CVS HEALTH Corp: Form 10-K for the period ended Dec 31, 2023

Overview

CVS Health Corporation, together with its subsidiaries (collectively, “CVS Health,” the “Company,” “we,” “our” or “us”), is a leading health solutions company building a world of health around every consumer it serves and connecting care so that it works for people wherever they are. As of December 31, 2023, we had more than 9,000 retail locations, more than 1,000 walk-in medical clinics, 204 primary care medical clinics, a leading pharmacy benefits manager with approximately 108 million plan members and expanding specialty pharmacy solutions, and a dedicated senior pharmacy care business serving more than one million patients per year. We serve an estimated more than 35 million people through traditional, voluntary and consumer-directed health insurance products and related services, including expanding Medicare Advantage offerings and a leading standalone Medicare Part D prescription drug plan (“PDP”). We are creating new sources of value through our integrated model allowing us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs.

During the year ended December 31, 2023, the Company completed the acquisition of two key health care delivery assets to enhance its ability to execute on its care delivery strategy by advancing its primary care, home-based care and provider enablement capabilities. On March 29, 2023, the Company acquired Signify Health, Inc. (“Signify Health”), a leader in health risk assessments, value-based care and provider enablement services. On May 2, 2023, the Company also acquired Oak Street Health, Inc. (“Oak Street Health”), a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. Both Signify Health and Oak Street Health are included within the Health Services segment.

In connection with its new operating model adopted in the first quarter of 2023, the Company realigned the composition of its segments to reflect how its Chief Operating Decision Maker (the “CODM”) reviews information and manages the business. The Company’s CODM is the Chief Executive Officer. As a result of this realignment, the Company formed a new Health Services segment, which in addition to providing a full range of pharmacy benefit management (“PBM”) solutions, also delivers health care services in the Company’s medical clinics, virtually, and in the home, as well as provider enablement solutions. In addition, the Company created a new Pharmacy & Consumer Wellness segment, which includes its retail and long-term care pharmacy operations and related pharmacy services, as well as its retail front store operations. This segment will also provide pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. Prior period segment financial information has been recast to conform with the current period presentation. See Note 19 ‘‘Segment Reporting’’ included in Item 8 of this 10-K for segment financial information.

The Company has four reportable segments: Health Care Benefits, Health Services, Pharmacy & Consumer Wellness and Corporate/Other.

Business Strategy

We are building a world of health around every consumer we serve, seeking to make it easier and more affordable to live a healthier life. This means delivering solutions that are more personalized, simpler to use and increasingly digital so consumers can receive care when, where and how they desire. We address holistic health – physical, emotional, social and economic – and we are creating new sources of value through our integrated care model which allows us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs. We believe our consumer-centric strategy will drive sustainable long-term growth and deliver value for all stakeholders.

Health Care Benefits Segment

The Health Care Benefits segment operates as one of the nation’s leading diversified health care benefits providers, serving an estimated more than 35 million people as of December 31, 2023. The Health Care Benefits segment has the information and resources to help members, in consultation with their health care professionals, make more informed decisions about their health care. The Health Care Benefits segment offers a broad range of traditional, voluntary and consumer-directed health insurance products and related services, including medical, pharmacy, dental and behavioral health plans, medical management capabilities, Medicare Advantage and Medicare Supplement plans, PDPs and Medicaid health care management services. The Health Care Benefits segment’s customers include employer groups, individuals, college students, part-time and hourly workers, health plans, health care providers (“providers”), governmental units, government-sponsored plans, labor groups and expatriates.

Health Care Benefits Products and Services

The Company refers to insurance products (where it assumes all or a majority of the risk for medical and dental care costs) as “Insured” and administrative services contract products (where the plan sponsor assumes all or a majority of the risk of medical and dental care costs) as “ASC.” Health Care Benefits products and services consist of the following:

• Commercial Medical: The Health Care Benefits segment offers point-of-service (“POS”), preferred provider organization (“PPO”), health maintenance organization (“HMO”) and indemnity benefit (“Indemnity”) plans. Commercial medical products also include health savings accounts (“HSAs”) and consumer-directed health plans that combine traditional POS or PPO and/or dental coverage, subject to a deductible, with an accumulating benefit account (which may be funded by the plan sponsor and/or the member in the case of HSAs). Principal products and services are targeted specifically to large multi-site national, mid-sized and small employers, individual insureds and expatriates. The Company offers medical stop loss insurance coverage for certain employers who elect to self-insure their health benefits. Under medical stop loss insurance products, the Company assumes risk for costs associated with large individual claims and/or aggregate loss experience within an employer’s plan above a pre-set annual threshold. The segment also has a portfolio of additional health products and services that complement its medical products such as dental plans, behavioral health and employee assistance products, provider network access and vision products.
• Government Medical: In select geographies, the Health Care Benefits segment offers Medicare Advantage plans, Medicare Supplement plans and prescription drug coverage for Medicare beneficiaries; participates in Medicaid and subsidized Children’s Health Insurance Programs (“CHIP”); and participates in demonstration projects for members who are eligible for both Medicare and Medicaid (“Duals”). These Government Medical products are further described below:
• Medicare Advantage: Through annual contracts with the U.S. Centers for Medicare & Medicaid Services (“CMS”), the Company offers HMO and PPO products for eligible individuals in certain geographic areas through the Medicare Advantage program. Members typically receive enhanced benefits over traditional fee-for-service Medicare coverage (“Original Medicare”), including reduced cost-sharing for preventive care, vision and other services. The Company offered network-based HMO and/or PPO plans in 46 states and Washington, D.C. in 2023. For certain qualifying employer groups, the Company offers Medicare PPO products nationally. When combined with the Company’s PDP product, these national PPO plans form an integrated national Insured Medicare product for employers that provides medical and pharmacy benefits.
• Medicare PDP: The Company is a national provider of drug benefits under the Medicare Part D prescription drug program. All Medicare eligible individuals are eligible to participate in this voluntary prescription drug plan. Members typically receive coverage for certain prescription drugs, usually subject to a deductible, co-insurance and/or co-payment. The Company offered PDP plans in all 50 states and Washington, D.C. in 2023.
• Medicare Supplement: For certain Medicare eligible members, the Company offers supplemental coverage for certain health care costs not covered by Original Medicare. The products included in the Medicare Supplement portfolio help to cover some of the gaps in Original Medicare, and include coverage for Medicare deductibles and coinsurance amounts. The Company offered a wide selection of Medicare Supplement products in 49 states and Washington, D.C. in 2023.
• Medicaid and CHIP: The Company offers health care management services to individuals eligible for Medicaid and CHIP under multi-year contracts with government agencies in various states that are subject to annual appropriations. CHIP are state-subsidized insurance programs that provide benefits for families with uninsured children. The Company offered these services on an Insured or ASC basis in 16 states in 2023.
• Duals: The Company provides health coverage to beneficiaries who are dually eligible for both Medicare and Medicaid coverage. These members must meet certain income and resource requirements in order to qualify for this coverage. The Company coordinates 100% of the care for these members and may provide them with additional services in order to manage their health care costs.

The Company also has a portfolio of transformative products and services aimed at creating a holistic and integrated approach to individual health and wellness. These products and services complement the Commercial Medical and Government Medical products and aim to provide innovative solutions, create integrated experience offerings and enable enhanced care delivery to customers.

Health Care Benefits Provider Networks

The Company contracts with physicians, hospitals and other providers for services they provide to the Company’s members. The Company uses a variety of techniques designed to help encourage appropriate utilization of medical services (“utilization”) and maintain affordability of quality coverage. In addition to contracts with providers for negotiated rates of reimbursement, these techniques include creating risk sharing arrangements that align economic incentives with providers, the development and implementation of guidelines for the appropriate utilization and the provision of data to providers to enable them to improve health care quality. At December 31, 2023, the Company’s underlying nationwide provider network had approximately 1.7 million participating providers. Other providers in the Company’s provider networks also include laboratory, imaging, urgent care and other freestanding health facilities.

Health Care Benefits Quality Assessment

CMS uses a 5-star rating system to monitor Medicare health care and drug plans and ensure that they meet CMS’s quality standards. CMS uses this rating system to provide Medicare beneficiaries with a tool that they can use to compare the overall quality of care and level of customer service of companies that provide Medicare health care and drug plans. The rating system considers a variety of measures adopted by CMS, including quality of preventative services, chronic illness management and overall customer satisfaction. See “Health Care Benefits Pricing” below in this Item 1 for further discussion of star ratings. The Company seeks Health Plan accreditation for Aetna Inc. (“Aetna”) HMO plans from the National Committee for Quality Assurance (“NCQA”), a private, not-for-profit organization that evaluates, accredits and certifies a wide range of health care organizations. Health care plans seeking accreditation must pass a rigorous, comprehensive review and must annually report on their performance.

Aetna Life Insurance Company (“ALIC”), a wholly-owned subsidiary of the Company, has received nationwide NCQA PPO Health Plan accreditation. As of December 31, 2023, all of the Company’s Commercial HMO and all of ALIC’s PPO members who were eligible participated in HMOs or PPOs that are accredited by the NCQA.

The Company’s provider selection and credentialing/re-credentialing policies and procedures are consistent with NCQA and URAC, a health care accrediting organization that establishes quality standards for the health care industry, as well as state and federal, requirements. In addition, the Company is certified under the NCQA Credentials Verification Organization (“CVO”) certification program for all certification options and has URAC CVO accreditation.

Quality assessment programs for contracted providers who participate in the Company’s networks begin with the initial review of health care practitioners. Practitioners’ licenses and education are verified, and their work history is collected by the Company or in some cases by the practitioner’s affiliated group or organization. The Company generally requires participating hospitals to be certified by CMS or accredited by The Joint Commission, the American Osteopathic Association, or Det Norske Veritas Healthcare.

The Company also offers quality and outcome measurement programs, quality improvement programs, and health care data analysis systems to providers and purchasers of health care services.

Health Care Benefits Information Systems

The Health Care Benefits segment currently operates and supports an end-to-end suite of information technology platforms to support member engagement, enrollment, health benefit administration, care management, service operations, financial reporting and analytics. The multiple platforms are supported by an integration layer to facilitate the transfer of real-time data. There is continued focus and investment in enterprise data platforms, cloud capabilities, digital products to offer innovative solutions and a seamless experience to the Company’s members through mobile and web channels. The Company is making concerted investments in emerging technology capabilities such as voice, artificial intelligence and robotics to further automate, reduce cost and improve the experience for all of its constituents. The Health Care Benefits segment is utilizing the full breadth of the Company’s assets to build enterprise technology that will help guide our members through their health care journey, provide them a high level of service, enable healthier outcomes and encourage them to take next best actions to lead healthier lives.

Health Care Benefits Customers

Medical membership is dispersed throughout the U.S., and the Company also serves medical members in certain countries outside the U.S. The Company offers a broad range of traditional, voluntary and consumer-directed health insurance products and related services, many of which are available nationwide. Depending on the product, the Company markets to a range of customers, including employer groups, individuals, college students, part-time and hourly workers, health plans, providers, governmental units, government-sponsored plans, labor groups and expatriates. For additional information on medical membership, see “Health Care Benefits Segment” in the Management’s Discussion and Analysis of Financial Condition and Results of Operations (the “MD&A”) included in Item 7 of this 10-K.

The Company markets both Commercial Insured and ASC products and services primarily to employers that sponsor the Company’s products for the benefit of their employees and their employees’ dependents. Frequently, larger employers offer employees a choice among coverage options from which the employee makes his or her selection during a designated annual open enrollment period. Typically, employers pay all of the monthly premiums to the Company and, through payroll deductions, obtain reimbursement from employees for a percentage of the premiums that is determined by each employer. Some Health Care Benefits products are sold directly to employees of employer groups on a fully employee-funded basis. In some cases, the Company bills the covered individual directly. The Company sold Insured plans directly to individual consumers through the individual public health insurance exchanges (“Public Exchanges”) in 12 states as of December 31, 2023. The Company entered Public Exchanges in five additional states effective January 2024.

The Company offers Insured Medicare coverage on an individual basis as well as through employer groups to their retirees. Medicaid and CHIP members are enrolled on an individual basis. The Company also offers Insured health care coverage to members who are dually-eligible for both Medicare and Medicaid.

Health Care Benefits products are sold through: the Company’s sales personnel; independent brokers, agents and consultants who assist in the production and servicing of business; as well as private health insurance exchanges (“Private Exchanges”) and Public Exchanges (together with Private Exchanges, “Insurance Exchanges”). For large employers or other entities that sponsor the Company’s products (“plan sponsors”), independent consultants and brokers are frequently involved in employer health plan selection decisions and sales. In some instances, the Company may pay commissions, fees and other amounts to brokers, agents, consultants and sales representatives who place business with the Company. In certain cases, the customer pays the broker for services rendered, and the Company may facilitate that arrangement by collecting the funds from the customer and transmitting them to the broker. The Company supports marketing and sales efforts with an advertising program that may include television, radio, billboards, print media and social media, supplemented by market research and direct marketing efforts.

The U.S. federal government is a significant customer of the Health Care Benefits segment through contracts with CMS for coverage of Medicare-eligible individuals and federal employee-related benefit programs. Other than the contracts with CMS, the Health Care Benefits segment is not dependent upon a single customer or a few customers the loss of which would have a significant effect on the earnings of the segment. The loss of business from any one or a few independent brokers or agents would not have a material adverse effect on the earnings of the Health Care Benefits segment. Health Care Benefits segment revenues from the federal government accounted for 14% of the Company’s consolidated total revenues in 2023, 2022 and 2021. Contracts with CMS for coverage of Medicare-eligible individuals in the Health Care Benefits segment accounted for approximately 73%, 74% and 79%, respectively, of the Company’s consolidated revenues from the federal government in 2023, 2022 and 2021.

Health Care Benefits Pricing

For Commercial Insured plans, contracts containing the pricing and other terms of the relationship are generally established in advance of the policy period and typically have a duration of one year. Fees under ASC plans are generally fixed for a period of one year.

Generally, a fixed premium rate is determined at the beginning of the policy period for Commercial Insured plans. The Company typically cannot recover unanticipated increases in health care and other benefit costs in the current policy period; however, it may consider prior experience for a product in the aggregate or for a specific customer, among other factors, in determining premium rates for future policy periods. Where required by state laws, premium rates are filed and approved by state regulators prior to contract inception. Future operating results could be adversely affected if the premium rates requested are not approved or are adjusted downward or their approval is delayed by state or federal regulators.

The Company has Medicare Advantage and PDP contracts with CMS to provide HMO, PPO and prescription drug coverage to Medicare beneficiaries in certain geographic areas. Under these annual contracts, CMS pays the Company a fixed per member (or “capitation”) payment and/or a portion of the premium, both of which are based on membership and adjusted for demographic and health risk factors. CMS also considers inflation, changes in utilization patterns and average per capita fee- for-service Medicare costs in the calculation of the fixed capitation payment or premium. PDP contracts also provide a risk-sharing arrangement with CMS to limit the Company’s exposure to unfavorable expenses or benefit from favorable expenses. Amounts payable to the Company under the Medicare arrangements are subject to annual revision by CMS, and the Company elects to participate in each Medicare service area or region on an annual basis. Premiums paid to the Company for Medicare products are subject to federal government reviews and audits, which can result, and have resulted, in retroactive and prospective premium adjustments and refunds to the government and/or members. In addition to payments received from CMS, some Medicare Advantage products and all PDP products require a supplemental premium to be paid by the member or sponsoring employer. In some cases, these supplemental premiums are adjusted based on the member’s income and asset levels. Compared to Commercial Medical products, Medicare contracts generate higher per member per month revenues and higher health care and other benefit costs.

The Patient Protection and Affordable Care Act and the Health Care and Education Reconciliation Act of 2010 (collectively, the “ACA”) ties a portion of each Medicare Advantage plan’s reimbursement to the plan’s “star ratings.” Plans must have a star rating of 4 or higher (out of 5) to qualify for bonus payments. CMS released the Company’s 2024 star ratings in October 2023. The Company’s 2024 star ratings will be used to determine which of the Company’s Medicare Advantage plans have ratings of four stars or higher and qualify for bonus payments in 2025. Based on the Company’s membership at December 31, 2023, 87% of the Company’s Medicare Advantage members were in plans with 2024 star ratings of at least 4.0 stars, compared to the unmitigated 21% of the Company’s Medicare Advantage members being in plans with 2023 star ratings of at least 4.0 stars based on the Company’s membership at December 31, 2022. Refer to “Medicare Star Ratings” within the “Government Regulation” section of this Item 1 for further discussion of the decrease in the Company’s star ratings.

Rates for Medicare Supplement products are regulated at the state level and vary by state and plan.

Under Insured Medicaid contracts, state government agencies pay the Company fixed monthly rates per member that vary by state, line of business and demographics; and the Company arranges, pays for and manages the health care services provided to Medicaid beneficiaries. These rates are subject to change by each state, and, in some instances, provide for adjustment for health risk factors. CMS requires these rates to be actuarially sound. The Company also receives fees from customers where it provides services under ASC Medicaid contracts. ASC Medicaid contracts generally are for periods of more than one year, and certain of them contain performance incentives and limited financial risk sharing with respect to certain medical, financial and operational metrics. Under these arrangements, performance is evaluated annually, with associated financial incentive opportunities, and financial risk share obligations are typically limited to a percentage of the fees otherwise payable to the Company. Payments to the Company under Medicaid contracts are subject to the annual appropriation process in the applicable state.

Under Duals contracts, the rate setting process is generally established by CMS in partnership with the state government agency participating in the demonstration project. Both CMS and the state government agency may seek premium and other refunds under certain circumstances, including if the Company fails to comply with CMS regulations or other contractual requirements.

The Company offers HMO and consumer-directed medical and dental plans to federal employees under the Federal Employees Health Benefits (“FEHB”) Program and the Federal Employees Dental and Vision Insurance Program. Premium rates and fees for those plans are subject to federal government review and audit, which can result, and have resulted, in retroactive and prospective premium and fee adjustments and refunds to the government and/or members.

Health Care Benefits Seasonality

The Health Care Benefits segment’s quarterly operating income progression is impacted by (i) the seasonality of benefit costs which generally increase during the year as Insured members progress through their annual deductibles and out-of-pocket expense limits, (ii) continued changes in product mix between Commercial and Government medical membership and (iii) the seasonality of operating expenses, which are generally the highest during the fourth quarter due primarily to spending to support readiness for the start of the upcoming plan year and marketing associated with Medicare annual enrollment.

During the year ended December 31, 2023, overall medical costs continued to progress toward normalized utilization in the first quarter. Beginning in the second quarter of 2023, the segment experienced higher than previously expected medical cost trend in Medicare Advantage driven by increased outpatient and supplemental benefit utilization when compared with pandemic influenced utilization levels in the prior year. This elevated utilization continued through year end, which resulted in elevated medical costs throughout the remainder of 2023.

During the year ended December 31, 2022, the impact of COVID-19 within the Health Care Benefits segment generally stabilized as a result of the Company’s ability to capture COVID-19 related medical costs in pricing, and the segment experienced a return to a more normal seasonality pattern, as described above.

During the year ended December 31, 2021, the customary quarterly operating income progression was impacted by COVID-19. While overall medical costs in the first quarter were generally consistent with historical baseline levels in the aggregate, the segment experienced increased COVID-19 testing and treatment costs and lower Medicare risk-adjusted revenue. During the second quarter, COVID-19 testing and treatment costs persisted, however at levels significantly lower than those observed during the first quarter. Beginning in the third quarter, medical costs once again increased primarily driven by the spread of the emerging new variants of COVID-19, which resulted in increased testing and treatment costs that continued throughout the fourth quarter.

Health Care Benefits Competition

The health care benefits industry is highly competitive, primarily due to a large number of for-profit and not-for-profit competitors, competitors’ marketing and pricing and a proliferation of competing products, including new products that are continually being introduced into the marketplace. New entrants into the marketplace, as well as consolidation within the industry, have contributed to and are expected to intensify the competitive environment. In addition, the rapid pace of change as the industry evolves towards a consumer-focused retail marketplace, including Insurance Exchanges, and the increased use of technology to interact with members, providers and customers, increase the risks the Company faces from new entrants and disruptive actions by existing competitors compared to prior periods.

The Company believes that the significant factors that distinguish competing health plans include the perceived overall quality (including accreditation status), quality of service, comprehensiveness of coverage, cost (including premium rates, provider discounts and member out-of-pocket costs), product design, financial stability and ratings, breadth and quality of provider networks, ability to offer different provider network options, providers available in such networks, and quality of member support and care management programs. The Company believes that it is competitive on each of these factors. The Company’s ability to increase the number of persons covered by its health plans or to increase Health Care Benefits segment revenues is affected by its ability to differentiate itself from its competitors on these factors. Competition may also affect the availability of services from providers, including primary care physicians, specialists and hospitals.

Insured products compete with local and regional health care benefits plans, health care benefits and other plans sponsored by other large commercial health care benefit insurance companies, health system owned health plans, new entrants into the marketplace and numerous for-profit and not-for-profit organizations operating under licenses from the Blue Cross and Blue Shield Association. The largest competitor in Medicare products is Original Medicare. Additional Health Care Benefits segment competitors include other types of medical and dental provider organizations, various specialty service providers (including PBM services providers), health care consultants, financial services companies, integrated health care delivery organizations (networks of providers who also coordinate administrative services for and assume insurance risk of their members), third party administrators (“TPAs”) and, for certain plans, programs sponsored by the federal or state governments. Emerging competitors include start up health care benefits plans, provider-owned health plans, new joint ventures (including not-for-profit joint ventures among firms from multiple industries), financial services firms that are distributing competing products on their proprietary Private Exchanges, and consulting firms that are distributing competing products on their proprietary Private Exchanges, as well as non-traditional distributors such as retail companies. The Company’s ability to increase the number of persons enrolled in Insured Commercial Medical products also is affected by the desire and ability of employers to self-fund their health coverage.

The Health Care Benefits segment’s ASC plans compete primarily with other large commercial health care benefit companies, numerous for-profit and not-for-profit organizations operating under licenses from the Blue Cross and Blue Shield Association and TPAs.

In addition to competitive pressures affecting the Company’s ability to obtain new customers or retain existing customers, the Health Care Benefits segment’s medical membership has been and may continue to be adversely affected by adverse and/or uncertain economic conditions and reductions in workforce by existing customers due to adverse and/or uncertain general economic conditions, especially in the U.S. and industries where such membership is concentrated.

Health Care Benefits Reinsurance

The Company currently has several reinsurance agreements with non-affiliated insurers that relate to Health Care Benefits insurance policies. The Company entered into these contracts to reduce the risk of catastrophic losses which in turn reduces capital and surplus requirements. The Company frequently evaluates reinsurance opportunities and refines its reinsurance and risk management strategies on a regular basis.

Health Services Segment

The Health Services segment provides a full range of PBM solutions, delivers health care services in its medical clinics, virtually, and in the home, and offers provider enablement solutions. PBM solutions include plan design offerings and administration, formulary management, retail pharmacy network management services, and specialty and mail order pharmacy services. In addition, the Company provides clinical services, disease management services, medical spend management and pharmacy and/or other administrative services for providers and federal 340B drug pricing program covered entities (“Covered Entities”). The Company operates a group purchasing organization that negotiates pricing for the purchase of pharmaceuticals and rebates with pharmaceutical manufacturers on behalf of its participants and provides various administrative, management and reporting services to pharmaceutical manufacturers. During 2023, the Company completed the acquisition of two key health care delivery assets – Signify Health, a leader in health risk assessments, value-based care and provider enablement services, and Oak Street Health, a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. The Company also announced the launch of CordavisTM, a wholly owned subsidiary that will work directly with pharmaceutical manufacturers to commercialize and/or co-produce high quality biosimilar products. The Health Services segment’s clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Medicaid managed care (“Managed Medicaid”) plans, CMS, plans offered on Insurance Exchanges and other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities. During the year ended December 31, 2023, the Company’s PBM filled or managed 2.3 billion prescriptions on a 30-day equivalent basis.

Health Services Products and Services

PBM Solutions

The Health Services segment manages prescription drug distribution directly through the Company’s specialty and mail order pharmacies and through pharmacies in its retail network. All prescriptions processed by the Company are analyzed, processed and documented by the Company’s proprietary prescription management systems. These systems provide essential features and functionality to allow plan members to utilize their prescription drug benefits. These systems also streamline the process by which prescriptions are processed by staff and network pharmacists by enhancing review of various items through automation, including plan eligibility, early refills, duplicate dispensing, appropriateness of dosage, drug interactions or allergies, over-utilization and potential fraud.

Plan Design Offerings and Administration

The Company assists its PBM clients in designing pharmacy benefit plans that help improve health outcomes while minimizing the costs to the client. The Company also assists PBM clients in monitoring the effectiveness of their plans through frequent, informal communications, the use of proprietary software, as well as through formal annual, quarterly and sometimes monthly performance reviews. The Company administers pharmacy benefit plans for clients who contract with it to facilitate prescription drug coverage and claims processing for their eligible plan members. The Company also provides administrative services for Covered Entities.

The Company makes recommendations to help PBM clients design benefit plans that promote the use of lower cost, clinically appropriate drugs and helps its PBM clients control costs by recommending plan designs that encourage the use of generic equivalents of brand name drugs when such equivalents are available. Clients also have the option, through plan design, to further lower their pharmacy benefit plan costs by setting different member payment levels for different products on their drug lists or “formularies,” which helps guide members to choose lower cost alternatives through appropriate financial incentives.

Formulary Management

The Company utilizes an independent panel of doctors, pharmacists and other medical experts, referred to as the CVS Caremark National Pharmacy and Therapeutics Committee, to review and approve the selection of drugs that meet the Company’s standards of safety and efficacy for inclusion on one of the Company’s template formularies. The Company’s formularies provide recommended products in numerous drug classes to help ensure member access to clinically appropriate drugs with alternatives within a class under the client’s pharmacy benefit plan, while helping to drive the lowest net cost for clients that select one of the Company’s formularies. To help improve clinical outcomes for members and clients, the Company conducts ongoing, independent reviews of all drugs, including those appearing on the formularies and generic equivalent products. Many of the Company’s clients choose to adopt a template formulary offering as part of their plan design. PBM clients are given capabilities to offer real time benefits information for a member’s specific plan design, provided electronically in the Electronic Health Record at the point of prescribing, at the CVS pharmacy and directly to members.

Retail Pharmacy Network Management Services

The Company maintains a national network of approximately 66,000 retail pharmacies, consisting of approximately 38,000 chain pharmacies (which include CVS pharmacy locations) and approximately 28,000 independent pharmacies, in the U.S., including Puerto Rico, the District of Columbia, Guam and the U.S. Virgin Islands. When a customer fills a prescription in a retail pharmacy, the pharmacy sends prescription data electronically to the Company from the point-of-sale. This data interfaces with the Company’s proprietary prescription management systems, which verify relevant plan member data and eligibility, while also performing a drug utilization review to help evaluate clinical appropriateness and safety and confirming that the pharmacy will receive payment for the prescription.

Specialty and Mail Order Pharmacy Services

The Company operates mail order pharmacies, specialty mail order pharmacies and retail specialty pharmacy stores in the U.S. The mail order pharmacies are used primarily for maintenance medications, while the specialty mail order pharmacies and retail specialty pharmacy stores are used for the delivery of advanced medications to individuals with chronic or genetic diseases and disorders. The Health Services segment’s plan members or their prescribers submit prescriptions or refill requests to these pharmacies, and staff pharmacists review these prescriptions and refill requests with the assistance of the Company’s prescription management systems. This review may involve communications with the prescriber and, with the prescriber’s approval when required, can result in generic substitution, therapeutic interchange or other actions designed to help reduce cost and/or improve quality of treatment.

The Company’s mail order pharmacies and specialty mail order pharmacies have been awarded Mail Service Pharmacy and Specialty Pharmacy accreditation, respectively, from URAC. Substantially all of the Company’s specialty mail order pharmacies also have been accredited by The Joint Commission and the Accreditation Commission for Health Care (“ACHC”), which are independent, not-for-profit organizations that accredit and certify health care programs and organizations in the U.S. The ACHC accreditation includes an additional accreditation by the Pharmacy Compounding Accreditation Board, which certifies compliance with the highest level of pharmacy compounding standards.

In connection with its new operating model adopted in the first quarter of 2023, the Company consolidated its specialty and mail order pharmacy fulfillment operations, which were previously included in the former Pharmacy Services segment, with its retail and long-term care pharmacy fulfillment operations in the newly formed Pharmacy & Consumer Wellness segment. Under this new operating model, the Health Services segment pays an administrative service fee to the Pharmacy & Consumer Wellness segment, in exchange for which the Pharmacy & Consumer Wellness segment provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings.

