adverse decision against us under the False Claims Act, we may be temporarily or permanently suspended from participating in government health care programs, including Public Exchange, Medicare Advantage, Medicare Part D, Medicaid, dual eligible and dual eligible special needs plan programs, and we also may be required to pay significant fines and/or other monetary penalties. Whistleblower suits have resulted in significant settlements between governmental agencies and health care companies. The significant incentives and protections provided to whistleblowers under applicable law increase the risk of whistleblower suits.

If our compliance or other systems and processes fail or are deemed inadequate, we may suffer brand and reputational harm and become subject to contractual damages, regulatory actions and/or litigation.

In order to be eligible to offer certain products or bid on certain contracts, we must demonstrate that we have robust systems and processes in place that are designed to maintain compliance with all applicable legal, regulatory and contractual requirements. These systems and processes frequently are reviewed and audited by our customers and regulators.

We routinely are subject to litigation and other adverse legal proceedings, including class actions and qui tam actions. Many of these proceedings seek substantial damages which may not be covered by insurance. These proceedings are costly to defend, may result in changes in our business practices, harm our brand and reputation and adversely affect our businesses and operating results.

Our businesses are part of highly regulated industries whose participants frequently are subject to litigation and other adverse legal proceedings. We are currently subject to various litigation and arbitration matters, investigations, regulatory audits, inspections, government inquiries, and regulatory and other legal proceedings, both within and outside the U.S. Litigation is increasing as we execute our vertical integration strategy and expand our services along the continuum of health care. In addition, disputes over contracts could lead to litigation or pre-litigation settlements that could materially adversely affect our businesses, operating results and/or cash flows.

Litigation, and particularly securities, derivative, collective or class action and qui tam litigation, is often expensive and disruptive. Many of the legal proceedings against us seek substantial damages (including non-economic or punitive damages

and treble damages), and certain of these proceedings also seek changes in our business practices. While we currently have insurance coverage for some potential liabilities, other potential liabilities may not be covered by insurance, insurers may dispute coverage, and the amount of our insurance may not be enough to cover the damages awarded or costs incurred. In addition, some types of damages, like punitive damages, may not be covered by insurance, and in some jurisdictions the coverage of punitive damages is prohibited. Insurance coverage for all or some forms of liability also may become unavailable or prohibitively expensive in the future.

The outcome of litigation and other adverse legal proceedings is always uncertain, and outcomes that are not justifiable by the evidence or existing law or regulation can and do occur, and the costs incurred frequently are substantial regardless of the outcome. In addition, litigation and other adverse legal proceedings outside the U.S. may be subject to greater uncertainty than

within the U.S. Litigation and other adverse legal proceedings could materially adversely affect our businesses, operating results and/or cash flows because of brand and reputational harm to us, the cost of defending such proceedings, the cost of settlement or judgments against us, or the changes in our operations that could result from such proceedings. See Item 3 of this 10-K for additional information.

We frequently are subject to regular and special governmental audits, investigations and reviews that could result in changes to our business practices and also could result in material refunds, fines, penalties, civil liabilities, criminal liabilities and other sanctions.

As one of the largest national retail, mail order, specialty and LTC pharmacy, PBM and health care and related benefits providers, we frequently are subject to regular and special governmental market conduct and other audits, investigations and reviews by, and we receive subpoenas and other requests for information from, various federal and state agencies, regulatory authorities, Attorneys General, committees, subcommittees and members of the U.S. Congress and other state, federal and international governmental authorities. For example, we have received CIDs from, and provided documents and information to, the Civil Division of the DOJ in connection with a current investigation of our patient chart review processes in connection with risk adjustment data submissions under Parts C and D of the Medicare program. We are also receiving an increasing number of audits related to our PBM network reconciliation processes, and audits related to our use of prior authorization, which could result in reputational risks and changes to policies that may limit our use of prior authorization. The results of any audit may be adverse to us.

Federal and state governments have made investigating and prosecuting health care and other insurance fraud, waste and abuse a priority. Fraud, waste and abuse prohibitions encompass a wide range of activities, including kickbacks for referral of members, billing for unnecessary medical and/or other covered services, improper marketing, including by insurance brokers, and violations of patient privacy rights. The regulations and contractual requirements applicable to us and other industry participants are complex and subject to change, making it necessary for us to invest significant resources in complying with our regulatory and contractual requirements. Ongoing vigorous law enforcement and the highly technical regulatory scheme mean that our compliance efforts in this area will continue to require significant resources. In addition, our medical costs and the medical expenses of our Health Care Benefits ASC customers may be adversely affected if we do not prevent or detect fraudulent activity by providers and/or members.

Regular and special governmental audits, investigations and reviews by federal, state and international regulators could result in changes to our business practices, and also could result in significant or material premium refunds, fines, penalties, civil liabilities, criminal liabilities or other sanctions, including suspension or exclusion from participation in government programs and suspension or loss of licensure. Any of these audits, investigations or reviews could have a material adverse effect on our businesses, operating results, cash flows and/or financial condition or result in significant liabilities and negative publicity for us.

See “Legal and Regulatory Proceedings” in Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K for additional information.

Historically, we focused primarily on providing products and services within our Health Care Benefits and Pharmacy & Consumer Wellness segments, as well as pharmacy services within our Health Services segment. As a result of our vertical integration strategy and other innovation initiatives, we are expanding our presence in the health care space and plan to offer new products and services, including services provided by Oak Street Health and Signify Health businesses, which present a

different risk profile than the products and services that we historically have offered and increase our exposure to additional risks. Our vertical integration strategy may also lead to increased regulatory and public scrutiny as a result of consumer protection and quality of care concerns.

We face unique regulatory and other challenges in our Medicare and Medicaid businesses.

•In April 2024, CMS issued its final notice detailing final 2025 Medicare Advantage payment rates. Based on CMS’ notice, Medicare Advantage rates resulted in an expected average increase in revenue for the Medicare Advantage industry of 3.70%, which includes a risk score trend increase of 3.86%. Risk scores vary among Medicare Advantage plans depending on the specific population served, so this increase does not represent an actual guaranteed payment increase. Without including the risk score trend increase, the 2025 rates result in an expected average decrease in revenue for the Medicare Advantage industry of 0.16%, though the rates may vary widely depending on the provider group and patient demographics. On January 10, 2025, CMS issued an advance notice detailing proposed 2026 Medicare Advantage payment rates. Without including the risk score trend increase, the advance 2026 rates will result in an expected average increase in revenue for the Medicare Advantage industry of 2.23%, though the rates may vary widely depending on the provider group and patient demographics. We cannot predict how the rates will be finalized, future Medicare funding levels, the impact of future federal budget actions or ensure that such changes or actions will not have a material adverse effect on our Medicare operating results.

•The organic expansion of our Medicare Advantage and Medicare Part D service area is subject to the ability of CMS to process our requests for service area expansions and our ability to build cost competitive provider networks in the expanded service areas that meet applicable network adequacy requirements. CMS’ decisions on our requests for service area expansions also may be affected adversely by compliance issues that arise each year in our Medicare operations.

