Quiver Quantitative

Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - MAR

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. Risk Factors.

The events and consequences discussed in these risk factors could, in circumstances we may or may not be able to accurately predict, recognize, or control, have a material adverse effect on our business, liquidity, financial condition, and results of operations. In addition, these risks could cause

Table of Contents

results to differ materially from those we express in forward-looking statements contained in this report or in other Company communications. These risk factors do not identify all risks that we face, and our business could also be affected by factors, events, or uncertainties that are not presently known to us or that we currently do not consider to present significant risks to our operations.

Risks Relating to Our Industry

Our industry is highly competitive, which may impact our ability to compete successfully for guests. We operate in markets that contain many competitors. Our hotel brands and other lodging offerings generally compete with regional, national, and international chains that operate lodging properties or franchise their brands, lodging properties that are not affiliated with a chain, and online platforms that allow travelers to book short-term rentals of homes and apartments. Our ability to remain competitive and attract and retain business, group, and leisure travelers depends on our success in distinguishing and driving preference for our lodging products and services, including our Loyalty Program, direct digital channels, consumer-facing technology platforms and services, our co-branded credit cards, and other offerings. If we cannot compete successfully in these areas, our business, liquidity, financial condition, and results of operations could be materially adversely affected. Further, new lodging supply in individual markets could have a negative impact on the hotel industry and hamper our ability to maintain or increase room rates or occupancy in those markets.

Economic and other global, national, and regional conditions and events have in the past materially impacted, and could in the future materially impact, our business, operations, financial results, and growth. These conditions and events have in the past materially negatively impacted, and could in the future materially negatively impact, our business, operations, financial results, and growth in many ways, including, but not limited to, as follows:

•reducing revenues at hotels in our system, impacting our fees and the ability of hotels to meet expenses, including payment of amounts owed to us;

•reducing revenues we receive from other programs and offerings;

•adversely affecting the value of our owned and leased properties or investments;

•affecting the ability or willingness of hotel owners to service, repay or refinance existing indebtedness or similar obligations, including loans or guaranty advances we have made to or for them;

•making it more difficult for hotel owners to obtain financing on commercially acceptable terms, or at all;

•causing hotel construction, opening, and renovation delays;

•decreasing the rate at which new projects enter our pipeline;

•causing hotels to exit our system;

•increasing operating costs;

•requiring us to borrow or otherwise raise a significant amount of cash in order to preserve financial flexibility, repay maturing debt and manage debt maturities;

•causing the terms of our borrowing to be more expensive or more restrictive; and

•adversely affecting associate hiring and retention.

The conditions and events discussed in this risk factor could also give rise to, aggravate, and impact our ability to allocate resources to mitigate the other risks that we identify below, which in turn could materially adversely affect our business, liquidity, financial condition, and results of operations.

Risks Relating to Our Business

Operational Risks

Premature termination of our agreements with hotel owners could materially hurt our financial performance. Our agreements with hotel owners may be subject to premature termination in certain circumstances, such as the bankruptcy of a hotel owner, the failure of a hotel owner to comply with its payment or other obligations under the agreement, a failure under some agreements to meet specified financial or performance criteria which we do not cure, or in certain limited cases, other negotiated contractual termination rights. Hotel owners may assert the right to terminate our agreements even where the agreements provide otherwise, and some courts have upheld such assertions about our agreements and may do so in the future. When terminations occur for certain of these or other reasons, we may seek to enforce our right to damages for breach of

Table of Contents

contract and related claims, which may cause us to incur significant legal fees and expenses.

Consistent with our focus on franchising, management, and licensing, we own very few of our lodging properties. The nature of our rights and responsibilities under our agreements with hotel owners and other counterparties may be subject to interpretation. From time to time this gives rise to disagreements with such parties, including over new product, service, or systems initiatives and their associated costs, the timing and amount of capital investments, and reimbursement for operating costs, system costs, or other amounts. We have seen, and may in the future see, an increase in such disagreements during periods when hotel returns are weaker. We seek to resolve any disagreements and to develop and maintain positive relations with our hotel owners and other counterparties, but we cannot always do so.