Clinical Services

The Company offers multiple clinical programs and services to help clients manage overall pharmacy and health care costs in a clinically appropriate manner. These programs are primarily designed to promote better health outcomes and to help target inappropriate medication utilization and non-adherence to medication, each of which may result in adverse medical events that negatively affect member health and client pharmacy and medical spend. These programs include utilization management (“UM”), medication management, quality assurance, adherence and counseling programs to complement the client’s plan design and clinical strategies. To help address prescription opioid abuse and misuse, the Company introduced an industry-leading UM approach that limits to seven days the supply of opioids dispensed for certain acute prescriptions for patients who are new to therapy, limits the daily dosage of opioids dispensed based on the strength of the opioid and requires the use of immediate-release formulations of opioids before extended-release opioids are dispensed. The Company’s Pharmacy Advisor® program facilitates pharmacist counseling, both face-to-face and over the telephone, to help participating plan members with certain chronic diseases, such as diabetes and cardiovascular conditions, to identify gaps in care, adhere to their prescribed medications and manage their health conditions. The Company also has digital connectivity that helps to lower drug costs for patients by providing expanded visibility to lower cost alternatives through enhanced analytics and data sharing.

Disease Management Programs

The Company’s clinical programs and services utilize advanced protocols and offer clients convenience in working with providers and other third parties. The Company’s care management program covers diseases such as rheumatoid arthritis,

Parkinson’s disease, epilepsy and multiple sclerosis and is accredited by the NCQA. The Company’s UM program covers similar diseases and is accredited by the NCQA and URAC.

Medical Benefit Management

The Company’s NovoLogix® online preauthorization tool helps identify and capture cost savings opportunities for specialty drugs billed under the medical benefit by identifying outliers to appropriate dosages and costs, and helps to ensure clinically appropriate use of specialty drugs.

Group Purchasing Organization Services

The Company operates a group purchasing organization that negotiates pricing for the purchase of pharmaceuticals and rebates with pharmaceutical manufacturers on behalf of its participants. The Company also provides various administrative, management and reporting services to pharmaceutical manufacturers.

Value-Based Care

In response to rising healthcare spending in the U.S., commercial, government and other payors are shifting away from fee-for-service payment models towards value-based models, including risk-based payment models that tie financial incentives to quality, efficiency and coordination of care. Value-based care (“VBC”) refers to the goal of incentivizing healthcare providers to simultaneously increase quality while lowering the cost of care for patients. More specifically, providers in a VBC model are incentivized to focus on more preventative care, higher quality of care and better coordination of care to create better health outcomes and avoid potentially expensive complications from illnesses that could be managed more conveniently and cost effectively.

The Company is committed to expanding value-based care in the U.S. and delivering higher quality care to patients at a lower overall cost to the industry. The Company operates in value-based care through two primary means: providing comprehensive primary care through its Oak Street Health primary care centers and enabling independent health systems transition to value-based care through contracting and care management services. The Company’s value-based care assets typically contract with payors, primarily Medicare Advantage plans, and/or CMS.

The Company’s Oak Street Health business operates retail-like, community-based centers that provide medical primary care services and support Medicare eligible patients in the management of chronic illnesses and the prevention of unnecessary acute events. Through its centers and management services organization, the Company combines an innovative health care model and its proprietary Canopy technology with superior patient experience and quality care. The Company engages its patients through the use of an innovative community outreach approach. Once engaged, the Company integrates population health analytics, social support services and primary care into the care model to drive improved patient outcomes. The Company contracts with health plans and CMS to generate medical costs savings, assume full financial risk of its patients and realize a return on its investment in primary care.

The Company’s clinics implement a branded and consumer-focused design to create a welcoming environment that engages patients. While traditional healthcare facilities are often located in medical office buildings that are removed from where patients spend a majority of their time, the Company targets locations in highly accessible, convenient locations close to where patients live, work and shop. Each of the Company’s centers has a consistent look and feel, which contributes to the success in acquiring patients. Subsequent to the Company’s acquisition of Oak Street Health, the Company has opened 31 locations. As of December 31, 2023, the Company operated 204 centers across 25 states, which provided care for approximately 270,000 patients.

In addition to its primary care centers, the Company provides enablement services to independent health systems, assisting these groups with their transition to value-based care. The Company’s customers practice value-based care primarily through two programs administered by CMS, the Accountable Care Organization (“ACO”) Realizing Equity, Access, and Community Health (“REACH”) Model (collectively, “ACO REACH”) and the Medicare Shared Savings Program (“MSSP”), under which the Company served approximately 793,000 covered lives as of December 31, 2023.

ACOs are networks of healthcare providers and suppliers that work together to invest in infrastructure and redesign delivery processes to attempt to achieve high quality and efficient delivery of services. ACOs that achieve performance standards established by the U.S. Department of Health and Human Services (“HHS”) are eligible to share in a portion of the amounts saved by the Medicare program. ACOs employ a retrospective payment system in which Medicare reimburses providers in accordance with their usual fee-for-service payment schedule, while also tracking the total fee-for-service costs for all billable services rendered for attributed Medicare beneficiaries over the course of a year. CMS periodically compares the total amount of all fee-for-service payments for a beneficiary against a benchmark price for the annual cost of such beneficiary’s medical care. If the total fee-for-service costs exceed the benchmark price, then typically the ACO owes a portion of the difference to CMS and, likewise, if total fee-for-service costs are lower than the benchmark price, then CMS pays a portion of the difference, representing the shared savings achieved, to the ACO.

The Company’s ACO REACH contracts are global risk arrangements and the ACO assumes full risk for the total cost of care for aligned beneficiaries and, accordingly, the ACO is subject to 100% of shared savings and shared losses. The final shared savings due from CMS or shared losses due to CMS for each performance period is reconciled in the year following the performance year.

As part of the MSSP, the Company helps unrelated providers join together to form a “collaborative ACO.” The collaborative ACO has a large attributed patient population, consisting of the beneficiaries attributed to all of the participating providers. Risks are therefore spread across a much larger beneficiary population, helping to stabilize performance and reduce downside risk for participating providers. The Company offers providers a suite of tools and services that are designed to enhance their ability to effectively manage and coordinate the care of attributed patients in order to improve patient outcomes, reduce costs and generate savings. The Company assumes a portion of the collaborative ACO’s financial risk and also receives a portion of any shared savings received by the collaborative ACO.

In-Home Health Evaluations

As a complement to its value-based care delivery, the Company operates a large mobile network of credentialed providers in the U.S. through its Signify Health business. These credentialed providers are deployed into the home primarily to conduct in-home health evaluations (“IHEs”) and perform select diagnostic services. IHEs may also be performed virtually or at a healthcare provider facility. From the date of the Signify Health acquisition through December 31, 2023, the Company performed nearly 2 million IHEs. While in the home, providers perform IHEs with the assistance of the Company’s longitudinal patient records and proprietary clinical workflow software with its integrated device hub. The Company’s software guides clinical workflows as well as in-home diagnostic screenings, yielding a rich patient report of hundreds of data points. The Company also offers diagnostic and preventive services and provides comprehensive medication review services while in the home. Through its IHEs, the Company creates a comprehensive, documented record of the clinical, social and behavioral needs of its health plan customers’ medically complex populations and seek to further engage them with the healthcare system.

The evaluation results of IHEs are provided to individuals’ primary care physicians. The Company believes sharing these results helps to fill gaps in care, while encouraging individuals who have not regularly visited their PCP to schedule a visit. The IHEs also provide health plans with insights into member health without taking members out of the home, the reports IHEs produce form a basis of the Medicare Risk Adjustment Factor (“RAF”) scores, which contribute to health plans’ ability to effectively participate in value-based and risk-adjusted government programs such as Medicare Advantage, and affect the premiums health plans receive for Medicare Advantage beneficiaries. The data gathered during an IHE is also a resource that can be used by health plans to improve their Healthcare Effectiveness Data and Information Set (“HEDIS”) scores and Medicare Advantage star ratings.

MinuteClinic

As of December 31, 2023, the Company operated more than 1,000 MinuteClinic locations in the U.S. The clinics are staffed by nurse practitioners and physician assistants who utilize nationally established guidelines to deliver a variety of health care services. Payors value these clinics because they provide convenient, high-quality, cost-effective care, in many cases offering an attractive alternative to more expensive sites of care. MinuteClinic also offers virtual care services to connect customers with licensed providers to provide access to health services remotely. MinuteClinic is collaborating with the Company’s medical and pharmacy members to help meet the needs of the Company’s health plan and client plan members by offering programs that can improve member health and lower costs. MinuteClinic also maintains relationships with leading hospitals, clinics and physicians in the communities we serve to support and enhance quality, access and continuity of care.

Health Services Information Systems

The Health Services segment’s claim adjudication platform incorporates architecture that centralizes the data generated from adjudicating retail pharmacy, specialty and mail order claims and delivering other solutions to PBM clients. The Health Engagement Engine® technology and proprietary clinical algorithms help connect various parts of the enterprise and serve an essential role in cost management and health improvement, leveraging cloud-native technologies and practices. This capability transforms pharmacy data into actionable interventions at key points of care, including in retail, mail and specialty pharmacies as well as in customer care call center operations, leveraging our enterprise data platform to improve the quality of care. The technology leverages assisted artificial intelligence to deliver insights to the business and bring automation to otherwise manual tasks. Specialty services also connects with our claim adjudication platform and various health plan adjudication platforms with a centralized architecture servicing many clients and members. Operating services, such as Specialty Expedite®, provide an interconnected onboarding solution for specialty medications and branding solutions ranging from fulfillment to total patient management. These services are managed through our new innovative specialty workflow and web platform.

The Health Services segment’s custom-built proprietary Canopy technology is a key driver of the success of its value-based care model and foundation for patients receiving a consistent, high-quality level of care. Canopy underlies every aspect of the Company’s day-to-day clinical and operational workflows, allowing care teams to tailor care plans to the needs of both the patient and the business. Canopy integrates an immense amount of data about patients from a broad set of sources, including payor claims data, pharmacy data and medical records from hospitals and specialists and provides actionable insights and workflows to accelerate effective clinical management and oversight. Canopy leverages artificial intelligence and machine learning capabilities to create and refine a clinical rules engine (predictive models and prescriptive algorithms) that informs care delivery and addresses hospital admissions and readmissions, medical costs and patient retention.

Through the collaboration of its digital and technical teams, the Company has established critical tools which enable patients to schedule appointments through MinuteClinic.com. Key elements of the offerings include landing pages which highlight services and answer common questions, screening capabilities to determine patient eligibility, service location locator and appointment selection tools to efficiently identify the requested service on a specified date, time, and location and registration pages to collect required patient information, accelerating check-in once at the MinuteClinic. Once scheduled, the tools provide the user with instructions and notifications including SMS text message and email reminders, and also provide digital results and records, enabling patients to view and save their medical records for convenient access at a later point.

Health Services Clients & Customers

The Company’s Health Services clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Managed Medicaid plans, CMS, plans offered on Insurance Exchanges, other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities. The Health Services segment’s revenues are primarily generated from the sale and managing of prescription drugs to eligible members in benefit plans maintained by clients. Pharmaceuticals are provided to eligible members in benefit plans maintained by clients and utilize the Company’s information systems, among other things, to help perform safety checks, drug interaction screening and identify opportunities for generic substitution.

The Company’s primary care operations rely on its value-based capitated partnerships with payors and CMS which manage and market Medicare Advantage plans across the U.S. The Company has strategic value-based relationships with over 30 different payors as of December 31, 2023, including each of the top 5 national payors by number of Medicare Advantage patients. These existing contracts and relationships and their understanding of the value of the Company’s model reduces the risk of entering into new markets as the Company typically has payor contracts before entering a new market. Maintaining, supporting and growing these relationships, particularly as the Company enters new geographies, is critical to its long-term success.

The Company’s value-based care arrangements are primarily directed at independent health systems, including community hospitals, physician practices and clinics, participating in, or seeking to participate in, ACOs or contract with Medicare Advantage plans.

The Company’s IHE operations customers are primarily Medicare Advantage health plans and Managed Medicaid organizations. In 2023, the Company had IHE contracts with 52 health plans in the U.S., including 25 of the 50 largest Medicare Advantage plans.

Health Services Seasonality

The majority of the Health Services segment revenues, including revenues generated from its PBM services, are not seasonal in nature.

The Company’s primary care operations experience some variability depending upon the time of year in which they are measured. Typically, a significant portion of the Company’s at-risk patient growth is experienced during the first quarter, when plan enrollment selections made during the prior annual enrollment period from October 15th through December 7th of the prior year take effect. Per-patient revenue will generally decline over the course of the year as new patients typically join with less complete or accurate documentation (and therefore lower risk-adjustment scores), and patient attrition skews towards higher-risk (and therefore greater revenue) patients. Finally, medical costs will vary seasonally depending on a number of factors including the weather, which can be a driver of certain illnesses such as the influenza virus.

Revenues generated from the Company’s IHEs and related services are generally lower in the fourth quarter of each calendar year than the other quarters. Each year, IHE customers provide a member list, which may be supplemented or amended during the year. Customers generally limit the number of times the Company may attempt to contact their members. Throughout the year, as IHEs are completed and the Company attempts to contact members, the number of members who have not received an IHE and whom the Company is still able to contact declines, typically resulting in fewer IHEs scheduled during the fourth quarter.

Health Services Competition

The Company believes the primary competitive factors in the health services industry include: (i) the ability to negotiate favorable discounts from drug manufacturers as well as to negotiate favorable discounts from, and access to, retail pharmacy networks; (ii) the ability to identify and apply effective cost management programs utilizing clinical strategies, including the development and utilization of preferred formularies; (iii) the ability to market PBM and other health products and services; (iv) the commitment to provide flexible, clinically-oriented services to clients and be responsive to clients’ needs; (v) the ability to attract and retain physicians, nurse practitioners, physician assistants and other medical personnel; (vi) the quality, scope and costs of products and services offered to clients and their members, as well as the care delivered to customers; and (vii) operational excellence in delivering services.

The Health Services segment has a significant number of competitors offering PBM services, including large, national PBM companies (e.g., Prime Therapeutics and MedImpact), PBMs owned by large national health plans (e.g., the Express Scripts business of Cigna Corporation and the OptumRx business of UnitedHealth) and smaller standalone PBMs. The Health Services segment’s MinuteClinic offerings compete with retail health clinics, urgent care and primary care offices. The Company competes for provider solutions and health information technology (“HIT”) business with other large health plans and commercial health care benefit insurance companies as well as information technology companies and companies that specialize in provider solutions and HIT.

The Company’s primary care operations compete with large and medium-sized local and national providers of primary care services, such as Aledade, Centerwell and health system affiliated practices, for, among other things, contracts with payors, recruitment of physicians and other medical and non-medical personnel and individual patients. Principal primary care competitors for patients and payor contracts vary considerably in type and identity by market. Because of the low barriers of entry into the primary care business and the ability of physicians to own primary care centers and/or also be medical directors for their own centers, competition for growth in existing and expanding markets is not limited to large competitors with substantial financial resources.

The Company’s ACO operations compete with healthcare risk management providers. Key competitors are companies that work directly with providers to enable them to successfully take risk in value-based care arrangements. Some of these competitors focus on a specific function – like analytics – while others offer more comprehensive services. The MSSP offers comprehensive services, including a collaborative ACO model, a suite of population health tools and services, and the ability to facilitate in-home annual wellness visits, which is unique and distinguishes the Company from competitors. Some key competitors operate nationally (e.g., Aledade, Collaborative Health Systems, Evolent Health, Vytalize Health and Stellar Health) while other competitors are more geographically focused (e.g., Equality Health and Physicians of Southwest Washington).

The Company’s IHE and related services operations compete with a wide variety of local and national providers of in-home, virtual and in-person diagnostic and evaluative services. Competitors include pure-play companies whose principal business is providing health risk assessments and similar services (e.g., Matrix Medical Network), as well as large payors, which may use a variety of different providers to perform health risk assessments across care settings or may perform some or all of their health risk assessments utilizing their own in-house capabilities.

Pharmacy & Consumer Wellness Segment

The Pharmacy & Consumer Wellness segment dispenses prescriptions in its retail pharmacies and through its infusion operations, provides ancillary pharmacy services including pharmacy patient care programs, diagnostic testing and vaccination administration, and sells a wide assortment of health and wellness products and general merchandise. The segment also conducts long-term care pharmacy (“LTC”) operations, which distribute prescription drugs and provide related pharmacy consulting and ancillary services to long-term care facilities and other care settings, and provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. As of December 31, 2023, the Pharmacy

& Consumer Wellness segment operated more than 9,000 retail locations, as well as online retail pharmacy websites, LTC pharmacies and on-site pharmacies, retail specialty pharmacy stores, compounding pharmacies and branches for infusion and enteral nutrition services. During the year ended December 31, 2023, the Pharmacy & Consumer Wellness segment filled 1.6 billion prescriptions on a 30-day equivalent basis and dispensed approximately 26.7% of total retail pharmacy prescriptions in the U.S.

Pharmacy & Consumer Wellness Products and Services

A typical retail store sells prescription drugs and a wide assortment of high-quality, nationally advertised brand name and proprietary brand merchandise. Pharmacy locations may also contract with Covered Entities under the federal 340B drug pricing program. Front store categories include over-the-counter drugs, consumer health products, beauty products and personal care products. The Company purchases merchandise from numerous manufacturers and distributors. The Company believes that competitive sources are readily available for substantially all of the products carried in its retail stores and the loss of any one supplier would not likely have a material effect on the Pharmacy & Consumer Wellness segment. LTC operations include distribution of prescription drugs and related consulting and ancillary services.

Pharmacy & Consumer Wellness revenues by major product group are as follows:

(1) Pharmacy includes LTC sales and sales in pharmacies within Target Corporation (“Target”) and other retail stores.

(2) “Other” represents less than 11% of the “Front store and other” revenue category in all periods presented.

Pharmacy

Pharmacy revenues represented over three-fourths of Pharmacy & Consumer Wellness segment revenues in each of 2023, 2022 and 2021. The Company believes that retail pharmacy operations will continue to represent a critical part of the Company’s business due to industry demographics, e.g., an aging American population consuming a greater number of prescription drugs, prescription drugs being used more often as the first line of defense for managing illness, the introduction of new pharmaceutical products, the need for vaccinations, including the COVID-19 vaccination, and Medicare Part D growth. The Company believes the retail pharmacy business benefits from investment in both people and technology, as well as innovative collaborations with health plans, PBMs and providers. Given the nature of prescriptions, consumers want their prescriptions filled accurately by professional pharmacists using the latest tools and technology, and ready when promised. Consumers also need medication management programs and better information to help them get the most out of their health care dollars. To assist consumers with these needs, the Company has introduced integrated pharmacy health care services that provide an earlier, easier and more effective approach to engaging consumers in behaviors that can help lower costs, improve health and save lives.

Front Store

Front store revenues reflect the Company’s strategy of innovating with new and unique products and services, using innovative personalized marketing and adjusting the mix of merchandise to match customers’ needs and preferences. A key component of the front store strategy is the ExtraCare® card program, which is one of the largest and most successful retail loyalty programs in the U.S. The ExtraCare program allows the Company to balance marketing efforts so it can reward its best customers by providing them with automatic sale prices, customized coupons, ExtraBucks® rewards and other benefits. The Company also offers a subscription-based membership program, ExtraCare PlusTM, under which members are entitled to a suite of benefits delivered over the course of the subscription period, as well as a promotional reward that can be redeemed for future goods and services. The Company continues to launch and enhance new and exclusive brands to create unmatched offerings in beauty products and deliver other unique product offerings, including a full range of high-quality proprietary brand products that are only available through CVS stores. The Company currently carries approximately 5,500 proprietary brand products, which accounted for approximately 21% of front store revenues during 2023.

On-site Pharmacies

The Company also operates a limited number of pharmacies located at client sites, which provide certain health plan members and customers with a convenient alternative for filling their prescriptions and receiving vaccinations, including the COVID-19 vaccination.

Specialty and Mail Order Pharmacy Fulfillment Services

The Pharmacy & Consumer Wellness segment provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings, in exchange for which the Health Services segment pays an administrative service fee to the Pharmacy & Consumer Wellness segment.

Infusion and Enteral Services

The Company operates branches for compounding, specialty infusion and enteral nutrition services in the U.S.

Medical Diagnostic Testing

The Company offers medical diagnostic testing through its CVS pharmacy locations. The Company offered point of care COVID-19 testing at more than 2,000 pharmacy locations as of December 31, 2023.

Long-term Care Pharmacy Operations

The Pharmacy & Consumer Wellness segment provides LTC pharmacy services through the Omnicare® business. Omnicare’s customers consist of skilled nursing facilities, assisted living facilities, independent living communities, hospitals, correctional facilities, and other health care service providers. The Company provides pharmacy consulting, including monthly patient drug therapy evaluations, to assist in compliance with state and federal regulations and provide proprietary clinical and health management programs. It also provides pharmaceutical case management services for retirees, employees and dependents who have drug benefits under corporate-sponsored health care programs.

Community Location Development

CVS Health’s community health destinations are an integral part of its ability to meet the needs of consumers and maintain its leadership position in the changing health care landscape. When paired with its rapidly expanding digital presence, the Company’s physical presence in thousands of communities across the country represents a competitive advantage by allowing it to develop deep and trusted relationships through everyday engagement in consumer health. The Company’s community health destinations have played, and will continue to play, a key role in the Company’s continued growth and success. During 2023, the Company opened approximately 39 new locations, relocated 5 locations and closed approximately 318 locations.

The Company’s continuous assessment of its national footprint is an essential component of competing effectively in the current health care environment. On an ongoing basis, the Company evaluates changes in population, consumer buying patterns and future health needs to assess the ability of its existing stores and locations to meet the needs of its consumers and the business. During the fourth quarter of 2021, the Company completed a strategic review of its retail business and announced its plans to reduce store density in certain locations through the closure of approximately 900 retail stores between 2022 and 2024. As of December, 31, 2023, the Company has closed approximately 600 retail stores in connection with this strategic review.

Pharmacy & Consumer Wellness Information Systems

The Company has continued to invest in information systems to enable it to deliver exceptional customer service, enhance safety and quality, and expand patient care services while lowering operating costs. The proprietary WeCARE Workflow tool supports pharmacy teams by prioritizing work to meet customer expectations, facilitating prescriber outreach, and seamlessly integrating clinical programs. This solution delivers improved efficiency and enhances customer experience, as well as provides a framework to accommodate the evolution of pharmacy practice and the expansion of clinical programs. The Company’s Health Engagement Engine technology and data science clinical algorithms enable the Company to help identify opportunities for pharmacists to deliver face-to-face counseling regarding patient health and safety matters, including medication adherence issues, gaps in care and management of certain chronic health conditions. The Company’s digital strategy is to empower the consumer to navigate their pharmacy experience and manage their condition through integrated online and mobile solutions that offer utility and convenience. The Company’s LTC digital technology suite, Omniview®, improves the efficiency of customers’ operations with tools that include executive dashboards, pre-admission pricing, electronic ordering of prescription refills, proof-of-delivery tracking, access to patient profiles, receipt and management of facility bills, and real-time validation of Medicare Part D coverage, among other capabilities. The Company has also established tools which enable customers to schedule diagnostic testing and vaccination appointments through CVS.com, provide instructions and notifications to the customer regarding the services, and, following administration, allow customers to access digital results for tests and records for vaccinations.

Pharmacy & Consumer Wellness Customers

The success of the Pharmacy & Consumer Wellness segment’s businesses is dependent upon the Company’s ability to establish and maintain contractual relationships with pharmacy benefit managers and other payors on acceptable terms. Substantially all of the Pharmacy & Consumer Wellness segment’s pharmacy revenues are derived from pharmacy benefit managers, managed care organizations (“MCOs”), government funded health care programs, commercial employers and other third-party payors. No single Pharmacy & Consumer Wellness payor accounted for 10% or more of the Company’s consolidated total revenues in 2023, 2022 or 2021.

Pharmacy & Consumer Wellness Seasonality

The majority of Pharmacy & Consumer Wellness segment revenues, particularly pharmacy revenues, generally are not seasonal in nature. However, front store revenues tend to be higher during the December holiday season. In addition, both pharmacy and front store revenues are affected by the timing and severity of the cough, cold and flu season. Uncharacteristic or extreme weather conditions also can adversely affect consumer shopping patterns and Pharmacy & Consumer Wellness revenues, expenses and operating results.

During the year ended December 31, 2023, the impact of COVID-19 on the Pharmacy & Consumer Wellness segment continued to decline compared to the prior year. OTC test kit demand was highest during the first quarter and declined to its lowest quarterly volume during the fourth quarter. In contrast, contributions from COVID-19 vaccinations reached their highest quarterly volume during the fourth quarter.

During the year ended December 31, 2022, the customary quarterly operating income progression in the Pharmacy & Consumer Wellness segment continued to be impacted by COVID-19. During the first quarter, the Company saw high volumes of administration of COVID-19 vaccinations, as well as demand for OTC test kits in the front store, particularly in the beginning of the year when the Omicron variant incidence was high. In addition, the Company administered the highest quarterly volume of COVID-19 diagnostic tests of 2022 during the first quarter, however a decline compared to the prior year. During the second and third quarters, the Company continued to generate earnings from the sale of OTC test kits, as customers performed more in-home testing versus diagnostic testing, in addition to earnings from the continued administration of COVID-19 diagnostic testing and vaccinations, albeit at lower levels than those experienced in the first quarter. During the fourth quarter, the Company saw an increase in COVID-19 vaccine administration from the prior quarter related to the bivalent COVID-19 booster.

During the year ended December 31, 2021, the customary quarterly operating income progression was impacted by COVID-19. During the first quarter, the Company experienced reduced customer traffic in its retail pharmacies, which reflected the impact of a weaker cough, cold and flu season, while it administered the highest quarterly volume of COVID-19 diagnostic tests. During the second quarter, the segment generated earnings from COVID-19 vaccinations and saw improved customer traffic as vaccinated customers began more actively shopping in CVS locations. During the third and fourth quarters, emerging new variants drove the continued administration of COVID-19 vaccinations (including booster shots) and diagnostic testing, while the segment also generated earnings from the sale of OTC test kits in the front store.

Pharmacy & Consumer Wellness Competition

The retail pharmacy business is highly competitive. The Company believes that it competes principally on the basis of: (i) store location and convenience, (ii) customer service and satisfaction, (iii) product selection and variety, and (iv) price. In the areas it serves, the Company competes with other drugstore chains (e.g., Walgreens and Rite Aid), supermarkets, discount retailers (e.g., Walmart), independent pharmacies, restrictive pharmacy networks, online retailers (e.g., Amazon), membership clubs, infusion pharmacies, as well as mail order dispensing pharmacies.

LTC pharmacy services are highly regional or local in nature, and within a given geographic area of operation, highly competitive. The Company’s largest LTC pharmacy competitor nationally is PharMerica. The Company also competes with numerous local and regional institutional pharmacies, pharmacies owned by long-term care facilities and local retail pharmacies. Some states have enacted “freedom of choice” or “any willing provider” requirements as part of their state Medicaid programs or in separate legislation, which may increase the competition that the Company faces in providing services to long-term care facility residents in these states.

Corporate/Other Segment

The Company presents the remainder of its financial results in the Corporate/Other segment, which primarily consists of:

• Management and administrative expenses to support the Company’s overall operations, which include certain aspects of executive management and the corporate relations, legal, compliance, human resources and finance departments, information technology, digital, data and analytics, as well as acquisition-related transaction and integration costs; and
• Products for which the Company no longer solicits or accepts new customers such as its large case pensions and long-term care insurance products.

Generic Sourcing Venture

The Company and Cardinal Health, Inc. (“Cardinal”) each have a 50% ownership in Red Oak Sourcing, LLC (“Red Oak”), a generic pharmaceutical sourcing entity. Under this arrangement, the Company and Cardinal contributed their sourcing and supply chain expertise to Red Oak and agreed to source and negotiate generic pharmaceutical supply contracts for both companies through Red Oak. Red Oak does not own or hold inventory on behalf of either company.

Working Capital Practices

The Company funds the growth of its businesses through a combination of cash flow from operations, commercial paper and other short-term borrowings, as well as long-term borrowings. For additional information on the Company’s working capital practices, see “Liquidity and Capital Resources” in the MD&A included in Item 7 of this 10-K. Employer groups, individuals, college students, part-time and hourly workers, health plans, providers, governmental units, government-sponsored plans (with the exception of Medicare Part D services, which are described below), labor groups and expatriates, which represent the vast majority of Health Care Benefits segment revenues, typically settle in less than 30 days. As a provider of Medicare Part D services, the Company contracts annually with CMS. Utilization of services each plan year results in the accumulation of either a receivable from or a payable to CMS. The timing of settlement of the receivable or payable with CMS takes several quarters, which impacts working capital from year to year. The majority of the Pharmacy & Consumer Wellness segment non-pharmacy revenues are paid in cash, or with debit or credit cards. Managed care organizations, pharmacy benefit managers, government funded health care programs, commercial employers and other third party insurance programs, which represent the vast majority of the Company’s consolidated pharmacy revenues, typically settle in less than 30 days. The remainder of the Company’s consolidated pharmacy revenues are paid in cash, or with debit or credit cards.