•CMS regularly audits our performance to determine our compliance with CMS’s regulations and our contracts with CMS and to assess the quality of the services we provide to our Medicare members, and state regulators are increasingly conducting audits to assess the quality of services we provide to our Medicaid members. As a result of these audits, we may be subject to significant or material retroactive adjustments to and/or withholding of certain premiums and fees, fines, criminal liability, civil monetary penalties, CMS- or state-imposed sanctions (including suspension or exclusion from participation in government programs) or other restrictions on our Medicare, Medicaid and other businesses, including suspension or loss of licensure.

•“Star ratings” from CMS for our Medicare Advantage plans will continue to have a significant effect on our plans’ operating results. Only Medicare Advantage plans with a star rating of 4 or higher (out of 5) are eligible for a quality bonus in their basic premium rates. Based on the 2024 ratings, 88% of the Company’s Medicare Advantage members are in 2025 Medicare Advantage plans that are rated 4 stars or higher. CMS also gives PDPs star ratings that affect each PDP’s enrollment. The Company’s PDP plans were rated 3.5 stars for 2025. Medicare Advantage and PDP plans that are rated less than 3 stars for three consecutive years are subject to contract termination by CMS. CMS continues to change its rating system to make achieving and maintaining a four or higher star rating more difficult. If our star ratings fall or remain below four for a significant portion of our Medicare Advantage membership, or do not match the performance of our competitors, or the star rating quality bonuses are reduced or eliminated, our revenues, operating results and cash flows may be significantly adversely affected. In addition, due to uncertainties with CMS cut-points, no Medicare Advantage plan can guarantee their overall star ratings. There can be no assurances that the Company will be successful in maintaining or improving its star ratings in future years.

•Payments we receive from CMS for our Medicare Advantage and Medicare Part D businesses also are subject to risk adjustment based on the health status of the individuals we enroll. Elements of that risk adjustment mechanism continue to be challenged by the DOJ, the OIG and CMS itself. For example, CMS made significant changes to the structure of the hierarchical condition category model in version 28, which may impact RAF scores for a larger percentage of Medicare Advantage beneficiaries and could result in changes to beneficiary RAF scores with or without a change in the patient’s health status. CMS continuously evaluates how and where risk adjustment is captured, which from time-to-time has included the capture of diagnosis codes in home visits. A legislative or regulatory change to the ability of Medicare Advantage plans to use home visits as a means to evaluate and diagnosis their members’ health conditions, or substantial changes in the risk adjustment mechanism, including those that result from the final Part C contract-level Risk Adjustment

Data Validation Audits (“RADV Audit Rule”) issued in January 2023 or other changes that may result from enforcement or audit actions, could: materially affect the amount of our Medicare reimbursement, require us to raise prices or reduce the benefits we offer to Medicare beneficiaries, impact the services provided by, or the financial performance of, Oak Street Health and Signify Health and potentially limit our (and the industry’s) participation in the Medicare program.

•The RADV Audit Rule creates uncertainty for Medicare Advantage plans. The RADV Audit Rule also permits extrapolation of OIG contract level audits for payment years 2018 forward. The RADV Audit Rule is subject to ongoing litigation and the outcome and future impacts are uncertain.

•Medicare Part D has resulted in increased utilization of prescription medications and puts pressure on our pharmacy gross margin rates due to regulatory and competitive pressures. Further, as a result of the ACA and changes to the retiree drug subsidy rules, clients of our PBM business could decide to discontinue providing prescription drug benefits to their Medicare-eligible members. To the extent this phenomenon occurs, the adverse effects of increasing customer migration into Medicare Part D may outweigh the benefits we realize from growth of our Medicare Part D products.

•Our Medicare Part D operating results and our ability to expand our Medicare Part D business could be adversely affected if: the cost and complexity of Medicare Part D exceed management’s expectations or prevent effective program implementation or administration; further changes to the regulations regarding how drug costs are reported for Medicare Part D (including changes related to the IRA) are implemented in a manner that adversely affects the profitability of our Medicare Part D business; changes to the regulations regarding how drug costs are reported for Medicare Part D are implemented in a manner that adversely affects the profitability of our Medicare Part D business; changes to the applicable regulations impact our ability to retain fees from third parties including network pharmacies; the government alters Medicare Part D program requirements or reduces funding because of the higher-than-anticipated cost to taxpayers of Medicare Part D or for other reasons; or reinsurance thresholds are reduced.

•The IRA contains significant changes to the Part D program that began in 2023 and will continue to 2032 that shifts more of the claim liability to plans and away from the government, including a complete redesign of the Part D standard benefit effective in 2025.

•We have experienced challenges in obtaining complete and accurate encounter data for our Medicaid products due to difficulties with providers and third-party vendors submitting claims in a timely fashion in the proper format, and with state agencies in coordinating such submissions. As states increase their reliance on encounter data, and some states mandate that certain amounts be included or excluded from encounter data, these difficulties could affect the Medicaid premium rates we receive and how Medicaid membership is assigned to us, which could have a material adverse effect on our Medicaid operating results and cash flows and/or our ability to bid for, and continue to participate in, certain Medicaid programs.

•If we fail to report and correct errors discovered through our own auditing procedures or during a CMS audit or otherwise fail to comply with the applicable laws and regulations, we could be subject to fines, civil monetary penalties or other sanctions, including fines and penalties under the False Claims Act, which could have a material adverse effect on our ability to participate in Medicare Advantage, Medicare Part D or other government programs, and on our operating results, cash flows and financial condition.

•The resumption of Medicaid eligibility redeterminations after being suspended during the COVID-19 pandemic has negatively impacted the number of members eligible for the Company’s Medicaid plans, which could impact our operating results and cash flows from the Medicaid business.

•Certain of our Medicaid contracts require the submission of complete and correct encounter data. The accurate and timely reporting of encounter data is increasingly important to the success of our Medicaid programs because more states are using encounter data to determine compliance with performance standards and, in part, to set premium rates. We have expended and may continue to expend additional effort and incur significant additional costs to collect accurate, or to correct inaccurate or incomplete, encounter data and have been and could be exposed to premium withholding, operating sanctions and financial fines and penalties for noncompliance.

•CMS has proposed requiring that health plans offering certain dual eligible programs must also offer Medicaid programs, which could further impact the Company’s ability to obtain or retain membership in its dual eligible programs.

Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues, and we expect that percentage to increase.

Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues, and we expect that percentage to increase. As our government funded businesses grow, our exposure to changes in federal and state government policy with respect to and/or regulation of the various government funded programs in which we participate also increases.

The laws and regulations governing participation in Public Exchange, Medicare Advantage (including dual eligible special needs plans), Medicare Part D, Medicaid, and Managed Medicaid plans are complex, are subject to interpretation and can expose us to penalties for non-compliance. Federal, state and local governments have the right to cancel or not to renew their contracts with us on short notice without cause or if funds are not available. Funding for these programs is dependent on many factors outside our control, including general economic conditions, continuing government efforts to contain health care costs and budgetary constraints at the federal or applicable state or local level and general political issues and priorities.