Changes in the way hotel rooms are booked could adversely impact our business. Some of our hotel rooms are booked through Internet travel intermediaries. In addition to their focus on leisure travel, these intermediaries also provide offerings for corporate travel and group meetings. Intermediaries continue to use a variety of aggressive online marketing methods to attract guests, including the purchase by certain companies of trademarked online keywords such as “Marriott” from Internet search engines. Many intermediaries also operate their own loyalty programs designed to foster customer loyalty to their platforms, which could erode loyalty to our brands, offerings, and direct digital channels. Bookings through these intermediaries are more costly to hotels in our system than bookings through our direct digital channels. To the extent that guest booking preference shifts from our direct digital channels to Internet travel intermediaries, diverting bookings away from our direct digital channels and increasing the overall cost of bookings for hotels in our system, our business and profitability could be harmed. In addition, the introduction of AI capabilities by existing and emerging travel intermediaries may change the way guests plan, book, and pay for travel, which may disrupt how our products and services are marketed and distributed, potentially eroding brand loyalty, increasing distribution costs, and negatively affecting our Loyalty Program, which could adversely impact our financial performance and our ability to grow our business. At the same time, if we are not able to negotiate new agreements on satisfactory terms when our existing contracts with intermediaries (which generally have two- to three-year terms) come up for renewal, our business and prospects could be negatively impacted in a number of ways, including by reducing bookings or making our brands less attractive to hotel owners.

Our growth strategy depends upon attracting hotel owners to our platform, and future arrangements with these third parties may be less favorable to us, depending on the terms offered by our competitors. Adding properties to our system entails entering into and maintaining various arrangements with hotel owners. Our ability to attract and retain hotel owners and the terms of our agreements with hotel owners are influenced by the value, quality, and performance of our brands, the value and benefits of our Loyalty Program and other programs and services, our willingness to provide incentives to hotel owners to secure new agreements, the overall commercial terms of our agreements, and the relative value and benefits of offerings otherwise available to hotel owners in the market, among other things. We cannot assure you that any of our current arrangements will continue or that we will be able to renew agreements or enter into new agreements in the future on terms that are as favorable to us as those that exist today.

The effects of, or our failure to comply with, applicable laws, regulations, and government policies may disrupt our business, lower our revenues, increase our costs, reduce our profits, limit our growth, or damage our reputation. We, the hotels in our system, our other lodging offerings, and the programs that we offer are subject to or affected by a variety of laws, regulations, and government policies around the globe, including, among others, those related to employment practices; marketing and advertising; consumer protection; trade and economic sanctions; anti-bribery, anti-corruption, and anti-money laundering; intellectual property; cybersecurity, data privacy, data localization, data transfers, the handling of personally identifiable information, and AI and other emerging technologies; the offer and sale of franchises; competition and pricing; climate and the environment; health, safety, and accessibility; food and beverage sales; gaming and other entertainment offerings; and credit card products. The compliance programs, internal controls, and policies we maintain and enforce need to be updated regularly to keep pace with changing laws, regulations, and government policies, may not cover all applicable risk areas, and, as we have seen in the past, may not prevent us, our associates, service providers, or agents from materially violating applicable laws, regulations, and government policies. The requirements of applicable laws, regulations, and government policies, our failure to meet such requirements

Table of Contents

(including investigations and publicity resulting from actual or alleged failures), or actions we take to comply with such requirements or investigations could have significant adverse effects on our results of operations, reputation, or ability to grow our business.

Third-party claims that we infringe the intellectual property rights of others or our failure to defend our own intellectual property rights could materially adversely affect our business. Third parties sometimes make claims against us for infringing their intellectual property rights (including as a result of the actions of our hotel owners, service providers, and other parties with whom we do business). We have been and are currently party to a number of such claims and may be subject to additional claims in the future. Such claims, including pending claims, have in the past, and could in the future:

•be expensive and time consuming to defend;

•require or result in significant monetary payments to claimants;

•require or result in the limitation or cessation of our use of the intellectual property at issue;

•force us to redesign or rebrand our products or services; or

•result in other adverse effects on our business or reputation.

We may also be required to indemnify hotel owners, service providers, and other parties with whom we do business for losses they incur as a result of any infringement claims against them related to our intellectual property or as a result of our use of the intellectual property of third parties.

In addition, if third parties copy or use our intellectual property without authorization, the value of our brands, our competitive advantages, or our goodwill could be harmed. The steps we take to secure, protect, and defend our intellectual property rights may not succeed or be adequate to prevent others from infringing, copying, or using our intellectual property without proper authorization. Such steps, including enforcing our intellectual property rights, are costly and could force us to divert our resources, lead to counterclaims or other claims against us, or otherwise result in harm to our business.

