Laureate Education (LAUR) Risk Factors

Our business is subject to the risk of litigation by employees, students, suppliers, competitors, minority partners, counterparties in transactions in which we purchase or sell assets or leased property, stockholders, government agencies or others through private actions, class actions, administrative proceedings, regulatory actions or other litigation, some of which may take place in jurisdictions in which local parties may have certain advantages over foreign parties. The outcome of litigation, particularly class action lawsuits, regulatory actions and intellectual property claims, is difficult to assess or quantify. Plaintiffs in these types of lawsuits may seek recovery of very large or indeterminate amounts, or may assert criminal charges, and the magnitude of the potential loss relating to these lawsuits may remain unknown for substantial periods of time. In addition, certain of these lawsuits, if decided adversely to us or settled by us, may result in liability material to our financial statements as a whole or may negatively affect our operating results if changes to our business operation are required. The cost to defend future litigation may be significant. There also may be adverse publicity associated with litigation that could negatively affect customer perception of our business, regardless of whether the allegations are valid or whether we are ultimately found liable. As a result, litigation may materially adversely affect our business, financial condition and results of operations. See "Item 3-Legal Proceedings." In the past, we have divested a number of businesses. As customary, we have contractually agreed to indemnify the buyers against certain liabilities and obligations related to the divestiture. If we incur costs associated with indemnification claims related to our divestitures, our business, financial condition and results of operations may be adversely affected.

As a multinational corporation, we are subject to income taxes as well as non-income based taxes in the United States and various foreign jurisdictions. The determination of our provision for income taxes and other tax liabilities requires significant judgment, and there are many transactions and calculations where the ultimate tax determination is uncertain. In addition, changes in the valuation of our deferred tax assets and liabilities, or changes in tax laws, regulations and accounting principles, could have a material adverse effect on our future income taxes. We have not recorded deferred tax liabilities for undistributed foreign earnings because our strategy is to reinvest these earnings outside the United States. As circumstances change and if some or all of these undistributed foreign earnings are remitted to the United States, we may be required to recognize deferred tax liabilities on any amounts that we are unable to repatriate in a tax-free manner. We are subject to regular review and audit by both domestic and foreign tax authorities of entities related to both our current operations and operations related to divested entities. Any adverse outcome of such a review or audit could have a negative effect on our operating results and financial condition. We are also subject to non-income based taxes, such as payroll, sales, use, value-added, net worth, property and goods and services taxes, in both the United States and various foreign jurisdictions. We are under regular audit by tax authorities with respect to these non-income based taxes and may have exposure to additional non-income based tax liabilities. We have also identified certain tax-related contingencies that we have assessed as being reasonably possible of loss, but not probable of loss, and could have an adverse effect on our results of operations if the outcomes are unfavorable. Although we believe that our estimates are reasonable, the ultimate tax outcome may differ from the amounts recorded in our financial statements and may materially adversely affect our financial results in the period or periods for which such determination is made.

Possession and use of personal information in our operations subjects us to risks and costs that could harm our business. Our institutions collect, use and retain large amounts of personal information regarding our students and their families, including tax identification numbers, tax return information, personal and family financial data and credit card numbers. We also collect and maintain personal information of our employees in the ordinary course of our business. In addition, we collect and maintain other types of information, such as leads, that may include personal information of our business contacts in the ordinary course of our business. Our computer networks and the networks of certain of our vendors that hold and manage confidential information on our behalf may be vulnerable to unauthorized access, computer hackers, computer viruses, cyber-attacks and other security threats. Confidential information also may become available to third parties inadvertently when we integrate or convert computer networks into our network following an acquisition of an institution or in connection with upgrades from time to time. Due to the sensitive nature of the information contained on our networks, such as students' grades, our networks may be targeted by hackers. A user who circumvents security measures could misappropriate proprietary information or cause interruptions or malfunctions in our operations. Although we use security and business controls to limit access and use of personal information, a third party may be able to circumvent those security and business controls, which could result in a breach of student or employee privacy. See above risk factor regarding threats experienced by us and other global companies as continued targets of cyber security attacks and that, despite having experienced threats, we are not aware that we have experienced a material cyber-security breach. The preventative actions we take to reduce the risk of cyber incidents and protect our information may be insufficient. A user who circumvents security measures could misappropriate personal or proprietary information. In addition, errors in the storage, use or transmission of personal information could result in a breach of student or employee privacy. As a result, we may be required to expend significant resources to protect against the threat of these security breaches or to alleviate problems caused by these breaches. Furthermore, we are subject to a variety of laws and regulations globally regarding privacy, data protection, and data security, including those related to the collection, storage, handling, use, disclosure, transfer, and security of personal data. Mexico and Peru have passed or are considering enhanced privacy and data security regulations, resulting in additional compliance burdens and uncertainty as to how some of these laws will be interpreted. We have invested, and expect to continue to invest, significant resources to comply with privacy laws and regulations. A breach, theft or loss of personal information regarding our students and their families, our employees, or other persons that is held by us or our vendors, or a violation of the laws and regulations governing privacy in one or more of the countries in which we operate, could result in significant penalties or legal liability, reputational damage, and/or remediation and compliance costs, which could be substantial and materially adversely affect our business, financial condition and results of operations.

Our institutions compete with traditional public and private colleges and universities and other proprietary institutions, including those that offer online professional-oriented programs. In each of the countries in which we operate a private institution, our primary competitors are public and other private universities, some of which are larger, more widely known and have more established reputations than our institutions. Some of our competitors in both the public and private sectors may have greater financial and other resources than we have and have operated in their markets for many years. Other competitors may include large, well-capitalized companies that may pursue a strategy similar to ours of acquiring or establishing for-profit institutions. Public institutions receive substantial government subsidies, and public and private not-for-profit institutions have access to government and foundation grants, tax-deductible contributions and other financial resources generally not available to for-profit institutions. Accordingly, public and private not-for-profit institutions may have instructional and support resources superior to those in the for-profit sector, and public institutions can offer substantially lower tuition prices or other advantages that we cannot match.

The institutions in our portfolio have a summer break, during which classes are generally not in session and minimal revenues are recognized. In addition to the timing of summer breaks, holidays such as Easter also have an impact on our academic calendar. Operating expenses, however, do not fully correlate to the enrollment and revenue cycles, as the institutions continue to incur expenses during summer breaks. Accordingly, our second and fourth quarters are stronger revenue quarters, as our institutions are in session for most of these respective quarters. Our first and third fiscal quarters are weaker revenue quarters because our institutions have summer breaks for some portion of one of these two quarters. Because a significant portion of our expenses do not vary proportionately with the fluctuations in our revenues, our results in a particular fiscal quarter may not indicate accurately the results we will achieve in a subsequent quarter or for the full fiscal year.

In order to maintain and increase our revenues and margins, we must continue to develop our admissions programs and attract new students in a cost-effective manner. The level of marketing and advertising and types of strategies used are affected by the specific geographic markets, regulatory compliance requirements and the specific individual nature of each institution and its students. The complexity of these marketing efforts contributes to their cost. If we are unable to advertise and market our institutions and programs successfully, our ability to attract and enroll new students could be materially adversely affected and, consequently, our financial performance could suffer. We use marketing tools such as the Internet, radio, television and print media advertising to promote our institutions and programs. Our representatives also make presentations at upper secondary schools. In order to maintain our growth, we will need to attract a larger percentage of students in existing markets and increase our addressable market by adding locations in new markets and rolling out new academic programs. Any failure to accomplish this may have a material adverse effect on our future growth.

All of our institutions require periodic upgrades to remain attractive to parents and students. Upgrading the facilities at our institutions could be difficult for a number of reasons, including the following: - our properties may not have the capacity or configuration to accommodate proposed renovations;- construction and other costs may be prohibitive;- we may fail to obtain regulatory approvals;- it may be difficult and expensive to comply with local building and fire codes;- we may be unable to finance construction and other costs; and - we may not be able to negotiate reasonable terms with our landlords or developers or complete the work within acceptable timeframes. Our failure to upgrade the facilities of our institutions could lead to lower enrollment and could cause a material adverse effect on our business, financial condition and results of operations.

We rely upon our information technology systems and infrastructure to operate our business. We run the online operations of our institutions on different platforms, which are in various stages of development. The performance and reliability of these online operations are critical to the reputation of our institutions and our ability to attract and retain students. Any computer system error or failure, or a sudden and significant increase in traffic on our institutions' computer networks or those of our third-party providers, may result in the unavailability of these computer networks. In addition, any significant failure of our computer networks could disrupt our on-campus operations. Individual, sustained or repeated occurrences could significantly damage the reputation of our institutions' operations and result in a loss of potential or existing students. Additionally, our computer systems (and those of our third-party providers) and operations of our institutions are vulnerable to interruption or malfunction due to events beyond our control, including cyber-attacks, natural disasters and other catastrophic events and network and telecommunications failures. Like other global companies, our computer systems are regularly subject to and will continue to be the target of computer viruses, malware or other malicious codes (including ransomware), unauthorized access, cyber-attacks or other computer-related penetrations. While we have experienced threats to our data and systems, to date, we are not aware that we have experienced a material cyber-security breach. However, over time, the sophistication of these threats continues to increase. The preventative actions we take to reduce the risk of cyber incidents and protect our information and systems may be insufficient. A user who circumvents security measures could misappropriate proprietary information or cause interruptions to or malfunctions in operations. As a result, we may be required to expend significant resources to protect against the threat of these security breaches or to alleviate problems caused by these incidents. Further, the disaster recovery plans and backup systems that we have in place may not be effective in addressing a natural disaster or catastrophic event that results in the destruction or disruption of any of our critical business or information technology and infrastructure systems. As a result of any of these events, we may not be able to conduct normal business operations and may be required to incur significant expenses in order to resume normal business operations. As a result, our revenues and results of operations may be materially adversely affected.