The U.S. federal government and our other government customers also may reduce funding for health care or other programs, cancel or decline to renew contracts with us, or make changes that adversely affect the number of persons eligible for certain programs, the services provided to enrollees in such programs, our premiums and our administrative and health care and other benefit costs, any of which could have a material adverse effect on our businesses, operating results and cash flows. When federal funding is delayed, suspended or curtailed, we continue to receive, and we remain liable for and are required to fund, claims from providers for providing services to beneficiaries of federally funded health benefits programs in which we participate. An extended federal government shutdown or a delay by Congress in raising the federal government’s debt ceiling also could lead to a delay, reduction, suspension or cancellation of federal government spending and a significant increase in interest rates that could, in turn, have a material adverse effect on the value of our investment portfolio, our ability to access the capital markets and our businesses, operating results, cash flows and liquidity.

Possible changes in industry pricing benchmarks and drug pricing generally can adversely affect our PBM and Pharmacy & Consumer Wellness businesses.

It is possible that the pharmaceutical industry, regulators, or federal policymakers may evaluate and/or develop an alternative pricing reference to replace AWP or WAC, which are the pricing references used for many of our PBM and LTC client contracts, drug purchase agreements, retail network contracts, specialty payor agreements and other contracts with third party payors in connection with the reimbursement of drug payments. In addition, many state Medicaid fee-for-service programs have established pharmacy network payments on the basis of Actual Acquisition Cost (“AAC”). The use of an AAC basis in fee for service Medicaid could have an impact on reimbursement practices in Health Care Benefits’ Commercial and other Government products. It is also possible that Congress may enact some limited form of price negotiation for Medicare.

Future changes to the use of AWP, WAC or to other published pricing benchmarks used to establish drug pricing, including changes in the basis for calculating reimbursement by federal and state health care programs and/or other payors, could impact the reimbursement we receive from Medicare and Medicaid programs, the reimbursement we receive from our PBM clients and other payors and/or our ability to negotiate rebates and/or discounts with drug manufacturers, wholesalers, PBMs and retail pharmacies. A failure or inability to fully offset any increased prices or costs or to modify our operations to mitigate the impact of such increases could have a material adverse effect on our operating results. Additionally, any future changes in drug prices could be significantly different than our projections. We cannot predict the effect of these possible changes on our businesses.

We may not be able to obtain adequate premium rate increases in our Insured Health Care Benefits products, which would have an adverse effect on our revenues, MBRs and operating results and could magnify the adverse impact of increases in health care and other benefit costs and of ACA assessments, fees and taxes.

Premium rates for our Insured Health Care Benefits products often must be filed with state insurance regulators and are subject to their approval, which creates risk for us in the current political and regulatory environment. The ACA generally requires a review by HHS in conjunction with state regulators of premium rate increases that exceed a federally specified threshold (or lower state-specific thresholds set by states determined by HHS to have adequate processes). Rate reviews can magnify the adverse impact on our operating margins, MBRs and operating results of increases in health care and other benefit costs, increased utilization of covered services, and ACA assessments, fees and taxes, by restricting our ability to reflect these increases and/or these assessments, fees and taxes in our pricing. Further, our ability to reflect ACA assessments, fees and taxes in our Medicare, Medicaid and CHIP premium rates is limited.

Since 2013, HHS has issued determinations to health plans that their premium rate increases were “unreasonable,” and we may experience challenges to appropriate premium rate increases in certain states. Regulators or legislatures in several states have implemented or are considering limits on premium rate increases, either by enforcing existing legal requirements more stringently or proposing different regulatory standards. Regulators or legislatures in several states also have conducted hearings on proposed premium rate increases, which can result, and in some instances have resulted, in substantial delays in implementing proposed rate increases even if they ultimately are approved. Our plans can be excluded from participating in small group Public Exchanges if they are deemed to have a history of “unreasonable” rate increases. Any significant rate increases we may request heighten the risks of adverse publicity, adverse regulatory action and adverse selection and the likelihood that our requested premium rate increases will be denied, reduced or delayed, which could lead to operating margin compression.

We anticipate continued regulatory and legislative action to increase regulation of premium rates in our Insured Health Care Benefits products. We may not be able to obtain rates that are actuarially justified or that are sufficient to make our policies profitable in one or more product lines or geographies. If we are unable to obtain adequate premium rates and/or premium rate increases, it could materially and adversely affect our operating margins and MBRs and our ability to earn adequate returns on Insured Health Care Benefits products in one or more states or cause us to withdraw from certain geographies and/or products.

Minimum MLR rebate requirements limit the level of margin we can earn in our Insured Health Care Benefits products while leaving us exposed to higher than expected medical costs. Challenges to our minimum MLR rebate methodology and/or reports could adversely affect our operating results.

The ACA’s minimum MLR rebate requirements limit the level of margin we can earn in Health Care Benefits’ Commercial Insured business. CMS and state minimum MLR rebate regulations limit the level of margin we can earn in our Medicare Advantage and Medicaid Insured businesses. Certain portions of our Health Care Benefits Medicaid and FEHB program business also are subject to minimum MLR rebate requirements in addition to but separate from those imposed by the ACA. Minimum MLR rebate requirements leave us exposed to medical costs that are higher than those reflected in our pricing. The process supporting the management and determination of the amount of MLR rebates payable is complex and requires judgment, and the minimum MLR reporting requirements are detailed. CMS has also proposed, but not yet finalized, a definition of “prescription drug price concessions” for commercial MLR calculation purposes, which would make additional PBM information available to plans and the HHS, potentially further complicating the MLR calculation process. Federal and state auditors are challenging our Commercial Health Care Benefits business’ compliance with the ACA’s minimum MLR requirements as well as our FEHB plans’ compliance with OPM’s FEHB program-specific minimum MLR requirements. Our Medicare and Medicaid contracts also are subject to minimum MLR audits. If a Medicare Advantage or Medicare Part D contract pays minimum MLR rebates for three consecutive years, it will become ineligible to enroll new members. If a Medicare Advantage or Medicare Part D contract pays such rebates for five consecutive years, it will be terminated by CMS. Additional challenges to our methodology and/or reports relating to minimum MLR and related rebates by federal and state regulators and private litigants are reasonably possible. The outcome of these audits and additional challenges could adversely affect our operating results.

Our operating results may be adversely affected by changes in laws and policies governing employers and by union organizing activity.

Congress and certain state legislatures continue to consider and pass legislation that increases our costs of doing business, including increased minimum wages and requiring employers to provide paid sick leave or paid family leave. In addition, our employee-related operating costs may be increased by union organizing activity and it is possible that the National Labor Relations Board may adopt regulatory changes through re-making or case law that could facilitate union organizing. If we are unable to reflect these increased expenses in our pricing or otherwise modify our operations to mitigate the effects of such increases, our operating results will be adversely affected.

We face international political, legal and compliance, operational, regulatory, economic and other risks that may be more significant than in our domestic operations.

We are in the process of winding down our international insurance operations in 2025. However, our remaining international operations present political, legal, compliance, operational, regulatory, economic and other risks that we do not face or that are more significant than in our domestic operations. These risks vary widely by country and include varying regional and geopolitical business conditions and demands, government intervention and censorship, discriminatory regulation, climate change regulation, nationalization or expropriation of assets and pricing constraints. Our international operations need to meet country-specific legal requirements, including those related to licensing, data privacy, data storage and data protection.