If our brands, goodwill, or other intangible assets become impaired, we may be required to record significant non-cash charges to earnings. We hold a significant amount of goodwill and other intangible assets on our Balance Sheets. We review goodwill and indefinite-lived intangible assets for impairment annually or whenever events or circumstances indicate impairment may have occurred. Estimated fair values of our brands or reporting units could change if, for example, there are changes in the business climate, unanticipated changes in the competitive environment, adverse legal or regulatory claims, actions or developments, changes in guests’ perception and the reputation of our brands, or changes in interest rates, operating cash flows, or market capitalization. Because of the significance of our goodwill and other intangible assets, any future impairment of these assets could require material non-cash charges to our results of operations, which could have a material adverse effect on our reported financial condition and results of operations.

Our business depends on the quality and reputation of our Company and our brands, and any deterioration could adversely impact our market share, reputation, business, financial condition, or results of operations. Many factors can affect the reputation and value of our Company or one or more of our brands, hotels in our system, or other offerings, including adherence to service and other brand standards; matters related to, or incidents involving, food quality and safety, guest and associate safety, health and cleanliness, sustainability, supply chain management, access to opportunity, human rights, and support for local communities; actions perceived as relating to political or social matters; and compliance with applicable laws. Reputational value is also based on perceptions, and broad access to social media makes it easy for anyone to provide public feedback that can influence perceptions of us, our brands, hotels in our system, or other offerings, and it may be difficult to control or effectively manage negative publicity, regardless of whether it is accurate. While reputations may take decades to build, negative incidents can quickly erode trust and confidence, particularly if they result in adverse mainstream and social media publicity, governmental investigations, proceedings or penalties, or litigation. Negative incidents could lead to tangible adverse effects on our business, including lost sales, boycotts, reduced enrollment and/or participation in our Loyalty Program, loss of development opportunities, adverse government attention, adverse reaction from hotel owners, service providers, or other third parties, or associate retention and recruiting difficulties. Any material decline in the reputation or perceived quality of our brands or corporate image could affect our market share, reputation, business, financial condition, or results of operations. Our hotel owners, service providers, and other third parties are subject to similar risks, which could also impact us.

Actions by our hotel owners or others could materially adversely affect our image and reputation. We franchise and license many of our brand names and trademarks to third parties for lodging, timeshare, and residential properties, and with respect to our credit card programs and other offerings, and enter into marketing and other strategic collaborations with other companies. Under the terms of their agreements with us, these third parties interact directly with guests and others under or in connection with our brand and trade names. Although our agreements with these third parties generally provide us

Table of Contents

with recourse and remedies in the event of a breach, including termination of the agreements under certain circumstances, certain actions by these third parties may not give rise to recourse or remedies, and for those that do, it could be expensive or time-consuming for us to pursue such remedies, and even if we are successful in pursuing such remedies, that may not be sufficient to mitigate reputational harm to us. We also cannot assure you that in every instance a court would ultimately enforce our contractual termination rights or that we could collect any awarded damages from the defaulting party.

Collective bargaining activity and strikes could materially disrupt hotel operations, increase labor costs, and interfere with the ability of our management to focus on executing our business strategies. A significant number of associates at our managed, leased, and owned hotels are covered by collective bargaining agreements. If relationships with our organized associates or the unions that represent them become adverse, then, as we have seen in the past, the properties we operate could experience labor disruptions such as strikes, lockouts, boycotts, and public demonstrations. Numerous collective bargaining agreements are typically subject to negotiation each year, and the successful resolution of such negotiations in the past does not mean that future negotiations will be resolved without significant strikes or disruptions, or on satisfactory terms. For many of the hotels in our system, including our franchised and licensed properties, we do not have the ability to control the negotiations of collective bargaining agreements, and collective bargaining activity and labor disruptions at these properties could adversely impact our business. Labor disputes and disruptions sometimes result in adverse publicity or regulatory investigations and adversely affect operations and revenues at impacted hotels.

In addition, labor regulation and the negotiation of new or existing collective bargaining agreements could, as we have seen in the past, lead to higher wage and benefit costs, changes in work rules that raise operating expenses and legal costs, and limitations on our ability or the ability of our hotel owners to take cost saving measures during economic downturns. Increased unionization of the workforce at hotels in our system, new labor legislation, or changes in regulations could disrupt operations at hotels in our system, reduce profitability, or interfere with the ability of our management to focus on executing our business strategies.

