ESG and sustainability reporting

“In addition, as a global organization, we are subject to data privacy and security laws, regulations, and customer-imposed controls in numerous jurisdictions as a result of having access to and processing confidential, personal, sensitive and/or patient health data in the course of our business. Global privacy laws, including the EU's General Data Protection Regulation, China’s Personal Information Protection Law and Data Security Law, the California Consumer Privacy Act and Brazil’s Lei Geral de Protecao de Dados, apply to our activities involving the processing of personal data, both in relation to our product and service offerings and the management of our workforce.”

Annual report 2025A · The company itself

“Many such laws impose significant penalties for non-compliance (including possible fines of up to four percent of total company revenue under the General Data Protection Regulation or orders to stop processing personal data in a particular jurisdiction). Each of these privacy, security and data protection laws and regulations could impose significant limitations and increase our cost of providing our products and services where we process personal data and could harm our results of operations and expose us to significant fines, penalties and other damages.”

Annual report 2025A · The company itself

“For example, U.S. federal, state and local governmental authorities, as well as governmental authorities in various jurisdictions, have proposed or implemented and are likely to continue to propose or implement, legislative and regulatory initiatives around corporate governance and environmental and social practices and disclosures. Compliance with such evolving expectations, rules and regulations, including any that may emerge in the future as well as those incorporated in our contractual obligations from our customers, could increase the cost and complexity of operating our business, and could adversely impact us.”

Annual report 2025A · The company itself

“Furthermore, any actual or perceived failure to achieve our current and future sustainability goals, including those which result from contractual obligations from our customers, or to act responsibly with respect to such matters or to effectively respond to new or additional sustainability-related legal or regulatory requirements, could result in adverse publicity and adversely affect our business and reputation. There is no assurance that we will be able to successfully achieve any sustainability-related goal or execute on any sustainability-related strategy, or adequately meet stakeholder expectations with respect to such matters.”

Annual report 2025A · The company itself

“Compliance with Laws and Regulations, Litigation and Disputes We are subject to a wide variety of laws, regulations, and rules applicable to short-term rental, experiences, services, long-term rental, and home sharing businesses, or that govern our business practices, including among others, e-commerce, data privacy and cybersecurity, artificial intelligence, payment services, advertising, consumer protection, employment, licensing requirements, and commercial practices. Such laws and regulations are complex, evolving, and sometimes inconsistent and have limited and may continue to limit the ability or willingness of new or existing hosts to list on our platform. These regulations may expose our users or us to regulatory inquiries, litigation, and/or other disputes and to potentially significant liabilities, including taxes, compliance costs, fines, and criminal or other penalties, which have had and could continue to have a material effect on our business, results of operations, and financial condition.”

Annual report 2025A · The company itself

“Evolving focus on environmental, social, and governance issues by shareholders, customers, regulators, politicians, employees, and other stakeholders may impose additional risks and costs on our business. There continues to be scrutiny on climate change, environmental sustainability, human capital, human rights, data privacy and other ESG matters among our shareholders and other stakeholders, including customers, employees, regulators, politicians, and the general public in the United States and abroad. Companies like Airbnb face heightened expectations regarding such matters due to our size and geographical reach, as well as our brand recognition and public commitments.”

Annual report 2025A · The company itself

“The regulatory landscape for ESG issues is also rapidly evolving, and various policymakers, including the European Union and State of California, among others, have adopted (or are considering adopting) requirements for climate- or other ESG-related disclosures or other actions, including undertaking value chain due diligence. We may face risks related to sustainability reporting obligations under the evolving regulatory landscape in the European Union. For example, the EU Corporate Sustainability Reporting Directive (“CSRD”) imposes stringent requirements on in scope companies to disclose detailed information.”

Annual report 2025A · The company itself

“Current and anticipated sustainability and social (“Sustainability”) laws and scrutiny of our Sustainability policies and practices may materially increase our costs, expose us to liability, and adversely impact our reputation, employee retention, willingness of customers and suppliers to do business with us and willingness of investors to invest in us. Our operations are subject to rapidly changing and varied expectations and requirements regarding Sustainability issues from a wide range of stakeholders, such as governmental and self-regulatory organizations, including U.S. federal and state governments, and the EU, as well as investor advocacy groups, institutional investors, investment funds, proxy advisory services, stockholders and customers.”

Annual report 2025A · The company itself

“We are also required to comply with disclosure obligations under the SEC’s long-standing climate change disclosure guidance and other SEC regulations, as well as the European Union’s Corporate Sustainability Reporting Directive (“CSRD”).”

Annual report 2025A · The company itself

“Meeting our obligations under existing Sustainability laws and regulations is costly for us and our suppliers, and we expect these regulations and costs to increase as the regulatory frameworks in each jurisdiction in which we operate become more complex and distinct. Additionally, regulators may perform investigations, inspections and periodically audit our compliance with these laws and regulations, and our efforts or operations may not be compliant.”

Annual report 2025A · The company itself

“Particularly with regard to AI; competition; consumer protection; content moderation, including access restrictions for minors; data privacy and security; intellectual property; news publications; and sustainability and other social matters, we have seen an increase in new and evolving laws and regulations, as well as related enforcement actions and investigations, being proposed and implemented in recent years by legislative and regulatory bodies around the world.”

Annual report 2025A · The company itself

“Table of Contents Alphabet Inc. •Data privacy, collection, processing, and portability: Laws and regulations further restricting the collection, processing, or sharing of user or advertising-related data, including privacy and data protection laws; laws affecting the processing of children's data (as discussed further below), data breach notification laws; laws limiting data transfers (including data localization laws); laws limiting use of data for AI training; and laws requiring data portability. •Copyright and other intellectual property: Copyright and related laws, including the EU Directive on Copyright in the Digital Single Market and European Economic Area transpositions, which have introduced new licensing regimes, increase liability with respect to content uploaded by users or linked to from our platforms, or create property rights in news publications that could require payments to news agencies and publishers, which may result in other regulatory actions.”

Annual report 2025A · The company itself

“Risks Related to Legal and Regulatory Matters We are subject to laws and regulations concerning privacy, information security, data protection, consumer protection, advertising, tracking, targeting, and protection of minors, and these laws and regulations are continually evolving. Our actual or perceived failure to comply with these laws and regulations could adversely affect our business, financial condition, and results of operations.”

Annual report 2025A · The company itself

“Further, children’s privacy continues to be a focus of enforcement activities and subjects our business to potential liability that could adversely affect our business, financial condition, or operating results. For example, enforcement of COPPA, which requires companies to obtain parental consent before collecting personal information from children known to be under the age of thirteen or from child-directed websites or online services, has increased in recent years.”

Annual report 2025A · The company itself

“We also recognize the importance of what we consider material environmental, social and governance (“ESG”) factors in our investment process to help enable us to generate attractive risk-adjusted returns and have adopted a responsible investment program for this purpose. We work collaboratively with our various underwriting, asset management, legal and compliance teams to appropriately integrate relevant ESG considerations into our investment process.”

Annual report 2025A · The company itself

“In December 2025, the European Commission renewed its adequacy decisions for the U.K., which permit the transfer of personal data from the EEA to the U.K., until December 27, 2031, subject to periodic review and potential renewal. While we currently rely on the adequacy decisions and other transfer mechanisms, the adequacy decisions could be modified, suspended or withdrawn in the future, which could require us and our portfolio companies to implement additional data transfer mechanisms and could increase costs and complexity.”

Annual report 2025A · The company itself

“Increasing scrutiny from stakeholders and regulators with respect to sustainability—or ESG—matters could impact our or our funds’ portfolio companies’ reputation, the cost of our or their operations, or result in investors ceasing to allocate their capital to us, all of which could adversely affect our business and results of operations. We, our funds and their portfolio companies face increasing public scrutiny related to ESG activities.”

Annual report 2025A · The company itself

“Certain institutional investors may consider such ESG ratings and measures in making their investment decisions. If our ESG ratings or practices do not meet the standards set by such investors or our stockholders, or if we fail, or are perceived to fail, to demonstrate progress toward our ESG objectives and initiatives, they may choose not to invest in our funds or exclude our common stock from their investments.”

Annual report 2025A · The company itself

“Relatedly, we, our funds and their portfolio companies risk damage to our brands and reputations, if we or they do not or are perceived to not act responsibly in a number of areas, including, but not limited to human rights, climate change and environmental stewardship, support for local communities, corporate governance and transparency, or consideration of ESG factors in our investment processes.”

Annual report 2025A · The company itself

“Moreover, in recent years “anti-ESG” sentiment has gained momentum across the U.S., with several states, the executive branch and federal agencies, and Congress having proposed, enacted, or indicated an intent to pursue “anti-ESG” policies, legislation, or initiatives, issued related legal opinions and pursued related investigations and litigation. If investors subject to anti-ESG legislation viewed our funds or responsible investing or ESG practices, including our climate-related goals 60 Table of Contents and commitments, as being in contradiction of such “anti-ESG” policies, legislation or legal opinions, such investors may not invest in our funds, our ability to maintain the size of our funds could be impaired, and it could negatively affect results of our operations, cash flow or the price of our common stock.”

Annual report 2025A · The company itself

“New and evolving and sometimes conflicting sustainability/ESG regulations and disclosure expectations could increase our compliance costs and expose us to enforcement, litigation or fundraising constraints. Certain regulations related to ESG that are applicable to us, our funds and their portfolio companies could adversely affect our business.”

Annual report 2025A · The company itself

“The European Commission’s “action plan on financing sustainable growth” (“Action Plan”) is designed to, among other things, define and reorient investment toward more sustainable economic activities. The Action Plan contemplates, among other things: establishing EU labels for green financial products; clarifying asset managers’ and institutional investors’ duties regarding ESG in their investment decision-making processes; increasing disclosure requirements in the financial services sector around ESG and increasing the transparency of companies on their ESG policies and related processes and management systems; and introducing a ‘green supporting factor’ in the EU prudential rules for banks and insurance companies to incorporate climate risks into banks’ and insurance companies’ risk management policies.”

Annual report 2025A · The company itself

“The Taxonomy Regulation is a classification system that establishes a list of environmentally sustainable economic activities and sets out four overarching conditions that an economic activity has to meet in order to qualify as environmentally sustainable. The Taxonomy Regulation, amongst other things, introduces mandatory disclosure and reporting requirements and supplements the framework set out in the Sustainable Finance Disclosure Regulation (“SFDR”), which requires certain disclosures at both firm and fund level.”

Annual report 2025A · The company itself

“For Ares, this primarily impacts our AIFMs and the funds they manage by requiring certain firm-level website disclosures regarding how sustainability risks are integrated into our investment process, consideration of adverse impacts of investment decisions on sustainability factors and transparency of remuneration practices and inclusion of certain fund-level information in pre-contractual and periodic disclosures.”

Annual report 2025A · The company itself

“There is a risk that a significant reorientation in the market following the implementation of these regulations and further measures could be adverse to our funds’ portfolio companies if they are perceived to be less valuable as a consequence of, among other things, their carbon footprint or allegations or evidence of “greenwashing” (i.e., the holding out of a product as having green or sustainable characteristics where this is not, in fact, the case). There is also a risk that market expectations in relation to SFDR categorization of financial products could adversely affect our ability to raise capital, especially from EEA investors.”

Annual report 2025A · The company itself

“In November 2025, the European Commission published a 61 Table of Contents draft legislative proposal to revise SFDR to introduce, among others, new categories for sustainability-related financial products with related criteria that require to be met for each category. Ares cannot guarantee that its current approach will meet future regulatory requirements, reporting frameworks or best practices, increasing the risk of related enforcement.”

Annual report 2025A · The company itself

“Moreover, on January 5, 2023, the Corporate Sustainability Reporting Directive (“CSRD”) came into effect. Broadly, CSRD amends and strengthens the rules introduced on sustainability reporting for companies, banks and insurance companies under the Non-Financial Reporting Directive (2014/95/EU) (“NFRD”). CSRD requires companies to produce detailed and prescriptive reports on sustainability-related matters within their financial statements.”

Annual report 2025A · The company itself

“One or more of our businesses may fall within scope of CSRD and this may lead to increased management burdens and costs.”

Annual report 2025A · The company itself

“In the U.K., the FCA has introduced a regulatory framework focused on implementing the recommendations of the Financial Stability Board’s TCFD and, in particular, by introducing mandatory TCFD-aligned disclosure requirements for certain FCA authorized firms. Pursuant to these rules, AML and AMUKL have to disclose certain climate-related financial information in line with the four overarching pillars of the TCFD recommendations (Governance, Strategy, Risk Management, Metrics & Targets) annually on a mandatory basis, and have done so since 2024.”

Annual report 2025A · The company itself

“Sustainability Labelling and Disclosure of Sustainability-Related Financial Information Instrument 2023 (“SDR”) introduces, among others, an ‘anti-greenwashing’ rule which applies to all U.K.-authorized firms in their communications with clients in the U.K. in relation to a product or service or when communicating or approving a financial promotion to a person in the U.K., which includes applicable Ares entities. Compliance with the anti-greenwashing rule may result in management burdens and additional regulatory costs.”

Annual report 2025A · The company itself

“In Asia, regulators in Singapore, Japan and Hong Kong have released guidelines for asset managers to integrate climate risk considerations in investment and risk management processes, together with enhanced disclosure and reporting and have also issued enhanced rules for certain ESG funds on general ESG risk management and disclosure.”

Annual report 2025A · The company itself

“Australia’s securities regulator confirmed that “greenwashing” has been an enforcement priority in recent years and issued information on its surveillance activities in respect of “greenwashing” in 2024. In 2025, Australia’s climate-related financial disclosure regime under the Corporations Act 2001 (Cth) came into effect, with reporting requirements applying to the largest entities first and being phased in over time to capture a broader group of entities.”

Annual report 2025A · The company itself

“Compliance with any new laws or regulations increases our regulatory burden and could result in increased legal, accounting and financial compliance costs, make some activities more difficult, time-consuming and costly, place strain on our personnel, systems and resources, affect the manner in which we or our funds’ portfolio companies conduct our businesses and adversely affect our profitability because of the need to collect certain information to meet the disclosure requirements.”

Annual report 2025A · The company itself

“Increased regulatory scrutiny, actions or fines, litigation, employee misconduct, failures or perceived failures to appropriately mitigate and manage ESG incidents, conflicts of interest, cyber-attacks and management of tax disputes, could among other events, harm our reputation and thus our ability to attract and retain investors and raise new capital for our funds, adversely affecting our business. While we have a robust compliance program in place and have successfully instituted a culture of compliance through our policies and procedures aimed to mitigate potential risks and enhanced regulatory action, we may be subject to new and heighted enforcement activity resulting in public sanctions or fines which could adversely impact our reputation.”

Annual report 2025A · The company itself

“Our ESG initiatives, objectives, intentions and expectations are subject to change, and no assurance or guarantee can be given that such objectives, intentions or expectations (some of which are aspirational in nature) will be met. Statistics and metrics that we report relating to ESG matters are estimates and may be based on assumptions or developing standards (including our internal standards and policies). There can be no assurance that our ESG policies and procedures, including policies and procedures related to responsible investment or the application of ESG-related criteria or reviews to the investment process, including certain metrics or frameworks, will continue.”

Annual report 2025A · The company itself

“For example, the State of Texas recently issued an opinion on the legality of corporate diversity, equity and inclusion (DEI) programs taking the position that such programs are potentially unlawful under certain circumstances. On the other hand, our failure or perceived failure to pursue or fulfill our sustainability-related goals, targets and objectives, to comply with ethical, social, environmental or other standards, regulations or expectations, or to satisfy various sustainability reporting standards, which vary widely across different jurisdictions, could also make us the target of litigation, investigations or public criticism.”

Annual report 2025A · The company itself

“Changes in data privacy and protection laws and regulations, or any failure to comply with such laws and regulations, could adversely affect our business and financial results. We are subject to a variety of continuously evolving and developing laws and regulations globally regarding privacy, data protection, and data security, including those related to the collection, storage, handling, use, disclosure, cross-border transfer, destruction, and security of personal data.”

Annual report 2025A · The company itself

“Some of these laws carry heavy penalties for violations, e.g., fines of up to 4% of worldwide revenue under the U.K. Data Protection Act and the European Union General Data Protection Regulation (which we refer to as GDPR), up to $20,000 per violation under the Colorado Privacy Act (which we refer to as CPA), and up to $7,500 per intentional violation under the California Consumer Privacy Act (which we refer to as CCPA).”

Annual report 2025A · The company itself

“For example, the European Union’s (“EU”) General Data Protection Regulation and AI Act impose compliance obligations relating to personal data and AI system deployment. In the U.S., laws such as the California Privacy Rights Act provide enhanced consumer protections and create private rights of action for certain data breaches.”

Annual report 2025A · The company itself

“Additional sustainability and climate-related disclosure requirements have been enacted or proposed in jurisdictions in which we operate, including the EU Corporate Sustainability Reporting Directive, the UK Streamlined Energy and Carbon Reporting regime, and California SB 253 and SB 261.”

Annual report 2025A · The company itself

“We are subject to evolving corporate governance and public disclosure regulations and expectations that could expose us to numerous risks. We are subject to changing rules and regulations promulgated by several governmental and self-regulatory organizations, including the SEC, the Nasdaq Stock Market and the FASB. These rules and regulations continue to evolve in scope and complexity with many new requirements arising from laws enacted by Congress, making compliance more difficult and uncertain.”

Annual report 2025A · The company itself

“Additionally, unfavorable perception regarding our social initiatives, governance practices, diversity initiatives, the perceived or actual impacts of our products and services, environmental policies or other concerns of our stakeholders (which could conflict with the expectations of other stakeholders) could adversely affect our reputation. Any negative effect on our reputation could have an adverse effect on the size of our customer base, which could adversely affect our business and financial results.”

Annual report 2025A · The company itself

“In Europe, new EU regulations related to in vitro diagnostics devices (IVDR) partly entered into force in May 2022. The new regulation will replace the current CE-mark under IVDD for in vitro diagnostic devices. The IVDR transition deadline was extended by the European Parliament and the Council of the European Union and now runs to December 2028 for certain IVDs.”

Annual report 2025A · The company itself

“Manufacturers, importers, and authorized representatives must adhere to these stricter rules to to maintain access to promote in the EU market. BioPorto will take the necessary steps to apply in due time and expects that the experience gained and analytical study data created through the FDA submission and subsequent clearance of ProNephro AKI® (NGAL) for pediatric use will facilitate the process.”

Annual report 2025A · The company itself

“For example, in conjunction with the 8 Digital Services Act ("DSA"), the European Commission (the "EC") imposes obligations around short-term rental property owner registration, property verification, and enforcement of local registration schemes. Some jurisdictions have adopted or are considering restrictions (e.g., license requirements) on the ability to offer alternative accommodations.”

Annual report 2025A · The company itself

“The handling and storage of such data, as well as privacy rights of consumers, are subject to complex and evolving laws and regulations. While we invest significant resources to comply with regulations such as the EU's General Data Protection Regulation ( "GDPR"), the California Consumer Privacy Act ("CCPA"), the Personal Information Protection Law in the People's Republic of China, the Digital Personal Data Protection Act in India, and the EU Digital Markets Act ("DMA"), they are complex, subject to uncertain interpretation, and impose significant compliance obligations and costs on us.”

Annual report 2025A · The company itself

“These include: requirements by browsers such as Safari and Google Chrome to require opt-in consent for third-party cookies; restrictions on the use of the identifier for advertisers (such as the Apple "IDFA") by mobile device manufacturers; Apple's iCloud+ Private Relay (which hides a user's IP address from websites that the user accesses in favor of other IP addresses provided by Apple's partners); and the adoption of regulations that govern the use of cookies. For example, in the EU, the ePrivacy Directive regulates the use of cookies and similar technologies, including limitations on the use of data and guidelines for enabling users to accept or reject cookies.”

Annual report 2025A · The company itself

“In a Net Zero scenario, upcoming legislation addressing the climate and nature challenges, such as regulations arising from the EU Green Deal— including CSRD reporting requirements, the EU Deforestation Regulation (EUDR), the Renewable Energy Directive (RED III), and the targets of the Global Biodiversity Framework — highlight the shift in the global economy. These initiatives are expected to influence procurement practices, and Borregaard is actively monitoring these developments and implementing measures to ensure compliance.”

Annual report 2024A · The company itself

“Strategien vurdert opp mot markedet og bærekraft Regionene vurderer kunder og oppdrag med utgangspunkt i den strategiske plattformen. Vurderingene knyttes til visjonen «Vi går foran og bygger fremtidens samfunn» og de langsiktige målene «beste arbeidsplass», «kundeorientert og langsiktig» og «suksessfull virksomhet». Dette betyr at oppdrag blir vurdert ut fra flere kriterier enn de økonomiske.”

Annual report 2024A · The company itself

“Innenfor bærekraft er det vedtatt fire satsingsområder: Bouvet skal vektlegge bærekraft i alle relasjoner med kunder og samarbeidspartnere. Bouvet skal utvikle og dele kompetanse på bærekraft. Bouvet skal omfavne en inkluderende og mangfoldig kultur.”

Annual report 2024A · The company itself

“As a provider of data and business processing solutions, our systems contain a significant amount of sensitive data, including personal information, related to our clients, customers of our clients, our employees, among others. We are, therefore, subject to compliance obligations under federal, state and foreign privacy and information security laws, including in the U.S., the GLBA, HIPAA, CPRA, the PIPEDA in Canada, the GDPR in the European Union and its UK equivalent, and we are subject to compliance with various client industry standards such as PCI DSS as well as Medicare and Medicaid programs related to our clients.”

Annual report 2026A · The company itself

“Further, there is increased focus, including by governments, regulators, our investors, employees, clients and other stakeholders, on sustainability matters, which has resulted in new or additional legal and regulatory requirements and may require increased compliance and operational costs. These stakeholders may have differing expectations or requirements regarding sustainability, and applicable regulations in various jurisdictions may be inconsistent or conflict with one another, presenting additional challenges to compliance. If we fail to comply with applicable regulations and maintain practices that meet our stakeholders’ evolving, and potentially divergent, expectations, it could harm our reputation, adversely affect our ability to attract and retain employees or clients and expose us to increased scrutiny from investors and regulatory authorities.”

Annual report 2026A · The company itself

“There is continued and sometimes conflicting focus, including from governments, non-governmental organizations, regulators (including the SEC), investors and customers, on ESG issues such as environmental stewardship, climate change, greenhouse gas emissions, diversity and inclusion, human rights, racial justice and workplace conduct. Negative public perception, adverse publicity or negative comments in social media and other forums could damage our reputation if we do not, or are not perceived to, adequately or appropriately address any one or more of these issues.”

Annual report 2025A · The company itself

“Laws and regulations related to ESG issues continue to evolve, including in the U.S., the U.K. and the EU. New laws and regulations may impose additional compliance or disclosure obligations on us, and we may face inconsistent or conflicting requirements across jurisdictions.”

Annual report 2025A · The company itself

“In particular, heightened demand for, and scrutiny of, ESG-related strategies and advice has increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements, commonly referred to as “greenwashing,” or that we have otherwise run afoul of regulations.”

Annual report 2025A · The company itself

“Certain investors have developed their own ESG ratings while others use third-party benchmarks or scores to measure a company’s ESG practices and make investment decisions or otherwise engage with us to influence our practices in these areas. Additionally, our customers may evaluate our ESG practices and/or request that we adopt certain ESG policies in order to work with us.”

Annual report 2025A · The company itself

“New government regulations could also result in new or more stringent forms of ESG oversight and new mandatory and voluntary reporting, diligence and disclosure, such as the Corporate Sustainability Reporting Directive in the European Union.”

Annual report 2025A · The company itself

“We are subject to laws and requirements related to the treatment and protection of personal, sensitive and/or other regulated data in the jurisdictions where we operate. Various governments, agencies and regulatory organizations have enacted or are considering new rules and regulations and we expect to continue to incur costs to comply with these rules and regulations.”

Annual report 2025A · The company itself

“Our business has faced and may in the future continue to face increased scrutiny from our guests, our team members, the investment community, media (including social media), governments, regulators, destinations and other parties related to our sustainability and environmental activities. If our sustainability practices do not meet, are adverse to, or are perceived to diverge from the expectations of our guests, team members, investors or other stakeholders, the demand for cruising, our reputation, our ability to attract or retain team members as well as our attractiveness as an investment could be negatively impacted.”

Annual report 2025A · The company itself

“Sustainability Sustainability forms an important element of our business strategy. Our efforts to promote the safety and well-being of our guests and crew, protect the environment, create opportunities for our workforce, build strong relationships and support the communities we operate in and visit, reflect our core values and are key to our long-term success.”

Annual report 2025A · The company itself

“Changing focus and sensitivity by governmental, non-governmental organizations, customers, consumers and investors to sustainability issues, including those related to climate resilience, plastic usage and ingredients, could result in increased operating or manufacturing costs and compliance challenges, which could adversely affect our business. As climate resilience and other sustainability issues became more prominent in recent years, so has scrutiny by federal, state and local governments, non-governmental organizations and our customers, consumers and investors.”

Annual report 2025A · The company itself

“We are required to comply with stringent, complex and evolving laws, rules, regulations and standards in many jurisdictions, as well as contractual obligations, relating to data privacy and security. Ensuring compliance with such requirements may increase operating costs, impact our data processing practices and policies and the development of new products or services, and reduce operational efficiency, any of which could adversely affect our business and operations.”

Annual report 2026A · The company itself

“Table of Contents At the state level, we are subject to laws and regulations such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”). The CCPA broadly defines personal information and gives California residents expanded privacy rights and protections, such as affording them the right to access and request deletion of their information and to opt out of certain sharing and sales of personal information. The CCPA provides for severe civil penalties and statutory damages for violations and a private right of action for certain data breaches that result in the loss of unencrypted personal information.”

Annual report 2026A · The company itself

“Our compliance efforts are further complicated by the fact that data privacy and security laws, rules, regulations and standards around the world are rapidly evolving, may be subject to uncertain or inconsistent interpretations and enforcement, and may conflict among various jurisdictions. In many jurisdictions, enforcement actions and consequences for non-compliance with data privacy and security laws, rules, regulations, standards, certifications, contractual requirements or other obligations are rising.”

Annual report 2026A · The company itself

“The gathering, storage and use of information is subject to strict regulations, for example data privacy legislation. In Sweden, a license is required for certain operations of the Group, such as credit register related operations. In addition, according to UC’s shareholder agreement, UC’s minority shareholders may veto certain decisions concerning UC’s credit register and the control of credit register data. This may restrict Enento Group’s possibilities to materially change business operations related thereto.”

Annual report 2025A · The company itself

“Through this process, F-Secure identified reputational risk from failing to meet emission reduction targets as the primary material climate risk, given stakeholder expectations and the company's dependency on supply chain emission reductions to achieve its target by 2030.”

Annual report 2025A · The company itself

“Our business is subject to complex and evolving United States and foreign laws and regulations regarding data protection and cybersecurity, which impose significant costs and regulatory risks that are likely to increase over time. There has recently been heightened regulatory and enforcement focus relating to the collection, use, storage, retention, transfer, and processing of personal data in the United States (at both the state and federal level) and internationally, including the EU’s General Data Protection Regulation, the United States executive order relating to sharing information with China and other covered countries, the California Consumer Privacy Act (as amended by the California Privacy Rights Act, the “CCPA”), the Virginia Consumer Data Protection Act, the Canada Personal Information Protection and Electronic Documents Act (“PIPEDA”), and other similar laws that have been or will be enacted by other jurisdictions.”

Annual report 2026A · The company itself

“The Company is subject to an increasing number of privacy and data protection laws, regulations and directives globally, including the General Data Protection Regulation ("GDPR") in the E.U., the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"), and various consumer privacy acts in other U.S. states that have followed, the Gramm-Leach-Bliley Act ("GLBA"), the Fair Credit Reporting Act ("FCRA"), and the Health Insurance Portability and Accountability Act ("HIPAA") in the United States; the U.K.'s General Data Protection Regulation ("U.K. GDPR") and Data Protection Act 2018; the General Personal Data Protection Act ("LGPD") in Brazil; the China Personal Information Protection Law ("PIPL"); and the Japanese Act on the Protection of Personal Information ("APPI") (referred to collectively as "Privacy Laws"). Many of these Privacy Laws place restrictions on the Company's ability to efficiently transfer, access and use personal data across its business.”

Annual report 2025A · The company itself

“The Company is subject to the E.U.’s GDPR, which applies to all organizations processing the personal data of individuals in the E.U., regardless of where such organization is based.”

Annual report 2025A · The company itself

“Technology transitions, geopolitical uncertainty, tariffs, labor constraints, and sustainability expectations are increasing supply chain and manufacturing complexity.”

Annual report 2026A · The company itself

“Governments, investors, customers, employees, and other stakeholders continue to focus on sustainability matters, including climate change and greenhouse gas ("GHG") emissions, environmental stewardship, human capital management, human rights, responsible sourcing, and related matters.”

Annual report 2026A · The company itself

“Our failure or perceived failure to pursue or fulfill our stated goals, maintain adequate supporting processes, adhere to our public statements, or comply with applicable reporting requirements could adversely affect our reputation, customer relationships, talent recruitment and retention, and investment attractiveness, and could result in government enforcement actions or private litigation.”

Annual report 2026A · The company itself

“I byggeindustrien stiger kravene til dokumentation i forbindelse med certificering af bæredygtigt byggeri”

Annual report 2026A · The company itself

“90 % af egenproducerede vådvarer med miljømærke”

Annual report 2026A · The company itself

“For Flügger betyder det, at vi skal navigere i et landskab med stigende krav til klima- og miljøpåvirkning, både fra myndigheder, kunder og samarbejdspartnere. Hvis vores værdikæde ikke formår at tilpasse sig disse krav, eller hvis vi ikke kan levere den nødvendige dokumentation for vores produkters bæredygtighed, kan det udgøre en forretningsmæssig risiko.”

Annual report 2026A · The company itself

“We may face increasing pressures from investors, lenders and other market participants, who are focused on climate change, to prioritize sustainable energy practices, reduce our carbon footprint and promote sustainability. As a result, we may be required to implement more stringent ESG procedures or standards so that our existing and future investors and lenders remain invested in us and make further investments in us, especially given the highly focused and specific trade of crude oil transportation in which we are engaged. Such ESG corporate transformation calls for an increased resource allocation to serve the necessary changes in that sector, increasing costs and capital expenditure.”

Annual report 2024A · The company itself

“Additionally, certain investors and lenders may exclude oil transport companies, such as us, from their investing portfolios altogether due to ESG factors. These limitations in both the debt and equity capital markets may affect our ability to finance our plans for growth.”

Annual report 2024A · The company itself

“We collect, use, disclose, store or otherwise process personal information and other sensitive data, which is subject to stringent and changing state and federal laws and regulations. In the operation of our business, particularly in relation to our identity and information protection service and financial wellness offerings, we collect, use, process, store, transmit or disclose (collectively, process) an increasingly large amount of confidential information, including personal information (which includes credit card information and other critical data) from 19 Table of Contents employees and customers in multiple jurisdictions. This information is subject to a rapidly evolving and increasingly complex framework of federal, state and foreign privacy, data protection and data security laws, as well as contractual obligations.”

Annual report 2026A · The company itself

“General Data Protection Regulation (GDPR), includes stringent operational requirements for processors and controllers of E.U. personal data with broad extra-territorial effect and imposes significant penalties for non-compliance.”

Annual report 2025A · The company itself

“In the U.S., the California Consumer Privacy Act and its associated regulations require covered companies to provide specific disclosures to California consumers and afford such 20 Table of Contents consumers new abilities to opt-out of certain sales and sharing of personal information for advertising and other purposes.”

Annual report 2025A · The company itself

“We are subject to evolving regulations and scrutiny from both U.S. and international investors, regulators, customers, employees and other stakeholders regarding environmental, social and governance (ESG) matters. If we fail, or are perceived to fail, to maintain ESG practices that meet evolving laws, regulations, executive orders and stakeholder expectations, or if we fail to make progress on or revise any of our ESG commitments, initiatives or goals, our reputation and our ability to attract and retain employees could be harmed, we may receive negative media attention and we may be negatively perceived by our investors or our customers.”

Annual report 2025A · The company itself

“Regulation – EUDR) syftar till att förhindra handel med varor som bidrar till avskogning och skogsförstörelse världen över. EUDR kräver att alla aktörer ska kunna redovisa varifrån råvarorna kommer och att ingen avskogning har skett i samband med produktionen.”

Annual report 2024A · The company itself

“Holmen bedriver verksamhet som kräver miljötillstånd. Tillstånden anger bland annat villkor för tillåten produktionsvolym, bullernivå samt tillåtna utsläpp till luft och vatten.”

Annual report 2024A · The company itself

“Under 2024 rapporterades 46 (47) miljörelaterade incidenter till tillsynsmyndigheterna.”

Annual report 2024A · The company itself

“In addition, our reputation and client relationships may be damaged as a result of our practices related to climate change, including our involvement, or our customers’ involvement, in certain industries or projects, in the absence of mitigation and/or transition measures, associated with causing or exacerbating climate change, as well as any decisions we make to continue to conduct or change our activities in response to considerations relating to climate change.”

Annual report 2025A · The company itself

“Our ability to attract and retain customers, clients, investors, and employees is affected by our reputation. Significant harm to our reputation can arise from various sources, including officer, director, or employee misconduct, actual or perceived unethical behavior, conflicts of interest, security breaches, litigation or regulatory outcomes, compensation practices, failing to deliver minimum or required standards of service and quality, failing to address customer and agency complaints, compliance failures, unauthorized release, gathering, monitoring, misuse, loss, destruction or other processing of confidential, proprietary, personal, and other information due to cyber-attacks or other information or security breaches, disruptions, compromises or failures of our systems or infrastructure, perception of our corporate responsibility or environmental practices and disclosures, and the activities of our clients, customers, and counterparties, including vendors.”

Annual report 2025A · The company itself

“Divergent ideological and social views may create competing stakeholder, legislative, and regulatory scrutiny that may impact our reputation or operations. In particular, there is an increasing number of state-level anti-ESG initiatives in the U.S. that may conflict with other regulatory requirements or our various stakeholders’ expectations.”

Annual report 2025A · The company itself

“At the same time, we face increasing regulatory reporting requirements related to sustainability topics. The increased focus on sustainability has resulted and may continue to result in new and changing regulations, including the need to comply with different regulatory regimes in different jurisdictions, and customer requirements that could affect us.”

Annual report 2025A · The company itself

“We are subject to an increasing number of local, state, federal, and international laws, regulations, and rules and standards. These relate to, without limitation, labor, advertising and marketing, tax, financial services, AI, data privacy and security, electronic funds transfer, money transmission, lending, digital content, consumer protection, real estate, billing, e-commerce, promotions, quality of services, intellectual property ownership and infringement, import and export requirements, anti-bribery and anti-corruption, insurance, foreign exchange controls and cash repatriation restrictions, antitrust and competition, environmental, health and safety, and other regulated activities.”

Annual report 2026A · The company itself

“Regulations related to data privacy, cybersecurity, the collection, processing, storage, transfer and use of data, and the use of AI are evolving and becoming increasingly complex and fragmented. Many jurisdictions in which we operate globally have enacted, or are in the process of enacting, data privacy legislation or regulations aimed at creating and enhancing individual privacy rights. For example, the General Data Protection Regulation (GDPR) regulates the collection, use, and retention of personal information by our offerings in the EU.”

Annual report 2026A · The company itself

“Each of these privacy, security and data protection requirements could impose significant limitations on us, require changes to our business practices, require notification to customers, workers, and others of a security incident, restrict our use or storage of personal information, limit our use of third-party tools and vendors, or cause changes in customer purchasing behavior that may make our business more costly, less efficient or impossible to conduct, and may require us to modify our current or future products or services, which may make customers less likely to purchase our products and may harm our future financial results. Additionally, any actual or alleged noncompliance with these laws and regulations, or failure to meet evolving customer expectations could result in negative publicity or harm to our reputation and subject us to investigations, claims or other remedies, including demands that we modify or cease existing business practices, and expose us to significant fines, penalties and other damages.”

Annual report 2026A · The company itself

“Our inability to meet these requirements and expectations could cause regulatory or reputational harm and affect our ability to attract and retain clients. •If our reputation is harmed, we could suffer losses in our AUM, revenues and net income.”

Annual report 2025A · The company itself

“Disclosure requirements and expectations related to sustainability or ESG are evolving. Our inability to meet these requirements and expectations could cause regulatory or reputational harm and affect our ability to attract and retain clients. Requirements and expectations related to commitment to and disclosures around sustainability or ESG topics continue to evolve globally.”

Annual report 2025A · The company itself

“Further, fiduciary, anti-competitive, voting power, governance, and other concerns with ESG investment strategies continue to be the subject of legislative and regulatory debate globally, particularly at both the federal and state levels in the U.S., the outcomes of which could impact both our asset management business and our clients, as well as, potentially, our investment activities more broadly. Certain U.S. officials have suggested that sustainability or ESG related investing practices may result in violations of law, including antitrust laws, and breaches of fiduciary duty. Views on sustainability or ESG practices, particularly those related to climate issues, have also become part of political discourse, which can amplify the reputational and business risks associated with such allegations.”

Annual report 2025A · The company itself

“•Regulations pertaining to the integration of ESG in asset management. These regulations have materially impacted the asset management industry in the EU and U.K in recent years. In particular, these regulations have required the integration of sustainability risks within investment management processes and imposed enhanced disclosure requirements on the ESG characteristics of EU and U.K. investment products.”

Annual report 2025A · The company itself

“The EU Corporate Sustainability Reporting Directive sets out new ESG disclosure requirements for EU domiciled companies and non-EU groups having substantial activities in the EU (like we do) based on new European standards. Certain U.S. states are pursuing similar initiatives, albeit with varying requirements. Further, the SEC in the recent past has increased its enforcement activity relating to ESG disclosures and practices of asset managers and may do so again.”

Annual report 2025A · The company itself

“Risks Related to Government Regulation, Legal Proceedings, and Financial and Economic Market Conditions •Our ability to comply with a broad range of laws and regulations, and other stakeholder requirements globally, including rapidly evolving requirements related to tax, trade, tariffs, manufacturing, ingredients, climate change, sustainability, the environment, privacy, data protection, artificial intelligence, anti-corruption, and human rights. •We are, and could become, subject to legal proceedings and governmental or regulatory investigations that may result in significant expenses, liabilities (potentially in excess of accruals), and reputational damage. •Concerns about the reliability, safety, and efficacy of our products and their ingredients, including acetaminophen, talc, and phenylephrine, have resulted and could in the future result in litigation, regulatory action, governmental investigations, reputational damage, product recalls, product reformulations, or product withdrawals, whether or not such concerns are based on scientific or factual evidence we believe is sound.”

Annual report 2025A · The company itself

“Increasing scrutiny, emerging legal requirements, and rapidly evolving expectations from stakeholders regarding sustainability matters could adversely affect us. Increasing scrutiny, emerging legal requirements, and rapidly evolving stakeholder expectations regarding sustainability practices and performance could adversely affect our business, results of operations, or financial condition.”