Our international operations increase our exposure to, and require us to devote significant management resources to implement controls and systems to comply with, the privacy and data protection laws of non-U.S. jurisdictions, such as the EU’s GDPR, and the anti-bribery, anti-corruption and anti-money laundering laws of the U.S. (including the FCPA) and the United Kingdom (including the UK Bribery Act) and similar laws in other jurisdictions. Implementing our compliance policies, internal controls and other systems may also require the investment of considerable management time and financial and other resources. Violations of these laws and regulations could result in fines, criminal sanctions against us, our officers or employees, restrictions or outright prohibitions on the conduct of our business, and significant brand and reputational harm. We must regularly reassess the size, capability and location of our global infrastructure and make appropriate changes, and must have effective change management processes and internal controls in place to address changes in our businesses and operations. Our success depends, in part, on our ability to anticipate these risks and manage these difficulties, and the failure to do so could have a material adverse effect on our brand, reputation, businesses, operating results and/or financial condition.

Our international operations require us to overcome logistical and other challenges based on differing languages, cultures, legal and regulatory schemes and time zones. Our international operations encounter labor laws, standards and customs that can be difficult and make employee relationships less flexible than in our domestic operations and expensive to modify or terminate. In some countries we are required to, or choose to, operate with local business associates, which requires us to manage our relationships with these third parties and may reduce our operational flexibility and ability to quickly respond to business challenges.

In some countries we may be exposed to currency exchange controls or other restrictions that prevent us from transferring funds internationally or converting local currencies into U.S. dollars or other currencies. Fluctuations in foreign currency exchange rates may adversely affect our revenues, operating results and cash flows from our international operations. Some of our operations are, and are increasingly likely to be, in emerging markets where these risks are heightened. Any measures we may implement to reduce the effect of volatile currencies and other risks on our international operations may not be effective.

Risks Associated with Mergers, Acquisitions, and Divestitures

We may be unable to successfully integrate companies we acquire.

Upon the closing of any acquisition, we need to successfully integrate the products, services and related assets, as well as internal controls into our business operations. If an acquisition is consummated, the integration of the acquired business, its products, services and related assets into our company also may be complex, expensive, and time-consuming and, if the integration is not fully successful, we may not achieve the anticipated benefits, operating and cost synergies and/or growth opportunities of an acquisition. Potential difficulties that may be encountered in the integration process include the following:

•Integrating personnel, operations and systems (including internal control environments and compliance policies), while maintaining focus on producing and delivering consistent, high quality products and services;

•Coordinating geographically dispersed organizations;

•Distracting management’s attention from our ongoing business operations;

•Retaining existing customers and attracting new customers;

•Managing inefficiencies associated with integrating our operations; and

•Reconciling post-acquisition costs and liabilities between buyer and seller.

Furthermore, acquisitions, even if successfully integrated, may fail to further our business strategy as anticipated, expose us to increased competition or challenges with respect to our products, services or service areas, and expose us to additional liabilities associated with an acquired business including risks and liabilities associated with litigation involving the acquired business. Any one of these challenges or risks could impair our ability to realize any benefit from our acquisitions after we have expended resources on them.

We may pursue acquisitions, joint ventures, strategic alliances and other inorganic growth opportunities, as well as strategic divestitures, as part of our business strategy. In addition to the integration risks noted above, some other risks we may face with respect to acquisitions and other inorganic growth strategies include:

•we may not be able to obtain the required regulatory approval for an acquisition in a timely manner, if at all;

•we frequently compete with other firms, some of which may have greater financial and other resources and a greater tolerance for risk, to acquire attractive companies;

•the acquired, alliance and/or joint venture businesses may not perform as projected;

•the goodwill or other intangible assets established as a result of our acquisitions may be incorrectly valued or may become impaired;

•we may assume unanticipated liabilities, including those that were not disclosed to us or which we underestimated;

•the acquired businesses, or the pursuit of other inorganic growth strategies, could disrupt or compete with our existing businesses, distract management, result in the loss of key employees, business partners, suppliers and customers, divert resources, result in tax costs or inefficiencies and make it difficult to maintain our current business standards, controls, information technology systems, policies, procedures and performance;

•we may finance future acquisitions and other inorganic growth strategies by issuing common stock for some or all of the purchase price, which would dilute the ownership interests of our stockholders;

•we may incur significant debt in connection with acquisitions (whether to finance acquisitions or by assuming debt from the businesses we acquire);

•a proposed or pending transaction may have a negative effect on the Company’s credit ratings;

•we may not have the expertise to manage and profitably grow the businesses we acquire, and we may need to rely on the retention of key personnel and other suppliers of businesses we acquire, which may be difficult or impossible to accomplish;

•we may enter into merger or purchase agreements but, due to reasons within or outside our control, fail to complete the related transactions, which could result in termination fees or other penalties that could be material, cause material disruptions to our businesses and operations and adversely affect our brand, reputation, or stock price;

•in order to complete an acquisition, we may be required to divest certain portions of our business, for which we may not be able to obtain favorable pricing;

•we may be involved in litigation related to mergers or acquisitions, including for matters that occurred prior to the applicable closing, which may be costly to defend and may result in adverse rulings against us that could be material;

•announcements related to an acquisition could have an adverse effect on the market price of the Company’s common stock and other securities; and

•the integration into our businesses of the businesses and entities we acquire may affect the way in which existing laws and regulations apply to us, including subjecting us to laws and regulations that did not previously apply to us.

Similarly, we may also seek to divest assets that no longer fit into our long-term strategic plan. In addition, joint ventures present risks that are different from acquisitions, including selection of appropriate joint venture parties, initial and ongoing governance of the joint venture, joint venture compliance activities (including compliance with applicable CMS requirements), growing the joint venture’s business in a manner acceptable to all the parties, including other providers in the networks that include joint ventures, maintaining positive relationships among the joint venture parties and the joint venture’s customers, and member and business disruption that may occur upon joint venture termination.

Risks Related to Our Operations

Failure to meet customer expectations may harm our brand and reputation, our ability to retain and grow our customer base and membership and our operating results and cash flows.

As we seek to reduce general and administrative expenses, we must balance the potential impact of cost-saving measures on our customers and other services and performances. If we misjudge the effects of such measures, customers and other services may be adversely affected. We depend

on third parties for certain of our customer service, PBM and prescription delivery operations. For example, noncompliance with any privacy or security laws or regulations or any security breach involving us or one of our third-party vendors could have a material adverse effect on our businesses, operating results, brand and reputation.

We and our vendors have experienced and continue to experience cyberattacks. We can provide no assurance that we or our vendors will be able to detect, prevent or contain the effects of such attacks or other information security (including cybersecurity) risks or threats in the future.

As examples, the Company and its vendors have experienced attempts to gain access to systems, denial of service attacks, attempted malware infections, account takeovers, scanning activity, and phishing emails. We have also seen an increase in ransomware attacks in our industry. Attacks can originate from external sources (including criminals, terrorists and nation states) or internal actors. The Company is dedicating and will continue to dedicate significant resources and incur significant expenses to maintain and update on an ongoing basis the systems and processes that are designed to mitigate the information security risks it faces and protect the security of its computer systems, software, networks and other technology assets against attempts by unauthorized parties to obtain access to confidential information, disrupt or degrade service, or cause other damage. The impact of known cyberattacks has not been material to the Company’s operations or operating results through December 31, 2024. The Board is regularly informed regarding the Company’s information security policies, practices and status.