Our business could suffer if we or the hotels in our system cannot attract and retain associates or as the result of the loss of the services of our senior executives. We and the hotels in our system compete with other companies both within and outside of our industry for personnel. We and the hotels in our system have in the past experienced, and could in the future experience, challenges hiring for certain positions due to various factors, such as increasing wage expectations or competition for labor from other industries, and these circumstances could continue or worsen in the future to an extent and for durations that we are not able to predict. If we or the hotels in our system cannot recruit, train, develop, and retain sufficient numbers of associates, we could experience significant negative impacts on operations, associate morale and turnover, guest satisfaction, or our internal control environment. Insufficient numbers of associates could also limit our ability to grow and expand our business. Labor shortages have in the past resulted, and could in the future result, in higher wages and initial hiring costs, increasing our labor costs and labor costs at hotels in our system, which could reduce our revenues and profits. In addition, the efforts and abilities of our senior executives are important elements of maintaining our competitive position and driving future growth, and the loss of the services of one or more of our senior executives could result in challenges executing our business strategies or other adverse effects on our business.

Extreme weather, natural disasters, climate change, and sustainability-related concerns have impacted our business in the past and could in the future have a material adverse effect on our business and results of operations. We, the hotels in our system, and our other lodging offerings are subject to the risks associated with extreme weather, natural disasters, and climate change, including physical impacts, changes in laws and regulations, and changing consumer preferences. We have seen a decline in travel and reduced demand for lodging as a result of natural disasters and extreme weather in some markets and in areas of the world from which we draw guests, and the prevalence and impact of these events may increase or worsen in the future. Significant costs could be involved in improving the efficiency and climate resiliency of hotels in our system and otherwise preparing for, responding to, and mitigating climate or sustainability related impacts, events, or concerns affecting hotels in our system. As a result of the foregoing, as we have seen in the past to some extent, we may experience reduced demand, increased costs, operating disruptions or limitations, and physical damage to hotels in our system, and we could experience constraints on our growth, all of which could adversely affect our profits and growth.

Table of Contents

Insurance may not cover damage to, or losses involving, hotels in our system or other aspects of our business, and the cost of such insurance could increase. We require comprehensive property and liability insurance policies for hotels in our system with coverage features and insured limits that we believe are customary. Market forces beyond our control may nonetheless limit the scope of the insurance coverage we or our hotel owners can obtain, or our or their ability to obtain coverage at reasonable rates. As a result, we and our hotel owners may not be successful in obtaining insurance without increases in cost or decreases in coverage levels, or may not be successful in obtaining insurance at all. For example, over the past several years following the severe and widespread damage caused by natural disasters, coupled with continued large global losses, the property, liability, and other insurance markets have seen significant cost increases. Further, in the event of a substantial loss, the insurance coverage we or our hotel owners carry may not be sufficient to pay the full market value or replacement cost of any lost investment or in some cases could result in certain losses being totally uninsured. As a result, our revenues and profits could be adversely affected, and for properties we own or lease, we could lose some or all of the capital that we have invested in the property and we could remain obligated for guarantees, debt, or other financial obligations.

Our Loyalty Program plays a significant role in our business, and unfavorable developments affecting the program could adversely affect our business and results of operations. Our Loyalty Program is an important aspect of our business. There is significant competition among loyalty programs in terms of the value and utility of program currency, rewards ranges and values, other program terms and conditions, and other program features, including co-branded credit card affiliations and offerings. If we are not able to maintain a competitive and attractive loyalty program or if we make changes to our Loyalty Program, including as a result of legal or regulatory requirements or considerations, we could experience significant adverse effects on our reputation, business, financial condition, or results of operations, including our ability to acquire, engage, and retain members in our Loyalty Program and our ability to operate other programs (including our co-branded credit card program). In addition, to the extent that legislative or regulatory changes negatively impact credit card issuers or networks, we could also see material adverse effects on our business, financial condition, or results of operations, including reduced revenues from our co-branded credit card agreements and a range of adverse impacts to our Loyalty Program, such as reduced program funding.

Exchange rate fluctuations could result in significant foreign currency gains and losses and affect our business results. We earn revenues and incur expenses in foreign currencies in connection with our operations outside of the U.S. Accordingly, fluctuations in currency exchange rates may significantly increase the amount of U.S. dollars required for foreign currency expenses or significantly decrease the U.S. dollars we receive from foreign currency revenues. We are also exposed to currency translation risk because the results of our non-U.S. business are generally reported in local currency, which we then translate to U.S. dollars for inclusion in our Financial Statements. As a result, exchange rate changes between foreign currencies and the U.S. dollar affect the amounts we record for our foreign assets, liabilities, revenues, and expenses, and could have a material negative effect on our financial results. To the extent that our international operations continue to grow, our exposure to foreign currency exchange rate fluctuations will grow. Even though we enter into foreign exchange hedging arrangements for some of the currencies in which we do business, exchange rate fluctuations will result in foreign currency gains and losses and could materially affect our results. Our hedging arrangements may also create their own costs and risks, including in the form of cash flow impacts, credit requirements, and counterparty risk.

