United Parcel (UPS) Risk Factors

We are subject to complex and stringent aviation, transportation, environmental, security, labor, employment, safety, privacy, disclosure and data protection and other governmental laws, regulations and policies, both in the U.S. and internationally. In addition, we are impacted by laws, regulations and policies that affect global trade, including tariff and trade policies, export requirements, embargoes, sanctions, taxes, monetary policies and other restrictions and charges. Trade discussions and arrangements between the U.S. and various of its trading partners are fluid, and existing and future trade agreements are, and are expected to continue to be, subject to a number of uncertainties, including the imposition of new tariffs or adjustments and changes to the products covered by existing tariffs. The impact of new laws, regulations and policies or decisions or interpretations by authorities applying those laws and regulations, cannot be predicted. Compliance with any new laws, regulations or policies may increase our operating costs or require significant capital expenditures. Any failure to comply with applicable laws, regulations or policies in the U.S. or other countries could result in substantial fines or possible revocation of our authority to conduct our operations, which could materially adversely affect us.

The nature of our business exposes us to the potential for various claims and litigation related to labor and employment, personal injury, property damage, business practices, environmental liability and other matters. Any material litigation or a catastrophic accident or series of accidents could result in significant expenditures and have a material adverse effect on us.

We are subject to income taxes in the U.S. and many foreign jurisdictions. Significant judgment is required in determining our worldwide provision for income taxes. There are many transactions and calculations where the ultimate tax determination is uncertain. We are regularly under audit by tax authorities in many jurisdictions. Economic and political pressures to increase tax revenue may make resolving tax disputes more difficult. The final determination of tax audits and any related litigation could be materially different from our historical income tax provisions and accruals. In addition, changes in U.S. federal and state or international tax laws, other fundamental law changes currently being considered by many countries, and changes in taxing jurisdictions' administrative interpretations, decisions, policies and positions may materially adversely impact our tax expense and cash flows.

Our industry continues to rapidly evolve, including demands for faster deliveries, increased visibility into shipments and development of other services. We expect to continue to face significant competition on a local, regional, national and international basis. Competitors include the U.S. and international postal services, various motor carriers, express companies, freight forwarders, air couriers, large transportation and e-commerce companies that continue to make significant investments in their own logistics capabilities, some of whom are currently our customers. We also face competition from start-ups and other smaller companies that combine technologies with flexible labor solutions such as crowdsourcing. New technologies may also create additional sources of competition. Competitors have cost, operational and organizational structures that differ from ours and may offer services or pricing terms that we are not willing to offer. Additionally, from time to time we have raised, and may in the future raise, prices and our customers may not be willing to accept these higher prices. If we do not appropriately respond to competitive pressures, including replacing any lost volume or maintaining our profitability, we could be materially adversely affected. Transportation market growth may further increase competition. As a result, competitors may improve their financial capacity and strengthen their competitive positions. Business combinations could also result in competitors providing a wider variety of services and products at competitive prices, which could also materially adversely affect us.

For the year ended December 31, 2023, one customer, Amazon.com, Inc. and its affiliates, accounted for 11.8% of our consolidated revenues. Some of our other significant customers can account for a relatively significant portion of our revenues in a particular quarter or year. Customer impact on our revenue and profitability can vary based on a number of factors, including: contractual volume amounts; pricing terms; product launches; e-commerce or other industry trends, including those related to the holiday season; business combinations and the overall growth of a customer's underlying business; as well as any disruptions to their businesses. Customers could choose, and have in the past chosen, to divert all or a portion of their business with us to one of our competitors, demand pricing concessions, request enhanced services that increase our costs, or develop their own logistics capabilities. In addition, certain of our significant customer contracts include termination rights of either party upon the occurrence of certain events or without cause upon advance notice to the other party. If all or a portion of our business relationships with one or more significant customers were to terminate or significantly change, this could materially adversely affect us.

Our success depends in part on our ability to maintain the image of the UPS brand and our reputation. Service quality issues, actual or perceived, could tarnish the image of our brand and may cause customers not to use UPS services. Also, adverse publicity or public sentiment surrounding labor relations, environmental, sustainability and governance concerns, physical or cyber security matters, political activities and similar matters, or attempts to connect our company to such issues, either in the U.S. or elsewhere, could materially adversely affect us. For example, damage to our reputation or loss of brand equity could require the allocation of resources to rebuild our reputation and restore the value of our brand. The proliferation of social media may increase the likelihood, speed, and magnitude of negative brand events.

Our business requires significant capital investments, including in aircraft, vehicles, technology, facilities and sortation and other equipment. In addition to forecasting our capital investment requirements, we adjust other elements of our operations and cost structure in response to economic and regulatory conditions. These investments support both our existing business and anticipated growth. Forecasting amounts, types and timing of investments involves many factors which are subject to uncertainty and may be beyond our control, such as general economic trends, revenues, profitability, changes in governmental regulation and competition. If we do not accurately forecast our future capital investment needs, we could under- or over-invest, or have excess capacity or insufficient capacity, any of which could negatively affect our revenues and profitability.

From time to time we acquire businesses, form joint ventures and strategic alliances, and dispose of operations. Whether we realize the anticipated benefits from these transactions depends, in part, upon successful integration between the businesses involved, the performance of the underlying operations, capabilities or technologies and the management of the acquired operations. Accordingly, our financial results could be materially adversely affected by our failure to effectively integrate acquired operations, unanticipated performance or other issues or transaction-related charges.

We rely on information technology networks and systems and other operational technologies, including the internet and a number of internally-developed systems and applications, as well as certain technology systems from third-party vendors (collectively referred to as "IT") to operate our business. For example, we rely on these technologies to receive package level information in advance of the physical receipt of packages, to move and track packages through our operations, to efficiently plan deliveries, to execute billing processes, and to track and report financial and operational data. Our franchise locations and subsidiaries also rely on IT systems to manage their business processes and activities. IT and other systems (ours, as well as those of our franchisees, acquired businesses, and third-party service providers) have been and will continue in the future to be susceptible to damage, disruptions and shutdowns due to programming errors, defects or other vulnerabilities, power outages, hardware failures, misconfigurations, computer viruses, cyber-attacks, encryption caused by ransomware or malware attacks, exfiltration of data, attacks by foreign governments, state-sponsored actors, or criminal groups, theft, misconduct by employees or other insiders, telecommunications failures, misuse, human errors or other catastrophic events. In recent periods, the frequency and sophistication of cyber-attacks have increased and are expected to continue to increase, including as a result of state-sponsored cybersecurity attacks during periods of geopolitical conflict, such as the ongoing conflicts in Ukraine and the Middle East. In addition, the rapid evolution and increased adoption of artificial intelligence technologies may intensify our cybersecurity risks. Accordingly, we may be unable to anticipate these techniques or to implement adequate measures to recognize, detect or prevent the occurrence of any of the events described above. In addition, our security processes, protocols and standards may not prove to be sufficient, effective or may not be complied with, either intentionally or inadvertently. To date, we have not experienced a material cybersecurity incident. However, cybersecurity incidents have in the past and may in the future expose us, our customers, franchisees, service providers or others, to loss, disclosure or misuse of proprietary information and sensitive or confidential data or result in disruptions to our operations or those of our customers, franchisees, service providers or others. For example, cyber criminals have in the past gained access, and are expected to continue to try to gain access to customer accounts. The type of activity includes fraudulently diverting and misappropriating items being transported in our network, fraudulently charging shipment fees to customer or franchisee accounts, and fraudulently sending text messages to recipients purporting to be from UPS. The occurrence of any of the events described above could result in material disruptions in our business, the loss of existing or potential customers, damage to our brand and reputation, additional regulatory scrutiny, litigation and other potential material liability. We also may not discover the occurrence of any of the events described above for a significant period of time after the event occurs. We utilize and interact with the IT networks and systems of third parties for many aspects of our business, including related to our customers, franchisees and service providers such as cloud service providers and third-party delivery services. These third parties have access to information we maintain about our company, operations, customers, employees and vendors, or operating systems that are critical to or can significantly impact our business operations. These third parties are subject to risks described above, and other risks, that could damage, disrupt or close down their networks or systems. Security processes, protocols and standards that we implement and contractual provisions requiring security measures that we impose on such third parties may not be sufficient or effective at preventing such events or may not be adhered to. These events have in the past and could in the future result in unauthorized access to, or disruptions or denials of access to, misuse or disclosure of, information or systems that are important to us, including proprietary information, sensitive or confidential data, and other information about our operations, customers, employees and suppliers, including personal information. We have invested and expect to continue to invest in IT security initiatives, IT risk management and disaster recovery capabilities. The costs and operational consequences of implementing, maintaining and enhancing further data or system protection measures could increase significantly to overcome increasingly frequent, complex and sophisticated cyber threats and regulatory requirements. In addition, our customers' confidence in our ability to protect data and systems and to provide services consistent with their expectations could be impacted, further disrupting our operations. While we maintain cyber insurance, we cannot be certain that our coverage will be adequate for liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. Although to date we are unaware of any material data breach or cybersecurity incident, including an information system disruption, we cannot provide any assurances that such material events and impacts will not occur in the future. Our efforts to deter, identify, mitigate and/or eliminate future breaches or cybersecurity incidents may require significant additional effort and expense and may not be successful. In addition, there has recently been heightened regulatory and enforcement focus relating to the collection, use, retention, transfer, and processing of personal data in the U.S. (at both the state and federal level) and internationally, including the EU's General Data Protection Regulation, the California Privacy Rights Act, the Virginia Consumer Data Protection Act, and other similar laws that have been or are expected to be enacted by other jurisdictions. In addition, China and certain other jurisdictions have enacted more stringent data localization requirements. An actual or alleged failure to comply with applicable data protection laws, regulations, or other data protection standards has in the past and may in the future expose us to litigation, fines, sanctions, or other penalties, which could harm our reputation and adversely affect our business, results of operations, and financial condition. The regulatory environment is increasingly challenging, based on discretionary factors, and difficult to predict. Consequently, compliance with applicable regulations in the various jurisdictions in which we do business may present material obligations and risks to our business, including significantly expanded compliance burdens, costs, and enforcement risks which are expected to increase over time; require us to make extensive system or operational changes; or adversely affect the cost or attractiveness of the services we offer.