Park National (PRK) Risk Factors

The financial services industry is extensively regulated. We are subject to extensive state and federal regulation, supervision and legislation that govern almost all aspects of our operations. Laws and regulations may change from time to time and are primarily intended for the protection of consumers, depositors, borrowers, the DIF and the banking system as a whole, and not to benefit our shareholders. Regulations affecting banks and financial services businesses are undergoing continuous change and management cannot predict the effect of these changes. While such changes are generally intended to lessen the regulatory burden on financial institutions, the impact of any changes to laws and regulations or other actions by regulatory agencies may negatively impact us or our ability to increase the value of our business. Regulatory authorities have extensive discretion in connection with their supervisory and enforcement activities, including the imposition of restrictions on the operation of a financial institution, the classification of assets held by a financial institution, the adequacy of a financial institution's allowance for credit losses and the ability to complete acquisitions. Additionally, actions by regulatory agencies against us could cause us to devote significant time and resources to defending our business and may lead to penalties that materially affect us and our shareholders. Even the reduction of regulatory restrictions could have an adverse effect on us and our shareholders if such lessening of restrictions increases competition within our industry or our market area. In light of conditions in the global financial markets and the global economy that occurred in the last two decades, regulators have increased their focus on the regulation of the financial services industry. Most recently, the U.S. Congress and the federal agencies regulating the financial services industry have acted on an unprecedented scale in responding to the stresses experienced in the global financial markets. Some of the laws enacted by the U.S. Congress and regulations promulgated by federal bank regulatory agencies subject us, and other financial institutions to which such laws and regulations apply, to additional restrictions, oversight and costs that may have an impact on our business, results of operations or the trading price of our common shares. In addition to laws, regulations and supervisory and enforcement actions directed at the operations of financial institutions, proposals to reform the housing finance market consider significant changes to Fannie Mae and Freddie Mac, which could negatively affect our sales of loans.

A significant portion of our loan portfolio is secured by real property. During the ordinary course of business, we foreclose on and take title to properties securing certain loans. In doing so, there is a risk that hazardous or toxic substances could be found on these properties. If hazardous or toxic substances are found, we may be liable for remediation costs, as well as for personal injury and property damage. Environmental laws and evolving regulation may require us to incur substantial expenses and may materially reduce the affected property's value or limit our ability to use or sell the affected property. In addition, future laws and regulations or more stringent interpretations or enforcement policies with respect to existing laws or regulations may increase our exposure to environmental liability. Environmental reviews of real property before initiating foreclosure actions may not be sufficient to detect all potential environmental hazards. The remediation costs and any other financial liabilities associated with an environmental hazard could have a material adverse effect on our business, financial condition and results of operations.

We have significant investments in financial service office premises and equipment for our financial service office network, including 96 financial service offices as well as our retail work force and other financial service office banking assets. Advances in technology such as e-commerce, telephone, internet and mobile banking, and in-branch self-service technologies including automatic teller machines and other equipment, as well as changing customer preferences for these other methods of accessing our products and services, could affect the value of our financial service office network or other retail distribution assets and may cause us to change our retail distribution strategy, close and/or sell certain financial service offices and restructure or reduce our remaining financial service offices and work force. Further advances in technology and/or changes in customer preferences including those related to social media, digital or cryptocurrency, blockchain, and other "fintech" technologies could result in additional changes in our retail distribution strategy and/or financial service office network. These actions could lead to losses on these assets or could adversely impact the carrying value of other long-lived assets and may lead to increased expenditures to renovate and reconfigure remaining financial service offices or to otherwise reform our retail distribution channel.

We collect, process and store sensitive consumer data by utilizing computer systems and telecommunications networks operated by both us and third-party service providers. Our dependence upon automated systems to record and process our transactions poses the risk that technical system flaws, employee errors, tampering or manipulation of those systems, or attacks by third parties will result in losses and may be difficult to detect. We have security and backup and recovery systems in place, as well as a business continuity plan, to ensure the computer systems will not become inoperable, to the extent possible. We also routinely review documentation of such controls and backups related to third-party service providers. Our inability to use or access these information systems at critical points in time could unfavorably impact the timeliness and efficiency of our business operations. In recent years, several banks have experienced denial of service attacks in which individuals or organizations flood the bank's website with extraordinarily high volumes of traffic, with the goal and effect of disrupting the ability of the bank to process transactions. Other businesses have been victims of ransomware attacks in which the business becomes unable to access its own information and is presented with a demand to pay a ransom in order to once again have access to its information. We could be adversely affected if one of our employees or a third-party service provider causes a significant operational break-down or failure, either as a result of human error or where the individual purposefully sabotages or fraudulently manipulates our operations or systems. We may not be able to prevent employee or third-party errors or misconduct, and the precautions we take to detect this type of activity might prove ineffective. We are further exposed to the risk that the third-party service providers may be unable to fulfill their contractual obligations (or will be subject to the same risks that we are). These disruptions may interfere with service to our customers, cause additional regulatory scrutiny and result in a financial loss or liability. We are also at risk of the impact of natural disasters, terrorism and international hostilities on our systems or for the effects of outages or other failures involving power or communications systems operated by others. In addition, there have been instances where financial institutions have been victims of fraudulent activity in which criminals pose as customers to initiate wire and automated clearinghouse transactions out of customer accounts. Although we have policies and procedures in place to verify the authenticity of our customers, we cannot assure that such policies and procedures will prevent all fraudulent transfers. We have implemented security controls to prevent unauthorized access to our computer systems, and we require that our third-party service providers maintain similar controls. However, Park's management cannot be certain that these measures will be successful. A security breach of the computer systems and loss of confidential information, such as customer account numbers and related information, could result in a loss of customers' confidence and, thus, loss of business. We could also lose revenue if competitors gain access to confidential information about our business operations and use it to compete with us. While we maintain specific "cybersecurity" insurance coverage, which would apply in the event of various breach scenarios, the amount of coverage may not be adequate in any particular case. Furthermore, because cybersecurity threat scenarios are inherently difficult to predict and can take many forms, some breaches may not be covered under our cybersecurity insurance coverage. Further, we may be affected by data breaches at retailers and other third parties who participate in data interchanges with us and our customers that involve the theft of customer credit and debit card data, which may include the theft of our debit card PIN numbers and commercial card information used to make purchases at such retailers and other third parties. Such data breaches could result in us incurring significant expenses to reissue debit cards and cover losses, which could result in a material adverse effect on our results of operations. All of the types of cybersecurity incidents discussed above could result in damage to our reputation, loss of customer business, increased costs of incentives to customers or business partners in order to maintain their relationships, litigation, increased regulatory scrutiny and potential enforcement actions, repairs of system damage, increased investments in cybersecurity (such as obtaining additional technology, making organizational changes, deploying additional personnel, training personnel and engaging consultants), increased insurance premiums, and loss of investor confidence and a reduction in the price of our common shares, all of which could result in financial loss and material adverse effects on our results of operations and financial condition.

The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology-driven products and services. The effective use of technology increases efficiency and enables financial institutions to better serve customers while reducing costs. Our future success depends, in part, upon our ability to address customer needs by using technology to provide products and services that will satisfy customer demands, as well as to create additional efficiencies in our operations. This could include the development, implementation, and adaptation of digital or cryptocurrency, blockchain, and other "fintech" technology. We may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to our customers. Failure to successfully keep pace with technological changes affecting the financial services industry could negatively affect our growth, revenue and net income.

Inflation and rapid increases in interest rates have led to a decline in the trading value of previously issued government securities with interest rates below current market interest rates. Although the U.S. Treasury Department, FDIC and Federal Reserve Board have announced a program to provide up to $25.0 billion of loans to financial institutions secured by certain of such government securities held by financial institutions to mitigate the risk of potential losses on the sale of such instruments, widespread demands for customer withdrawals or other liquidity needs of financial institutions for immediately liquidity may exceed the capacity of such program. There is no guarantee that the U.S. Treasury Department, FDIC and Federal Reserve Board will provide access to uninsured funds in the future in the event of the closure of other banks or financial institutions, or that they would do so in a timely fashion. In addition, inflation generally increases the cost of goods and services we use in our business operations which increases our noninterest expenses. Furthermore, our customers are also affected by inflation and the rising costs of goods and services used in their households and businesses, which could have a negative impact on their ability to repay their loans with us.