Development and Financing Risks

Our hotel owners depend on capital to buy, develop, and improve hotels, and they may be unable to access capital when necessary. Current and potential hotel owners must periodically spend money to fund new hotel investments, as well as to refurbish and improve existing hotels. The availability of funds for new investments and improvement of existing hotels by our current and potential hotel owners depends in large measure on their ability to access the capital markets. Obtaining financing on attractive terms has been, and may in the future be further, constrained by the capital markets for hotel and real estate investments.

Our ability to grow our system is subject to the range of risks associated with real estate investments. Our ability to sustain continued growth through franchise, management, or license agreements with hotel owners is affected, and may potentially be limited, by a variety of factors influencing real estate development generally. These include site availability, financing availability, planning, zoning and other local approvals, and other limitations that may be imposed by market and submarket factors, such as projected room occupancy and rate, changes in growth in demand compared to projected supply, territorial restrictions in our agreements with hotel owners, costs of construction, demand for and availability of construction labor, materials, and resources, and other disruptive conditions in global, regional, or local markets.

Table of Contents

Our owned properties and other real estate investments subject us to numerous risks. We have a number of owned and leased properties and investments in joint ventures that own properties, which are each subject to the risks that generally relate to investments in real property. We may seek to sell some of these properties over time; however, equity real estate investments can be difficult to sell, and we may not be able to complete asset sales at prices we find acceptable or at all. Moreover, the investment returns available from equity investments in real estate depend in large part on the amount of income earned and capital appreciation generated, if any, by the particular properties, and the expenses incurred. Our real estate investments have been, and could in the future be, impacted by any of these factors, resulting in a material adverse impact on our results of operations or financial condition. If our properties do not generate revenue sufficient to meet operating expenses and make needed capital expenditures, our income could be adversely affected, and we could be required to record additional significant non-cash impairment charges to our results of operations.

Risks associated with development and sale of residential properties associated with our lodging properties or brands may reduce our profits. We license many of our brands for use in connection with the development and sale of residential properties. Such projects pose further risks beyond those generally associated with our lodging business, which may reduce our profits or compromise our brand equity, including risks that: (1) changes in residential real estate demand generally may reduce our profits and could make it more difficult to convince future project developers of the value added by our brands; and (2) increases in interest rates, reductions in mortgage availability or the tax benefits of mortgage financing or residential ownership generally, or increases in the costs of residential ownership could prevent potential customers from buying residential products or reduce the prices they are willing to pay.

More hotel projects in our development pipeline may be cancelled or delayed in opening, which could adversely affect our growth prospects. We report a significant number of hotels in our development pipeline, including hotels under construction, hotels subject to signed contracts, and hotels approved for development but not yet under contract. The eventual opening of such pipeline hotels and, in particular, the approved hotels that are not yet under contract, is subject to numerous risks, including the other risks described in this section. Accordingly, we cannot assure you that all of our development pipeline will result in additional hotels entering our system, or that those hotels will open when we anticipate.

Losses on loans or guarantees that we have made to third parties impact our profits. From time to time, we make loans to hotel owners as described in Note 12 and provide guarantees to hotel owners or lenders as described in Note 7. We have suffered losses, and could suffer losses in the future, when hotel owners default on loans that we provide or when we are required to fund under guarantees and do not receive reimbursement from the hotel owner.

If hotel owners cannot repay or refinance mortgage loans secured by their properties, default under property leases, or experience other financial difficulties, our revenues and profits could materially decrease and our business could be significantly harmed. Many hotel owners have pledged their hotels as collateral for mortgage loans that they entered into when those properties were purchased or refinanced. If those hotel owners cannot meet required debt service payments or repay or refinance maturing indebtedness on favorable terms or at all, the lenders could declare a default, accelerate the related debt, and foreclose on the property, or the hotel owners could declare bankruptcy, as we have seen in the past and could see in the future. In addition, some hotel owners have leased their property from a third-party landlord. If hotel owners cannot make required lease payments or otherwise comply with lease terms, the landlord could declare a default and terminate the lease, as we have seen in the past and could see in the future.

Technology, Information Protection, and Privacy Risks

Disruption in the functioning of our reservation, Loyalty Program, or other core operational systems, or our use of certain new technologies, could adversely affect our business. In the operation of our business, we manage or use sophisticated technology and systems, including those used for our reservation, customer relationship management, analytics, revenue management, property management, human resources and payroll systems, our Loyalty Program, and technologies we make available to our guests and for associates. The cost, speed, accuracy, and efficiency of these technologies and systems are critical aspects of our business and are important considerations for hotel owners when choosing our brands. Our business may suffer if we or our hotel owners, service providers, or other third parties fail to maintain, upgrade, or prevent disruption to these systems. Disruptions in or changes to these systems, including during upgrades or replacements, could result in a disruption to our business and the loss of important data.

