ARKO Corp (ARKO) Risk Analysis

We and our facilities and operations are subject to various federal, state and local environmental, health and safety laws, and regulations. These laws and regulations continue to evolve and are expected to increase in both number and complexity over time and govern not only the manner in which we conduct our operations, but also the products we sell. For example, international agreements and national, regional, and state legislation and regulatory measures that aim to limit or reduce greenhouse gas emissions or otherwise address climate change are currently in various stages of implementation. Additionally, in March 2022, the SEC proposed new climate-related disclosure rules, which if adopted as proposed, would require significant new climate-related disclosure in SEC filings, including certain climate-related metrics and greenhouse gas emissions data, and third-party attestation requirements. At this time, we cannot predict the costs of compliance with or any potential adverse impacts resulting from, these new rules if adopted as proposed, but compliance with such rules, when they are finalized, could require significant effort and divert management's attention and resources, which could adversely affect our operating results. There are inherent risks that increasingly restrictive environmental and other regulation could materially impact our results of operations or financial condition. Most of the costs of complying with existing laws and regulations pertaining to our operations and products are embedded in the normal costs of doing business. However, it is not possible to predict with certainty the amount of additional investments in new or existing technology or facilities, or the amounts of increased operating costs to be incurred in the future, to prevent, control, reduce or eliminate releases of hazardous materials or other pollutants into the environment; remediate and restore areas damaged by prior releases of hazardous materials; or comply with new or changed environmental laws or regulations. Although these costs may be significant to the results of operations, we do not presently expect them to have a material adverse effect on our liquidity or financial position. Accidental leaks and spills requiring cleanup may occur in the ordinary course of business. We may incur expenses for corrective actions or environmental investigations at various owned and previously owned facilities, leased or previously leased facilities, at third-party sites we manage, and at third-party-owned waste disposal sites used by us. An obligation may arise when operations are closed or sold or at non-company sites where company products have been handled or disposed of. Expenditures to fulfill these obligations may relate to facilities and sites where past operations followed practices and procedures that were considered acceptable at the time but may require investigative or remedial work or both to meet current or future standards. Most of our fuel is transported by third-party carriers to our retail, dealer and fleet fueling sites. A portion of fuel is transported in our own trucks, instead of by third-party carriers, therefore, our operations are also subject to hazards and risks inherent in transporting motor fuel. These hazards and risks include, but are not limited to, fires, explosions, traffic accidents, spills, discharges and other releases, and cross-drops, any of which could result in distribution difficulties and disruptions, environmental pollution, governmentally-imposed fines or clean-up obligations, personal injury or wrongful death claims and other damage to our properties and the properties of others. The transportation of motor fuels, as well as the associated storage of such fuels at locations including convenience stores, are subject to various federal, state and local environmental laws and regulations, including those relating to ownership and operation of storage tanks, the release or discharge of regulated materials into the air, water and soil, the generation, storage, handling, use, transportation and disposal of hazardous materials, the exposure of persons to regulated materials, and the health and safety of employees dedicated to such transportation and storage activities. These laws and regulations may impose numerous obligations and restrictions that are applicable to motor fuels transportation and storage and other related activities, including acquisition of, or applications for, permits, licenses, or other approvals before conducting regulated activities; restrictions on the quality and labeling of the motor fuels that may be sold; restrictions on the types, quantities and concentration of materials that may be released into the environment; required capital expenditures to comply with pollution control requirements; and imposition of substantial liabilities for pollution or non-compliance resulting from these activities. Numerous governmental authorities, such as the DOT and EPA, and analogous state agencies, have the power to monitor and enforce compliance with these laws and regulations and the permits, licenses and approvals issued under them, including fines, which can result in increased pollution control equipment costs or other actions. Failure to comply with these existing laws and regulations, or any newly adopted laws or regulations, may trigger administrative, civil or criminal enforcement measures, including the assessment of monetary penalties or other sanctions, the imposition of investigative, remedial or corrective action obligations, the imposition of additional compliance requirements on certain operations or the issuance of orders enjoining certain operations. Moreover, the trend in environmental regulation is for more restrictions and limitations on activities that may adversely affect the environment, which aligns with a growing trend in investor sentiment, and such regulation may result in increased costs of compliance. Where releases of motor fuels or other substances or wastes have occurred, federal and state laws and regulations, and our lease agreements, require that contamination caused by such releases be assessed and remediated to meet applicable clean-up standards. Certain environmental laws impose strict, joint and several liability for costs required to clean-up and restore sites where motor fuels or other waste products have been disposed of or otherwise released. The costs associated with the investigation and remediation of contamination, as well as any associated third-party claims for damages or to impose corrective action obligations, could be substantial and could have a material adverse effect on us or our customers who transport motor fuels or own or operate convenience stores or other facilities where motor fuels are stored. For more information on potential risks arising from environmental and occupational safety and health laws and regulations, please see "Business-Environmental and Other Government Regulations."

We compete with other convenience stores, gas stations, large and small food retailers, quick service restaurants and dollar stores, as well as companies that provide delivered fuels. Because all such competitors offer products and services that are very similar to those offered by us, a number of key factors determine our ability to successfully compete in the marketplace. These include the location of stores, competitive pricing, convenient access routes, the quality, configuration and efficiency of stores and fueling facilities, and a high level of service. In particular, many large convenience store chains have expanded their number of locations and remodeled their existing locations in recent years, enhancing their competitive position. In addition, some of our competitors have greater financial resources and scale than us, which may provide them with competitive advantages in negotiating fuel and other supply arrangements. Our inability to successfully compete in the marketplace by continuously meeting customer requirements concerning price, quality and service level could have a material adverse effect on our business, financial condition and results of operations.

The road transportation fuel and convenience business is generally driven by consumer preferences, growth of road traffic, demand for trucking services, and trends in travel and tourism. Automotive, industrial and power generation manufacturers are developing more fuel-efficient engines, hybrid engines, electric vehicles and alternative clean power systems. In 2023, electric vehicles accounted for approximately 7.6% of all light vehicle sales in the United States. In addition, truck and other vehicle manufacturers and our customers continue to focus on ways to improve motor vehicle fuel efficiency and conserve fuel, including use of truck platooning, or the electronic linking of trucks with a lead vehicle, heat and kinetic energy recovery technologies, substantially lighter "super trucks" and higher efficiency motor fuels. Demand for trucking services in the United States generally reflects the amount of commercial activity in the U.S. economy. When the U.S. economy declines, demand for goods moved by trucks usually declines, and in turn demand for diesel fuel supplied by our fleet fueling segment typically declines, which could significantly harm our results of operations and financial condition. A number of key factors could impact current customer behavior and trends with respect to road transportation and fuel consumption. These include new technologies providing increased access to non-fuel dependent means of transportation, legislation and regulations focused on fuel efficiency and lower fuel consumption, and the public's general approach with regard to climate change and the effects of greenhouse gas emissions. Significant developments in any of the above-listed factors could lead to substantial changes in the demand for petroleum-based fuel and have a material adverse effect on our business, financial condition and results of operations.

We accept a variety of credit cards and debit cards in our convenience stores and at our fuel dispensers and, accordingly, we are, and will continue to be, subject to significant and evolving regulations and compliance requirements, including obligations to implement enhanced authentication processes that could result in increased costs and liability and reduce the ease of use of certain payment methods. Additionally, we pay interchange and other fees, which may increase over time. Europay, MasterCard and Visa, or EMV, is a global standard for credit cards that uses computer chips to authenticate and secure chip-card transactions. The liability for fraudulent credit card transactions shifted from the credit card processor to us in April 2021 for transactions at the fuel dispensers. As of December 31, 2023, due to the required time and cost necessary to upgrade each site, supply chain constraints related to necessary equipment, and contractor availability, we completed upgrading our fuel dispensers to be EMV-compliant at approximately 75% of our retail locations, and anticipate being substantially complete by the end of 2025. Accordingly, we may be subject to liability for fraudulent credit card transactions processed at fuel dispensers that are now EMV-compliant. We do not believe that this will expose us to material chargeback liability. We rely on fuel brands and independent service providers for payment processing, including credit and debit cards. If these fuel brands and independent service providers become unwilling or unable to provide these services to us, if the cost of using these providers increases, or if such providers have a data breach or mishandle our data, our business could be harmed. Additionally, there is a trend toward cardless payment methods, which may require additional investment to implement at our locations. As these trends develop, we will need to align our fleet card offering to the new technologies. We are also subject to payment card association operating rules and agreements, including data security rules and agreements and certification requirements which could change or be reinterpreted to make it difficult or impossible for us to comply. In particular, we must comply with the Payment Card Industry Data Security Standard, or PCI DSS, a set of requirements designed to ensure that all companies that process, store or transmit payment card information maintain a secure environment to protect cardholder data. If we, or our third-party service providers, fail to comply with any of these rules or requirements, or if our, or our third-party service providers, data security systems are breached or compromised, we may be liable for losses incurred by card issuing banks or customers, subject to fines and higher transaction fees, lose our ability to accept credit or debit card payments from our customers, or process electronic fund transfers or facilitate other types of payments. Any failure to comply with such rules or requirements could significantly harm our brand, reputation, business, financial condition and results of operations.

We rely on our trademarks, trade names, and brand names to distinguish our products and services from those of our competitors, and have registered or applied to register many of these trademarks. We cannot assure you that our trademark applications will be approved. Third-parties may also oppose our trademark applications, or otherwise challenge our use of the trademarks. In the event that our trademarks are successfully challenged, we could be forced to rebrand our products or services, which could result in loss of brand recognition, and could require us to devote resources advertising and marketing new brands. Further, we cannot assure you that competitors will not infringe our trademarks, or that we will have adequate resources to enforce our trademarks. Any claims of intellectual property infringement, even those without merit, could be expensive and time consuming to defend and divert management's attention, cause us to cease making, licensing or using the products or services that incorporate the challenged intellectual property, require us to rebrand our products or services, if feasible, or require us to enter into royalty or licensing agreements in order to obtain the right to use a third-party's intellectual property. We also rely on trademarks that we license from third-parties to identify the branded fuels that we supply and trademarks in our quick service food offerings. If we violate the terms of these licenses, we could be liable for damages, and the licenses could be terminated. The termination or non-renewal of any of these licenses could require us to rebrand or to replace the licensed goods and services, and accordingly could have a material adverse effect on our business, reputation, financial condition and results of operations. We also rely on unpatented proprietary technology. It is possible that others will independently develop the same or similar technology or otherwise obtain access to our unpatented technology. We use access controls in an effort to prevent unauthorized use or disclosure of our trade secrets and proprietary or confidential information, however, we cannot assure you that these controls will not be circumvented. We also generally require employees, consultants, advisors and collaborators to enter into confidentiality agreements. We cannot assure you that these agreements will provide meaningful protection for our trade secrets, know-how or other proprietary information in the event of any unauthorized use, misappropriation or disclosure of such trade secrets, know-how or other proprietary information. If we are unable to maintain the proprietary nature of our technologies, we could be materially adversely affected.

We rely on multiple information technology systems and a number of third-party vendor platforms (collectively, "IT Systems") in order to run and manage our daily operations, including for fuel pricing, loyalty programs, payroll, accounting, budgeting, reporting, and store operations. Such IT Systems allow us to manage various aspects of our business, communicate with customers, and to provide reliable analytical information to our management. The future operation, success and growth of our business depends on streamlined processes made available through our uninhibited access to information systems, global communications, internet activity and other network processes. Like most other companies, despite our current cybersecurity risk management framework (see "Cybersecurity" for additional detail) and process controls, our information technology systems, and those of our third-party service providers, may be vulnerable to information security breaches, ransomware or extortion, mishandled data, acts of vandalism, computer viruses and interruption or loss of valuable business data. Stored data might be improperly accessed due to a variety of events beyond our control, including, but not limited to, damage and interruption from power loss or natural disasters, computer system and network failures, loss of telecommunications services, physical and electronic loss of access to data and information, terrorist attacks, hackers, security breaches or other security incidents, and computer viruses or attacks. We rely on third-parties to provide maintenance and support of our IT Systems, and to store our data (including customer data) and a failure of any of these third-parties to provide adequate and timely support, or compromise of these third-parties' systems, could adversely affect the operation of our IT Systems. We have technology security initiatives and disaster recovery plans in place to mitigate our risk to these vulnerabilities, but these measures may not be adequately designed or implemented to ensure that our operations are not disrupted or the data security breaches do not occur. Hackers and data thieves are increasingly sophisticated and operate large-scale and complex attacks which may remain undetected until after they occur. Any breach of our network or those of our vendors may result in damage to our reputation, the loss of valuable business data, the misappropriation of our valuable intellectual property or trade secret information, misappropriation of our customers' or employees' personal information, key personnel being unable to perform duties or communicate throughout the organization, loss of retail sales, significant costs for data restoration and other adverse impacts on our business. Despite our existing security procedures and controls, if our network or the network of one of our service providers was compromised, it could give rise to unwanted media attention, materially damage our customer relationships, harm our business, reputation, results of operations, cash flows and financial condition, result in fines or litigation, and may increase the costs we incur to protect against such information security breaches, such as increased investment in technology, the costs of compliance with consumer protection laws and costs resulting from consumer fraud. In addition, successful cyberattacks, data breaches, or data security incidents, at one of our vendors, other convenience store operators, large retailers or other market participants, whether or not we are directly impacted, could lead to a general loss of customer confidence or affect our supply chain which could negatively affect us, including harming the market perception of the effectiveness of our security measures or harming the reputation of the industry in general, which could result in reduced use of our products and services. The costs of mitigating cybersecurity risks are significant and are likely to increase in the future. These costs include, but are not limited to, retaining the services of cybersecurity providers; compliance costs arising out of existing and future cybersecurity, data protection and privacy laws and regulations; costs related to maintaining redundant networks, data backups and other damage-mitigation measures; and extra administrative costs to mitigate risk and deal with any system breaches. While we maintain cyber liability insurance, our insurance may not be sufficient to protect against all losses we may incur due to policy exclusions or if we suffer significant or multiple attacks.

Our operations and the scope of services we provide are affected by changes in the macro-economic situation in the United States, which has a direct impact on consumer confidence and spending patterns. A number of key macro-economic factors, such as high interest rates, inflation and unemployment, could have a negative effect on consumer habits and spending, and lead to lower demand for fuel and other products sold at our convenience stores and gas stations. The U.S. economy has continued to experience inflationary pressures, which reduce consumer purchasing power. If this trend continues or increases, it could negatively impact demand and seasonal travel patterns, which could reduce future sales volumes. Significant negative developments in the macro-economic environment in the United States could have a material adverse effect on our business, financial condition and results of operations.

Weather conditions have a significant effect on our sales, as retail customer transactions in higher profit margin products generally increase when weather conditions are favorable. Consequently, our results are seasonal, and we typically earn more during the warmer second and third quarters of the year. In addition, severe weather phenomena, such as hurricanes, may adversely affect our results of operations and could result in significant damage to our gas stations, convenience stores and infrastructure, potentially resulting in substantial costs and expenses. Temporary or long-term disruptions to our supply chain in connection with unfavorable weather conditions could impact our network of suppliers and distributors, significantly impacting the quality, variety and pricing of merchandise sold at our sites.