ManpowerGroup (MAN) Risk Analysis

We are subject to a wide variety of potential litigation and other legal claims that arise in the ordinary course of our business. The results of litigation and other legal proceedings are inherently uncertain, and adverse judgments or settlements in some, or all of these legal disputes may result in materially adverse monetary damages, fines, penalties or injunctive relief against us. For example, through our direct interaction with our clients' businesses and facilities, including functions and systems that are sensitive or critical to their core businesses, we may be exposed to operational, regulatory, reputational and other risks specific to their business, including data security risks. These risks may be reduced through contractual provisions that limit damages or mitigate our responsibility for losses caused by our assigned workers; but these types of contractual protections are not always possible because we may perceive an important economic opportunity, because of the contracting practices of our industry competitors or because our personnel did not adequately follow our contracting guidelines. In addition, as we expand our services and solutions into new areas, we may be exposed to additional and evolving risks specific to these new areas. We are in the business of employing people and placing them in the workplaces of other businesses. Risks relating to these activities could include possible claims of or relating to: - discrimination or harassment;- employee pay, including wage and hour requirements;- wrongful termination or retaliation;- actions or inactions of our workers, including matters for which we may have to indemnify a client;- laws governing employment screening and privacy;- classification of workers as employees or independent contractors;- employee unionization and collective bargaining activity, which we have recently experienced with certain small employee groups;- employment of undocumented or illegal workers;- issues relating to health and safety, including workers' compensation;- employee benefits, including leave and healthcare coverage;- errors and omissions relating to the performance of professional roles such as IT professionals, accountants, engineers and the like; and - our workers' misuse of proprietary information, misappropriation of funds, other criminal activity or torts or other similar claims. We may incur fines and other losses or negative publicity with respect to the above risks. In addition, some or all of these claims may give rise to litigation, which could be time-consuming to our management team and costly and could have a negative impact on our business regardless of the merits of the claim. For example, in the past, we have devoted considerable time and expense to resolve several California-based "wage and hour" claims that asserted deficiencies in our payroll practices, and we are often sued by plaintiffs in various other employment-related matters, including those seeking class action status in the US. It is likely we will continue to experience similar claims in the future, which may increase in number as a result of remote working assignments as well as increasing employment regulation at the state and local level. We cannot be certain our insurance will be sufficient in amount or scope to cover all claims that may be asserted against us. Should the ultimate judgments or settlements exceed our insurance coverage, they could have a material effect on our results of operations, financial position and cash flows. We cannot be certain we will be able to obtain appropriate types or levels of insurance in the future, that adequate replacement policies will be available on acceptable terms, if at all, or that the companies from which we have obtained insurance will be able to pay claims we make under such policies.

We are subject to income and other taxes in the United States and international jurisdictions where we have operations. The tax bases and rates of these respective tax jurisdictions change from time to time due to economic and political conditions. Our effective income tax rate is affected by changes in earnings in countries with differing tax rates, changes in valuation of deferred tax assets and liabilities or changes in the respective tax laws. Our other taxes are impacted by changes in local tax laws or changes in our business. In addition, tax accounting involves complex matters and requires our judgment to determine our worldwide provision for income and other taxes and tax assets and liabilities. These complex matters include transfer pricing and reporting related to intercompany transactions. We are routinely subject to tax examinations by the United States Internal Revenue Service and other tax authorities. Tax authorities have disagreed, and may disagree in the future, with our judgments. Many taxing authorities are taking increasingly aggressive positions opposing the judgments we make, including with respect to our intercompany transactions. We regularly assess the likely outcomes of our audits and tax proceedings to determine the appropriateness of our tax liabilities. However, our judgments might not be sustained as a result of these audits and tax proceedings, and the amounts ultimately paid could be materially different from the amounts previously recorded. In addition, changes in tax laws, treaties or regulations, or their interpretation or enforcement, have become more unpredictable and may become more stringent, which could materially adversely affect our tax position. A number of countries where we do business, including the United States and many countries in the European Union, have implemented, and are considering implementing, changes in relevant tax, accounting and other laws, regulations and interpretations. The overall tax environment has made it increasingly challenging for multinational corporations to operate with certainty about taxation in many jurisdictions. For example, a number of members of the Organization for Economic Co-operation and Development have agreed to enact the Pillar Two international tax reform, which introduces a global minimum effective tax rate whereby certain multinational groups are subject to a 15% minimum tax on income derived in low-tax jurisdictions. These rules became effective in some countries in 2024. As another example, in February 2025 the French government enacted legislation resulting in a one-year temporary increase in the corporate income tax rate for our French business from 25.825% to 36.125% for 2025 and a three-year delay to the scheduled phase-out of the French business tax (CVAE). We estimate this legislation will increase our consolidated global effective tax rate in the range of 4% to 5% based on current projections. These proposed and enacted changes in tax laws, treaties or regulations, or their interpretation or enforcement, could have a material adverse impact on our current or future tax positions.

Our business could be impacted in several ways by our corporate sustainability initiatives, including our goals for sustainability, diversity, and inclusion. - Our positions and disclosures on these matters, or failure to achieve our commitments, could harm our reputation or brand image. For example, we have made various commitments regarding the future reduction of our greenhouse gas emissions, and there is a risk we will be unsuccessful in making progress toward our goals or ultimately meeting them, which could have adverse reputational impacts. Reputational concerns could also cause us to examine our relationships with certain clients and vendors, and choose not to conduct business with certain partners, which could negatively affect our performance or operational efficiency. - Positions we take, or do not take, on politically sensitive social issues or other sustainability matters may be unpopular with certain existing or potential clients and employees, which may impact our ability to attract and retain those clients and employees. - We may experience increased compliance burdens and costs in order to implement our initiatives, including those costs associated with any new legal or regulatory requirements (such as the EU Corporate Sustainability Reporting Directive (CSRD)), or voluntary standards and commitments, designed to mitigate climate change or address human capital management concerns. We will be required to report on CSRD commencing in 2025 (filing in 2026) and will be subject to limited assurance requirements by a third party. If we are not able to implement processes and controls to accumulate data to support the disclosures in a timely manner, we may not be able to meet the regulatory requirements and reporting timelines or fail to meet the limited assurance requirements. - Our ability to achieve our sustainability commitments may be subject to numerous external factors outside of our control, including: (1) the availability and cost of low-carbon energy sources; (2) evolving regulatory requirements affecting sustainability standards or disclosures; (3) the availability of vendors and other business partners that can meet our sustainability, diversity, and other standards; and (4) our ability to recruit, develop, and retain diverse talent. - Standard methodologies and frameworks, as well as our processes and controls, for measuring and reporting sustainability matters across our operations are continuously evolving, including sustainability-related disclosures that may be required by the SEC, European and other regulators; and such changing standards could result in significant revisions to our current goals, reported progress in achieving such goals, or our ability to achieve such goals in the future. Methodologies for reporting sustainability data may be updated and previously reported sustainability data may be adjusted to reflect improvement in availability and quality of third-party data, changing assumptions, changes in the nature and scope of our operations and other changes in circumstances. - Our positions and disclosures on these matters may be challenged by the US Federal government or state governments. For example, on January 21, 2025, President Trump issued an Executive Order directing the Attorney General to make recommendations for enforcing Federal civil rights laws and taking other appropriate measures to encourage the private sector to end illegal discrimination and preferences, including a proposed strategic enforcement plan. Despite our efforts to ensure that our positions on these matters are compliant with all applicable laws, any challenges may be costly and time-consuming to resolve, and may not be resolved in our favor, which may have a material adverse effect on our business, including our ability to attract and retain employees, our reputation and our results of operations.

Our contracts are increasingly complex and, in most instances, require that we partner with other parties or subcontractors to provide the workforce solutions required by our clients. Our clients have become more sophisticated in their contractual negotiation process and more detailed in defining their operational requirements, including requirements to use the client's form of agreement. Our ability to deliver these solutions and provide the services required by our clients is dependent on our and our partners' ability to meet our clients' delivery requirements and schedules. If we or our partners fail to deliver services on time and in accordance with contractual performance obligations, then our ability to successfully complete our contracts may be affected, which may have a material and adverse impact on our client relations, revenues and profitability. Additionally, we may incur liability for the actions or omissions of our partners, subcontractors or vendors and we may face challenges or be unable to enforce these obligations against those partners.

We believe our reputation, along with our brand equity in the ManpowerGroup name and our various other brands, are important corporate resources that help distinguish our services from those of competitors and also contribute to our efforts to recruit and retain talented employees. However, our corporate reputation is potentially susceptible to material damage by events such as disputes with clients, information technology security breaches, internal control deficiencies, delivery failures or compliance violations. Similarly, our reputation could be damaged by actions or statements of current or former clients, employees, competitors, vendors, franchisees and other third-party brand licensees, adversaries in legal proceedings, government regulators, as well as members of the investment community or the media. There is a risk that negative information about ManpowerGroup, even if based on rumor or misunderstanding, could materially adversely affect our business. Damage to our reputation could be difficult, expensive and time-consuming to repair, could make potential or existing clients reluctant to select us for new engagements, resulting in a loss of business, and could materially adversely affect our recruitment and retention efforts. Damage to our reputation could also reduce the value and effectiveness of the ManpowerGroup name and our other brand names, and could reduce investor confidence in us, materially adversely affecting our share price.

Our success depends, in part, upon our ability to protect our proprietary methodologies and other intellectual property including the value of our brands. Existing laws of the various countries in which we provide services or solutions may offer only limited protection. We rely upon a combination of trade secrets, confidentiality, license and other contractual agreements, and copyright and trademark laws to protect our intellectual property rights. We cannot be certain that the legal steps we are taking around the world are sufficient to protect our intellectual property rights and may not be adequate to prevent or deter infringement or other misappropriation of our intellectual property by competitors, former employees or other third parties. In addition, our intellectual property rights may not prevent competitors from independently developing products, services and solutions similar to ours. Failure to adequately protect our intellectual property rights, or changes in law that diminish or remove our current legal protections could have a material adverse impact on our business and financial results. In addition, we cannot be sure that our services and solutions do not infringe on the intellectual property rights of third parties, and these third parties could claim that we or our clients are infringing upon their intellectual property rights. These claims could harm our reputation, cause us to incur substantial costs or prevent us from offering some services or solutions in the future.

In connection with the operation of our business, we store, process and transmit a large amount of data, including personnel and payment data, about our employees, clients, associates and candidates, a portion of which is personal data and/or confidential data. We expect our use of data to increase, including through the use of analytics, AI and machine learning (ML). In engaging in these data-related activities, we rely on our own technology systems and software, and those of third-party vendors we use for a variety of processes, including, but not limited to cloud-based technology and systems, mobile technologies and social media. Unauthorized access to, disclosure, modification, use or loss of personal or confidential data may occur through various methods. These include, but are not limited to, ransomware, systems failure, employee negligence or malfeasance, fraud or misappropriation, or unauthorized access to or through our information systems, whether by our employees, vendors or third parties, including a cyberattack by hackers, members of organized crime and/or state-sponsored organizations, who may develop and deploy supply chain interruptions, social engineering attacks, viruses, worms or other malicious software programs, or obtain credentials to our systems through other unrelated cyberattacks. An incident involving disclosure, system failure, data modification, loss or security breach could harm our reputation and subject us to significant monetary damages or losses, litigation, negative publicity, regulatory enforcement actions, fines, criminal prosecution, as well as liability under our contracts and laws that protect personal and/or confidential data, resulting in increased costs or loss of revenues. Cybersecurity threats continue to increase in frequency and sophistication, thereby increasing the difficulty of detecting and defending against them. In the past, we have experienced data security breaches resulting from unauthorized access to our systems and other fraudulent activities, such as social engineering, which to date have not had a material impact on our operations or financial results. We regularly engage an independent external security firm to assess our defenses to a potential cyberattack, and these assessments may uncover new or additional vulnerabilities and weaknesses that could lead to a compromise of our systems and/or a loss of personal data. In a recent evaluation, vulnerabilities were identified that could facilitate or contribute to a security incident involving personal data. The assessment firm was able to penetrate defensive protections adopted by us, as well as protections that we obtain from third party providers. We are prioritizing the resolution of security gaps that could lead to a loss of personal data or to other damage. Despite our efforts to identify and address vulnerabilities in our systems, vulnerabilities in software products used by us are disclosed by our software providers on a daily basis, and attackers grow continuously more sophisticated in their attack methods, which may additionally make use of AI technology such as AI-generated 'deep-fake' impersonation or social engineering, making it impossible to give assurance that our cybersecurity efforts will be successful. There is a risk that our and our third-party vendors' preventative security controls and practices will be inadequate to prevent unauthorized access to, disclosure of, or loss of personal and/or confidential data, or fraudulent activity, especially given that third party attacks have become more common. In the past, our data has been exposed due to data security breaches at our third party vendors, but to date none of these incidents have had a material impact on our operations or financial results. Any such future events, such as unauthorized access or fraudulent activity with our third party vendors could have a material adverse effect on our business and financial results. More of our employees are working from their homes or other remote locations than before, which makes it more difficult for us to monitor their activities, the security of their work locations, insider threats, and data exfiltration. This has increased the risk of security incidents, which could include unauthorized access to, disclosure of, or loss of personal and/or confidential data, as well as other types of fraudulent activity. Any such unauthorized access or fraudulent activity could have a material adverse effect on our business and financial results. The potential risk of security breaches, fraud and cyberattacks may increase as we continue to introduce services and offerings, whether mobile, cloud, or otherwise. Any additional services and offerings inevitably increase the potential for a cyberattack against us. Further, data privacy and cybersecurity are subject to frequently changing laws and regulations, including the European Union's General Data Protection Regulation (the "GDPR"), the California Privacy Rights Act (the "CPRA"), and additional legislation in place, or expected to become effective, in various U.S. states and other countries. These laws and regulations are increasing in number, complexity, burden and potential financial penalties, and are often inconsistent among the various jurisdictions and countries in which we provide services. For example, the GDPR and the CPRA impose significant compliance obligations that add costs and operational burdens to our business with respect to our collection, use, storage and retention of personal data. Compliance with these obligations could reduce operational efficiency and increase our regulatory compliance costs, and failure to satisfy these requirements may lead to significant regulatory enforcement actions and/or large private litigation in the event of a security breach or other violation. Under the GDPR, the maximum fine can be up to 4% of a company's global revenue, and there is no maximum penalty under the CPRA. In addition, our liability insurance might not be sufficient in scope or amount to cover us against claims and losses related to violations of data privacy and cybersecurity laws or security breaches, social engineering, cyberattacks and other related data disclosure, loss or breach.

There is a risk we may not be able to respond with sufficient speed and agility to the needs of our diverse clients, which span all industries and whose needs may change rapidly as their businesses and industries evolve. The size and breadth of our organization, comprising approximately 26,700 employees based out of over 2,100 offices in approximately 75 countries and territories, may make it difficult for us to effectively manage our resources, to maintain our corporate culture throughout the organization, to drive service improvements and to provide coordinated solutions to our clients who require our services in multiple locations. For example, client demands for uniform service across borders may be difficult to satisfy because of variation in local laws and customs. We see a trend in more multi-country and enterprise-level relationships, and we may have difficulty in profitably managing and delivering projects involving multiple countries. Also, our size and organizational structure may make it difficult to develop and implement new processes and tools across the enterprise in a consistent manner. If we are not effective at anticipating or meeting the widely ranging needs of our current and prospective clients, or our competitors are more agile or effective at doing so, our business and financial results could be materially adversely affected. Our ability to perform at speed, and to meet client expectations, may also be adversely affected by limitations in our own information systems and those of our third-party vendors. We are increasingly dependent on these systems, which are subject to damage or interruption from multiple causes, including power outages, facility damage, computer and telecommunications failures, vandalism, malware, hacking and other malicious acts, catastrophic events and human error. If our information systems are damaged, fail to work properly, or otherwise become unavailable, we may incur substantial costs to repair or replace them, and may experience reputational damage, loss of critical information, customer disruption, and interruptions or delays in our ability to perform essential functions and implement new and innovative services.

With operations in approximately 75 countries and territories around the world, we are subject to numerous risks outside of our control, including risks arising from political unrest and other political events, regional and international hostilities and international responses to these hostilities, strikes and other worker unrest, natural disasters, the impact of global climate change, acts of war, terrorism, international conflict, severe weather conditions, pandemics, and other global health emergencies, disruptions of infrastructure and utilities including energy, cyberattacks, and other events beyond our control. Although it is not possible to predict such events or their consequences, these events could materially adversely affect our reputation, business and financial results.

Although we report our results of operations in United States dollars, the majority of our revenues and expenses are denominated in currencies other than the United States dollar, and unfavorable fluctuations in foreign currency exchange rates could have a material adverse effect on our reported financial results. Highly inflationary economies of foreign countries can result in foreign currency devaluation, which may also negatively impact our reported financial results. This occurred in Argentina and is likely to continue while the country attempts to stabilize its currency exchange rate going forward. During 2024, approximately 85% of our revenues were generated outside of the United States, the majority of which were generated in Europe. Furthermore, $952.8 million of our outstanding indebtedness as of December 31, 2024 was denominated in foreign currencies, including $928.4 million related to our Euro-denominated notes (€900.0 million). Increases or decreases in the value of the United States dollar against other major currencies, or the imposition of limitations on conversion of foreign currencies into United States dollars, could affect our revenues, operating profit and the value of balance sheet items denominated in foreign currencies. Our exposure to foreign currencies, in particular the Euro, could have a material adverse effect on our reported results and shareholders' equity, however, such fluctuations generally do not affect our cash flow or result in actual economic gains or losses unless we repatriate funds. Furthermore, the volatility of currencies may make year-over-year comparability of our financial results difficult. We seek to mitigate our exposure to foreign currency fluctuations by utilizing net investment hedges and, from time to time, foreign currency forward exchange contracts and cross-currency swaps. Our Euro-denominated notes are designated as a hedge of our net investment in subsidiaries with a Euro-functional currency as of December 31, 2024, to mitigate our Euro currency translation exposure. The effectiveness of this hedge in part depends on our ability to accurately forecast future cash flows, which is particularly difficult during periods of uncertain or uneven demand for our services and highly volatile exchange rates. Further, hedging activities may only offset a portion, or none at all, of the material adverse financial effects of unfavorable fluctuations in foreign exchange rates over the time the hedge is in place or effective.

Our operations are dependent on the continued efforts of our officers and executive management and the performance and productivity of headquarters management and staff, our local managers and field personnel. Our ability to attract and retain business is significantly affected by local relationships and the quality of service rendered. If we were to lose key personnel who have acquired significant experience in managing our business or managing companies on a global basis or in key markets, it could have a significant impact on our operations.

We have increasingly outsourced, and may further outsource, important processes of our business to third party vendors, which exposes us to other risks, including increased costs, supply chain interruptions, potential disruptions to our business operations, and reputational risk. For example, we rely on third parties to host, manage and secure certain aspects of our data center information and technology infrastructure, to develop and maintain new technology for attracting, onboarding, managing, and analyzing our workforce, and to provide important back-office support. We have increasingly centralized our vendor profile so that we are reliant on a small number of vendors for highly critical corporate and technology functions. While we believe these third-party vendors provide greater efficiency and expertise, our dependence on a small number of vendors increases the risk that our business will be adversely affected if our vendors are unable to provide these services consistent with our needs. Similarly, our business continuity and our margins could be adversely affected if we needed to replace one of our critical vendors for performance or economic reasons. Our operations also depend significantly upon these vendors' and our ability to protect our data and to ensure the availability of our servers, software applications and websites. Despite our and our third-party vendors' implementation of security measures, our systems remain susceptible to system failures, computer viruses, natural disasters, unauthorized access, cyberattacks and other similar incidents, any of which could result in disruptions to our operations. Our vendors have experienced data losses in the past, and we can expect such data incidents will occur in the future. A successful breach of the security of our technology systems, or those of our vendors, could result in the theft of confidential, personally identifiable, or other sensitive data, including data about our employees and/or associates, or our human resources operations, any of which could damage our reputation in the market. If we are not able to realize the savings associated with outsourcing services or if there is a disruption or security breach of our outsourced services that results in a loss or damage to our data, or in an inappropriate disclosure of confidential, personally identifiable, or sensitive data, our business and financial results could be materially adversely affected.