Table of Contents

We are incorporating AI and other emerging technologies into certain of our processes, offerings, and services, and these technologies may become increasingly important in our operations over time. In addition, it is possible that AI could be improperly utilized by associates while carrying out their responsibilities or lead to unintended consequences, including generating content that is factually inaccurate, misleading or otherwise flawed, or biased, or that results in other unintended harmful impacts, which could harm our reputation and business and expose us to risks related to inaccuracies or errors in the output of such technologies.

A failure to keep pace with developments in technology could impair our operations or competitive position. Our business could suffer if we cannot refine, update, and/or replace technologies and systems as quickly or effectively as our competitors, sufficiently in advance of obsolescence or performance failure or degradation, or within budgeted costs and time frames. We also may not achieve the benefits that we anticipate from any new or upgraded technology or system, and a failure to do so could result in higher than anticipated costs or lower guest satisfaction or could impair our operating results. We are undertaking a multi-year transformation of our reservations, property management, and loyalty systems. The development and deployment of our new systems could involve delays, system interruptions, compromises of data security, or other operational impacts, including impacts on our financial reporting or internal control environment. Additionally, if we fail to keep pace with rapidly-evolving technological developments in AI and other emerging technologies, our competitive position and business may suffer.

We are exposed to risks and costs associated with protecting the integrity and security of data. In the operation of our business, we collect, store, use, and transmit large volumes of personal data regarding associates, guests, customers, hotel owners, service providers, other third parties, and our own business operations, including credit card numbers, reservation and loyalty data, and other personal data, in various information systems that we maintain and in systems maintained by third parties, including those of our hotel owners, service providers, and other third parties with whom we or they do business. The integrity and protection of this personal data are critical to our business. We have incurred and may in the future incur significant additional costs to meet these requirements, obligations, and expectations, and in the event of alleged or actual noncompliance, we may experience increased operating costs, increased exposure to payment obligations and litigation, and increased risk of damage to our reputation and brand.

The Data Security Incident, and other information security incidents, could have numerous adverse effects on our business. As a result of the data security incident involving unauthorized access to the Starwood Hotels & Resorts Worldwide, LLC, formerly known as Starwood Hotels & Resorts Worldwide, Inc. In 2024, we reached final resolutions with the U.S. Federal Trade Commission (“FTC”) and the Attorney General offices from 49 U.S. states and the District of Columbia (the “AG Offices”) in relation to the Data Security Incident, which include, among other terms, various long-term requirements relating to our data privacy and information security programs.

Insurance coverage designed to limit our exposure to losses such as those related to the Data Security Incident is costly and may not be sufficient or available to cover all of our expenses or other losses (including payments, fines, or penalties

Table of Contents

resulting from legal proceedings or investigations) related to the Data Security Incident, and certain expenses by their nature (such as, for example, expenses related to enhancing our data privacy and information security programs) are not covered by our insurance program.

Additional cybersecurity incidents could have adverse effects on our business. We have enhanced our security measures to safeguard our information systems and data, and we intend to continue implementing additional measures in the future, but, as we have seen in the past, our measures may not be sufficient to maintain the confidentiality, security, or availability of the data we collect, store, and use to operate our business. Efforts to hack or circumvent security measures, efforts to gain unauthorized access to, exploit or disrupt the operation or integrity of our data or information systems, failures of information systems or software to operate as designed or intended, viruses, “ransomware” or other malware, “supply chain” attacks, “phishing” or other types of business communications compromises, operator error, or inadvertent releases of data have impacted, and may in the future impact, our information systems and records or those of our hotel owners, service providers, or other third parties with whom we or they do business. Security measures, no matter how well designed or implemented, may only mitigate and not fully eliminate risks, and security events, when detected by security tools or third parties, may not always be immediately understood or acted upon. Our reliance on computer, Internet-based, and mobile systems and communications, and the frequency and sophistication of efforts by third parties to gain unauthorized access or prevent authorized access to such systems, have greatly increased in recent years. Any additional significant theft of, unauthorized access to, compromise or loss of, loss of access to, or fraudulent use of guest, associate, hotel owner, service provider, Company, or other data as a result of a cybersecurity incident could adversely impact our reputation and could result in legal, regulatory, and other consequences, including remedial and other expenses, fines, or litigation. This could result in operational interruptions and/or outages and a loss of profits, as well as negative publicity and other adverse effects on our business, including lost sales, loss of consumer confidence, boycotts, reduced enrollment and/or participation in our Loyalty Program, litigation, regulatory investigations or actions, diminished associate satisfaction, and/or retention and recruiting difficulties, all of which could materially affect our market share, reputation, business, financial condition, or results of operations.