A compromise of our information security controls or of those third parties with whom we interact, which results in business disruption or confidential information being accessed, obtained, damaged, or used by unauthorized or improper persons, could harm our reputation and expose us to regulatory actions and claims from customers and clients, financial institutions, payment card associations and other persons, any of which could adversely affect our businesses, operating results and financial condition. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and may not immediately produce signs of intrusion, we may be unable to anticipate these techniques or to implement adequate preventative measures. We also could be adversely affected by any significant disruption in the systems of third parties we interact with, including key payors and vendors.

Large scale data breaches at other entities increase the challenge we and our vendors face in maintaining the security of our information technology systems and proprietary information and of our customers’, employees’, members’ and other constituents’ personal information. Following an information security incident, our and/or our vendors’ remediation efforts may not be successful, and could result in interruptions, delays or cessation of service, and loss of existing or potential customers and members.

See Item 1C of this 10-K, “Cybersecurity,” for more information on the Company’s cybersecurity risk management and governance.

Data governance failures can adversely affect our reputation, businesses and prospects.

Our information systems are critical to the operation of our businesses. Some of our information systems rely upon third party systems, including cloud service providers, to accomplish these tasks. The use and disclosure of such information is regulated at the federal, state and international levels. In some cases, such laws, rules and regulations also apply to our vendors and/or may hold us liable for any violations by our vendors. These laws, rules and regulations are subject to change (and many are rapidly evolving) and in recent

years have given rise to increased enforcement activity, litigation, and other disputes. For example, certain of our vendors have experienced incidents that resulted in the unauthorized disclosure of confidential information, including personal information of our members, patients or employees, which has caused us to incur expenses including those related to responding to regulatory inquiries and/or litigation. Some of these expenses are indemnified but others are not. International laws, rules and regulations governing the use and disclosure of these types of information are generally more stringent than U.S. laws and regulations, and they vary from jurisdiction to jurisdiction.

Our businesses depend on our customers’, members’ and other constituents’ willingness to entrust us with their health related and other personal information. There can be no assurance that awe have or will be able to adequately prevent, detect, and/or remediate such data security incidents.

Our information systems are subject to damage or interruption from power outages, facility damage, computer and telecommunications failures, computer viruses, security breaches (including credit card or personally identifiable information breaches), cyberattacks, vandalism, catastrophic events and human error. If our information systems are damaged, fail to work properly or otherwise become unavailable, we may incur substantial costs to repair or replace them, and may experience reputational damage, loss of critical information, customer disruption and interruptions or delays in our ability to perform essential functions and implement new and innovative services. We use third-party vendors to set-up, service, and/or maintain portions of our information technology systems, and our vendors may suffer the same types of issues, which could adversely affect our ability to access and use such systems and the data contained therein, which could result in similar harm. In addition, our efforts to comply with changes in U.S. and foreign laws and regulations, including privacy and information security laws and standards, may cause us to incur significant expense due to increased investment in technology and the development of new operational processes.

Our business success and operating results depend in part on effective information technology systems and on continuing to develop and implement improvements in technology. Pursuing multiple initiatives simultaneously could make this continued development and implementation significantly more challenging.

Many aspects of our operations are dependent on our information systems and the information collected, processed, stored and handled by these systems. Throughout our operations, we collect, process, maintain, retain, evaluate, utilize and distribute large amounts of confidential and sensitive data and information, including personally identifiable information and protected health information, that our customers, employees, members and other constituents provide to purchase products or services, enroll in programs or services, register on our websites, interact with our personnel, or otherwise communicate with us. For these operations, we depend in part on the secure transmission of confidential information over public networks.

Our businesses depend in large part on these systems to adequately price our

products and services; accurately establish reserves, process claims and report operating results; and interact with providers, employer plan sponsors, customers, members, consumers and vendors in an efficient and uninterrupted fashion. In addition, recent trends toward greater consumer engagement in health care require new and enhanced technologies, including more sophisticated applications for mobile devices. Certain of our technology systems (including software) are older, legacy systems that are less flexible, less efficient and require a significant ongoing commitment of capital and human resources to maintain, protect and enhance them and to integrate them with our other systems. We must re-engineer and reduce the number of these older, legacy systems to meet changing consumer and vendor preferences and needs, improve our productivity and reduce our operating expenses, and acquired systems may need significant investment in order to meet the ongoing needs of the larger Company. If we fail to achieve these objectives, our ability to profitably grow our business and/or our operating results may be adversely affected.

In addition, information technology and other technology and process improvement projects, including our transformation and enterprise modernization programs, frequently are long-term in nature and may take longer to complete and cost more than we expect and may not deliver the benefits we project once they are complete. If we do not effectively and efficiently secure, manage, integrate and enhance our technology portfolio (including vendor sourced systems), we could, among other things, have problems determining health care and other benefit cost estimates and/or establishing appropriate pricing, meeting the needs of customers, consumers, providers, members and vendors, developing and expanding our consumer-oriented products and services or keeping pace with industry and regulatory standards, and our operating results may be adversely affected.

The products that we sell could become subject to contamination, product tampering, mislabeling, recall or other damage. In addition, errors in the dispensing, packaging or administration of drugs or other products and consuming drugs in a manner that is not prescribed could lead to serious injury or death. Product liability or personal injury claims may be asserted against us with respect to any of the drugs or other products we sell or services we provide. For example, we are a defendant in hundreds of litigation proceedings relating to opioids and the sale of products containing talc. Should a product or other liability issue arise, the coverage available under our insurance programs and the indemnification amounts available to us from third parties may not be adequate to protect us against the financial impact of the related claims. We also may not be able to maintain our existing levels of insurance on acceptable terms in the future. Any of the issues discussed above could damage our brand and reputation and have a significant adverse effect on our businesses, operating results and/or financial condition.

We face significant competition in attracting and retaining talented employees. Further, managing succession for, and retention of, key executives is critical to our success, and our failure to do so could adversely affect our businesses, operating results and/or future performance.

Our ability to attract and retain qualified and experienced employees is essential to meet our current and future goals and objectives. There is no guarantee we will be able to attract and retain such employees or that competition among potential employers will not result in increased compensation and/or benefits costs. If we are unable to retain existing employees or attract additional employees, or we experience an unexpected loss of leadership, we could experience a material adverse effect on our businesses, operating results and/or future performance.

In addition, our failure to adequately plan for succession of senior management and other key management roles or the failure of key employees to successfully transition into new roles could have a material adverse effect on our businesses, operating results and/or future performance. The succession plans we have in place and our employment arrangements with certain key executives do not guarantee the services of these executives will continue to be available to us.

Sales of our products and services are dependent on our ability to attract and motivate internal sales personnel and independent third-party brokers, consultants and agents. New distribution channels create new disintermediation risk. We may be subject to penalties or other regulatory actions as a result of the marketing practices of brokers and agents selling our products.

Our products are sold primarily through our sales personnel, who frequently work with independent brokers, consultants and agents who assist in the marketing, production and servicing of business. The independent brokers, consultants and agents generally are not exclusively dedicated to us and may frequently recommend and/or market health care benefits products of our competitors. Our sales could be adversely affected if we are unable to attract, retain or motivate sales personnel and third-party brokers, consultants and agents, or if we do not adequately provide support, training and education to this sales network regarding our complex product portfolio, or if our sales strategy is not appropriately aligned across distribution channels. This risk is heightened as we develop, operate and expand our consumer-oriented products and services and we expand in the health care space and our business model evolves to include a greater focus on consumers and direct-to-consumer sales, such as competing for sales on Insurance Exchanges.