Human Capital

Overview

At CVS Health, we share a single, clear purpose: bringing our heart to every moment of your health. We devote significant time and attention to the attraction, development and retention of talent to deliver high levels of service to our customers. Our commitment to them includes a competitive rewards package and programs that support our diverse range of colleagues in rewarding and fulfilling careers. As of December 31, 2023, we employed over 300,000 colleagues primarily in the U.S. including in all 50 states, the District of Columbia and Puerto Rico, approximately 73% of whom were full-time.

We believe engaged colleagues produce stronger business results and are more likely to build a career with the Company. Each year we conduct engagement surveys that provide colleagues with an opportunity to share their opinions and experiences with respect to their role, their team and the enterprise to help CVS Health Corporation’s Board of Directors (the “Board”) and our management identify areas where we can improve colleague experience. These surveys cover a broad range of topics including development and opportunities, diversity management, recognition, performance, well-being, compliance and continuous improvement. In 2023, we conducted engagement surveys in both January and November. More than 145,000 colleagues participated in each survey and overall engagement stayed consistent across surveys.

The Board, our Chief Executive Officer (“CEO”) and our Chief People Officer provide oversight of our human capital strategy, which consists of the following categories: total rewards; diversity, equity and inclusion; colleague development; and health and safety.

Total Rewards

We recognize how vital our colleagues are to our success and strive to offer a comprehensive and competitive mix of pay and benefits to meet the varying needs of our colleagues and their families. In addition to competitive wages, the comprehensive list of programs and benefits that we offer include annual bonuses, stock awards, 401(k) plans including matching company contributions, no cost comprehensive wellness screenings, tobacco cessation and weight management programs, no cost confidential counseling and no cost financial navigation support, an employee stock purchase plan, health care and insurance benefits, paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs and tuition assistance, retiree medical access, and discount programs, among many others, depending on eligibility.

Diversity, Equity, Inclusion & Belonging

We believe that a diverse workforce creates a healthier, stronger and more sustainable company. We aim to attract, develop, retain and support a diverse workforce that reflects the many customers, patients, members and communities we serve. Our Diversity Management Leadership Council, a cross-functional group of senior leaders appointed by our CEO, works with our Strategic Diversity Management leadership team to intentionally embed the full spectrum of diversity across all facets of our business. For our efforts, we have been recognized as one of Seramount’s Best Companies for Multicultural Women and earned a 100 percent score on the Disability Equality Index, meaning the company is recognized as a “Best Place to Work for Disability Inclusion.” The Company discloses information on our diversity, equity, inclusion and belonging strategy and programs in our annual Environmental, Social and Governance (“ESG”) Report.

As a foundation of diversity and inclusion, we continuously focus on talented representation across our business. In 2023, 70% of our total colleague population and 46% of our colleagues at the manager level and above self-reported as female. In addition, in 2023 our colleagues reported their race/ethnicity as: White (47%), Black/African American (18%), Hispanic/Latino (17%), Asian (12%) and Other (6%). The appendix to our ESG Report and our EEO-1 Employer Information Report include additional information on the diversity of our workforce.

Our diversity strategy emphasizes workforce representation across the full spectrum of diversity, a workplace that promotes inclusion and belonging for all, and a marketplace that reflects the customers, consumers, and communities we serve. We have continued the deployment of our INCLUDE program to activate inclusive behaviors. We support 16 Colleague Resource Groups (“CRGs”) that include more than 29,000 colleagues across the enterprise. These groups represent a wide range of professional, cultural, ethical and personal affinities and interests, as well as formal mentoring programs. Our CRGs provide all of our colleagues with an opportunity to connect and network with one another through a particular affinity, culture or interest. Each of our CRGs is sponsored by a senior leader.

Colleague Development

The Company offers a number of resources and programs that attract, engage, develop, advance and retain colleagues. Training and development provides colleagues the support they need to perform well in their current role while planning and preparing for future roles and career growth. We offer an online orientation program that pairs new hires with seasoned colleagues and the training continues throughout a colleague’s career through in-person, virtual and self-paced learning at all levels. We also provide mentoring, tools and workshops for colleagues to manage their career development. We offer a variety of management and leadership programs that develop incumbent diverse and other high potential colleagues. In addition, we offer leadership development to all leaders across the organization to best support their growth and their leadership of our colleagues. Our broad training practices include updated, tech-enabled tools and keep our colleagues informed of new developments in our industry that are relevant to their roles. During the year ended December 31, 2023, our colleagues invested approximately 14 million hours in learning and development courses.

Our colleague development programming also promotes the importance of compliance across our business. Our colleagues demonstrate this commitment through our annual Code of Conduct training, which nearly 100% of active colleagues completed in 2023. In 2023, we launched approximately 70 different training courses as part of our Enterprise Compliance Training Program.

Health & Safety

We have a strong commitment to providing a safe working environment. We have implemented an environmental health and safety management system to support adherence and monitoring of programs designed to make our various business operations compliant with applicable occupational safety and health regulations and requirements. Our Health, Safety, & Environmental

Department oversees the implementation and adherence to programs like Powered Industrial Truck training, materials handling and storage, selection of personal protective equipment and workplace violence prevention.

We utilize a Management Information System to track compliance, analyze data and concentrate on key areas of risk to reduce the chance of workplace incidents. We focus on identifying causes and improving performance when workplace incidents occur. We capture colleague observations and feedback through programs like our Behavior Based Safety and our Safety Hazard and Awareness Reporting Program. We also engage leaders in promoting a culture of safety. With safety task forces in place at each distribution center, we empower leaders and safety business partners to identify policies, procedures and processes that could improve their own operations.

From the outset of the COVID-19 pandemic, we took a comprehensive approach to managing occupational health and safety challenges presented by the pandemic, including implementing facial covering requirements for our workplaces and providing face masks to colleagues, providing sick leave, implementing symptom screening measures and implementing additional protocols in accordance with applicable Occupational Safety and Health Administration (“OSHA”) requirements and guidance and Centers for Disease Control and Prevention (“CDC”) guidelines for workplaces. We have emphasized the importance of taking immediate steps toward full vaccination.

Environmental, Social and Governance Strategy

Overview

Our Healthy 2030 ESG strategy outlines how we are creating a more equitable health care system and sustainable future. It reinforces our company’s strategy and is embedded in our purpose-driven culture. Healthy 2030 is constructed through our four-pillar framework – Healthy People, Healthy Business, Healthy Community and Healthy Planet. We are focused on making a meaningful, measurable impact within each of the pillars outlined below. We believe this strategy is achievable without materially adversely affecting our operating results and/or cash flows.

Healthy People

We keep people at the center of all our decisions across CVS Health because we believe every person has the fundamental right to be as healthy as possible. Every day, we work to make health care simpler, more accessible, affordable and more convenient for every person we serve. Whether we are increasing equitable access to health care and services, reducing energy use or making investments to support under-resourced communities to improve health outcomes, we are leveraging our expertise and resources to improve people’s health.

Healthy Business

We are purpose-driven – all of us. Diversity, equity, inclusion and belonging are a part of our core values and imperative to operating at our best. Together, we set high standards and hold ourselves to them. We work daily to create value for everyone who trusts and relies on us and ensure every action we take is done ethically and transparently. We support our colleagues' education and growth with scholarships, promote and develop leadership skills through training and development courses and continue strengthening our pipeline for a diverse workforce by expanding our workforce initiatives into our communities. We integrate governance and partnership across our business units and seek responsible and equitable purchasing practices throughout our supply chain. We hold our supplier's partners to the same standard.

Healthy Community

We are strengthening our communities by addressing the unique barriers to improving health outcomes locally. We will make a lasting impact by pulling together all our assets to encourage a more holistic approach and collaboration across our programs, investments and organizations. As part of this work, we are investing nationwide to expand access to mental and maternal health care services and address health-related social needs to complement our company’s strategy and focus areas. When a natural disaster or other incident affects the communities where we live and work, we swiftly take action to ensure our response addresses our colleagues' and customers' evolving needs. Our colleagues are also making a meaningful difference in the communities where we live and work by donating their time and talents, and we’re supporting their efforts by contributing to the causes that mean the most to them.

Healthy Planet

We are inseparable from the environment we operate in and the people we serve. That’s why we continue to invest in initiatives and programs that focus on improving the health of our planet by advancing our sustainability commitments and addressing the environmental factors that contribute to health inequities. We were one of the first companies in the world to have our net-zero targets validated by the Science-Based Targets Initiative’s (SBTi) net-zero methodology. This set us on the path to achieving net-zero emissions from our direct operations by 2048 and across our value chain by 2050. We’re also committed to achieving carbon neutrality by 2030. To make a meaningful impact, we are reducing the carbon footprint of our direct operations and supply chain by working across our expansive retail footprint and supply chain to increase energy efficiency, implement water-saving programs, eliminate waste, and reduce fuel usage.

Intellectual Property

The Company has registered and/or applied to register a variety of trademarks and service marks used throughout its businesses, as well as domain names, and relies on a combination of copyright, patent, trademark and trade secret laws, in addition to contractual restrictions, to establish and protect the Company’s proprietary rights. The Company regards its intellectual property as having significant value in the Health Care Benefits, Health Services and Pharmacy & Consumer Wellness segments. The Company is not aware of any facts that could materially impact the continuing use of any of its intellectual property.

Government Regulation

Overview

The Company’s operations are subject to comprehensive federal, state and local laws and regulations and comparable multiple levels of international regulation in the jurisdictions in which it does business. There also continues to be a heightened level of review and/or audit by federal, state and international regulators of the health and related benefits industry’s business and reporting practices. In addition, many of the Company’s PBM clients and the Company’s payors in the Pharmacy & Consumer Wellness segment, including insurers, Medicare plans, Managed Medicaid plans and MCOs, are themselves subject to extensive regulations that affect the design and implementation of prescription drug benefit plans that they sponsor. Similarly, the Company’s LTC clients, such as skilled nursing facilities, are subject to government regulations, including many of the same government regulations to which the Company is subject.

The laws and rules governing the Company’s businesses, the contracts they enter into, and interpretations of those laws and rules continue to expand and become more restrictive each year and are subject to frequent change. The application of these complex legal and regulatory requirements to the detailed operation of the Company’s businesses creates areas of uncertainty. Further, there are numerous proposed health care, financial services and other laws and regulations at the federal, state and international levels, some of which could adversely affect the Company’s businesses if they are enacted. The Company cannot predict whether pending or future federal or state legislation or court proceedings will change aspects of how it operates in the specific markets in which it competes or the health care industry generally, but if changes occur, the impact of any such changes could have a material adverse impact on the Company’s businesses, operating results, cash flows and/or stock price. Possible regulatory or legislative changes include the federal or one or more state governments fundamentally restructuring the Commercial, Medicare or Medicaid marketplace; reducing payments to the Company in connection with Medicare, Medicaid, dual eligible or special needs programs; increasing its involvement in drug reimbursement, pricing, purchasing, and/or importation; or changing the laws governing PBMs.

The Company has internal control policies and procedures and conducts training and compliance programs for its employees to help prevent, detect and correct prohibited practices. However, if the Company’s employees or agents fail to comply with applicable laws governing its international or other operations, it may face investigations, prosecutions and other legal proceedings and actions which could result in civil penalties, administrative remedies and criminal sanctions. Any failure or alleged failure to comply with applicable laws and regulations summarized below, or any adverse applications or interpretations of, or changes in, the laws and regulations affecting the Company and/or its businesses, could have a material adverse effect on the Company’s operating results, financial condition, cash flows and/or stock price. See Item 1A of this 10-K, “Risk Factors—Risks from Changes in Public Policy and Other Legal and Regulatory Risks,” and Item 3 of this 10-K, “Legal Proceedings,” for further information.

The Company can give no assurance that its businesses, financial condition, operating results and/or cash flows will not be materially adversely affected, or that the Company will not be required to materially change its business practices, based on: (i)

future enactment of new health care or other laws or regulations; (ii) the interpretation or application of existing laws or regulations, including the laws and regulations described in this Government Regulation section, as they may relate to one or more of the Company’s businesses, one or more of the industries in which the Company competes and/or the health care industry generally; (iii) pending or future federal or state governmental investigations of one or more of the Company’s businesses, one or more of the industries in which the Company competes and/or the health care industry generally; (iv) pending or future government audits, investigations or enforcement actions against the Company; or (v) adverse developments in pending or future legal proceedings against or affecting the Company, including qui tam lawsuits, or affecting one or more of the industries in which the Company competes and/or the health care industry generally.

Laws and Regulations Related to Multiple Segments of the Company’s Business

Laws Related to Reimbursement by Government Programs - The Company is subject to various federal and state laws concerning its submission of claims and other information to Medicare, Medicaid and other federal and state government-sponsored health care programs. Potential sanctions for violating these laws include recoupment or reduction of government reimbursement amounts, civil penalties, treble damages, and exclusion from participation in government health care programs. Such laws include the federal False Claims Act (the “False Claims Act”), the federal anti-kickback statute (the “AKS”), state false claims acts and anti-kickback statutes in most states, the federal “Stark Law” and related state laws. In particular, the False Claims Act prohibits intentionally submitting, conspiring to submit, or causing to be submitted, false claims, records, or statements to the federal government, or intentionally failing to return overpayments, in connection with reimbursement by federal government programs. In addition, any claim for government reimbursement also violates the False Claims Act where it results from a violation of the AKS.

The AKS prohibits, among other things, knowingly and willfully offering, paying, soliciting or receiving remuneration, directly or indirectly, in cash or kind, to induce or reward either the referral of an individual for, or the purchase, order or recommendation of, any good or service, for which payment may be made in whole or in part under federal health care programs, such as Medicare and Medicaid. Some court decisions have held that the statute may be violated even if only one purpose of remuneration is to induce referrals. Certain of the Company’s programs involve arrangements with payments intended to influence behavior relative to Medicare and other federal health care program beneficiaries, including risk sharing and “gainsharing” arrangements. While there is no fixed definition of a gainsharing arrangement, the term typically refers to an arrangement in which a share of cost savings for patient care attributable in part to a physician’s efforts are shared with the physician. The Office of the Inspector General of the HHS (the “OIG”) has recognized that there are legitimate interests in enlisting physicians in effort to reduce unnecessary costs from the health care system and, if appropriately structured, such gainsharing arrangements should not violate the AKS. Effective in early 2021, CMS and the OIG established new safe harbors that protect certain value-based arrangements, and the Company has integrated its understanding of these safe harbors into its new and existing programs.

The Stark Law prohibits a physician who has a financial relationship, or who has an immediate family member who has a financial relationship, with entities providing “designated health services” (“DHS”) from referring Medicare patients to such entities for the furnishing of DHS, unless an exception applies. The Stark Law prohibits any entity providing DHS that has received a prohibited referral from presenting, or causing to be presented, a claim or billing for the services arising out of the prohibited referral. Similarly, the Stark Law prohibits an entity from “furnishing” DHS to another entity with which it has a financial relationship when that entity bills for the service. The prohibition applies regardless of the reasons for the financial relationship and the referral. Unlike the AKS, the Stark Law is a strict liability statute where unlawful intent need not be demonstrated. Although uncertainty exists, some federal agencies and some courts have taken the position that the Stark Law also applies to Medicaid. With respect to certain CMS innovation models in which we may participate, the OIG and CMS jointly issued waivers of the Stark Law. In early 2021, CMS established new exceptions to the Stark Law that protect certain value-based arrangements.

Both federal and state false claims laws permit private individuals to file qui tam or “whistleblower” lawsuits on behalf of the federal or state government. Participants in the health and related benefits industry, including the Company, frequently are subject to actions under the False Claims Act or similar state laws. The federal Stark Law generally prohibits physicians from referring Medicare or Medicaid beneficiaries for certain services, including outpatient prescription drugs, to any entity with which the physician, or an immediate family member of the physician, has a financial relationship. The Stark Law further prohibits the entity receiving a prohibited referral from presenting a claim for reimbursement by Medicare or Medicaid for services furnished pursuant to the prohibited referral. Various states have enacted similar laws.

The ACA - The ACA significantly increased federal and state oversight of health plans. Among other requirements, it specifies minimum medical loss ratios (“MLRs”) for Commercial and Medicare Insured products, specifies features required to be included in commercial benefit designs, limits commercial individual and small group rating and pricing practices, encourages additional competition (including potential incentives for new participants to enter the marketplace), and includes regulations and processes that could delay or limit the Company’s ability to appropriately increase its health plan premium rates. This in turn could adversely affect the Company’s ability to continue to participate in certain product lines and/or geographies that it serves today.

In June 2021, the U.S. Supreme Court dismissed a challenge on procedural grounds that argued the ACA is unconstitutional in its entirety and issued an opinion preserving the ACA and its consumer protections in its current form. Even though the ACA was deemed constitutional, there may nevertheless be continued efforts to invalidate, modify, repeal or replace portions of it. In addition to litigation, parts of the ACA continue to evolve through the promulgation of executive orders, legislation, regulations and guidance at the federal or state level. The Company expects the ACA, including potential changes thereto, to continue to significantly impact its business operations and operating results, including pricing, medical benefit ratios (“MBRs”) and the geographies in which the Company’s products are available.

Medicare Regulation - The Company’s Medicare Advantage products compete directly with Original Medicare and Medicare Advantage products offered by other Medicare Advantage organizations and Medicare Supplement products offered by other insurers. The Company’s Medicare PDP and Medicare Supplement products are products that Medicare beneficiaries who are enrolled in Original Medicare purchase to enhance their Original Medicare coverage. Medicare regulations also have the potential to impact products and services used by Medicare beneficiaries, including services provided by Oak Street Health and Signify Health.

The Company continues to expand the number of counties in which it offers Medicare products. The Company has expanded its Medicare service area and products in 2023 and is seeking to substantially grow its Medicare membership, revenue and operating results over the next several years, including through growth in Medicare Supplement products. The anticipated organic expansion of the Medicare service area and Medicare products offered and the Medicare-related provisions of the ACA significantly increase the Company’s exposure to funding and regulation of, and changes in government policy with respect to and/or funding or regulation of, the various Medicare programs in which the Company participates, including changes in the amounts payable to us under those programs and/or new reforms or surcharges on existing programs. For example, the ACA requires minimum MLRs for Medicare Advantage and Medicare Part D plans of 85%. If a Medicare Advantage or Medicare Part D contract pays minimum MLR rebates for three consecutive years, it will become ineligible to enroll new members. If a Medicare Advantage or Medicare Part D contract pays such rebates for five consecutive years, it will be terminated by CMS. It is possible that certain Medicare Advantage contracts may not meet the 85% MLR for consecutive years.

The Company’s Medicare Advantage and PDP products are heavily regulated by CMS. The regulations and contractual requirements applicable to the Company and other private participants in Medicare programs are complex, expensive to comply with and subject to change. Payments the Company receives from CMS for its Medicare Advantage and Part D businesses also are subject to risk adjustment based on the health status of the individuals enrolled. Elements of that risk adjustment mechanism continue to be challenged by the U.S. Department of Justice (the “DOJ”), the OIG and CMS itself. For example, CMS made significant changes to the structure of the hierarchical condition category model in version 28, which may impact risk adjustment factor (“RAF”) scores for a larger percentage of Medicare Advantage beneficiaries and could result in changes to beneficiary RAF scores with or without a change in the patient’s health status. Substantial changes in the risk adjustment mechanism, including changes that result from enforcement or audit actions, could materially affect the amount of the Company’s Medicare reimbursement; require the Company to raise prices or reduce the benefits offered to Medicare beneficiaries; impact the services provided by, or the financial performance of, Oak Street Health and Signify Health; and potentially limit the Company’s (and the industry’s) participation in the Medicare program.

The Company has invested significant resources to comply with Medicare standards, and its Medicare compliance efforts will continue to require significant resources. CMS may seek premium and other refunds, prohibit the Company from continuing to market and/or enroll members in or refuse to passively enroll members in one or more of the Company’s Medicare or dual eligible plans, exclude us from participating in one or more Medicare, dual eligible or dual eligible special needs plan programs and/or institute other sanctions and/or civil monetary penalties against the Company if it fails to comply with CMS regulations or its Medicare contractual requirements. The Company’s Medicare Supplement products are regulated at the state level and are subject to similar significant compliance requirements and risks.

In addition, in November 2020, the HHS released the final Rebate Rule (the “Rebate Rule”), which eliminates the regulatory safe harbor from prosecution under the AKS for rebates from pharmaceutical companies to PBMs in Medicare Part D, replacing it with two far narrower safe harbors designed to directly benefit patients with high out-of-pocket costs and to change the way PBMs are compensated. The new safe harbors are (i) for rebates which are passed on to the patient at the point of sale and (ii)

for flat service fee payments made to PBMs which cannot be tied to the list prices of drugs. It is unclear whether the Rebate Rule will be enforceable, whether pharmaceutical companies will respond by reducing list prices, whether list prices in the private market may also be reduced, and what the resulting impact will be to PBMs or the Company. The Pharmaceutical Care Management Association (the “PCMA”), which represents PBMs, has filed a suit in an effort to block the Rebate Rule, claiming that the Rebate Rule would lead to higher premiums in Medicare Part D and was adopted in an unlawful manner. The Bipartisan Infrastructure Act of 2021 delays the effective date of the rebate rule to January 2026, and the Inflation Reduction Act, enacted in August 2022 (the “IRA”), further delays the Rebate Rule through 2032.

Going forward, the Company expects CMS, the OIG, the DOJ, other federal agencies and the U.S. Congress to continue to scrutinize closely each component of the Medicare program (including Medicare Advantage, PDPs, dual eligible plans, broker compensation and marketing, and provider network access and adequacy), modify the terms and requirements of the program and possibly seek to recast or limit private insurers’ roles. Any of the federal agencies noted above or U.S. Congress may also recommend changes or take additional action with respect to the way in which producers are compensated. For example, CMS has recently proposed new limitations on the amounts producers may earn for selling our Medicare Advantage and Part D plans, and the IRA contains changes to the Part D program that began in 2023 and will continue to 2032 that could shift more of the claim liability to plans and away from the government. It is also possible that Congress may consider changes to Medicare Advantage payment policies due to recent recommendations by the Medicare Payment Advisory Commission and to reduce the potential added cost burden of costly new benefits, or policies that impact drug pricing such as price controls and inflationary rebates applied to pharmaceutical manufacturers. In addition, states are increasingly requiring companies to offer Medicaid within a state and conducting competitive bid processes to qualify to offer dual eligible products.

It is not possible to predict the outcome of such regulatory or Congressional activity, any of which could materially and adversely affect the Company.

Medicaid Regulation - The Company is seeking to substantially grow its Medicaid, dual eligible and dual eligible special needs plan businesses over the next several years. As a result, the Company also is increasing its exposure to changes in government policy with respect to and/or regulation of the various Medicaid, dual eligible and dual eligible special needs plan programs in which the Company participates, including changes in the amounts payable to the Company under those programs.

In addition to a quality rating system that applies to Medicaid and Managed Medicaid plans, federal regulations give states the option to choose to establish a minimum MLR of at least 85% for their Managed Medicaid plans, including those offered by the Company. Regardless of whether a state establishes a minimum MLR, it must use plan-reported MLR data to set future payment rates for managed care, so that its plans will “reasonably achieve” an MLR of at least 85%. For Managed Medicaid products, states may use more stringent definitions of “medical loss ratio” or impose other requirements related to minimum MLR. Minimum MLR requirements and similar actions further limit the level of margin the Company can earn in its Insured Medicaid products while leaving the Company exposed to medical costs that are higher than those reflected in its pricing. The Company also may be subject to significant fines, penalties, premium refunds and litigation if it fails to comply with minimum MLR laws and regulations.

States may also establish their own standards and use discretion in choosing what determines compliance within Medicaid contracts, including, among other provisions, standards for determining provider network adequacy, staffing, service operations, utilization management, provider support and claims payment.

States continue to consider Medicaid expansion; however, ten states have not yet expanded and may not do so. States may opt out of the elements of the ACA requiring expansion of Medicaid coverage without losing their current federal Medicaid funding. In addition, the election of new Governors and/or state legislatures may impact states’ previous decisions regarding Medicaid expansion. Although Congress enacted incentives for states that had not yet done so to expand Medicaid, this incentive alone may not persuade holdout states to expand.

States have flexibility related to rate setting and provider network adequacy that could adversely or positively impact our Medicaid plans. Other changes related to managed care operations include beneficiary communications, appeals and grievances, and provider directories.

The economic aspects of the Medicaid, dual eligible and dual eligible special needs plan business vary from state to state and are subject to frequent change. Medicaid premiums are paid by each state and differ from state to state. The federal government and certain states also are considering proposals and legislation for Medicaid and dual eligible program reforms or redesigns, including restrictions on the collection of manufacturer’s rebates on pharmaceuticals by Medicaid MCOs and their contracted PBMs, further program, population and/or geographic expansions of risk-based managed care, increasing beneficiary cost- sharing or payment levels, and changes to benefits, reimbursement, eligibility criteria, provider network adequacy requirements (including requiring the inclusion of specified high cost providers in the Company’s networks) and program structure. In some states, current Medicaid and dual eligible funding and premium revenue may not be adequate for the Company to continue program participation. The Company’s Medicaid and dual eligible contracts with states (or sponsors of Medicaid managed care plans) are subject to cancellation by the state (or the sponsors of the managed care plans) after a short notice period without cause (e.g., when a state discontinues a managed care program) or in the event of insufficient state funding.

The Company’s Medicaid, dual eligible and dual eligible special needs plan products also are heavily regulated by CMS and state Medicaid agencies, which have the right to audit the Company’s performance to determine compliance with CMS contracts and regulations. The Company’s Medicaid products, dual eligible products and CHIP contracts also are subject to complex federal and state regulations and oversight by state Medicaid agencies regarding the services provided to Medicaid enrollees, payment for those services, network requirements (including mandatory inclusion of specified high-cost providers), and other aspects of these programs, and by external review organizations which audit Medicaid plans on behalf of state Medicaid agencies. The laws, regulations and contractual requirements applicable to the Company and other participants in Medicaid and dual eligible programs, including requirements that the Company submit encounter data to the applicable state agency, are extensive, complex and subject to change. The Company has invested significant resources to comply with these standards, and its Medicaid and dual eligible program compliance efforts will continue to require significant resources. CMS and/or state Medicaid agencies may fine the Company, withhold payments to the Company, seek premium and other refunds, terminate the Company’s existing contracts, elect not to award the Company new contracts or not to renew the Company’s existing contracts, prohibit the Company from continuing to market and/or enroll members in or refuse to automatically assign members to one or more of the Company’s Medicaid or dual eligible products, exclude the Company from participating in one or more Medicaid or dual eligible programs and/or institute other sanctions and/or civil monetary penalties against the Company if it fails to comply with CMS or state regulations or contractual requirements. CMS has proposed requiring that health plans offering certain dual eligible programs must also offer Medicaid programs, which could impact the Company’s ability to obtain or retain membership in its dual eligible programs.

The Company cannot predict whether pending or future federal or state legislation or court proceedings will change various aspects of the Medicaid program, nor can it predict the impact those changes will have on its business operations or operating results, but the effects could be materially adverse.

Medicare and Medicaid Audits - CMS regularly audits the Company’s performance to determine its compliance with CMS’s regulations and its contracts with CMS and to assess the quality of services it provides to Medicare Advantage and PDP beneficiaries. For example, CMS conducts risk adjustment data validation (“RADV”) audits of a subset of Medicare Advantage contracts for each contract year. Since 2011, CMS has selected certain of the Company’s Medicare Advantage contracts for various years for RADV audit, and the number of RADV audits continues to increase. The OIG also is auditing the Company’s risk adjustment data and that of other companies, and the Company expects CMS and the OIG to continue auditing risk adjustment data. The Company also has received Civil Investigative Demands (“CIDs”) from, and provided documents and information to, the Civil Division of the DOJ in connection with investigations of the Company’s identification and/or submission of diagnosis codes related to risk adjustment payments, including patient chart review processes, under Parts C and D of the Medicare program.

On January 30, 2023, CMS released the final rule concerning Part C contract-level Risk Adjustment Data Validation Audits (the “RADV Audit Rule”). The RADV Audit Rule eliminated the application of a fee-for-service adjuster (“FFS Adjuster”) in contract-level RADV audits but continued the use of extrapolation in such audits of Medicare Advantage organizations. The FFS Adjuster that was announced in 2012 was to be used by CMS to determine a permissible level of payment error. By applying the FFS Adjuster, Medicare Advantage organizations would have been liable for repayments only to the extent that their extrapolated payment errors exceeded the error rate in Original Medicare, which could have impacted the extrapolated repayments to which Medicare Advantage organizations are subject. Under the RADV Audit Rule, CMS is now conducting RADV audits of Medicare Advantage organizations, including the Company’s Medicare Advantage plans, for payment year 2018 and subsequent payment years using extrapolation without the application of a FFS Adjuster. The RADV Audit Rule may have potential adverse effects, which could be material, on the Company’s operating results, financial condition, and cash flows. CMS also has announced that it will not conduct RADV audits on all contracts; instead, it will only audit contracts it believes are at the highest risk for overpayments based on its statistical modeling. The RADV Audit Rule is subject to ongoing litigation and the outcome and future impacts are uncertain.

In addition, state Medicaid agencies regularly audit the Company’s performance across all areas of its contractual obligations to the state to determine compliance and quality of services. The Company may be subject to, among other penalties, significant fines, sanctions, corrective actions, and enrollment freezes depending on the findings of these audits and reviews. The

Company’s ongoing performance and compliance with program requirements can impact our ability to expand and retain Medicaid business. State Medicaid agencies are also increasingly using the audit process to challenge the legality of PBM practices, such as guaranteed effective rate reconciliations with retail pharmacies and transmission fees.

Medicare Star Ratings - A portion of each Medicare Advantage plan’s reimbursement is tied to the plan’s “star ratings.” The star rating system considers a variety of measures adopted by CMS, including quality of preventative services, chronic illness management, compliance and overall customer satisfaction. Only Medicare Advantage plans with an overall star rating of 4 or more stars (out of 5 stars) are eligible for a quality bonus in their basic premium rates. CMS also gives PDPs star ratings that affect each PDP’s enrollment. Medicare Advantage and PDP plans that are rated less than 3 stars for three consecutive years are subject to contract termination by CMS. CMS continues to revise its star ratings system to make it harder to achieve 4 or more stars. There can be no assurances that the Company will be successful in maintaining or improving its star ratings in future years. Accordingly, the Company’s Medicare Advantage plans may not continue to be or become eligible for full level quality bonuses, which could adversely affect the benefits such plans can offer, reduce membership and/or reduce profit margins.

The Company’s 2023 star ratings were used to determine which of its Medicare Advantage plans qualify for bonus payments in 2024. Based on the 2023 star ratings, the Company’s Medicare Advantage plans are not eligible for full level quality bonuses in 2024, which could reduce profit margin. CMS released the Company’s 2024 star ratings in October 2023, which will impact revenues in 2025. The percentage of Aetna Medicare Advantage members in 4+ Star plans is expected to return to 87% in 2024 (based on enrollment and contract affiliation as of December 31, 2023), as compared to the unmitigated 21% in 2023 based on the 2023 star ratings. The main driver of this increase was a half star improvement in the Aetna National PPO, which increased from 3.5 stars to 4.0 stars. This means that the Company expects its Medicare Advantage plans will again be eligible for full level quality bonuses in 2025.

Medicare Payment Rates - In March 2023, CMS issued its final notice detailing final 2024 Medicare Advantage payment rates. Final 2024 Medicare Advantage rates resulted in an expected average increase in revenue for the Medicare Advantage industry of 3.32%, and the year-to-year percentage change included a (1.24%) decrease for star ratings, a risk model revision and normalization of (2.16%), and a risk score trend of 4.44%. In March 2023, CMS also finalized the 2024 Medicare Advantage reimbursement rates, which result in an expected average decrease in revenue for the Medicare Advantage industry of 1.12%, excluding the CMS estimate of Medicare Advantage risk score trend, though the rates may vary widely depending on the provider group and patient demographics. On January 31, 2024, CMS issued an advance notice detailing proposed 2025 Medicare Advantage payment rates. The 2025 Medicare Advantage rates, if finalized as proposed, will result in an expected average decrease in revenue for the Medicare Advantage industry of 0.16%, excluding the CMS estimate of Medicare Advantage risk score trend. CMS intends to publish the final 2025 rate announcement no later than April 1, 2024.

The Company faces a challenge from the impact of the increasing cost of medical care (including prescription medications), changes to methodologies for determining payments and CMS local and national coverage decisions that require the Company to pay for services and supplies that are not factored into the Company’s bids. The federal government may seek to impose restrictions on the configuration of pharmacy or other provider networks for Medicare Advantage and/or PDP plans, or otherwise restrict the ability of these plans to alter benefits, negotiate prices or establish other terms to improve affordability or maintain viability of products. The Company currently believes that the payments it has received and will receive in the near term are adequate to justify the Company’s continued participation in the Medicare Advantage and PDP programs, although there are economic and political pressures to continue to reduce spending on the program, and this outlook could change.

340B Drug Pricing Program – The 340B Drug Pricing Program allows eligible Covered Entities to purchase prescription drugs from manufacturers at a steep discount, and is overseen by the HHS and the Health Resources and Services Administration (“HRSA”). In 2020, a number of pharmaceutical manufacturers began programs that limited Covered Entities’ participation in the program through contract pharmacies arrangements. In May 2021, HRSA sent enforcement letters to multiple manufacturers to curb these practices. In September 2021, HRSA forwarded the enforcement actions to the OIG for potential imposition of civil monetary penalties. Those enforcement actions are currently subject to ongoing litigation. In November 2022, HRSA issued proposed rules that would overhaul the 340B Drug Pricing Programs Administrative Dispute Resolution process. The revisions are designed to make the process more accessible by making it more expeditious and less formal, as well as more equitable by requiring fewer resources to participate. A reduction in Covered Entities’ participation in contract pharmacy arrangements, as a result of the pending enforcement actions or otherwise, a reduction in the use of the Company’s administrative services by Covered Entities, or a reduction in drug manufacturers’ participation in the program could materially and adversely affect the Company.

Anti-Remuneration Laws - Federal law prohibits, among other things, an entity from knowingly and willfully offering, paying, soliciting or receiving, subject to certain exceptions and “safe harbors,” any remuneration to induce the referral of individuals or the purchase, lease or order of items or services for which payment may be made under Medicare, Medicaid or certain other federal and state health care programs. A number of states have similar laws, some of which are not limited to services paid for with government funds. Sanctions for violating these federal and state anti-remuneration laws may include imprisonment, criminal and civil fines, and exclusion from participation in Medicare, Medicaid and other federal and state government-sponsored health care programs. Companies involved in public health care programs such as Medicare and/or Medicaid are required to maintain compliance programs to detect and deter fraud, waste and abuse, and are often the subject of fraud, waste and abuse investigations and audits. The Company has invested significant resources to comply with Medicare and Medicaid program standards. Ongoing vigorous law enforcement and the highly technical regulatory scheme mean that the Company’s compliance efforts in this area will continue to require significant resources.

Antitrust and Unfair Competition - The U.S. Federal Trade Commission (“FTC”) investigates and prosecutes practices that are “unfair trade practices” or “unfair methods of competition.” Numerous lawsuits have been filed throughout the U.S against pharmaceutical manufacturers, retail pharmacies and/or PBMs under various federal and state antitrust and unfair competition laws challenging, among other things: (i) brand name drug pricing and rebate practices of pharmaceutical manufacturers, (ii) the maintenance of retail or specialty pharmacy networks by PBMs, and (iii) various other business practices of PBMs and retail pharmacies. In July 2021, the FTC approved several resolutions that direct agency staff to use compulsory process, such as subpoenas, to investigate seven specific enforcement priorities. Priority targets include, among other businesses, health care businesses, such as pharmaceutical companies, pharmacy benefits managers and hospitals. To the extent that the Company appears to have actual or potential market power in a relevant market or CVS pharmacy, CVS specialty or MinuteClinic plays a unique or expanded role in a Health Care Benefits or Health Services segment product offering, the Company’s business arrangements and uses of confidential information may be subject to heightened scrutiny from an anti-competitive perspective and possible challenge by state and/or federal regulators and/or private parties.

Privacy and Confidentiality Requirements - Many of the Company’s activities involve the receipt, use and disclosure by the Company of personally identifiable information (“PII”) as permitted in accordance with applicable federal and state privacy and data security laws, which require organizations to provide appropriate privacy and security safeguards for such information. In addition to PII, the Company uses and discloses de-identified data for analytical and other purposes when permitted. Additionally, there are industry standards for handling credit card data known as the Payment Card Industry Data Security Standard, which are a set of requirements designed to help ensure that entities that process, store or transmit credit card information maintain a secure environment. Certain states have incorporated these requirements into state laws or enacted other requirements relating to the use and/or disclosure of PII.

The federal Health Insurance Portability and Accountability Act of 1996 and the regulations issued thereunder (collectively, “HIPAA”), as further modified by the American Recovery and Reinvestment Act of 2009 (“ARRA”) impose extensive requirements on the way in which health plans, providers, health care clearinghouses (known as “covered entities”) and their business associates use, disclose and safeguard protected health information (“PHI”). Further, ARRA requires the Company and other covered entities to report any breaches of PHI to impacted individuals and to the HHS and to notify the media in any states where 500 or more people are impacted by the unauthorized release or use of or access to PHI. Criminal penalties and civil sanctions may be imposed for failing to comply with HIPAA standards. The Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”), enacted as part of ARRA, amended HIPAA to impose additional restrictions on third-party funded communications using PHI and the receipt of remuneration in exchange for PHI. The HITECH Act also extended HIPAA privacy and security requirements and penalties directly to business associates.

In addition to HIPAA, state health privacy laws apply to the extent they are more protective of individual privacy than is HIPAA, including laws that place stricter controls on the release of information relating to specific diseases or conditions and requirements to notify members of unauthorized release or use of or access to PHI. States also have adopted regulations to implement provisions of the Financial Modernization Act of 1999 (also known as the Gramm-Leach-Bliley Act (“GLBA”)) which generally require insurers, including health insurers, to provide customers with notice regarding how their non-public personal health and financial information is used and the opportunity to “opt out” of certain disclosures before the insurer shares such information with a non-affiliated third party. Like HIPAA, GLBA sets a “floor” standard, allowing states to adopt more stringent requirements governing privacy protection. Complying with additional state requirements requires us to make additional investments beyond those the Company has made to comply with HIPAA and GLBA.

The Cybersecurity Information Sharing Act of 2015 encourages organizations to share cyber threat indicators with the federal government and, among other things, directs HHS to develop a set of voluntary cybersecurity best practices for organizations in the health care industry. In addition, states have begun to enact more comprehensive privacy laws and regulations addressing consumer rights to data access, deletion, protection or transparency, such as the California Consumer Privacy Act (“CCPA”). States also are starting to issue regulations and proposed regulations specifically related to cybersecurity, such as the regulations issued by the New York Department of Financial Services. Complying with conflicting cybersecurity regulations, which may differ from state to state, requires significant resources. In addition, differing approaches to state privacy and/or cyber-security regulation and varying enforcement philosophies may materially and adversely affect the Company’s ability to standardize its products and services across state lines. Widely-reported large scale commercial data breaches in the U.S and abroad increase the likelihood that additional data security legislation will be considered by additional states. These legislative and regulatory developments will impact the design and operation of the Company’s businesses, its privacy and security strategy and its web-based and mobile assets.

Finally, each Public Exchange is required to adhere to privacy and security standards with respect to PII, and to impose privacy and security standards that are at least as protective of PII as those the Public Exchange has implemented for itself or non-Public Exchange entities, which include insurers offering plans through the Public Exchange and their designated downstream entities, including PBMs and other business associates. These standards may differ from, and be more stringent than, HIPAA.

See Item 1C of this 10-K, “Cybersecurity,” for more information on the Company’s cybersecurity risk management and governance.

Consumer Protection Laws - The federal government has many consumer protection laws, such as the Federal Trade Commission Act, the Federal Postal Service Act and the Consumer Product Safety Act. Most states also have similar consumer protection laws and a growing number of states regulate subscription programs. In addition, the federal government and most states have adopted laws and/or regulations requiring places of public accommodation, health care services and other goods and services to be accessible to people with disabilities. These consumer protection and accessibility laws and regulations have been the basis for investigations, lawsuits and multistate settlements relating to, among other matters, the marketing of loyalty programs, and health care products and services, pricing accuracy, expired front store products, financial incentives provided by drug manufacturers to pharmacies in connection with therapeutic interchange programs, disclosures related to how personal data is used and protected and the accessibility of goods and services to people with disabilities. As a result of the Company’s direct-to-consumer activities, including mobile and web-based solutions offered to members and to other consumers, the Company also is subject to federal and state regulations applicable to electronic communications and to other general consumer protection laws and regulations. For example, the CCPA became effective in 2020, and additional federal and state regulation of consumer privacy protection may be proposed or enacted in the future. The Company expects these new laws and regulations to impact the design of its products and services and the management and operation of its businesses and to increase its compliance costs.

Transparency in Coverage Rule - In October 2020, the HHS, the U.S. Department of Labor (“DOL”) and the U.S. Internal Revenue Service (“IRS,” and together with the HHS and DOL, the “Tri-Departments”) released a final rule requiring health insurers to disclose negotiated prices of drugs, medical services, supplies and other covered items. The rule requires group health plans and health insurance issuers in the individual and group markets to disclose cost-sharing information upon request, to a participant, beneficiary, or enrollee and require plans and issuers to publicly disclose in-network provider rates, historical out-of-network allowed amounts and the associated billed charges, and negotiated rates and historical net prices for prescription drugs. Insurers are required to implement a consumer tool and disclose data in a machine readable file. The public disclosure of insurer- or PBM-negotiated price concessions may result in drug manufacturers lowering discounts or rebates, resulting in higher drug costs for patients and impacting the ability of the Company to negotiate drug prices and provide competitive products and services to consumers. In addition, most group health plans and issuers of group or individual health insurance coverage are required to disclose personalized pricing information to their participants, beneficiaries, and enrollees through an online consumer tool, by phone, or in paper form, upon request. Cost estimates must be provided in real-time based on cost-sharing information that is accurate at the time of the request.

The Consolidated Appropriations Act of 2021 was signed into law in December 2020 and contains further transparency provisions requiring group health plans and health insurance issuers to report certain prescription drug costs, overall spending on health services and prescription drugs, and information about premiums and the impact of rebates and other remuneration on premiums and out-of-pocket costs to the Tri-Departments. No later than 18 months after the first submission and bi-annually thereafter, the Tri-Departments will release a public report on drug pricing trends, drug reimbursement, and the impact of drug prices on premiums. The first filings of plan year data were required in December 2022 and will be required annually in June of each year on an ongoing basis.

Telemarketing and Other Outbound Contacts - Certain federal and state laws, such as the Telephone Consumer Protection Act and the Telemarketing Sales Rule, give the FTC, the Federal Communications Commission and state Attorneys General the ability to regulate, and bring enforcement actions relating to, telemarketing practices and certain automated outbound contacts such as phone calls, texts or emails. Under certain circumstances, these laws provide consumers with a private right of action. Violations of these laws could result in substantial statutory penalties and other sanctions.

Pharmacy and Professional Licensure and Regulation - The Company is subject to a variety of intersecting federal and state statutes and regulations that govern the wholesale distribution of drugs; operation of retail, specialty, infusion, LTC and mail order pharmacies; licensure of facilities and professionals, including pharmacists, technicians, nurses and other health care professionals; registration of facilities with the U.S. Drug Enforcement Administration (the “DEA”) and analogous state agencies that regulate controlled substances; packaging, storing, shipping and tracking of pharmaceuticals; repackaging of drug products; labeling, medication guides and other consumer disclosures; interactions with prescribers and health care professionals; compounding of prescription medications; dispensing of controlled and non-controlled substances; counseling of patients; transfers of prescriptions; advertisement of prescription products and pharmacy services; security; inventory control; recordkeeping; reporting to Boards of Pharmacy, the U.S. Food and Drug Administration (the “FDA”), the U.S. Consumer Product Safety Commission, the DEA and related state agencies; and other elements of pharmacy practice. Pharmacies are highly regulated and have contact with a wide variety of federal, state and local agencies with various powers to investigate, inspect, audit or solicit information, including Boards of Pharmacy and Nursing, the DEA, the FDA, the DOJ, HHS and others. Many of these agencies have broad enforcement powers, conduct audits on a regular basis, can impose substantial fines and penalties, and may revoke the license, registration or program enrollment of a facility or professional.

Telehealth Laws - States generally require providers providing professional health care services, whether in person or via telehealth, to a patient residing within the state to be licensed in that state. States have established a variety of licensing and other regulatory requirements around the provision of telehealth services. These requirements vary from state to state. Many states require notification of certain material events be provided to the applicable licensing agency. The Company has established systems for ensuring that its providers are appropriately licensed under applicable state law and that their provision of telehealth service to patients with whom we interact occurs in compliance with applicable laws and regulations. Failure to comply with these laws and regulations could result in licensure actions against the providers as well as civil, criminal or administrative penalties against the providers and/or entities engaging the services of the providers.

State Insurance, HMO and Insurance Holding Company Regulation - A number of states regulate affiliated groups of insurers and HMOs such as the Company under holding company statutes. These laws may, among other things, require prior regulatory approval of dividends and material intercompany transfers of assets and transactions between the regulated companies and their affiliates, including their parent holding companies. The Company expects the states in which its insurance and HMO subsidiaries are licensed to continue to expand their regulation of the corporate governance and internal control activities of its insurance companies and HMOs. Changes to state insurance, HMO and/or insurance holding company laws or regulations or changes to the interpretation of those laws or regulations, including due to regulators’ increasing concerns regarding insurance company and/or HMO solvency due, among other things, to past and expected payor insolvencies, could negatively affect the Company’s businesses in various ways, including through increases in solvency fund assessments, requirements that the Company hold greater levels of capital and/or delays in approving dividends from regulated subsidiaries.

PBM offerings of prescription drug coverage under certain risk arrangements may be subject to laws and regulations in various states. Such laws may require that the party at risk become licensed as an insurer, establish reserves or otherwise demonstrate financial viability. Laws that may apply in such cases include insurance laws and laws governing MCOs and limited prepaid health service plans. In addition, most states require that PBMs become directly registered or licensed with the department of insurance or similar government oversight agency regardless of any arrangements they have with clients. PBM licensure laws may include oversight of certain PBM activities and operations and may include auditing of those activities.

The states of domicile of the Company’s regulated subsidiaries have statutory risk-based capital (“RBC”) requirements for health and other insurance companies and HMOs based on the National Association of Insurance Commissioners’ (the “NAIC”) Risk-Based Capital for Insurers Model Act (the “RBC Model Act”). These RBC requirements are intended to assess the capital adequacy of life and health insurers and HMOs, taking into account the risk characteristics of a company’s investments and products. The RBC Model Act sets forth the formula for calculating RBC requirements, which are designed to take into account asset risks, insurance risks, interest rate risks and other relevant risks with respect to an individual company’s business. In general, under these laws, an insurance company or HMO must submit a report of its RBC level to the insurance department or insurance commissioner of its state of domicile for each calendar year. At December 31, 2023, all of the Company’s insurance and HMO subsidiaries were either above the RBC level that would require regulatory action or otherwise subject to an agreement to avoid any regulatory action.

For information regarding restrictions on certain payments of dividends or other distributions by the Company’s HMO and insurance company subsidiaries, see Note 14 ‘‘Shareholders’ Equity’’ included in Item 8 of this 10-K.

The holding company laws for the states of domicile of certain of the Company’s subsidiaries also restrict the ability of any person to obtain control of an insurance company or HMO without prior regulatory approval. Under those statutes, without such approval (or an exemption), no person may acquire any voting security of an insurance holding company (such as the Company’s ultimate parent company, CVS Health Corporation) that controls an insurance company or HMO, or merge with such a holding company, if as a result of such transaction such person would control the insurance holding company. Control is generally defined as the direct or indirect power to direct or cause the direction of the management and policies of a person and is presumed to exist if a person directly or indirectly owns or controls 10% or more of the voting securities of another person.

Certain states have laws that prohibit submitting a false claim or making a false record or statement in order to secure reimbursement from an insurance company. These state laws vary, and violation of them may lead to the imposition of civil or criminal penalties.

Government Agreements and Mandates - From time to time, the Company and/or its various affiliates are subject to certain consent decrees, settlement and other agreements, corrective action plans and corporate integrity agreements with various federal, state and local authorities relating to such matters as privacy practices, controlled substances, PDPs, expired products, environmental and safety matters, marketing and advertising practices, PBM, LTC and other pharmacy operations and various other business practices. Certain of these agreements contain ongoing reporting, monitoring and/or other compliance requirements for the Company. Failure to meet the Company’s obligations under these agreements could result in civil or criminal remedies, financial penalties, administrative remedies, and/or exclusion from participation in federal health care programs.

Environmental and Safety Regulation - The Company’s businesses are subject to various federal, state and local laws, regulations and other requirements pertaining to protection of the environment, public health and employee safety, including, for example, regulations governing the management of hazardous substances, the cleaning up of contaminated sites, and the maintenance of safe working conditions in the Company’s retail locations, distribution centers and other facilities. Governmental agencies at the federal, state and local levels continue to focus on the retail and health care sectors’ compliance with such laws and regulations, and have at times pursued enforcement activities. Any failure to comply with these regulations could result in fines or other sanctions by government authorities.

ERISA Regulation - The Employee Retirement Income Security Act of 1974 (“ERISA”), provides for comprehensive federal regulation of certain employee pension and benefit plans, including private employer and union sponsored health plans and certain other plans that contract with us to provide PBM services. In general, the Company assists plan sponsors in the administration of their health benefit plans, including the prescription drug benefit portion of those plans, in accordance with the plan designs adopted by the plan sponsors. In addition, the Company may have fiduciary duties where it has specifically contracted with a plan sponsor to accept limited fiduciary responsibility, such as for the adjudication of initial prescription drug benefit claims and/or the appeals of denied claims under a plan. In addition to its fiduciary provisions, ERISA imposes civil and criminal liability on service providers to health plans and certain other persons if certain forms of illegal remuneration are made or received. These provisions of ERISA are broadly written and their application to specific business practices is often uncertain.

Some of the Company’s health and related benefits and large case pensions products and services and related fees also are subject to potential issues raised by judicial interpretations relating to ERISA. Under those interpretations, together with DOL regulations, the Company may have ERISA fiduciary duties with respect to medical members, PBM members and/or certain general account assets held under contracts that are not guaranteed benefit policies. As a result, certain transactions related to those general account assets are subject to conflict of interest and other restrictions, and the Company must provide certain disclosures to policyholders annually. The Company must comply with these restrictions or face substantial penalties.

Preemption - ERISA generally preempts most state and local laws that relate to employee benefit plans, but the extent of the preemption continues to be reviewed by courts, including the U.S. Supreme Court. For example, in December 2020, the U.S. Supreme Court upheld an Arkansas law that, among other things, mandates a particular pricing methodology, establishes an appeals process for a pharmacy when the reimbursement is below the pharmacy’s acquisition cost, permits a pharmacy to reverse and rebill if they cannot procure the drug from its wholesaler at a price equal to or less than the reimbursement rate, prohibits a PBM from reimbursing a pharmacy less than the amount it reimburses an affiliate on a per unit basis, and permits a pharmacy to decline to dispense if the reimbursement is lower than the pharmacy’s acquisition cost. Subsequently, in November 2021, the U.S. Court of Appeals for the Eighth Circuit upheld a North Dakota law that regulates employer-sponsored ERISA health plans and certain PBM practices within Medicare and in April 2022 the U.S. District Court for the Western District of Oklahoma affirmed that the Oklahoma Insurance Department could enforce a state law against PBMs that contained provisions that alter and limit some of the options that an ERISA plan can use, because none of the provisions mandate that ERISA plans make any specific choices. On appeal, the Tenth Circuit decided that the Oklahoma law was preempted by ERISA and, in part, by Medicare Part D, and the Company expects the Oklahoma Attorney General to file a writ of certiorari with the U.S. Supreme Court.

Other Legislative Initiatives and Regulatory Initiatives - The U.S. federal and state governments, as well as governments in other countries where the Company does business, continue to enact and seriously consider many broad-based legislative and regulatory proposals that have had a material impact on or could materially impact various aspects of the health care and related benefits system and the Company’s businesses, operating results and/or cash flows. For example:

• Under the Budget Control Act of 2011 and the American Taxpayer Relief Act of 2012 significant, automatic across-the-board budget cuts (known as sequestration) began in March 2013, including Medicare spending cuts of not more than 2% of total program costs per year through 2024. Since then, Congress has extended and modified the Medicare sequester a number of times. The CARES Act temporarily suspended the Medicare sequester and extended mandatory sequestration to 2030. In July 2022, the 2% Medicare sequester resumed. Significant uncertainty remains as to whether and how the U.S. Congress will proceed with actions that create additional federal revenue and/or with entitlement reform. The Company cannot predict future federal Medicare or federal or state Medicaid funding levels or the impact that future federal or state budget actions or entitlement program reform, if it occurs, will have on the Company’s businesses, operations or operating results, but the effects could be materially adverse, particularly on the Company’s Medicare and/or Medicaid revenues, MBRs and operating results.
• The European Union’s (“EU’s”) General Data Protection Regulation (“GDPR”) began to apply across the EU during 2018.
• Other significant legislative and/or regulatory measures which are or recently have been under consideration include the following:
• Increasing the corporate tax rate.
• Eliminating payment of manufacturer’s rebates on prescription drugs to PBMs, PDPs and Managed Medicaid organizations in connection with federally funded health care programs.
• Imposing requirements and restrictions on the design and/or administration of pharmacy benefit plans offered by the Company’s and its clients’ health plans and/or its PBM clients and/or the services the Company provides to those clients, including prohibiting “differential” or “spread” pricing in PBM contracts; restricting or eliminating the use of formularies for prescription drugs; restricting the Company’s ability to require members to obtain drugs through a home delivery or specialty pharmacy; restricting the Company’s ability to place certain specialty or other drugs in the higher cost tiers of its pharmacy formularies; restricting the Company’s ability to make changes to drug formularies and/or clinical programs; limiting or eliminating rebates on pharmaceuticals; requiring the use of up front purchase price discounts on pharmaceuticals in lieu of rebates; restricting the Company’s ability to configure and reimburse its health plan and retail pharmacy provider networks, including use of CVS pharmacy locations; and restricting or eliminating the use of certain drug pricing methodologies.
• Broader application of state insurance- and PBM-related laws to national and multi-state plans that cover residents of that state.
• Increasing federal or state government regulation of, or involvement in, the pricing and/or purchasing of drugs.
• Restricting the Company’s ability to limit providers’ participation in its networks and/or remove providers from its networks by imposing network adequacy requirements or otherwise (including in its Medicare and Commercial Health Care Benefits products).
• Imposing assessments on (or to be collected by) health plans or health carriers that may or may not be passed through to their customers. These assessments may include assessments for insolvency, the uninsured, uncompensated care, Medicaid funding or defraying health care provider medical malpractice insurance costs.
• Mandating coverage by the Company’s and its clients’ health plans for additional conditions and/or specified procedures, drugs or devices (e.g., high cost pharmaceuticals, experimental pharmaceuticals and oral chemotherapy regimens).
• Regulating electronic connectivity.
• Mandating or regulating the disclosure of provider fee schedules, manufacturer’s rebates and other data about the Company’s payments to providers and/or payments the Company receives from pharmaceutical manufacturers.
• Mandating or regulating disclosure of provider outcome and/or efficiency information.
• Prescribing or limiting members’ financial responsibility for health care or other covered services they utilize, including restricting “surprise” bills by providers and by specifying procedures for resolving “surprise” bills.
• Prescribing payment levels for health care and other covered services rendered to the Company’s members by providers who do not have contracts with the Company.
• Assessing the medical device status of home infusion therapy products and/or solutions, mobile consumer wellness tools and clinical decision support tools, which may require compliance with FDA requirements in relation to some of these products, solutions and/or tools.
• Restricting the ability of employers and/or health plans to establish or impose member financial responsibility.
• Proposals to expand benefits under Original Medicare.
• Amending or supplementing ERISA to impose greater requirements on PBMs or the administration of employer-funded benefit plans or limit the scope of current ERISA pre-emption, which would among other things expose the Company and other health plans to expanded liability for punitive and other extra-contractual damages and additional state regulation.

It is uncertain whether the Company can counter the potential adverse effects of such potential legislation or regulation on its operating results or cash flows, including whether it can recoup, through higher premium rates, expanded membership or other measures, the increased costs of mandated coverage or benefits, assessments, fees, taxes or other increased costs, including the cost of modifying its systems to implement any enacted legislation or regulations.

The Company’s businesses also may be affected by other legislation and regulations. The Dodd-Frank Wall Street Reform and Consumer Protection Act creates incentives for whistleblowers to speak directly to the government rather than utilizing internal compliance programs and reduces the burden of proof under the Foreign Corrupt Practices Act of 1977 (the “FCPA”). There also are laws and regulations that set standards for the escheatment of funds to states.

Health savings accounts, health reimbursement arrangements and flexible spending accounts and certain of the tax, fee and subsidy provisions of the ACA also are regulated by the U.S. Department of the Treasury and the IRS.

The Company also may be adversely affected by court and regulatory decisions that expand or revise the interpretations of existing statutes and regulations or impose medical malpractice or bad faith liability. Federal and state courts, including the U.S. Supreme Court, continue to consider cases, and federal and state regulators continue to issue regulations and interpretations, addressing bad faith liability for denial of medical claims, the scope of ERISA’s fiduciary duty requirements, the scope of the False Claims Act and the pre-emptive effect of ERISA and Medicare Part D on state laws.

Contract Audits - The Company is subject to audits of many of its contracts, including its PBM client contracts, its PBM rebate contracts, its PBM network contracts, its contracts relating to Medicare Advantage and/or Medicare Part D, the agreements the Company’s pharmacies enter into with other payors, its Medicaid contracts and its customer contracts. Because some of the Company’s contracts are with state or federal governments or with entities contracted with state or federal agencies, audits of these contracts are often regulated by the federal or state agencies responsible for administering federal or state benefits programs, including those which operate Medicaid fee for service plans, Managed Medicaid plans, Medicare Part D plans or Medicare Advantage organizations.

Federal Employee Health Benefits Program - The Company’s subsidiaries contract with the Office of Personnel Management (the “OPM”) to provide managed health care services under the FEHB program in their service areas. These contracts with the OPM and applicable government regulations establish premium rating arrangements for this program. In addition to other requirements, such as the Transparency in Coverage Rule note above, OPM regulations require that community-rated FEHB plans meet a FEHB program-specific minimum MLR by plan code and market. Managing to these rules is complicated by the simultaneous application of the minimum MLR standards and associated premium rebate requirements of the ACA. The Company also has a contractual arrangement with carriers for the FEHB program, such as the BlueCross BlueShield Association, to provide pharmacy services to federal employees, postal workers, annuitants, and their dependents under the Government-wide Service Benefit Plan, as authorized by the FEHB Act and as part of the FEHB program. Additionally, the Company manages certain FEHB plans on a “cost-plus” basis. These arrangements subject the Company to certain aspects of the FEHB Act, and other federal regulations, such as the FEHB Acquisition Regulation, that otherwise would not be applicable to the Company. The OPM also is auditing the Company and its other contractors to, among other things, verify that plans meet their applicable FEHB program-specific MLR and the premiums established under the OPM’s Insured contracts and costs allocated pursuant to the OPM’s cost-based contracts are in compliance with the requirements of the applicable FEHB program. The OPM may seek premium refunds or institute other sanctions against the Company if it fails to comply with the FEHB program requirements.

Clinical Services Regulation - The Company provides clinical services to health plans, PBMs and providers for a variety of complex and common medical conditions, including arranging for certain members to participate in disease management programs. State laws regulate the practice of medicine, the practice of pharmacy, the practice of nursing and certain other clinical activities. Clinicians engaged in a professional practice in connection with the provision of clinical services must satisfy applicable state licensing requirements and must act within their scope of practice.

Third Party Administration and Other State Licensure Laws - Many states have licensure or registration laws governing certain types of administrative organizations, such as PPOs, TPAs and companies that provide utilization review services. Several states also have licensure or registration laws governing the organizations that provide or administer consumer card programs (also known as cash card or discount card programs).

International Regulation - The Company has insurance licenses in several foreign jurisdictions and plans to take steps in 2024 to cancel its insurance licenses in the United Kingdom, Ireland, Singapore and Hong Kong following the transfer of its insurance business in those jurisdictions to a third party. The Company currently does business directly or through local affiliations in numerous countries around the world but is in the process of closing down its insurance operations outside of the Americas.

The Company’s international operations are subject to different, and sometimes more stringent, legal and regulatory requirements, which vary widely by jurisdiction, including anti-corruption laws; economic sanctions laws; various privacy, insurance, tax, tariff and trade laws and regulations; corporate governance, privacy, data protection (including the EU’s General Data Protection Regulation which began to apply across the EU during 2018), data mining, data transfer, labor and employment, intellectual property, consumer protection and investment laws and regulations; discriminatory licensing procedures; compulsory cessions of reinsurance; required localization of records and funds; higher premium and income taxes; limitations on dividends and repatriation of capital; and requirements for local participation in an insurer’s ownership. In addition, the presence of operations in foreign countries potentially increases the Company’s exposure to the anti-bribery, anti-corruption and anti-money laundering provisions of U.S. law, including the FCPA, and corresponding foreign laws, including the U.K. Bribery Act 2010 (the “UK Bribery Act”).

Anti-Corruption Laws - The FCPA prohibits offering, promising or authorizing others to give anything of value to a foreign government official to obtain or retain business or otherwise secure a business advantage. The Company also is subject to applicable anti-corruption laws of the jurisdictions in which it operates. In many countries outside the U.S, health care professionals are employed by the government. Therefore, the Company’s dealings with them are subject to regulation under the FCPA. Violations of the FCPA and other anti-corruption laws may result in severe criminal and civil sanctions as well as other penalties, and there continues to be a heightened level of FCPA enforcement activity by the U.S. Securities and Exchange Commission (the “SEC”) and the DOJ. The UK Bribery Act is an anti-corruption law that is broader in scope than the FCPA and applies to all companies with a nexus to the United Kingdom. Disclosures of FCPA violations may be shared with the UK authorities, thus potentially exposing companies to liability and potential penalties in multiple jurisdictions.

Anti-Money Laundering Regulations - Certain lines of the Company’s businesses are subject to Treasury anti-money laundering regulations. Those lines of business have implemented anti-money laundering policies designed to ensure their compliance with the regulations. The Company also is subject to anti-money laundering laws in non-U.S. jurisdictions where it operates.

Office of Foreign Assets Control - The Company also is subject to regulation by the Office of Foreign Assets Control of the U.S. Department of Treasury (“OFAC”). OFAC administers and enforces economic and trade sanctions based on U.S. foreign policy and national security goals against targeted foreign countries and regimes, terrorists, international narcotics traffickers, those engaged in activities related to the proliferation of weapons of mass destruction, and other threats to the national security, foreign policy or economy of the U.S. In addition, the Company is subject to similar regulations in the non-U.S. jurisdictions in which it operates.

FDA Regulation - The FDA regulates the Company’s compounding pharmacy and clinical research operations. The FDA also generally has authority to, among other things, regulate the manufacture, distribution, sale and labeling of medical devices (including hemodialysis devices such as the device the Company is developing and mobile medical devices) and many products sold through retail pharmacies, including prescription drugs, over-the-counter medications, cosmetics, dietary supplements and certain food items. In addition, the FDA regulates the Company’s activities as a distributor of store brand products.

Laws and Regulations Related to the Health Care Benefits Segment

In addition to the laws and regulations discussed above that may affect multiple segments of the Company’s business, the Company is subject to federal, state, local and international statutes and regulations, as well as government program contracts, governing its Health Care Benefits segment specifically.

Overview - Differing approaches to state insurance regulation and varying enforcement philosophies may materially and adversely affect the Company’s ability to standardize its Health Care Benefits products and services across state lines. These laws and regulations, including the ACA, restrict how the Company conducts its business and result in additional burdens and costs to the Company. Significant areas of governmental regulation include premium rates and rating methodologies, underwriting rules and procedures, required benefits, sales and marketing activities, provider rates of payment, restrictions on health plans’ ability to limit providers’ participation in their networks and/or remove providers from their networks and financial condition (including reserves and minimum capital or risk based capital requirements). These laws and regulations are different in each jurisdiction and vary from product to product.

Each health insurer and HMO must file periodic financial and operating reports with the states in which it does business. In addition, health insurers and HMOs are subject to state examination and periodic license renewal. Applicable laws also restrict the ability of the Company’s regulated subsidiaries to pay dividends, and certain dividends require prior regulatory approval. In addition, some of the Company’s businesses and related activities may be subject to PPO, MCO, utilization review or TPA-related licensure requirements and regulations. These licensure requirements and regulations differ from state to state, but may contain provider network, contracting, product and rate, financial and reporting requirements. There also are laws and regulations that set specific standards for the Company’s delivery of services, payment of claims, fraud prevention, protection of consumer health information, and payment for covered benefits and services.

Required Regulatory Approvals - The Company must obtain and maintain regulatory approvals to price, market and administer many of its Health Care Benefits products. Supervisory agencies, including CMS, the Center for Consumer Information and Insurance Oversight and the DOL, as well as state health, insurance, managed care and Medicaid agencies, have broad authority to take one or more of the following actions:

• Grant, suspend and revoke the Company’s licenses to transact business;
• Suspend or exclude the Company from participation in government programs;
• Suspend or limit the Company’s authority to market products;
• Regulate many aspects of the products and services the Company offers, including the pricing and underwriting of many of its products and services;
• Assess damages, fines and/or penalties;
• Terminate the Company’s contract with the government agency and/or withhold payments from the government agency to the Company;
• Impose retroactive adjustments to premiums and require the Company to pay refunds to the government, customers and/or members;
• Restrict the Company’s ability to conduct acquisitions or dispositions;
• Require the Company to maintain minimum capital levels in its subsidiaries and monitor its solvency and reserve adequacy;
• Regulate the Company’s investment activities on the basis of quality, diversification and other quantitative criteria; and/or
• Exclude the Company’s plans from participating in Public Exchanges if they are deemed to have a history of “unreasonable” premium rate increases or fail to meet other criteria set by HHS or the applicable state.

The Company’s operations, current and past business practices, current and past contracts, and accounts and other books and records are subject to routine, regular and special investigations, audits, examinations and reviews by, and from time to time the Company receives subpoenas and other requests for information from, federal, state and international supervisory and enforcement agencies, Attorneys General and other state, federal and international governmental authorities and legislators.

Commercial Product Pricing and Underwriting Restrictions - Pricing and underwriting regulation by states limits the Company’s underwriting and rating practices and those of other health insurers, particularly for small employer groups, and varies by state. In general, these limitations apply to certain customer segments and limit the Company’s ability to set prices for new or renewing groups, or both, based on specific characteristics of the group or the group’s prior claim experience. In some states, these laws and regulations restrict the Company’s ability to price for the risk it assumes and/or reflect reasonable costs in the Company’s pricing.

The ACA expanded the premium rate review process by, among other things, requiring the Company’s Commercial Insured rates to be reviewed for “reasonableness” at either the state or the federal level. HHS established a federal premium rate review process that generally applies to proposed premium rate increases equal to or exceeding a federally (or lower state) specified threshold. HHS’s rate review process imposes additional public disclosure requirements as well as additional review on filings requesting premium rate increases equal to or exceeding this “reasonableness” threshold. These combined state and federal review requirements may prevent, further delay or otherwise affect the Company’s ability to price for the risk it assumes, which could adversely affect its MBRs and operating results, particularly during periods of increased utilization of medical services and/or medical cost trend or when such utilization and/or trend exceeds the Company’s projections.

The ACA also specifies minimum MLRs of 85% for large group Commercial products and 80% for individual and small group Commercial products. Because the ACA minimum MLRs are structured as “floors” for many of their requirements, states have the latitude to enact more stringent rules governing these restrictions. For Commercial products, states have and may adopt higher minimum MLR requirements, use more stringent definitions of “medical loss ratio,” incorporate minimum MLR requirements into prospective premium rate filings, require prior approval of premium rates or impose other requirements related to minimum MLR. Minimum MLR requirements and similar actions further limit the level of margin the Company can earn in its Insured Commercial products while leaving the Company exposed to medical costs that are higher than those reflected in its pricing. The Company also may be subject to significant fines, penalties, premium refunds and litigation if it fails to comply with minimum MLR laws and regulations.

In addition, the Company requested increases in its premium rates in its Commercial Health Care Benefits business for 2024 and expects to request future increases in those rates in order to adequately price for projected medical cost trends, required expansions of coverage and rating limits, and significant assessments, fees and taxes imposed by the federal and state governments, including as a result of the ACA. The Company’s rates also must be adequate to reflect adverse selection in its products, particularly in small group Commercial products. These rate increases may be significant and thus heighten the risks of adverse publicity, adverse regulatory action and adverse selection and the likelihood that the Company’s requested premium rate increases will be denied, reduced or delayed, which could lead to operating margin compression.

Many of the laws and regulations governing the Company’s pricing and underwriting practices also limit the differentials in premium rates insurers and other carriers may charge between new and renewal business, and/or between groups based on differing characteristics. They may also require that carriers disclose to customers the basis on which the carrier establishes new business and renewal premium rates and limit the ability of a carrier to terminate customers’ coverage.

Federal and State Reporting - The Company is subject to extensive financial and business reporting requirements, including penalties for inaccuracies and/or omissions, at both the federal and state level. The Company’s ability to comply with certain of these requirements depends on receipt of information from third parties that may not be readily available or reliably provided in all instances. The Company is and will continue to be required to modify its information systems, dedicate significant resources and incur significant expenses to comply with these requirements. However, the Company cannot eliminate the risks of unavailability of or errors in its reports.

Product Design and Administration and Sales Practices - State and/or federal regulatory scrutiny of health care benefit product design and administration and marketing and advertising practices, including the filing of insurance policy forms, the adequacy of provider networks, the accuracy of provider directories, and the adequacy of disclosure regarding products and their administration, is increasing as are the penalties being imposed for inappropriate practices. Medicare, Medicaid and dual eligible products and products offering more limited benefits in particular continue to attract increased regulatory scrutiny.

Guaranty Fund Assessments/Solvency Protection - Under guaranty fund laws existing in all states, insurers doing business in those states can be assessed (in most states up to prescribed limits) for certain obligations of insolvent insurance companies to policyholders and claimants. The life and health insurance guaranty associations in which the Company participates that operate under these laws respond to insolvencies of long-term care insurers as well as health insurers. The Company’s assessments generally are based on a formula relating to the Company’s health care premiums in the state compared to the premiums of other insurers. Certain states allow assessments to be recovered over time as offsets to premium taxes. Some states have similar laws relating to HMOs and/or other payors such as not-for-profit consumer governed health plans established under the ACA. While historically the Company has ultimately recovered more than half of guaranty fund assessments through statutorily permitted premium tax offsets, significant increases in assessments could lead to legislative and/or regulatory actions that limit future offsets.

Laws and Regulations Related to the Health Services Segment

In addition to the laws and regulations discussed above that may affect multiple segments of the Company’s business, the Company is subject to federal, state and local statutes and regulations governing the operation of its Health Services segment specifically. Among these are the following:

PBM Laws and Regulation - Legislation and/or regulations seeking to regulate PBM activities in a comprehensive manner have been proposed or enacted in a majority of states. This legislation could adversely affect the Company’s ability to conduct business on commercially reasonable terms in states where the legislation is in effect and the Company’s ability to standardize its PBM products and services across state lines. In addition, certain quasi-regulatory organizations, including the National Association of Boards of Pharmacy, the NAIC and the National Council of Insurance Legislators, have issued model regulations or may propose future regulations concerning PBMs and/or PBM activities. Similarly, credentialing organizations such as URAC have established voluntary standards regarding PBM, mail order pharmacy and/or specialty pharmacy activities. While the actions of these quasi-regulatory or standard-setting organizations do not have the force of law, they may influence states to adopt their requirements or recommendations and influence client requirements for PBM, mail order pharmacy and/or specialty pharmacy services. Moreover, any standards established by these organizations could also impact the Company’s health plan clients and/or the services provided to those clients and/or the Company’s health plans.

The Company’s PBM activities also are regulated directly and indirectly at the federal and state levels, including being subject to the False Claims Act and state false claims acts and the AKS and state anti-kickback laws. These laws and regulations govern, and proposed legislation and regulations may govern and/or further restrict, critical PBM practices, including disclosure, receipt and retention of rebates and other payments received from pharmaceutical manufacturers; use of, administration of and/or changes to drug formularies, maximum allowable cost (“MAC”) list pricing, average wholesale prices (“AWP”) and/or clinical programs; the offering to plan sponsors of pricing that includes retail network “differential” or “spread” (i.e., a difference between the drug price charged to the plan sponsor by a PBM and the price paid by the PBM to the dispensing provider); reconciliation to pricing guarantees; disclosure of data to third parties; drug UM practices; the level of duty a PBM owes its customers; configuration of pharmacy networks; the operations of the Company’s pharmacies (including audits of its pharmacies); disclosure of negotiated provider reimbursement rates; disclosure of fees associated with administrative service agreements and patient care programs that are attributable to members’ drug utilization; and registration or licensing of PBMs. Failure by the Company or one of its PBM services suppliers to comply with these laws or regulations could result in material fines and/or sanctions and could have a material adverse effect on the Company’s operating results and/or cash flows.

The Company’s PBM service contracts, including those in which the Company assumes certain risks under performance guarantees or similar arrangements, are generally not subject to insurance regulation by the states. However, state departments of insurance are increasing their oversight of PBM activities due to legislation passing in nearly all states requiring PBMs to register or obtain a license with the department, authorizing agencies to conduct market conduct examinations and other audits of our licensed entities. In addition, rulemaking in a number of states expands the underlying statutory law particularly with respect to the scope of application to pharmacy appeals and reimbursement, network design, member cost sharing and pharmacy audits.

Pharmacy Network Access Legislation - Medicare Part D and a majority of states now have some form of legislation affecting the Company’s (and its health plans’ and its health plan clients’) ability to limit access to a pharmacy provider network or remove pharmacy network providers. For example, certain “any willing provider” legislation may require the Company or its clients to admit a nonparticipating pharmacy if such pharmacy is willing and able to meet the plan’s price and other applicable terms and conditions for network participation. These laws could negatively affect the services and economic benefits achievable through a limited pharmacy provider network. Several states apply these laws to the administration of plans that are not typically subject to such laws, e.g. national and multi-state ERISA self-funded plans. Also, a majority of states have some form of legislation affecting the Company’s ability (and the Company’s and its client health plans’ ability) to conduct audits of network pharmacies regarding claims submitted to the Company for payment. These laws could negatively affect the Company’s ability to recover overpayments of claims submitted by network pharmacies that the Company identifies through pharmacy audits. Finally, several states have passed legislation that limits the ability of PBMs and health insurers to provide special benefit structures for use with affiliated pharmacies, which could result in reduced savings to clients and consumers.

Pharmacy Pricing Legislation - Multiple states have passed legislation regulating the Company’s ability to manage pricing practices, including mandated pharmacy reimbursement rates and the collection of transmission fees. A number of states have also established MACs for generic prescription drugs. MAC methodology is a common cost management practice used by private and public payors (including CMS) to pay pharmacies for dispensing generic prescription drugs. MAC prices specify the allowable reimbursement by a PBM for a particular strength and dosage of a generic drug that is available from multiple manufacturers but sold at different prices. State legislation can regulate the disclosure of MAC prices and MAC price methodologies, the kinds of drugs that a PBM can pay for at a MAC price, and the rights of pharmacies to appeal a MAC price established by a PBM. Some states now require the PBM to reimburse a pharmacy’s actual acquisition cost if the PBM denies a pharmacy’s MAC reimbursement appeal. These laws could negatively affect the Company’s ability to establish MAC prices for generic drugs. Additionally, some states have passed legislation that would restrict certain types of retroactive reconciliation or recoupment from pharmacies in the network or create a reimbursement benchmark mandate, such as the national average drug acquisition cost and/or the wholesale acquisition cost (“WAC”), plus a set dispensing fee, for pharmacies in the network.

Formulary and Plan Design Regulation - A number of government entities regulate the administration of prescription drug benefits. HHS regulates how Medicare Part D formularies are developed and administered, including requiring the inclusion of all drugs in certain classes and categories, subject to limited exceptions. Under the ACA, CMS imposes drug coverage requirements for health plans required to cover essential health benefits, including plans offered through federal or state Public Exchanges. Additionally, the NAIC and health care accreditation agencies like NCQA and URAC have developed model acts and standards for formulary development that are often incorporated into government requirements. Many states regulate the scope of prescription drug coverage, as well as the delivery channels to receive prescriptions, for insurers, MCOs and Medicaid managed care plans. The increasing government regulation of formularies could significantly affect the Company’s ability to develop and administer formularies, pharmacy networks and other plan design features. Similarly, some states prohibit health plan sponsors from implementing certain restrictive pharmacy benefit plan design features. This regulation could limit or preclude (i) limited networks, (ii) a requirement to use particular providers, (iii) copayment differentials among providers and (iv) formulary tiering practices.

Accountable Care Organization Regulation - An ACO is a network of health care providers and suppliers that work together to invest in infrastructure and redesign delivery processes to attempt to achieve high quality and efficient delivery of services. Promoting accountability and coordination of care, ACOs are an alternative payment model intended to produce savings as a result of improved quality and operational efficiency. The goals of an ACO are assessed using a set of quality measures and spending benchmarks. Medicare-approved ACOs that achieve performance standards established by HHS are eligible to share in a portion of the amounts saved by the Medicare program. There are several types of ACO programs, including the ACO REACH model. HHS has significant discretion to determine key elements of ACO programs. Certain waivers and exceptions are available from fraud and abuse laws for ACOs.

Corporate Practice of Medicine - The Company is subject to various state laws, regulations and legal and administrative decisions that restrict the corporate practice of medicine and fee splitting. The corporate practice of medicine doctrine generally prohibits corporate entities from practicing medicine or employing physicians (and, in some cases, other providers) to provide professional medical services. The doctrine reflects a variety of historical public policy concerns, including concerns that (a) allowing corporations to practice medicine or employ physicians will result in the commercialization of the practice of medicine, (b) a corporation’s obligation to its shareholders may not align with a physician’s obligation to his/her patients and (c) employment of a physician by a corporation may interfere with the physician’s independent medical judgment. While many states have some form of the corporate practice of medicine doctrine, the scope and enforcement varies widely. In those states where the doctrine exists, it typically arises from the state’s medical practice act, but has been shaped over the years by state statutes, regulations, court decisions, attorney general opinions and actions by state medical licensing boards. In addition, some states may have corporate practice restrictions that apply to other providers, such as nurse practitioners and physician assistants.

Historically, the medical profession has recognized an ethical prohibition against physicians (and often other providers) paying professional peers and others for referrals and fee splitting. Fee splitting generally occurs when a physician splits part of the professional fee earned from treating a referred patient with the source of the referral. Among the public policy harms that have been cited in support of fee splitting prohibitions are (a) unnecessary medical services, and (b) incompetent specialists. In response to these legitimate concerns, many states have adopted prohibitions against fee splitting. States have taken a variety of legislative approaches to fee splitting, from near complete bans, to bans with various exceptions, to no prohibition at all. Some of the prohibitions, have a broad reach and also prohibit otherwise legitimate business relationships with entities that are not healthcare providers, such as billing agencies or management companies.

Legal structures have been developed to comply with various state corporate practice of medicine and fee splitting laws. The “captive” or “friendly” professional corporation model allows a legal entity (typically a professional corporation or professional limited liability company) whose shareholders are all physicians to employ the physicians (and other providers). The physician entity then contracts with a corporate entity referred to as a management services organization (“MSO”) to provide various management services. The physician entity is kept “friendly” through a stock transfer restriction agreement and/or other relationship between the MSO and the physician owners of the professional corporation. The fees under the management services arrangement must be carefully structured to comply with state fee splitting laws, which in some states may prohibit percentage-based fees.

Retail Medical Clinics - States regulate retail medical clinics operated by nurse practitioners or physician assistants through physician oversight, clinic and lab licensure requirements and the prohibition of the corporate practice of medicine. A number of states have implemented or proposed laws or regulations that impact certain components of retail medical clinic operations such as physician oversight, signage, third party contracting requirements, bathroom facilities, and scope of services. These laws and regulations may affect the operation and expansion of the Company’s owned and managed retail medical clinics.

Laws and Regulations Related to the Pharmacy & Consumer Wellness Segment

In addition to the laws and regulations discussed above that may affect multiple segments of the Company’s business, the Company is subject to federal, state and local statutes and regulations governing the operation of its Pharmacy & Consumer Wellness segment specifically, including laws and regulations that limit the sale of alcohol, mandate a minimum wage, govern the practices of optometry or audiology, or impact the provision of dietician services and the sale of durable medical equipment, contact lenses, eyeglasses and hearing aids.

Available Information

CVS Health Corporation was incorporated in Delaware in 1996. The corporate office is located at One CVS Drive, Woonsocket, Rhode Island 02895, telephone (401) 765-1500. CVS Health Corporation’s common stock is listed on the New York Stock Exchange under the trading symbol “CVS.” General information about the Company is available through the Company’s website at http://www.cvshealth.com. The Company’s financial press releases and filings with the SEC are available free of charge within the Investors section of the Company’s website at http://investors.cvshealth.com. In addition, the SEC maintains an internet site that contains reports, proxy and information statements and other information regarding issuers, such as the Company, that file electronically with the SEC. The address of that website is http://www.sec.gov. The information on or linked to the Company’s website is neither a part of nor incorporated by reference in this 10-K or any of the Company’s other SEC filings.

In accordance with guidance provided by the SEC regarding use by a company of its websites and social media channels as a means to disclose material information to investors and to comply with its disclosure obligations under SEC Regulation FD, CVS Health Corporation (the “Registrant”) hereby notifies investors, the media and other interested parties that it intends to continue to use its media and investor relations website (http://investors.cvshealth.com/) to publish important information about the Registrant, including information that may be deemed material to investors. The list of social media channels that the Registrant uses may be updated on its media and investor relations website from time to time. The Registrant encourages investors, the media, and other interested parties to review the information the Registrant posts on its website and social media channels as described above, in addition to information announced by the Registrant through its SEC filings, press releases and public conference calls and webcasts.

You should carefully consider each of the following risks and uncertainties and all of the other information set forth in this 10-K. These risks and uncertainties and other factors may affect forward-looking statements, including those we make in this 10-K or elsewhere, such as in news releases or investor or analyst calls, meetings or presentations, on our websites or through our social media channels. The risks and uncertainties described below are not the only ones we face. There can be no assurance that we have identified all the risks that affect us. Additional risks and uncertainties not presently known to us or that we currently believe to be immaterial also may adversely affect our businesses. Any of these risks or uncertainties could cause our actual results to differ materially from our expectations and the expected results discussed in our forward-looking statements. You should not consider past results to be an indication of future performance.

If any of the following risks or uncertainties develops into actual events or if the circumstances described in the risks or uncertainties occur or continue to occur, those events or circumstances could have a material adverse effect on our businesses, operating results, cash flows, financial condition and/or stock price, among other effects on us. You should read the following section in conjunction with the MD&A, included in Item 7 of this 10-K, our consolidated financial statements and the related notes, included in Item 8 of this 10-K, and our “Cautionary Statement Concerning Forward-Looking Statements” in this 10-K.

Summary

The following is a summary of the principal risks we face that could negatively impact our businesses, operating results, cash flows and/or financial condition:

Risks Relating to Our Businesses

• We may not be able to accurately forecast health care and other benefit costs.
• Adverse economic conditions in the U.S. and abroad can materially and adversely impact our businesses, operating results, cash flows and financial condition.
• Each of our segments operates in a highly competitive and evolving business environment.
• A change in our Health Care Benefits product mix may adversely affect our profit margins.
• Our recent acquisitions of Signify Health and Oak Street Health subject us to new and additional risks beyond those to which we have been historically subject.
• We can provide no assurance that we will be able to compete successfully and profitably on Public Exchanges.
• Negative public perception of the industries in which we operate can adversely affect our businesses, operating results, cash flows and prospects.
• We must maintain and improve our relationships with our retail and specialty pharmacy customers and increase the demand for our products and services.
• We face risks relating to the availability, pricing and safety profiles of prescription drugs that we purchase and sell.
• The reserves we hold for expected claims in our Insured Health Care Benefits products are based on estimates that involve an extensive degree of judgment and are inherently variable, and any reserve, including a premium deficiency reserve, may be insufficient.
• We are exposed to risks relating to the solvency of other insurers.

Risks From Changes in Public Policy and Other Legal and Regulatory Risks

• We are subject to potential changes in public policy, laws and regulations, including reform of the U.S. health care system and entitlement programs.
• If we fail to comply with applicable laws and regulations, or fail to change our operations in line with any new legal or regulatory requirements, we could be subject to significant adverse regulatory actions.
• If our compliance or other systems and processes fail or are deemed inadequate, we may suffer brand and reputational harm and become subject to contractual damages, regulatory actions and/or litigation.
• We routinely are subject to litigation and other adverse legal proceedings, including class actions and qui tam actions. Many of these proceedings seek substantial damages which may not be covered by insurance.
• We frequently are subject to regular and special governmental audits, investigations and reviews that could result in changes to our business practices and also could result in material refunds, fines, penalties, civil liabilities, criminal liabilities and other sanctions.
• Our litigation and regulatory risk profiles are changing as we offer new products and services and expand in business areas beyond our historical businesses, and we may face increased regulatory risks related to our vertical integration strategy.
• We face unique regulatory and other challenges in our PBM, Public Exchange, Medicare and Medicaid businesses.
• Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues.
• We may not be able to obtain adequate premium rate increases in our Insured Health Care Benefits products, MBRs and operating results, which could magnify the adverse impact of increases in health care and other benefit costs and of ACA assessments, fees and taxes.
• Minimum MLR rebate requirements limit the level of margin we can earn in our Insured Health Care Benefits products while leaving us exposed to higher than expected medical costs. Challenges to our minimum MLR rebate methodology and/or reports could adversely affect our operating results.
• Our operating results may be adversely affected by changes in laws and policies governing employers and by union organizing activity.