Because we have experienced cybersecurity incidents in the past, additional cybersecurity incidents or the failure to detect and appropriately respond to additional cybersecurity incidents could magnify the severity of the adverse effects on our business. We cannot assure you that all potential causes of past significant cybersecurity incidents have been identified and remediated; additional measures may be needed to prevent significant incidents in the future. The steps we take may not be sufficient to prevent future significant cybersecurity incidents, and as a result, such incidents may occur again. Although we carry cyber insurance that is designed to protect us against certain losses related to cyber risks, that insurance coverage may not be sufficient or available to cover all expenses or other losses (including payments, fines, or penalties) or all types of claims that may arise in connection with cyberattacks, security compromises, and other related incidents. Furthermore, in the future such insurance may not be available on commercially reasonable terms, or at all.

Changes in privacy and data security laws could increase our operating costs and increase our exposure to payment obligations and litigation. We are subject to numerous, complex, and frequently changing laws, regulations, and contractual obligations designed to protect personal information. Various U.S. federal and state laws, non-U.S. laws, payment card industry security standards, and other information privacy and security standards are all applicable to us. Significant legislative, judicial, or regulatory changes have been and could be issued in the future. Compliance with evolving regulatory frameworks governing AI and other emerging technologies may affect our use of such technologies and our ability to incorporate such technologies into our processes, offerings, and services, and may result in increased costs and exposure to legal proceedings or investigations in the event of

Table of Contents

alleged noncompliance. In addition, uncertainty around cross-border data transfers, including from the U.S., may require us to restrict certain data transfers, cease doing business with certain third parties, or change how data flows throughout our business, any of which could materially impact our operations.

General Risk Factors

Delaware law and our governing corporate documents contain, and our Board of Directors could implement, anti-takeover provisions that could deter takeover attempts. Under the Delaware business combination statute, a stockholder holding 15 percent or more of our outstanding voting stock could not acquire us without our Board of Directors’ consent for at least three years after the date the stockholder first held 15 percent or more of the voting stock. Our governing corporate documents also, among other things, require supermajority votes for mergers and similar transactions. In addition, our Board of Directors could, without stockholder approval, implement other anti-takeover defenses, such as a stockholder rights plan.

Changes in tax law, interpretations of existing tax law, or agreements or disputes with tax authorities could increase our tax costs. Determination of our worldwide provision for income taxes and other tax liabilities requires estimation and significant judgment, including because of the number of countries and territories in which we provide programs and services and the accounting complexity of certain of those programs and services. Applicable domestic and foreign tax authorities audit and review our determinations, and an adverse outcome resulting from any such audit or review could have a material negative effect on our operating results, cash flows, and financial condition. Our tax expenses and liabilities have in the past been and could in the future be affected by changes in tax laws or the interpretation of tax laws in any of the many jurisdictions in which we do business, as well as changes in our business operations.

Item 1B. Unresolved Staff Comments.

None.

Item 1C. Cybersecurity.

Risk Management and Strategy

We manage risks from cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K, through our overall enterprise risk management process, which is overseen by our Board. Our program is designed to maintain the confidentiality, integrity, security, and availability of the data that is created, collected, stored, and used to operate our business.

We assess, identify, and manage risks from cybersecurity threats through various mechanisms, which from time to time may include tabletop exercises, business unit assessments, control gap analyses, threat modeling, impact analyses, internal audits, external audits, vulnerability scans, penetration tests, and engagement of third parties to conduct analyses of our information security program. We obtain cybersecurity threat intelligence from recognized forums, third parties, and other sources as part of our risk assessment process. We also maintain a risk-based approach for assessing, identifying, and managing risks from cybersecurity threats associated with key third-party service providers, hotel owners, and other companies with whom we do business.

With respect to information security incident response, we maintain a Global Information Security & Privacy Incident Response Plan (“IRP”), which applies to information security incidents involving properties owned, leased, or managed by Marriott, as well as our above-property business locations. Our IRP sets out a coordinated, multi-functional approach for investigating, containing, and mitigating incidents, including reporting findings and keeping senior management and other key stakeholders informed and involved as appropriate.

For properties that are not owned, leased, or managed by Marriott, the franchisees, licensees, or other applicable counterparties are generally responsible for information security at such properties and the systems and business processes related to information security that are under their direction and control. Franchisees and licensees are typically required to comply with Marriott brand standards relating to information security, which include an obligation to report relevant information security incidents to us.

The resolutions with the FTC and the AG Offices include various long-term requirements relating to our data privacy and information security programs.

Table of Contents

We do not believe that risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect our overall business strategy, results of operations, or financial condition over the long term. See the discussion about the Starwood Data Security Incident under the “Litigation, Claims, and Government Investigations” caption in Note 7 to our financial statements, the discussion of the same in Part II, Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” and the discussion of cybersecurity risk in Part I, Item 1A, “Risk Factors.”

Governance

Our Board has established a Technology and Information Security Oversight Committee (“TISOC”) to assist the Board in providing oversight of matters pertaining to technology platforms and systems, information security, and privacy, including risks from cybersecurity threats; management’s efforts to monitor, provide governance over, and mitigate those risks; significant cybersecurity incidents; and emerging technology and trends, including AI. The TISOC meets at least four times per year and receives reports from our global information security team and other members of management about these matters. The Board’s Audit Committee, which assists the Board in providing oversight of matters pertaining to the Company’s internal control environment, compliance with legal and regulatory requirements, and risk assessment policies and procedures, receives reports regarding information security and technology-related audits conducted by our internal audit department. Risks from cybersecurity threats are also discussed with the full Board as part of regular legal updates and management presentations, the Board’s oversight of enterprise risk management, and periodic education sessions.

To establish, implement, and evaluate our risk management policies and practices with respect to cybersecurity threats, and to facilitate the communication of such matters to the Board, the TISOC, and the Audit Committee, as applicable, we have established a number of management committees, several of which include senior leaders and direct reports of the Company’s President and CEO, that serve as our policymaking and management-level governing bodies with respect to our information security, data privacy, and AI programs; oversee the implementation of our information security, data privacy, and AI risk management strategy; and identify, consider, and escalate information security, data privacy, and AI issues that may arise in our business.

Our information security program is operated on a 24/7 basis to address risks from cybersecurity threats and to respond to cybersecurity incidents globally. Cybersecurity incidents are escalated to our CISO and members of our global information security team, members of senior management, and members of the Board to the extent required under our IRP.

Our CISO and other members of senior management responsible for our information security program have extensive experience assessing and managing risks from cybersecurity threats, including decades of experience in information technology and information security positions; serving in information technology leadership positions at other large public companies; and having other significant experience in the areas of risk management, information technology, and information security. Our current CISO will be departing the Company voluntarily in late February 2026 for a position in another industry. We are undertaking a search for his replacement and expect to appoint a new CISO. Prior to such appointment, we intend to appoint an information security professional with appropriate expertise to act in an interim capacity to oversee our global information security program who will report to our Global Chief Information Officer and perform the CISO functions.

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
DIOD	2 hours ago
LEGT	2 hours ago
NTST	2 hours ago
AOS	2 hours ago
EXEL	2 hours ago
HCA	3 hours ago
PEGA	3 hours ago
MOH	3 hours ago
GPRE	3 hours ago
PTEN	3 hours ago
PECO	3 hours ago
ARI	3 hours ago
HIW	3 hours ago
SLAB	3 hours ago
KVYO	3 hours ago
UPST	3 hours ago
TCBI	3 hours ago
ADC	3 hours ago
MEDP	3 hours ago
INCY	3 hours ago
CMI	4 hours ago
CNX	5 hours ago
MAR	5 hours ago
GT	7 hours ago
CMS	7 hours ago
L	10 hours ago
CNA	11 hours ago
MAS	12 hours ago
CURB	12 hours ago
CVS	12 hours ago
ACRE	21 hours ago
T	1 day, 2 hours ago
BE	1 day, 2 hours ago
SIGI	1 day, 2 hours ago
UTL	1 day, 2 hours ago
RXO	1 day, 2 hours ago
APAD	1 day, 2 hours ago
ITT	1 day, 2 hours ago
CLF	1 day, 3 hours ago
VNO	1 day, 3 hours ago
ON	1 day, 3 hours ago
PI	1 day, 3 hours ago
BSAA	1 day, 3 hours ago
ZWS	1 day, 3 hours ago
BRX	1 day, 3 hours ago
KN	1 day, 3 hours ago
MRSH	1 day, 3 hours ago
FCFS	1 day, 3 hours ago
WM	1 day, 3 hours ago
NSC	1 day, 7 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - MAR

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - MAR

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing