Eastern Bankshares (EBC) Risk Analysis

The USA PATRIOT and Bank Secrecy Acts require financial institutions to develop programs to prevent financial institutions from being used for money laundering and terrorist activities. If such activities are detected, financial institutions are obligated to file suspicious activity reports with the U.S. Treasury's Office of Financial Crimes Enforcement Network. These rules require financial institutions to establish procedures for identifying and verifying the identity of customers seeking to open new financial accounts. Failure to comply with these regulations could result in fines or sanctions, including restrictions on conducting acquisitions or establishing new branches. Although we have developed policies and procedures designed to assist in compliance with these laws and regulations, these policies and procedures may not be effective in preventing violations of these laws and regulations.

The Community Reinvestment Act, the Equal Credit Opportunity Act, the Fair Housing Act, and other fair lending laws and regulations impose community investment and nondiscriminatory lending requirements on financial institutions. The Consumer Financial Protection Bureau, the Department of Justice and other federal and state agencies are responsible for enforcing these federal laws and regulations and comparable state provisions. Various federal banking agencies have recently completed significant changes to their respective Community Reinvestment Act regulations. Federal, state, or local consumer lending laws may restrict our ability to originate certain mortgage loans or increase our risk of liability with respect to such loans. A successful regulatory challenge to an institution's performance under the Community Reinvestment Act, the Equal Credit Opportunity Act, the Fair Housing Act or other fair lending laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions, restrictions on expansion and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution's performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition and results of operations.

Eastern Bank and Eastern Bankshares, Inc. are subject to extensive regulation, supervision and examination by regulatory authorities, including the Massachusetts Commissioner of Banks, the FDIC, the Federal Reserve Board and the Consumer Financial Protection Bureau. Federal and state laws and regulations govern numerous matters affecting us, including changes in the ownership or control of banks and bank holding companies, maintenance of adequate capital and the financial condition of a financial institution, permissible types, amounts and terms of extensions of credit and investments, permissible non-banking activities, the level of reserves against deposits and restrictions on stock repurchases and dividend payments. The FDIC and the Massachusetts Commissioner of Banks have the power to issue cease and desist orders to prevent or remedy unsafe or unsound practices or violations of law by banks subject to their regulation, and the Federal Reserve Board possesses similar powers with respect to bank holding companies and their subsidiary banks. These and other restrictions limit the manner in which we and Eastern Bank may conduct business and obtain financing. Regulatory requirements, as well as our own internal stress testing and capital management policies, may, among other things, require us to increase our capital levels, limit our dividends or other capital distributions to shareholders, modify our business strategies, or decrease our exposure to various asset classes. Certain capital transactions, including share repurchases and the declaration and issuance of dividends, are subject to the approval of our regulators. These requirements may limit our ability to respond to and take advantage of market developments. Changes to statutes, regulations, or regulatory policies, including changes in interpretation or implementation of statutes, regulations or policies, could subject us to additional costs, limit the types of financial services and products we may offer, and/or increase the ability of non-banks to offer competing financial services and products, among other impacts. Failure to comply with laws, regulations, or policies could result in sanctions by regulatory agencies, civil money penalties, and/or reputation damage, which could have a material adverse effect on our business, financial condition, and results of operations. See the section titled "Business-Supervision and Regulation" included in Part I, Item 1 in this Annual Report on Form 10-K for a discussion of the regulations to which we are subject. Regulatory authorities have extensive discretion in their supervisory and enforcement activities, including the imposition of restrictions on our operations, the classification of our assets and determination of the level of our allowance for loan losses. These regulations, along with the currently existing tax, accounting, securities, insurance, monetary laws, rules, standards, policies and interpretations control the methods by which financial institutions conduct business, implement strategic initiatives and tax compliance, and govern financial reporting and disclosures. Any change in such regulation and oversight, whether in the form of regulatory policy, regulations, legislation or supervisory action, may have a material impact on our operations. In addition, changes in the legal and regulatory framework under which we operate require us to update our information systems to ensure compliance. Our need to review and evaluate the impact of ongoing rule proposals, final rules and implementation guidance from regulators further complicates the development and implementation of new information systems for our business. Also, our regulators expect us to perform increased due diligence and ongoing monitoring of third-party vendor relationships, thus increasing the scope of management involvement and decreasing the efficiency otherwise resulting from our relationships with third-party technology providers.

In addition to being affected by general economic conditions, our earnings and growth are affected by the monetary and related policies of the Federal Reserve Board. The Federal Reserve Board regulates the money supply and credit conditions by using instruments such as open market purchases and sales of U.S. government securities, adjustments of the discount rate and changes in banks' reserve requirements against bank deposits and the interest rate paid on such reserves. These instruments are used in varying combinations to influence overall economic growth and the distribution of credit, bank loans, investments and deposits. Their use also affects interest rates charged on loans or paid on deposits. The monetary and related policies of the Federal Reserve Board have had a significant effect on the operating results of financial institutions in the past and are expected to continue to do so in the future. Changes in any of these policies are influenced by macroeconomic conditions and other factors that are beyond Eastern Bank's control and the effects of such policies upon our business, financial condition and results of operations cannot be predicted.

Our profitability may be adversely affected by current and future rulemaking and enforcement activity by the various federal, state and self-regulatory organizations to which we are subject. Regulations can adversely affect our compliance costs and other non-interest expenses, and failure to comply with regulations could subject us to regulatory actions or litigation, which could have a material adverse effect on our business, results of operations, or financial condition. New laws, rules and regulations, or changes to the interpretation or enforcement of existing laws, rules or regulations, from time to time could increase our expenses, causing our recent historical expenses not to be indicative of future expenses, and could result in limitations on the lines of business we conduct or plan to conduct, modifications to our current or future business practices, and increased capital requirements. For example, the SEC and our banking regulators have proposed climate-related disclosure requirements and principles for climate-related financial risk management, respectively. We expect that these developments could negatively impact our results, including by increasing our legal, compliance, and information technology expenditures and could result in other costs, as well as greater risks of lawsuits and enforcement activity by regulators. These changes may also affect the array of products and services we offer to our customers. It is unclear how and whether our regulators, including the SEC, FDIC, other banking regulators and other state insurance regulators may respond to, or enforce elements of, these new regulations or develop their own similar laws and regulations. The impacts, degree and timing of the effect of applicable laws, future regulations and industry principles on our business cannot now be anticipated and may have further impacts on our products and services and the results of operations.

From time to time, local, state or federal tax authorities change tax laws and regulations, which may result in a decrease or increase to our deferred tax asset. Local, state or federal tax authorities may interpret laws and regulations differently than we do and challenge tax positions that we have taken on tax returns. This may result in differences in the treatment of revenues, deductions, credits and/or differences in the timing of these items. The differences in treatment may result in payment of additional taxes, interest, penalties or litigation costs that could have a material adverse effect on our operating results.

We currently are subject to state and federal rules regarding privacy and data protection, such as the Massachusetts data security law (Standards for the Protection of Personal Information of Residents of the Commonwealth). Our growth and expansion into a variety of new fields may potentially involve new U.S.-based regulatory issues/requirements including, for example, the New York Department of Financial Services Cybersecurity Regulation or the California Consumer Privacy Act ("CCPA"). In addition, other authorities may take the position that we are subject to additional data protection laws or regulations, such as the European Union's General Data Protection Regulation if, for example, some of our customers are or become residents of applicable countries or states while maintaining account relationships with us. The potential costs of compliance with or imposed by new or existing laws and regulations and policies may affect the use of our products and services and could have a material adverse impact on our results of operations.

A cornerstone of our strategic plan involves retaining as well as hiring highly skilled and qualified personnel. Accordingly, our ability to implement our strategic plan and our future success depends on our ability to attract, retain and motivate highly skilled and qualified personnel, including our senior management and other key employees and directors. The failure to attract or retain, including as a result of an untimely death or illness of key personnel, or ability to replace a sufficient number of appropriately skilled and key personnel, could place us at a significant competitive disadvantage and prevent us from successfully implementing our strategy, which could impair our ability to implement our strategic plan successfully, achieve our performance targets and otherwise have a material adverse effect on our business, financial condition and results of operations. Limitations on the manner in which regulated financial institutions, such as us, can compensate their officers and employees may make it more difficult for such institutions to compete for talent with financial institutions and other companies not subject to these or similar limitations. If we are unable to compete effectively, our business, financial condition and results of operations could be adversely affected, perhaps materially.

In deciding whether to extend credit or enter into other transactions with customers and counterparties, we rely on information furnished by or on behalf of customers and counterparties, including financial statements and other financial information. We also may rely on representations of customers and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. If any of such information is incorrect, then the creditworthiness of our customers and counterparties may be misrepresented, which would increase our credit risk and expose us to possible write-downs and losses.

We believe that progressively rising sea levels will be an area of risk over time for the coastal regions of Massachusetts and New Hampshire in our market, both as the frequency and severity of extreme weather events increase and as currently inhabited property and land parcels are exposed to episodic flooding and routinely higher tides. The increase in the relative sea level in Boston, as a coastal city, and other coastal regions of Massachusetts and New Hampshire in our market is expected to result in higher coastal surges during storm events and, when considered with projected increases in precipitation intensities, an increase in stormwater flooding. These effects in Boston and similar conditions elsewhere in our market area may adversely affect the value of commercial and residential properties that secure some of our loans and may adversely affect economic develop in portions of our market area.

Natural disasters can disrupt our operations, result in damage to our properties, reduce or destroy the value of the collateral for our loans and negatively affect the economies in which we operate, which could have a material adverse effect on our results of operations and financial condition. A significant natural disaster, such as a hurricane, earthquake, fire or flood, could have a material adverse impact on our local market area and ability to conduct business, and our insurance coverage may be insufficient to compensate for losses that may occur. Public health crises, such as pandemics and epidemics, domestic or geopolitical crises, such as terrorism, military conflict, wars or the perception that hostilities may be imminent, political instability or civil unrest, or other conflict, human error or other events outside of our control, could cause disruptions to our business or the United States economy as a whole, and our business and operating results could suffer. The occurrence of any such event could have a material adverse effect on our business, operations and financial condition. Climate change may worsen the severity and impact of future hurricanes, earthquakes, fires, floods and other extreme weather-related events that could cause disruption to our business and operations. Chronic results of climate change such as shifting weather patterns could also cause disruption to our business and operations.