Annual report 2025A · The company itself

“Legislators and regulators have imposed, and may continue to impose, sustainability-related legislation, rules, and guidance, which may conflict with one another, create new disclosure obligations, result in additional compliance costs, or expose us to new or additional risks.”

Annual report 2025A · The company itself

“However, we may be unable to successfully implement the programs and initiatives necessary to achieve these goals and commitments, and the outcomes may not generate the intended effects, which could adversely affect us. Despite our efforts, any actual or perceived failure to achieve our sustainability goals or the perception (whether or not valid) that we have failed to act responsibly with respect to sustainability matters, comply with sustainability laws or regulations or meet societal, investor, and consumer sustainability expectations could result in reputational damage, lead consumers or customers to purchase competing products or investors to choose not to invest in our company, or cause dissatisfaction among our employees or other stakeholders, which could adversely affect our business, results of operations, or financial condition.”

Annual report 2025A · The company itself

“A breach of privacy laws or unauthorized access, loss, or misuse of personal data could adversely affect us. We are subject to increasingly complex and changing privacy and data protection laws and regulations in the United States and around the world that impose broad compliance obligations on the collection, transmission, dissemination, use, privacy, confidentiality, security, retention, availability, integrity, and other processing of health-related and other sensitive and personal information.”

Annual report 2025A · The company itself

“These laws and regulations include the California Consumer Privacy Act (as modified by the California Privacy Rights Act), the EU GDPR, the U.K. GDPR, and China’s PIPL. We are also subject to federal health information privacy laws, such as the Health Insurance Portability and Accountability Act, and consumer protection laws, such as the Controlling the Assault of Non-Solicited Pornography and Marketing Act (the “CAN-SPAM Act”), which further impose requirements for the collection, use, storage, access, transfer, and protection of health-related and other sensitive and personal information.”

Annual report 2025A · The company itself

“We are also subject to the terms of our external and internal privacy and security policies, codes, representations, certifications, industry standards, publications, and frameworks and contractual obligations to third parties related to privacy, information security, and data processing, including contractual obligations to indemnify and hold harmless third parties from the costs or consequences of non-compliance with data protection laws or other obligations. In particular, the publication of our privacy policies and other statements that provide promises and assurances about data privacy and cybersecurity can subject us to potential government or legal action if they are found to be deceptive, unfair, or misrepresentative of our actual practices.”

Annual report 2025A · The company itself

“The EU’s circular economy regulations and companies’ sustainability reporting obligations encouraged organisations to choose sustainable and refurbishable furniture and services based on lifecycle thinking.”

Annual report 2025A · The company itself

“Brand, Reputational Impact and Environmental, Social and Governance Negative brand perception may materially and adversely affect our overall business. Our brands and their attributes are key assets of our business. The ability to attract consumers to our branded products and retain them depends upon the external perception of us and our industry: •Our business may be affected by actions taken by our customers, merchants or other organizations that impact the perception of our brands or the payments industry in general.”

Annual report 2025A · The company itself

“Environmental, social and governance matters and related stakeholder reaction may impact our reputation, increase legal exposure and/or have other business impacts, which could adversely affect our overall business and/or results of operations. Our brand and reputation are associated with the ways in which we impact environmental, social and governance matters.”

Annual report 2025A · The company itself

“Government Regulation We are subject to a variety of laws and regulations in the United States and abroad that involve matters central to our business, many of which are still evolving and being tested in courts, and could be interpreted in ways that could harm our business. These laws and regulations involve matters including privacy, data use, data combination, data protection and personal information, the provision of our services to younger users, biometrics, encryption, rights of publicity, content, integrity, intellectual property, advertising, marketing, distribution, data security, data retention and deletion, data localization and storage, data disclosure, AI and machine learning, electronic contracts and other communications, competition, protection of minors, consumer protection, civil rights, accessibility, telecommunications, product liability, medical devices, e-commerce, taxation, economic or other trade controls including sanctions, export controls, anti-corruption and political law compliance, securities law compliance, and online payment services.”

Annual report 2025A · The company itself

“For example, legislative and regulatory developments, such as the GDPR, ePrivacy Directive, DMA, and U.S. state privacy laws, have impacted, and we expect will continue to impact, our ability to use such signals in our ad products.”

Annual report 2025A · The company itself

“We are also subject to disclosure, reporting, and diligence requirements regarding our social and environmental risks and initiatives. There has been increased focus on these initiatives by many regulators, investors, and other stakeholders and any actual or perceived failure by us to comply with applicable federal, state, local or international laws and regulations could result in legal and regulatory proceedings against us and materially and adversely affect our business, financial condition, and results of operations.”

Annual report 2025A · The company itself

“With a strong focus on sustainability, Metsä Board supports its customers’ goals and strengthens their competitiveness In July, Metsä Board achieved the highest level, Platinum, in Ecovadis’s sustainability assessment for 2025. In December , the environmental non-profit organisation CDP awarded Metsä Board the highest triple A score for its annual climate change, forests and water security disclosure.”

Annual report 2025A · The company itself

“In November 2024, the European Union adopted Regulation (EU) 2024/3005 on the transparency and integrity of ESG rating activities, which will require ESG rating providers operating in the European Union to be authorized by, or registered with, ESMA beginning July 2, 2026. The regulation imposes requirements relating to organizational governance, management of conflicts of interest, transparency of rating methodologies and disclosure to rated entities and users of ratings. Certain of our Sustainability and Climate products are expected to be in scope of this regulation.”

Annual report 2025A · The company itself

“MSCI is exposed to potential reputational and credibility concerns, which could have a material adverse effect on our business, financial condition or results of operations.”

Annual report 2025A · The company itself

“Anti-ESG and anti-climate sentiment may impact demand for our products, limit our ability to retain clients or lead to heightened scrutiny of our methodologies or content.”

Annual report 2025A · The company itself

“Compliance with regulations affecting benchmarks or their uses, as well as related technical standards and guidance, could negatively impact our business and results of operations. Benchmarks, which include the indexes we provide, are subject to regulations that may require changes in our business practices, product offerings or our ability to offer indexes in certain jurisdictions. Such impacts could include, without limitation, increased costs, including direct regulatory fees and costs; diminished intellectual property rights; methodology requirements or restrictions; product requirements or restrictions; constraints on the fees we charge; constraints on our ability to meet contractual commitments with data providers; or constraints on how we offer our products.”

Annual report 2025A · The company itself

“Additionally, guidance issued by the European Securities and Markets Authority (“ESMA”) may affect benchmark administrators and their clients. For instance, the ESMA Guidelines on ETFs and other Undertakings for Collective Investment in Transferable Securities (“UCITS”) Issues impose disclosure requirements for indexes used in UCITS funds, such as making index constituents and their respective weightings easily accessible free of charge to investors on a delayed and periodic basis. These requirements could increase the compliance obligations for benchmark administrators, affect the eligibility of certain indexes for use in UCITS funds and influence the demand for specific products.”

Annual report 2025A · The company itself

“Table of Contents Globally, the benchmark industry faces heightened scrutiny and potential new regulations. The International Organization of Securities Commissions (IOSCO) has recommended that benchmark administrators voluntarily publicly disclose whether they comply with its principles for financial benchmarks. Other jurisdictions have also indicated they may consider potential benchmark regulation or conduct reviews of the benchmark industry.”

Annual report 2025A · The company itself

“Further, laws, rules or regulations affecting users of our indexes, such as sanctions that prohibit users of our indexes from investing or transacting in markets or securities included in our indexes, can have an indirect impact on our indexes, including their construction and composition. •ESG Ratings. The EU has adopted a new regulation requiring market participants providing ESG ratings in the EU to become authorized and supervised by ESMA. The regulation becomes effective in July 2026 and imposes requirements relating to governance, conflicts of interest, transparency of methodologies and ongoing supervisory obligations.”

Annual report 2025A · The company itself

“A number of other jurisdictions, including Japan, Hong Kong SAR, Taiwan, India and Singapore, have completed, or are in the process of developing, legislation or codes of conduct for ESG rating or data providers. Regulation of ESG ratings and data providers could impose significant compliance burdens and costs on our Sustainability and Climate products and services.”

Annual report 2025A · The company itself

“Our clients use our products for a variety of purposes, including benchmarking, performance attribution, portfolio construction and risk management, and to support investment strategies including sustainability, climate, factor, thematic, private asset and MAC investing.”

Annual report 2025A · The company itself

“In addition, increased regulatory and political focus on ESG and climate-related investment considerations has impacted our clients. Certain of our clients use our sustainability and climate data and tools to build and manage portfolios; perform risk management; benchmark their investment performance; and construct and manage ETFs and other indexed financial products.”

Annual report 2025A · The company itself

“Legal and compliance risks are increasing due to growing complexity and intensified regulatory requirements. Examples include new EU legislation on geo-restrictions, significant changes to GDPR regulations, and escalating ESG requirements.”

Annual report 2025A · The company itself

“Our global operations are subject to increasingly complex environmental regulatory requirements, and compliance with evolving environmental regulatory requirements could negatively impact our business, capital expenditures, results of operations, financial condition and competitive position. We are subject to increasingly complex environmental regulations affecting international manufacturers, including those related to air and water emissions, waste management and climate change.”

Annual report 2025A · The company itself

“Expectations relating to environmental, social and governance considerations expose us to potential liabilities, increased costs, reputational harm and other adverse effects on our business. Many governments, regulators, investors, employees, customers and other stakeholders are increasingly focused on environmental, social and governance considerations relating to businesses, including climate change and greenhouse gas emissions and human capital. Any new climate-change regulations could result in additional compliance costs for the Company and our suppliers, negatively impacting profits.”

Annual report 2025A · The company itself

“ATT ENBART SAMLA IN ÖVERGRIPANDE DATA OM ENERGIFÖRBRUKNING RÄCKER INTE LÄNGRE I takt med att hållbarhetskraven skärps och intressenter kräver ökad transparens, behöver företag gå bortom aggregerad rapportering. Tillgång till detaljerad, realtidsdata om energi-, vatten- och materialförbrukning är avgörande för att uppfylla regulatoriska krav och för att bevisa ett genuint hållbarhetsåtagande.”

Annual report 2024A · The company itself

“The use of personal information is critical to our advertising and marketing services. We, and third-party vendors acting on our behalf, process personal information relating to individuals, including consumers, clients, employees, and service providers. As a result, we are subject to a complex and evolving framework of federal, state, and foreign privacy, data protection, marketing, advertising, and internet tracking laws, regulations, industry standards, and contractual obligations.”

Annual report 2025A · The company itself

“Our business practices with respect to data could give rise to operational interruption, liabilities or reputational harm as a result of governmental regulation, legal requirements or industry standards relating to privacy and data protection. As regulatory focus on privacy issues continues to increase and worldwide laws and regulations concerning the handling of personal information expand and become more complex and stringent, potential risks related to data collection and use within our business will intensify. In addition, U.S. federal and state as well as foreign governments have enacted or are considering enacting legislation or regulations, or may in the near future interpret existing legislation or regulations, in a manner that could significantly impact our ability, as well as the ability of our customers, partners and data providers, to collect, augment, analyze, use, transfer (including across national borders) and share personal and other information that is integral to certain services we provide.”

Annual report 2026A · The company itself

“Any failure, or perceived failure, by us to comply with these public statements or with U.S. federal, state, or foreign laws and regulations, including laws and regulations regulating privacy, data security, or consumer protection, public perception, standards, self-regulatory requirements or legal obligations, could result in lost or restricted business, proceedings, actions or fines brought against us or levied by governmental entities or others, or could adversely affect our business and harm our reputation.”

Annual report 2026A · The company itself

“Our cloud and hardware operations are subject to extensive, evolving and sometimes inconsistent state, federal and international regulations related to ESG matters. Some of these regulations establish specific metrics, targets, and disclosure frameworks for a variety of ESG issues, including environmental sustainability, supply chain labor practices, workforce health and safety, proper handling and disposal of certain chemicals and materials, and local testing and labeling requirements. Regulatory, market, carbon tax and competitive pressures regarding the greenhouse gas emissions and energy mix for our data center operations have increased and are expected to continue to increase.”

Annual report 2026A · The company itself

“Compliance with these ever-changing and sometimes divergent ESG laws in a timely manner could increase our product design, development, procurement, manufacturing, delivery, cloud operations, insurance premiums and administration costs, limit our ability to manage excess and obsolete inventory, change our sales activities, or otherwise impact future financial results of our cloud and hardware businesses.”

Annual report 2026A · The company itself

“If we fail to meet these goals, or are perceived as failing to meet our ESG goals, our revenues, reputation and brand may be harmed.”

Annual report 2026A · The company itself

“Risks Related to Legal, Regulatory, and Accounting Our business is subject to complex and evolving U.S. and non-U.S. laws and regulations regarding privacy, data protection and security, technology protection, and other matters. Many of these laws and regulations are subject to change and uncertain interpretation, and could result in claims, changes to our business practices, monetary penalties, increased cost of operations, or otherwise harm our business.”

Annual report 2025A · The company itself

“We are subject to a variety of local, state, national, and international laws, directives, and regulations in the United States and abroad that involve matters central to our business, including privacy and data protection, data security, data storage, retention, transfer and deletion, technology protection, and personal information. International data protection, data security, privacy, and other laws and regulations can impose different obligations or be more restrictive than those in the United States.”

Annual report 2025A · The company itself

“Table of Contents We cannot yet fully assess the impact of these laws and other new laws or regulations on our business or operations, but developments regarding these and other privacy and data protection laws and regulations around the world may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to maintain compliance on an ongoing basis. Outside of the United States, virtually every jurisdiction in which we operate has established its own legal framework relating to privacy, data protection, and information security matters with which we and/or our customers must comply.”

Annual report 2025A · The company itself

“Complying with the GDPR, EU AIA, NIS2, DORA, the Data Act, or other EU laws, directives, and regulations as they emerge may cause us to incur substantial operational costs, lead to challenges for our customers’ implementation and use of our platform, or require us to modify our data handling practices on an ongoing basis.”

Annual report 2025A · The company itself

“Non-compliance with the GDPR specifically may result in administrative fines or monetary penalties of up to 4% of worldwide annual revenue in the preceding financial year or €20 million (whichever is higher) for the most serious infringements and non-compliance with the EU AIA may result in penalties up to €35 million or 7% of worldwide annual turnover (whichever is higher), each of which could result in proceedings against us by governmental entities or other related parties and may otherwise adversely impact our business, financial condition, and results of operations.”

Annual report 2025A · The company itself

“The overarching complexity of laws and regulations relating to privacy, data protection, and information security around the world pose a compliance challenge that could manifest in costs, damages, or liability in other forms as a result of failure to implement proper programmatic controls, failure to adhere to those controls or to the commitments we make, or the malicious or inadvertent breach of applicable legal, regulatory, or contractual privacy, data protection, or information security requirements by us, our employees, our business partners, or our customers. In addition to government regulation, self-regulatory standards and other industry standards may legally or contractually apply to us, be argued to apply to us, or we may elect to comply with such standards or to facilitate our customers’ compliance with such standards.”

Annual report 2025A · The company itself

“New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, and contractual and other obligations may require us to incur additional costs and restrict our business operations. As these legal regimes relating to privacy, data protection, and information security continue to evolve, they may result in ever-increasing public scrutiny and escalating levels of enforcement and sanctions.”

Annual report 2025A · The company itself

“We have been, and may continue to be, subject to increased regulations, reporting requirements, standards or expectations regarding the environmental impacts of our business. While we seek to mitigate our business risks associated with climate change, there are inherent climate-related risks wherever business is conducted.”

Annual report 2025A · The company itself

“Data protection and privacy. We are subject to a number of laws, rules, directives, and regulations (“privacy and data protection laws”) relating to the collection, use, retention, security, processing, and transfer (collectively, “processing”) of personally identifiable information about our customers, our merchants’ customers, and employees (“personal data”) in the countries where we operate.”

Annual report 2025A · The company itself

“Privacy and Protection of Customer Data The legal and regulatory environment relating to privacy and data protection laws continues to develop and evolve in ways we cannot predict, including with respect to technologies such as cloud computing, AI (including generative AI), cryptocurrency, and blockchain technology. Any failure or alleged failure by us to comply with our privacy policies as communicated to customers or with applicable privacy and data protection laws relating to our collection, use, storage, transfer, or sharing of customer data with third parties could result in proceedings or actions against us by data protection authorities, other government agencies, our customers or others, which could subject us to significant fines, penalties, judgments, and negative publicity, require us to change our business practices, increase the costs and complexity of compliance, damage our reputation, and materially harm our business.”

Annual report 2025A · The company itself

“In addition, the regulatory environment relating to information security and privacy is becoming increasingly more demanding with frequent new requirements surrounding the handling, protection, and use of personal and sensitive information. We may incur significant costs in complying with the various applicable state, federal, and foreign laws regarding protection of, and unauthorized disclosure of, personal information.”

Annual report 2026A · The company itself

“Executive actions at the U.S. federal level and legislation in multiple U.S. states have sought to restrict or penalize corporate consideration of ESG factors, while jurisdictions in Europe and certain U.S. states have simultaneously expanded ESG-related mandates and disclosure requirements. This increasingly divergent regulatory environment creates operational complexity and legal risk, as actions taken to comply with or advance citizenship and sustainability objectives in one jurisdiction may expose us to criticism, regulatory scrutiny, or potential penalties in another, including limitations on our ability to do business.”

Annual report 2026A · The company itself

“Risks Related to Governmental Regulation and Litigation Our business is subject to increasingly complex and evolving laws, rules, regulations, industry standards, and other legal obligations regarding content, consumer protection, competition, privacy, and other matters. Our existing and future products and services may subject us to additional regulatory requirements that could be costly and difficult to comply with or may subject us to other risks that could result in additional liability, reputational harm, or other consequences that could adversely affect our business, results of operations, financial condition, and prospects.”

Annual report 2025A · The company itself

“In addition, we are in the early stages of our content licensing efforts and are exploring content licensing opportunities where we believe the opportunity does not conflict with our values and the rights of Redditors. These programs may subject us to evolving approaches to the regulation of this data and implicate complex and developing data privacy and data protection, misappropriation, and intellectual property laws, rules, and regulations.”

Annual report 2025A · The company itself

“Risk Factors Related to Corporate Matters An increased and differing focus on metrics and reporting related to environmental, social and governance ("ESG") factors by investors, lenders and other stakeholders may impose additional costs and expose us to new risks. Many investors, lenders and other stakeholders are focused on understanding how companies report on and address a variety of ESG factors, including institutional investors who hold a significant amount of the equity and debt of the Company. As they evaluate investment decisions, many investors look not only at company disclosures but also to ESG rating systems and frameworks that have been developed by third parties (such as TCFD and GRESB) to allow ESG comparisons between companies.”

Annual report 2025A · The company itself

“Similarly, certain data privacy laws, including CCPA, and subsequently CPRA, and the GDPR require disclosure of our privacy practices to consumers. If we are found to have violated these laws or regulations, we may be subjected to substantial fines, penalties, or liabilities to consumers.”

Annual report 2026A · The company itself

“There is a focus from certain investors, regulators, legislators, customers, consumers, employees and other stakeholders concerning sustainability matters. Additionally, public interest and legislative pressure related to public companies’ sustainability practices continue to grow.”

Annual report 2026A · The company itself

“If our sustainability practices, including our external reporting thereof, fail to meet inconsistent regulatory requirements in jurisdictions in which we do business or stakeholders' evolving expectations and standards for responsible corporate citizenship in areas including environmental stewardship, carbon emissions, renewable energy targets, support for local communities, human capital management, employee health and safety practices, product quality, supply chain management, corporate governance and transparency, our reputation, brand, and employee attraction and retention may be negatively impacted.”

Annual report 2026A · The company itself

“Customers and/or suppliers may also adopt policies that include sustainability provisions or they may seek to include such provisions in their terms and conditions. These sustainability provisions and initiatives can be inconsistent, unpredictable and difficult for us to meet.”

Annual report 2026A · The company itself

“There has been, and likely will continue to be, increased regulation with respect to the collection, use, and handling of an individual’s personal and financial information. Regulatory authorities around the world have passed or are considering legislative and regulatory proposals concerning data protection, privacy, and data security.”

Annual report 2025A · The company itself

“Globally, personal information collected within the European Union and the United Kingdom remains subject to the GDPR, which is a UK and European Union-wide legal framework that governs data collection, use, and sharing of an individual’s personal data and creates a range of consumer privacy rights. GDPR provides significant penalties for non-compliance (up to 4% of global annual revenue) and EU data protection authorities have already issued significant fines.”

Annual report 2025A · The company itself

“Certain laws and regulations to which we are subject pertain to personally identifiable information (“PII”) relating to individuals. Such laws and regulations constrain the collection, use, processing, storage, and transfer of PII, and impose other obligations with which we must comply. Costs and adaptation of our business practices to comply with evolving laws and regulations governing and restricting the processing and transfer of certain data is, and we expect will continue to be, significant.”

Annual report 2025A · The company itself

“For example, a failure to comply with the GDPR or U.K. GDPR could result in fines up to the greater of €20 million (or £17.5 million under the U.K. GDPR) or 4% of annual global revenues.”

Annual report 2025A · The company itself

“Other laws, regulations and rules are being considered or are likely to be considered in the future that may impact ancillary and other services provided by Ratings in addition to its credit rating products and services. Examples include regulatory oversight regimes for ESG ratings providers which may impose new regulatory requirements regarding some of Ratings’ ancillary and other services, such as the EU regulation on the transparency and integrity of ESG rating activities adopted by the European Parliament and Council in November 2024, or legislation and draft rules published by the FCA in 2025 to supervise ESG ratings providers from June 2028.”

Annual report 2025A · The company itself

“•Certain products and services provided by the S1 business in Energy are subject to the EU regulation on the transparency and integrity of ESG rating activities adopted by the European Parliament and Council in November 2024, and will also be subject to The Financial Services and Markets Act 2000 (Regulated Activities) (ESG Ratings) Order 2025 and will need to become supervised by the FCA for the ESG ratings it provides from June 2028. •The EU's package of legislative measures called the Markets in Financial Instruments Directive and Regulation (collectively "MiFID II") have applied in all EU Member States since 2018.”

Annual report 2025A · The company itself

“•Negative perceptions or publicity could damage our reputation with customers, prospects, regulators, and the public generally, which in turn could negatively impact, among other things, our ability to attract and retain customers, employees and suppliers, as well as suitable candidates for acquisitions or other combinations. For example, we have faced and could in the future face negative perceptions or publicity with respect to our sustainability and corporate responsibility policies and practices or our sustainability products, methodologies, or scores, including as a result of a revision, suspension or withdrawal of, or a failure to meet, our publicly disclosed sustainability and corporate responsibility targets, goals or practices, or as a result of misalignment with evolving, and in certain instances conflicting, market standards, expectations of regulators and other stakeholders, and regulations and codes of conduct.”

Annual report 2025A · The company itself

“Similarly, other laws, regulations and rules are being adopted or considered or are likely to be considered in the future that may impact ancillary and other services provided by Ratings in addition to its credit rating products and services, for example regulatory oversight regimes for ESG ratings providers such as the EU regulation on the transparency and integrity of ESG rating activities that was adopted by the European Parliament and Council in November 2024 (the "EU ESG Ratings Regulation"), or legislation and draft rules published by the U.K. FCA in 2025 to supervise ESG ratings providers from June 2028 (the “UK ESG Ratings Regulatory Framework”). The impact on us of the adoption of any such laws, regulations or rules remains uncertain, but could increase the costs and legal risks relating to Ratings’ activities, or adversely affect our ability to compete and/or our remuneration, or result in changes in the demand for our products and services.”

Annual report 2025A · The company itself

“Saga Furs käyttää eurooppalaisille minkinnahoille WelFur-sertifiointijärjestelmää, josta vastaa FurEurope sekä pohjoisamerikkalaisille minkinnahoille sertifiointijärjestelmiä, joista vastaavat sikäläiset liitot, Fur Commission USA (FCUSA) sekä Canada Mink Breeders Association (CMBA). Suomalaisesta tilasertifikaatista vastaa FI- FUR.”

Annual report 2025A · The company itself

“Vastatakseen näihin muutoksiin Saga Furs on vuodesta 2022 alkaen noudattanut strategiakehystä, jonka mukaan ● Yhtiön ydinliiketoiminnan tulee olla aiempaa kannattavampaa, ● Yhtiön välittämien tarhattujen turkisnahkojen tulee olla sertifioituja, ● Yhtiö tarjoaa turkistuottajille mahdollisuuden nostaa ennakkomaksuja rahoitusstrategiansa mukaisesti ja ● Yhtiö täyttää ESG-vastuullisuusvaatimukset.”

Annual report 2025A · The company itself

“Vakavaraisuuden ohella yhtiön toiminta rakentuu luottamukselle ja arvostukselle, joita se vaalii suhteissaan tuottajiin, ostajiin ja heidän välillään. Luottamus edellyttää vastuullisuuden sisäistämistä alamme elinehtona.”

Annual report 2025A · The company itself

“Lisäksi tuottajilta vaaditaan eläinten hyvinvointiin keskittyvä, voimassa oleva sertifikaatti tai sertifikaatit, joiden voimassaolo on edellytys nahkojen toimittamiselle Saga Fursille. Sertifiointijärjestelmistä vastaavat tilasertifikaatin osalta FIFUR, WelFurin osalta FurEurope ja pohjoisamerikkalaisten sertifikaattien osalta paikalliset liitot FCUSA ja CMBA.”

Annual report 2025A · The company itself

“Jo vuonna 2010 Saga Furs toteutti turkisten jäljitettävyysohjelman, Saga Furs Traceability System (STS), jonka avulla pukinevalmistajat voivat jäljittää nahkojen alkuperän myyntierätasolla. Vuodesta 2021 lähtien on tämän rinnalla käytössä teknologia, Saga Trac, jonka avulla on mahdollista tarjota nahkojen seurattavuus tilalta aina kuluttajalle tarjottaviin pukineisiin asti.”

Annual report 2025A · The company itself

“Risker relaterade till den regulatoriska miljön för medicintekniska produkter och läkemedel Sedana Medicals produkt Sedaconda ACD med tillbehör och läkemedel Sedaconda (isofluran) är föremål för omfattande regleringar världen över och är övervakade av olika branschspecifika tillsynsmyndigheter. Utöver sådan branschspecifik reglering är Sedana Medical också föremål för ett flertal övriga krav och restriktioner som följer av miljö-, hälso-och skyddslagar. Dessa krav kan även komma att utökas framgent.”

Annual report 2024A · The company itself

“Genom förvärvet av Innovatif Cekal, leverantören av bolagets huvudprodukt Sedaconda ACD, som annonserades i juli 2024 tar Sedana Medical direkt kontroll över en större del av sin varukostnad och produktionskapacitet. Förvärvet ökar också Sedana Medicals möjligheter till kontroll över bolagets produktionskedja ur ett ESG-perspektiv.”

Annual report 2024A · The company itself

“Increasingly stringent environmental laws, rules, regulations, and customer expectations may require us to redesign our existing products and processes, which could adversely affect our ability to cost-effectively produce our products. The semiconductor industry has been subject to increasing environmental regulations, particularly those environmental requirements that control and restrict the use, transportation, emission, discharge, storage, and disposal of certain chemicals, elements, and materials used or produced in the semiconductor manufacturing process. Public focus on climate change, sustainability, and environmental issues has also led to increased government regulation and caused certain of our customers to impose environmental standards on us as a part of doing business with them. If a focus on environmental issues persists in the future, it could result in higher costs of operations.”

Annual report 2025A · The company itself

“Further, if we are unable to certify that our products are conflict free, we may face challenges with our customers, which could place us at a competitive disadvantage, and our reputation may be harmed. In addition, our customers have requested and are expected to continue requesting reports on and commitments regarding our sourcing of other minerals or substances, which may impact our ongoing operations and increase our operating costs.”

Annual report 2025A · The company itself

“In addition, increasing governmental, investor, customer, and societal attention on sustainability matters, including expanding mandatory and voluntary reporting, diligence, and disclosure on sustainability topics such as climate change, carbon emissions, water usage, waste management, human capital, forced labor, and related risk oversight, have expanded and could further expand the nature, scope, and complexity of matters that we are required to control, assess, and report. We expect that these and other rapidly changing laws, regulations, policies, interpretations, and expectations, as well as increased enforcement actions by various governmental and regulatory agencies, will continue to increase the cost of our compliance and internal risk management programs and to alter the environment in which we do business, which could have a material adverse effect on our business, results of operations, and financial condition.”

Annual report 2025A · The company itself

“If our sustainability practices and disclosures do not meet the expectations and standards of our stockholders, customers, and other industry stakeholders, our reputation and business activities may be negatively impacted and our appeal to certain investors may be reduced.”

Annual report 2025A · The company itself

“Data Privacy Laws Solventum is also subject to extensive laws and regulations protecting the privacy, security, and integrity of personal information, including patient medical information, that it receives, including, among others, the U.S. Health Insurance Portability and Accountability Act of 1996, as amended, (the "HIPAA"), the California Consumer Privacy Act (the "CCPA"), and similar U.S. state laws, the European Union’s General Data Protection Regulation (the "E.U. GDPR"), the United Kingdom’s Data Protection Act 2018 (the "UK DPA") and the General Data Protection Regulation (the "U.K. GDPR"), and China’s Personal Information Protection Law ("PIPL"), and Personal Data Cross Border Transfer Rule ("CBDT").”

Annual report 2025A · The company itself

“•Data Privacy, Emerging Technology and Cybersecurity Laws - Because Solventum is a business with a significant global footprint, compliance with evolving regulations and standards in data privacy, emerging technologies, and cybersecurity may result in increased costs, compliance challenges and the threat of increased regulatory enforcement activity. Solventum’s business relies on the secure electronic transmission, storage and hosting of sensitive information, including personal information, protected health information, financial information, intellectual property and other sensitive information related to our customers and workforce. Solventum is required to comply with increasingly complex and changing legal and regulatory requirements that govern the collection, use, storage, security, transfer, disclosure and other processing of personal data, including for the development and use of AI, in the U.S. and in other countries.”

Annual report 2025A · The company itself

“Bankenes ansvar innenfor å forhindre økonomisk kriminalitet som hvitvasking av midler og hindre terrorfinansiering, å ta ned klimarisiko, og å øke den bærekraftige veksten i økonomien får stadig større plass.”

Annual report 2024A · The company itself

“Sustainability Reporting Directive) vil føre til vesentlig påvirkning på drift, risikoer og muligheter når miljø, sosiale forhold og selskapsstyring (ESG) i mye større grad må inkluderes i konsernet forretningsområder.”

Annual report 2024A · The company itself

“Nye lover og reguleringer, endret kundeadferd og klare forventninger i markedet krever utvikling på bærekraftsområdet, og integrering mot bankens øvrige forretningsområder.”

Annual report 2024A · The company itself

“Det pågår et kontinuerlig arbeid med å identifisere og kartlegge ESG- risiko hos våre kunder.”

Annual report 2024A · The company itself

“Furthermore, fiduciary, anti-competitive, voting power, governance, and other concerns with ESG investment strategies, as well as corporate sustainability and diversity, equity and inclusion practices and programs, continue to be the subject of legislative, regulatory and administrative debate globally, particularly at the federal and state level in the United States, the outcomes of which could impact both our investment management business and the clients that we service, as well as our investment servicing activities more broadly and our corporate activities, practices and programs.”

Annual report 2025A · The company itself

“Our sustainability- or ESG-related investment management practices, asset stewardship and historical memberships in certain climate-oriented investor groups have become the subject of significant scrutiny by regulatory agencies and government officials. Certain U.S. state and federal officials have suggested that sustainability- or ESG-related investing practices, including memberships in certain climate-oriented investor groups, may result in violations of law – including antitrust laws – and breaches of fiduciary duty.”

Annual report 2025A · The company itself

“We have received information requests from various U.S. state and federal government entities in connection with their investigations of sustainability or ESG investing practices and memberships in certain climate-oriented investor groups and are named as defendants in litigation initiated by several U.S. state Attorneys General alleging violations of antitrust laws in the coal industry.”

Annual report 2025A · The company itself

“U.S. state law and/or political pressure may also prevent governmental clients from using service providers, such as us, either as asset manager or investment servicer, if the legislators or governmental officials in such jurisdictions believe our sustainability- or ESG-related practices are not consistent with requirements under state law or the views of such legislators or officials.”

Annual report 2025A · The company itself

“As a general matter, large index fund providers, such as State Street Investment Management, have been and are expected to continue to be subject to legislative and regulatory proposals, litigation or investigations from both sides of the political spectrum due to a perception that they exert inappropriate influence over publicly traded companies. Certain U.S. officials have suggested that index fund managers should not be permitted to vote proxies on behalf of index funds, which, if enacted into law, could impact our ability to attract and retain clients.”

Annual report 2025A · The company itself

“Our inability to meet these requirements or to provide related information to clients facing similar requirements could cause regulatory or reputational harm and affect our ability to attract and retain clients. Requirements and expectations related to sustainability or ESG disclosures continue to evolve, with requirements increasing in some jurisdictions, particularly in Europe.”

Annual report 2025A · The company itself

“Our Investment Management line of business provides investment management strategies and products that may incorporate the consideration of sustainability or ESG factors. For clients and fund investors who want an investment solution that purposefully takes into consideration sustainability or ESG factors, we offer investment funds and strategies that consider sustainability or ESG factors as a component of the investment strategy or index methodology.”

Annual report 2025A · The company itself

“Where clients have delegated to us authority to vote securities on their behalf at shareholder meetings of the public companies held in their investment portfolios, we take into consideration issues that we believe are relevant to the long-term performance of the companies in which our clients invest which may include, where relevant, sustainability or ESG issues. As part of our asset stewardship program, we regularly engage with representatives of companies held in client portfolios, and these engagements may involve discussion of risks and opportunities relating to sustainability or ESG issues, where relevant and permitted under applicable law.”

Annual report 2025A · The company itself

“Because our products and services store, process and use data, some of which contains personal information, we are subject to complex and evolving domestic and international laws and regulations regarding privacy, data protection, rights of publicity, content, protection of minors and consumer protection. Many of these laws and regulations, which can be particularly restrictive or onerous, are subject to change and uncertain interpretation.”

Annual report 2026A · The company itself

“For example, the European Union ("EU") General Data Protection Regulation 2016/679 (“GDPR”), and further amendments and interpretations thereof, impose stringent EU data protection requirements on companies established in the European Union or companies that offer goods or services to, or monitor the behavior of, individuals in the European Union. The GDPR establishes a robust framework of data subjects’ rights and imposes onerous accountability obligations on companies, including certain data transfer and security mechanisms. Noncompliance with the GDPR can trigger steep fines of up to the greater of 20 million euros or four percent of annual global revenue.”

Annual report 2026A · The company itself

“Further, California voters approved the ballot initiative known as the California Privacy Rights Act of 2020 (“CPRA”), enforcement of which began on July 1, 2023. The CPRA significantly expands privacy rights for California consumers and creates additional obligations on businesses, which could subject us to additional compliance costs as well as potential fines, individual claims and commercial liabilities. The CPRA also establishes the California Privacy Protection Agency, which has the power to implement and enforce the CCPA and CPRA through administrative actions, including administrative fines.”

Annual report 2026A · The company itself

“Additionally, the increasing focus on device sustainability and circularity, driven by stricter regulations and stakeholder demands, is set to disrupt the industry. 2 Market Guide for Managed Device Lice Cycle Services, July 2024 By 2028, 70% of organisations will adopt a managed device lifecycle offering, up from less than 20% in 2024.”

Annual report 2024A · The company itself

“With new and stricter legislation and stakeholder pressure for sustainable and circular tech solutions, Techstep is experiencing a growing interest in its Device Lifecycle Management platform as IT service providers are looking for more sustainable and cost-efficient ways to manage their customers’ large device estates.”

Annual report 2024A · The company itself

“Techstep believes that the market for mobile and circular technology solutions and services will continue to increase due to digitalisation, stricter regulation and growing complexity alongside a rapidly evolving security threat landscape.”

Annual report 2024A · The company itself

“Konsumentens förväntningar har blivit betydligt mer krävande att leva upp till vad gäller företags hållbarhetsarbete, transparens, respekt för mänskliga rättigheter, produktkvalitet och kundservice.”

Annual report 2023A · The company itself

“• Att samhället och marknaden har förtroende för Thule Groups hållbarhetsarbete är en förutsättning för en framgångsrik verksamhet. • Brister i hållbarhetsarbetet kan påverka kundrelationerna avsevärt negativt med exempelvis automotive industrin och sport och fritidsbranschen. • Att investerarkollektivets krav på hållbara investeringar är uppfyllda är ofta en förutsättning för att kunna investera i företaget. • Thule Group bedriver ett omfattande kvalitets- och hållbarhetsarbete som ställer krav på den egna verksamheten såväl som verksamhet utförd av underleverantörer. • Thule Group utbildar löpande medarbetare och leverantörer i koncernens uppförandekod. • Övergripande hållbarhetsmål inom miljö, kvalitet och socialt ansvar följs upp kvartalsvis.”

Annual report 2023A · The company itself

“• Regelefterlevnad i förhållande till relevant miljölagstiftning och andra bestämmelser inom miljöområdet är en förutsättning för att undvika straffavgifter och andra sanktionsåtgärder. • Kända, såväl som idag okända, saneringskostnader som kan påverka Thule Groups verksamhet, resultat och finansiella ställning negativt. • Ökad produktion leder till ökad total miljöpåverkan i förhållande till produktion och distribution av koncernens produkter. • Thule Group bedriver ett systematiskt arbete för att minska koncernens generella miljöpåverkan samt för att säkerställa att koncernens verksamhet bedrivs i enlighet med relevant miljölagstiftning och andra bestämmelser inom miljöområdet. • Thule Group bedriver ett omfattande kvalitets- och miljöledningsarbete som ställer krav både på den egna produktionen och produktion utförd av underleverantörer.”

Annual report 2023A · The company itself

“Kränkningar av mänskliga rättigheter 2022: • Thule Group är en global koncern. I vissa länder kan insynen avseende mänskliga rättigheter vara begränsad. Detta innebär en risk för att bolaget ofrivilligt kan bidra till brott mot mänskliga rättigheter. • Thule Group är deltagare i FN:s Global Compact och följer därmed dess tio principer. • Bolagets globala uppförandekod gäller för alla Thule Groups styrelsemedlemmar, ledande befattningshavare (inklusive koncernledning), anställda, och så långt det är möjligt för leverantörer, affärspartners, underleverantörer och kunder.”

Annual report 2023A · The company itself

“Korruption kan i olika grad existera i vissa länder och i olika sektorer i samhället. Thule Group säljer produkter i 138 länder och köper produkter och komponenter från fler än 650 underleverantörer. Detta innebär att vi, som många andra företag, löper en risk att bli involverade i icke etiska affärer, bedrägerier och oegentligheter inom områden som omfattar försäljnings- och inköpsprocesser. • Thule Group tillämpar nolltolerans mot icke etiska affärsmetoder.”

Annual report 2023A · The company itself

“• Fokus på säkerhet och kvalitet • Partnerskap • Transparens • Utvärdering • Partnerskap • Transparens • Service och utbildning • Säkerställa hälsa och säkerhet • Attrahera, utveckla och behålla talanger • Hållbar och effektiv produktion • Optimera förpackningar • Hög andel montering i och nära marknader • Hållbara transportmedel • Säkra, lättanvända produkter • Produkter med lång livstid • Reservdelar och instruktioner • Produktdesign som underlättar återvinning • Instruktioner Vår påverkan Vårt förhållningssätt Så gör vi skillnad Produktutveckling – Grad av inflytande: HÖG Energieffektivitet, koldioxidsnåla lösningar, fokus på säkerhet och kvalitet, samt smart material användning är centrala prioriteringar och under 2023 investerade vi 630 Mkr (6,9 procent av vår omsättning) i hållbar produktutveckling. • Designa produkter utifrån ett livscykelperspektiv, koldioxidsnålt från cradle to gate.”

Annual report 2023A · The company itself

“• Thule Groups omsättning och resultat är i betydande grad beroende av att koncernens renommé är fortsatt starkt. • Thule Group genomför löpande förebyggande arbete genom utbildning och information av koncernens uppförandekod. Rutiner finns som inbegriper hur produkterna utvecklas och testas till säkerställande efterlevnad av konkurrenslagstiftning och arbete med hållbarhetsfrågor. • Koncernens kvalitetsarbete är certifierat enligt ISO 9001:2015 och kommer under 2024 att erhålla certifiering enligt ISO45001. • Thule Group har en utarbetad policy för eventuella produktåterkallelser med tydliga handlingsrutiner och etablerade steg för intern eskalering och beslutsfattande.”

Annual report 2023A · The company itself

“•Privacy and data protection laws to which we and our clients, inventory partners, and third-party data providers are subject may cause us to incur additional or unexpected costs, subject us to litigation, investigations or enforcement actions for alleged compliance failures, result in less demand for our offerings, or cause us to change our platform, related offerings or business model, which may have a material adverse effect on our business. •Third parties control our access to unique identifiers, and if the use of “third-party cookies” or other technology to uniquely identify devices or users is rejected by Internet users, restricted or otherwise subject to unfavorable regulation, blocked or limited by preference signals, technical changes on end users’ devices and web browsers, or our clients’ ability to use data, including on our platform or related offerings is otherwise restricted, our performance may decline, and we may lose advertisers and revenue.”

Annual report 2025A · The company itself

“Relying on Section 5 of the FTC Act, which prohibits companies from engaging in “unfair” or “deceptive” trade practices, the FTC actively pursues alleged violations of representations concerning privacy protections and acts that allegedly violate individuals’ privacy interests.”

Annual report 2025A · The company itself

“Privacy and data protection laws to which we and our clients, inventory partners, and third-party data providers are subject may cause us to incur additional or unexpected costs, subject us to litigation, investigations or enforcement actions for alleged compliance failures, result in less demand for our offerings, or cause us to change our platform, related offerings or business model, which may have a material adverse effect on our business. Information relating to individuals, households and their devices (commonly called “personal information” or “personal data”) is regulated under a wide variety of local, state, national and international laws and regulations that apply to its collection, use, retention, protection, disclosure, transfer (including across national boundaries) and other processing.”

Annual report 2025A · The company itself

“Andel sertifiserte og fornybare prosjekter i prosent av selskapets omsetning var ca. 31 % i 2024, mot 37 % i 2023 og 25 % i 2022. Prosjektene omfatter bygg og anlegg som kvalifiserer for miljøsertifiseringsstandarder, samt ingeniør tjenester eller prosjekter knyttet til fornybar energi som vind og vann.”

Annual report 2024A · The company itself

“Sentrale interessentgrupper som investorer, kunder og ansatte har påvirket utformingen av Veidekkes klima- og miljøpolicy.”

Annual report 2024A · The company itself

“I tråd med konsernpolicy for klima og miljø, skal Veidekke bruke sin miljøkompetanse til Bærekraftrapport å skape merverdi og utfordre og rådgi kunden til å redusere påvirkning på ytre miljø.”

Annual report 2024A · The company itself

“Regulatory developments could negatively impact our business. Because personal, public and non-public information is stored in some of our data repositories, we are vulnerable to government regulation and policy, as well as adverse publicity concerning the use of our data.”

Annual report 2025A · The company itself

“Sources of Our Data The data we use to perform our analytics and power our solutions is sourced through seven different kinds of data arrangements. First, we gather data from our customers within agreements that also permit our customers to use the solutions created from their data. Those agreements remain in effect unless the data contributor chooses to opt out.”

Annual report 2025A · The company itself

“Viaplay Groups verksamhet är beroende av lagstiftningen i många olika länder. Koncernens verksamhet regleras av EU:s lagstiftning, nationella lagar och regler samt krav som ställs av ytterligare instanser och internationella organisationer. Dessa krav avser till exempel reklam, upphovsrätt, sändningstillstånd, konsu - mentskydd, dataskydd, konkurrens och beskattning (inklusive så kallade streamingskatter och/eller relaterade investeringsskyldigheter som åläggs Viaplay Group på vissa marknader).”

Annual report 2024A · The company itself

“Ilmastotavoitteiden toteutusta jatkettiin ja raportointi- sekä laskentavalmiuksia kehitettiin vastaamaan EU:n CSRD-direktiivin ja Rakentamislain vaatimuksia.”

Annual report 2025A · The company itself

“The failure to maintain satisfactory compliance with legal requirements regarding data privacy, data protection and emerging technologies may adversely affect our business and/or growth prospects and subject us to penalties. Data privacy is subject to frequently changing legal requirements, which sometimes conflict among the various jurisdictions where we and our Concepts’ franchisees do business. We are subject to numerous global laws, including but not limited to, the European Union’s (“E.U.”) General Data Protection Regulation (“GDPR”) and the U.K. General Data Protection Regulations, which impose strict data protection requirements and provide for significant penalties for noncompliance.”

Annual report 2025A · The company itself

“Further, we engage in marketing and customer engagement activities that are subject to communications and consumer privacy laws, such as the Telephone Consumer Protect Act and similar state laws. There is a rapid increase in private claims of alleged breach of communications and privacy laws in the U.S. and abroad, under a diverse range of theories relying on wiretapping, pen registry, and communication consent statutes.”

Annual report 2025A · The company itself

“The Federal Trade Commission (“FTC”) and many state attorneys general are also interpreting federal and state consumer protection laws to impose standards for the collection, use, dissemination and security of personal data. The FTC may seek enforcement action for violation of consumer protection laws including unfair or deceptive practices relating to privacy policies, consumer data collection and processing consent, and digital advertising practices.”

Annual report 2025A · The company itself

“Further, we and our Concepts’ franchisees are and may become subject to new or changing rules and regulations promulgated by governmental and self-regulatory organizations with respect to ESG matters, including reporting requirements under the EU’s Corporate Sustainability Reporting Directive which will be applicable to us.”

Annual report 2025A · The company itself

“Risks related to handling sensitive information, including a potential GDPR breach The Group is handling personnel data for more than 350,000 external employees that may be linked to individual persons, and is required to handle such personnel data in compliance with GDPR. The Group is liable to its customers and regulatory authorities for damages caused by unauthorised disclosure of personal data as well as sensitive and confidential information, and any unauthorised disclosure of any such information may result in significant fines.”

Annual report 2024A · The company itself

“R (Long >5y) Value Chain Negative Potential (P) S-4 Consumers and endusers New ESG reporting regulations create opportunities for Zalaris to enhance its software, helping clients comply while expanding revenue streams. O (Long >5y) Value Chain Positive Potential (P) S-4 Consumers and endusers Zalaris can use employment and wage data to help clients improve diversity and decision-making, creating new business opportunities.”

Annual report 2024A · The company itself

“Furthermore, by leveraging its data capabilities to support client DEI (diversity, equity, inclusion) goals, Zalaris can offer added value to customers, reinforcing brand differentiation and unlocking new market opportunities.”

Annual report 2024A · The company itself

“By upgrading its software solutions to help clients generate ESG-related data, Zalaris can broaden its platform’s relevance and revenue potential.”

Annual report 2024A · The company itself

“The company also supports clients in mapping pay equity and diversity data, helping them make more informed, inclusive decisions— thereby reinforcing Zalaris’ value proposition in responsible business.”

Annual report 2024A · The company itself

“Although we intend to meet these strategies, commitments and targets, and we are committed to advancing sustainable innovations in our industry, we may be unable to achieve them due to availability of resources, significant increases in operational costs, and technological changes. Failure to meet these sustainability requirements or targets could adversely impact our reputation as well as the demand for our products and adversely affect our business, financial condition and results of operations.”

Annual report 2025A · The company itself

“It is becoming increasingly common that invitations to tender (ITT) and pre-qualification questionnaires (PQQs) request detailed information about our sustainability initiatives.”

Annual report 2024A · The company itself

“Our brand and reputation are also associated with our various corporate environmental, social and governance (ESG) initiatives. Our disclosures on these matters and any failure or perceived failure to achieve or accurately report on our initiatives, could harm our reputation and adversely affect our client relationships or our recruitment and retention efforts, as well as expose us to potential legal liability. In addition, positions we take, modify, or do not take on these issues may be unpopular with some of our employees, our clients or potential clients, our investors, legislators or government regulators, as well as members of the media or advocacy groups, which may impact our ability to attract or retain employees or the demand for our services.”

Annual report 2025A · The company itself

“Similarly, we periodically are and in the future could become the target of litigation, investigations, or other proceedings initiated by government authorities or private actors alleging that our activities or positions related to ESG (including inclusion and diversity) are anti-competitive, discriminatory or otherwise unlawful.”

Annual report 2025A · The company itself

“Our global operations expose us to numerous and sometimes conflicting legal and regulatory requirements, and violation of these regulations could harm our business. We are subject to numerous, changing, and sometimes conflicting, legal regimes on matters as diverse as anticorruption, import/export controls, content requirements, trade restrictions, tariffs, taxation, sanctions, boycotts, immigration, internal and disclosure control obligations, securities regulation, including ESG regulation and reporting requirements, anti-competition, anti-money-laundering, data privacy and protection, government compliance, wage-and-hour standards, employment and labor relations, product liability, health and safety, environmental, human rights and AI regulations, such as the European Union’s AI Act.”

Annual report 2025A · The company itself

“Increasing focus on ESG matters has resulted in, and is expected to continue to result in, the adoption of legal and regulatory requirements related to climate change, human rights and supply chain-related matters. New laws, regulations or interpretations may be more stringent than, or conflict with, other legal or regulatory requirements, which may result in increased compliance burdens and costs or changes to our operations to satisfy such obligations.”

Annual report 2025A · The company itself

“Den har uppdaterats under 2023, efter genomförd intressentdialog och uppdatering av vår väsentlighetsanalys, se sida 36-37 för mer information.”

Annual report 2023A · The company itself

“Framför allt EU-direktivet om tillbörlig aktsamhet för företag i fråga om hållbarhet, kan på medellång och lång sikt innebära negativa effekter på AddLifes finansiella ställning och resultat, speciellt i form av ökade kostnader för att hantera negativa konsekvenser för människor och miljö i leverantörskedjan.”

Annual report 2023A · The company itself

“Vi engagerar oss i miljöfrågor och sociala frågor genom hela leverantörskedjan. Arbetet innebär utvärdering av, dialog med och påverkan av våra leverantörer samt identifiering av nya marknadsledande alternativ. Vår roll i värdekedjan ger oss en möjlighet att utveckla lösningar tillsammans med våra partners för att ta ansvar för vår gemensamma inverkan.”

Annual report 2023A · The company itself

“These local, state, federal and international laws and regulations relate to a number of aspects of our business, including trade laws such as import and export controls, anti-boycott, economic sanctions and embargoes, data and transaction processing security, payment card industry data security standards, antitrust and competition, consumer protection, records management, user-generated content hosted on websites we operate, privacy practices, data residency and transfer, AI, corporate governance, employment practices, immigration, employee and third-party complaints, anti-corruption, conflicts of interest, securities regulations, sustainability and other regulatory requirements affecting trade and investment.”

Annual report 2025A · The company itself

“These effects could also result from a perception of a lack of commitment to sustainability efforts and attention to societal impacts, unfavorable positions on items of public policy, or from failure to make progress toward the Company's sustainability goals.”

Annual report 2025A · The company itself

“AFRYs hållbarhetsåtaganden är integrerade i styrningen av bolaget, och mäts och följs upp via våra hållbarhetsmål som omfattar våra lösningar, vår verksamhet och våra medarbetare. Målen syftar till att öka vår positiva nettopåverkan, att främja hälsa och säkerhet för våra medarbetare, att stärka inkludering och mångfald, att säkerställa etik och regelefterlevnad samt att minska vår egen klimatpåverkan.”

Annual report 2024A · The company itself

“The Agillic platform operates within a robust and fully compliant framework, where privacy and security remain uncompromising priorities. We have further strengthened our commitment to clients’ digital sovereignty, ensuring they retain full control over their data, infrastructure, and digital future.”

Annual report 2025A · The company itself

“By adhering to stringent ISCC PLUS certification standards, Cyclyx ensures that the feedstock produced meets the highest environmental and social standards, supporting the broader goal of increasing plastic recycling rates and fostering a circular economy.”

Annual report 2024A · The company itself

“Privacy laws, such as the European Union General Data Protection Regulation and the California Consumer Privacy Act, impact how we use data generated from our network to improve and develop services, as well as our ability to reach current and prospective customers, understand how our solutions are being used, use and transfer data about our employees and respond to customer requests allowed under applicable laws.”

Annual report 2025A · The company itself

“Engineering efforts to build new capabilities to facilitate compliance with increasing international data transfer restrictions and new and changing privacy laws and related customer demands could require us to take on substantial expenses and divert engineering resources from other projects. We might experience reduced demand for our offerings if we are unable to engineer products that meet our legal duties or help our customers meet their obligations under applicable data regulations, or if the changes we implement to comply with such laws and regulations make our offerings less attractive.”

Annual report 2025A · The company itself

“Our ability to leverage the data generated by our global networks is important to the value of many of the solutions we offer, our operational efficiency and future product development opportunities. Our ability to use data in this way may be constrained by regulatory developments.”

Annual report 2025A · The company itself

“Table of Contents Certain jurisdictions are adopting or tightening data localization and data residency requirements that restrict where customer or employee data may be stored, processed, accessed or encrypted. In the U.S., regulators are increasingly scrutinizing and restricting certain personal data transfers and transactions involving foreign countries.”

Annual report 2025A · The company itself

“Together with limits on cross‑border data transfers and government access or audit obligations, they may prevent us from providing services in certain cases, or require us to provide in‑country or region‑specific hosting, rely on designated local partners, modify or limit features, or maintain segregated environments and duplicative infrastructure, routing, logging and support models. These developments could decrease our addressable market, increase our costs and complexity, lengthen sales cycles, limit the functionality or performance of our services in some markets and reduce economies of scale.”

Annual report 2025A · The company itself

“This is an area of great attention as the upcoming EU Deforestation Regulation (EUDR) will likely come into effect in 2026. This new framework will require businesses to document that the raw materials they use are not linked to areas that have been deforested or converted.”

Annual report 2025A · The company itself

“Failure to meet sustainability expectations or standards or achieve our sustainability goals could adversely affect our business, results of operations, financial condition, or stock price. We have previously established and publicly announced certain goals, commitments and targets, which we may refine in the future, in respect of our sustainability initiatives. Meeting these sustainability goals will require significant resources and expenditures, and we may face pressure to make commitments, establish additional goals, and take actions to meet them beyond our current plans.”

Annual report 2025A · The company itself

“If customers and potential customers are dissatisfied with our sustainability goals or our progress towards meeting them, then they may choose not to buy our products and services, which could lead to reduced revenue, and our reputation could be harmed. In addition, we could experience reduced revenue and reputational harm if we are targeted by anti-sustainability groups or influential individuals who disagree with our public positions on social or environmental issues. Additionally, lawsuits or regulatory actions based on allegations that certain public statements regarding sustainability-related matters by companies are false and misleading “greenwashing” campaigns could adversely impact our operations and could have an adverse impact on our financial condition.”

Annual report 2025A · The company itself

“We may be unable to satisfactorily meet evolving standards, regulations and disclosure requirements related to sustainability. Such matters can affect the willingness or ability of investors to make an investment in our Company, as well as our ability to meet regulatory requirements, including proposed rules related to greenhouse gas emissions. Any failure, or perceived failure, to meet evolving stakeholder expectations, additional regulations and industry standards or achieve our sustainability goals, commitments, and targets could have an adverse effect on our business, results of operations, financial condition, or stock price.”

Annual report 2025A · The company itself

“Alla leverantörer måste uppfylla de krav som koncernen ställer avseende såväl leveransprecision och finansiell stabilitet som efterlevnad i fråga om ESG.”

Annual report 2024A · The company itself

“There is an increased focus from our stakeholders, as well as regulatory authorities both within the U.S. and internationally, on ESG practices and disclosure. If we fail, or are perceived to have failed, in any number of ESG matters, such as environmental stewardship, good corporate governance, workplace conduct and support for local communities, or to effectively respond to changes in, or new, legal, regulatory or reporting requirements concerning climate change or other sustainability concerns, we may be subject to regulatory fines and penalties, and our reputation or the reputation of our brands may suffer.”

Annual report 2025A · The company itself

“Hållbarhet som en integrerad del av affären – från strategi och verksamshetsplanering till produktutveckling – ökar konkurrenskraften och minskar riskerna. Alligos målsättning är att vara en av ledarna inom hållbarhet i branschen, vilket skapar förutsättningar för långsiktig lönsamhet.”

Annual report 2024A · The company itself

“Vi är kända som ledaren inom hållbar utveckling i vår bransch Vi ska arbeta kontinuerligt för att minska den negativa påverkan vår verksamhet har på miljön. 91 procent av de klimatpåverkande utsläppen i vår värdekedja genereras av de produkter vi säljer. Att påverka våra leverantörer att minska sitt klimatavtryck är därför viktigt för oss.”

Annual report 2024A · The company itself

“Vi drivs av vår vision att bli oslagbara som partner till våra kunder och leverantörer, som arbetsgivare för våra medarbetare och som ledare för hållbar utveckling i vår bransch.”

Annual report 2024A · The company itself

“Privacy regulation and data security Federal law and the laws of many states require companies, including financial institutions, to protect the security and confidentiality of consumer information and to notify consumers about their policies and practices relating to collection, use, disclosure, and protection of consumer information. Federal law and the laws of many states also regulate disclosures and disposal of consumer information.”

Annual report 2025A · The company itself

“Our practices relating to environmental and social matters may not meet stakeholders' expectations Some existing or potential investors, customers, employees, regulators, and other stakeholders evaluate business practices according to a variety of environmental and social standards and expectations, including those related to climate change and inclusive diversity. Stakeholder expectations on environmental and social issues are continually evolving and not always well defined or readily measurable.”

Annual report 2025A · The company itself

“Kolmannen osapuolen evästeitä ei voida käyttää datan keräämiseen ja sen myötä mainonnan ja sisältömyynnin kohdennuksiin.”

Annual report 2025A · The company itself

“Epäonnistuminen ja virheet kuluttaja-asiakkaan tietojen huolellisessa käsittelyssä sekä GDPR:n ja/tai muun tietosuojasääntelyn noudattamisessa.”

Annual report 2025A · The company itself

“Alma Median tietosuojaan liittyvät toimintaperiaatteet sisältävät kontrollit myös kolmansien osapuolten, kuten toimittajien ja kumppaneiden, hallintaan, jos heillä on pääsy henkilötietoihin. Tämä varmistaa, että myös he noudattavat tietosuojasääntelyä ja toimivat organisaation tietosuojamenettelyjen mukaisesti.”

Annual report 2025A · The company itself

“Yrityskulttuuriin ja eettiseen liiketoimintaan liittyvät IROt ovat säilyneet olennaisina, mutta niiden riskiprofiilia on päivitetty vastaamaan laajentunutta kumppani- ja alihankintaverkostoa sekä kasvavia odotuksia vastuullisesta hallinnosta koko arvoketjussa.”

Annual report 2025A · The company itself

“Yhtiö on viime vuosina hankkinut ja kehittänyt digitaalisia palveluita, jotka tukevat asiakasyrityksiä niiden vastuullisuusvaateisiin vastaamisessa ja niihin liittyvien velvoitteiden hallinnassa. sekä mahdollistavat asiakasyrityksille vastuullisuusvaateiden täyttämisen. Tällaisia palveluita ovat mm. kestävyysriskejä arvioivat Asunto-ja Aluepuntari, asiakkaiden compliancevelvoitteita tukeva DOKS-palvelu, sekä ESGraportointia tukeva DOKS Counterparty -palvelu.”

Annual report 2025A · The company itself

“Miljöcertifiering Fastigheter motsvarande 39 procent av det totala fastighetsbeståndet hade på balansdagen en miljöcertifiering, motsvarande 15 515 MSEK. De miljöcertifieringar som Nyfosa använder är främst BREEAM In-Use, LEED samt Miljöbyggnad.”

Annual report 2024A · The company itself

“Table of Contents Despite our efforts, any failure to achieve our corporate responsibility goals, including those aimed at reducing the harm associated with our operating companies’ products and our underage tobacco prevention goals, could result in adverse publicity. Furthermore, if investors or other stakeholders view our corporate responsibility policies, actions, goals or disclosures as insufficient or otherwise unacceptable, we could incur negative publicity and litigation challenges.”

Annual report 2025A · The company itself

“Sustainability is integrated in all stages of our value chain to provide solutions for our customers that lower their carbon footprint”

Annual report 2025B · From the report

“A failure, or perceived failure, to respond to expectations of all parties, including with meeting our own climate-related and other ESG target ambitions, whether due to our own actions or the inability of participants in our value chain to reduce emissions or otherwise support our climate objectives, could cause harm to our business and reputation and have a negative impact on the trading price of our common stock.”

Annual report 2026A · The company itself

“Numerous ESG-related legislative and regulatory initiatives, including those related to our products, operations, and sourcing activities, have been passed and are likely to continue to be introduced in the various jurisdictions in which we operate. These new ESG-related regulations are evolving rapidly, and the regulations being enacted are often not harmonized across the jurisdictions in which we operate, increasing the complexity and cost of compliance and exposing us to increased legal risks associated with compliance.”

Annual report 2026A · The company itself

“We face increased scrutiny from stakeholders who have diverging views related to business practices and company activities, which could result in reputational harm, litigation, enforcement actions and other adverse consequences. In addition, we are subject to increasing regulatory requirements and legal risks related to corporate sustainability topics, such as those arising from new disclosure requirements in certain jurisdictions.”

Annual report 2025A · The company itself

“Scrutiny and evolving expectations from investors, customers, regulators, policymakers and other stakeholders regarding environmental, social, governance and sustainability matters, including governmental responses to such matters, may adversely affect our reputation or otherwise adversely impact our business and results of operations. There is scrutiny and evolving expectations from investors, customers, regulators, policymakers and other stakeholders on companies’ governance, risk oversight, disclosures, plans, policies and practices regarding environmental, social, governance and sustainability matters, including those related to environmental stewardship, climate change, gender, race and market and workplace conduct. The requirements, standards and expectations of such stakeholders may also, as a whole, reflect diverging or conflicting values or policy objectives.”

Annual report 2025A · The company itself

“Our manufacturing facilities are subject to numerous and increasingly strict federal, state, local and foreign laws and regulations, particularly with respect to the transportation, storage, handling, use, emission, discharge and disposal of certain chemicals used or produced in the semiconductor manufacturing process. Our products are subject to increasingly stringent regulations regarding substance content in jurisdictions where we do business. Contracts with many of our customers reflect these and additional compliance standards.”

Annual report 2025A · The company itself

“The costs of compliance with, and other burdens imposed by, the GDPR, CCPA and similar laws may limit the use and adoption of our products and services and require us to incur substantial compliance costs, which could have an adverse impact on our business.”

Annual report 2025A · The company itself

“ESG matters, including climate change and sustainability, human rights, support for local communities, workforce diversity, human capital management, employee health and safety practices, product quality, workers’ rights, supply chain management and corporate governance and transparency, continue to receive significant attention from a wide range of stakeholders, including regulators, investors, customers, employees and potential talent. If our ESG practices fail to meet our or the evolving and sometimes differing expectations of investors, customers, employees or other stakeholders, our reputation, brand and employee retention may be negatively impacted, and our customers and suppliers may not continue to do business with us.”

Annual report 2025A · The company itself

“Further, certain customers utilize ESG data to inform their purchasing decisions.”

Annual report 2025A · The company itself

“This may require us to align our programs to such expectations and disclose specific qualitative and quantitative information to demonstrate our position and progress and support our customers’ regulatory compliance. If we do not adapt our strategy or execute quickly enough to meet changing regulatory requirements or the expectations of our investors, customers, employees, regulators or other stakeholders, or if our ESG disclosures, including data input, processing and reporting, are incomplete or inaccurate, our business, financial condition, results of operations, brand and reputation could be adversely affected.”

Annual report 2025A · The company itself

“Further, public attention to environmental and social responsibility remains high, and our customers routinely include stringent environmental and other standards in their contracts with us. Changes in EHS laws or regulations, uncertainties about those laws or regulations, or customer requirements may require us to invest in equipment, make manufacturing process or material changes or re-assess current and planned expenditures and initiatives, any of which could adversely affect our business, financial condition and results of operations.”

Annual report 2025A · The company itself

“Our businesses are subject to extensive legal and regulatory oversight throughout the world, including the Irish Companies Act, the U.S. securities laws, rules, and regulations, the rules and regulations promulgated by the FCA and a variety of other laws, rules, and regulations addressing, among other things, licensing, data privacy, data management and data protection, artificial intelligence, trade sanctions laws, restrictions and export controls, anti-money laundering, wage-and-hour standards, employment and labor relations, antitrust and competition, anti-corruption, currency, reserves, government contracting, and the amount of local investment with respect to our operations in certain countries.”

Annual report 2025A · The company itself

“Changes in laws and regulations could mandate significant and costly changes to the way we implement our services and solutions, impose additional licensure requirements or costs to our operations, workforce and services, or cause us to cease offering certain services or solutions.”

Annual report 2025A · The company itself

“We also consult on corporate sustainability matters, supporting a wide range of risk assessment and advisory solutions designed to address and manage corporate sustainability issues and enable our clients to create long-term value.”

Annual report 2025A · The company itself

“Its sustainability work is guided by its strategy, operating policy and Code of Conduct, as well as its procurement principles, which are based on the UN Global Compact initiative.”

Annual report 2025A · The company itself

“Certain investors have placed increased importance on the impact of investments made by the funds to which they commit capital on sustainability-related issues and, conversely, certain other investors may sell to minimize or restrict the application of such restraints on the investment-deployment process. Consequently, certain investors may decide not to commit capital in fundraises, or to withdraw previously committed capital from the funds we manage, based on their evolving priorities.”

Annual report 2025A · The company itself

“• Hållbarhetsmärkta produkter: Apotea uppmuntrar leverantörer att ta fram produkter med erkänd hållbarhetscertifiering, vilket ger kunderna fler medvetna val och främjar en mer hållbar konsumtion.”

Annual report 2024A · The company itself

“Som ett ledande nätapotek kan Apotea påverka aktörer i hela värdekedjan att öka takten i sitt hållbarhetsarbete. Läs mer om värdekedjan på sida 16 samt i Hållbarhetsrapporten.”

Annual report 2024A · The company itself

“Varied stakeholder expectations about social and other issues expose the Company to potential liabilities, increased costs, reputational harm, and other adverse effects on the Company’s business. Various stakeholders, including governments, regulators, investors, employees, customers and others, have differing expectations about a wide range of social and other issues related to the Company’s business.”

Annual report 2025A · The company itself

“As a part of this regime, the FCA introduced, among other things, a general ‘anti-greenwashing’ rule to clarify that sustainability-related claims must be clear, fair and not misleading. The general ‘anti-greenwashing’ rule came into force in May 2024 and the FCA also published new guidance (FG24/3) on the expectations for FCA-authorized firms subject to the general ‘anti-greenwashing rule’ which took effect at the same time.”

Annual report 2025A · The company itself

“Digital Markets, Competition and Consumers Act 2024 (“DMCC Act”) came into force on April 6, 2025, enabling the U.K.’s competition regulator, the Competition and Markets Authority (“CMA”) to pursue enforcement for consumer law breaches such as greenwashing, and to directly impose fines of up to 10% of a business’s global turnover.”

Annual report 2025A · The company itself

“In addition, Lloyd’s has mandated that managing agents create a sustainability framework and strategy. Lloyd’s has also imposed sustainability focused outcomes by way of the Principles with a particular focus on culture, investment and underwriting profitability.”

Annual report 2025A · The company itself

“We are subject to CSRD and other EU and U.K. climate‑related disclosure regulations, which require more extensive reporting than current U.S. rules.”

Annual report 2025A · The company itself

“We are subject to changes in governmental, investor and societal responses to climate change and sustainability-related issues, which may result in scrutiny of our business, litigation or adverse impacts to our share price and our results of operations. Shareholders, investors and regulators have historically focused on climate and sustainability matters, leading to evolving and sometimes conflicting expectations and standards.”

Annual report 2025A · The company itself

“ADM must comply with U.S. and non-U.S. federal, state, and local regulations on food safety, quality, manufacturing and labeling.”

Annual report 2025A · The company itself

“The Company is subject to various evolving, and sometimes inconsistent, United States federal, state, local and non-U.S. regulations related to ESG matters, including regulations related to the production of greenhouse gas (GHG) emissions. Some of these regulations establish specific metrics, targets, and disclosure frameworks for a variety of ESG issues, including environmental sustainability, supply chain labor practices, deforestation, workforce health and safety, proper handling of chemicals or materials, among others.”

Annual report 2025A · The company itself

“The Company has established and publicly announced certain goals and strategies related to sustainable practices and other ESG-related issues, which may be refined in the future. The execution of the Company’s strategy to achieve these goals is subject to risks and uncertainties, many of which may be outside of ADM’s control and may prove to be more costly than anticipated.”

Annual report 2025A · The company itself

“En undersökning vi genomförde under året visar tydligt att fler kunder på fler marknader efterfrågar hållbara lösningar och hållbarhetsdata i sina inköpsprocesser.”

Annual report 2024A · The company itself

“Enactment of new privacy laws and regulations could, among other things, adversely affect our ability to collect data and offer targeted advertisements or result in additional costs of compliance or litigation.”

Annual report 2025A · The company itself

“However, our waste management plan is currently internal and should be made publicly accessible to fully align with the DNSH criteria.”

Annual report 2024A · The company itself

“However, Atea is not yet fully aligned since the waste management plan is not publicly available.”

Annual report 2024A · The company itself

“Value Chain Ensuring a responsible value chain has long been, and will continue to be, a material priority for Atea. From the extraction of raw materials and component manufacturing to how technology solutions are used, Atea aims to minimize adverse impacts on people and the planet.”

Annual report 2024A · The company itself

“Maineeseen ja markkinariskeihin kuuluu asiakkaiden ja kuluttajien kasvavat vaatimukset kestävyydelle ja läpinäkyvyydelle, mikä voi vaikuttaa tuotteiden kysyntään ja markkinaosuuteen, mikäli odotuksia ei kyetä täyttämään.”

Annual report 2025A · The company itself

“Konsernin koko henkilöstön tulee suorittaa säännöllisesti koulutus Atrian toimintaperiaatteista. Atrian toimintaperiaatteiden kouluttaminen kuuluu kiinteästi myös uusien työntekijöiden perehdytyspäivien ohjelmaan.”

Annual report 2025A · The company itself

“Atria on laatinut vuodelta 2025 kestävyysraportointidirektiivin eli CSRD:n (Corporate Sustainability Reporting Directive) mukaisen raportin.”

Annual report 2025A · The company itself

“Suosion lisäksi Atrian sitoutuminen vastuulliseen tuotantoon Virossa on saanut tunnustusta. Vuonna 2025 Sustainable Brand Index nimesi Maks & Mooritsin Viron vastuullisimmaksi lihatuotebrändiksi, korostaen jatkuvia ponnistelujamme ympäristövastuun, läpinäkyvyyden ja korkealaatuisen paikallisen tuotannon hyväksi.”

Annual report 2025A · The company itself

“Ökningen inom fastighetsförvaltningen beror främst på satsningar inom hållbarhet och systemutveckling.”

Annual report 2024A · The company itself

“Furthermore, our customers are also increasingly requiring us to track sustainable sources of certain raw materials, which also requires additional diligence efforts and there can be no assurance that we will be able to obtain these materials in a cost-efficient and sustainable manner.”

Annual report 2024A · The company itself

“If our sustainability practices do not meet investor or other stakeholder expectations and standards, which continue to evolve, our reputation, our ability to attract or retain employees, and our attractiveness as an investment or business partner could be negatively affected. Similarly, our failure or perceived failure to pursue or fulfill our sustainability-focused goals, targets, ambitions and objectives, to comply with ethical, environmental, or other standards, regulations, or expectations, or to satisfy various reporting standards with respect to these matters, within the timelines we announce, or at all, could adversely affect our business or reputation, as well as expose us to government enforcement actions and private litigation.”

Annual report 2024A · The company itself

“The investment community, clients, regulators, and other stakeholders may have evolving and varied expectations regarding our business, culture, and values. Negative publicity, regardless of whether claims are accurate, about our brand, our solutions, our data, our culture and values, or our partners, vendors, or employees, could adversely affect our reputation, our business, and our financial results.”

Annual report 2026A · The company itself

“Genom svaren på denna framgick det att våra medarbetare värderar hållbarhet högt och förväntar sig att Avanza aktivt arbetar med ekonomisk folkbildning och för en mer jämställd sparmarknad. Det finns också en förväntan att vi erbjuder och löpande utvecklar vårt erbjudande av miljömässigt hållbara produkter och beslutsstöd.”

Annual report 2024A · The company itself

“Vi vill att Avanza ska vara det självklara valet för den som vill investera hållbart och vi är övertygade om att investeringar i ansvarsfulla och hållbara affärsmodeller kommer att ge bäst avkastning över tid.”

Annual report 2024A · The company itself

“Det gör vi genom verktyg och beslutsstöd som gör det möjligt för kunder att anpassa sina val utifrån egna hållbarhetspreferenser. Några exempel är: Q Filtreringsverktyg med möjlighet att filtrera fram fonder utifrån om fonden investerar mot något av FN:s hållbarhetsmål eller om det är en Artikel 9 eller 8-fond enligt EU:s förordning om hållbarhetsrelaterade upplysningar. Q Hållbarhetsindikatorn är en visualisering i fondlistan där kunder på ett tydligt och enkelt sätt kan jämföra hållbarhetsvärdet för olika fonder.”

Annual report 2024A · The company itself

“Data privacy legislation and regulation have been increasing in recent years – including, for example, the General Data Protection Regulation in the EU, the Personal Information Protection Law in China, the General Data Protection Law in Brazil and the state of California’s Privacy Rights Act – and although we have made reasonable efforts to comply with all applicable laws and regulations, there can be no assurance that we will not be subject to regulatory action in the event of a data privacy violation.”

Annual report 2025A · The company itself

“In addition, new or expanded local, state, regional, federal, and global legal and regulatory requirements relating to climate change and other sustainability topics have been proposed or adopted in recent years and may continue to emerge in the future. As a result of these developments, we may experience disruptions in or increases in the costs associated with R&D, sourcing, manufacturing, distributing, and end of life of our products.”

Annual report 2025A · The company itself

“Our commitments, goals, activities, and disclosures related to sustainability and corporate responsibility matters, and the perception of our activities in these areas, may fail to satisfy the differing expectations of key stakeholders on these matters. Governmental authorities, investors, customers, employees, certain institutional investors, lenders, and other stakeholders are increasingly focused on sustainability and corporate responsibility commitments, practices, performance and disclosures. However, there is no guarantee that we will be able to achieve any sustainability and corporate responsibility goals or maintain any commitments or practices we have publicly announced in the past or that we may announce in the future, including due to rapidly changing regulatory, technological, scientific, and market developments that are outside of our control.”

Annual report 2025A · The company itself

“We risk experiencing negative stockholder reaction, as well as damage to our brand and reputation and other potential costs, if we fail to (or are perceived to fail to) maintain and satisfy our goals, commitments, and other sustainability and corporate responsibility efforts, if we fail to accurately measure or report our progress with respect to our goals and initiatives or if we are perceived to not be acting responsibly in key sustainability and corporate responsibility areas. Responding to these sustainability and corporate responsibility considerations and implementation of our related goals and initiatives involves risks and uncertainties, requires investments (some of which still need to be funded or identified), and depends in part on our relative performance (or perceived performance) against third-parties that is beyond our control.”

Annual report 2025A · The company itself

“Additionally, organizations that provide information to investors on corporate governance and related matters have developed ratings processes for evaluating companies on their respective approaches to sustainability and corporate responsibility matters, which are employed by investors, lenders, and customers to inform their investment, financing, or purchasing decisions. A failure to adequately meet stakeholder expectations, which may differ or conflict, may result in the loss of business, reputational impacts, diluted market valuation, an inability to attract customers, and an inability to attract and retain talent.”

Annual report 2025A · The company itself

“Furthermore, stakeholder expectations related to key sustainability and corporate responsibility topics continue to diverge across the jurisdictions in which we operate. Our stakeholders may have conflicting views on our goals, commitments, and initiatives with one another. If we fail to satisfy the differing and evolving sustainability and corporate responsibility expectations of our investors, customers, employees, and other stakeholders, we could experience reduced demand for our products, loss of customers and employees, and suffer other negative impacts to our business, reputation, and results of operations.”

Annual report 2025A · The company itself

“As a global company, we are subject to global data privacy, AI, and cybersecurity laws, regulations and codes of conduct that apply to our businesses. We are required to comply with increasingly complex and changing legal and regulatory requirements and frameworks in the U.S. and in other countries that govern not only the collection, use, storage, security, transfer, disclosure and other processing of protected health information and personal and sensitive data, but also the development and use of AI, the sharing of certain data, and timely disclosure of 24 cybersecurity incidents.”

Annual report 2025A · The company itself

“In the U.S., for example, we are subject to the Health Insurance Portability and Accountability Act, as amended (HIPAA), the Health Information Technology for Economic and Clinical Health Act and the California Consumer Privacy Act (the CCPA) and California Privacy Rights Act as well as other new and emerging state laws. Further, we are, or will be, subject to, amongst other applicable laws, the EU’s General Data Protection Regulation (the GDPR) the EU Data Act, the Artificial Intelligence Act, and the NIS2 Directive.”

Annual report 2025A · The company itself

“BE Groups ambition är att leverera produkter med lägre CO -avtryck till marknaden och kan idag erbjuda alternativ inom alla produktgrupper. Fokus ligger även på att uppdatera bolagets befintliga EPD:er (miljövarudeklarationer) och skapa nya där det saknas för att visa på produkternas påverkan under hela värdekedjan och därmed ge kunden möjlighet att göra medvetna val.”

Annual report 2024A · The company itself

“Med det menas att hållbarhetsprinciper integreras från start i utvecklingsarbetet. Målet är produkter som ger lägsta möjliga miljöpåverkan under hela livscykeln, exempelvis gällande koldioxidavtryck. Det kan då handla om att minska materialanvändningen när produkten tillverkas eller optimera produktens livslängd.”

Annual report 2024A · The company itself

“Under 2024 verifierades dels koncernens vetenskapsbaserade klimatmål officiellt av Science Based Targets initiative (SBTi), dels introducerades ett femte fokusområde: ”Innovation med hållbarhetsfokus”. Arbetet innefattar ekodesign som innebär att produkter designas så miljömässigt hållbart som möjligt för att minska miljöavtrycket.”

Annual report 2024A · The company itself

“Table of Contents Additionally, newly applicable and potential new or significantly revised state, provincial and federal laws and regulations in the jurisdictions in which we do business are expanding (and may further expand) our obligations to protect and honor the privacy and security of personal information, imposing new restrictions on the collection, use, sharing and retention of data and requiring additional implementation resources, all of which create incremental risk arising from a potential breach or compliance failure. The proliferation of new and updated privacy laws and regulations, including the rise of extreme data minimization legislation, has the potential to limit our ability to collect, use or share personal information and thus hinder our strategic and marketing efforts (e.g., Best Buy Ads and Best Buy’s own efforts to communicate with consumers).”

Annual report 2026A · The company itself

“Table of Contents We may also communicate certain initiatives and goals regarding sustainability, responsible sourcing, social investments and other related matters in our SEC filings or in other public disclosures. These initiatives and goals within the scope of CR&S could be difficult and expensive to implement, the technologies needed to implement them may not be cost-effective and may not advance at a sufficient pace and we could be criticized for the accuracy, adequacy or completeness of the disclosures. Further, statements about our initiatives and goals and progress toward those goals may be based on measurement standards that are still developing, internal controls and processes that continue to evolve and assumptions that are subject to change in the future.”

Annual report 2026A · The company itself

“Operationally, we produce a broad range of sports and betting content - written journalism, video, livestream formats, podcasts, interactive tools, and trading insights - across our own brands, including HLTV, FUTBIN, Action Network, AceOdds, Playmaker HQ, and multiple market-leading European and South American sports communities.”

Annual report 2025A · The company itself

“Hållbarhet Hållbarhet är en prioritet i BHGs övergripande strategi, för att accelerera organisationens förmåga och driva ett hållbart erbjudande. Våra nuvarande hållbarhetsmål sattes under 2022 (se tabell till höger).”

Annual report 2024A · The company itself

“As a global organization, we are subject to data privacy and security laws, regulations, and customer-imposed controls in numerous jurisdictions as a result of having access to and processing confidential, personal and/or sensitive data in the course of our business.”

Annual report unknown yearA · The company itself

“Failure to comply with the requirements of GDPR and the applicable national data protection laws of the EU member states may result in fines of up to €20 million or up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher, and other administrative penalties.”

Annual report unknown yearA · The company itself

“Under året har BioArctic beaktat den kommande CSRDlagstiftningen (Corporate Sustainability Reporting Directive). BioArctic har genomfört arbete med en dubbel väsentlighetsanalys för att identifiera områden för redovisning och rapportering under kommande år.”

Annual report 2024A · The company itself

“Den genomgång vi gjort under året visar att hållbarhet genomsyrar vår verksamhet och är en integrerad del i våra långsiktiga mål. Vår dubbla väsentlighetsanalys visar att vår främsta påverkan sker genom hållbar innovation inom forskning och läkemedelsutveckling och det är också där vi lägger mest kraft på ytterligare förbättringar.”

Annual report 2024A · The company itself

“Koppling till strategiska prioriteringar: Hållbar innovation investering i Forskning & Utveckling projekt i klinisk utveckling 2030 projekt i samarbete med partners 2030 >50% 2 2 Miljö (E) Socialt (S) Regelefterlevnad (G) - Koldioxidneutrala i den egna verksamheten 2025 (Scope 1&2) - Koldioxidneutrala i värdekedjan 2040 - Net-zero 2045 - eNPS score över 50 - Uppförandekod – alla medarbetare ska årligen bekräfta policyn - Jämställd styrelse Hållbart företagande Störst möjlighet att skapa värde Väsentlighetsanalysen visar att BioArctic har störst möjlighet att skapa socialt och ekonomiskt värde genom företagets arbete med att utveckla och tillhandahålla innovativa, säkra effektiva läkemedel för sjukdomar med stora medicinska behov, till förmån för konsumentens (patientens) hälsa.”

Annual report 2024A · The company itself

“Our Responsible Sourcing Policy and Position Statements on marine and vegetable ingredients guide us in ensuring responsible sourcing practices. We safeguard that our products are based on raw materials produced in a responsible manner and are committed to sourcing with integrity and high ethical standards.”

Annual report 2025A · The company itself

“Läs mer om Björn Borgs hållbarhetsarbete på sidan 30 och på www.bjornborg.com.”

Annual report 2024A · The company itself

“Furthermore, in November 2025, the European Commission (“EC”) published its proposal (“SFDR 2.0”) to revise the Sustainable Finance Disclosure Regulation, which requires sustainability-related disclosures by financial market participants. SFDR 2.0 proposes significant changes, including reducing sustainability disclosures by EU firms and simplifying product-level disclosures as well as introducing three new categories of sustainable and transition products.”

Annual report 2025A · The company itself

“Some US states and state officials have adopted or proposed legislation or otherwise raised concerns about BlackRock’s business practices. In certain instances, this has led them to take official positions restricting or prohibiting state government entities from doing certain business with entities identified by the state as “boycotting” or “discriminating” against particular industries or considering environmental and social factors in their investment processes and proxy voting.”

Annual report 2025A · The company itself

“In addition, government authorities of certain U.S. states have requested information from and scrutinized certain asset managers with respect to whether such managers have adopted sustainability policies that consider non-pecuniary factors in the investment process or would restrict such asset managers from investing in certain industries or sectors, such as conventional energy. These authorities have indicated that asset managers they view to have adopted such policies may lose opportunities to manage money belonging to these states and their pension funds.”

Annual report 2025A · The company itself

“For example, the EU’s General Data Protection Regulation (“GDPR”) and similar legislation in the United Kingdom (“U.K.”) impose stringent privacy and data protection requirements and provide for greater penalties for noncompliance of up to the greater of 4% of worldwide annual revenue or €20 million or £17.5 million, as applicable.”

Annual report 2025A · The company itself

“The GDPR restricts international data transfers from the EU to other jurisdictions unless the rights of the individual data subjects in respect of their personal data is protected by an approved transfer mechanism, or one of a limited number of exceptions applies.”

Annual report 2025A · The company itself

“We have incurred, and may continue to incur, significant expenses to comply with evolving privacy, data protection, and cybersecurity standards and protocols imposed by law, regulation, industry standards, shifting consumer expectations, or contractual obligations.”

Annual report 2025A · The company itself

“Increased scrutiny from investors, regulators, and other stakeholders relating to sustainability issues could result in additional costs for us and may adversely impact our reputation. Investors, regulators, customers, employees and other stakeholders continue to focus on sustainability matters.”

Annual report 2025A · The company itself

“BlueNord may be negatively affected by adverse market perception as it depends on a high level of integrity to maintain the trust and confidence of investors, DUC participants, public authorities, and counterparties. Any mismanagement, fraud or failure to satisfy fiduciary or regulatory responsibilities, or negative publicity resulting from other activities, could materially affect the Company’s reputation, as well as its business, access to capital markets and commercial flexibility.”

Annual report 2024A · The company itself

“Bolidens verksamhet är föremål för omfattande lagar och regler, såväl generella som branschspecifika på var och en av de geografiska marknader där Boliden är verksamt. Det finns en trend mot striktare reglering, i synnerhet inom miljörätten.”

Annual report 2024A · The company itself

“Boliden har åtagit sig att följa FN:s Global Compact, FN:s globala mål för hållbar utveckling och principerna från International Council on Metals and Mining (ICMM). Vi stödjer också Task Force on Climate-related Financial Disclosures (TCFD) och Task Force on Nature-related Financial Disclosures (TNFD) och vi har ett ledningssystem som uppfyller ISO-standarderna för miljö, kvalitet, energi samt hälsa och säkerhet på arbetsplatsen.”

Annual report 2024A · The company itself

“Hållbarhet har blivit något som utmärker den nordiska återförsäljarmarknaden. Konsumenter förväntar sig i större utsträckning att företag ska prioritera ansvarsfulla affärsmetoder. Som ett ledande nordiskt e-handelsföretag verksamt inom europeiska unionen inser Boozt det långsiktiga värdet av ett större ansvar vad gäller miljö, samhälle och styrning.”

Annual report 2024A · The company itself

“Increasingly, payers and health systems require robust health economic evidence and real world outcomes data, including comparative effectiveness, budget impact, and total cost of care analysis, to support coverage, procurement, and continue use, which may require us to fund post-market studies, registries, or other evidence generated in the respective country to maintain or expand access.”

Annual report 2025A · The company itself

“The personal information we process is subject to an increasing number of federal, state, local, and foreign laws and regulations regarding privacy and data security, as well as contractual commitments. Privacy legislation and other data protection regulations, enforcement and policy activity in this area are expanding rapidly in many jurisdictions and creating a complex regulatory compliance environment.”

Annual report 2025A · The company itself

“A number of our customers have adopted, or may adopt, procurement policies that include corporate responsibility provisions or requirements that their suppliers should comply with, or seek to include such provisions or requirements in their procurement terms and conditions. Some investors are asking companies to publicly disclose corporate responsibility-related policies, practices and metrics.”

Annual report 2025A · The company itself

“Additionally, investor advocacy groups, institutional investors, other market participants, stockholders, employees, consumers, customers, influencers, and policymakers have focused increasingly on the environmental, social, and governance or “sustainability” positions and practices of companies. If our positions or practices do not meet investor or other stakeholder expectations and standards, which continue to evolve, our corporate reputation, stock price, ability to attract and retain high-quality talent, and the performance of our brands and business may be negatively affected.”

Annual report unknown yearA · The company itself

“ESG is now fully incorporated in our strategy and represents a cornerstone in the strategic vision. At AO sustainability is seen as a way to help customers reach their objectives more effectively and responsibly.”

Annual report 2025A · The company itself

“As a publicly traded company incorporated in Switzerland, Bunge is also required under Swiss law to prepare a report covering five non-financial matters, namely environmental matters (in particular climate issues), social issues, employee-related issues (including diversity aspects), respect for human rights, and combating corruption.”

Annual report 2025A · The company itself

“Sustainability Sustainability is core to Bunge’s business. We make decisions across our value chain built on a foundation of ethical leadership, accountability, and environmental stewardship. Sustainability factors into decisions ranging from how we evaluate new growth markets, plan and develop our strategic goals, compensate our employees and operate our facilities to how we engage with our customers, suppliers, employees, communities, shareholders, and partners.”

Annual report 2025A · The company itself

“Strategy We leverage our leadership, extensive knowledge of the industry, and our deeply rooted relationships with customers at both ends of the value chain to address the sustainability challenges facing the food, feed, and fuel supply chains in which we operate. We intend to address those challenges by, among other things, connecting farmers and our end customers as they seek to establish common approaches to overcome shared sustainability challenges. This means that the decisions we make—from strategy to investments to operations—look at the associated sustainability impact and how it will shape our long-term ambitions.”

Annual report 2025A · The company itself

“Sustainability principles are embedded in our operations, and we are aligning with global reporting frameworks led by the EU Corporate Sustainability Reporting Directive (CSRD) to ensure our diversification strategy supports operational resilience and sustainability.”

Annual report 2024A · The company itself

“Camurus har en stark ambition att bidra till en hållbar utveckling genom att beakta både miljöfrågor, sociala frågor och styrning av hållbarhetsfrågor (ESG) i företagets verksamhet. Under 2024: • Camurus förnyade företagets certifikat som Nasdaq Transparency Partner, vilket visar på företagets engagemang i marknadstransparens och för högre hållbarhetsstandarder • Camurus skickade för första gången in den årliga kommunikationen kring företagets fram - steg, arbete och prestanda inom hållbarhet (Communication on Progress) till det globala FN-initiativet United Nations Global Compact (UNGC), världens största hållbarhetsnätverk för företag.”

Annual report 2024A · The company itself

“Carasents produkter omfattas av regelverk som MDR och NMI. Om bolaget misslyckas med att uppfylla kraven kan detta leda till återkallelse av produkter, ökade kostnader för regelefterlevnad eller utveckling av nya produkter, vilket kan påverka resultatet och renomméet negativt.”

Annual report 2024A · The company itself

“Hårdare krav på miljö, socialt ansvar och bolagsstyrning (ESG) kan öka kostnaderna för Carasent. Exempelvis kan bolagets energiförbrukning, avfall och AI-användning bli föremål för regleringar som innebär sanktionsavgifter vid bristande efterlevnad. Detta kan påverka resultatet och renomméet negativt.”

Annual report 2024A · The company itself

“Industry participants, including us, rely on ethylene oxide (“EtO”) and per- and polyfluoroalkyl (“PFA”) compounds to sterilize certain medical products, including products that we manufacture or distribute. Regulatory enforcement actions have been taken or are being considered by certain environmental regulatory authorities to reduce emissions of these compounds during the sterilization and distribution process. If such measures become more widespread, we could experience increased costs to comply with reduced emissions standards and it is possible that we and other industry participants may be unable to effectively sterilize medical products, possibly resulting in supply shortages or an industry-wide reduction in surgical or medical procedures, which would negatively impact demand for our products.”

Annual report 2026A · The company itself

“Målet är att ytterligare öka det interna samarbetet och synergierna för att utöka värdekedjan, bland annat genom att kapital från Property Funds förvaltas av Asset Management i flera europeiska länder. Intresset för att bygga hållbara städer och miljöer ökar hos många långsiktiga institutionella investerare. ESG är väl etablerat i fastighetsbranschen och allt fler investerare ställer höga krav på hållbarhet i fastighetstillgångar. För att möta efterfrågan kommer Catella fortsätta satsa på att utveckla både befintliga och lansera nya fonder med fokus på hållbarhet.”

Annual report 2024A · The company itself

“Evolving corporate governance and public disclosure regulations and expectations, including with respect to sustainability matters, could expose us to risks. In recent years, there has been heightened interest from regulators, customers, investors, employees and other stakeholders on sustainability matters and related disclosures. Such attention to sustainability matters, including expanding mandatory and voluntary reporting, diligence, and management practices on topics such as climate change, human capital, labor and risk oversight, could expand the nature, scope, and complexity of matters that we are required to control, assess and report on.”

Annual report 2025A · The company itself

“Relatedly, our clients use sustainability performance data managed by us (including, but not limited to, data used in the calculation of GHG emissions) in their own regulatory filings, and such data is subject to financial grade assurance. At the same time, regulators and other stakeholders have increasingly expressed or pursued opposing views, legislation and investment expectations with respect to sustainability initiatives, including the enactment or proposal of “anti-ESG” legislation or policies.”

Annual report 2025A · The company itself

“Data Privacy and Security Regulation Our businesses, depending upon their operations and locations, may be subject to foreign, federal, and local privacy and security laws, regulations, and directives concerning the collection, use, analysis, retention, storage, protection, transfer, disclosure, and/or disposal of personal data including, without limitation, the Health Insurance Portability and Accountability Act of 1996, as amended by the final regulations promulgated pursuant to the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”) found in the American Recovery and Reinvestment Act of 2009 (collectively, “HIPAA”), the EU General Data Protection Regulation (“GDPR”), the U.K. GDPR, the Personal Information Protection and Electronic Documents Act of 2000 (“PIPEDA”), U.S. state, U.S. city, and Canadian provincial privacy, consumer protection, cybersecurity, AI, and breach notification laws, regulations, and directives, and equivalent foreign laws.”

Annual report 2025A · The company itself

“The regulatory environment surrounding information security and data privacy continues to evolve and is increasingly demanding. New laws and regulations governing data privacy and the unauthorized disclosure of confidential information pose increasingly complex compliance challenges and elevate our costs.”

Annual report 2025A · The company itself

“In addition to regulations concerning the emission of GHGs, many jurisdictions have implemented or are considering regulations requiring the disclosure of certain climate and other sustainability information, including related to companies’ efforts to reduce GHG emissions, impacts on the environment and risks associated with climate change, as well as regulations concerning environmental claims (such as the UK Green Claims Code and EU Empowering Consumers Directive 2024/825), breaches of which may result in significant financial penalties. Such requirements could inform future regulatory or enforcement action or influence demand for our products in a manner that could negatively impact us.”

Annual report 2025A · The company itself

“de foreslåede ændringer betyder, at ChemoMetec vil blive fritaget fra kravet om at rapportere om bæredygtighed”

Annual report 2025A · The company itself

“anvendes der i de nye XcytoMaticprodukter markant mindre plastik end i ChemoMetecs eksisterende produkter”

Annual report 2025A · The company itself

“If we fail to fully comply with privacy and data protection laws and regulations, we could incur significant civil and criminal penalties and liabilities, suffer reputational damage, and adverse publicity. Complex local, state, federal and international laws and regulations apply to the collection, use, retention, protection, disclosure, transfer and other processing of personal data. These privacy, consumer protection, and data protection laws and regulations are quickly evolving, with new or modified laws and regulations proposed and implemented frequently and existing laws and regulations subject to new or different interpretations and enforcement.”

Annual report 2025A · The company itself

“If the Food and Drug Administration or other government agency adopts new laws and regulations in response to real or perceived emerging food safety, such as concerns over phthalates, PFAS, microplastics or heavy metals in the U.S. food supply, it could impose new processes that disrupt our suppliers’ operations, increase costs or both.”

Annual report 2025A · The company itself

“The Company could be the subject of negative publicity or litigation in spite of or as a result of these efforts, including relating to product safety, quality or efficacy; ingredients or substances actually or allegedly present in the Company’s products or packaging; sustainability; or its human capital practices, including if the Company changes its position on or does not achieve its sustainability goals.”

Annual report 2025A · The company itself

“We are also subject to various federal, state and international laws and regulations related to cybersecurity, privacy and data protection, including the European Union’s General Data Protection Regulation, China’s Personal Information Protection Law and the California Consumer Privacy Act of 2018 (“CCPA”), which became effective on January 1, 2020, as amended by the California Privacy Rights Act (“CPRA”), which became effective on January 1, 2023. In addition to California, at least 19 other states in the United States have passed comprehensive privacy laws similar to the CCPA and the CPRA. These laws are either in effect or will go into effect during 2026 or in the future, and we expect other states to consider adopting similar laws in the future.”

Annual report 2025A · The company itself

“RISKS RELATED TO ENVIRONMENTAL AND SOCIAL FACTORS Our business is subject to evolving sustainability regulatory requirements and expectations, which exposes us to increased costs and legal and reputational risks. We have established and publicly announced sustainability goals and aspirations.”

Annual report 2025A · The company itself

“Shifting stakeholder expectations and evolving regulatory and disclosure standards around sustainability and societal matters could impact our business. We are subject to, and expect to become increasingly subject to, laws, regulations and international treaties relating to sustainability.”

Annual report 2025A · The company itself

“We will reduce our environmental footprint by reducing Scope 1 and 2 emissions by 90% and Scope 3 emissions per product by 10% in 2030”

Annual report 2025A · The company itself

“To improve our products and services, we process the personal data of our consumers and end-users, posing a potential impact on their right to privacy.”

Annual report 2025A · The company itself

“Our commitment to this culture is driven by strong leadership that exemplifies our purpose and values. To reinforce our commitment, we conduct periodic global awareness campaigns that highlight business ethics and compliance as visible priorities within our organisation.”

Annual report 2025A · The company itself

“Coloplast’s Code of Conduct - BEST Our commitment to conducting business responsibly and acting with integrity is outlined in Coloplast BEST. It supports our understanding of our responsibility in navigating the complexities of the ever-changing rules and regulations we face daily as we deliver on our mission.”

Annual report 2025A · The company itself

“There are various channels to report concerns while employees can speak with their managers or a trusted support function, such as Legal, Compliance or People & Culture teams, anyone can also raise their concerns via Coloplast’s whistleblowing channel, Ethics Hotline. The Ethics Hotline, managed by an independent third party, enables anonymous reporting of concerns and is accessible to both internal and external stakeholders in all languages spoken in the countries where Coloplast operates.”

Annual report 2025A · The company itself

“A failure to comply with such laws and regulations could result in penalties or fines, legal liabilities or reputational harm.”

Annual report 2025A · The company itself

“Diverging and varied governmental and societal attention to ESG and sustainability matters, including expanding mandatory and voluntary reporting, diligence and disclosure on topics such as climate change, human capital, labor and risk oversight, could expand the nature, scope, and complexity of matters that we are required to control, assess, and report. If we are unable to adequately address such ESG and sustainability matters or fail to comply with all laws, regulations, policies and related interpretations, it could negatively impact our reputation and our business results.”

Annual report 2025A · The company itself

“In 2025, we continued our efforts to adhere to voluntary reporting standards by (i) submitting to CDP (formerly the Carbon Disclosure Project), wherein, among other things, we disclosed the results of our annual greenhouse gas emissions inventory, and (ii) publishing our 2024 sustainability report, which followed the Task Force on Climate-related Financial Disclosures and the Sustainability Accounting Standard Board’s standards for the Engineering and Construction Services industry and the Global Reporting Initiative Standards: Core option.”

Annual report 2025A · The company itself

“Various stakeholders have expressed widely divergent views on environmental sustainability, social, human capital, and governance-related matters, among others, and we are faced with conflicting expectations and regulations regarding such matters which has inhibited and may continue to inhibit our ability to achieve a consistently positive perception across our entire stakeholder base.”

Annual report 2026A · The company itself

“The landscape related to environmental sustainability and CSR-related regulation, compliance, and reporting is constantly evolving, including changing in scope and complexity. For example, the European Commission and the SEC have promulgated rules that would require significantly increased disclosures related to climate change, although each body has taken subsequent actions to limit or abandon their rules.”

Annual report 2026A · The company itself

“Vastuullisuuden osa-alue Olennaiset vaikutukset, riskit ja mahdollisuudet Hallinta Sidosryhmänäkemys Liiketoiminnan harjoittaminen ja yrityskulttuuri: Constin vaikutus G1-1 Yrityskulttuuria ja liiketoimintaa koskevat toimintaperiaatteet Mahdollisuus: Kestävyyttä tukeva yrityskulttuuri luo perustan kestävälle liiketoiminnalle ja sen kehittämiselle.”

Annual report 2025A · The company itself

“For example, the European Union Corporate Sustainability Reporting Directive (CSRD) became effective in 2023 and applies to both EU and non-EU entities. In October 2023, California adopted new carbon and climate-related reporting requirements for large public and private companies doing business in the state. Further, the SEC adopted a final rule on the Enhancement and Standardization of Climate-Related Disclosures in March 2024.”

Annual report 2025A · The company itself

“Den nye reform indenfor grundskyld og ejendomsskatter, medfører netto en stigning i selskabets samlede skattebetalinger. Skattestigningerne kan i en vis grad pålægges lejen, dog forventes det at øgede skatter har en negativ påvirkning på værdiansættelsen af ejendomme. • Samfundsøkonomien og ejendomsmarkedet • Udlejningsprocenten • Kundernes betalingsevne • Genudlejningsrisici • Driftsomkostninger • Regulering af lejeindtægter • Grundskyld og ejendomsskatter Copenhagen Capital koncernens økonomistyring har fokus på driftsresultatet af hver enkelt ejendom, som er placeret i sit selvstændige selskab.”

Annual report 2025A · The company itself

“Boligmarkedet er fortsat en særligt eftertragtet aktivklasse, og de markante prisstigninger på ejerlejligheder har øget efterspørgslen efter lejeboliger. Samtidig fylder bæredygtighed og ESG i stigende grad i virksomhedernes strategiske overvejelser, særligt ved indgåelse af lejekontrakter, hvilket har øget interessen for moderne og energieffektive ejendomme.”

Annual report 2025A · The company itself

“At mange virksomheder oplever en tilbagegang i hjemmearbejde, hvilket påvirker efterspørgsmål på kontorlejemål positivt. ESG har de seneste år fyldt mere for mange virksomheder, hvorfor det for mange er vigtigt at efterleve kravene for bæredygtighed også, hvad angår lejemål. Derfor er det særligt moderne og bæredygtige kontorer, der er høj efterspørgsel på.”

Annual report 2025A · The company itself

“There is increasing and, in some jurisdictions, diverging focus by governmental organizations, investors, employees, customers and partners, on ESG topics, including environmental stewardship, climate, diversity and inclusion, workplace conduct and related disclosure. Shifts in expectations, together with evolving climate and sustainability reporting regimes and anti-ESG trends, may require changes to our governance practices and increased compliance and disclosure costs, and will subject us to heightened scrutiny.”

Annual report 2025A · The company itself

“In addition, organizations that inform investors on corporate governance and sustainability matters, including ratings providers, proxy advisors and index compilers, continue to update their methodologies. Unfavorable ratings, downgrades, or exclusion from indices, as well as perceived misalignment with stakeholder expectations, may lead to negative investor sentiment, reduced demand for our securities and the diversion of investment to other companies or industries.”

Annual report 2025A · The company itself

“Transition impacts of climate-related events can also subject us to increased regulations, reporting requirements (such as the State of California disclosure rules and the European Union’s Corporate Sustainability Reporting Directive), standards, or expectations 26 regarding the environmental and/or social impacts, risks, and opportunities of our business.”

Annual report 2025A · The company itself

“De bolag som ingår i vår värdepappersportfölj kan komma att ha mer direkt påverkan inom de av hållbarhetspolicyn adresserade områdena. Mot bakgrund av detta ska vår hållbarhetspolicy ha direkt tillämpning på Creades och vidare tjäna som inriktning för hur vi ska agera i de bolag där vi har inflytande.”

Annual report 2024A · The company itself

“I analysen ingår identifiering av risker och möjligheter utifrån ett ESG perspektiv med fokus på möjligheter till värdeskapande genom att införa hållbara affärsmodeller, klimatsäker produktion och distribution eller på annat sätt öka investeringsobjektets värde genom att implementera och utveckla ESG.”

Annual report 2024A · The company itself

“Hållbarhet är av högsta prioritet för CTEK och genomsyrar hela verksamheten. Bolaget har en tydligt definierad hållbarhetsstrategi med flertalet konkreta initiativ och mål som följs upp på kontinuerlig basis.”

Annual report 2024A · The company itself

“Our use and disclosure of members’, customers’ and other constituents’ personal information is subject to complex regulations.”

Annual report 2025A · The company itself

“We are dedicated to corporate social responsibility and sustainability, and we established certain goals as part of our overall strategy. We face pressures from our colleagues, customers, stockholders and other stakeholders to meet our goals.”

Annual report 2025A · The company itself

“We are subject to laws and regulations relating to the preparation and sale of food, including regulations regarding product safety, nutritional content, and menu labeling.”

Annual report 2026A · The company itself

“We and the third-parties with whom we work are subject to stringent and changing laws, regulations, standards, and contractual obligations related to data privacy and security. Actual or perceived failure by us or the third-parties with whom we work to comply with such laws, regulations, standards, or contractual obligations could harm our business.”

Annual report 2025A · The company itself

“In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations.”

Annual report 2025A · The company itself

“We are subject to risks related to our environmental, social, and governance practices and disclosures. There continues to be a focus from certain regulators, investors and other stakeholders concerning environmental, social, and governance, or ESG, matters, both in the United States and internationally.”

Annual report 2025A · The company itself

“Our goals and disclosures related to ESG matters expose us to risks, including without limitation risks to our reputation and stock price. We have a longstanding program relating to environmental, social and governance (ESG) issues and have engaged with key stakeholders to identify focus areas and to set operational and sustainability-related goals that are aligned with our business strategy, many of which are aspirational. We have set and disclosed these focus areas, goals and related objectives, but our goals and objectives reflect our current plans and are not guarantees that we will be able to achieve them.”

Annual report 2025A · The company itself

“Applicable regulatory requirements affecting ESG standards, frameworks and disclosures, as well as standards for measuring and reporting on related metrics, continue to evolve. If our practices do not meet investor or other stakeholder expectations and standards, then our reputation, our ability to attract or retain employees and our attractiveness as an investment, business partner or acquirer could be negatively impacted. In addition, our failure or perceived failure to adequately pursue or fulfill our goals and objectives or to satisfy various reporting standards within the timelines we announce, or at all, could also have similar negative impacts and expose us to other risks, which under certain circumstances could be material.”

Annual report 2025A · The company itself

“Increasing expectations from investors, regulators, and other key stakeholders with respect to our ESG practices may impose additional costs on us or expose us to additional risks. Investors, advocacy groups, customers, consumers, employees, regulators, and other stakeholders are increasingly scrutinizing companies’ ESG practices and disclosures, including the social and environmental impacts of their operations.”

Annual report 2026A · The company itself

“Drive responsible and sustainable business practices”

Annual report 2025A · The company itself

“Our Environmental Performance Targets and Other Sustainability Initiatives May Expose Us to Risks We have developed, and may continue to develop, voluntary targets related to our sustainability initiatives, including our environmental performance targets and strategy. Any public statements related to these initiatives reflect our current plans and expectations and are not a guarantee the targets will be achieved or achieved on the currently anticipated timeline.”

Annual report 2025A · The company itself

“Certain regulators, such as the SEC and various state agencies, as well as non-governmental organizations and other private actors have filed lawsuits under various securities and consumer protection laws alleging that certain ESG statements were misleading, false or otherwise deceptive. Conversely, “anti-ESG” sentiment has gained momentum among some governmental and private actors, and various federal and state policy makers have enacted or proposed “anti-ESG” policies, legislation and other initiatives, including efforts targeting certain practices and programs related to diversity, equity and inclusion.”

Annual report 2025A · The company itself

“•Sustainability (including environmental, social and governance) regulations, policies and provisions could expose us to numerous risks.”

Annual report 2025A · The company itself

“We are subject to a number of international, federal and state laws and regulations protecting the use, disclosure, and confidentiality of certain patient and consumer health and personal information, including patient records, and restricting the use and disclosure of that protected information, including state breach notification laws. Some of these laws include the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, or HITECH, the EU’s General Data Protection Regulation, or GDPR, the UK Data Protection Act and the UK GDPR, the California Consumer Privacy Act as amended, or CCPA, and the Washington My Health My Data Act, among others.”

Annual report 2025A · The company itself

“Increasingly, regulators, customers, investors, employees and other stakeholders are focusing on sustainability matters relating to businesses, including climate change and greenhouse gas emissions, human and civil rights, and diversity, equity and inclusion. These changing rules, regulations and stakeholder expectations may differ and conflict, and have resulted in, and are likely to continue to result in, increased general and administrative expenses and increased management time and attention spent complying with or meeting such regulations and expectations. Collecting, measuring and reporting sustainability-related data and information is subject to evolving reporting standards, including state climate-related reporting requirements, the EU’s environmental, social and governance-related disclosure requirements set forth in the Corporate Sustainability Reporting Directive, and similar proposals by other international regulatory bodies.”

Annual report 2025A · The company itself

“In parallel, the future licence-to-operate was secured through full system compliance with ViDA (VAT in the Digital Age, EU reform package) and ICS2 (EU Import Control System 2).”

Annual report 2025A · The company itself

“•Deliver on our commitment to environmental, social and governance (“ESG”) performance. We are committed to the safe and responsible development of our resources in the Permian Basin. Our approach to ESG is evidenced through our commitment to people, safety, environmental responsibility, community and sound governance practices.”

Annual report 2025A · The company itself

“DistIT är sedan hösten 2022 medlem i UN Global Compact. Vår hållbarhetsstrategi inkluderar UN Global Compacts tio principer för mänskliga rättigheter, miljö, arbete och anti-korruption i våra strategier, policyer och processer.”

Annual report 2024A · The company itself

“I 2024 ble vi kåret til Norges ledende leverandør av ESGrådgivning innen aksjeanalyse og den fremste rådgiveren i det norske markedet for bærekraftige obligasjoner og energisektoren.”

Annual report 2024A · The company itself

“Failure to comply or accusation of failure to comply, even if unfounded, with ethical, social, product, labor, data privacy, consumer protection, safety, political, environmental and other applicable standards could jeopardize our reputation and potentially lead to various adverse employee, consumer, vendor, shareholder, or non-governmental organization (NGO) actions, workforce unrest or walkouts, boycotts, litigation and governmental actions, inquiries, or investigations and/or require a costly response.”

Annual report 2026A · The company itself

“For example, our continued expansion of multi-price product assortments and retail price changes, in addition to increased scrutiny of retailers by local, state and federal agencies, has resulted in increased regulatory and legal risks regarding pricing and price clarity. New or revised laws, regulations, orders, policies and related interpretations and enforcement practices, including product and food safety, marketing, labeling or pricing; information security and privacy; artificial intelligence; labor and employment; employee wages and benefits; health and workplace safety (including Occupational Safety and Health Administration rules); imports and customs; taxes; anti-bribery; sustainability; and environmental compliance, may significantly increase our expenses or require extensive system and operating changes that could materially increase our cost of doing business.”

Annual report 2026A · The company itself

“Our business faces increasing public scrutiny related to corporate social responsibility, environmental concerns, governance and related practices. We risk damage to our brand and reputation, including risk to our plans for profitable growth, if we fail to act responsibly or in line with regulatory and stakeholder expectations in a number of areas, such as worker safety and welfare, human rights, associate relations, environmental stewardship, support for local communities, and corporate governance and transparency.”

Annual report 2026A · The company itself

“För att främja koncernens hållbarhetsmål har seg - mentet fortsatt att anpassa verksamheten efter målen för säkerhet och miljö.”

Annual report 2024A · The company itself

“Our businesses' domestic and international sales and operations must comply with a wide variety of laws, regulations and policies (including environmental, employment and health and safety regulations, data security laws, data privacy laws, export/import laws, tax policies such as export subsidy programs and research and experimentation credits, sustainability regulations, energy efficiency and design regulations and other similar programs).”

Annual report 2025A · The company itself

“Sustainability is a central part of DSV’s strategy and is embedded into our business operations”

Annual report 2025A · The company itself

“Table of Contents Demand for product offerings that customers, end users, or other stakeholders across the healthcare, water, construction, and industrial markets, determine support their respective business and/or market strategy is expected to continue to increase, driven by end-user and customer demand, investor preference, and government legislative and market- and product-specific actions.”

Annual report 2025A · The company itself

“Under året har vi återigen uppnått EcoVadis guldnivå, vilket innebär att vi är rankade bland de 3 procent mest hållbara bolagen i världen.”

Annual report 2024A · The company itself

“Strategin fokuserar på fyra delar; tillväxt, marginal, hållbarhet och kapitaleffektivitet.”

Annual report 2024A · The company itself

“Minskad efterfrågan på icke-hållbara byggnader Riskbeskrivning Kraven på hållbara och certifierade byggnader, som även främjar hälsa och välbefinnande, har ökat över tid och förväntas fortsätta stiga. Byggnader som inte uppfyller dessa krav riskerar att dra in lägre hyresintäkter och att värderas lägre på marknaden.”

Annual report 2024A · The company itself

“För att möta efterfrågan på hållbara och effektiva kontorslösningar arbetar Eastnine aktivt med hållbarhetscertifiering av kontorsbyggnader som ger en kvalitetsstämpel på byggnaden. Gröna hyresavtal fyller en viktig funktion för att främja hållbar fastighetsdrift.”

Annual report 2024A · The company itself

“Stakeholder and regulator expectations regarding ESG matters continue to evolve and are becoming increasingly divergent among and within stakeholders, and ESG matters have been the subject of increased regulatory and stakeholder attention and emerging and evolving regulatory requirements and frameworks. The imposition of new laws, changes in laws, regulatory requirements, policies, international accords or changing interpretations thereof, changes in the enforcement priorities of regulators, and differing or competing regulations and standards across the markets in which we operate, as well as relating to matters beyond our core products and services, including environmental sustainability, climate change, human capital and employment matters, could result in higher compliance and other costs, resulting in adverse effects on our business.”

Annual report 2025A · The company itself

“Our costs to comply with ESG reporting requirements, including new ESG standards and initiatives in the EU, such as the Corporate Sustainability Reporting Directive, and new California climate disclosure requirements, such as the Climate Corporate Data Accountability Act and Climate-Related Financial Risk Act, the future scope and implementation of which remains uncertain, could be significant, and any failure to comply or negative reaction to the information that we disclose could expose us to liability or harm our business and reputation.”

Annual report 2025A · The company itself

“The market is also impacted by increased regulation and environmental requirements, such as the EU Deforestation Regulation (EUDR) which places high demands on companies trading with products originating from the forest to show sustainable due diligence in their operations and value chains.”

Annual report 2024A · The company itself

“Regulatory Low Low Short More regulatory requirements and directives may follow, which can result in increased operational costs to monitor and meet requirements.”

Annual report 2024A · The company itself

“To achieve its strategic goals, Elkem will concentrate on operational excellence, digitalisation, people development, and ESG.”

Annual report 2024A · The company itself

“Hållbarhet är en grundläggande komponent i vår strategi och våra värderingar.”

Annual report 2024A · The company itself

“Increasing Interest and Expectations with Respect to Environmental, Social, and Governance (ESG) Matters by Our Various Stakeholders Could Adversely Affect Our Business and Operating Results In response to growing customer, investor, employee, governmental, and other stakeholder interest in our ESG practices, we have increased reporting of our ESG programs and performance and have established and announced our aspirational purpose, causes, values, and related commitments, goals or targets, including those regarding sustainability, greenhouse gas emissions, and our net zero ambition. Our ability to achieve such goals and aspirations is subject to numerous risks and uncertainties, many of which rely on the collective efforts of others or may be outside of our control.”

Annual report 2025A · The company itself

“Yrityskulttuuriin liittyvät toimintaperiaatteet: Vastuullisen toimintatavan ohje • Keskeiset sisällöt ja päämäärät: Yhtiön vastuullisen toimintatavan ohjeessa (Code of Conduct) määritellään yhteiset periaatteet, joita Enersensen työntekijöiden ja johdon tulee noudattaa jokapäiväisessä toiminnassaan. Vastuullisen toimintatavan ohje koskee koko konsernia. Ohje määrittelee yhtiön lähestymistapaa eettisiin liiketoimintatapoihin, ilmastonmuutoksen hillintään, ihmis- ja työoikeuksiin sekä ympäristöarvoihin.”

Annual report 2025A · The company itself

“Toimittajien vastuullisen toimintatavan ohje (Supplier Code of Conduct) • Keskeiset sisällöt ja päämäärät: Toimittajien vastuullisen toimintatavan ohje määrittää lähestymistavan eettisiin liiketoimintatapoihin, ihmis- ja työoikeuksiin sekä ympäristöarvoihin, joita toimittajien tulee noudattaa toiminnassaan. Ohje velvoittaa toimittajia sitoutumaan Enersensen määrittämiin ympäristö- ja sosiaalisiin vaatimuksiin, joita kuvataan tarkemmin osiossa G1-2.”

Annual report 2025A · The company itself

“In 2024, Entra also recieved Gold level compliance with The European Real Estate Association (EPRA) Sustainability Best Practices Recommendations (sBPR). per cent of the company's value-weighted property portfolio is BREEAM certified Very Good or better.”

Annual report 2024A · The company itself

“In addition, from time to time there has been particular investor and regulatory focus on environmental and social matters, including, in addition to climate change, human rights and human capital management matters. If our related initiatives, targets and ambitions do not meet our investors' or other stakeholders' evolving expectations and standards, investment in our stock may be viewed as less attractive and our reputation, relationships with investors and other business relationships may be adversely impacted.”

Annual report 2025A · The company itself

“Hållbarhet är ett strategiskt område och under 2024 har Ependion tagit stora steg framåt. Under året har en dubbel väsentlighetsanalys genomförts och koncernens rapportering har utvecklats i linje med CSRD-direktivet.”

Annual report 2024A · The company itself

“Hållbarhet är integrerat i affärsstrategin och under 2024 har affärsenheten bland annat arbetat med framtagande av en dubbel väsentlighetsanalys.”

Annual report 2024A · The company itself

“Under 2024 har arbetet med att förbereda koncernen för att rapportera enligt de nya EU-kraven som börjar gälla 2025 fortgått. En dubbel väsentlighetsanalys har genomförts och mål för koncernens begränsade egna utsläpp enligt scope 1 och scope 2 har fastställts.”

Annual report 2024A · The company itself

“Vidare förstärkning inom områdena hälsoekonomiska studier, regulatoriska frågor och vårdersättningsfrågor är också prioriterade områden.”

Annual report 2024A · The company itself

“Som en del av EQT:s aktiva ägarmodell är EQT Playbook en viktig drivkraft för fondernas avkastning, där tillväxt främjas genom digitalisering, hållbarhet och operationell excellens. EQT:s styrningsmodell möjliggör stöd för genomförandet av affärsplaner inom portföljbolagen, inklusive hållbarhetsdrivna värdeskapande initiativ (se avsnitt #3.6 i Hållbarhetsnoterna för mer information).”

Annual report 2024A · The company itself

“Väsentliga hållbarhetsaspekter integreras i investeringsanalysen. EQT undviker exempelvis investeringar i produkter, tjänster eller verksamheter som skadar miljön eller samhället, och där en aktiv ägare inte kan mitigera negativa effekter genom att driva förändring Baserat på att sådana väsentliga problem kan urholka värde över tid och leda till renomméskada för EQT AB-koncernenBaserat på att sådana väsentliga problem kan urholka värde över tid och leda till renomméskada för EQT AB-koncernen.”

Annual report 2024A · The company itself

“Unfavorable ESG or sustainability ratings could lead to increased negative investor sentiment towards us and our industry and to the diversion of investment to other industries, which could have a negative impact on our stock price and our access to and cost of capital. In addition, failure or a perception (whether or not valid) of failure to implement our sustainability strategy or achieve sustainability goals and targets we have set, could damage our reputation, causing our investors or consumers to lose confidence in our company, and negatively impact our operations.”

Annual report unknown yearA · The company itself

“More recently, an “anti-ESG” sentiment has developed in the U.S. among certain activists, institutions and governments, and we may face scrutiny, reputational risk, lawsuits or market access restrictions from these parties regarding our responsible business priorities, initiatives, goals and commitments.”

Annual report 2025A · The company itself

“For example, recent changes in the U.S. regulatory environment relating to ESG matters has increased scrutiny of corporate ESG practices. Failure to effectively address current and future ESG regulatory developments and stakeholder expectations may expose our business to litigation, fines, penalties, and damage to our reputation, which, if material could adversely affect our financial condition and results of operations.”

Annual report 2025A · The company itself

“Additionally, expectations continue to evolve relating to climate disclosures, human capital management and lawmakers and corporate 22 Table of Contents responsibility matters, and other regulatory bodies, such as in California, have issued rules regarding climate disclosures. Additional local, state and federal laws and rules with respect to corporate responsibility and sustainability matters may be enacted and the scope of their requirements and impact on our business are unknown.”

Annual report 2025A · The company itself

“12.2 per cent of the biological material is sustainably sourced. This means the product is third-party certified according to a defined list of 18 sustainability-related certification schemes, such as FSC or Swan.”

Annual report 2024A · The company itself

“Signing of greenwashing poster Providing correct and relevant product information is a legal requirements according to the green claims directive, however when done right, it also presents an opportunity to the group.”

Annual report 2024A · The company itself

“Through a dedicated working group, including resources from sustainability, IT, operational procurement, finance, and quality assurance, Europris has launched a data solution designed to collect a wide range of new inputs for product data management. This will provide the sustainability-related insights needed to develop key metrics, set targets, and effectively track progress towards goals.”

Annual report 2024A · The company itself

“Environmental, Social and Governance Risks: The Evergy Companies are subject to risks relating to environmental, social and governance (ESG) matters that could adversely affect their reputation, business, financial position and results of operations. The Evergy Companies are subject to a variety of risks, including reputational risk, associated with ESG issues.”

Annual report 2025A · The company itself

“In the United States, both federal and various state governments have adopted, or are considering, laws, guidelines or rules for the collection, distribution, use, storage and security of personal information, and we are or may become subject to such obligations with respect to information collected from or about our employees, contractors or customers. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, requires certain businesses that process personal information of California residents to, among other things, provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt-out of certain disclosures of their personal 11 information; and enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf.”

Annual report 2025A · The company itself

“In addition, we are subject to a range of new and anticipated climate-related and sustainability-focused laws and regulations, including the E.U.’s Corporate Sustainability Reporting Directive. To meet the compliance requirements of these new regulations, we may incur extra costs to implement more internal controls, processes, and procedures, in order to assist in the oversight responsibilities for our management and board of directors.”

Annual report 2025A · The company itself

“Many U.S. and foreign jurisdictions have passed, or are currently contemplating, a variety of consumer protection, data privacy, and cyber and data security laws and regulations that may relate to our business or the business of our customers or affect the demand for our products and services.”

Annual report 2025A · The company itself

“During the year we kept reinforcing our premium position in each market and we won several sustainability awards, such as inclu - sion on the Sustainable Brand Index in both Sweden and Finland.”

Annual report 2024A · The company itself

“Further, sustainability reporting is expected from, and in certain cases required by, certain stakeholders, state regulators, investors, shareholders and other third parties. These sustainability reporting disclosure frameworks and reporting standards continue to evolve.”

Annual report 2025A · The company itself

“As of the date of this filing, we have made several public commitments regarding our intended reduction of greenhouse gas emissions and operating a responsible supply chain with zero tolerance for forced labor. Although we intend to meet these commitments and deliver on our greenhouse gas emissions reduction and renewable energy targets, we may be required to expend significant resources to do so, which could increase our operational costs.”

Annual report 2025A · The company itself

“Investor advocacy groups, certain institutional investors, investment funds and other influential investors may also be focused on ESG practices and in recent years have placed increasing importance on the non-financial impacts of their investments. While our vision is to lead the world’s sustainable energy future 37 Table of Contents through solar technology that is eco-efficient and socially responsible, if our ESG practices do not meet investor or other industry stakeholder expectations, which continue to evolve, we may incur additional costs and our brand, business, and ability to attract and retain qualified employees may be harmed.”

Annual report 2025A · The company itself

“She also oversees First Solar’s global marketing and media relations activities, as well as research, disclosure, and reporting related to the Company’s commitment to Responsible Solar.”

Annual report 2025A · The company itself

“Klimatilpasning er en strategisk vigtig prioritering.”

Annual report 2025A · The company itself

“Genom att hantera dessa svårnedbrytbara miljöförorenande ämnen bidrar Chromaforas teknologier till att motverka hälsorisker och skapa hållbara vattensystem.”

Annual report 2024A · The company itself

“Through our customer-focused, technology-driven MissionZero program, we empower our customers to accelerate their journey toward more sustainable operations”

Annual report 2025A · The company itself

“Shifting public policy regarding data privacy and the effects of artificial intelligence has caused and may in the future cause us to incur substantial costs to modify our operations or business practices, reduce consumers’ willingness to engage with our offerings, or cause delays or lapses in the availability of our products or services in various jurisdictions.”

Annual report 2025A · The company itself

“•Investors’, activists’ and regulators’ expectations of our investments and performance relating to operational sustainability factors may impose additional costs and expose us to new risks. •We are exposed to fluctuations in currency exchange rates, which could negatively affect our financial condition and results of operations. •Our proprietary rights may be difficult to enforce and we may be subject to claims by others that we infringe their proprietary technology. •The trading price of our common stock may be volatile, which volatility may be exacerbated by share repurchases under our Share Repurchase Program (the “Repurchase Program”). •Anti-takeover provisions contained in our certificate of incorporation and bylaws, as well as provisions of Delaware law, could impair a takeover attempt. •Global economic uncertainty can weaken and harm our financial position.”

Annual report 2025A · The company itself

“Investors’ expectations of our performance relating to corporate responsibility and sustainability factors may impose additional costs and expose us to new risks. Certain investors, employees, customers and other stakeholders have a focus on corporate responsibility. Some investors may use these non-financial performance factors to guide their investment strategies and, in some cases, may choose not to invest in us if they believe our policies and actions relating to corporate responsibility are inadequate.”

Annual report 2025A · The company itself

“Data privacy and security laws are rapidly evolving. In particular, a broad privacy law in California, the California Consumer Privacy Act (“CCPA”), which came into effect in January 2020 and was amended by the California Privacy Rights Act effective January 2023, has some of the same features as the GDPR (discussed below) and has prompted several other states to enact or consider similar legislation.”

Annual report 2025A · The company itself

“EU hyväksyi kestävyyssääntelyä koskevan Omnibus-paketin EU:n tavoitteena on keventää sääntelytaakkaa ja vahvistaa kilpailukykyä sujuvoittamalla voimassa olevaa lainsäädäntöä useilla Omnibus‑paketeilla. Euroopan parlamentti ja neuvosto sopivat kestävän kehityksen Omnibus-paketista joulukuussa.”

Annual report 2025A · The company itself

“The EU’s Sustainable Finance Disclosure Regulation (“SFDR”) imposes mandatory ESG disclosure obligations on asset managers and other financial markets participants. SFDR requires all covered firms to disclose how financial products integrate sustainability risks in the investment process, including whether they consider adverse sustainability impacts, and, for those products promoting sustainable objectives, the provision of sustainability-related information.”

Annual report 2025A · The company itself

“The EU regulation on packaged retail investment and insurance products (“PRIIPs”) imposed new pre-contractual disclosure requirements under the form of a Key Information Document (“KID”) for the benefit of retail investors when they are considering the purchase of packaged retail investment products or insurance-based products.”

Annual report 2025A · The company itself

“Certain key regulatory reforms and proposals in the U.S. and other jurisdictions that may impact or relate to our business, and may cause us to incur additional obligations, include regulatory matters related to antitrust rules and disclosure, cybersecurity disclosure, sustainability, privacy and data protection, SIFIs, financial products, fiduciary and fund-related reforms, digital assets, tax compliance, and other investment management disclosure and compliance requirements.”

Annual report 2025A · The company itself

“Scrutiny, action and evolving expectations from stakeholders and other third parties with respect to our sustainability-related practices, performance, commitments and disclosures may impact our reputation, increase our costs and impact our access to capital or business strategy. Stakeholder and other third-party scrutiny related to our sustainability-related practices, commitments, performance and disclosures continues to evolve. While we have adopted various sustainability-related policies and programs, it is possible that stakeholders and other third parties might not be satisfied or even disagree with our practices, goals, initiatives, commitments, performance and/or disclosures, or the speed of their adoption, implementation and measurable success.”

Annual report 2025A · The company itself

“OPERATIONS Responsible Production We demonstrate our responsible production performance through the Copper Mark, a comprehensive assurance framework developed specifically for the copper industry and extended to other metals, including molybdenum. To achieve the Copper Mark and Molybdenum Mark, as applicable, each site is required to complete an independent external assurance process to assess conformance with various environmental, social and governance criteria.”

Annual report 2025A · The company itself

“We are also a founding member of the International Council on Mining & Metals (ICMM), an organization dedicated to a safe, fair and sustainable mining and metals industry, aiming continuously to strengthen performance across the global mining and metals industry. As a member company, we are required to implement the 10 Mining Principles which define good environmental, social and governance practices, and associated position statements, while also meeting 39 performance expectations.”

Annual report 2025A · The company itself

“Produkternes miljøegenskaber dokumenteres med anerkendte mærkningsordninger som EU Ecolabel og OEKO-TEX ® STANDARD 100, og der udføres livscyklusvurderingerr (LCA) og miljøvaredeklarationer (EPD).”

Annual report 2025A · The company itself

“Privacy concerns could damage our reputation and deter current and potential clients from using our products and services. Concerns relating to global data privacy have the potential to damage our reputation and deter current and prospective clients from using our products and services or attending our conferences.”

Annual report 2025A · The company itself

“This 2025 annual report marks Genmab’s second year reporting in accordance with the European Sustainability Reporting Standards”

Annual report 2025A · The company itself

“The QMS is certified according to ISO13485:2016 and Regulation (EU) 2017/746 on in Vitro Diagnostic Medical Devices and complies with national and international standards, laws and regulations for design and development, manufacturing, and distribution of in vitro diagnostic products.”

Annual report 2024A · The company itself

“Our business faces increasing scrutiny and regulations related to corporate social responsibility practices and disclosures and we face an increasing risk of damage to our reputation and the value of our brands if we fail to act responsibly and/or in compliance with applicable laws and regulations in a number of areas, such as environmental stewardship and sustainability, supply chain management, climate change, inclusion, workplace conduct, human rights, philanthropy and support for local communities.”

Annual report 2025A · The company itself

“Vi har hållbarhet integrerat i hela värdekedjan, från forskning och utveckling till återvinning. Vår verksamhet är grundad i miljömässigt, socialt och etiskt ansvarstagande, med tydliga ställningstaganden och policyer inom ESG (miljö, socialt ansvar och styrning).”

Annual report 2024A · The company itself

“Vi mener at selskaper som tar hensyn til bærekraft har bedre utsikter for fremtidig lønnsomhet, ved at de håndterer risiko og forstår utviklingen i markedet bedre enn aktører som ikke tar slike hensyn. • Kapitalforvaltningen baseres på FNs 10 Global Compact-prinsipper, som gjelder menneske- og arbeidstakerrettigheter, miljø og bekjempelse av korrupsjon.”

Annual report 2024A · The company itself

“Lovkrav og forordninger vil påvirke bransjen i tiden fremover, særlig når det gjelder IT-sikkerhet, kunstig intelligens, personvern og bærekraft (klima, miljø, arbeidstakerrettigheter, helse, mangfold med mer).”

Annual report 2024A · The company itself

“Alle investeringer vurderes for vesentlig bærekraftsrisiko og konsernmål, som netto nullutslipp innen 2050, samt at leverandører av kapitalforvaltning oppfyller våre prinsipper og har gode prosesser for vurdering av bærekraft. Kapitalforvaltningen i Gjensidige følges opp etter blant annet FNs ti Global Compact-prinsipper, og skal etterleve UN PRI – FNs prinsipper for ansvarlige investeringer. Aktiv dialog med forvaltere, og ekskluderinger, er virkemidler for å påvirke etterlevelse av policy for ansvarlige investeringer og at selskaper som ikke driver ansvarlig ikke får finansiering fra oss.”

Annual report 2024A · The company itself

“Vi ser også en mulighet i å tiltrekke og beholde kunder og med det sikre forsikringsinntekter ved å ha en tydelig vitenskapsbasert strategi for klimautslippskutt i hele verdikjeden.”

Annual report 2024A · The company itself

“Beskrivelse av prosessen for å fastsette og vurdere vesentlig påvirkninger, risikoer og muligheter Gjensidige har gjennomført en dobbelt vesentlighetsanalyse for å identifisere faktisk og potensiell negativ og positiv påvirkning på klima, natur og sosiale forhold, samt finansielle risikoer og muligheter. Den doble vesentlighetsanalysen er en prosess som danner grunnlag hvor hvilke temaer vi skal rapportere på og jobbe strukturert med.”

Annual report 2024A · The company itself

“Sustainability and Other Our businesses are subject to numerous laws and regulations regarding sustainability-related risk oversight, disclosure, and practices at financial institutions and other companies in the U.S. and other jurisdictions.”

Annual report 2025A · The company itself

“E.U. rules include directives, such as the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDDD), both of which have recently been revised, and, once transposed into national law, are expected to expand the scope of sustainability disclosure and due diligence requirements applicable to us. The expanded disclosure requirements are expected to take effect for the year ended 2026, and the due diligence requirements are scheduled to take effect in 2029.”

Annual report 2025A · The company itself

“The CRR and the E.U. member states’ legislation implementing CRD require large institutions with securities traded on a regulated market of a member state to make qualitative and quantitative disclosures relating to sustainability risks on a semi-annual basis. GSBE is expected to become subject to this requirement in 2026.”

Annual report 2025A · The company itself

“We are also exposed to risks resulting from changes in public policy, laws and regulations, or market and public perceptions and preferences in connection with the transition to a less carbon-dependent economy, which could adversely affect our business, results of operations and reputation. Both physical risks associated with climate change and risks associated with the transition to a less carbon-dependent economy may also have a negative impact on the operations or financial condition of our clients and counterparties, which may decrease revenues from those clients and counterparties and increase the credit risk associated with loans and other credit exposures to those clients and counterparties.”

Annual report 2025A · The company itself

“The risks associated with, and the perspective of government officials, regulators, shareholders, employees and other stakeholders regarding, climate change are continuing to evolve rapidly, which makes it difficult to assess the ultimate impact on us of climate change-related risks and uncertainties. In addition, due to divergent stakeholder views relating to climate change, any actual or perceived action, or lack thereof, by us relating to climate change could be perceived negatively by some stakeholders and subject us to criticism, which may adversely affect our business, reputation, and efforts to recruit and retain employees.”

Annual report 2025A · The company itself

“Certifieringar och regelefterlevnad: Kraven att uppfylla och följa olika miljö-, sociala och styrningsfaktorer (ESG), branschstandarder och certifieringar skiljer sig åt såväl mellan länder, som inom länder, och i flera fall mellan städer.”

Annual report 2024A · The company itself

“Regulatoriska krav blir allt striktare och investerare kräver hållbarhetsresultat.”

Annual report 2024A · The company itself

“Gubra Green invests 10% of the Group’s annual pre-tax profit in initiatives that support a net-zero, nature positive future”

Annual report 2025A · The company itself

“Gubra is the first listed company to commit 10% of annual pre-tax profits to initiatives advancing a net-zero and nature-positive future, extending our impact well beyond our footprint.”

Annual report 2025A · The company itself

“Sosial inkludering for forbrukere og/eller sluttbrukere Ikke-diskriminering Risiko: Endrede rammebetingelser og håndhevelsen av disse kan medføre betydelig kostnadspåslag samt behovet for å forenkle tilbudet av multimediale læremidler (egen drift/nedstrøm). lang sikt Informasjonsrelaterte konsekvenser for forbrukere og/eller sluttbrukere Privatliv Risiko: Endrede rammebetingelser innen personvern og informasjonssikkerhet kan medføre betydelig kostnadspåslag (nedstrøm). lang sikt Innsikten fra vårt arbeid med vesentlighetsanalysen er integrert i Gyldendals strategiske prioriteringer og ligger til grunn for våre forretningsmodeller og innovasjonstiltak.”

Annual report 2024A · The company itself

“Hafnia also strives to build trust and confidence within its stakeholder community and incorporate a strong ESG profile. We focus our efforts not only on topics that are material, but also on the ones that are meaningful for the company and our stakeholders.”

Annual report 2022A · The company itself

“In line with the increasing expectations of stakeholders and society – and in doing the right thing for the good of the maritime industry– Hafnia is committed to its role as a responsible industry leader. In 2022, Hafnia has consolidated its material issues and strengthened its ESG governance, strategy, and targets.”

Annual report 2022A · The company itself

“Hållbarhet och ESG. Som en av få kontraktstillverkare redovisar vi vårt hållbarhetsarbete separat i våra delårsrapporter. Vi arbetar aktivt för att minska vår klimatpåverkan och säkerställa att våra leveranskedjor är både hållbara och etiskt ansvarsfulla.”

Annual report 2024A · The company itself

“Bæredygtighed integreret i forretningsmodellen med ambitiøse mål for klima og samfundsansvar”

Annual report 2026A · The company itself

“Fødevaresikkerhed og kvalitet er altafgørende, også set i forhold til en stadig strammere international regulering på fødevareområdet.”

Annual report 2026A · The company itself

“Harboe er desuden påvirket af løbende udvikling i regulering, branchestandarder og efterspørgsel i forhold til bæredygtighed i anvendelsen af råvarer og hjælpematerialer, der kan medføre øgede omkostninger og behov for ændrede produktionsformer.”

Annual report 2026A · The company itself

“Produktion af øl, læskeog maltdrikke kræver betydelige vandressourcer, og kravene til bæredygtighed i både produkter, produktion og supply chain er stadig stigende.”

Annual report 2026A · The company itself

“Our businesses must comply with regulations to control the privacy of customer, employee and third party data, and state, federal and international regulations regarding data privacy are becoming increasingly more onerous. A misuse or mishandling of confidential or proprietary information, including through artificial intelligence technology, could result in legal liability, regulatory action and reputational harm.”

Annual report 2025A · The company itself

“In addition, changes in laws, regulations or executive orders, particularly relating to privacy and data security, may materially impede our ability to execute on business strategies and/or our ability to be competitive.”

Annual report 2025A · The company itself

“Our aspirations, goals and disclosures related to environmental, social and governance matters and the focus on regulators and private litigants among other things on related claims made by companies and funds expose us to numerous risks, including reputational, financial, legal and other risks, that could have an adverse impact on us. California has adopted stringent new climate disclosure requirements, as has the EU. We are subject to Directive (EU) 2022/2464 on corporate sustainability reporting (“CSRD”) which became effective on January 5, 2023.”

Annual report 2025A · The company itself

“Certain of our businesses involve the manufacture and sale of electronic health record (EHR) systems and other products linked to government supported incentive programs, where the EHR systems must be certified as having certain capabilities designated in evolving standards, such as those adopted by CMS and ONC. In order to maintain certification of our EHR products, we must satisfy the changing governmental standards.”

Annual report 2025A · The company itself

“Dessutom omfattas Hexagon av dataskyddsbestämmelser, som fortsätter att utvecklas.”

Annual report 2024A · The company itself

“• Hexagons leverantörer som utgör 50% av inköpta varor kommer att ha vetenskapsbaserade mål senast 2028. • Nyckelleverantörer i högriskområden ska granskas var tredje år.”

Annual report 2024A · The company itself

“Vår strategi inkluderar sju grundläggande pelare som vägleder oss framåt, där hållbarhet är grundläggande för varje pelare.”

Annual report 2024A · The company itself

“Kunderna ställer krav på uppförandekod och certifierade miljöledningssystem. Andra krav rör utfasning av farliga kemiska ämnen samt att hållbarhetsfrågorna implementeras i leverantörsledet.”

Annual report 2024A · The company itself

“In addition, regulators, customers, shareholders, associates, and other stakeholders remain focused on cybersecurity, data privacy, human capital management and sustainability matters and related disclosures. These changing rules, regulations and stakeholder expectations have resulted in, and may continue to result in, increased general and administrative expenses, heightened risks of litigation and enforcement actions, and increased management time and attention spent complying with or meeting such regulations and expectations.”

Annual report 2026A · The company itself

“Corporate Responsibility We are committed to creating long-term value through investing responsibly in our business, environment, people and community. Our Corporate Responsibility ("CR") program is centered around the concept of responsible investment—an overarching strategy that guides our focus and actions across our three main themes of Environmental Stewardship, Social Responsibility and Governance. We believe that a disciplined and proactive approach to addressing critical environmental, social and governance topics enables us to create long-term value for our stockholders and helps us to optimize our portfolio and human capital investments, while maintaining our position as a global sustainability leader.”

Annual report 2025A · The company itself

“We are subject to federal, state, and international laws relating to privacy and data protection, particularly in the U.S., European Union (such as the General Data Protection Regulation (“GDPR”)) and China, and other countries’ legislative and regulatory bodies are increasingly proposing new or more stringent requirements relating to privacy and data protection. These laws and regulations continue to evolve, are increasing in complexity and number and increasingly conflict among the various countries in which we operate, which has resulted in greater compliance risk and cost for us.”

Annual report 2025A · The company itself

“Our aspirations and disclosures related to environmental and societal matters expose us to risks that could adversely affect our reputation and performance. We face increasing attention from the investment community, special interest groups, customers, enforcement authorities and other stakeholders, who may have conflicting views, related to our positions, performance, and disclosures relating to environmental and societal related matters and we are subject to legal and regulatory requirements relating to such positions, performance, and disclosures, which continue to broaden and may be conflicting, both in terms of scope and geography.”

Annual report 2025A · The company itself

“Dessa initiativ stärker vår konkurrenskraft och lockar hyresgäster som delar samma hållbarhetsvärderingar.”

Annual report 2024A · The company itself

“Miljöcertifieringen ger oss en värdefull oberoende granskning av byggnadernas prestanda inom områden som energi, inomhusmiljö och materialval, vilket stödjer vårt fortsatta hållbarhetsarbete. Hufvudstadens mål är att samtliga fastigheter ska vara miljöcertifierade år 2025 och hittills är 84 procent certifierat.”

Annual report 2024A · The company itself

“revisioner, frågeformulär, uppförandekod för leverantörer Tydliga förväntningar gällande hållbarhetskrav Leverantörer Årsstämma, årsredovisning, finansiella rapporter, kvartalsvisa resultatpresentationer, kapitalmarknadsdag, individuella investerarmöten, enkäter och rankningar Genom trovärdigt och värdeskapande hållbarhetsarbete som möter deras investeringsstrategier Investerare och aktieägare Kontinuerliga dialoger, ansökningar och tillståndsprocesser, granskningar av tillsynsmyndigheter, välgörenhetsinitativ (ekonomiska och produktdonationer, volontärdagar) Genom ansvarsfullt företagande som tar hänsyn till gällande lagar och regler samt inverkan på människor och miljön Myndigheter, NGO:s, fackföreningar, lokalsamhällen INTRESSENTER & DERAS SYNPUNKTER Att engagera våra intressenter är en central del av hur vi utvecklar och implementerar vår hållbarhetsstrategi. Genom löpande dialoger och kontakt med anställda, kunder, konsumenter, leverantörer, investerare, aktieägare och andra nyckelintressenter säkerställer vi att vårt hållbarhetsarbete är relevant och i linje med deras behov och förväntningar.”

Annual report 2024A · The company itself

“Genom att aktivt hantera dessa frågor ser vi flera finansiella möjligheter: • Stärkt marknadsposition. Genom att vara ledande inom etiska inköpsprocesser och upprätthålla höga standarder för arbetares rättigheter kan vi differentiera oss från konkurrenter och attrahera kundgrupper som värdesätter hållbarhet. • Ökad tillgång till kapital.”

Annual report 2024A · The company itself

“Key person and staff turnover pose a significant risk to maintaining  company is establishing more developed governance structures and strengthening operations and control mechanisms.  bridge diverging work practices, the Company has undertaken significant work in establishing the underlying principles and values of the company  ESG risk Failure to fulfill regulatory requirements and market expectations across all dimensions of ESG could increase costs or harm the reputation of the Company.”

Annual report 2024A · The company itself

“ESG factors play a critical role in this process, with ESG criteria holding veto power in our sourcing decisions. HydrogenPro aims to collect accurate and comprehensive emissions data from all our major suppliers, allowing us to integrate this information into  use emissions data as a critical factor in procurement decisions, prioritizing partnerships with suppliers who demonstrate a commitment to reducing their  this goal, in 2024, we began implementing the Ignite software application and introduced it to our main suppliers, enabling them to measure and report  suppliers can submit their emissions data, contributing to greater transparency and alignment with our long-term sustainability objectives.”

Annual report 2024A · The company itself

“We also are or may become subject to increasing sustainability-related reporting requirements. For example, the State of California has recently enacted its own legislation requiring extensive climate-related disclosures for companies deemed to be doing business in California, and other states are considering similar laws. We are also subject to the European Union’s Corporate Sustainability Reporting Directive. Complying with such laws and regulations, which may continue to evolve, may impose substantial additional costs and require additional resources, including for third-party attestation to enable the capture, analysis and audit of appropriate data.”

Annual report 2025A · The company itself

“Our veterinary diagnostic products, including instruments, such as Catalyst One and ProCyte One, as well as their corresponding consumables, are veterinary medical devices under the jurisdiction of the FDA under the Food, Drug and Cosmetics Act (the “FDC Act”). Other products under FDA jurisdiction include our rapid assay products such as SNAP devices and enzyme-linked immunosorbent assay plates. While the sale of these products does not require premarket approval by the FDA and does not subject us to FDA inspections or the FDA's current Good Manufacturing Practice regulations (“cGMP”), the FDC Act specifies that these products must not be adulterated, mislabeled, or misbranded.”

Annual report 2025A · The company itself

“Our collection, transfer, protection, security, retention, storage, disclosure, sharing and use of personal data are subject to expanding and increasingly complex laws and regulations in the U.S. and abroad.”

Annual report 2025A · The company itself

“Tarkastelemme vastuullisuutta sosiaalisesta, hallinnollisesta ja taloudellisesta näkökulmasta sekä ympäristöön kohdistuvasta näkökulmasta (ESG).”

Annual report 2025A · The company itself

“Tehty laskenta vahvistaa sitoutumistamme ympäristövastuuseen ja tukee strategista tavoitettamme kehittää palveluita, jotka huomioivat kestävän kehityksen periaatteet ja asiakasyritysten kasvavat vastuullisuustarpeet.”

Annual report 2025A · The company itself

“We develop our business in line with sustainable development to meet the increasing expectations of all our stakeholders.”

Annual report 2025A · The company itself

“Numerous states and localities have enacted or are considering enacting legislation requiring pharmaceutical companies to establish marketing compliance programs, file periodic reports or make periodic public disclosures on sales, marketing, pricing, clinical trials, and other activities. Additionally, as part of the Patient Protection and Affordable Care Act, the U.S. federal government has enacted the Physician Payment Sunshine provisions. These provisions and similar laws and regulations in other jurisdictions where we do business require manufacturers to publicly report certain payments or other transfers of value made to physicians and teaching hospitals.”

Annual report 2025A · The company itself

“Further, many countries and jurisdictions in which we work globally have enacted or are proposing privacy and data protection laws and regulations which govern the collection and use of personal information and which may impose large fines and penalties for noncompliance. For example, in the EU under the General Data Protection Regulation, potential fines for noncompliance are up to €20 million or 4% of annual global revenue, whichever is greater.”

Annual report 2025A · The company itself

“Indutrade | Årsredovisning 2024 30 EXEMPEL PÅ AKTIVITETER UNDER 2024 ■ Fortsatt utveckling av hållbarhetsstrategi, mål och nyckeltal ■ Arbete för att uppfylla Science Based Targets initiatives kriterier samt validering av uppdaterade klimatmål ■ Uppdatering av uppförandekoden för Indutradekoncernen ■ Vidareutveckling av processer för rappor tering samt uppföljning av affärsområdenas och bolagens hållbarhetsprestanda ■ Fortsatt satsning på klimat som strategiskt fokusområde, genom egenutvecklad klimatutbildning, stöd, verktyg och uppföljning ■ Utdelning av vårt hållbarhetspris Indutrade Sustainability Awards för tredje året ■ Förberedelse för rapporteringslagstiftning; CSRD, och due diligence-direktivet, Corporate Sustain ability Due Diligence Directive (CSDDD) ■ Aktiv kunskapsdelning i olika hållbarhetsnätverk inom koncernen Fokusområden och mål Strategiskt ramverk för hållbar utveckling Indutrade har ett strategiskt ramverk som sammanfattar våra fokusområden för hållbar utveckling.”

Annual report 2024A · The company itself

“Vår nya koncernstruktur med fem internationella affärsområden, orienterade mot tydliga marknadssegment och teknologier, förbättrar förutsättningarna för kunskapsdelning kring hållbarhet mellan bolag med liknande verksamheter och möjligheter liksom utmaningar. Den nya organisationen möjliggör också bättre hållbarhetsstyrning och stöd till bolagen, bland annat då affärsområdena tillsatt både Peopleoch hållbarhetsansvariga i sina centrala ledningar.”

Annual report 2024A · The company itself

“Miljömedvetenhet syns hos både beställare och politiker genom EU-regelverk som Taxonomin, EPBD och CSRD.”

Annual report 2024A · The company itself

“The collection, measurement, and reporting of environmental data is subject to evolving reporting standards, including California’s climate disclosure requirements, and similar regulations established by other international regulatory bodies, such as the Corporate Sustainability Reporting Directive in the European Union.”

Annual report 2025A · The company itself

“► 100 procent av nytecknade hyresavtal (över 200 kvm) ska innehålla överenskommelse om hållbarhetssamarbete.”

Annual report 2024A · The company itself

“This control supports precise rebalancing and risk reduction without disrupting long-term positions and helps maintain a clear audit trail for reporting and compliance. • Sustainable Investing Tools • IMPACT by Interactive BrokersSM – IMPACT by Interactive BrokersSM (“IMPACT App”) is a unique, simple and intuitive mobile app that helps customers easily align their investment portfolio with their values. The IMPACT App is intended to allow customers to select their personal investment criteria from thirteen impact goals and principles and to exclude investments based on business practices they would like to avoid.”

Annual report 2025A · The company itself

“Impact Dashboard – The Impact Dashboard is intended to help customers evaluate and invest in companies that align with their principles. Customers can select investments they care about and can measure how both individual securities and their overall portfolio measure up against their criteria. • ESG Scores – ESG Scores from Refinitiv give customers a separate set of tools to help them make investment decisions.”

Annual report 2025A · The company itself

“Companies are scored along several dimensions, such as reducing emissions and supporting human rights, and customers can easily see how companies rank both overall and on each dimension.”

Annual report 2025A · The company itself

“Many jurisdictions have adopted or are proposing or considering proposals to regulate environmental, social or governance, or ESG, data providers, as well as ESG ratings. In December 2024, the EU Regulation on ESG Ratings Providers was published in the Official Journal of the EU. The regulation introduces a regulatory regime for ESG rating providers operating in the EU and will take effect in July 2026.”

Annual report 2025A · The company itself

“For example, policymakers in various jurisdictions (including the EU and the State of California) have adopted or are considering adopting requirements for companies to make disclosures or take additional actions, including value chain diligence, related to various ESG matters. These laws are not always consistent, and, in some instances, other policymakers have taken actions to constrain companies’ consideration of such matters, which increases the complexity and cost of compliance.”

Annual report 2025A · The company itself

“Den dubbla väsentlighetsanalys vi genomförde under året bekräftade att våra prioriteringar ligger rätt – klimatförändringar, den egna arbetskraften och ansvarsfullt företagande är fortsatt de viktigaste frågorna.”

Annual report 2024A · The company itself

“Syftet med regelverket är att öka transparensen och fokuset på hållbarhet ytterligare. Kravet i Sverige är att börja rapportera enligt CSRD för räkenskapsåret 2025, men vi har valt att rapportera så mycket som möjligt redan i år.”

Annual report 2024A · The company itself

“H ur ser Latour på hållbarhet? – Hållbarhet är fundamentalt för Latour och genomsyrar allt vi gör. Vi arbetar långsiktigt, både med våra investeringar och i utvecklingen av våra bolag, och vi är övertygade om att hållbara verksamheter skapar de mest långsiktiga värdena.”

Annual report 2024A · The company itself

“En stark kultur byggd på omtanke där människor vågar vara kreativa och hjälpa varandra är något som genomsyrar hela Latour. F ör de helägda bolagen är Latours uppförandekod ett minimikrav som betonar de principer vilka styr förhållandet till medarbetare, affärspartners och andra intressenter.”

Annual report 2024A · The company itself

“Att väva in hållbarhetsperspektivet i affären är en viktig del i arbetet med att bygga långsiktigt starka bolag.”

Annual report 2024A · The company itself

“Intressenter tog upp vikten av att Investor driver portföljbolagen att arbeta med hållbarhetsfrågor och skapa hållbara affärsmodeller.”

Annual report 2022A · The company itself

“Vi är övertygade om att hållbarhet integrerat i affärsmodellen är en förutsättning för att skapa långsiktigt värde.”

Annual report 2022A · The company itself

“Samtidigt måste de fortsätta att investera i innovation, digitalisering och hållbarhet med fokus på områden med uthållig tillväxt för att driva långsiktig, lönsam tillväxt.”

Annual report 2022A · The company itself

“Sven Nyman (Vice ordförande), Helena Saxon • SEB har en stark position inom företagsaffärer på hemmamarknaderna och är en viktig katalysator för kundernas pågående övergång till ökad hållbarhet. • 2022 var ett framgångsrikt år för SEB som fortsatte att använda sin starka balansräkning och sitt starka rådgivningserbjudande för att stödja kunderna. Tillsammans med höjda räntor resulterade detta i rekordhöga intäkter ochvinster. • Fokus för framtida värdeskapande: Hjälpa nordiska och internationella företagskunder med övergången till ökad hållbarhet, fortsätta investeringarna i automatisering och dataanalys för att driva operationell effektivitet och kundnytta och samtidigt bibehålla en stark risk- och regelefterlevnadskultur.”

Annual report 2022A · The company itself

“En av våra tre strategiska prioriteringar är att nå våra hållbarhetsmål, vilket speglar Investors bestämda uppfattning att en hållbar affärsmodell är en förutsättning för långsiktigt värdeskapande.”

Annual report 2022A · The company itself

“Cheferna för Noterade bolag och Patricia Industries ansvarar för att integrera hållbarhet i investeringsoch ägarstrategierna, inklusive riskbedömning, due diligence, kontinuerlig övervakning och uppföljning. Investors business teams, inklusive styrelserepresentanten, interagerar minst årligen med företagen kring hållbarhet.”

Annual report 2022A · The company itself

“Våra fokusområden är att hantera det rådande volatila marknadsläget och fortsätta att framtidssäkra våra företag för att driva hållbar tillväxt, ytterligare stärka konkurrenskraften och maximera långsiktigt värdeskapande. För oss innebär detta fortsatt fokus på hållbarhet, innovation, digitalisering samt successionsplanering och talangutveckling.”

Annual report 2022A · The company itself

“INVISIOs produkter faller under EU-direktivet RoHS 2) och EU-förordningen REACH 1) . Strängare krav i substanslagstiftningen kan leda till ökade kostnader i produktionsfasen till följd av utfasning av material och/eller krav på omcertifiering av produkter.”

Annual report 2024A · The company itself

“Our Genuine CARE™ values serve as the foundation for our work, and the underlying principles of clear communication, integrity, responsibility, innovation, adaptability, and a welcoming workplace are designed to create an authentic experience for our residents, shareholders, and associates. We also work to advance sustainability, which is an important part of our strategic business objectives and is critical to our long-term success.”

Annual report 2025A · The company itself

“Sustainability and Corporate Responsibility As one of the nation’s premier home leasing and management companies, we have an opportunity to make a profound impact through sustainability and corporate responsibility initiatives. We are committed to engaging with our communities to make meaningful and long-lasting impacts on those around us. We are dedicated to fostering a better way of living for our residents and empowering our associates to advance efforts that make our company more innovative and our processes more sustainable.”

Annual report 2025A · The company itself

“Vendor Practices We have adopted a Vendor Code of Conduct that extends our values to company vendors and highlights our commitment to ethical business practices, fair and safe labor conditions, the protection of human rights, sustainability, and regulatory compliance. This code defines the expectations we hold for our vendors to align with the standards we strive to uphold in every aspect of our operations.”

Annual report 2025A · The company itself

“We are a global leader in protecting individual patient privacy. We use a wide variety of privacy-enhancing technologies and safeguards to protect individual privacy while generating and analyzing information on a scale that helps healthcare stakeholders identify disease patterns and correlate with the precise treatment path and therapy needed for better outcomes.”

Annual report 2025A · The company itself

“In addition, laws and regulations governing data privacy and the unauthorized disclosure of personal data, including the European Union General Data Protection Regulation ("GDPR"), the United Kingdom Data Protection Act, the California Consumer Privacy Act, the California Privacy Rights Act, and other emerging U.S. state and global privacy laws pose increasingly complex compliance challenges and potentially elevate costs and may require changes to our business practices resulting from the variation of regulatory requirements and increased enforcement frequency. Failure to comply with these laws and regulations, including related regulatory enforcement and/or private litigation resulting from a potential privacy breach, could result in governmental investigations, significant fines and penalties, damages from private causes of action, or reputational harm.”

Annual report 2025A · The company itself

“Our domestic and international sales and operations are subject to risks associated with changes in laws, regulations and policies (including environmental and employment requirements, export/import laws, tax policies, integrated financial/non-financial reporting requirements, such as the Corporate Sustainability Reporting Directive and the Corporate Sustainability Due Diligence Directive in the European Union and other similar legal requirements).”

Annual report 2025A · The company itself

“There is increasing scrutiny from governmental organizations, clients, investors, suppliers, partners, communities, employees and other stakeholders on companies’ practices and disclosures related to sustainability and corporate responsibility, including with respect to climate change and carbon emissions, human rights, ethics, supply chain management and human capital management.”

Annual report 2025A · The company itself

“EJENDOMSSKATTER Ejendomsmarkedet står fortsat med uvisheder omkring de nye offentlige ejendomsvurderinger, som skal udgøre skaegrundlaget for grundskyld og dækningsafgi for erhvervsejendomme. Den politiske aale fra  er mundet ud i en lovændring i , fremsat af Skaeministeriet, som vedrører en stigningsbegrænsningsordning for dækningsafgi af erhvervsejendomme for at begrænse størrelsen af eerreguleringen.”

Annual report 2025A · The company itself

“K2A:s produktion är miljöcertierad enligt Svanen.”

Annual report 2024A · The company itself

“Operationella risker, forts Hantering Externa förväntningar, till exempel från myndigheter, kunder, leverantörer eller investerare, kan komma att öka kraven relaterade till miljö, socialt ansvar och bolagsstyrning (ESG). Som en följd av detta kan Karnell tvingas införa strängare ESG-mål eller standarder.”

Annual report 2024A · The company itself

“Ett ökat hållbarhetsfokus skapar ökade krav på alltmer formaliserad styrning och redovisning inom hela dess spektra; miljö, socialt och styrning (ESG, Environment, Social, Governance).”

Annual report 2024A · The company itself

“Regulations and legislation Changes in national and international regulations, for example restrictions related to private label products or new sustainability requirements, could impact the operating conditions for business and profitability.”

Annual report 2025A · The company itself

“Relationships with suppliers and service providers Potential positive impact Downstream Short-, medium- and long-term Kesko‘s requirements for suppliers and service providers, such as commitment to the K Code of Conduct for business partners, promote an ethical and sustainable value chain.”

Annual report 2025A · The company itself

“Key events during the financial year Kesko ranked as the world’s most sustainable company in the ’Consumer Staples’ category on the 2025 ‘Global 100 Most Sustainable Corporations’ listing.”

Annual report 2025A · The company itself

“Differing views on corporate responsibility and sustainability could adversely affect our reputation and our business and results of operations. Views about corporate responsibility and sustainability-related issues are differing, dynamic, and rapidly changing.”

Annual report 2025A · The company itself

“Companies in our industry are also targeted for engaging or not engaging in business with specific customers or with customers in particular industries. Additionally, however we respond to such criticism, we face the risk that current or potential customers may decline to do business with us (or encourage others to do so) or current or potential employees refuse to work for us and could subject us to litigation or regulatory action.”

Annual report 2025A · The company itself

“We have incurred, and will continue to incur, expenses to comply with privacy and data protection standards and protocols imposed by law, regulation, industry standards and contractual obligations. Increased regulation of data collection, use, and retention practices, including self-regulation and industry standards, changes in existing laws and regulations, including reporting requirements, enactment of new laws and regulations, increased enforcement activity, and changes in interpretation of laws, could increase our cost of compliance and operation, limit our ability to grow our business or otherwise harm our business.”

Annual report 2025A · The company itself

“Our inability to address adverse publicity or other issues, including with respect to product safety, quality, efficacy, environmental impacts (including packaging, energy and water use and waste management), substances and ingredients of potential concern, inclusion and belonging, human rights and other social responsibility or similar matters, or breaches of consumer, customer, supplier, employee or other confidential information, real or perceived, could negatively impact sentiment towards us and our products and brands, and our business and financial results could suffer.”

Annual report 2025A · The company itself

“As a global company, we are subject to a wide variety of laws and governmental regulations across all of the countries in which we do business, including laws and regulations involving marketing, antitrust, anti-bribery or anti-corruption, data privacy, product liability, product composition or formulation, packaging content or corporate responsibility after consumer purchase, environmental impact, intellectual property, employment, healthcare, tax or other matters.”

Annual report 2025A · The company itself

“Some investors in our investment vehicles, stockholders, regulators and other stakeholders are focused on sustainability matters, such as climate change and environmental stewardship, human rights, support for local communities, corporate governance and transparency, or other environmental- or social-related areas. Certain investors and other stakeholder groups have also increased their activism and scrutiny of asset managers’ approaches to considering sustainability matters as part of their investment management decision-making, including by urging alternative asset managers to take (or refrain from taking) certain actions that could adversely impact the value of an investment and at times have conditioned future capital commitments on such actions.”

Annual report 2025A · The company itself

“Compliance with sustainability-related requirements often depends on collecting, measuring, and reporting information from portfolio companies and other third parties, which may be incomplete, inconsistent, or difficult to obtain. Sustainabilityrelated reporting is subject to evolving standards and methodologies and may require the use of assumptions or estimates that could later be challenged. Collecting, measuring, and reporting sustainability information can be costly, difficult, and time-consuming and may present operational, legal, and reputational risks.”

Annual report 2025A · The company itself

“Ett ramavtal tecknades med Swedbank om hållbarhetslänkad finansiering för cirka 10 procent av KlaraBos totala låneportfölj. Avtalet innebär att prissättningen på finansieringen delvis kopplas till bolagets hållbarhetsmål.”

Annual report 2024A · The company itself

“Vi har satt nya ambitiösa mål och har påbörjat förberedelserna inför rapportering enligt EU-direktivet CSRD och anpassar oss successivt. Årets årsredovisning tar höjd för kraven, men vi inväntar klar göranden kring Omnibus-förslaget för att förstå hur det påverkar KlaraBo.”

Annual report 2024A · The company itself

“as an important element of its stakeholder engagement. The outcome of this engagement and dialog has a direct       - ucts, avoidance of certain input materials, or reducing        - ment and the Board of Directors.”

Annual report 2024A · The company itself

“Failure to meet or implement regulatory requirements in due course with respect to, for instance, data protection, confidentiality agreements, and fraud constitute a risk.”

Annual report 2025A · The company itself

“Market developments in consolidation can affect the demand for Konsolidator’s product. Changes in legislation related to the requirement of presenting consolidated financial statements can also impact the demand for consolidation systems.”

Annual report 2025A · The company itself

“In accordance with Koskisen’s operational policy, the origin of wood, and consequently its relationship with biodiversity-sensitive areas, is known in all situations. All available information and suppliers’ self-declarations are used to verify the origin of the wood.”

Annual report 2025A · The company itself

“The principles of sustainable procurement and use of renewable natural resources are discussed in the company’s operational policy, environmental principles and principles for wood procurement. In addition to legal requirements, the principles of wood procurement are based on the generally recognised forest management recommendations and the requirements set by the PEFC or FSC chains of custody.”

Annual report 2025A · The company itself

“In addition to the laws and regulations described above, the Company may need to comply with numerous other state and federal consumer protection, data protection, international data transfers, privacy and similar laws that govern the confidentiality, security, use, and disclosure of personal information, as well as breach notification responsibilities. To the extent applicable, newer laws such as the CCPA, the Washington My Health My Data Act, and similar consumer privacy laws in other states, may impose additional obligations to the Company. These laws vary in scope and by jurisdiction, but they most commonly regulate or restrict the collection, use, and disclosure of medical and financial information and other personal information.”

Annual report 2025A · The company itself

“Governmental authorities, non-governmental organizations, customers, investors, external stakeholders, and employees are sensitive to matters of corporate responsibility and governance, such as environmental sustainability. This focus on these concerns may lead to new requirements that could result in increased costs associated with developing, manufacturing, and distributing the Company’s offerings.”

Annual report 2025A · The company itself

“En växande efterfrågan på kontor som speglar företagets varumärke samt ökade ESG-krav (Environmental, Social, and Governance) skapar nya behov av hållbar inredning.”

Annual report 2024A · The company itself

“Ett annat exempel är det pågående införandet av en hållbarhetsplattform som möjliggör insamling, spårning och analys av hållbarhetsdata från leverantörsleden.”

Annual report 2024A · The company itself

“Lammhults använder även BIMobjects plattform Prodikt för att redovisa hållbarhetsdata gentemot kunder. EPD finns nu på plats för över hundra produkter i Lammhults sortiment, vilket möter kundernas ökade krav på transparens kring hållbart producerade möbler.”

Annual report 2024A · The company itself

“Mycket av Lammhults sortiment har hållbarhetsmärkningen Möbelfakta, vilket innebär att en möbel uppfyller svenska krav på kvalitet, säkerhet, miljö och socialt ansvar. Möbelfakta är en väl etablerad certifiering inom den svenska inredningsbranschen och används ofta som en kvalitetsgaranti i upphandlingar för offentlig och professionell miljö.”

Annual report 2024A · The company itself

“Library Interiors är FSC-certifierat och kan erbjuda FSCcertifierade produkter direkt till slutkund. Affärsområdet erbjuder även spårbarhet från tillverkning till slutkund.”

Annual report 2024A · The company itself

“Under året har affärsområdet fått sin första EU Ecolabelcertifiering (EU-blomman) för produkten 60/30 Classic Hyllsystem. Ytterligare produkter är i process att bli certifierade.”

Annual report 2024A · The company itself

“Governments, investors, customers, employees and other stakeholders are increasingly focusing on corporate environmental, social and governance (“ESG”) practices and disclosures, and expectations in this area are rapidly evolving and growing, and new ESG laws and regulations are expanding mandatory disclosure, reporting and diligence requirements. We have announced various ESG goals, commitments and initiatives, including with respect to climate change and other sustainability matters, our economic and social impact and human capital management.”

Annual report 2025A · The company itself

“Increasing attention and changing expectations from governmental authorities, customers, and our employees with respect to our ESG-related practices may impose additional costs on us or expose us to new or additional risks. There is increased attention from governmental organizations, customers, employees, and other stakeholders globally on companies’ environmental, social, and governance (“ESG”) practices and disclosures such as diversity, equity and inclusion, workplace culture, community investment, environmental management, climate impact, and information security.”

Annual report 2026A · The company itself

“If our practices and disclosures do not meet evolving rules and regulations or our stakeholder expectations and standards (or if we are viewed negatively based on positions we do or do not take or work we do or do not perform or cannot publicly disclose for certain customers and industries), then our reputation, our ability to attract or retain leading experts, employees and other professionals and our ability to attract new business and customers could be negatively impacted, as could our attractiveness as an investment, service provider, employer, or business partner.”

Annual report 2026A · The company itself

“In addition, our reputation and customer relationships may be negatively impacted as a result of our practices and policies, actual or perceived, related to climate change, including our involvement, or our customers’ involvement, in certain industries or projects associated with causing or exacerbating climate change, as well as any decisions we make to continue to conduct or change our activities in response to considerations relating to climate change.”

Annual report 2026A · The company itself

“Stakeholders are increasingly scrutinizing environmental, social and governance (“ESG”) practices, and stakeholders’ expectations regarding ESG practices are diverse, rapidly changing, and sometimes in conflict. If we are unable to satisfy the evolving ESG-related expectations of certain stakeholders, particularly as it relates to climate change, we may suffer reputational harm, which may cause our stock price to decrease or cause certain investors and financial institutions not to purchase our securities or provide us with capital or credit on favorable terms, which may cause our cost of capital to increase.”

Annual report 2025A · The company itself

“We believe an integrated value chain is important to meet the markets’ increasingly strict requirements for traceability, food safety, product quality, cost-effectiveness, sustainability and continuous delivery.”

Annual report 2024A · The company itself

“Lifco omfattas troligen av EU:s Corporate Sustainability Due Diligence Directive (CSDDD) och har påbörjat förberedelser för implementeringen.”

Annual report 2024A · The company itself

“Additionally, there is attention from the media, stockholders, activists, political leadership, regulatory authorities, and other stakeholders on climate, social, and other sustainability matters. The perception that we or others in our industry or supply chain have failed to act in an appropriate manner, whether or not valid, results in publicity that can negatively affect our business, brand, and reputation, as well as result in increased scrutiny from political leadership, legislators and regulatory authorities.”

Annual report 2025A · The company itself

“We are required to comply with federal, state and international laws regarding privacy and the storing, sharing, use, disclosure and protection of personally identifiable information and user data, an area that is increasingly subject to legislation and regulations in numerous jurisdictions around the world, including the European Union’s GDPR (as defined and discussed below in Item 1A.—Risk Factors) and the California Consumer Protection Act. In addition, the Digital Services Act (“DSA”) in the European Union came into force in November 2022 and the majority of its substantive provisions took effect in February 2024. The DSA imposes new obligations around illegal services or content on our sites, traceability of business users, and enhanced transparency measures.”

Annual report 2025A · The company itself

“Data privacy and cybersecurity laws are constantly changing, and the implementation of these laws has become more complex. In order to maintain our compliance with such laws as they come to fruition, we may sustain increased costs and change our business policies and processes in order to adapt to new requirements that are or become applicable to us.”

Annual report 2026A · The company itself

“A number of our customers have adopted, or may adopt, procurement policies that include social and environmental responsibility provisions or requirements that their suppliers should comply with, or they may seek to include such provisions or requirements in their procurement terms and conditions. These legal and regulatory requirements, as well as investor expectations, on corporate environmental and social responsibility practices and disclosure, are subject to change, can be unpredictable, and may be difficult and expensive for us to comply with, given the complexity of our supply chain. If we are unable to comply with, or are unable to cause our suppliers or contract manufacturers to comply with such policies or provisions, or if we are unable to meet the requirements of our customers and investors, a customer may stop purchasing products from us or an investor may sell their shares, and may take legal action against us, which could harm our reputation, revenue and results of operations.”

Annual report 2026A · The company itself

“For example, the European Union adopted the GDPR, which became effective in May 2018, establishing stringent requirements for data protection in Europe and providing for substantial penalties for noncompliance. Additionally, California has the CCPA, which went into effect on January 1, 2020, and which was amended and supplemented by California Privacy Rights Act (“CPRA”), which went into effect on January 1, 2023.”

Annual report 2026A · The company itself

“Our commitment to sustainability remains unwavering. Last year, we published our 2023 Sustainability Report, integrating our climate report, and continue to prioritize responsible mining practices and community development.”

Annual report 2024A · The company itself

“Varsinkin kestävyysraportointidirektiivi on raportointivelvoitteen laajuuden ja yksityiskohtaisuuden osalta liian kunnianhimoinen. Vastuullisuustyöstä on tullut liian raportointikeskeinen, jolloin taka-alalle on jäänyt yritysten strateginen työ liiketoiminnan uudistamiseksi vastaamaan kestävää kehitystä.”

Annual report 2025A · The company itself

“Luotean strategiaan tai liiketoimintalliin ei ole tehty Sidosryhmä Keskeiset mielenkiinnon kohteet 2025 Odotuksiin vastaaminen Vuorovaikutus Asiakkaat Asiakaspalvelu- ja tyytyväisyys, toimitusvarmuus, viestintä ja raportointi, hinnoittelu, työolot arvoketjussa, kiertotalous, kierrätys ja ennallistaminen, energiatehokkuus. • Luotea kehitti kestävyyttä edistäviä liiketoimintaratkaisuja liittyen luonnon ennallistamiseen ja monimuotoisuuden edistämiseen. • Luotea on jatkanut digitaalisten asiointikanaviensa kehitystä toimivuutta sekä liiketoimintakohtaisia toimenpiteitä palveluiden tehokkuuden optimoimiseksi asiakas rajapinnassa.”

Annual report 2025A · The company itself

“Luotea osallistuu myös Ecovadis -yritysvastuuarviointiin, joka mittaa Luotean vastuullisuustyön laatua ja, jota kautta Luotea saa yritysvastuuseen liittyviä kysymyksiä ja kehitysehdotuksia asiakkailtaan.”

Annual report 2025A · The company itself

“Liiketoiminnan harjoittamisen keskeiset positiiviset vaikutukset liittyvät Luotean hyvän yrityskulttuurin, kuten yhtiön eettisiin periaatteiden, korruption ja lahjonnan torjumisen käytänteisiin sekä väärinkäytösten ilmoittamisen prosesseihin.”

Annual report 2025A · The company itself

“Eettisten periaatteiden noudattaminen on Luotealle ensisijaisen tärkeää. Se vahvistaa yhtiön mainetta vastuullisena toimijana ja luo luottamusta asiakkaiden ja sidosryhmien keskuudessa.”

Annual report 2025A · The company itself

“SBM-3 – Olennaiset vaikutukset, riskit ja mahdollisuudet sekä niiden vuorovaikutus strategiaan ja liiketoiminta-mallien kanssa Luotean olennaiset vaikutukset, riskit ja mahdollisuudet perustuvat vuoden 2025 aikana päivitettyyn kaksoisolennaisuusanalyysin. Päivitystyössä arvioitiin Luotean liiketoiminnoissa ja toimintaympäristössä tapahtuneita muutoksia ja muutosten merkitystä aiempaan vuonna 2024 tehtyyn olennaisuuden arvioon.”

Annual report 2025A · The company itself

“The Company is subject to laws and regulations relating to the privacy of the information of customers, clients, employees or others, and any failure to comply with these laws and regulations could expose the Company to liability and/or reputational damage. The Company is also subject to laws and regulations relating to the privacy of the information of customers, clients, employees or others, and any failure to comply with these laws and regulations could expose the Company to liability and/or reputational damage.”

Annual report 2025A · The company itself

“Significant examples include the General Data Protection Regulation, the United Kingdom General Data Protection Regulation, known as The Data Protection Act of 2018, and the California Consumer Privacy Act and corresponding regulations.”

Annual report 2025A · The company itself

“Revision of Magnora’s sustainability framework Magnora revised its framework for sustainability in dialogue with stakeholders.”

Annual report 2024A · The company itself

“Improper collection, use, disclosure, cross border transfer, retention and other processing of confidential, personal, or proprietary data could result in regulatory scrutiny, legal and financial liability, or harm to our reputation. In operating our business and providing services and solutions to clients, we store and transfer sensitive employee and client data, including personal data, in and across multiple jurisdictions.”

Annual report 2025A · The company itself

“As these reporting requirements and standards evolve, we continue to evaluate and update our public disclosures in these areas, including refining our disclosure of metrics and sustainability goals in accordance with the guidance and our own business responsibility assessments and priorities. These disclosures, metrics and sustainability goals and any failure to accurately report or comply with federal, state or international laws and regulations, or achieve progress on our metrics and sustainability goals on a timely basis, or at all, may result in legal and regulatory proceedings against us and negatively impact our reputation.”

Annual report 2025A · The company itself

“In addition, heightened regulatory scrutiny of environmental and sustainability-related products, funds, investment strategies and advice has increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements, or that we have otherwise run afoul of regulation. Such perceptions or accusations could damage our reputation, result in litigation or regulatory enforcement actions, and adversely affect our business.”

Annual report 2025A · The company itself

“Organizations that provide information to investors on corporate governance and related matters have also developed ratings processes for evaluating companies on their approach to business responsibility, and unfavorable ratings of our company or our industries may lead to negative investor sentiment and the diversion of investment to other companies or industries, exclusion of our stock from business responsibility-oriented indices or investment funds or harm our relationships with regulators and the communities in which we operate.”

Annual report 2025A · The company itself

“The impact of new laws and regulations, negative public perception, adverse publicity or negative comments in social media could damage our reputation, and be costly to defend, if we do not, or are not perceived to, adequately address these issues. Any harm to our reputation could impact colleague engagement and retention and the willingness of clients and our partners to do business with us.”

Annual report 2025A · The company itself

“our ESG strategy supports long-term busi-ness resilience by embedding sustainability considerations”

Annual report 2026A · The company itself

“In addition, there are various compliance obligations for companies that process personal data of certain individuals, including such obligations required by the European Union’s General Data Protection Regulation (GDPR), which affects all member states of the European Economic Area, and the California Consumer Privacy Act (CCPA) and other state comprehensive privacy laws. These types of data privacy laws create a range of compliance obligations for companies that process personal data of certain individuals and increases financial penalties for non-compliance.”

Annual report 2025A · The company itself

“Many of our markets are subject to increasing, conflicting and highly prescriptive legislative, regulatory or administrative developments and enforcement priorities involving, among other matters, restaurant operations, product packaging and extended producer responsibility, marketing, use of information technology systems, the nutritional and allergen content and safety of our food and other products, labeling and other disclosure practices.”

Annual report 2025A · The company itself

“An increasing number of our markets have enacted privacy and data protection requirements (including the European Union’s General Data Protection Regulation and various U.S. state-level laws), and further requirements are likely to be proposed or enacted in the future.”

Annual report 2025A · The company itself

“The Company also strives to weave human rights into its day-to-day practices, helping fulfill its commitment to respect the rights of all people and communities who produce, serve, and enjoy McDonald’s food. The Company’s commitment to respect human rights is set out in its Human Rights Policy and is in line with the United Nations Guiding Principles on Business and Human Rights (UNGPs).”

Annual report 2025A · The company itself

“Investors, regulators, employees, customers, and other stakeholders continue to focus on companies’ governance and sustainability (“G&S”) practices and policies, including those related to human capital management, climate change, environmental responsibility, and social impact.”

Annual report 2026A · The company itself

“Furthermore, the G&S regulatory landscape is evolving and uncertain. New or revised laws and policies, or changes in the interpretation of existing laws and policies, could increase our compliance costs and expose us to legal risks.”

Annual report 2026A · The company itself

“Our business is also affected by data privacy, security and digital health laws, such as the European Health Data Space (EHDS) regulation, as well as government payor cost containment initiatives, and environmental health and safety laws and regulations.”

Annual report 2026A · The company itself

“There is continued focus from our stakeholders, as well as regulatory authorities in the U.S., E.U. and other global jurisdictions in which we operate, on sustainability practices and disclosure. If we do not succeed in meeting or are perceived as not meeting goals and objectives relating to environmental stewardship, inclusion initiatives, supply chain practices, good corporate governance, workplace conduct and support for local communities, or if we do not effectively respond to new or revised legal, regulatory or reporting requirements concerning climate change, inclusion, or other sustainability concerns, we may be subject to regulatory fines and penalties, including potential loss of eligibility as a U.S. government contractor, our reputation or the reputation of our brands may suffer, we may be unable to attract and retain top talent, and our stock price may be negatively affected.”

Annual report 2026A · The company itself

“För första gången får MEKO det högsta hållbarhetsbetyget AAA av det ledande internationella rankningsinstitutet MSCI i deras ESG-rakning.”

Annual report 2024A · The company itself

“•Legal factors, including product liability claims, antitrust litigation and governmental investigations, including tax disputes, environmental concerns and patent disputes with branded and generic competitors, any of which could preclude commercialization of products or negatively affect the profitability of existing products. •Cyber-attacks on the Company’s or third-party providers’ IT systems, which could disrupt the Company’s operations. •Lost market opportunity resulting from delays and uncertainties in the approval process of the FDA and/or foreign regulatory authorities. •Increased focus on privacy issues in countries around the world, including the U.S., the EU, and China. The legislative and regulatory landscape for privacy and data protection continues to evolve, and there has been an increasing amount of focus on privacy and data protection issues with the potential to affect directly the Company’s business, including laws in a majority of states in the U.S. requiring security breach notification.”

Annual report 2025A · The company itself

“Environmental and emissions reporting obligations will increase. Intermediate Short Metso Corporation - Board of Directors' report and financial statements 2025 |69 Climate change related risks Category Description Financial impact Time horizon Physical risks Chronic Customers’ access to inputs, e.g. water, can be hindered by chronic changes in the environment.”

Annual report 2025A · The company itself

“Customer demands and regulations related to conflict-free minerals and other substances incorporated into or used to manufacture our products may force us to incur additional expenses. Under the Dodd-Frank Wall Street Reform and Consumer Protection Act, in August 2012, the SEC released investigation, and disclosure requirements regarding the use of "conflict" minerals mined from the Democratic Republic of Congo and adjoining countries.”

Annual report 2026A · The company itself

“In addition to concerns over "conflict" minerals mined from the Democratic Republic of Congo, our customers may require that other minerals and substances used within our supply chain, manufacturing processes, or contained in our products be evaluated and reported on. An increase in reporting obligations will increase associated operating costs.”

Annual report 2026A · The company itself

“Compliance with responsible sourcing requirements and any related regulations could increase our operating costs or limit the supply and increase the cost of certain materials, supplies, and services, and if we fail to comply, customers may reduce purchases from us or disqualify us as a supplier.”

Annual report 2025A · The company itself

“In recent years, there has been an increased focus from stakeholders on sustainability and governance matters, including greenhouse gas emissions and climate-related risks, carbon-free electricity, water stewardship, waste management, inclusion, responsible sourcing and supply chain, and human rights. We actively manage these issues and have established and publicly announced certain sustainability goals, commitments, and targets which we may refine or modify further in the future.”

Annual report 2025A · The company itself

“Such risks and uncertainties include: •reputational harm, including damage to our relationships with customers, suppliers, investors, governments, or other stakeholders; •adverse impacts on our ability to manufacture and sell products and maintain our market share; •the success of our collaborations with third parties; •loss of business due to failure to meet our customers’ sustainability targets; •increased risk of litigation, investigations, or regulatory enforcement action; •unfavorable sustainability and governance ratings or investor sentiment; •diversion of resources and increased costs to control, assess, and report on sustainability and governance metrics; •our ability to achieve our goals, commitments, and targets within timeframes announced; •increased costs to achieve our goals, commitments, and targets; •unforeseen operational and technological difficulties; •access to and increased cost of capital; and •adverse impacts on our stock price.”

Annual report 2025A · The company itself

“We also are or may become subject to new sustainability laws and regulations, such as the State of California’s new climate change disclosure rules. Compliance with these laws and regulations, as well as increased scrutiny from regulators, customers and other stakeholders on our sustainability practices, could result in additional costs and expose us to new risks.”

Annual report 2025A · The company itself

“Third-party expectations relating to environmental, social and governance factors may impose additional costs and expose us to new risks. We have a significant institutional investor base, and there is a heightened focus from institutional investors and other stakeholders on corporate responsibility, specifically related to environmental, social and governance, or ESG, factors.”

Annual report 2025A · The company itself

“In addition, the criteria by which companies’ ESG practices are assessed are evolving and inconsistent, which could result in greater expectations of us and cause us to undertake costly initiatives to satisfy any new or contradictory criteria.”

Annual report 2025A · The company itself

“Ett ytterligare initiativ är EU-direktivet Green Claims, som förväntas träda i kraft 2026 och syftar till att stärka trovärdigheten i företagens hållbarhetspåståenden. Något som kan skapa konkurrensfördelar för de företag som redan arbetar med bevisade hållbarhetme - toder, såsom ekologiskt.”

Annual report 2024A · The company itself

“– Ändrad lagstiftning avseende krav på alltmer omfattande kontroller av egen verksamhet och en komplex värdekedja. – Ändrad lagstiftning avseende skatter eller avgifter på koldioxidutsläpp kan leda till ökade kostnader kopplade till transport, produktion och materialanvändning. – Ökade direkta kostnader på grund av krav på tekniska innovationer, hårdare lagstiftning och krav kopplade till råvaror, materialanvändning, produktion och miljömärkning av våra produkter och tjänster. – Ökade legala risker på grund av krav på alltmer omfattande kontroller av en komplex värdekedja. – Nuvarande marknadspreferenser förväntas ändras, exempelvis genom ökad efterfrågan på produkter med lågt klimatavtryck. – Extremväder och bestående klimatförändringar har redan och kommer fortsätta att försvåra tillgång av nyckelråvaror och bidra till ökade operativa kostnader genom ökade priser på råvaror, energi och transport.”

Annual report 2024A · The company itself

“Det finns även politiska och regulatoriska skeenden som talar till företagets fördel, t ex den märkning av solpaneler och annan utrustning som ligger som ett EU-förslag och som skulle visa den totala klimatpåverkan av utrustningen sett över en livscykel. Här ligger Midsummers produkter extremt väl till.”

Annual report 2024A · The company itself

“Allmän regelefterlevnadsrisk inklusive att bedriva verksamhet i en listad miljö, GDPR (i EU och motsvarande regler i Kina), MAR, cybersäkerhet, konkurrenslagstiftning, hållbarhetslagstiftning, överträdelser av uppförandekoder, nya kinesiska bestämmelser (utan anståndsperioder), import/exportbestämmelser, sanktionsregler, regler gällande farliga kemikalier mm.”

Annual report 2024A · The company itself

“Issues and regulations related to climate change, sustainability, human rights and human capital, and stakeholder response thereto may have an adverse effect on our business, financial condition and results of operations and may damage our reputation. Companies across all industries are facing increasing scrutiny relating to their workforce and environmental practices and policies.”

Annual report 2025A · The company itself

“We have announced, and may from time to time announce, certain initiatives, including goals, targets and other objectives, related to sustainability matters. Our efforts to research, establish, accomplish, and accurately report on these goals, targets and other objectives do not guarantee we will ultimately achieve or maintain them and expose us to numerous operational, reputational, financial, legal and other risks.”

Annual report 2025A · The company itself

“Government Regulations We are subject to international, federal and local legislation, regulations, and other requirements relating to the discharge of substances into the environment; the treatment, transport, and disposal of hazardous wastes; recycling and product packaging; worker health and safety; and other activities affecting the environment, our workforce, and the management of our manufacturing operations and research and development. We believe that our operations and facilities comply in all material respects with applicable environmental laws and worker health and safety laws.”

Annual report 2025A · The company itself

“Furthermore, our compliance efforts, including the collection, assessment and reporting of ESG data, are subject to evolving reporting standards and can be costly, complex and time-consuming. In addition, climate change concerns and the potential associated environmental impact, as well as labor and human rights issues, could result in the proposal and passage of additional laws and regulations in various jurisdictions that may affect us, our suppliers and customers.”

Annual report 2025A · The company itself

“Government Regulation The production, distribution and sale in the United States of many of our products are subject to various U.S. regulations, including but not limited to: the Federal Food, Drug and Cosmetic Act (“FD&C Act”); the Occupational Safety and Health Act and various state laws and regulations governing ingredient safety and labeling and workplace health and safety; various environmental statutes; the Safe Drinking Water and Toxic Enforcement Act of 1986 (“California Proposition 65”); various state and federal laws and regulations pertaining to the sale and distribution of alcohol beverages; data privacy, cybersecurity and personal data protection laws and regulations, including the California Consumer Privacy Act of 2018 (as modified by the California Privacy Rights Act) and a number of other federal, state and local statutes and regulations applicable to the production, transportation, sale, safety, advertising, marketing, labeling, packaging, and ingredients of such products.”

Annual report 2025A · The company itself

“Globally, we are subject to a number of regulations applicable to the formulation, labeling, packaging, and advertising (including promotional campaigns) of our products. In California, we are subject to California Proposition 65, a law that requires that a specified warning be provided before exposing California consumers to any product that contains in excess of threshold amounts of a substance listed by California as having been found to cause cancer or reproductive toxicity.”

Annual report 2025A · The company itself

“Some regulators and stakeholders are focused on corporate responsibility and sustainability matters, including, but not limited to, greenhouse gas emissions and other climate-related risks, sustainable packaging, water stewardship, and corporate governance and oversight.”

Annual report 2025A · The company itself

“Our failure or perceived failure to progress or achieve our climate-related commitments, maintain sustainability practices, or comply with emerging sustainability regulations that meet developing regulatory or stakeholder expectations could harm our reputation, harm our ability to maintain or attract customers and talent, and expose us to increased scrutiny from enforcement authorities and stakeholders.”

Annual report 2025A · The company itself

“We receive, process, transmit and store information relating to certain identified or identifiable individuals (“personal data”), including customers, partners, and current and former employees, in the ordinary course of business. As a result, we are subject to various U.S. and international laws and regulations relating to personal data.”

Annual report 2025A · The company itself

“Certain products currently offered by MIS may fall into scope of the EU Regulation on ESG Rating Activities, which could impose new substantive and procedural requirements on MIS relating to those products similar to those applicable to credit ratings. In addition, EU CRAs are also subject to DORA, which imposes a range of requirements in relation to the management of ICT risk, regulatory reporting, testing and the management of risks related to ICT services provided by third-parties.”

Annual report 2025A · The company itself

“Our Reputation or Business Could Be Negatively Impacted by Sustainability Matters and Our Reporting of Such Matters Over the past several years, both in the United States and internationally, regulators, certain investors and other stakeholders have focused on various sustainability matters, including environmental impact, human capital, and human rights.”

Annual report 2025A · The company itself

“In addition, there has been a recent increase in “anti-ESG” sentiment in the United States by certain activists, institutions and governmental entities criticizing ESG or climate-focused products and services.”

Annual report 2025A · The company itself

“Our businesses are also subject to increasing privacy and data protection legal requirements concerning the use and protection of certain personal information with regard to clients, employees and others. These requirements impose mandatory privacy and data protection obligations, including providing for individual rights, enhanced governance and accountability requirements, and significant fines and litigation risk for noncompliance.”

Annual report 2025A · The company itself

“Heightened regulation on food and crop inputs (including crop nutrients) and environmental, health and safety issues in countries in which we operate can be expected to result in requirements that apply to us and our operations that may be more stringent than those described elsewhere in this report. These requirements may include: •Increased levels of future investments and expenditures for environmental controls at ongoing operations, which will be charged against income from future operations; increased levels of the financial assurance requirements to which we are subject, and increased efforts or costs to obtain permits or denial of permits. •New or interpretations of existing statutes or regulations that impose new or more stringent standards, restrictions or liabilities related to elevated levels of naturally-occurring radiation that arise on formerly mined land and other matters that could increase our expenses, capital requirements or liabilities or adversely affect our business, liquidity or financial condition.”

Annual report 2025A · The company itself

“For the sixth consecutive year, Mowi was ranked top in the Coller FAIRR Protein Producer Index, the comprehensive assessment of the largest listed animal protein producing companies on critical environmental, social and governance issues.”

Annual report 2024A · The company itself

“Global GAP, ASC and BAP have been recognized by GSSI as certification schemes that successfully completed a rigorous and transparent benchmark process. This process is based on FAO guidelines and standards assessing overall environmental impact of how seafood is produced.”

Annual report 2024A · The company itself

“Mowi has in place a global due diligence process for its suppliers which is the basis for assessing risk in our supply chain, both upstream and downstream. It covers ESG (Environmental, Social and Governance).”

Annual report 2024A · The company itself

“Environmental, Social, and Governance (ESG) topics and issues are key focus areas of MPCC’s operations and an integrated part of MPCC’s strategic objectives.”

Annual report 2024A · The company itself

“Reduktion af CO 2 -udledning fra brændstof og energi i egen drift (scope 1 og 2)”

Annual report 2025A · The company itself

“MT Højgaard Danmark i løbet af 2026 forventer at blive miljøcertificeret i henhold til ISO 14001”

Annual report 2025A · The company itself

“Stigende efterspørgsel på energieffektive renoveringer af den eksisterende bygningsmasse, drevet af skærpede krav i EU’s energieffektiviseringsdirektiv (EED). Konkurrencefordel ved dokumentation af stærke bæredygtighedsreferencer, der aktivt modvirker klimaforandringer, f.eks. tiltag for CO -reduktion, energieffektivisering og brug af klimavenlige materialer.”

Annual report 2025A · The company itself

“Koncernens selskaber mærkede i 2025 en begrænset efterspørgsel fra bygherrer, der ønsker at efterleve EU-taksonomien på bygge- og anlægsprojekter. Det vurderes, at udfordringer med dokumentation af nogle af de tekniske screeningskriterier, blandt andet forureningskriterierne, har reduceret efterspørgslen.”

Annual report 2025A · The company itself

“För att tillverka silika för preparativ kromatografi nyttjar Nanologica en produktionsanläggning som rankas i toppen i EcoVadis hållbarhetsranking.”

Annual report 2024A · The company itself

“We communicate certain sustainability-related initiatives, goals, and/or commitments regarding environmental matters, social matters, vendors and suppliers and other matters in our annual Sustainability Report, Task Force on Climate-related Financial Disclosures Report, on our website, in our filings with the SEC and elsewhere. These goals or commitments could be difficult to achieve and costly to implement.”

Annual report 2025A · The company itself

“Additionally, there is an increased focus from our regulators, investors, clients, employees, and other stakeholders concerning corporate citizenship, greenhouse gas emissions reduction and sustainability matters, including proposed or adopted laws, regulations or policies on sustainability-related topics that diverge from, or potentially conflict with, laws in other jurisdictions in which we operate. For example, new laws, regulations and policies are being developed in Europe and elsewhere globally that may require us to comply with specific, target-driven frameworks, disclosure and other requirements in multiple jurisdictions.”

Annual report 2025A · The company itself

“Det görs på bästa sätt i nära samarbete med leverantörer och kunder och genom ett högt engagemang bland våra medarbetare. Tillsammans vill vi skapa en mer hållbar industri med tillväxt och lönsamhet för alla.”

Annual report 2024A · The company itself

“Förvärvet stärker Nedermans erbjudande och kompetens inom mätning och rapportering i Europa.”

Annual report 2024A · The company itself

“Till exempel kompletterar Olicems ledande verktyg för utsläppsrapportering vårt erbjudande till kunder i Europa som behöver effektiva lösningar för att ställa om och möta allt högre myndighetskrav.”

Annual report 2024A · The company itself

“Under 2024 har vi akt ualiserat detta ytterligare genom en förstärkt och omarbetad hållbarhetsplan med nya ambitiösa mål för vårt arbete med ren luft, medarbetare, klimat och cirkularitet.”

Annual report 2024A · The company itself

“Many jurisdictions require companies to notify regulators or individuals of data security incidents involving certain types of personal data. In addition, regulatory requirements, including SEC cybersecurity disclosure rules, may require us to publicly disclose material cybersecurity incidents within specified timeframes.”

Annual report 2026A · The company itself

“our sustainability statements 2025 contain the most relevant and business-essential sustainability information... in accordance with the requirements of the Corporate Sustainability Reporting Directive (CSRD)”

Annual report 2025B · From the report

“Suppliers that have a mature approach to sustainability rank higher in our tenders and selection processes.”

Annual report 2025A · The company itself

“Failure to uphold ISO 14001 certification as required by certain clients could result in loss of business.”

Annual report 2025A · The company itself

“Hållbarhetsarbetet stärker vår konkurrenskraft Genom vårt hållbarhetsarbete bygger vi ett starkt varumärke och bidrar till att Parisavtalet nås.”

Annual report 2024A · The company itself

“There is a focus from regulators, investors, members and other stakeholders on environmental, social, and governance (“ESG”) matters, both in the United States and internationally, including the adoption of new disclosure and regulatory frameworks. To the extent we are unable to meet regulatory or industry standards or investor expectations on ESG issues or the content we distribute and the manner in which we produce content creates ESG-related concerns, our reputation may be harmed.”

Annual report 2025A · The company itself

“•We may be unable to obtain or retain necessary permits and land or mining tenure which could adversely affect our operations and projects. •Mining companies are increasingly required to consider and provide benefits to the communities and countries in which they operate in order to maintain operations. •Illegal mining and artisanal mining occurs on or adjacent to certain of our properties exposing such sites to security risks. •Civil disturbances and criminal activities can disrupt business and expose the Company to liability. •Our operations and projects face substantial regulation of health and safety. •Our operations and projects are subject to extensive environmental laws and regulations. •Our operations and projects are subject to a range of risks related to transitioning the business to meet regulatory, societal and investor expectations for operating in a low-carbon economy.”

Annual report 2025A · The company itself

“Evolving standards for the delivery of digital advertising, the development and implementation of technology, standards, regulations, policies and practices and changing consumer expectations that adversely affect the Company’s ability to deliver, target or measure the effectiveness of its advertising, including reduced support for online tracking technologies, as well as platform and browser requirements, news blocking or bias and new privacy regulations, may also negatively impact digital advertising revenues.”

Annual report 2026A · The company itself

“The Company’s brands and reputation may also be impacted by its sustainability and corporate responsibility efforts and disclosures and positions the Company, its businesses or its publications take or do not take on social issues. Various stakeholders, regulators and lawmakers have expressed or pursued different, and sometimes conflicting, views, expectations and/or legislation on ESG-related matters, and the Company may not be able to successfully navigate these divergent viewpoints and/or legislation.”

Annual report 2026A · The company itself

“If those laws are drafted or interpreted in ways that limit the extent or duration of the Company’s rights or make applicable any legal defenses and/or exceptions, including in relation to unauthorized use of the Company’s content by AI developers, or if existing laws are changed or not effectively enforced, the Company’s ability to generate revenue from its intellectual property may decrease, or the cost of obtaining and maintaining rights may increase.”

Annual report 2026A · The company itself

“Expanding regulation of digital services and related business practices and scrutiny and enforcement by consumer protection authorities may impose restrictions on the Company’s digital consumer platforms and data-driven initiatives, including with respect to pricing and subscription practices.”

Annual report 2026A · The company itself

“NIB E ver kar i e tt 3 0-ta l länd er oc h i milj öer d är oe tis ka af f ärs meto der o ch k rän kni ngar av m äns kli ga rä tt igheter kan förekomma. Om NIBE blir involverat i dessa affärsmetoder kan företagets rykte på marknaden skadas.”

Annual report 2024A · The company itself

“Hela vår värdekedja, från vision till slutkund, ska utgå ifrån de principer för ansvarsfullt värdeskapande som finns i Våra affärsprinciperochVåravärderingar. Säkerställd kvalitet Hög kvalitet i allt vi gör är en grundläggande förutsättningen för långsiktigframgångochkontinuerligtillväxt.Förattsäkerställaatt allavåraproduktionsbolagdriverettaktivtkvalitetsarbeteskaalla förvärvadebolagvaracertifieradeenligtISO9001senasttvåhelaår efterförvärvet.  Högproduktivitetärenförutsättningförgodkonkurrenskraft.Vår produktivitetsfilosofi bygger på att allting ständigt kan förbättras ochattdetsomintemätsintekangörasbättre.”

Annual report 2024A · The company itself

“Produktutvecklingen med fokus på prestanda och design pågår fortlöpande och är en förutsättning för vår framtida tillväxt och utveckling. Våra olika varumärken har helt självständiga avdelningar för produktutveckling, vilka styrs av våra gemensamma riktlinjer för miljö och hållbarhet.”

Annual report 2024A · The company itself

“The updated Sustainability Strategy forms an integral part of Charging Forward and is built around three strategic pillars: Environment, Social, and Governance. Each pillar encompasses specific focus areas that guide NKT’s actions and commitments towards 2030 and beyond.”

Annual report 2025A · The company itself

“Genom EU:s gröna giv har uppmärksamheten vuxit för hur företag hanterar miljömässiga och sociala frågor inom sin värdekedja (CSDDD – Corporate Sustainability Due Diligence Directive). Detta förväntas öka kundernas krav och förväntningar på vårt agerande gentemot leverantörsbasen, samtidigt som det också understryker värdet av det hållbarhetsarbete som Nolato sedan länge bedriver.”

Annual report 2024A · The company itself

“En snabb och betydande ökning av regleringar, skatter och avgifter ökar kostnaderna för fossila bränslen och råvaror. Skärpt kravbild för kapitalanskaffning genom EU:s Taxonomi för hållbara investeringar och ökade krav på klimat-/hållbarhetsredovisning.”

Annual report 2024A · The company itself

“Även på hållbarhetsområdet förändras regelverken fortlöpande. Europeiska regler om hållbarhetsupplysningar och -rapportering har ökat kraven på öppenhet och införlivandet av klimathänsyn i kredit- och investeringsbeslut.”

Annual report 2025A · The company itself

“Vi har länge varit en erkänd ledare i Norden inom ansvarsfulla investeringar, hållbar finansiering och aktivt ägande, och vi fortsätter att stärka vårt erbjudande och anpassa det efter förändrade regelverk och kundernas behov.”

Annual report 2025A · The company itself

“På senare år har vi utvecklat vår marknadsledande ESG-rådgivning för att kunna stötta våra kunder i deras omställning till en hållbar framtid.”

Annual report 2025A · The company itself

“Kunderna fortsatte att efterfråga vårt prisbelönta utbud av ESG-produkter. Vi förmedlade ytterligare 47md euro i hållbar finansiering, och nådde totalt 223md euro, vilket innebar att vi med råge överträffade målet på 200 md euro till 2025.”

Annual report 2025A · The company itself

“Stricter regulations on biodiversity and ecosystems could impact Norske Skog’s financial standing, increasing costs and potentially affecting investor confidence.”

Annual report 2024A · The company itself

“Measures to mitigate the risks are handled in our robust Steering Guidelines, fostering a culture of openness, honesty, and cooperation across all business units, enhancing our reputation as a “best in class” partner.”

Annual report 2024A · The company itself

“objektivt målbare ESG-mål i koncerndirektionens bonusordning fra 2026”

Annual report 2025A · The company itself

“Inden for GDPR er der etableret en funktion under juridisk afdeling, som samarbejder med interne persondata-specialister inden for alle forretningsområder.”

Annual report 2025A · The company itself

“Organizations that violate certain provisions of the GDPR could be fined up to €20 million or 4% of their annual worldwide revenue for the preceding fiscal year, whichever is greater.”

Annual report 2025A · The company itself

“On December 29, 2019, the EU Sustainable Finance Disclosure Regulations (SFDR) entered into force. SFDR aims to prevent “greenwashing” (conveying a misleading or false impression a product is more environmentally favorable than it actually is) by requiring disclosure of how sustainability risks and environmental, social and governance (ESG) factors are part of the investment and business processes of asset managers.”

Annual report 2025A · The company itself

“Furthermore, ESG-related issues have been the subject of increased focus by regulators and stakeholders, including outside the U.S., and particularly in Europe. Any inability to meet applicable requirements or expectations, including those from conflicting U.S. and non-U.S. global expectations, may adversely impact our reputation.”

Annual report 2025A · The company itself

“NOTEs strategi syftar till att med hög transparens bedriva hållbar produktion genom ansvarsfull förbrukning av material och energi, i en trygg och säker arbetsmiljö.”

Annual report 2024A · The company itself

“Our Sustainability statement is prepared in accordance with the European Sustainability Reporting Standards (ESRS)”

Annual report 2025A · The company itself

“Changes in data privacy and data protection laws and regulations, or any failure to comply with such laws and regulations, could adversely affect the Company’s business and financial results.”

Annual report 2025A · The company itself

“The consumer privacy landscape continues to experience momentum for greater privacy protection and reform at the state and federal level in response to precedents set forth by the Personal Information Protection and Electronic Documents Act (the "PIPEDA") of Canada and the California Consumer Privacy Act (the "CCPA"). The development and evolving nature of domestic and international privacy regulation and enforcement could impact and potentially limit how NRG collects, processes, discloses and stores personally identifiable information.”

Annual report 2025A · The company itself

“NTG has committed to setting emission reduction targets aligned with the Science Based Targets initiative”

Annual report 2025A · The company itself

“Customers demand that NTG can comply with their ESG policies and other ESG requirements”

Annual report 2025A · The company itself

“Certain shareholder advocacy groups, investment funds, shareholders and other market participants, customers and government regulators have focused on corporate sustainability practices and disclosures, including those associated with climate change and human rights. Stakeholders may not be satisfied with our corporate sustainability practices and goals or the speed of their adoption.”

Annual report 2026A · The company itself

“Furthermore, global privacy legislation, enforcement, and policy activity, such as the EU General Data Privacy Regulation, are rapidly expanding and creating a complex regulatory compliance environment. Costs to comply with and implement these privacy-related and data protection measures could be significant.”

Annual report 2025A · The company itself

“Various stakeholders, including governments, regulators, investors, employees, customers and others, have differing expectations about a wide range of evolving sustainability considerations relating to businesses, including climate change and greenhouse gas emissions, and human capital matters. We make statements about our values, including the environmental and societal impact of our business, through our various non-financial reports, information provided on our website, press statements and other communications.”

Annual report 2025A · The company itself

“The topics which are of most strategic importance to us are; innovation, clinical trial conduct, business ethics, economic performance and patient health and safety.”

Annual report 2024A · The company itself

“Key external factors/trends impacting Oriola’s business environment continue to include ageing of the population, increased spending on health and wellbeing, growth in speciality pharmaceuticals, the digitalisation of the retail trade and services, increasing sustainability requirements as well as ongoing global health challenges.”

Annual report 2025A · The company itself

“Insufficient awareness and inability to implement upcoming regulatory and customer specific requirements (in market entry, e.g. while preparing for coming tenders) leading to lost business opportunities.”

Annual report 2025A · The company itself

“High ESG maturity level at Orion while making supplier selections guarantees sustainable supplier network strategy (now and in the future).”

Annual report 2025A · The company itself

“Orion brand value increases by ensuring sustainable supply chain. A sustainable supply chain supports trust among stakeholders, enhances company reputation and contributes to longterm business success.”

Annual report 2025A · The company itself

“Orion can strengthen its brand and reputation by internally ensuring compliance and responsible business in own or service providers’ operations, and then by transparently reporting of anti-corruption activities to customers and other stakeholders.”

Annual report 2025A · The company itself

“Andre forhold med stadig større risiko er den stadig større vektleggingen av forbrukerhelse og stadig strengere regulatoriske krav.”

Annual report 2024A · The company itself

“Bærekraft har vært et fokus i Orkla i en årrekke og er en integrert del av selskapets forretningsstrategi.”

Annual report 2024A · The company itself

“Steered by regulatory changes, retailers and consumers increasingly favour products with verified sustainability credentials, reinforcing the strategic importance of durability and recycled and bio-based materials.”

Annual report 2025A · The company itself

“Salmon farming is highly dependent on natural resources and the license to operate, as reflected in Bakkafrost’s business model, in which sustainability is deeply embedded.”

Annual report 2024A · The company itself

“Sustainability is deeply embedded in the business strategy, and we have set various sustainability targets within each pillar of our operations, which drive and shape the business strategy and operations.”

Annual report 2024A · The company itself

“Bakkafrost relies on certifications, such as the MSC, ASC and BAP certifications. 100% of Bakkafrost’s sites in the Faroe Islands and 75% in Scotland are ASC-certified, and the Scottish operation is also BAP-certified.”

Annual report 2024A · The company itself

“Global Salmon Initiative (GSI) Bakkafrost is a founding member of the initiative, which is focused on promoting sustainable aquaculture leadership through collaboration.”

Annual report 2024A · The company itself

“Bakkafrost is a participant in the UN Global Compact and a member of the Business Action Platform for the Ocean. Through the action platform, we aim to contribute to the health of the ocean, through a focus on growth, innovation, and sustainability.”

Annual report 2024A · The company itself

““No product recall, No market bans, No IT security incidents” • Sustainability recommendations on all Bakkafrost-branded products • Average customer rating of >8.5 and a net promoter score above +50 • Include sustainability in CAPEX request form • Board to receive sustainability training annually • Implement use of new technology and digitalisation to contribute to operational efficiency (both regarding the salmon and environment) • Employee engagement scores above industry benchmark (provided by Peakon) • Minimum three employee events a year with focus on sustainability engagement and awareness • Reduce group absence rate to 3.9% • Reduce LTIR to below 5 • Zero fatalities • Have 10 vocational graduates from the Faroese vocational education program for salmon farmers per year by 2026 • Increase number of women in management positions (managers with direct reports) to at least 25% • Disclose gender paygap.”

Annual report 2024A · The company itself

“A wide variety of laws, regulations, industry standards, contractual requirements, and other obligations apply to the collection, use, retention, protection, disclosure, transfer, and other processing of personal data in jurisdictions where we and our customers operate. Compliance with these laws and other obligations is difficult and costly, and they are subject to frequent and unexpected changes.”

Annual report 2026A · The company itself

“Since August 2024, we have crafted all our jewellery using 100% recycled silver and gold.”

Annual report 2025A · The company itself

“Det händer allt oftare att konferensbokare och affärsresenärer ställer krav på att hotellen ska vara miljöcertifierade och att de kan redovisa utsläpp av växthusgaser per gästnatt, och även vissa gäster som reser privat visar intresse för detta; en tydlig indikator på att klimatfrågan blivit en del av samhällsmedvetandet.”

Annual report 2024A · The company itself

“Pandox viktigaste bidrag till en hållbar omställning är att skapa resurseffektiva fastigheter, hållbar drift samt trygga och säkra miljöer för anställda och gäster. Vi kan därigenom också bidra till FN:s globala mål för hållbar utveckling.”

Annual report 2024A · The company itself

“Miljö och klimat Ansvarsfulla och rättvisa affärer Nöjda och trygga gäster & hyresgäster Attraktiv och jämställd arbetsplats Inkluderande lokalsamhällen BESKRIVNING Vi arbetar strategiskt med våra godkända vetenskapliga mål för att minska Pandox klimatutsläpp. Pandox fokuserar även på regelefterlevnad och att kunna uppfylla hårdare krav vad gäller energideklarationer.”

Annual report 2024A · The company itself

“A number of disclosure requirements relating to sustainability matters have taken effect or are expected to take effect in the next several years in the U.S. and Europe, including the Climate Corporate Data Accountability Act and the Climate-Related Financial Risk Act in California, the E.U.’s Corporate Sustainability Reporting Directive (CSRD). While the full costs and operational impacts of compliance are not yet known, noncompliance with these or other applicable laws and regulations could result in financial, operational and reputational risks.”

Annual report 2024A · The company itself

“We are subject to a wide range of laws and regulations in the U.S. and in the foreign jurisdictions in which we or our partners operate, including laws and regulations relating to intellectual property, advertising and content regulation, consumer protection, privacy, data protection, cybersecurity, anticorruption, repatriation of profits, tax regimes, quotas, tariffs or other trade barriers, currency exchange controls, operating license and permit requirements, restrictions on foreign ownership or investment, anticompetitive conduct, and export and market access restrictions.”

Annual report 2024A · The company itself

“Arbetet omfattar systemstöd och processer för insamling och analys av data kopplat till köpta produkter och tjänster. Syftet är att öka tillgängligheten, transparensen och kvaliteten för att kunna möta ständigt ökande rapporteringskrav från såväl myndigheter som kunder och finansaktörer.”

Annual report 2024A · The company itself

“Peab har identifierat klimatrisker med stöd av ramverket TCFD och arbetar med klimatmål i projekt samt redovisar i enlighet med EU-taxonomin.”

Annual report 2024A · The company itself

“Strategiska risker Avser vår mission, våra långsiktiga mål och vår strategi Varumärkesrisk Miljö & Klimat Leverantörer & UE Kompetens Strategiska insatsvaror Informationssäkerhet Styrning Inflation Kapital Etik & compliance Teknik Arbetsmiljö Marknad Efterlevnadsrisker Avser efterlevnad av tillämplig lagstiftning, externa föreskrifter och interna regelverk Operativa risker Avser hot mot genomförandet av vår affärsplan och övriga kortsiktiga mål och ambitioner eller en effektiv resursanvändning Finansiella risker Avser hot mot vår finansiella ställning och våra tillgångar Strategiska risker Beskrivning Hantering Marknad Kundbeteenden och kundkrav kan ändras i en takt som vi inte lyckas möta tillräckligt snabbt. Samtidigt introduceras just nu flera nya regelverk, bland annat inom hållbarhetsområdet, vilket påverkar Peabs verksamhet på olika sätt.”

Annual report 2024A · The company itself

“Certain jurisdictions have either imposed, or are considering imposing, product labeling or warning requirements or other limitations on the marketing or sale of certain of our products as a result of ingredients or substances contained in such products or packaging materials, processes used to make the ingredients or products, the audience to whom products are marketed or the location in which the products are sold. These types of provisions have, among other things, required that we highlight perceived concerns about a product, warn consumers to avoid consumption of certain ingredients or substances present in our products, restrict the age of consumers to whom products are marketed or sold, limit the location in which our products may be available or discontinue the use of certain ingredients.”

Annual report 2025A · The company itself

“Lack of progress or failure to properly report on our goals with respect to reducing our impact on the environment or perception of a failure to act responsibly with respect to the environment or to effectively respond to regulatory requirements concerning climate change and other sustainability matters, including the use of single-use plastics, has led and could continue to lead to adverse publicity, reduced demand for our products, damage to our reputation, an increased risk of litigation, regulatory proceedings, inquiries or investigations, which have adversely affected our business.”

Annual report 2025A · The company itself

“Ifølge taksonomiforordningen kan projekter kun klassificeres som bæredygtige, hvis koncernen har procedurer, der understøtter, at aktiviteterne udøves i overensstemmelse med FN’s Principper for Menneskerettigheder og Erhvervsliv og OECD’s retningslinjer for multinationale virksomheder. I Aarsleff har vi gennemgået vores eksisterende politikker, principper og processer i relation til menneskerettigheder, bestikkelse, korruption, skat og fair konkurrence.”

Annual report 2025A · The company itself

“It is becoming more important to have control over your own data, in addition to the ability to be compliant with new laws and regulations. Pexip can deliver solutions that allow organizations to maintain full data control with an integrated chat, video and file-sharing solution to ensure secure communications.”

Annual report 2024A · The company itself

“In addition, certain governments and the public expect companies like us to report on our business practices with respect to human rights, responsible sourcing and environmental impact, as well as the actions of our third-party contractors and suppliers around the world.”

Annual report 2025A · The company itself

“This focus may lead to new expectations or requirements that could result in increased costs associated with research, development, manufacture, or distribution of our products. Our ability to compete could also be affected by changing customer preferences and requirements, such as demand for companies to establish Net Zero targets or offer more sustainable products.”

Annual report 2025A · The company itself

“Förändrade regler och certifieringskrav på olika marknader och en större mängd egna produkter medför en större risk för att Pierce inte kommer att hinna bli varse eller börja följa nya bestämmelser i tid på alla de marknader vi verkar på. Ökade regleringar för att skydda konsumenter på en mängd marknader medför ytterligare en ökad risk för att bli sena med att identifiera eller implementera förändringar tillräckligt snabbt. Dessutom utgör ökade miljö- och hållbarhetsbestämmelser också en risk genom att det kan leda till högre efterlevnadskostnader, striktare rapporteringskrav, samt operativa justeringar för att möta föränderliga juridiska standarder.”

Annual report 2024A · The company itself

“Operations are based on the ISO 14001 environmental management framework, which, as part of Pihlajalinna’s integrated management system, creates consistent practices across the Group. Pihlajalinna’s private healthcare services, i.e. private clinics, occupational health services and hospitals, are certified under the ISO 14001 environmental management standard.”

Annual report 2025A · The company itself

“To an increasing extent, financial services companies, including PNC, are facing criticism with accompanying reputational risk from activists, investors and stakeholders who believe companies should be focusing more or less on environmental, social and governance matters. Companies in our industry are targeted for engaging in business with specific customers or with customers in particular industries, where the customers’ activities, even if legal, are perceived as having harmful impacts on matters such as the environment, consumer health and safety, or society at large.”

Annual report 2025A · The company itself

“As a result, however we respond to such criticism, we expose ourselves to the risks that current or potential customers decline to do business with us (or encourage others to do so) or current or potential employees refuse to work for us.”

Annual report 2025A · The company itself

“Governance-mål: Fuld compliance med CSRD fra 2026, fortsat følge anbefalinger for god selskabsledelse, transparent kommunikation med interessenter.”

Annual report 2025A · The company itself

“Our financial results may be adversely impacted by environmental, social and governance requirements. Our financial and operational results could be impacted by emerging risk and changes to the regulatory landscape in areas like environmental, social and governance (“ESG”) requirements. While we closely monitor and respond to topics like social, environmental and demographic changes that include longer lifespans, income and wealth inequalities, environmental challenges and opportunities to expand global access to the financial system across all segments of the population, updated and changing regulatory and societal environment requirements could impact financial and operational results.”

Annual report 2025A · The company itself

“In addition, governmental and societal attention to environmental and social matters, including changing and disparate mandatory and voluntary reporting, diligence and disclosure on topics such as climate change, waste production, water usage, nature impacts, human capital, respect for human rights, labor and risk oversight, could continue to expand the nature, scope and complexity of matters that we are required to control, assess and report. These and other rapidly changing laws, regulations, policies and related interpretations as well as increased enforcement actions by various governmental and regulatory agencies, create challenges for the Company, may alter the environment in which we do business, may increase the ongoing costs and complexities of compliance including by requiring investments in technology or other compliance systems and may ultimately result in the need to cease manufacturing, sales or other business activities in certain jurisdictions, which could adversely impact our results of operations and cash flows.”

Annual report 2026A · The company itself

“• En rad nya produktregleringar har trätt i kraft under året och ytterligare kommer träda i kraft under 2025. Detta har lett till ett arbete för att anpassa utvecklingsprocessen att innefatta metoder för att säkerställa regelefterlevnad mot de nya kraven.”

Annual report 2024A · The company itself

“New regulations and societal pressures relating to Sustainability and other public policy matters could negatively impact our returns or cause us to change our investing strategies in ways that could negatively impact our results. The value of securities held in our portfolio could be materially adversely impacted as issuers or the businesses or assets underlying such securities are faced with new, potentially conflicting, laws or regulations or initiatives by regulators, investors, activists, or others, including those addressing Sustainability, corporate governance, corporate responsibility or other public policy concerns.”

Annual report 2025A · The company itself

“Additionally, certain customers have adopted, and other customers may adopt, policies that require us to achieve certain sustainability, climate or other environmental, social and governance (ESG)-related targets, such as our 2040 net-zero global GHG emissions commitment and our interim GHG emissions reduction goals. If we fail to achieve ESG-related targets that meet our customers’ requirements or expectations, these customers may not purchase products or services from us.”

Annual report 2025A · The company itself

“Regulatory scrutiny of disclosure practices for sustainable and values-based investment strategies has been a focus in recent years, though that focus appears to be moderating following the SEC’s decision to withdraw proposed rulemaking in this area. Nonetheless, we could still face reputational risk if our investment managers are perceived as making inaccurate or misleading statements regarding the investment strategies of our funds and ETFs, commonly referred to as “greenwashing.” Such perceptions or accusations could damage our reputation, result in litigation or regulatory enforcement actions, and adversely affect our business.”

Annual report 2025A · The company itself

“We seek to promote effective energy efficiency and other sustainability strategies and compliance with federal, state and international laws and regulations related to climate change, both internally and with our partners across our value chain, including with our clients. Our sustainability strategies and efforts to comply with the various federal, state and international laws and regulations related to climate change could result in significant capital expenditures to improve our existing properties, properties we may acquire, and other business practices.”

Annual report 2025A · The company itself

“Clients of net-leased properties are typically responsible for maintenance and other day-to-day management of the properties. This lack of control over our net-leased properties makes it difficult for us to collect property-level environmental data and to enforce related initiatives, which may impact our ability to comply with certain shareholder expectations or regulatory disclosure requirements to which we are subject or to comply with reporting frameworks or other established frameworks and standards.”

Annual report 2025A · The company itself

“Additionally, our sustainability disclosures may reflect aspirational goals, targets, and other expectations and assumptions, which are necessarily uncertain and may not be realized. If we fail to satisfy the environmental, social, and governance expectations of investors, clients and other stakeholders, our initiatives are not executed as planned, or we do not satisfy our goals, then our third-party ratings, reputation and financial results could be adversely affected.”

Annual report 2025A · The company itself

“In addition, both advocates and opponents to certain sustainability matters are increasingly resorting to a range of activism forms, including shareholder proposals, media campaigns and litigation, to advance their perspectives. To the extent we are subject to such activism, it may require us to incur costs or otherwise adversely impact our business.”

Annual report 2025A · The company itself

“In addition, in April 2023, the European Commission published a proposal to replace the current pharmaceutical legislative framework in the EU. While it is uncertain whether such proposal will be adopted in its current form, there may ultimately be a number of changes to the current regulatory framework in the EU, including a reduction of the data protection and market exclusivity periods provided thereby.”

Annual report 2025A · The company itself

“Ett viktigt verktyg i vårt arbete är vårt analysverktyg Sustainalyzer, som vi utvecklat vidare och färdigställt under året. Sustainalyzer är ett verktyg som hjälper oss att mäta och följa upp uppdrag ur ett hållbarhetsperspektiv. Detta ska säkerställa att vi levererar de mest hållbara lösningarna till våra kunder avseende områdena klimatpåverkan, klimatanpassning, energianvändning, biologisk mångfald, material och processer, hälsa och säkerhet, mänskliga rättigheter och leverantörsutvärderingar.”

Annual report 2024A · The company itself

“Similarly, our responses to events or crises and our position (or perceived lack of position) on environmental, social, and governance matters, such as sustainability, corporate social responsibility, diversity, equality, and inclusion, responsible sourcing, and any perceived lack of transparency about those matters could harm our reputation, receive negative feedback from stakeholders, including our customers and investors, and could adversely affect our sales.”

Annual report 2026A · The company itself

“In addition, we are subject to federal, state, and international laws relating to the collection, use, retention, security and transfer of personally identifiable information, personal health data and individual payment data. Those laws include, among others, the European Union General Data Protection Regulation and similar state agencies that impose additional data privacy and protection requirements. Complying with these and other applicable laws has caused, and may cause, us to incur substantial costs or require us to change our business practices, and our failure to do so may expose us to substantial fines, penalties, restrictions, litigation, or other expenses and adversely affect our business.”

Annual report 2025A · The company itself

“Operating Strategies Our mission is to deliver the best vacation experiences responsibly. We continue to prioritize operating strategies that support this mission, working with our various business and community partners as we build toward a more sustainable 4 cruise industry.”

Annual report 2025A · The company itself

“The proliferation of regulations and guidance addressing climate, human capital and other topics at the regional, state and national levels has required and may continue to require significant effort and resources, and our practices, processes and controls may not ensure compliance with evolving standards. Further, various regulations or guidance may conflict with each other, making universal compliance challenging as a multinational company, and our status as a government contractor in various jurisdictions, including but not limited to the U.S. where we are headquartered, may also result in greater exposure or differentiated obligations or requirements with which we would seek to comply.”

Annual report 2026A · The company itself

“In addition, our practices and disclosures may not satisfy, appropriately respond to the concerns of or be supported by all investors, customers, partners, regulators, enforcement authorities or other stakeholders, whose expectations and requirements are evolving, varied, and oftentimes conflicting. Any violation of, non-compliance with or failure to meet such expectations or requirements, or negative publicity related to our practices or disclosures, could result in harm to our reputation, our ability to attract or retain employees, and our attractiveness as an investment, business partner, acquiror or service provider, could expose us to increased scrutiny or to regulatory or enforcement actions or litigation, and could cause us to incur increased costs to address or defend against such actions.”

Annual report 2026A · The company itself

“Equality and sustainability are core values of the Company. In furtherance of these values, we have in the past and may in the future establish and disclose quantitative and qualitative statements related to equality and sustainability matters, which are subject to numerous risks and dependencies.”

Annual report 2026A · The company itself

“Key Points – Biodiversity & Nature ▪ Our closed system ensures minimal escape risk. ▪ Achieved ASC certification in 2023. ▪ Continuously monitoring local biodiversity and nature.”

Annual report 2023A · The company itself

“Accordingly, Sampo Group aims to take ESG considerations into account in product and service development and insurance underwriting.”

Annual report 2025A · The company itself

“Responsible investment management and operations are vital for managing investment-related risks, and in mitigating potential adverse impacts on the Group's reputation. ESG considerations are taken into account when assessing the security, quality, liquidity, and profitability of investments.”

Annual report 2025A · The company itself

“Sampo Group places emphasis on sustainability when working with suppliers. As a major procurer of goods and services, especially in claims handling, the company has an impact on the economy, the environment, and society.”

Annual report 2025A · The company itself

“In particular, this risk is seen to relate to sustainability, compliance, intellectual property rights (IPR), data protection, digital transformation, consumer protection, accessibility and AI.”

Annual report 2025A · The company itself

“One of these risks is related to increased complexity and costs due to compliance with enhanced emissions- and sustainabilityreporting obligations and regulations. Regulations, such as the Corporate Sustainability Reporting Directive (CSRD) and Corporate Sustainability Due Diligence Directive (CSDDD), require extensive data collection, data management and reporting infrastructure.”

Annual report 2025A · The company itself

“Data protection is another crucial area of compliance, particularly under the General Data Protection Regulation (GDPR). SATS processes large volumes of personal data, making data security a top priority.”

Annual report 2024A · The company itself

“All Scanfil factories, except for the recently acquired unit in 2025, are ISO 14001 certified, demonstrating the Group’s commitment to a systematic environmental management. The certification reflects continuous efforts to prevent environmental impact, reduce greenhouse gas emissions and optimize the use of natural resources.”

Annual report 2025A · The company itself

“The same high sustainability standard required for Scanfil must also be applied by Scanfil’s suppliers. The responsibility of the policy is Scanfil’s Chief Supply Chain Officer (CSCO). Scanfil requests that its suppliers always adhere to all applicable laws, regulations, and international standards related to sustainable procurement, including the UN Global Compact principles and International Labor Organization (ILO) rules.”

Annual report 2025A · The company itself

“Our business faces increased scrutiny from certain investors and other stakeholders related to our sustainability activities, including the goals, targets, and objectives that we announce, and our methodologies and timelines for pursuing them. If our sustainability practices do not meet investor or other stakeholder expectations and standards, including any third-party ratings used by stakeholders, which continue to evolve, our reputation, our ability to attract or retain employees, our ability to access capital, and our attractiveness as an investment or business partner could be negatively affected.”

Annual report 2025A · The company itself

“We face increasing scrutiny related to environmental, social and governance activities. We risk damage to our reputation if we fail to act responsibly in a number of areas, such as human capital, employee health and safety, environmental stewardship, sustainability, supply chain management, climate change, the usage of AI, workplace conduct and human rights.”

Annual report 2026A · The company itself

“Vi jobber målrettet for å redusere negativ påvirkning på klima og natur, og bidrar samtidig positivt der det er mulig. I tillegg styrker vi innsatsen for å sikre gode sosiale forhold i virksomheter i hele vår verdikjede.”

Annual report 2024A · The company itself

“Vi är idag den enda tillverkaren i vår marknadsnisch som är miljöcertifierad enligt ISO 14001 och anslutna till UN Global Compact. Genom detta har vi förbundit oss att driva verksamheten enligt FN:s tio principer som bland annat omfattar arbetsrätt, mänskliga rättigheter, antikorruption och miljö.”

Annual report 2024A · The company itself

“Our failure or perceived failure to achieve our corporate sustainability goals or maintain corporate sustainability practices that meet evolving stakeholder expectations could adversely affect us. Our ability to achieve published corporate sustainability goals and commitments is subject to numerous factors both within and outside of our control. Our failure or perceived failure to achieve our corporate sustainability goals or maintain corporate sustainability practices that meet stakeholder expectations or regulatory requirements could harm our reputation, adversely impact our ability to attract and retain employees or customers and expose us to increased scrutiny from the investment community, regulatory authorities and others or subject us to liability.”

Annual report 2025A · The company itself

“Furthermore, many governments, regulators, investors, employees, customers, media outlets and other stakeholders are focused on sustainability considerations relating to businesses, including climate change and greenhouse gas emissions, natural capital circularity, human capital and belonging, and employee experience. Our business may face scrutiny from such stakeholders and if our strategies or expectations relating to sustainability considerations do not meet stakeholder expectations and standards (including with respect to establishing science-based targets), which continue to evolve and may differ across jurisdictions in which we operate, our business, financial condition, results of operations and reputation could be adversely impacted.”

Annual report 2025A · The company itself

“Exempel på risker och möjligheter i samband med klimatomställningen Lagstiftning • Ökade krav på rapportering och offentliggörande, bland annat CSRD, EU:s taxonomi • Krav på energiprestanda (EU-direktivet om byggnaders energiprestanda) • Kostnaden för koldioxid Befintliga och ökande krav gällande områden som bland annat energiprestanda, offentliggöranden och koldioxidprissättning kan, beroende på riskreducerande åtgärder, få både positiva och negativa konsekvenser kopplat till faktorer som exempelvis driftskostnader samt varumärke och anseende. • Skanska strävar efter att stärka sin position inom hållbara lösningar.”

Annual report 2024A · The company itself

“Under kommande verksamhetsår kommer vi att fortsätta fokusera på datakvalitet och internkontroll för att säkerställa efterlevnad mot EU:s nya direktiv för hållbarhetsrapportering, CSRD.”

Annual report 2024A · The company itself

“Med ambitiösa klimatmål och mer cirkulära system arbetar vi för att minimera vår påverkan. Vi gör det möjligt för våra gäster att göra mer hållbara val.”

Annual report 2024A · The company itself

“Hållbarhet och ansvarsfullt företagande är en integrerad del av SkiStars strategi, affärsmodell, styrning och kultur.”

Annual report 2024A · The company itself

“Miljöcertifierade Lodger & Hotell Våra Lodger & Hotell i Norge är miljöcertifierade med Miljøfyrtårnet. Det är ett viktigt verktyg för att kommunicera våra miljöinsatser och sociala ansvarstaganden till gäster och intressenter.”

Annual report 2024A · The company itself

“Increased focus and activism related to sustainability matters may hinder our access to capital, as investors may reconsider their capital investment as a result of their assessment of our sustainability practices.”

Annual report 2025A · The company itself

“Customers, investors, regulators and other stakeholders are focused on sustainability issues, including those with respect to climate change, circular economy, packaging waste, sustainable supply chain practices, deforestation, biodiversity, land, energy and water use, diversity, equity, inclusion and belonging and other human capital matters.”

Annual report 2025A · The company itself

“Regulations, such as the Corporate Sustainability Reporting Directive (CSRD) in the European Union, as well as various industry and third-party requirements or standards have been developed that are intended to address environmental or sustainability risks. New or increased regulatory requirements or standards may result in higher compliance or input costs, including those related to energy or raw materials, for us and our suppliers.”

Annual report 2026A · The company itself

“Our CO 2 e reduction targets are approved by the SBTi, and we operate and report in accordance with the CSRD”

Annual report 2025A · The company itself

“We expanded the climate information available to our customers by adding Global Warming Potential (CO e) data to a significant share of our assortment. More than 60% of our products are now supported by generic CO e values, enabling more informed and climate-conscious choices.”

Annual report 2025A · The company itself

“Öppen och transparent information via pressmed delanden och företagets hemsida.”

Annual report 2024A · The company itself

“Bolaget har implementerat hållbarhetsstandarden TSM Finland för att ytterligare förbättra verksamheten i enlighet med de miljökrav och andra tillståndskrav som ställs på bolaget.”

Annual report 2024A · The company itself

“Certain regulators, such as the SEC and various state agencies, as well as nongovernmental organizations and other private actors have filed lawsuits under various securities and consumer protection laws alleging that certain sustainability statements, goals, or standards were misleading, false, or otherwise deceptive. Alternatively, the Company could face criticism from 42 Table of Contents certain “anti-ESG” parties for making environmental or social commitments or pursuing certain environmental or social initiatives that are alleged to be political or polarizing in nature, which could adversely affect the Company’s reputation, business, financial performance, market access, and growth.”

Annual report 2025A · The company itself

“En av risikoene som analysen peker på, er faren for ESG-reguleringsbrudd.”

Annual report 2024A · The company itself

“Kredittgivning og styring av kredittrisiko skal bidra og være i henhold til bankens overordnede strategi for bærekraft. Bærekraftsrisikoer, herunder antihvitvaskrisiko, vurderes i forbindelse med all kredittbehandling.”

Annual report 2024A · The company itself

“På bakgrunn av banken sin dobbelt vesentlighetsanalyse er følgende vesentlige temaer definert innenfor bærekraft og samfunn: Påvirkninger: • Indirekte natur- og klimapåvirkning i bedrifts og privatmarkedet. • God styring, antihvitvask-arbeid, personvern og datasikkerhet. • Ivaretakelse av våre medarbeidere. • Menneskerettighets- og arbeidsforhold i leverandørkjeden.”

Annual report 2024A · The company itself

“Vesentlige påvirkninger Nærmere omtale i rapporten (kapittelnavn og side) Indirekte klima- og naturpåvirkning i privatmarkedet og bedriftsmarkedet Klima og miljø fra side 176 God styring, antihvitvask-arbeid, personvern og datasikkerhet Ansvarlig og etisk forretningsdrift fra side 204 Ivaretakelse av våre medarbeidere Ivaretakelse av våre medarbeidere fra s.”

Annual report 2024A · The company itself

“Vi har gjort endringer i vår kredittpolicy knyttet til bærekraft med tydeligere krav til innhenting av energiattester ved finansiering, og revidert ESG kriterier i utlån og finansiering.”

Annual report 2024A · The company itself

“Muligheter: • Tilgang til kapital gjennom grønne obligasjoner • Øke konkurransefortrinn ved lokal tilstedeværelse • Tilby produkter og tjenester med fokus på bærekraft • Tilby god ESG-rådgivning Risikoer: • ESG-reguleringsbrudd • For liten grønn portefølje • For lav ESG-kompetanse • Tap som følge av svindel av våre kunder Det er gitt en nærmere omtale av de ovennevnte mest vesentlige teamene innenfor bærekraft og samfunn i bankens bærekraftsrapportering.”

Annual report 2024A · The company itself

“I utlånssaker til bedrifter gjennomføres det ulike vurderinger med hensyn på bærekraft.”

Annual report 2024A · The company itself

“Risiko  Manglende utvikling av produkter som kan tilbys kundene som har tilpasset seg omstillingen best Det er identifisert risiko for at porteføljen ikke imøtekommer krav, forventinger og egne mål til andel grønne lån og annet klimaarbeid. Dette kan gi redusert mulighet til å utstede grønne obligasjoner.”

Annual report 2024A · The company itself

“SpareBank 1 Østlandet påvirkes av ESGfaktorer direkte gjennom egen virksomhet eller indirekte primært via utlånsporteføljen.”

Annual report 2024A · The company itself

“Gjennom året er det også gjennomført omfattende informasjons og kart leggings prosesser i forbindelse med økte regulatoriske krav på bærekraftsområdet.”

Annual report 2024A · The company itself

“I all investeringsrådgivning skal kunden bli spurt om sine preferanser relatert til miljø, klima, sosiale forhold og eierstyring. Informasjonen brukes til å anbefale investeringsobjekter som oppfyller kundens ønsker samt informere om mulighetene i investeringsmarkedet.”

Annual report 2024A · The company itself

“Banken har et mål om at 25 prosent av fondsplasseringene til våre kunder er plassert i fond med en tydelig bærekraftsprofil.”

Annual report 2024A · The company itself

“Vi har et ansvar for å ivareta menneske og arbeidstakerrettigheter, miljø og samfunn i alle våre leverandørkjeder. Dette er ytterligere styrket gjennom åpenhetsloven som pålegger oss å gjøre aktsomhetsvurderinger i leverandørkjedene.”

Annual report 2024A · The company itself

“Rådgivning innenfor bærekraft ble etablert i 2024.”

Annual report 2024A · The company itself

“Det er forventet, og innført, en rekke nye regulatoriske krav, både nasjonalt og internasjonalt. Dette øker etterlevelsesrisikoen, og Sparebanken Vest har derfor iverksatt flere tiltak for å redusere denne risikoen på ESG-området.”

Annual report 2024A · The company itself

“For å sikre retning mot en større andel av utlånsporteføljen i samsvarer med EU-taksonomien justeres kredittprosesser i tråd med taksonomien.”

Annual report 2024A · The company itself

“All kredittgivning skal ta hensyn til og støtte opp om bankens «Prinsipper for Samfunnsansvar» som er publisert i bærekraftbiblioteket på spv.no. Formålet er å sikre at banken bidrar positivt til klima, miljø, natur, sosiale forhold og god virksomhetsstyring, og dermed bidrar til å fremme ansvarlig og bærekraftig forretningsvirksomhet.”

Annual report 2024A · The company itself

“Banken har vært medlem av PCAF siden første kvartal 2022. • Banken investerer store ressurser i gode løsninger for innhenting av utslippsdata fra kundene, med egne kundeportaler for opplastning av utslippsdata. Dette er formalisert gjennom krav i bransjepolicies i kredittrammeverket.”

Annual report 2024A · The company itself

“Sparebanken Vest jobber målrettet med å forbedre og utvikle våre ESG-data. Dette gir oss bedre innsikt og mulighet til å øke andelen bærekraftige aktiviteter i våre utlån. Samtidig vil forbedrede ESG-data gi et bedre grunnlag for fremtidig taksonomirapportering.”

Annual report 2024A · The company itself

“Sparebanken Vest har vært medlem av FNs Global Compact siden 2017 og støtter initiativet sine ti prinsipper om menneskerettigheter, arbeid, miljø og antikorrupsjon. Banken er forpliktet til å integrere disse prinsippene i strategien og arbeidshverdagen, og vil gjennom dette bidra til at FN når sine utviklingsmål, spesielt innen bærekraft.”

Annual report 2024A · The company itself

“Sparebanken Vest har siden 2021 sluttet seg til Future Proof. Et regionalt initiativ fra Raftostiftelsen og Bergens næringsråd som skal sikre etterlevelse av FNs veiledende prinsipper for næringsliv og menneskerettigheter (UNGP) Bankens hovedtiltak, mål og målbare KPIer knyttet til personvern og sikkerhet Banken har etablert flere tiltak med formål om å redusere eller forhindre negativ effekt på personvernet til egne ansatte, kunder og sluttbrukere.”

Annual report 2024A · The company itself

“Bankens investorer i det internasjonale kapital markedet er svært bærekraftsbevisste. De har egne mål for sine porteføljer og treffes også av regulatoriske endringer på bærekraftsområdet.”

Annual report 2024A · The company itself

“Additionally, growing stakeholder focus on responsible business matters has led to heightened expectations and regulatory requirements, such as extended producer responsibility obligations that relate to our product packaging, the EU’s Corporate Sustainability Reporting Directive, or the state of California’s new climate change disclosure requirements. The evolving obligations may increase compliance costs and the risk of noncompliance.”

Annual report 2025A · The company itself

“The GDPR has created a range of compliance obligations and can impose significant financial penalties for noncompliance (including possible fines of up to 4% of global annual revenues for the preceding financial year or €20 million (whichever is higher) for the most serious infringements).”

Annual report 2026A · The company itself

“The use of AI may also raise data privacy concerns, particularly if AI systems process sensitive health information subject to GDPR, HIPAA or other privacy regulations.”

Annual report 2026A · The company itself

“Many governments, regulators, investors, employees, Customers and other stakeholders continue to be focused on corporate responsibility, including policies regarding climate change and greenhouse gas emissions.”

Annual report 2026A · The company itself

“Many of our Customers are also committing to, and may become subject to legal or regulatory requirements with respect to, long-term targets to reduce greenhouse gas emissions within their supply chains and associated emissions reporting. If we are unable to support Customers in fulfilling these obligations or achieving reductions, we may lose revenue if our Customers find other suppliers who are better able to support such efforts.”

Annual report 2026A · The company itself

“Om det dessutom sprids en allmän uppfattning om att industrin för onlinespel inte kan hantera allmänhetens oro för spelberoende kan politiska påtryckningar och den allmänna opinionen leda till ökad reglering av branschen. Sådana nya bestämmelser kan leda till betydande kostnader om vi behöver anpassa befintliga spel eller göra justeringar i vårt spelutvecklingsarbete för att följa dem, vilket kan leda till en väsentlig negativ inverkan på koncernens rörelsekostnader och lönsamhet.”

Annual report 2024A · The company itself

“Risker relaterade till behandlingen av personuppgifter Motåtgärder På Stillfront behandlar vi personuppgifter från, bland annat, med arbetare och användare och vi måste följa lagar, regler och bestämmelser om dataskydd i flera jurisdiktioner. Om vi inte följer tillämpliga lagar, förordningar och regler om dataskydd kan det leda till negativ publicitet, skadat anseende och förlust av användare och intäkter för koncernen.”

Annual report 2024A · The company itself

“In March 2024, we received our first EcoVadis sustainability Gold rating, placing us in the top 5% of businesses in our industry.”

Annual report 2024A · The company itself

“We were pleased to see our sustainability achievements recognised with a Gold EcoVadis rating.”

Annual report 2024A · The company itself

“These efforts were recognised with an EcoVadis Gold rating for our wholly owned terminals, placing us among the top 1% of companies within the warehousing and storage industry.”

Annual report 2024A · The company itself

“Dersom Storebrand ikke handler i tråd med egne verdier og reguleringer for bærekraft vil det innebære en risiko for tillitsbrudd og kunne utløse anklager om grønnvasking. Dette er forbundet med omdømmetap og regulatoriske reaksjoner.”

Annual report 2024A · The company itself

“Konsernet innførte en rutine for bærekraftkommunikasjon i 2024, som eies av kommunikasjonsdirektør. Formålet er å sikre at alle medarbeidere som jobber med kommunikasjon og markedsføring av bærekraft gjør dette på en måte som er innenfor den gjeldende lovgivning, retningslinjer fra tilsynsmyndigheter og internt regelverk.”

Annual report 2024A · The company itself

“Storebrand bruker sin posisjon til å være en veiviser innen bærekraftig finans og en aktiv eier. Vi tror at dette over tid gir en bedre avkastning på kapitalen for kunder og eiere.”

Annual report 2024A · The company itself

“Storskogen strävar efter att bygga ett långsiktigt förtroende på aktieoch kreditmarknaden genom löpande dialoger med kapitalmarknadsaktörer, god tillgänglighet, transparent redovisning och tydlig finansiell och hållbarhetsmässig målsättning.”

Annual report 2024A · The company itself

“ENVIRONMENTAL, SOCIAL AND GOVERNANCE RISKS We could be negatively impacted by evolving requirements and expectations related to corporate responsibility and sustainability-related matters, including those related to climate: Governments, investors, customers, employees and other stakeholders have been focused on corporate responsibility practices and disclosures, and expectations in this area continue to rapidly evolve, including in diverging directions. On occasion, we announce new initiatives and make disclosures, including goals, relating to various corporate responsibility matters.”

Annual report 2025A · The company itself

“Risks Suominen is involved with through business relationships in the value chain include increasing regulatory requirements, climate-related supply chain disruptions, and reputational risks linked to societal concerns regarding single-use products.”

Annual report 2025A · The company itself

“Suominen is committed to the UN Global Compact corporate responsibility initiative and its principles in the areas of human rights, labor, environment, and anti-corruption. We have supported the initiative since 2020.”

Annual report 2025A · The company itself

“Good corporate culture and sustainability vision can improve our reputation and increase our attractiveness to employees, customers and investors.”

Annual report 2025A · The company itself

“Our target is that all employees have completed Suominen’s sustainability training program by 2030.”

Annual report 2025A · The company itself

“Twice a year, Suominen monitors supplier scorecards, taking the opportunity to engage with suppliers who score less than the average industry score. In such a case, Suominen will initiate a corrective action plan (CAP) to address unacceptable scores and encourage the supplier to make improvements.”

Annual report 2025A · The company itself

“Our Code of Conduct training is mandatory for all employees and an e-Learning course on anti-bribery and corruption is mandatory for all white-collar employees.”

Annual report 2025A · The company itself

“Från lagstiftarens håll märks det i form av ökade krav för hållbarhetsredovisning såväl på produktsom bolagsnivå.”

Annual report 2024A · The company itself

“Högre krav på miljöprestanda, inklusive hållbarhetsrapportering, kan utgöra en risk eftersom detta innebär utlämning av mer information och högre kostnader för koncernen. Om koncernen inte lever upp till de nya kraven finns det även risk för straffavgifter eller att vårt rykte skadas.”

Annual report 2024A · The company itself

“Som ett led i detta publicerade vi i februari 2024 våra första miljövarudeklarationer (EPD:er). Det här är ett viktigt steg i vårt hållbarhetsarbete och ett viktigt verktyg för att både utveckla vårt eget erbjudande och stötta kunder, arkitekter och bostadsutvecklare att göra mer informerade och hållbara val. ”Med fortsatt produktutveckling, lansering av nya produktserier och utökad kapacitet ser vi goda möjligheter att ytterligare stärka marknadspositionen.””

Annual report 2024A · The company itself

“Vårt långsiktiga mål är att Svedbergs Group ska vara en ledande aktör inom hållbara badrumslösningar i norra Europa, och vi ser redan idag att vårt hållbarhetsfokus ger oss en konkurrensfördel i dialogen med både kunder och konsumenter.”

Annual report 2024A · The company itself

“Hållbarhet är prioriterat och integrerat i alla affärsprocesser.”

Annual report 2024A · The company itself

“Mkr 2024 2023 2022 200 20 Fortsatt arbete med att miljövarudeklarera produkter Macro Design fortsatte under året arbetet med att miljödeklarera produkter i sortimentet. De produkter som EPD-certifierades under 2024 tillhörde produktserierna Spirit och Empire.”

Annual report 2024A · The company itself

“Miljövarudeklarerade produkter Arbetet med att miljödeklarera produkterna i sortimentet fortsatte under året. Bakgrunden är nya lagkrav som kräver ökad transparens kring enskilda produkters miljöprestanda ur ett livscykelperspektiv.”

Annual report 2024A · The company itself

“Möjligheter E Svedbergs Group kan förbättra sina produkters övergripande påverkan från hela livscykeln och på så sätt minimera regelverksrelaterade risker, uppfylla kundernas ökade förväntningar och skapa kostnadsbesparande möjligheter.”

Annual report 2024A · The company itself

“För att säkerställa produkternas hållbarhet fokuserar Svedbergs Group på miljömärkning och certifiering, samt att öka andelen egen produktion.”

Annual report 2024A · The company itself

“Arbete med miljövarudeklarationer (Enivironmental Product Declarations) Inom varumärkesbolagen pågår ett arbete med att miljövarudeklarera sina respektive produktportföljer. EPD:er, eller Enivironmental Product Declarations, är omfattande och standardiserade dokument som kvantifierar en produkts miljöpåverkan.”

Annual report 2024A · The company itself

“Bankens CSO följer upp och rapporterar kvartalsvis till verkställande direktören och styrelsen om bankens övergripande hållbarhetsarbete. Minst halvårsvis avrapporteras koncernens risker inom hållbarhetsområdet även i den verkställande direktörens risk- och compliancekommitté.”

Annual report 2024A · The company itself

“Parallellt med detta ökar kraven på hållbarhet både från investerare, kunder och samhällsaktörer genom skärpta standarder och regelverk vilket gäller även de sociala och ekonomiska aspekterna.”

Annual report 2024A · The company itself

“Typ av risker Förändringar på marknaden Konsekvenser/Utmaningar för Sweco Möjligheter för Sweco Regulatoriska Globala utmaningar driver på förändringar i klimatpolitik och lagstiftning och leder till nya lagar och regler som kan påverka den egna verksamheten och kunders verksamhet. De regulatoriska hållbarhetskraven för Swecos verksamhet ökar.”

Annual report 2024A · The company itself

“Ökade hållbarhetskrav från kunderna i anbudsprocesserna.”

Annual report 2024A · The company itself

“Varumärke Förutom att minska klimatavtrycket från den egna verksamheten fokuserar Sweco på att stärka sin position som föregångare i att bidra till samhällsomställning tillsammans med kunder och medarbetare.”

Annual report 2024A · The company itself

“Bureau Valstar-Simonis B.V., Nederländerna är ett teknikkonsultbolag specialiserat på cirkularitet och tekniska installationer för hållbarhet, inomhusklimat och säkerhet i byggnader. Förvärvet stärker Swecos ställning som ett av de ledande bolagen i Nederländerna inom området hållbara byggnader vilket är i linje med Swecos förvärvsstrategi att växa med nyckelkompetens inom tillväxtområden.”

Annual report 2024A · The company itself

“Vi sätter stort värde i att känna våra fastigheter för att skapa lösningar som är bra både för kunden, SLP och för miljön. Alla nyproduktionsprojekt miljöcertifieras och vi arbetar aktivt med att certifiera befintliga fastigheter.”

Annual report 2024A · The company itself

“Data privacy laws and the regulatory activity associated therewith, continue to evolve across most jurisdictions in which we operate. Given the complexity of these laws, uncertainty regarding their interpretation, application, and enforcement and the often-onerous requirements they place on businesses regarding the collection, storage, handling, use, disclosure, transfer, and security of personal data, it is important for us to understand their impact and respond accordingly.”

Annual report 2026A · The company itself

“Utveckla hållbarhetsstrategin för att positionera Saab som en ledande aktör inom hållbarhet i försvarsindustrin.”

Annual report 2024A · The company itself

“Saabs vetenskapsbaserade mål för 2050 godkänns Målsättningen om mångfald och inkludering införlivas i Performance Share Plan En ny koncernövergripande energistrategi godkänns Saab sätter upp ett mål om 40 utbildningstimmar per anställd per år Utmaningar framöver Anpassning till ny omfattande europeisk lagstiftning inom hållbarhet Utfasning av ämnen som inger betänkligheter och ämnen som inger mycket stora betänkligheter Utmaning att uppfylla målen i Scope 3 - användning av sålda produkter.”

Annual report 2024A · The company itself

“For example, in April 2021, Apple began requiring developers to get explicit permission from users, on an app-by-app basis, to use the identifier-for-advertisers, a device identifier assigned by Apple to each of its devices and used by advertisers to attribute app installs to advertising campaigns, target users through user acquisition, and deliver targeted ads. These requirements are known as Apple's AppTracking Transparency framework and have been maintained in subsequent versions of Apple iOS.”

Annual report 2026A · The company itself

“Stakeholders, including consumers, employees and investors, have increasingly focused on corporate responsibility practices of companies. Although we have announced our Corporate Responsibility strategy and related goals, there can be no assurance that our stakeholders will agree with our strategy or that we will be successful in achieving our goals. Failure to implement our strategy or achieve our goals on a timely basis, or at all, could damage our reputation, causing our investors or consumers to lose confidence in our Company and brands, and negatively impact our operations.”

Annual report 2026A · The company itself

“Any Corporate Responsibility report that we publish or other sustainability disclosure we make may include our policies and practices on a variety of social and ethical matters, including corporate governance, environmental compliance, employee health and safety practices, human capital management, product quality, supply chain management and our workforce. It is possible that stakeholders may not be satisfied with our Corporate Responsibility practices or the speed of our adoption of these practices. We could also incur additional costs and require additional resources to monitor, report and comply with various Corporate Responsibility practices and various legal, legislative and regulatory requirements.”

Annual report 2026A · The company itself

“TCM Group has been committed to the Science Based Targets initiative (SBTi) since 2023.”

Annual report 2025A · The company itself

“Across all activities, we are committed to acting responsibly with respect to people, planet and products.”

Annual report 2025A · The company itself

“Under 2024 presenterade Tele2 en uppdatering av sin framgångs - rika hållbarhetsstrategi, som ursprungligen lanserades 2021. Syftet med den uppdaterade strategin är att säkerställa att hållbarhet är en integrerad del av vår kärnverksamhet och skapar delat värde för Tele2s intressenter.”

Annual report 2024A · The company itself

“Den uppdaterade strategin identifierar fyra fokusområden där Tele2 kan särskilja sig från konkurrenterna. Genom att ta en ledande posi - tion inom dessa områden kan vi både skapa betydande påverkan och affärsvärde.”

Annual report 2024A · The company itself

“Alla produkter utformas enligt generella produktkrav och enligt principerna i designmetoden Design for the Environment som beskrivs ovan. Cradlepoint (som numera är en del av segmentet Enterprise Wireless Solutions) har egna produktkrav som bland annat bygger på principer liknande dem i designmetoden Design for the Environment.”

Annual report 2024A · The company itself

“Korruptio tai lahjonta Telesten toimitusketjussa tai omassa toiminnassa Telesten tai sen toimittajan yhdistäminen korruptio- tai lahjontasyytteeseen voisi johtaa liiketoiminnan päättymiseen joidenkin asiakkaiden kanssa.”

Annual report 2025A · The company itself

“Detta har formaliserats genom direktivet om hållbarhetsrapportering (CSRD) och direktivet om tillbörlig aktsamhet för företag i fråga om hållbarhet (CSDDD).”

Annual report 2024A · The company itself

“I stället läggs större tonvikt vid hållbarhet, den digitala ekonomin och säkerhet.”

Annual report 2024A · The company itself

“We face increasing scrutiny from stakeholders related to our sustainability practices and disclosures. Investor advocacy groups, certain institutional investors, lenders, investment funds and other influential investors are also increasingly focused on such practices and related disclosures and in recent years have placed increasing importance on the implications and social cost of their investments.”

Annual report 2025A · The company itself

“In addition, government organizations are enhancing or advancing legal and regulatory requirements specific to these matters. The heightened stakeholder focus on sustainability issues related to our business requires the continuous monitoring of various and evolving laws, regulations, standards and expectations and the associated reporting requirements.”

Annual report 2025A · The company itself

“Tivolis års- og bæredygtighedsrapport er samlet i en rapport, tilpasset strukturen og kravene i ESRS-standarden”

Annual report 2025A · The company itself

“Increasing scrutiny of, and evolving expectations for, sustainability and environmental, social, and governance initiatives could increase our costs, harm our reputation, or otherwise adversely impact our business. We, as with other companies, may face scrutiny related to our environmental, social and governance (“ESG”) practices and disclosures from certain investors, capital providers, shareholder advocacy groups, other market participants, customers, and other stakeholder groups.”

Annual report 2025A · The company itself

“Tuotelaatu-, vastuullisuus- ja maineriski Jos esimerkiksi Tokmanni -konsernin tuoteturvallisuuden valvonta epäonnistuu tai toimitusketjun vastuullisuuden varmistus pettää, voi seurauksena olla taloudellinen menetys ja asiakkaiden luottamuksen heikentyminen tai menettäminen. Vastuullisuusnäkökulmien, tuotteiden tuotannon ja hankinnan vastuullisuuden sekä työntekijöiden oikeudenmukaisen ja tasapuolisen kohtelun merkitys sidosryhmille on entistä korostuneempi.”

Annual report 2025A · The company itself

“Arvoketjun alkupää Siirtymäriski: puutteellisesta toiminnasta aiheutuvat kustannukset ja mainehaitta Puutteelliset ilmastotoimet voivat johtaa mainehaittaan, joka voi heikentää kykyä houkutella asiakkaita, liikekumppaneita ja sijoittajia. Yhä kiristyvän sääntelyn noudattamatta jättäminen voi johtaa sakkoihin.”

Annual report 2025A · The company itself

“Kestävää hankintaa ohjaavat sisäiset politiikat sekä amfori BSCI:n eettinen toimintaohje, jotka edistävät ihmisoikeuksien kunnioittamista koko toimitusketjussa.”

Annual report 2025A · The company itself

“Odotukset täyttävä tai ne ylittävä ilmastotyö vahvistaa mainetta ja kilpailukykyä sekä houkuttelee tiedostavia asiakkaita, liikekumppaneita ja sijoittajia. Toiminnan optimointi voi lisäksi johtaa kustannussäästöihin.”

Annual report 2025A · The company itself

“Tokmanni -konserni on tunnistanut toimintaansa liittyvät riskiraaka-aineet ja edellyttää, että omien tuotemerkkien tuotteet, jotka sisältävät näitä raaka-aineita, ovat sertifioituja.”

Annual report 2025A · The company itself

“Tulikivellä on standardien ISO9001 ja ISO14001 mukaisesti sertifioidut laatu- ja ympäristöjärjestelmät.”

Annual report 2025A · The company itself

“Issues that might pose a reputational risk include failure of our cybersecurity measures to protect against cybersecurity incidents; product liability and product recalls; inaccurate claims regarding the sustainability or content/ingredients of the products sold in our stores, including in connection with our Conscious Beauty program; our social media activity; our handling of issues relating to corporate responsibility matters, including our responses to such matters; failure to comply with applicable laws and regulations or enforce our own policies; public stances on controversial social or political issues; concerns surrounding labor, environmental, workplace 20 Table of Contents safety, and other practices that may vary from U.S. standards in any of our foreign vendors or partners, whether directly or indirectly; and any of the other risks enumerated in these risk factors.”

Annual report 2026A · The company itself

“Complex local, state, national, and international/foreign laws and regulations, such as the California Consumer Privacy Act and the EU General Data Protection Regulation, apply to the collection, use, retention, protection, disclosure, transfer, and other processing of personal data. These privacy and data protection laws and regulations are quickly evolving, with new or modified laws and regulations proposed and implemented frequently and existing laws and regulations subject to new or different interpretations and enforcement.”

Annual report 2026A · The company itself

“Viime vuosien trendistä poiketen EU ilmoitti tavoittelevansa sääntelyn keventämistä Euroopan kilpailukyvyn parantamiseksi. Euroopan komission Omnibus-aloite esiteltiin alkuvuonna ja sen tavoitteeksi kerrottiin muun muassa yritysten kestävyysraportointivaatimusten yksinkertaistaminen erityisesti pienempien yhtiöiden osalta.”

Annual report 2025A · The company itself

“Monia kiinnostaa mahdollisuus yhdistää kilpailukykyiset tuotot mitattavissa oleviin ympäristö- ja sosiaalisiin vaikutuksiin. Vastatakseen tähän tarpeeseen United Bankers allekirjoitti kesällä 2025 ensimmäisenä suomalaisena varainhoitajana kansainväliset vaikuttavuussijoittamisen Operating Principles for Impact Management (OPIM) -toimintaperiaatteet.”

Annual report 2025A · The company itself

“United Bankersin tuotteiden ja palveluiden keskiössä on vastuullinen sijoittaminen. Ympäristön, yhteiskunnan sekä hallintotavan eli niin kutsuttujen ESG-tekijöiden huomiointi on keskeinen osa sijoitusprosesseja, salkunhoitoa sekä tuotteiden ja palveluiden suunnittelua ja kehittämistä.”

Annual report 2025A · The company itself

“In addition, there has recently been heightened regulatory and enforcement focus relating to the collection, use, retention, transfer, and processing of personal data in the U.S. (at both the state and federal level) and internationally. This includes the EU’s General Data Protection Regulation, the California Privacy Rights Act, the Virginia Consumer Data Protection Act, and other similar laws that have been or are expected to be enacted by other jurisdictions.”

Annual report 2025A · The company itself

“We are subject to risks related to our ability to meet our aspirational sustainability and safety goals, including our greenhouse gas intensity reduction goal, which, if not achieved, could damage our reputation and have an adverse effect on our financial performance. Although we have announced aspirational sustainability and safety goals, including our greenhouse gas intensity reduction goal, our efforts to provide more low- and zero-emissions equipment to our customers and our efforts to provide customers with tools to monitor and manage their environmental impacts, there can be no assurance that our shareholders and other stakeholders will agree with our goals and strategies or be satisfied with our efforts to attain such goals.”

Annual report 2025A · The company itself

“For example, we are regulated under the European General Data Protection Regulation (“EU GDPR”) and the United Kingdom’s General Data Protection Regulation (“UK GDPR”), as amended by the Data (Use and Access) Act of 2025, where we act as a data controller for our data products and a data processor with respect to our software products.”

Annual report 2026A · The company itself

“In addition to our own processing of personal data, our customers expect that our solutions can be used to enable their compliance with applicable data protection, data privacy, and cybersecurity laws and regulations. These various laws, regulations, and legislative developments have potentially far-reaching consequences and have and may continue to require us to modify our solutions, our global support business, and our data management practices and incur substantial expense in our efforts to comply.”

Annual report 2026A · The company itself

“As a platform that communicates other organisations’ marketing messages, we have a responsibility to ensure that consumers receive content that complies with our internal guidelines, regulations and voluntary industry guidelines. Responsible advertising is also crucial for maintaining user trust in our products.”

Annual report 2024A · The company itself

“Schibsted Marketplaces’ strategic focus on data aims to create insights that benefit our users through building better and more relevant products and services. Our users are informed of how we do this and of how they can control how we use their data. We make extensive efforts to ensure that we process data in compliance with applicable privacy regulations (such as GDPR) and our users’ expectations.”

Annual report 2024A · The company itself

“In 2024, we had a total of 17 performance measurements connected to S4 and the area consumers and end-users.”

Annual report 2024A · The company itself

“We regularly move data across borders to operate, and consequently are subject to a number of continuously evolving and developing privacy and data protection laws and regulations both domestically and around the world, including, the General Data Protection Regulation ("GDPR") in Europe, the California Privacy Rights and Enforcement Act of 2020 ("CPRA") in the U.S., and the Personal Information Protection Law ("PIPL") in China. These laws impose numerous, and oftentimes differing, obligations on data controllers and processors.”

Annual report 2025A · The company itself

“Companies are facing increasing expectations and scrutiny from customers, regulators, governments, investors, lenders, employees and other stakeholders related to their environmental, social and governance practices and disclosures. Investor advocacy groups, investment funds and influential investors are also focused on these practices, including those related to the environment, climate change, health and safety, supply chain management, diversity, labor conditions and human rights, both in our own operations and in our supply chain.”

Annual report 2025A · The company itself

“In addition, a growing number of our customers, including certain government purchasers, have adopted, or may adopt, procurement policies that include social and environmental requirements, including, for example, requirements to monitor and conduct third party audits, or these customers may seek to include such provisions in their procurement contract terms and conditions. These social and environmental responsibility provisions and initiatives are subject to change, vary from jurisdiction to jurisdiction, and certain elements may be difficult and/or cost prohibitive for us to comply with given the inherent complexity of our external supply chain and the global scope of our operations.”

Annual report 2025A · The company itself

“Regulators and policymakers globally are also increasingly focused on addressing drug shortages and expanding transparency across supply chains. In the U.S., Congress has considered measures to enhance supply chain resiliency and ensure the quality of pharmaceutical products, including expansion of reporting requirements to include API and finished dose manufacturing locations and expanded communication with regulators regarding demand spikes for pharmaceutical products. Compliance with any such requirements may be burdensome or costly.”

Annual report 2025A · The company itself

“Corporate Responsibility and Sustainability: Certain governments around the world are adopting laws and regulations pertaining to corporate responsibility and sustainability performance, transparency and reporting. Regulations may include mandated corporate reporting (e.g., Corporate Sustainability Reporting Directive) or in individual areas, such as mandated reporting on climate-related financial disclosures.”

Annual report 2025A · The company itself

“Vistin has positioned itself as a premium supplier in the highly competitive metformin market, and to become a front runner on sustainability by continuous focus and innovations on reduction of emissions and waste production Vistin is one out of two European Metformin manufacturer, and the only one with a dedicated facility Vistin Pharma’s long-term vision is to have no negative impact on environment, people and local community by the Company’s presence. Vistin Pharma are proud of the sustainability achievements, the track record of deliverables and ongoing ESG focus and investments to further reduce the Company’s carbon footprint.”

Annual report 2024A · The company itself

“Produkterna förbättrar kvaliteten och flexibiliteten i arbetssätten och möjliggör resurseffektiva och pålitliga processer. Vitec utvecklar och levererar vertikala programvaror som bidrar till att skapa ett mer hållbart, motståndskraftigt och inkluderande samhälle, där säkerhet, pålitlighet och hög dataetik är avgörande.”

Annual report 2024A · The company itself

“För att fortsätta växa och vara långsiktigt konkurrenskraftiga behöver vi integrera hållbarhet i allt vi gör.”

Annual report 2024A · The company itself

“Volvo Cars har ett långsiktigt åtagande om att vara ett ansvarsfullt företag med tydligt fokus på hållbar utveckling.”

Annual report 2024A · The company itself

“Furthermore, our customers may adopt procurement policies that include varying requirements that their suppliers should comply with, or they may seek to include such provisions or requirements in their procurement terms and conditions.”

Annual report 2025A · The company itself

“State laws, such as the California Consumer Privacy Act ("CCPA"), in a number of states that have become effective, or will soon be effective, have created a substantially more complex regulatory regime associated with data-handling practices. Moreover, other laws and regulations related to data-handling and privacy that apply to our business, such as the Illinois Biometric Information Privacy Act, the European Union's General Data Protection Regulation ("GDPR"), the United Kingdom's General Data Protection Regulation (which implements the GDPR into U.K. law), China's Personal Information Protection Act ("PIPL"), and similar legislation in Quebec, Canada further increase the compliance obligations of our business.”

Annual report 2026A · The company itself

“Domestic and international laws and regulations relating to environmental, social and governance matters, including environmental sustainability, climate change, human rights and human capital management, have been adopted or are under consideration, some of which include specific, target-driven disclosure requirements or obligations. Responding to these laws and regulations has increased our compliance costs, including from increased investment in technology and appropriate expertise and has required the implementation of new reporting processes, entailing additional compliance risk.”

Annual report 2025A · The company itself

“Public statements with respect to sustainability matters are subject to heightened scrutiny related to the risk of potential “greenwashing,” i.e., allegations of misleading information or false claims overstating potential sustainability benefits made by governmental authorities, non-governmental organizations and other private actors. An inability to implement such policies, practices, and internal controls and maintain compliance with laws and regulations, or a perception among stakeholders that our sustainability disclosures and goals are insufficient or our goals are unattainable, could harm our reputation and competitive position and negatively impact our stock price and business performance.”

Annual report 2025A · The company itself

“Finally, data privacy and security laws and regulations continue to develop, including with regard to HIPAA, privacy and security standards enforced by the Federal Trade Commission, and U.S. state privacy laws governing consumer personal data and consumer health data. Comprehensive consumer data privacy laws, such as the California Consumer Privacy Act, as amended, are in effect.”

Annual report 2025A · The company itself

“Organizations that carry on business in the U.K. supply goods or services, and have a turnover of £36 million or more are subject to corporate reporting requirements under the U.K. Modern Slavery Act 2015.”

Annual report 2025A · The company itself

“We and our operators and managers are subject to numerous such laws and regulations governing the protection of personal and confidential information of our clients, residents and/or employees, including U.S. federal and state laws (including the California Consumer Privacy Act and HIPAA) and non-U.S. laws, such as the U.K. General Data Protection Regulation (“GDPR”) and the E.U. GDPR, which impose a number of obligations on us.”

Annual report 2025A · The company itself

“Many jurisdictions assess fines, the magnitude of which may depend on the annual global revenue of the company and the nature, gravity and duration of, the violation.”

Annual report 2025A · The company itself

“9 | Miljö Föroreningar på våra fastigheter och negativ miljö-/hälsopåverkan på grund av materialval, resursanvändning och uppkomst av avfall utgör risker för Wihlborgs och omgivningen. Att inte arbeta med att minska denna påverkan innebär risk för bristande lagefterlevnad, föroreningar som resulterar i miljöskada och vite, minskad efterfrågan från hyresgäster, bristande förtroende och negativ inverkan på vårt varumärke.”

Annual report 2024A · The company itself

“Att hållbarhetscertifiera vårt bestånd är en grundläggande del i vårt hållbarhetsarbete. Certifieringsarbetet ökar exempelvis vår kunskap om fastigheternas resurs- och energi användning och möjliggör därmed minskad miljö- och klimatpåverkan.”

Annual report 2024A · The company itself

“LOA certifierad i slutet av 2024. Det motsvarar 63 procent av den totala ytan i hela det svenska beståndet eller 43 procent av hela koncernens yta. Under året har totalt 26 byggnader på 24 befintliga fastigheter certifierats.”

Annual report 2024A · The company itself

“Samtliga strategiska leverantörer som Wihlborgs har ramavtal med, som motsvarar 40 procent av samtliga leverantörer under 2024, ska utvärderas enligt processen för bedömning av hållbarhetsprestanda. I slutet av 2024 var 87 procent (78) av dessa helt godkända och uppfyllde samtliga av de hållbarhetskrav som vi ställer.”

Annual report 2024A · The company itself

“Alla strategiska ramavtalsleverantörer utvärderas med hänsyn till ESG-aspekter.”

Annual report 2024A · The company itself

“Additionally, companies across all industries have faced and may continue to face scrutiny from stakeholders related to their environmental, social and governance (“ESG”) practices. Focus and activism related to ESG (as proponents or opponents) and similar matters may hinder access to capital, as investors may decide to reallocate capital or to not commit capital as a result of their assessment of a company’s ESG practices. Companies that do not adapt to or comply with investor or other stakeholder expectations and standards, which are evolving, or that are perceived to have not responded appropriately to the concern for ESG issues, regardless of whether there is a legal requirement to do so, may suffer from reputational damage, and the business, financial condition, and/or stock price of such a company could be materially and adversely affected.”

Annual report 2025A · The company itself

“Williams, Transco, and NWP face pressures from their stakeholders, who are increasingly focused on climate change, to prioritize sustainable energy practices, reduce carbon footprint, and promote sustainability. Williams’ stockholders may require Williams to implement ESG procedures or standards to continue engaging with Williams, to remain invested in Williams, or before they may make further investments in Williams.”

Annual report 2025A · The company itself

“•We receive, process, store, use and share data, some of which contains personal information, which subjects us to complex and evolving governmental regulation and other legal obligations. •We are undertaking certain systems changes that might disrupt our business operations.”

Annual report 2026A · The company itself

“There are numerous federal, state, local and foreign laws and regulations regarding matters central to our business, data privacy and the collection, storing, sharing, use, processing, disclosure and protection of personal information and other data from customers, associates and business partners, the scope of which are regularly changing, subject to uncertain and differing interpretations and may be inconsistent among countries or conflict with other rules.”

Annual report 2026A · The company itself

“The GDPR, CPPA, CPRA and other such laws and regulations impose new and burdensome obligations, and include substantial uncertainty as to their interpretation, and we may face challenges in addressing their requirements, which could result in fines or penalties, lead us or our third-party suppliers to change our data privacy policies and practices and limit our ability to deliver personalized advertising.”

Annual report 2026A · The company itself

“In addition, in connection with these franchise arrangements, we have and will continue to implement certain new processes that may subject us to additional regulations and laws, such as export regulations. Failure to comply with any applicable regulations or laws could have an adverse effect on our results of operations.”

Annual report 2026A · The company itself

“We are also subject to data privacy regulations that apply to health, medical, financial and other types of personal information belonging to our employees, clients and their employees and other third parties across most jurisdictions, including, among others, the E.U. and U.K. General Data Protection Regulations, the Personal Information Protection Law (‘PIPL’) in China and privacy legislation in certain U.S. states, including the California Privacy Rights Act (‘CPRA’).”

Annual report 2025A · The company itself

“Divergent and evolving policy regimes across jurisdictions (including pro-ESG mandates and disclosure regimes in some markets and anti-ESG laws, procurement restrictions or ‘boycott’ statutes in others) can create conflicting obligations, increase the risk of non-compliance, constrain certain business activities or relationships, and negatively affect our reputation and results. As a result of our global operations, we can be subject to conflicting regulatory requirements from which conflicts may be exacerbated in markets with anti-ESG regulations.”

Annual report 2025A · The company itself

“There is increased and sometimes conflicting focus, including from governments, non-governmental organizations, investors, colleagues and clients, on sustainability matters such as environmental stewardship, climate change, inclusion and diversity, racial justice and workplace conduct. Negative public perception, adverse publicity or negative comments in social media and other forums could damage our reputation if we do not, or are not perceived to, adequately or appropriately address any one or more of these issues.”

Annual report 2025A · The company itself

“För det första fortsätter kompetens för hantering av CSRD, regelverk, hantering av hållbarhetsdata och regelefterlevnad att vara efterfrågat. Företag behöver säkerställa att de uppfyller de nya kraven och har rätt kompetens för att hantera dessa aspekter effektivt.”

Annual report 2024A · The company itself

“Under 2024 har Wise Group AB fortsatt utveckla erbjudanden och marknadsföring med fokus på hållbarhet. Tre certifieringsutbildningar för medarbetare har genomförts.”

Annual report 2024A · The company itself

“In particular, our brand and reputation are associated with our environmental sustainability commitments (including our science-based targets), strong corporate governance practices, inclusivity, and ethical use, and any perceived changes in our dedication to these commitments could impact our relationships with potential and current customers, employees, stockholders, and other stakeholders.”

Annual report 2026A · The company itself