New distribution channels for our products and services continue to emerge, including Private Exchanges operated by health care consultants and technology companies. These channels may make it more difficult for us to directly engage consumers and other customers in the selection and management of their health care benefits, in health care utilization and in the effective navigation of the health care system. We also may be challenged by new technologies and marketplace entrants that could interfere with our existing relationships with customers and health plan members in these areas.

In addition, there have been several investigations regarding the marketing practices of brokers and agents selling health care and other insurance products and the payments they receive. These investigations have resulted in enforcement actions against companies in our industry and brokers and agents marketing and selling those companies’ products. These investigations and enforcement actions could result in penalties and the imposition of corrective action plans and/or changes to industry practices, which could adversely affect our ability to market our products.

Specifically, CMS, U.S. Congressional committees and state departments of insurance have each increased scrutiny of the marketing practices of brokers and agents who market Medicare products and of the Medicare Advantage organizations that use these organizations to market their products. CMS, other federal agencies or U.S. Congress may also recommend changes or take additional action with respect to the way in which brokers and agents are compensated for selling our Medicare Advantage and Part D plans. For example, CMS finalized new requirements imposing limitations on the amounts and types of payments that brokers can earn for marketing and enrollment services with respect to Medicare Advantage and Part D plans. While these new requirements are currently subject to an injunction, if the injunction is lifted or CMS attempts to impose restrictions on broker and agent compensation in the future, we will need to comply with the new restrictions. In addition, the IRA contains changes to the Part D program that began in 2023 and will continue through 2032 that will shift more of the claim liability to plans and away from the government.

Failure of our businesses to effectively collaborate could prevent us from maximizing our operating results.

To maximize our overall enterprise value, our various businesses need to collaborate effectively. In addition, misaligned incentives, information siloes, ineffective product development and failure of our corporate governance policies or procedures, for example significant financial decisions being made at an inappropriate level in our organization, also could prevent us from maximizing our operating results and/or achieving our financial and other projections.

We are subject to payment-related risks that could increase our operating costs, expose us to fraud or theft, subject us to new rules and other requirements and potential liability and may disrupt our business operations.

Acceptance of these payment methods subjects us to rules, regulations, contractual obligations and compliance requirements, including payment network rules and operating guidelines, data security standards and certification requirements, and rules and regulatory requirements governing these payment methods. These requirements may change in the future, which could make compliance more difficult or costly. For certain payment options, including credit and debit cards, we pay interchange and other fees, which could increase periodically thereby raising our operating costs. We rely on third parties to provide payment processing services, including the processing of credit cards, debit cards, and various other forms of electronic payment we currently use or adopt in the future. If these vendors are unable to provide these services to us, or if their systems are compromised, our operations could be disrupted. The payment methods that we offer also expose us to potential fraud and theft by persons seeking to obtain unauthorized access to, or exploit any weaknesses in, the payment systems we use. If we fail to abide by applicable rules or requirements, or if data relating to our payment systems is compromised due to a breach or misuse, we may be responsible for any costs incurred by payment card issuing banks and other third parties or subject to fines and

higher transaction fees. In addition, our reputation and ability to accept certain types of payments could each be harmed resulting in reduced sales and adverse effects on our operating results.

Both our and our vendors’ operations are subject to a variety of business continuity hazards and risks, any of which could interrupt our operations or otherwise adversely affect our performance and operating results.

The occurrence of any of these or other events to us or our vendors might disrupt or shut down our operations or otherwise adversely affect our operations. We also may be subject to certain liability claims in the event of an injury or loss of life, or damage to property, resulting from such events. Should any such hazards or risks occur, or should our insurance coverage be inadequate or unavailable, our businesses, operating results, cash flows and financial condition could be adversely affected.

Financial Risks

We would be adversely affected if we do not effectively deploy our capital. Downgrades or potential downgrades in our credit ratings, should they occur, could adversely affect our brand and reputation, businesses, operating results, cash flows and financial condition.

Our operations generate significant capital, and we may from time to time raise additional capital, subject to market conditions. The manner in which we deploy our capital, including investments in our businesses, our operations (such as information technology and other strategic and capital projects), dividends, acquisitions, share and/or debt repurchases, repayment of debt, reinsurance or other capital uses, impacts our financial strength, claims paying ability and credit ratings issued by nationally-recognized statistical rating organizations. Credit ratings issued by nationally-recognized statistical rating organizations are broadly distributed and generally used throughout our industries. Our ratings reflect each rating organization’s opinion of our financial strength, operating performance and ability to meet our debt obligations or obligations to our insureds. We believe our credit ratings and the financial strength and claims paying ability of our principal insurance and HMO subsidiaries are important factors in marketing our Health Care Benefits products to certain of our customers.

The Company’s long-term debt ratings are currently investment grade, though each of the ratings organizations reviews our ratings periodically and there can be no assurance that our current ratings will be maintained in the future. In August 2024, Moody’s Investor Service, Inc. (“Moody’s”) and Standard & Poor’s Financial Services LLC (“S&P”) changed their outlook on the Company’s long-term debt from “Stable” to “Negative.” In October 2024, Moody’s placed the Company’s long-term debt ratings and the Company’s commercial paper program on review for downgrade. Subsequently, in December 2024, Moody’s downgraded the Company’s long-term debt rating to “Baa3” and the Company’s commercial paper rating to “P3” and changed their outlook on the Company to “Stable”. In December 2024, Fitch Ratings Inc. (“Fitch”) initiated ratings coverage on the Company and assigned a first-time “BBB” rating to the Company’s long-term debt and a “F2” rating to the Company’s commercial paper program with the outlook on the Company of “Negative”. Downgrades in our ratings could adversely affect our businesses, operating results, cash flows and financial condition.

Goodwill and other intangible assets could, in the future, become impaired.

Goodwill and indefinite-lived intangible assets are subject to annual impairment reviews, or more frequent reviews if events or circumstances indicate that the carrying value may not be recoverable. When evaluating goodwill for potential impairment, we compare the fair value of our reporting units to their respective carrying amounts. We estimate the fair value of our reporting units using a combination of a discounted cash flow method and a market multiple method. If the carrying amount of a reporting unit exceeds its estimated fair value, a goodwill impairment loss is recognized in an amount equal to the excess to the extent of the goodwill balance. Indefinite-lived intangible assets are tested for impairment by comparing the estimated fair value of the asset to its carrying value. The Company estimates the fair value of its indefinite-lived trademarks using the relief from royalty method under the income approach. If the carrying value of the asset exceeds its estimated fair value, an impairment loss is recognized, and the asset is written down to its estimated fair value. Definite-lived

intangible assets are tested for impairment whenever events or changes in circumstances indicate that the carrying value of such an asset may not be recoverable. If indicators of impairment are present, the Company first compares the carrying amount of the asset group to the estimated future cash flows associated with the asset group (undiscounted). If the estimated future cash flows used in this analysis are less than the carrying amount of the asset group, an impairment loss calculation is prepared. The impairment loss calculation compares the carrying amount of the asset group to the asset group’s estimated future cash flows (discounted).

Estimated fair values could change if, for example, there are changes in the business climate, industry-wide changes, changes in the competitive environment, adverse legal or regulatory actions or developments, changes in capital structure, cost of debt, interest rates, capital expenditure levels, operating cash flows or market capitalization. Because of the significance of our goodwill and intangible assets, any future impairment of these assets could require material noncash charges to our operating results, which also could have a material adverse effect on our financial condition.

Adverse conditions in the U.S. and global capital markets can significantly and adversely affect the value of our investments in debt and equity securities, mortgage loans, alternative investments and other investments, and our operating results and/or our financial condition.

The U.S. and global capital markets, including credit markets, continue to experience volatility and uncertainty. As an insurer, we have a substantial investment portfolio that supports our policy liabilities and surplus and is comprised largely of debt securities of issuers located in the U.S. As a result, the income we earn from our investment portfolio is largely driven by the level of interest rates in the U.S., and to a lesser extent the international financial markets. Volatility, uncertainty and/or disruptions in the global capital markets, particularly the U.S. credit markets, and governments’ monetary policy, particularly U.S. monetary policy, can significantly and adversely affect the value of our investment portfolio, our operating results and/or our financial condition by:

•significantly reducing the value and/or liquidity of the debt securities we hold in our investment portfolio and creating realized capital losses that reduce our operating results and/or unrealized capital losses that reduce our shareholders’ equity;

•lowering interest rates on high-quality short-term or medium-term debt securities and thereby materially reducing our net investment income and operating results as the proceeds from securities in our investment portfolio that mature or are otherwise disposed of continue to be reinvested in lower yielding securities;

•reducing the fair values of our investments if interest rates rise;

•causing non-performance of or defaults on their obligations to us by third parties, including customers, issuers of securities in our investment portfolio, mortgage borrowers and/or reinsurance and/or derivatives counterparties;

•making it more difficult to value certain of our investment securities, for example if trading becomes less frequent, which could lead to significant period-to-period changes in our estimates of the fair values of those securities and cause period-to-period volatility in our net income and shareholders’ equity;

•reducing our ability to issue debt securities at attractive interest rates, thereby increasing our interest expense and decreasing our operating results; and

•reducing our ability to issue other securities.

Although we seek, within guidelines we deem appropriate, to match the duration of our assets and liabilities and to manage our credit and counterparty exposures, a failure to do so adequately could adversely affect our net income and our financial condition and, in extreme circumstances, our cash flows.

Risks Related to Our Relationships with Manufacturers, Providers, Suppliers and Vendors

We face risks relating to the market availability, pricing, suppliers and safety profiles of prescription drugs and other products that we purchase and sell.

Our Pharmacy & Consumer Wellness segment and our mail order and specialty pharmacy operations generate revenues in significant part by dispensing prescription drugs. Our PBM business generates revenues primarily by contracting with clients to provide prescription drugs and related health care services to plan members. As a result, we are dependent on our relationships with prescription drug manufacturers and suppliers. We acquire a substantial amount of our mail order and specialty pharmacies’ prescription drug supply from a limited number of suppliers. In addition, these agreements may allow the supplier to distribute through channels other than us. Certain of these agreements also allow pricing and other terms to be adjusted periodically for changing market conditions or required service levels. A termination or modification to any of these relationships could adversely affect our

prescription drug supply and have a material adverse effect on our businesses, operating results and financial condition. Moreover, many products distributed by our pharmacies are manufactured with ingredients that are susceptible to supply shortages. In some cases, we depend upon a single source of supply. Any such supply shortages or loss of any such single source of supply could adversely affect our operating results and cash flows.

Much of the branded and generic drug product that we sell in our pharmacies, and much of the other merchandise we sell, is manufactured in whole or in substantial part outside of the U.S. In most cases, the products or merchandise are imported by others and sold to us. As a result, significant changes in tax or trade policies, tariffs or trade relations between the U.S. and other countries, such as the imposition of unilateral tariffs on imported products, could result in significant increases in our costs, restrict our access to suppliers, depress economic activity, and have a material adverse effect on our businesses, operating results and cash flows. The current administration has imposed and may further impose, or significantly increase, tariffs on imports to the United States, which could exacerbate many of these issues. In addition, other countries may change their business and trade policies and such changes, as well as any negative sentiments towards the U.S. in response to increased import tariffs and other changes in U.S. trade regulations, including those that are imposed or threatened by the new administration, could adversely affect our businesses.

Our suppliers are independent entities subject to their own operational and financial risks that are outside our control. If our current suppliers were to stop selling prescription drugs to us or delay delivery, including as a result of supply shortages, supplier production disruptions, supplier quality issues, closing or bankruptcies of our suppliers, or for other reasons, we may be unable to procure alternatives from other suppliers in a timely and efficient manner and on acceptable terms, or at all.

Our operating results may be adversely affected if we are unable to contract with providers on competitive terms and develop and maintain attractive networks with high quality providers.

We are seeking to enhance our health care provider networks by entering into joint ventures and other collaborative risk-sharing arrangements with providers. Providers’ willingness to enter these arrangements with us depends upon, among other things, our ability to provide them with up to date quality of care data to support these value-based contracts. These arrangements are designed to give providers incentives to engage in population health management and optimize delivery of health care to our members. These arrangements also may allow us to expand into new geographies, target new customer groups, increase membership and reduce medical costs and, if we provide technology or other services to the relevant health system or provider organization, may contribute to our revenue and earnings from alternative sources. If such arrangements do not result in the lower medical costs that we project or if we fail to attract providers to such arrangements, or are less successful at implementing such arrangements than our competitors, our medical costs may not be competitive and may be higher than we project, our attractiveness to customers may be reduced, we may lose or be unable to grow medical membership, and our ability to profitably grow our business and/or our operating results may be adversely affected.

We may not be able to achieve these objectives in one or more of our joint ventures, which could adversely affect our operating results and cash flows.

If our suppliers or service providers fail to meet their contractual obligations to us or to comply with applicable laws or regulations, we may be exposed to brand and reputational harm, litigation and/or regulatory action.

We contract with various third parties to supply us with necessary products, perform certain functions and services and provide us with certain information technology systems. Our arrangements with suppliers and these third parties may expose us to public scrutiny, adversely affect our brand and reputation, expose us to litigation or regulatory action, and otherwise make our operations vulnerable if we fail to adequately oversee, monitor and regulate their performance or if they fail to meet their contractual obligations to us or to comply with applicable laws or regulations, including those related to human capital and climate change. For example, certain of our vendors have been responsible for releases of sensitive information of our members and employees, which has caused us to incur additional expenses and given rise to regulatory actions and litigation against us and has adversely impacted our brand.

These risks are particularly high in our in Medicare Advantage (including dual eligible special needs plans), Medicare Part D, Medicaid, and Managed Medicaid plans, where third parties may perform medical management and other member related

Table of Contents

services for us.

We may experience increased medical and other benefit costs, litigation risk and customer and member dissatisfaction when providers that do not have contracts with us render services to our Health Care Benefits members.

Some providers that render services to our Health Care Benefits members do not have contracts with us. In some states, the amount of compensation due to these nonparticipating providers is defined by law or regulation, but in most instances it is either not defined or it is established by a standard that is not clearly translatable into dollar terms. In such instances, providers may believe that they are underpaid for their services and may either litigate or arbitrate their dispute with us or try to recover the difference between what we have paid them and the amount they charged us from our members, which may result in member dissatisfaction. For example, in 2019, certain claimant hospitals were awarded approximately $86 million in an arbitration proceeding relating to Aetna’s out-of-network benefit payment and administration practices. Such disputes may cause us to pay higher medical or other benefit costs than we projected.

Continuing consolidation and integration among providers and other suppliers may increase our medical and other covered benefits costs, make it difficult for us to compete in certain geographies and create new competitors.

While this consolidation could increase efficiency and has the potential to improve the delivery of health care services, it also reduces competition and the number of potential contracting parties in certain geographies and sectors of the health care industry. In addition, ACOs (including Commercial and Medicaid-only ACOs developed as a result of state Medicaid laws), practice management companies, consolidation among and by integrated health systems and other changes in the organizational structures that physicians, hospitals and other providers adopt continues to change the way these providers interact with us and the competitive landscape in which we operate. These changes may increase our medical and other covered benefits costs, may affect the way we price our products and services and estimate our medical and other covered benefits costs and may require us to change our operations, including by withdrawing from certain geographies where we do not have a significant presence across our businesses or are unable to collaborate or contract with providers on acceptable terms. Each of these changes may adversely affect our businesses and operating results.

Item 1B. Unresolved Staff Comments.

There are no unresolved SEC Staff Comments.

Cybersecurity.

Cybersecurity Risk Management

Cybersecurity is an important and integrated part of the Company’s enterprise risk management strategy. Safeguarding the Company’s business information, intellectual property, customer, patient and employee data and technology systems is essential for the continuity of its businesses, meeting applicable regulatory requirements and maintaining the trust of its stakeholders.

To help protect the Company from a major cybersecurity incident that could have a material impact on operations or the Company’s financial results, the Company has implemented a robust information security program and has made technology investments that focus on cybersecurity incident prevention, detection and mitigation. The steps the Company takes to reduce its vulnerability and to mitigate the impacts from cybersecurity incidents include, but are not limited to: comprehensive information security policies and standards, implementing logical and technical controls through processes and technologies, monitoring its information technology systems for cybersecurity threats, assessing cybersecurity risk profiles of key third-parties, implementing cybersecurity training and collaborating with public and private organizations on cyber threat information

Table of Contents

and best practices. The Company is currently in material compliance with applicable information privacy and cybersecurity standards.

The Company has implemented a Cybersecurity Incident Response Plan (the “Plan”), which is integrated into its overall crisis management program. The Plan provides a framework for responding to cybersecurity incidents. The Plan identifies applicable requirements for incident disclosure and reporting as well as provides protocols for incident evaluation, including the use of third-party service providers and partners, processes for notification and internal escalation of information to the Company’s senior management, the disclosure committee, the Board and appropriate Board committees. The Plan also addresses requirements for the Company’s external reporting obligations. The Plan is reviewed and updated, as necessary, under the leadership of the Company’s Chief Information Security Officer (“CISO”) and Chief Privacy Officer (“CPO”).

The Company’s information technology systems and processes are regularly assessed internally as well as by independent third parties for compliance with the following standards: HIPAA; NIST 800-53; System and Organization Controls (“SOC”) 1; SOC 2 Type 2; HI-TRUST; Payment Card Industry Data Security Standards; and the National Association of Insurance Commissioners. The Company annually purchases a cybersecurity risk insurance policy that is expected to help defray the costs associated with a covered cybersecurity incident if it occurred.

Although the Company did not experience a material cybersecurity incident during the year ended December 31, 2024, it did experience previously-disclosed impacts from the Change Healthcare cybersecurity incident in February 2024. See the Company’s Form 10-Q for the three months ended March 31, 2024 for more information. The scope and impact of any future direct or third-party cybersecurity incident cannot be predicted. See “Item 1A. Risk Factors” for more information on the Company’s cybersecurity-related risks.

Governance

Management has responsibility to manage risk and bring to the Board’s attention the most material near-term and long-term risks to the Company. The Company’s CISO leads management’s assessment and management of cybersecurity risk. The CISO reports to the Company’s Chief Digital, Data, Analytics & Technology Officer (the “CDDATO”), who reports directly to the Company’s Chief Executive Officer. The CDDATO, CISO and the CPO, regularly review cybersecurity matters with management. The current CDDATO, CISO and CPO each has more than 10 years of experience managing risks or advising on cybersecurity issues.

The Board is actively engaged in overseeing and reviewing the Company’s strategic direction and objectives, taking into account, among other considerations, the Company’s risk profile and related exposures. As part of this oversight the Board has delegated certain of these responsibilities to committees of the Board. The Board has delegated the responsibility for the oversight of the Company’s cybersecurity risks to the Audit Committee. As part of this oversight, the Audit Committee reviews the Company’s cybersecurity program periodically, and at least annually. The Company’s CDDATO and CISO update the Audit Committee periodically, and at least annually, and the full Board as needed, on the Company’s cybersecurity program, including particular cybersecurity threats, incidents and new developments in the Company’s risk profile. The CISO is a member of the Company’s Disclosure Committee, and the CPO advises the Disclosure Committee on cybersecurity matters on an as-needed basis.

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
STRZ	11 hours ago
AEMD	11 hours ago
CPBI	12 hours ago
AOUT	12 hours ago
RDZN	12 hours ago
OESX	12 hours ago
AIOT	15 hours ago
JRSH	1 day, 10 hours ago
GIS	1 day, 10 hours ago
DAKT	1 day, 11 hours ago
CLRCF	1 day, 12 hours ago
AMWD	1 day, 14 hours ago
WLY	1 day, 17 hours ago
UCLE	1 day, 18 hours ago
CRWS	1 day, 21 hours ago
AVAV	2 days, 9 hours ago
ATEX	2 days, 12 hours ago
CARV	2 days, 12 hours ago
LASE	2 days, 22 hours ago
FCCN	3 days, 8 hours ago
SPTY	3 days, 10 hours ago
AI	3 days, 12 hours ago
EARN	3 days, 13 hours ago
CASY	3 days, 14 hours ago
GRCE	3 days, 20 hours ago
BSFC	3 days, 22 hours ago
RMCF	6 days, 11 hours ago
CYAN	6 days, 12 hours ago
CBRRF	6 days, 12 hours ago
XAIR	6 days, 19 hours ago
MDT	6 days, 21 hours ago
SWBI	6 days, 22 hours ago
MODD	6 days, 22 hours ago
ORCL	1 week, 1 day ago
SJM	1 week, 1 day ago
GSIT	1 week, 1 day ago
GMS	1 week, 1 day ago
VTGN	1 week, 2 days ago
LZB	1 week, 2 days ago
SNOA	1 week, 2 days ago
POWW	1 week, 3 days ago
ATDS	1 week, 3 days ago
GDST	1 week, 3 days ago
APPS	1 week, 3 days ago
GLAI	1 week, 3 days ago
CRCW	1 week, 6 days ago
FRHC	1 week, 6 days ago
BF-A	1 week, 6 days ago
AUSI	1 week, 6 days ago
RVSB	2 weeks ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - CVS

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - CVS

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing