KLA (KLAC) Risk Analysis

We are subject to various risks related to compliance with laws, rules and regulations enacted by legislative bodies and/or regulatory agencies in the countries in which we operate and with which we must comply, including environmental, safety, antitrust, anti-corruption/anti-bribery, unclaimed property, economic sanctions and export control regulations. We have policies and procedures designed to promote compliance with applicable laws, but there can be no assurance our policies and procedures will prove completely effective in ensuring compliance by all our personnel, business partners and representatives, for whose misconduct we may under some circumstances be legally responsible. Our failure or inability to comply with existing or future laws, rules or regulations in the countries in which we operate could result in government investigations and/or enforcement actions, which could result in significant financial cost (including investigation expenses, defense costs, assessments and criminal or civil penalties), reputational harm and other consequences that may adversely affect our operating results, financial condition and ability to conduct our business. For instance, in response to the war between Russia and Ukraine, the U.S., European Union and other countries have imposed sanctions against Russia, Belarus and certain other regions, entities and individuals, and may impose additional sanctions, export controls or other measures. The imposition of sanctions, export controls and other measures could adversely impact our business including preventing us from performing existing contracts, recognizing revenue, pursuing new business opportunities or receiving payment for products already supplied or services already performed with customers. Additionally, we are subject to various domestic and international environmental laws and regulations, including those that control and restrict the use, transportation, emission, discharge, storage, and disposal of certain chemicals, gases and other substances. Current and proposed restrictions on per- and polyfluoroalkyl substances ("PFAS") may negatively impact our supply chain due to potentially decreased availability, or non-availability, of PFAS-containing products or commercially feasible alternatives. Any failure to comply with applicable environmental laws, regulations or requirements may subject us to a range of consequences, including fines, suspension of certain of our business activities, limitations on our ability to sell our products, obligations to remediate environmental contamination, and criminal and civil liabilities or other sanctions. Some of these laws impose strict liability for certain releases, which may require us to incur costs regardless of fault or the legality of actions at the time of release. In addition, changes in environmental laws and regulations (including any relating to climate change and greenhouse gas ("GHG") emissions) could require us, or others in our value chain, to install additional equipment, alter operations to incorporate new technologies or processes, or revise process inputs, among other things, which may cause us to incur significant costs or otherwise adversely impact our business performance. Various agencies and governmental bodies have expressed particular interest in promulgating rules relating to climate change. For example, in March 2022, the SEC published a proposed rule that would require companies to provide significantly expanded climate-related disclosures, which may require us to incur significant additional costs to comply and impose increased oversight obligations on our management and Board of Directors. We also face increasing complexity in our manufacturing, product design and procurement operations as we adjust to new and prospective requirements relating to the composition of our products, including restrictions on lead and other substances and requirements to track the sources, production methods, or provenance of certain metals and other materials. The cost of complying, or failing to comply, with these and other regulatory requirements or contractual obligations could adversely affect our operating results, financial condition and ability to conduct our business. From time to time, we may receive inquiries, subpoenas, investigative demands or audit notices from governmental or regulatory bodies, or we may make voluntary disclosures, related to legal, regulatory or tax compliance matters, and these matters may result in significant financial cost (including investigation expenses, defense costs, assessments and criminal or civil penalties), reputational harm and other consequences that could materially and adversely affect our operating results and financial condition. In addition, we may be subject to new or amended laws, including laws that conflict with other applicable laws, which may impose compliance challenges and create the risk of non-compliance. In addition, we may from time to time be involved in legal proceedings or claims regarding employment, immigration, contracts, product performance, product liability, antitrust, ESG, IP, export controls, cybersecurity and data privacy, tax, securities, unfair competition and other matters. These legal proceedings and claims, regardless of their merit, may be time-consuming and expensive to prosecute or defend, divert management's attention and resources, and/or inhibit our ability to sell our products. There can be no assurance regarding the outcome of current or future legal proceedings or claims, which could adversely affect our operating results, financial condition and ability to operate our business.

We maintain significant operations outside the United States, and existing and evolving trade restrictions imposed by the U.S. and other governments could significantly disrupt our global operations. The U.S. government has tightened export controls for commodities, software, and technology (collectively, "items") destined to China over the past several years. These controls have included, for example, restrictions on exporting certain items to military end users and for military end uses, the addition of numerous entities to the U.S. Entity List (a list of parties that are generally ineligible to receive U.S.-regulated items without prior licensing from BIS), and the creation of new licensing requirements that apply to the export, re-export, and transfer of certain foreign-made items that are the direct product of U.S. origin technology or produced by a plant or major component of a plant that itself is the direct product of U.S. origin technology and which are destined to Huawei or its affiliates and other specified companies on the U.S. Entity List. In October 2022, BIS published the 2022 BIS Rules that introduce restrictions related to semiconductor, semiconductor manufacturing, supercomputer, and advanced computing items and end uses. These rules impose restrictions on our ability to sell, ship and support certain equipment and otherwise conduct business with certain counterparties, primarily including China-based companies involved in advanced semiconductor manufacturing. Further, the 2022 BIS Rules impose restrictions on the activities of U.S. persons with respect to certain items that are not subject to the Export Administration Regulations ("EAR"), which departs from BIS' typical practice of controlling items that are subject to the EAR, and could further restrict our ability to conduct business in China. In October 2023, BIS issued the 2023 BIS Rules designed to update export controls on advanced computing semiconductors and semiconductor manufacturing equipment, as well as items that support supercomputing applications and end-uses, to certain D1, D4 and/or D5 countries in Supplement No. 1 of Part 740 of the U.S. Export Administration Regulations, including China. The 2023 BIS Rules adjust the parameters included in the 2022 BIS Rules that determine whether an advanced computing chip is restricted and impose new measures to address risks of circumvention of the controls established by the 2022 BIS Rules. The 2023 BIS Rules are very complex and, in January 2024, KLA, among other companies, submitted comments to BIS on the 2023 BIS Rules. BIS could revise or expand the 2023 BIS Rules in response to public comments. Likewise, BIS may issue guidance clarifying the scope of the rules. Such revisions, expansions or guidance could change the impact of the rules for our business. Commerce has also added, and may continue to add, China-based entities to the U.S. Entity List, imposing export restrictions to entities that could disrupt or prevent our product shipment, and further disrupt our revenue recognition and business operations, and our ability to support our customers in China. These rules and regulations may significantly harm our business unless we are able to obtain required licenses. We will continue to apply for export licenses, when required, in an effort to avoid disruption to our and our customers' operations, but there can be no assurance that export licenses applied for by either us or our customers, now or in the future, will be granted. To the extent BIS does issue licenses to us or to our customers, such licenses may have a short duration or require us to satisfy various conditions. If pending and future export license applications are not granted, or additional restrictions are imposed, or if regulators adopt new interpretations of existing regulations, the potential impact on us could be material by disrupting our supply chain and product shipment, impairing our ability to complete product development in a timely manner, or our ability to support existing customers of covered products or supply customers of covered products outside the impacted regions, and requiring us to transition certain operations out of one or more of the identified countries. Failure to obtain export licenses could also harm our RPO, requiring us to return substantial deposits received from customers in China for purchase orders, and/or further limiting our ability to meet our contractual obligations and sell our products or provide services to our customers in China. We may lose revenue in future periods related to anticipated sales to customers in China unless we are able to replace their orders with other customer orders for which either a license has been obtained or is not required. Our revenue from sales of products and provision of services to customers in China was 43%, 27% and 29% for fiscal years 2024, 2023 and 2022, respectively. Additionally, the Chinese government has adopted, and may further adopt, new regulations, in response to U.S. government actions, which could adversely affect our ability to do business in China. We have controls and procedures designed to maintain compliance with U.S. and other applicable export control laws and regulations; however, we cannot guarantee that such controls and procedures will be successful in preventing violations or allegations of violations, of increasingly complex and often conflicting regulations worldwide. The complexity and evolving nature of the rules and regulations, and the fact that Commerce or other relevant regulators might adopt interpretations of regulations that differ from those of the Company, increase our risk of non-compliance. Any violations by us of applicable export laws and regulations could result in significant civil and criminal penalties, including fines and criminal proceedings against the Company or responsible employees, a denial of export privileges, suspension or debarment. Our employees, customers, suppliers or other third parties with whom we work may also engage in conduct for which the Company might be held responsible. We could face significant compliance, litigation or settlement costs and diversion of management's attention from our business as a result. Further, the Company may be subject to negative publicity or reputational harm, resulting in reduced demand for our products, employee attrition and other negative impact on our business, results of operations, financial condition and cash flows.

We are subject to tax and regulatory compliance audits (such as related to customs or product safety requirements) in various jurisdictions, and such jurisdictions may assess additional income or other taxes, penalties, fines or other prohibitions against us. Although we believe our tax estimates are reasonable and that our products and practices comply with applicable regulations, the final determination of any such audit and any related litigation could be materially different from our historical income tax provisions and accruals related to income taxes and other contingencies. The results of an audit or litigation could have a material adverse effect on our operating results or cash flows in the period or periods for which that determination is made.

Our global operations are dependent upon certain information systems, including telecommunications, the internet, our corporate intranet, network communications, email and various computer hardware and software applications. System failures or malfunctions, such as difficulties with our customer and supplier relationship management systems, could disrupt our operations and our ability to timely and accurately process and report key components of our financial results. Our enterprise resource planning ("ERP") system is integral to our ability to accurately and efficiently maintain our books and records, record transactions, provide critical information to our management, and prepare our financial statements. Any disruptions or difficulties that may occur in connection with our ERP system or other systems (whether in connection with the regular operation, periodic enhancements, modifications or upgrades of such systems or the integration of our acquired businesses into such systems, or due to cybersecurity events such as ransomware attacks, including attacks on the information systems of our business partners and other third parties) could adversely affect our ability to complete important business processes, such as the evaluation of our internal controls over financial reporting pursuant to Section 404 of the Sarbanes-Oxley Act of 2002. Any of these events could have an adverse effect on our business, operating results and financial condition.

We are increasingly incorporating AI capabilities into the development of technologies and our business operations, and into our products and services. AI technology is complex and rapidly evolving, and may subject us to significant competitive, legal, regulatory and other risks. The implementation of AI can be costly and there is no guarantee that our use of AI will enhance our technologies, benefit our business operations or produce products and services that are preferred by our customers. Our competitors may be more successful in their AI strategy and develop superior products and services with the aid of AI. Additionally, AI algorithms or training methodologies may be flawed, and datasets may contain irrelevant, insufficient or biased information, which can cause errors in outputs. This may give rise to legal liability, damage our reputation and materially harm our business. The use of AI in the development of our products and services, and our customers' use of AI in relation to our products and services could also cause loss of IP, as well as subject us to risks, including third-party claims, related to IP infringement or misappropriation, data privacy and cybersecurity. Additionally, concerns over the use of AI for purposes contrary to public interests could impair public acceptance of AI and impair demand for our products and services. Furthermore, the United States and other countries may adopt laws and regulations related to AI. Such laws and regulations could cause us to incur greater compliance costs and limit the use of AI in the development of our products and services. Any failure or perceived failure by us to comply with such regulatory requirements could subject us to legal liabilities, damage our reputation, or otherwise have a material and adverse impact on our business.