Risks Associated with Mergers, Acquisitions, and Divestitures

• We may be unable to successfully integrate companies we acquire.
• We expect to continue to pursue acquisitions, joint ventures, strategic alliances and other inorganic growth opportunities, which may be unsuccessful, cause us to assume unanticipated liabilities, disrupt our existing businesses, be dilutive or lead us to assume significant debt, among other things.

Risks Related to Our Operations

• Failure to meet customer and investor expectations, including with respect to environmental, social and governance (“ESG”) goals, may harm our brand and reputation, our ability to retain and grow our customer base and membership.
• We and our vendors have experienced and continue to experience information security incidents. We can provide no assurance that we or our vendors will be able to contain, detect or prevent incidents.
• Data governance failures or the failure or disruption of our information technology or infrastructure can adversely affect our reputation, businesses and prospects. Our use and disclosure of members’, customers’ and other constituents’ sensitive information is subject to complex regulations.
• Pursuing multiple information technology improvement initiatives simultaneously could make continued development and implementation significantly more challenging.
• Product liability, product recall, professional liability or personal injury issues could damage our reputation.
• We face significant competition in attracting and retaining talented employees. Further, managing succession for, and retention of, key executives is critical to our success.
• Sales of our products and services are dependent on our ability to attract and motivate internal sales personnel and independent third-party brokers, consultants and agents. We may be subject to penalties or other regulatory actions as a result of the marketing practices of brokers and agents selling our products.
• Failure of our businesses to effectively collaborate could prevent us from maximizing our operating results.
• We are subject to payment-related risks that could increase our operating costs, expose us to fraud or theft, subject us to potential liability and disrupt our business operations.
• Both our and our vendors’ operations are subject to a variety of business continuity hazards and risks that could interrupt our operations or otherwise adversely affect our performance and operating results.

Financial Risks

• We would be adversely affected by downgrades or potential downgrades in our credit ratings, should they occur, or if we do not effectively deploy our capital.
• Goodwill and other intangible assets could, in the future, become impaired.
• Adverse conditions in the U.S. and global capital markets can significantly and adversely affect the value of our investments in debt and equity securities, mortgage loans, alternative instruments and other investments.

Risks Related to Our Relationships with Manufacturers, Providers, Suppliers and Vendors

• We face risks relating to the market availability, pricing, suppliers and safety profiles of prescription drugs and other products that we purchase and sell.
• We need to be able to maintain our ability to contract with providers on competitive terms and develop and maintain attractive networks with high quality providers.
• If our suppliers or service providers fail to meet their contractual obligations to us or to comply with applicable laws or regulations, we may be exposed to brand and reputational harm, litigation and/or regulatory action.
• We may experience increased medical and other benefit costs, litigation risk and customer and member dissatisfaction when providers that do not have contracts with us render services to our Health Care Benefits members.
• Continuing consolidation and integration among providers and other suppliers may increase our costs and increase competition.

Risks Relating to Our Businesses

We may not be able to accurately forecast health care and other benefit costs, including as a result of pandemics or disease outbreaks, which could adversely affect our Health Care Benefits segment’s operating results. There can be no assurance that future health care and other benefits costs will not exceed our projections.

Premiums for our Insured Health Care Benefits products, which comprised 94% of our Health Care Benefits revenues for 2023, are priced in advance based on our forecasts of health care and other benefit costs during a fixed premium period, which is generally twelve months. These forecasts are typically developed several months before the fixed premium period begins, are influenced by historical data (and recent historical data in particular), are dependent on our ability to anticipate and detect medical cost trends and changes in our members’ behavior and health care utilization patterns and medical claim submission patterns and require a significant degree of judgment. For example, our revenue on Medicare policies is based on bids submitted in June of the year before the contract year. Cost increases in excess of our projections cannot be recovered in the fixed premium period through higher premiums. As a result, our profits are particularly sensitive to the accuracy of our forecasts of the increases in health care and other benefit costs that we expect to occur and our ability to anticipate and detect medical cost trends. During periods when health care and other benefit costs, utilization and/or medical costs trends experience significant volatility and medical claim submission patterns are changing rapidly, as they did during the COVID-19 pandemic, accurately detecting, forecasting, managing, reserving and pricing for our (and our self-insured customers’) medical cost trends and incurred and future health care and other benefits costs is more challenging. There can be no assurance regarding the accuracy of the health care or other benefit cost projections reflected in our pricing, and whether our health care and other benefit costs will be affected by pandemics, disease outbreaks and other external events over which we have no control. Even relatively small differences between predicted and actual health care and other benefit costs as a percentage of premium revenues can result in significant adverse changes in our Health Care Benefits segment’s operating results.

While the public health emergency related to COVID-19 expired in May 2023, COVID-19 still exists and it may, like many other respiratory viruses, wax and wane depending on geography and seasonality. The future impact COVID-19 will have on the Company and its ability to accurately forecast health care and other benefit costs is uncertain, and will depend on geographies impacted, whether new variants emerge and their severity, the availability and costs of testing, vaccination and treatment, and legal and regulatory actions. COVID-19 may also impact provider behavior, utilization trends, membership, and overall economic conditions. These impacts could be adverse and material.

A number of factors contribute to rising health care and other benefit costs, including previously uninsured members entering the health care system; Medicare members’ utilization of supplemental benefits; other changes in members’ behavior, health care utilization patterns and utilization management; turnover in our membership, health care provider and member fraud; additional government mandated benefits or other regulatory changes, including changes to or as a result of the ACA; changes in the health status of our members; the aging of the population and other changing demographic characteristics; advances in medical technology; increases in the number and cost of prescription drugs (including specialty pharmacy drugs and ultra-high cost drugs and therapies); direct-to-consumer marketing by drug manufacturers; the increasing influence of social media on our members’ health care utilization and other behaviors; the shift to a consumer-driven business model; changes in health care practices and general economic conditions (such as inflation and employment levels); increases in labor costs; pandemics, epidemics or disease outbreaks; influenza-related health care costs (which may be substantial and higher than we expected); clusters of high-cost cases; natural disasters and extreme weather events (which may increase in frequency or intensity as a result of climate change); and numerous other factors that are or may be beyond our control. For example, the 2022-2023 influenza season had an earlier than average start; the 2020-2021 influenza season was impacted by efforts taken to reduce the spread of COVID-19; and the 2019-2020 influenza season maintained a high level of severity for a longer period of time than average. In addition, government-imposed limitations on Medicare and Medicaid reimbursements to health plans and providers have caused the private sector to bear a greater share of increasing health care and other benefits costs over time, and future amendments to the ACA that increase the uninsured population may amplify this issue.

Our Health Care Benefits segment’s operating results and competitiveness depend in large part on our ability to appropriately manage future health care and other benefit costs through underwriting criteria, product design, provider network configuration, negotiation of favorable provider contracts and medical management programs. Our medical cost management programs may not be successful and may have a smaller impact on health care and benefit costs than we expect. The factors described above may adversely affect our ability to predict and manage health care and other benefit costs, which can adversely affect our competitiveness and operating results.

Furthermore, if we are not able to accurately and promptly anticipate and detect medical cost trends or accurately estimate the cost of incurred but not yet reported claims or reported claims that have not been paid, our ability to take timely corrective actions to limit future health care costs and reflect our current benefit cost experience in our pricing process may be limited, which would further amplify the extent of any adverse impact on our operating results. These risks are particularly acute during periods when health care and other benefit costs, utilization and/or medical cost trends experience significant volatility and medical claim submission patterns are changing rapidly, as they did during the COVID-19 pandemic. Such risks are further magnified by the ACA and other existing and future legislation and regulations that limit our ability to price for our projected and/or experienced increases in utilization and/or medical cost trends.

Adverse economic conditions in the U.S. and abroad can materially and adversely impact our businesses, operating results, cash flows and financial condition, and we do not expect these conditions to improve in the near future.

Adverse economic conditions in the U.S. and abroad, including those caused by inflation, high interest rates and supply chain disruptions, can materially and adversely impact our businesses, operating results, cash flows and financial condition, including:

• In our Health Services segment, by causing drug utilization to decline, reducing demand for PBM services and adversely affecting the financial health of our PBM clients.
• In our Pharmacy & Consumer Wellness segment, by causing drug utilization to decline, changing consumer purchasing power, preferences and/or spending patterns leading to reduced consumer demand for products sold in our stores, potentially increasing levels of theft at our retail locations and adversely affecting the financial health of our LTC pharmacy customers.
• By causing our existing customers to reduce workforces (including due to business failures), which would reduce our revenues, the number of covered lives in our PBM clients and/or the number of members our Health Care Benefits segment serves. Reductions in workforce by our customers can also cause unanticipated increases in the health care and other benefits costs of our Health Care Benefits segment. For example, our business associated with members who have elected to receive benefits under Consolidated Omnibus Budget Reconciliation Act (known as “COBRA”) typically has an MBR that is significantly higher than our overall Commercial MBR.
• By causing our clients and customers and potential clients and customers, particularly those with the most employees or members, and state and local governments, to force us to compete more vigorously on factors such as price and service, including service, discount and other performance guarantees, to retain or obtain their business.
• By causing customers and potential customers of our Health Care Benefits and Pharmacy & Consumer Wellness segments to purchase fewer products and/or products that generate less profit for us than the ones they currently purchase or otherwise would have purchased.
• By causing customers and potential customers of our Health Care Benefits segment, particularly smaller employers and individuals, to forego obtaining or renewing their health and other coverage with us.
• In our Health Care Benefits segment, by causing unanticipated increases and volatility in utilization of medical and other covered services by our medical members, increases in fraudulent claims and claim disputes, changes in medical claim submission patterns and/or increases in medical unit costs and/or provider behavior as hospitals and other providers attempt to maintain revenue levels in their efforts to adjust to their own economic challenges, each of which would increase our costs and limit our ability to accurately detect, forecast, manage, reserve and price for our (and our self-insured customers’) medical cost trends and incurred and future health care and other benefits costs.
• By weakening the ability or perceived ability of the issuers and/or guarantors of the debt or other securities we hold in our investment portfolio to perform on their obligations to us, which could result in defaults in those securities and has reduced, and may further reduce, the value of those securities and has created, and may continue to create, net realized capital losses for us that reduce our operating results.
• By weakening the ability of our customers, including self-insured customers in our Health Care Benefits segment, medical providers and the other companies with which we do business as well as our medical members to perform their obligations to us or causing them not to perform those obligations, either of which could reduce our operating results.
• By weakening the ability of our former subsidiaries and/or their purchasers to satisfy their lease obligations that we have guaranteed and causing the Company to be required to satisfy those obligations.
• By weakening the financial condition of other insurers, including long-term care insurers and life insurers, which increases the risk that we will receive significant assessments for obligations of insolvent insurers to policyholders and claimants.
• By continuing to cause inflation that could cause interest rates to further increase and thereby further increase our interest expense and reduce our operating results, as well as further decrease the value of the debt securities we hold in our investment portfolio, which would further reduce our operating results and/or adversely affect our financial condition.

Each of our segments operates in a highly competitive and evolving business environment; and operating income in the industries in which we compete may decline.

Each of our segments, Health Care Benefits, Health Services, which includes our PBM business, and Pharmacy & Consumer Wellness, operates in a highly competitive and evolving business environment. Specifically:

• As competition increases in the geographies in which we operate, including competition from new entrants, a significant increase in price compression and/or reimbursement pressures could occur, and this could require us to reevaluate our pricing structures to remain competitive.
• In our Health Care Benefits segment, we are seeking to grow our dual eligible plan membership over the next several years. In many instances, to acquire and retain our government customers’ business, we must bid against our competitors in a highly competitive environment. Winning bids often are challenged successfully by unsuccessful bidders, and may also be withdrawn or cancelled by the issuing agency. CMS has proposed requiring that health plans offering certain dual eligible programs must also offer Medicaid programs, which could further impact the Company’s ability to obtain or retain membership in its dual eligible programs.
• Customer contracts in our Health Care Benefits segment are generally for a period of one year, and our customers have considerable flexibility in moving between us and our competitors. We may lose members to competitors with more favorable pricing, or our customers may purchase different types of products from us that are less profitable, adversely affecting our revenues and operating results. In addition, our Medicare, Medicaid and CHIP products are subject to termination without cause, periodic re-bid, rate adjustment and program redesign, as customers seek to contain their benefit costs, particularly in an uncertain economy, and our exposure to this risk is increasing as we grow our Government products membership. These actions may adversely affect our membership, revenues and operating results.
• We requested increases in our premium rates in our Commercial Health Care Benefits business for 2024 and expect to request future increases in those rates in order to adequately price for projected medical cost trends, required expansions of coverage and rating limits, and significant assessments, fees and taxes imposed by federal and state governments, including as a result of the ACA. Our rates also must be adequate to reflect the risk that our products will be selected by people with a higher risk profile or utilization rate than the pool of participants we anticipated when we established pricing for the applicable products (also known as “adverse selection”), particularly in small group Commercial products. These rate increases may be significant and thus heighten the risks of adverse publicity, adverse regulatory action and adverse selection and the likelihood that our requested premium rate increases will be denied, reduced or delayed, which could lead to operating margin compression.
• The competitive success of our Health Services segment is dependent on our ability to establish and maintain contractual relationships with network pharmacies.
• The competitive success of our Pharmacy & Consumer Wellness segment and our specialty pharmacy operations is dependent on our ability to establish and maintain contractual relationships with PBMs and other payors on acceptable terms as the payors’ clients evaluate adopting narrow or restricted retail pharmacy networks.
• In our PBM business, we maintain contractual relationships with brand name drug manufacturers that provide for purchase discounts and/or rebates on drugs dispensed by pharmacies in our retail network and by our specialty and mail order pharmacies (all or a portion of which may be passed on to clients). Manufacturer’s rebates often depend on a PBM’s ability to meet contractual requirements, including the placement of a manufacturer’s products on the PBM’s formularies. If we lose our relationship with one or more drug manufacturers, or if the discounts or rebates provided by drug manufacturers decline, our operating results, cash flows and/or prospects could be adversely affected.
• If laws or regulations are promulgated that limit the number of PBMs available in a particular business or geography, competition in those businesses and geographies could be amplified and could adversely affect our revenues and operating results.
• The PBM industry has been experiencing price compression as a result of competitive pressures and increased client demands for lower prices; increased revenue sharing, including sharing in a larger portion of payments, including rebates and fees, to PBMs and group purchasing organizations received from drug manufacturers; enhanced service offerings and/or higher service levels. Marketplace dynamics and regulatory changes also have adversely affected our ability to offer plan sponsors pricing that includes the use of retail “differential” or “spread,” which could adversely affect our future profitability, and we expect these trends to continue.
• Our retail pharmacy, specialty pharmacy and LTC pharmacy operations have been affected by reimbursement pressure caused by competition, including client demands for lower prices, generic drug pricing, earlier than expected generic drug introductions and network reimbursement pressure. If we are unable to increase our prices to reflect, or otherwise mitigate the impact of, increasing costs, our profitability will be adversely affected. If we are unable to limit our price increases, we may lose customers to competitors with more favorable pricing, adversely affecting our revenues and operating results.
• A shift in the mix of our pharmacy prescription volume towards programs offering lower reimbursement rates as a result of competition or otherwise could adversely affect our margins, including the ongoing shift in pharmacy mix towards 90-day prescriptions at retail and the ongoing shift in pharmacy mix towards Medicare Part D prescriptions.
• PBM client contracts often are for a period of approximately three years. However, PBM clients may require early or periodic re-negotiation of pricing prior to contract expiration. PBM clients are generally well informed, can move between us and our competitors and often seek competing bids prior to expiration of their contracts. We are therefore under pressure to contain price increases despite being faced with increasing drug costs and increasing operating costs. If we are unable to increase our prices to reflect, or otherwise mitigate the impact of, increasing costs, our profitability will be adversely affected. If we are unable to limit our price increases, we may lose customers to competitors with more favorable pricing, adversely affecting our revenues and operating results.
• The operating results and margins of our LTC business are further affected by the increased efforts of health care payors to negotiate reduced or capitated pricing arrangements and by the financial health of, and purchases and sales of, our LTC customers.

In addition, competitors in each of our businesses may offer services and pricing terms that we may not be willing or able to offer. Competition also may come from new entrants and other sources in the future. Unless we can demonstrate enhanced value to our clients through innovative product and service offerings in the rapidly changing health care industry, we may be unable to remain competitive.

Disruptive innovation by existing or new competitors could alter the competitive landscape in the future and require us to accurately identify and assess such alterations and make timely and effective changes to our strategies and business model to compete effectively. For example, decisions to buy our Health Care Benefits and Health Services products and services increasingly are made or influenced by consumers, either through direct purchasing (e.g., Medicare Advantage plans and PDPs) or through Public Exchanges and private health insurance exchanges that allow individual choice. Consumers also are increasingly seeking to access consumer goods and health care products and services locally and through other direct channels such as mobile devices and websites. To compete effectively in the consumer-driven marketplace, we will be required to develop or acquire new capabilities, attract new talent and develop new service and distribution relationships that respond to consumer needs and preferences.

Changes in marketplace dynamics or the actions of competitors or manufacturers, including industry consolidation, the emergence of new competitors and strategic alliances, and decisions to exclude us from new narrow or restricted retail pharmacy networks could materially and adversely affect our businesses, operating results, cash flows and/or prospects.

Our recent acquisitions of Signify Health and Oak Street Health subject us to new and additional risks beyond those to which we have been historically subject.

We consummated the Signify Health acquisition in March 2023 through which we expanded our offerings to include health risk assessments, value-based care and provider enablement services, and we also consummated the Oak Street Health acquisition in May 2023 through which we offer multi-payor, senior-focused, value-based primary care for Medicare-eligible patients, broadening our ability to provide primary care services. The Signify Health and the Oak Street Health businesses are subject to many of the risks described in this Item 1A, as well as certain additional risks that are different from the risks our businesses have historically faced.

The additional risks to which our Signify Health business is subject include, but are not limited to, the following:

• ability to recruit, retain and grow its network of credentialed, high-quality physicians, physician assistants and nurse practitioners to provide clinical services in highly competitive markets for talent;
• successful challenges to Signify Health’s treatment of health care providers as independent contractors, which could result in increased costs and subject the business to regulatory sanction;
• dependence on a concentrated number of key health plan customers;
• the quality of the information received about plan members of such health plans for whom Signify Health will seek to provide in-home evaluations and other services, and the regulatory restrictions and requirements associated with directly contacting plan members;
• ability to perform and ensure the quality of health risk assessments;
• ability to achieve and receive shared health care cost savings;
• the regulatory and business risks associated with participation in certain government health care programs, including the Medicare Shared Savings Program through Signify Health’s Caravan accountable care organizations (“ACOs”) and identification of diagnosis codes related to risk adjustment payments under Part C of the Medicare program;
• health reform initiatives and changes in the rules governing government health care programs, including rules related to the use of in-home health risk assessments; and
• use of “open source” software in its technology, which may make it easier for others to gain access or compromise its proprietary technology.

The additional risks to which our Oak Street Health business is subject include, but are not limited to, the following:

• ability to attract new Medicare-eligible patients and credentialed, high-quality physicians and other providers for senior-focused primary care in a highly competitive market for such patients and providers;
• satisfying the enrollment requirements under government health care programs for physicians and other providers in a timely manner;
• dependence on a significant portion of revenue from Medicare or Medicare Advantage plans, which subjects Oak Street Health to reductions in Medicare reimbursement rates or changes in the rules governing the Medicare program;
• dependence for a significant portion of revenue from agreements with a limited number of key payors with whom Oak Street Health contracts to provide services under terms that may permit a payor to amend the compensation arrangements or terminate the agreements without cause;
• dependence on reimbursements from third-party payors, which can result in substantial delay, and on patients, through copayments and deductibles, which subjects Oak Street Health to additional reimbursement risk;
• under the fixed fee (or capitated) agreements Oak Street Health enters into with health plans, the assumption of the risk that the actual cost of a service it provides to a patient exceeds the reimbursement provided by the health plan;
• reductions in the quality ratings of Medicare health plans Oak Street Health serves could result in a shift of patients from, or the termination of, a health plan Oak Street Health serves;
• submission of inaccurate, incomplete or erroneous data, including risk adjustment data, to health plans and government payors could result in inaccuracies in the revenue Oak Street Health records or receipt of overpayments, which may subject it to repayment obligations and penalties;
• geographic concentration of its primary care centers;
• risks associated with its existing legal proceedings and litigations;
• laws regulating the corporate practice of medicine and the associated agreements entered into with physician practice groups restrict the manner in which the Oak Street Health business is able to direct the operations and otherwise exercise control of its physician practice groups;
• changes in the legal treatment of its contractual arrangements with its physician practice groups could impact the ability to consolidate the revenue of these groups; and
• ability to maintain and enhance its reputation and brand recognition.

The additional risks faced by Signify Health and Oak Street Health may also compound, or be heightened by, many of our other risks, including the risks related to adverse economic conditions in the U.S. and abroad, cybersecurity, and compliance with applicable laws and regulations, among others. The Signify Health and the Oak Street Health businesses may also be subject to additional risks the existence or significance of which we may not have anticipated prior to the respective acquisitions of such businesses. Any risks associated with the Signify Health or the Oak Street Health business, if they materialize, could adversely affect our business, financial condition and results of operations, including our ability to timely and effectively integrate the businesses in our operations and the timing and extent of realization of synergies and other benefits that we expected in connection with the acquisitions. Our experience in managing the additional risks associated with the acquisitions is more limited than our experience in managing the risks associated with our historical businesses, and there is no assurance that we will be able to effectively manage or mitigate such risks.

We can provide no assurance that we will be able to compete successfully on Public Exchanges or that our pricing or other actions will result in the profitability of our Public Exchange products.

In January 2022, we entered into the Public Exchanges in eight states, expanded to a total of twelve states in 2023, and further expanded to a total of 17 states in 2024. To compete effectively on Public Exchanges, we have developed or acquired the technology, systems, tools and talent necessary to interact with Public Exchanges and engage Public Exchange consumers through enhanced consumer-focused sales, marketing channels and customer interfaces. We have also created new customer service programs and product offerings. While participating on the Public Exchanges, we will have to respond to pricing and other actions taken by existing competitors and regulators as well as potentially disruptive new entrants, which could reduce our profit margins. Due to the price transparency provided by Public Exchanges, when we market products we face competitive pressures from existing and new competitors who may have lower cost structures. Our competitors may bring their Public Exchange and other consumer products to market more quickly, have greater experience marketing to consumers and/or may be targeting the higher margin portions of our business. We can provide no assurance that we will be able to compete successfully or profitably on Public Exchanges or that we will be able to benefit from any opportunities presented by Public Exchanges.

In addition, there can be no assurance that our pricing or other actions will result in the profitability of our Public Exchange products in 2024 or any future year. We have set 2024 premium rates for our Public Exchange products based on our projections, including as to the health status and quantity of membership and utilization of medical and/or other covered services by members. The accuracy of the projections reflected in our pricing may be impacted by (i) adverse selection among individuals who require or utilize more expensive medical and/or other covered services, (ii) other plans’ withdrawals from participation in the Public Exchanges we serve, (iii) a rapid increase or decline in membership, and (iv) legislation, regulations, enforcement activity and/or judicial decisions that cause Public Exchanges to operate in a manner different than what we projected in setting our premium rates, including the potential expiration of premium subsidies in 2025.

A change in our Health Care Benefits product mix may adversely affect our profit margins.

Our Insured Health Care Benefits products that involve greater potential risk generally tend to be more profitable than our ASC products. Historically, smaller employer groups have been more likely to purchase Insured Health Care Benefits products because such purchasers are generally unable or unwilling to bear greater liability for health care expenditures, although over the last several years even relatively small employers have moved to ASC products. We also serve, and expect to grow our business with, government-sponsored programs, including Medicare and Medicaid, that are subject to competitive bids and have lower profit margins than our Commercial Insured Health Care Benefits products. A shift of enrollees from more profitable products to less profitable products could have a material adverse effect on the Health Care Benefits segment’s operating results.

Negative public perception of the industries in which we operate, or of our industries’ or our practices, can adversely affect our businesses, operating results, cash flows and prospects.

Our brand and reputation are two of our most important assets, and the industries in which we operate have been and are negatively perceived by the public from time to time. Negative publicity may come as a result of adverse media coverage, litigation against us and other industry participants, the ongoing public debates over drug pricing, PBMs, government involvement in drug pricing and purchasing, changes to the ACA, “surprise” medical bills, governmental hearings and/or investigations, actual or perceived shortfalls regarding our industries’ or our own products, including Medicare Advantage plans in general, and/or business practices (including PBM operations, drug pricing and insurance coverage determinations) and social media and other media relations activities. Negative publicity also may come from a failure to meet customer expectations for consistent, high quality and accessible care. This risk may increase as we continue to offer products and services that make greater use of data and as our business model becomes more focused on delivering health care to consumers.

Negative public perception and/or publicity of our industries in general, or of us or our key vendors, brokers or product distribution networks in particular, can further increase our costs of doing business and adversely affect our operating results and our stock price by:

• adversely affecting our brand and reputation;
• adversely affecting our ability to market and sell our products and/or services and/or retain our existing customers and members;
• requiring us to change our products and/or services;
• reducing or restricting the revenue we can receive for our products and/or services; and/or
• increasing or significantly changing the regulatory and legislative requirements with which we must comply.

We must maintain and improve our relationships with our retail and specialty pharmacy customers and increase the demand for our products and services, including proprietary brands.

The success of our businesses depends in part on customer loyalty, superior customer service and our ability to persuade customers to frequent our retail stores and online sites and to purchase products in additional categories and our proprietary brands. Failure to timely identify or effectively respond to changing consumer preferences, spending patterns and evolving demographic mixes in the communities we serve, including shifts toward online shopping, or failure to maintain desirable selections of merchandise, store environments or guests experiences could adversely affect our relationship with our customers and clients and the demand for our products and services and could result in excess inventories of products.

We offer our retail customers proprietary brand products that are available exclusively at our retail stores and through our online retail sites. The sale of proprietary products subjects us to unique risks including potential product liability risks, mandatory or voluntary product recalls, potential supply chain and distribution chain disruptions for raw materials and finished products, our ability to successfully protect our intellectual property rights and the rights of applicable third parties, and other risks generally encountered by entities that source, market and sell private-label products. We also face similar risks for the other products we sell in our retail operations, including supply chain and distribution chain disruption risk. Any failure to adequately address some or all of these risks could have an adverse effect on our retail business, operating results, cash flows and/or financial condition. Additionally, an increase in the sales of our proprietary brands may adversely affect our sales of products owned by our suppliers and adversely impact certain of our supplier relationships. Our ability to locate qualified, economically stable suppliers who satisfy our requirements, and to acquire sufficient products in a timely and effective manner, is critical to ensuring, among other things, that customer confidence is not diminished. Any failure to develop sourcing relationships with a broad and deep supplier base could adversely affect our operating results and erode customer loyalty.

We also could be adversely affected if we fail to identify or effectively respond to changes in marketplace dynamics. For example, specialty pharmacy represents a significant and growing proportion of prescription drug spending in the U.S., a significant portion of which is dispensed outside of traditional retail pharmacies. Because our specialty pharmacy business focuses on complex and high-cost medications, many of which are made available by manufacturers to a limited number of pharmacies (so-called limited distribution drugs) that serve a relatively limited universe of patients, the future growth of our specialty pharmacy business depends largely upon expanding our access to key drugs and penetration in certain treatment categories. Any contraction of our base of patients or reduction in demand for the prescriptions we currently dispense could have an adverse effect on our specialty pharmacy business, operating results and cash flows.

We face risks relating to the availability, pricing and safety profiles of prescription drugs that we purchase and sell.

The profitability of our Pharmacy & Consumer Wellness and Health Services segments is dependent upon the utilization of prescription drug products. We dispense significant volumes of brand name and generic drugs from our retail, LTC, specialty and mail order pharmacies, and the retail pharmacies in our PBM’s network also dispense significant volumes of brand name and generic drugs. Our revenues, operating results and cash flows may decline if physicians cease writing prescriptions for drugs or the utilization of drugs is reduced, including due to:

• increased safety risk profiles or regulatory restrictions;
• manufacturing or other supply issues;
• a reduction in drug manufacturers’ participation in federal programs;
• certain products being withdrawn by their manufacturers or transitioned to over-the-counter products;
• future FDA rulings restricting the supply or increasing the cost of products;
• the introduction of new and successful prescription drugs or lower-priced generic alternatives to existing brand name products; or
• inflation in the price of drugs.

In addition, increased utilization of generic drugs (which normally yield a higher gross profit rate than equivalent brand name drugs) has resulted in pressure to decrease reimbursement payments to retail, mail order, specialty and LTC pharmacies for generic drugs, causing a reduction in our margins on sales of generic drugs. Consolidation within the generic drug manufacturing industry and other external factors may enhance the ability of manufacturers to sustain or increase pricing of generic drugs and diminish our ability to negotiate reduced generic drug acquisition costs. Any inability to offset increased brand name or generic prescription drug acquisition costs or to modify our activities to lessen the financial impact of such increased costs could have a significant adverse effect on our operating results.

The reserves we hold for expected claims in our Insured Health Care Benefits products are based on estimates that involve an extensive degree of judgment and are inherently variable. Any reserve, including a premium deficiency reserve, may be insufficient. If actual claims exceed our estimates, our operating results could be materially adversely affected, and our ability to take timely corrective actions to limit future costs may be limited.

A large portion of health care claims are not submitted to us until after the end of the quarter in which services are rendered by providers to our members. Our reported health care costs payable for any particular period reflect our estimates of the ultimate cost of such claims as well as claims that have been reported to us but not yet paid. We also must estimate the amount of rebates payable under the MLR rules of the ACA, CMS and the OPM and the amounts payable by us to, and receivable by us from, the U.S. federal government under the ACA’s remaining premium stabilization program.

Our estimates of health care costs payable are based on a number of factors, including those derived from historical claim experience, but this estimation process also makes use of extensive judgment. Considerable variability is inherent in such estimates, and the accuracy of the estimates is highly sensitive to changes in medical claims submission and processing patterns and/or procedures, turnover and other changes in membership, changes in product mix, changes in the utilization of medical and/or other covered services, including prescription drugs, changes in medical cost trends, changes in our medical management practices and the introduction of new benefits and products. We estimate health care costs payable periodically, and any resulting adjustments, including premium deficiency reserves, are reflected in current-period operating results within benefit costs. For example, as of December 31, 2021, we established a premium deficiency reserve of $16 million related to Medicaid products in the Health Care Benefits segment, but did not establish a premium deficiency reserve as of December 31, 2023 or 2022. A worsening (or improvement) of health care cost trend rates or changes in claim payment patterns from those that we assumed in estimating health care costs payable as of December 31, 2023 would cause these estimates to change in the near term, and such a change could be material.

Furthermore, if we are not able to accurately and promptly anticipate and detect medical cost trends or accurately estimate the cost of incurred but not yet reported claims or reported claims that have not been paid, our ability to take timely corrective actions to limit future health care costs and reflect our current benefit cost experience in our pricing process may be limited, which would further exacerbate the extent of any adverse impact on our operating results. These risks are particularly acute during and following periods when utilization of medical and/or other covered services and/or medical cost trends are below recent historical levels and in products where there is significant turnover in our membership each year, and such risks are further magnified by the ACA and other legislation and regulations that limit our ability to price for our projected and/or experienced increases in utilization and/or medical cost trends.

Our operating results are affected by the health of the economy in general and in the communities we serve.

The U.S. financial markets have been experiencing, and may continue to experience, volatility and disruptions, including diminished liquidity and credit availability, inflation, declines in consumer confidence and economic growth and increases in unemployment rates, all of which have resulted in uncertainty about economic stability. Our businesses are affected by economic instability and declines in consumer confidence in general and in the communities we serve, and various other economic factors, including inflation and changes in consumer purchasing power, preferences and/or spending patterns. An unfavorable, uncertain or volatile economic environment, as we have experienced recently as a result of inflation, rising interest rates, supply chain disruptions and COVID-19, has caused and could cause a decline in drug utilization, an increase in health care utilization, a dampening demand for PBM services and retail products, and an increase in theft or other crime that could impact our retail locations.

If our customers’ operating and financial performance deteriorates, or they are unable to make scheduled payments or obtain adequate financing, as a result of adverse economic conditions or otherwise, our customers may not be able to pay timely, or may delay payment of, amounts owed to us. Any inability of our customers to pay us for our products and services may adversely affect our businesses, operating results and cash flows. In addition, both state and federal government sponsored payers, as a result of budget deficits or spending reductions, may suspend payments or seek to reduce their health care expenditures resulting in our customers delaying payments to us or renegotiating their contracts with us.

The adverse impacts on our businesses of an uncertain economic environment may be further exacerbated by the increasing prevalence of high deductible health plans and health plan designs favoring co-insurance over co-payments as members and other consumers may decide to postpone, or not to seek, medical treatment which may lead them to incur more expensive medical treatment in the future and/or decrease our prescription volumes.

Further, economic conditions including interest rate fluctuations, changes in capital market conditions and regulatory changes may affect our ability to obtain necessary financing on acceptable terms, our ability to secure suitable store locations under acceptable terms, our ability to execute sale-leaseback transactions under acceptable terms and the value of our investment portfolio.

In addition, our Health Care Benefits membership remains concentrated in certain U.S. geographies and in certain industries. Unfavorable changes in health care or other benefit costs or reimbursement rates or increased competition in those geographic areas where our membership is concentrated could therefore have a disproportionately adverse effect on our Health Care Benefits segment’s operating results. Our Health Care Benefits membership has been and may continue to be affected by workforce reductions by our customers due to adverse and/or uncertain general economic conditions, especially in the U.S. geographies and industries where our membership is concentrated. As a result, we may not be able to profitably grow and diversify our Health Care Benefits membership geographically, by product type or by customer industry, and our revenues and operating results may be disproportionately affected by adverse changes affecting our customers.

Adverse changes in the U.S. economy, consumer confidence and economic conditions could have an adverse effect on our businesses and financial results.

We are exposed to risks relating to the solvency of other insurers.

We are subject to assessments under guaranty fund laws existing in all states for obligations of insolvent insurance companies (including long-term care insurers), HMOs, ACA co-ops and other payors to policyholders and claimants. For example, in the first quarter of 2017, Aetna recorded a discounted estimated liability expense of $231 million pretax for our estimated share of future assessments for long-term care insurer Penn Treaty Network America Insurance Company and one of its subsidiaries. Guaranty funds are maintained by state insurance commissioners to protect policyholders and claimants in the event that an insurer, HMO, ACA co-op and/or other payor becomes insolvent or is unable to meet its financial obligations. These funds are usually financed by assessments against insurers regulated by a state. Future assessments may have an adverse effect on our operating results and cash flows.

Extreme events, or the threat of extreme events, could materially impact our businesses.

The occurrence of natural disasters or extreme weather events, such as hurricanes, tropical storms, floods, wildfires, earthquakes, tsunamis, cyclones, typhoons, extended winter storms, droughts and tornadoes; epidemics, pandemics or disease outbreaks and other extreme events and man-made disasters, such as nuclear or biological attacks or other acts of violence, such as active shooter situations, whether as a result of war or terrorism or otherwise, can have a material adverse effect on the U.S. economy in general, our industries and us specifically. In particular, the long-term effects of climate change are expected to be widespread and unpredictable. The physical effects of climate change, such as an increase in the frequency or intensity of extreme weather events described above and rising sea levels, could adversely affect our operations, including by increasing our energy costs, disrupting our supply chain, negatively impacting our workforce, damaging our facilities and threatening the habitability of the locations in which we operate. Climate change also presents transition risks, including risks posed by regulatory and technology changes and the associated costs as the economy and our business transitions from reliance on carbon-based energy.

Extreme events or the threat of extreme events could result in significant health care costs, including those associated with behavior health offerings, waiving certain medical requirements or assisting with replacement medications or transfer prescriptions, which could also be affected by the government’s actions and the responsiveness of public health agencies and other insurers. For example, during the COVID-19 pandemic, we waived various member cost sharing and prior authorization requirements and expanded support for our members. In addition, some of our employees and our vendors are concentrated in certain large, metropolitan areas which may be particularly exposed to these events. Such events could adversely affect our businesses, operations, operating results and cash flows, and, in the event of extreme circumstances, our financial condition or viability, particularly if our responses to such events are less adequate than those of our competitors.

We may be unable to achieve our environmental, social and governance goals.

We are dedicated to corporate social responsibility and sustainability and we established certain goals as part of our ESG strategy. We face pressures from our colleagues, customers, stockholders and other stakeholders to meet our goals and to make significant advancements in ESG matters. Achievement of our goals is subject to risks and uncertainties, many of which are outside of our control, and it is possible that we may fail to achieve these goals or that our colleagues, customers, stockholders or other stakeholders may not be satisfied with the goals we set or our efforts to achieve them. These risks and uncertainties include, but are not limited to: our ability to set and execute on our operational strategies and achieve our goals within the currently projected costs and the expected timeframes; the availability and cost of technological advancements, renewable energy and other materials necessary to meet our goals and expectations; compliance with, and changes or additions to, global and regional regulations, taxes, charges, mandates or requirements relating to climate-related goals; labor-related regulations and requirements that restrict or prohibit our ability to impose requirements on third party contractors; the actions of competitors and competitive pressures; and an acquisition of or merger with another company that has not adopted similar goals or whose progress towards reaching its goals is not as advanced as ours. A failure to meet our goals could adversely affect public perception of our business, employee morale or customer or stockholder support.

Further, an increasing percentage of colleagues, customers, stockholders and other stakeholders considers ESG factors in making employment, consumer health care and investment decisions. If we are unable to meet our goals, we may have difficulty retaining or attracting colleagues, investors, customers, or partners or competing effectively, which would negatively impact our brand and reputation, as well as our business, operating results, and financial condition.

In addition, we could face increased regulatory, reputational and legal scrutiny as a result of our ESG-related commitments and disclosures, and we could also face challenges with managing conflicting regulatory requirements and our various stakeholders’ expectations.

Risks From Changes in Public Policy and Other Legal and Regulatory Risks

We are subject to potential changes in public policy, laws and regulations, including reform of the U.S. health care system and entitlement programs, which could have a material adverse effect on our businesses, operations and/or operating results.

The political environment in which we operate remains uncertain. It is reasonably possible that our business operations and operating results could be materially adversely affected by legislative, enforcement, regulatory and public policy changes at the federal or state level, including, but not limited to: changes to the regulatory environment for health care and related benefits, including Medicare, Medicare Advantage, the ACA, and related Public Exchange regulations; efforts to amend the ACA and related regulations, including through litigation aimed at challenging the ability to enforce portions of the ACA, such as the preventative services mandate; changes to laws or regulations governing drug reimbursement, pricing, purchasing and/or importation; changes to or adoption of laws or regulations governing PBMs, including those related to network restrictions, formulary management, affiliate reimbursement, contractual guarantees and reconciliations, reimbursement mandates, required reporting, purchase discount and/or rebate arrangements with drug manufacturers and/or other PBM services; changes to the laws and regulations governing PBMs’, PDPs’ and/or Managed Medicaid organizations’ interactions with government funded health care programs; changes to or adoption of laws and/or regulations relating to claims processing and billing; changes to immigration policies; changes to patent laws; changes with respect to tax and trade policies, tariffs and other government regulations affecting trade between the U.S. and other countries; and other public policy initiatives.

Our businesses, profitability and growth also may be adversely affected by (i) judicial and regulatory decisions that change and/or expand the interpretations of existing statutes and regulations, expand fiduciary obligations, impose medical or bad faith liability, increase our responsibilities under ERISA or the remedies available under ERISA, or reduce the scope of ERISA and Medicare Part D preemption of state law claims or (ii) other legislation and regulations. For example, laws in Arkansas, North Dakota and Oklahoma have attempted to limit PBM practices and have been subject to recent lawsuits. Additional litigation has been filed in several states to challenge ERISA and Medicare Part D preemption.

In addition, in November 2020, the HHS released the Rebate Rule, which eliminates the regulatory safe harbor from prosecution under the AKS for rebates from pharmaceutical companies to PBMs in Medicare Part D and in Medicaid MCOs, replacing it with two far narrower safe harbors designed to directly benefit patients with high out-of-pocket costs and to change the way PBMs are compensated. The new safe harbors are (i) for rebates which are passed on to the patient at the point of sale and (ii) for flat service fee payments made to PBMs which cannot be tied to the list prices of drugs. The PCMA, which represents PBMs, has filed a suit in an effort to block the Rebate Rule, claiming that the Rebate Rule would lead to higher premiums in Medicare Part D and was adopted in an unlawful manner. It is unclear whether the Rebate Rule will be enforceable, whether pharmaceutical companies will respond by reducing list prices, whether list prices in the private market may also be reduced, and what the resulting impact will be to PBMs or the Company. The Bipartisan Infrastructure Act of 2021 delays the effective date of the rebate rule to January 2026, and the IRA further delays the Rebate Rule through 2032.

Additionally, the Consolidated Appropriations Act of 2021 was signed into law in December 2020 and contains transparency provisions requiring group health plans and health insurance issuers to report certain prescription drug costs, overall spending on health services and prescription drugs, and information about premiums and the impact of rebates and other remuneration on premiums and out-of-pocket costs to the Tri-Departments. No later than 18 months after the first submission and bi-annually thereafter, the Tri-Departments will release a public report on drug pricing trends, drug reimbursement, and the impact of drug prices on premiums. The first filings of plan year data were required in December 2022 and will be required annually in June of each year on an ongoing basis.

It is not possible to predict the enactment or content of new legislation or regulations or changes to existing laws or regulations or their enforcement, interpretation or application, or the form they will take (for example, through the use of U.S. Presidential Executive Orders or executive orders by governors or key regulators). If we fail to respond adequately to such changes, including by implementing strategic and operational initiatives, or do not respond as effectively as our competitors, our businesses, operations and operating results may be materially adversely affected. Even if we could predict such matters, it may not be possible to eliminate the adverse impact of public policy changes that would fundamentally change the dynamics of one or more industries in which we compete. Examples of such changes include, but are not limited to: the federal or one or more state governments fundamentally restructuring or reducing the funding available for government programs, increasing its involvement in drug reimbursement, pricing, purchasing and/or importation, changing the laws and regulations governing PBMs’, PDPs’ and/or Managed Medicaid organizations’ interactions with government funded health care programs, changing the tax treatment of health or related benefits, or significantly altering the ACA. The likelihood of adverse changes remains high due to state and federal budgetary pressures, and our businesses and operating results could be materially and adversely affected by such changes, even if we correctly predict their occurrence.

For more information on these matters, see “Government Regulation” included in Item 1 of this 10-K.

If we fail to comply with applicable laws and regulations, many of which are highly complex, we could be subject to significant adverse regulatory actions, including monetary penalties, or suffer brand and reputational harm.

Our businesses are subject to extensive regulation and oversight by state, federal and international governmental authorities. The laws and regulations governing our operations and interpretations of those laws and regulations, including those related to human capital and climate change, are increasing in number and complexity, change frequently and can be inconsistent or conflict with one another. In general, these laws and regulations are designed to benefit and protect customers, members and providers rather than us or our investors. In addition, the governmental authorities that regulate our businesses have broad latitude to make, interpret and enforce the laws and regulations that govern us and continue to interpret and enforce those laws and regulations more strictly and more aggressively each year. We also must follow various restrictions on certain of our businesses and the payment of dividends by certain of our subsidiaries put in place by certain state regulators.

Certain of our Health Services and Pharmacy & Consumer Wellness operations, products and services are subject to:

• the clinical quality, patient safety and other risks inherent in the dispensing, packaging and distribution of drugs and other health care products and services, including claims related to purported dispensing and other operational errors (any failure by our Health Services and/or Pharmacy & Consumer Wellness operations to adhere to the laws and regulations applicable to the dispensing of drugs could subject us to civil and criminal penalties);
• federal and state anti-kickback and other laws that govern our relationship with drug manufacturers, customers and consumers;
• compliance requirements under ERISA, including fiduciary obligations in connection with the development and implementation of items such as drug formularies and preferred drug listings; and
• federal and state legislative proposals and/or regulatory activity that could adversely affect pharmacy benefit industry practices.

Our Health Care Benefits products are highly regulated, particularly those that serve Public Exchange, Medicare, Medicaid, dual eligible, dual eligible special needs and small group Commercial customers and members. The laws and regulations governing participation in the Public Exchanges, Medicare Advantage (including dual eligible special needs plans), Medicare Part D, Medicaid, and Managed Medicaid plans are complex, are subject to interpretation and can expose us to penalties for non-compliance.

The scope of the practices and activities that are prohibited by federal and state false claims acts is the subject of pending litigation. Claims under federal and state false claims acts can be brought by the government or by private individuals on behalf of the government through a qui tam or “whistleblower” suit, and we are a defendant in a number of such proceedings. If we are convicted of fraud or other criminal conduct in the performance of a government program or if there is an adverse decision against us under the False Claims Act, we may be temporarily or permanently suspended from participating in government health care programs, including Public Exchange, Medicare Advantage, Medicare Part D, Medicaid, dual eligible and dual eligible special needs plan programs, and we also may be required to pay significant fines and/or other monetary penalties. Whistleblower suits have resulted in significant settlements between governmental agencies and health care companies. The significant incentives and protections provided to whistleblowers under applicable law increase the risk of whistleblower suits.

If we fail to comply with laws and regulations that apply to government programs, we could be subject to criminal fines, civil penalties, premium refunds, prohibitions on marketing or active or passive enrollment of members, corrective actions, termination of our contracts or other sanctions, which could have a material adverse effect on our ability to participate in Public Exchange, Medicare Advantage, Medicare Part D, Medicaid, dual eligible, and dual eligible special needs plans and other programs, our brand and reputation, and our operating results, cash flows and financial condition.

For more information on these matters, see “Government Regulation” included in Item 1 of this 10-K.

If our compliance or other systems and processes fail or are deemed inadequate, we may suffer brand and reputational harm and become subject to contractual damages, regulatory actions and/or litigation.

In addition to being subject to extensive and complex laws and regulations, many of our contracts with customers include detailed requirements. In order to be eligible to offer certain products or bid on certain contracts, we must demonstrate that we have robust systems and processes in place that are designed to maintain compliance with all applicable legal, regulatory and contractual requirements. These systems and processes frequently are reviewed and audited by our customers and regulators. If our systems and processes designed to maintain compliance with applicable legal and contractual requirements, and to prevent and detect instances of, or the potential for, non-compliance fail or are deemed inadequate, we may suffer brand and reputational harm and be subject to contractual damages, regulatory actions, litigation and other proceedings which may result in damages, fines, suspension or loss of licensure, suspension or exclusion from participation in government programs and/or other penalties, any of which could adversely affect our businesses, operating results, cash flows and/or financial condition.

We routinely are subject to litigation and other adverse legal proceedings, including class actions and qui tam actions. Many of these proceedings seek substantial damages which may not be covered by insurance. These proceedings are costly to defend, may result in changes in our business practices, harm our brand and reputation and adversely affect our businesses and operating results.

PBM, retail pharmacy, mail order pharmacy, specialty pharmacy, LTC pharmacy and health care and related benefits are highly regulated industries whose participants frequently are subject to litigation and other adverse legal proceedings. We are currently subject to various litigation and arbitration matters, investigations, regulatory audits, inspections, government inquiries, and regulatory and other legal proceedings, both within and outside the U.S. Litigation related to our provision of professional services in our medical clinics, pharmacies and LTC operations is increasing as we execute our vertical integration strategy and expand our services along the continuum of health care. In addition, disputes over contracts could lead to litigation or pre-litigation settlements that could materially adversely affect our businesses, operating results and/or cash flows.

Litigation, and particularly securities, derivative, collective or class action and qui tam litigation, is often expensive and disruptive. Many of the legal proceedings against us seek substantial damages (including non-economic or punitive damages and treble damages), and certain of these proceedings also seek changes in our business practices. While we currently have insurance coverage for some potential liabilities, other potential liabilities may not be covered by insurance, insurers may dispute coverage, and the amount of our insurance may not be enough to cover the damages awarded or costs incurred. In addition, some types of damages, like punitive damages, may not be covered by insurance, and in some jurisdictions the coverage of punitive damages is prohibited. Insurance coverage for all or some forms of liability also may become unavailable or prohibitively expensive in the future.

The outcome of litigation and other adverse legal proceedings is always uncertain, and outcomes that are not justifiable by the evidence or existing law or regulation can and do occur, and the costs incurred frequently are substantial regardless of the outcome. In addition, litigation and other adverse legal proceedings outside the U.S. may be subject to greater uncertainty than

within the U.S. Litigation and other adverse legal proceedings could materially adversely affect our businesses, operating results and/or cash flows because of brand and reputational harm to us, the cost of defending such proceedings, the cost of settlement or judgments against us, or the changes in our operations that could result from such proceedings. See Item 3 of this 10-K for additional information.

We frequently are subject to regular and special governmental audits, investigations and reviews that could result in changes to our business practices and also could result in material refunds, fines, penalties, civil liabilities, criminal liabilities and other sanctions.

As one of the largest national retail, mail order, specialty and LTC pharmacy, PBM and health care and related benefits providers, we frequently are subject to regular and special governmental market conduct and other audits, investigations and reviews by, and we receive subpoenas and other requests for information from, various federal and state agencies, regulatory authorities, Attorneys General, committees, subcommittees and members of the U.S. Congress and other state, federal and international governmental authorities. For example, we have received CIDs from, and provided documents and information to, the Civil Division of the DOJ in connection with a current investigation of our patient chart review processes in connection with risk adjustment data submissions under Parts C and D of the Medicare program. CMS and the OIG also are auditing the risk adjustment-related data of certain of our Medicare Advantage plans, and the number of such audits continues to increase. Several such audits, investigations and reviews by governmental authorities currently are pending, some of which may be resolved in 2024, the results of which may be adverse to us.

Federal and state governments have made investigating and prosecuting health care and other insurance fraud, waste and abuse a priority. Fraud, waste and abuse prohibitions encompass a wide range of activities, including kickbacks for referral of members, billing for unnecessary medical and/or other covered services, improper marketing, including by insurance brokers, and violations of patient privacy rights. The regulations and contractual requirements applicable to us and other industry participants are complex and subject to change, making it necessary for us to invest significant resources in complying with our regulatory and contractual requirements. Ongoing vigorous law enforcement and the highly technical regulatory scheme mean that our compliance efforts in this area will continue to require significant resources. In addition, our medical costs and the medical expenses of our Health Care Benefits ASC customers may be adversely affected if we do not prevent or detect fraudulent activity by providers and/or members.

Regular and special governmental audits, investigations and reviews by federal, state and international regulators could result in changes to our business practices, and also could result in significant or material premium refunds, fines, penalties, civil liabilities, criminal liabilities or other sanctions, including suspension or exclusion from participation in government programs and suspension or loss of licensure. Any of these audits, investigations or reviews could have a material adverse effect on our businesses, operating results, cash flows and/or financial condition or result in significant liabilities and negative publicity for us.

See “Legal and Regulatory Proceedings” in Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K for additional information.

Our litigation and regulatory risk profiles are changing as we offer new products and services and expand in business areas beyond our historical businesses, and we may face increased regulatory risks related to our vertical integration strategy.

Historically, we focused primarily on providing products and services within our Health Care Benefits and Pharmacy & Consumer Wellness segments, as well as pharmacy services within our Health Services segment. As a result of our vertical integration strategy and other innovation initiatives, we are expanding our presence in the health care space and plan to offer new products and services, including services provided by Oak Street Health and Signify Health, which present a different litigation and regulatory risk profile than the products and services that we historically have offered and increase our exposure to additional risks. Our vertical integration strategy may also lead to increased regulatory and public scrutiny as a result of consumer protection and quality of care concerns.

We face unique regulatory and other challenges in our Medicare and Medicaid businesses.

We are seeking to substantially grow the Medicare and Medicaid membership in our Health Care Benefits segment in 2024 and over the next several years. We face unique regulatory and other challenges that may inhibit the growth and profitability of those businesses.

• In March 2023, CMS issued its final notice detailing final 2024 Medicare Advantage payment rates. Final 2024 Medicare Advantage rates resulted in an expected average increase in revenue for the Medicare Advantage industry of 3.32%, and the year-to-year percentage change included a (1.24%) decrease for star ratings, a risk model revision and normalization of (2.16%), and a risk score trend of 4.44%. In March 2023, CMS also finalized the 2024 Medicare Advantage reimbursement rates, which result in an expected average decrease in revenue for the Medicare Advantage industry of 1.12%, excluding the CMS estimate of Medicare Advantage risk score trend, though the rates may vary widely depending on the provider group and patient demographics. On January 31, 2024, CMS issued an advance notice detailing proposed 2025 Medicare Advantage payment rates. The 2025 Medicare Advantage rates, if finalized as proposed, will result in an expected average decrease in revenue for the Medicare Advantage industry of 0.16%, excluding the CMS estimate of Medicare Advantage

risk score trend. CMS intends to publish the final 2025 rate announcement no later than April 1, 2024. The Company faces challenges from the impact of the increasing cost of medical care (including prescription medications), changes to methodologies for determining payments and CMS local and national coverage decisions that require the Company to pay for services and supplies that are not factored into the Company’s bids. We cannot predict how the rates will be finalized, future Medicare funding levels, the impact of future federal budget actions or ensure that such changes or actions will not have a material adverse effect on our Medicare operating results.

• The organic expansion of our Medicare Advantage and Medicare Part D service area is subject to the ability of CMS to process our requests for service area expansions and our ability to build cost competitive provider networks in the expanded service areas that meet applicable network adequacy requirements. CMS’ decisions on our requests for service area expansions also may be affected adversely by compliance issues that arise each year in our Medicare operations.
• CMS regularly audits our performance to determine our compliance with CMS’s regulations and our contracts with CMS and to assess the quality of the services we provide to our Medicare members, and state regulators are increasingly conducting audits to assess the quality of services we provide to our Medicaid members. As a result of these audits, we may be subject to significant or material retroactive adjustments to and/or withholding of certain premiums and fees, fines, criminal liability, civil monetary penalties, CMS- or state-imposed sanctions (including suspension or exclusion from participation in government programs) or other restrictions on our Medicare, Medicaid and other businesses, including suspension or loss of licensure.
• “Star ratings” from CMS for our Medicare Advantage plans will continue to have a significant effect on our plans’ operating results. Only Medicare Advantage plans with a star rating of 4 or higher (out of 5) are eligible for a quality bonus in their basic premium rates. CMS continues to change its rating system to make achieving and maintaining a four or higher star rating more difficult. If our star ratings fall or remain below four for a significant portion of our Medicare Advantage membership, or do not match the performance of our competitors, or the star rating quality bonuses are reduced or eliminated, our revenues, operating results and cash flows may be significantly adversely affected. In addition, due to uncertainties with CMS cut-points, no Medicare Advantage plan can guarantee their overall star ratings. There can be no assurances that the Company will be successful in maintaining or improving its star ratings in future years.
• The Company’s 2023 star ratings were used to determine which of its Medicare Advantage plans have ratings of 4 stars or higher and qualify for bonus payments in 2024. Based on the 2023 star ratings, the Company’s Medicare Advantage plans are not eligible for full level quality bonuses in 2024, which could reduce profit margin. CMS released the Company’s 2024 star ratings in October 2023, which will impact revenues in 2025. The percentage of Aetna Medicare Advantage members in 4+ star plans is expected to return to 87% (based on enrollment and contract affiliation as of December 31, 2023), as compared to the unmitigated 21% based on the 2023 star ratings. The main driver of this increase was a half star improvement in the Aetna National PPO, which increased from 3.5 stars to 4.0 stars. This means that we expect that the Company’s Medicare Advantage plans will again be eligible for full level quality bonuses in 2025.
• Payments we receive from CMS for our Medicare Advantage and Medicare Part D businesses also are subject to risk adjustment based on the health status of the individuals we enroll. Elements of that risk adjustment mechanism continue to be challenged by the DOJ, the OIG and CMS itself. For example, CMS made significant changes to the structure of the hierarchical condition category model in version 28, which may impact RAF scores for a larger percentage of Medicare Advantage beneficiaries and could result in changes to beneficiary RAF scores with or without a change in the patient’s health status. Substantial changes in the risk adjustment mechanism, including those that result from the final Part C contract-level Risk Adjustment Data Validation Audits (“RADV Audit Rule”) issued in January 2023 or other changes that may result from enforcement or audit actions, could materially affect the amount of our Medicare reimbursement, require us to raise prices or reduce the benefits we offer to Medicare beneficiaries, impact the services provided by, or the financial performance of, Oak Street Health and Signify Health and potentially limit our (and the industry’s) participation in the Medicare program.
• The RADV Audit Rule creates uncertainty for Medicare Advantage plans. The lack of detail provided with respect to how CMS will select contracts and claims to audit, the methodology CMS will use, and how it will extrapolate as part of the RADV Audit Rule may impact future Medicare Advantage bids and result in other implications. The RADV Audit Rule also permits extrapolation of OIG contract level audits for payment years 2018 forward. The RADV Audit Rule is subject to ongoing litigation and the outcome and future impacts are uncertain.
• Changes to the ability of PBMs to have pharmacy performance programs in place for clients and report payments via direct and indirect reporting mechanisms, including requiring all pharmacy payments to be included in point-of-sale pricing, could impact the Health Services business.
• Medicare Part D has resulted in increased utilization of prescription medications and puts pressure on our pharmacy gross margin rates due to regulatory and competitive pressures. Further, as a result of the ACA and changes to the retiree drug subsidy rules, clients of our PBM business could decide to discontinue providing prescription drug benefits to their

Medicare-eligible members. To the extent this phenomenon occurs, the adverse effects of increasing customer migration into Medicare Part D may outweigh the benefits we realize from growth of our Medicare Part D products.

• Our Medicare Part D operating results and our ability to expand our Medicare Part D business could be adversely affected if: the cost and complexity of Medicare Part D exceed management’s expectations or prevent effective program implementation or administration; further changes to the regulations regarding how drug costs are reported for Medicare Part D are implemented in a manner that adversely affects the profitability of our Medicare Part D business; changes to the regulations regarding how drug costs are reported for Medicare Part D are implemented in a manner that adversely affects the profitability of our Medicare Part D business; changes to the applicable regulations impact our ability to retain fees from third parties including network pharmacies; the government alters Medicare Part D program requirements or reduces funding because of the higher-than-anticipated cost to taxpayers of Medicare Part D or for other reasons; the government mandated use of point-of-sale manufacturer’s rebates continues; the government enacts price controls on certain pharmaceutical products in Medicare Part D; the government makes changes to how pharmacy pay-for-performance is calculated; the government mandates CMS negotiation with manufacturers for certain drugs; or reinsurance thresholds are reduced below their current levels, which is currently scheduled to begin in 2025.
• The IRA contains changes to the Part D program that began in 2023 and will continue to 2032 that could shift more of the claim liability to plans and away from the government.
• We have experienced challenges in obtaining complete and accurate encounter data for our Medicaid products due to difficulties with providers and third-party vendors submitting claims in a timely fashion in the proper format, and with state agencies in coordinating such submissions. As states increase their reliance on encounter data, and some states mandate that certain amounts be included or excluded from encounter data, these difficulties could affect the Medicaid premium rates we receive and how Medicaid membership is assigned to us, which could have a material adverse effect on our Medicaid operating results and cash flows and/or our ability to bid for, and continue to participate in, certain Medicaid programs.
• If we fail to report and correct errors discovered through our own auditing procedures or during a CMS audit or otherwise fail to comply with the applicable laws and regulations, we could be subject to fines, civil monetary penalties or other sanctions, including fines and penalties under the False Claims Act, which could have a material adverse effect on our ability to participate in Medicare Advantage, Medicare Part D or other government programs, and on our operating results, cash flows and financial condition.
• The resumption of Medicaid eligibility redeterminations after being suspended during the COVID-19 pandemic could negatively impact the number of members eligible for the Company’s Medicaid plans.
• Certain of our Medicaid contracts require the submission of complete and correct encounter data. The accurate and timely reporting of encounter data is increasingly important to the success of our Medicaid programs because more states are using encounter data to determine compliance with performance standards and, in part, to set premium rates. We have expended and may continue to expend additional effort and incur significant additional costs to collect accurate, or to correct inaccurate or incomplete, encounter data and have been and could be exposed to premium withholding, operating sanctions and financial fines and penalties for noncompliance.
• CMS has proposed requiring that health plans offering certain dual eligible programs must also offer Medicaid programs, which could further impact the Company’s ability to obtain or retain membership in its dual eligible programs. In addition, states are increasingly requiring companies to offer Medicaid within a state and conducting competitive bid processes to qualify to offer dual eligible products.

Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues, and we expect that percentage to increase.

Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues, and we expect that percentage to increase. As our government funded businesses grow, our exposure to changes in federal and state government policy with respect to and/or regulation of the various government funded programs in which we participate also increases.

The laws and regulations governing participation in Public Exchange, Medicare Advantage (including dual eligible special needs plans), Medicare Part D, Medicaid, and Managed Medicaid plans are complex, are subject to interpretation and can expose us to penalties for non-compliance. Federal, state and local governments have the right to cancel or not to renew their contracts with us on short notice without cause or if funds are not available. Funding for these programs is dependent on many factors outside our control, including general economic conditions, continuing government efforts to contain health care costs and budgetary constraints at the federal or applicable state or local level and general political issues and priorities.

The U.S. federal government and our other government customers also may reduce funding for health care or other programs, cancel or decline to renew contracts with us, or make changes that adversely affect the number of persons eligible for certain programs, the services provided to enrollees in such programs, our premiums and our administrative and health care and other benefit costs, any of which could have a material adverse effect on our businesses, operating results and cash flows. When federal funding is delayed, suspended or curtailed, we continue to receive, and we remain liable for and are required to fund, claims from providers for providing services to beneficiaries of federally funded health benefits programs in which we participate. An extended federal government shutdown or a delay by Congress in raising the federal government’s debt ceiling also could lead to a delay, reduction, suspension or cancellation of federal government spending and a significant increase in interest rates that could, in turn, have a material adverse effect on the value of our investment portfolio, our ability to access the capital markets and our businesses, operating results, cash flows and liquidity.

Possible changes in industry pricing benchmarks and drug pricing generally can adversely affect our PBM and Pharmacy & Consumer Wellness businesses.

It is possible that the pharmaceutical industry, regulators, or federal policymakers may evaluate and/or develop an alternative pricing reference to replace AWP or WAC, which are the pricing references used for many of our PBM and LTC client contracts, drug purchase agreements, retail network contracts, specialty payor agreements and other contracts with third party payors in connection with the reimbursement of drug payments. In addition, many state Medicaid fee-for-service programs have established pharmacy network payments on the basis of Actual Acquisition Cost (“AAC”). The use of an AAC basis in fee for service Medicaid could have an impact on reimbursement practices in Health Care Benefits’ Commercial and other Government products. It is also possible that Congress may enact some limited form of price negotiation for Medicare. In addition, CMS also publishes the National Average Drug Acquisition Cost (“NADAC”) for certain drugs; NADAC pricing is being adopted in an increasing number of states.

Future changes to the use of AWP, WAC or to other published pricing benchmarks used to establish drug pricing, including changes in the basis for calculating reimbursement by federal and state health care programs and/or other payors, could impact the reimbursement we receive from Medicare and Medicaid programs, the reimbursement we receive from our PBM clients and other payors and/or our ability to negotiate rebates and/or discounts with drug manufacturers, wholesalers, PBMs and retail pharmacies. A failure or inability to fully offset any increased prices or costs or to modify our operations to mitigate the impact of such increases could have a material adverse effect on our operating results. Additionally, any future changes in drug prices could be significantly different than our projections. We cannot predict the effect of these possible changes on our businesses.

We may not be able to obtain adequate premium rate increases in our Insured Health Care Benefits products, which would have an adverse effect on our revenues, MBRs and operating results and could magnify the adverse impact of increases in health care and other benefit costs and of ACA assessments, fees and taxes.

Premium rates for our Insured Health Care Benefits products often must be filed with state insurance regulators and are subject to their approval, which creates risk for us in the current political and regulatory environment. The ACA generally requires a review by HHS in conjunction with state regulators of premium rate increases that exceed a federally specified threshold (or lower state-specific thresholds set by states determined by HHS to have adequate processes). Rate reviews can magnify the adverse impact on our operating margins, MBRs and operating results of increases in health care and other benefit costs, increased utilization of covered services, and ACA assessments, fees and taxes, by restricting our ability to reflect these increases and/or these assessments, fees and taxes in our pricing. Further, our ability to reflect ACA assessments, fees and taxes in our Medicare, Medicaid and CHIP premium rates is limited.

Since 2013, HHS has issued determinations to health plans that their premium rate increases were “unreasonable,” and we may experience challenges to appropriate premium rate increases in certain states. Regulators or legislatures in several states have implemented or are considering limits on premium rate increases, either by enforcing existing legal requirements more stringently or proposing different regulatory standards. Regulators or legislatures in several states also have conducted hearings on proposed premium rate increases, which can result, and in some instances have resulted, in substantial delays in implementing proposed rate increases even if they ultimately are approved. Our plans can be excluded from participating in small group Public Exchanges if they are deemed to have a history of “unreasonable” rate increases. Any significant rate increases we may request heighten the risks of adverse publicity, adverse regulatory action and adverse selection and the likelihood that our requested premium rate increases will be denied, reduced or delayed, which could lead to operating margin compression.

We anticipate continued regulatory and legislative action to increase regulation of premium rates in our Insured Health Care Benefits products. We may not be able to obtain rates that are actuarially justified or that are sufficient to make our policies profitable in one or more product lines or geographies. If we are unable to obtain adequate premium rates and/or premium rate increases, it could materially and adversely affect our operating margins and MBRs and our ability to earn adequate returns on Insured Health Care Benefits products in one or more states or cause us to withdraw from certain geographies and/or products.

Minimum MLR rebate requirements limit the level of margin we can earn in our Insured Health Care Benefits products while leaving us exposed to higher than expected medical costs. Challenges to our minimum MLR rebate methodology and/or reports could adversely affect our operating results.

The ACA’s minimum MLR rebate requirements limit the level of margin we can earn in Health Care Benefits’ Commercial Insured business. CMS minimum MLR rebate regulations limit the level of margin we can earn in our Medicare Advantage and Medicaid Insured businesses. Certain portions of our Health Care Benefits Medicaid and FEHB program business also are subject to minimum MLR rebate requirements in addition to but separate from those imposed by the ACA. Minimum MLR rebate requirements leave us exposed to medical costs that are higher than those reflected in our pricing. The process supporting the management and determination of the amount of MLR rebates payable is complex and requires judgment, and the minimum MLR reporting requirements are detailed. CMS has also proposed, but not yet finalized, a definition of “prescription drug price concessions” for commercial MLR calculation purposes, which would make additional PBM information available to plans and the HHS, potentially further complicating the MLR calculation process. Federal and state auditors are challenging our Commercial Health Care Benefits business’ compliance with the ACA’s minimum MLR requirements as well as our FEHB plans’ compliance with OPM’s FEHB program-specific minimum MLR requirements. Our Medicare and Medicaid contracts also are subject to minimum MLR audits. If a Medicare Advantage or Medicare Part D contract pays minimum MLR rebates for three consecutive years, it will become ineligible to enroll new members. If a Medicare Advantage or Medicare Part D contract pays such rebates for five consecutive years, it will be terminated by CMS. Additional challenges to our methodology and/or reports relating to minimum MLR and related rebates by federal and state regulators and private litigants are reasonably possible. The outcome of these audits and additional challenges could adversely affect our operating results.

Our operating results may be adversely affected by changes in laws and policies governing employers and by union organizing activity.

Congress and certain state legislatures continue to consider and pass legislation that increases our costs of doing business, including increased minimum wages and requiring employers to provide paid sick leave or paid family leave. In addition, our employee-related operating costs may be increased by union organizing activity and it is possible that the National Labor Relations Board may adopt regulatory changes through re-making or case law that could facilitate union organizing. If we are unable to reflect these increased expenses in our pricing or otherwise modify our operations to mitigate the effects of such increases, our operating results will be adversely affected.

We face international political, legal and compliance, operational, regulatory, economic and other risks that may be more significant than in our domestic operations.

Our international operations present political, legal, compliance, operational, regulatory, economic and other risks that we do not face or that are more significant than in our domestic operations. These risks vary widely by country and include varying regional and geopolitical business conditions and demands, government intervention and censorship, discriminatory regulation, climate change regulation, nationalization or expropriation of assets and pricing constraints. Our international products need to meet country-specific customer and member preferences as well as country-specific legal requirements, including those related to licensing, data privacy, data storage and data protection.

Our international operations increase our exposure to, and require us to devote significant management resources to implement controls and systems to comply with, the privacy and data protection laws of non-U.S. jurisdictions, such as the EU’s GDPR, and the anti-bribery, anti-corruption and anti-money laundering laws of the U.S. (including the FCPA) and the United Kingdom (including the UK Bribery Act) and similar laws in other jurisdictions. Implementing our compliance policies, internal controls and other systems may also require the investment of considerable management time and financial and other resources. Violations of these laws and regulations could result in fines, criminal sanctions against us, our officers or employees, restrictions or outright prohibitions on the conduct of our business, and significant brand and reputational harm. We must regularly reassess the size, capability and location of our global infrastructure and make appropriate changes, and must have effective change management processes and internal controls in place to address changes in our businesses and operations. Our success depends, in part, on our ability to anticipate these risks and manage these difficulties, and the failure to do so could have a material adverse effect on our brand, reputation, businesses, operating results and/or financial condition.

Our international operations require us to overcome logistical and other challenges based on differing languages, cultures, legal and regulatory schemes and time zones. Our international operations encounter labor laws, standards and customs that can be difficult and make employee relationships less flexible than in our domestic operations and expensive to modify or terminate. In some countries we are required to, or choose to, operate with local business associates, which requires us to manage our relationships with these third parties and may reduce our operational flexibility and ability to quickly respond to business challenges.

In some countries we may be exposed to currency exchange controls or other restrictions that prevent us from transferring funds internationally or converting local currencies into U.S. dollars or other currencies. Fluctuations in foreign currency exchange rates may adversely affect our revenues, operating results and cash flows from our international operations. Some of our operations are, and are increasingly likely to be, in emerging markets where these risks are heightened. Any measures we may implement to reduce the effect of volatile currencies and other risks on our international operations may not be effective.

Risks Associated with Mergers, Acquisitions, and Divestitures

We may be unable to successfully integrate companies we acquire.

Upon the closing of any acquisition, including the recent acquisitions of Oak Street Health and Signify Health, we need to successfully integrate the products, services and related assets, as well as internal controls into our business operations. If an acquisition is consummated, the integration of the acquired business, its products, services and related assets into our company also may be complex, expensive, and time-consuming and, if the integration is not fully successful, we may not achieve the anticipated benefits, operating and cost synergies and/or growth opportunities of an acquisition. Potential difficulties that may be encountered in the integration process, including with respect to Oak Street Health and Signify Health, include the following:

• Integrating personnel, operations and systems (including internal control environments and compliance policies), while maintaining focus on producing and delivering consistent, high quality products and services;
• Coordinating geographically dispersed organizations;
• Distracting management’s attention from our ongoing business operations;
• Retaining existing customers and attracting new customers;
• Managing inefficiencies associated with integrating our operations; and
• Reconciling post-acquisition costs and liabilities between buyer and seller.

An inability to realize the full extent of the anticipated benefits, operating and cost synergies, innovations and operations efficiencies or growth opportunities of an acquisition, including the recent acquisitions of Oak Street Health and Signify Health, as well as any delays or additional expenses encountered in the integration process, could have a material adverse effect on our businesses and operating results. Furthermore, acquisitions, including the recent acquisitions of Oak Street Health and Signify Health, even if successfully integrated, may fail to further our business strategy as anticipated, expose us to increased competition or challenges with respect to our products, services or service areas, and expose us to additional liabilities associated with an acquired business including risks and liabilities associated with litigation involving the acquired business. Any one of these challenges or risks could impair our ability to realize any benefit from our acquisitions after we have expended resources on them.

We expect to continue to pursue acquisitions, joint ventures, strategic alliances and other inorganic growth opportunities, as well as strategic divestitures, which may be unsuccessful, cause us to assume unanticipated liabilities, disrupt our existing businesses, be dilutive or lead us to assume significant debt, among other things.

We expect to continue to pursue acquisitions, joint ventures, strategic alliances and other inorganic growth opportunities as part of our business strategy. In addition to the integration risks noted above, some other risks we may face with respect to acquisitions, including the recent acquisitions of Oak Street Health and Signify Health, and other inorganic growth strategies include:

• we may not be able to obtain the required regulatory approval for an acquisition in a timely manner, if at all;
• we frequently compete with other firms, some of which may have greater financial and other resources and a greater tolerance for risk, to acquire attractive companies;
• the acquired, alliance and/or joint venture businesses may not perform as projected;
• the goodwill or other intangible assets established as a result of our acquisitions may be incorrectly valued or may become impaired;
• we may assume unanticipated liabilities, including those that were not disclosed to us or which we underestimated;
• the acquired businesses, or the pursuit of other inorganic growth strategies, could disrupt or compete with our existing businesses, distract management, result in the loss of key employees, business partners, suppliers and customers, divert resources, result in tax costs or inefficiencies and make it difficult to maintain our current business standards, controls, information technology systems, policies, procedures and performance;
• we may finance future acquisitions and other inorganic growth strategies by issuing common stock for some or all of the purchase price, which would dilute the ownership interests of our stockholders;
• we may incur significant debt in connection with acquisitions (whether to finance acquisitions or by assuming debt from the businesses we acquire);
• a proposed or pending transaction may have a negative effect on the Company’s credit ratings;
• we may not have the expertise to manage and profitably grow the businesses we acquire, and we may need to rely on the retention of key personnel and other suppliers of businesses we acquire, which may be difficult or impossible to accomplish;
• we may enter into merger or purchase agreements but, due to reasons within or outside our control, fail to complete the related transactions, which could result in termination fees or other penalties that could be material, cause material disruptions to our businesses and operations and adversely affect our brand, reputation, or stock price;
• in order to complete an acquisition, we may be required to divest certain portions of our business, for which we may not be able to obtain favorable pricing;
• we may be involved in litigation related to mergers or acquisitions, including for matters that occurred prior to the applicable closing, which may be costly to defend and may result in adverse rulings against us that could be material;
• announcements related to an acquisition could have an adverse effect on the market price of the Company’s common stock and other securities; and
• the integration into our businesses of the businesses and entities we acquire may affect the way in which existing laws and regulations apply to us, including subjecting us to laws and regulations that did not previously apply to us.

Similarly, we may also seek to divest assets that no longer fit into our long-term strategic plan. Such divestitures may take time and, even if such divestitures can be completed, the terms of such divestitures will be subject to market conditions, financing availability and other considerations of potential buyers, and they may have negative short-term financial impacts on us. In addition, joint ventures present risks that are different from acquisitions, including selection of appropriate joint venture parties, initial and ongoing governance of the joint venture, joint venture compliance activities (including compliance with applicable CMS requirements), growing the joint venture’s business in a manner acceptable to all the parties, including other providers in the networks that include joint ventures, maintaining positive relationships among the joint venture parties and the joint venture’s customers, and member and business disruption that may occur upon joint venture termination.

Risks Related to Our Operations

Failure to meet customer expectations may harm our brand and reputation, our ability to retain and grow our customer base and membership and our operating results and cash flows.

Our ability to attract and retain customers and members is dependent upon providing compliant, cost effective, quality customer service operations (such as call center operations, PBM functions, retail pharmacy and LTC services, retail, mail order and specialty pharmacy prescription delivery, claims processing, customer case installation and online access and tools) that meet or exceed our customers’ and members’ expectations, either directly or through vendors. As we seek to reduce general and administrative expenses, we must balance the potential impact of cost-saving measures on our customers and other services and performances. If we misjudge the effects of such measures, customers and other services may be adversely affected. We depend on third parties for certain of our customer service, PBM and prescription delivery operations. If we or our vendors fail to provide compliant service that meets our customers’ and members’ expectations, we may have difficulty retaining or profitably growing our customer base and/or membership, which could adversely affect our operating results. For example, noncompliance with any privacy or security laws or regulations or any security breach involving us or one of our third-party vendors could have a material adverse effect on our businesses, operating results, brand and reputation.

We and our vendors have experienced and continue to experience cyberattacks. We can provide no assurance that we or our vendors will be able to detect, prevent or contain the effects of such attacks or other information security (including cybersecurity) risks or threats in the future.

We and our vendors have experienced diverse cyberattacks and expect to continue to experience cyberattacks going forward. As examples, the Company and its vendors have experienced attempts to gain access to systems, denial of service attacks, attempted malware infections, account takeovers, scanning activity, and phishing emails. Attacks can originate from external sources (including criminals, terrorists and nation states) or internal actors. The Company is dedicating and will continue to dedicate significant resources and incur significant expenses to maintain and update on an ongoing basis the systems and processes that are designed to mitigate the information security risks it faces and protect the security of its computer systems, software, networks and other technology assets against attempts by unauthorized parties to obtain access to confidential information, disrupt or degrade service, or cause other damage. The impact of known cyberattacks has not been material to the Company’s operations or operating results through December 31, 2023. The Board is regularly informed regarding the Company’s information security policies, practices and status.

A compromise of our information security controls or of those businesses with whom we interact, which results in confidential information being accessed, obtained, damaged, or used by unauthorized or improper persons, could harm our reputation and expose us to regulatory actions and claims from customers and clients, financial institutions, payment card associations and other persons, any of which could adversely affect our businesses, operating results and financial condition. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and may not immediately produce signs of intrusion, we may be unable to anticipate these techniques or to implement adequate preventative measures. Moreover, a data security breach could require that we expend significant resources related to our information systems and infrastructure, and could distract management and other key personnel from performing their primary operational duties. We also could be adversely affected by any significant disruption in the systems of third parties we interact with, including key payors and vendors.

The costs of attempting to protect against the foregoing risks and the costs of responding to an information security incident are significant. Large scale data breaches at other entities increase the challenge we and our vendors face in maintaining the security of our information technology systems and proprietary information and of our customers’, employees’, members’ and other constituents’ sensitive information. Following an information security incident, our and/or our vendors’ remediation efforts may not be successful, and could result in interruptions, delays or cessation of service, and loss of existing or potential customers and members. In addition, breaches of our and/or our vendors’ security measures and the unauthorized access to or dissemination of sensitive personal information, proprietary information or confidential information about us, our customers, our members or other third-parties, could expose our customers’, members’ and other constituents’ private information and our customers, members and other constituents to the risk of financial or medical identity theft, or expose us or other third parties to a risk of loss or misuse of this information, and result in investigations, regulatory enforcement actions, material fines and penalties, loss of customers, litigation or other actions, which could have a material adverse effect on our brand, reputation, businesses, operating results and cash flows.

See Item 1C of this 10-K, “Cybersecurity,” for more information on the Company’s cybersecurity risk management and governance.

Data governance failures can adversely affect our reputation, businesses and prospects. Our use and disclosure of members’, customers’ and other constituents’ sensitive information is subject to complex regulations at multiple levels. We would be adversely affected if we or our business associates or other vendors fail to adequately protect members’, customers’ or other constituents’ sensitive information.

Our information systems are critical to the operation of our businesses. We collect, process, maintain, retain, evaluate, utilize and distribute large amounts of personally identifiable, personal health, and financial information (including payment card information) and other confidential and sensitive data about our customers, employees, members and other constituents in the ordinary course of our businesses. Some of our information systems rely upon third party systems, including cloud service providers, to accomplish these tasks. The use and disclosure of such information is regulated at the federal, state and international levels. In some cases, such laws, rules and regulations also apply to our vendors and/or may hold us liable for any violations by our vendors. These laws, rules and regulations are subject to change (and many are rapidly evolving) and in recent years have given rise to increased enforcement activity, litigation, and other disputes. For example, certain of our vendors have experienced incidents that resulted in the unauthorized disclosure of confidential information, including personal information of our members, patients or employees, which has caused us to incur expenses including those related to responding to regulatory inquiries and/or litigation. Some of these expenses are indemnified but others are not. International laws, rules and regulations governing the use and disclosure of these types of information are generally more stringent than U.S. laws and regulations, and they vary from jurisdiction to jurisdiction. Noncompliance with applicable privacy or security laws or regulations, or any security breach, information security incident, and any other incident involving the theft, misappropriation, loss or other unauthorized disclosure of, or access to, sensitive or confidential customer, member or other constituent information, whether by us, by one of our business associates or vendors or by another third party, could require us to expend significant resources to remediate any damage, could interrupt our operations and could adversely affect our brand and reputation, membership and operating results and also could expose and/or has exposed us to mandatory disclosure requirements, adverse media attention, litigation (including class action litigation), governmental investigations and enforcement proceedings, material fines, penalties and/or remediation costs, and compensatory, special, punitive and statutory damages, consent orders, adverse actions against our licenses to do business and/or injunctive relief, any of which could adversely affect our businesses, operating results, cash flows or financial condition.

Our businesses depend on our customers’, members’ and other constituents’ willingness to entrust us with their health related and other sensitive personal information. Events that adversely affect that trust, including inadequate disclosure to our members or customers of our uses of their information, failing to keep our information technology systems and our customers’, members’ and other constituents’ sensitive information secure from significant attack, theft, damage, loss or unauthorized disclosure or access, whether as a result of our action or inaction (including human error) or that of our business associates, vendors or other third parties, could adversely affect our brand and reputation, membership and operating results and also could expose and/or has exposed us to mandatory disclosure to the media, litigation (including class action litigation), governmental investigations and enforcement proceedings, material fines, penalties and/or remediation costs, and compensatory, special, punitive and statutory damages, consent orders, adverse actions against our licenses to do business and/or injunctive relief, any of which could adversely affect our businesses, operating results, cash flows or financial condition. There can be no assurance that awe have or will be able to adequately prevent, detect, and/or remediate such data security incidents.

The failure or disruption of our information technology systems or the failure of our information technology infrastructure to support our businesses could adversely affect our reputation, businesses, operating results and cash flows.

Our information systems are subject to damage or interruption from power outages, facility damage, computer and telecommunications failures, computer viruses, security breaches (including credit card or personally identifiable information breaches), cyberattacks, vandalism, catastrophic events and human error. If our information systems are damaged, fail to work properly or otherwise become unavailable, we may incur substantial costs to repair or replace them, and may experience reputational damage, loss of critical information, customer disruption and interruptions or delays in our ability to perform essential functions and implement new and innovative services. We use third-party vendors to set-up, service, and/or maintain portions of our information technology systems, and our vendors may suffer the same types of issues, which could adversely affect our ability to access and use such systems and the data contained therein, which could result in similar harm. In addition, our efforts to comply with changes in U.S. and foreign laws and regulations, including privacy and information security laws and standards, may cause us to incur significant expense due to increased investment in technology and the development of new operational processes.

Our business success and operating results depend in part on effective information technology systems and on continuing to develop and implement improvements in technology. Pursuing multiple initiatives simultaneously could make this continued development and implementation significantly more challenging.

Many aspects of our operations are dependent on our information systems and the information collected, processed, stored and handled by these systems. We rely heavily on our information and technology systems to manage our ordering, pricing, point-of-sale, pharmacy fulfillment, inventory replenishment, claims processing, customer loyalty and subscription programs, finance, human resources and other processes. Throughout our operations, we collect, process, maintain, retain, evaluate, utilize and distribute large amounts of confidential and sensitive data and information, including personally identifiable information and protected health information, that our customers, employees, members and other constituents provide to purchase products or services, enroll in programs or services, register on our websites, interact with our personnel, or otherwise communicate with us. For these operations, we depend in part on the secure transmission of confidential information over public networks.

We have many different information and other technology systems supporting our different businesses (including as a result of our acquisitions). Our businesses depend in large part on these systems to adequately price our products and services; accurately establish reserves, process claims and report operating results; and interact with providers, employer plan sponsors, customers, members, consumers and vendors in an efficient and uninterrupted fashion. In addition, recent trends toward greater consumer engagement in health care require new and enhanced technologies, including more sophisticated applications for mobile devices. Certain of our technology systems (including software) are older, legacy systems that are less flexible, less efficient and require a significant ongoing commitment of capital and human resources to maintain, protect and enhance them and to integrate them with our other systems. We must re-engineer and reduce the number of these older, legacy systems to meet changing consumer and vendor preferences and needs, improve our productivity and reduce our operating expenses. We also need to develop or acquire new technology systems, contract with new vendors or modify certain of our existing systems to support the consumer-oriented and transformational products and services we are developing, operating and expanding and/or to meet current and developing industry and regulatory standards, including to keep pace with continuing changes in information processing technology, emerging cybersecurity risks and threats, and changes to applicable privacy and security laws, rules and regulations. If we fail to achieve these objectives, our ability to profitably grow our business and/or our operating results may be adversely affected.

In addition, information technology and other technology and process improvement projects, including our transformation and enterprise modernization programs, frequently are long-term in nature and may take longer to complete and cost more than we expect and may not deliver the benefits we project once they are complete. If we do not effectively and efficiently secure, manage, integrate and enhance our technology portfolio (including vendor sourced systems), we could, among other things, have problems determining health care and other benefit cost estimates and/or establishing appropriate pricing, meeting the needs of customers, consumers, providers, members and vendors, developing and expanding our consumer-oriented products and services or keeping pace with industry and regulatory standards, and our operating results may be adversely affected.

Product liability, product recall, professional liability or personal injury issues could damage our reputation and have a significant adverse effect on our businesses, operating results, cash flows and/or financial condition.

The products that we sell could become subject to contamination, product tampering, mislabeling, recall or other damage. In addition, errors in the dispensing, packaging or administration of drugs or other products and consuming drugs in a manner that is not prescribed could lead to serious injury or death. Product liability or personal injury claims may be asserted against us with respect to any of the drugs or other products we sell or services we provide. For example, we are a defendant in hundreds of litigation proceedings relating to opioids and the sale of products containing talc. Our businesses also involve the provision of professional services, including by physicians, pharmacists, physician assistants, nurses and nurse practitioners, which exposes us to professional liability claims. Should a product or other liability issue arise, the coverage available under our insurance programs and the indemnification amounts available to us from third parties may not be adequate to protect us against the financial impact of the related claims. We also may not be able to maintain our existing levels of insurance on acceptable terms in the future. Any of the issues discussed above could damage our brand and reputation and have a significant adverse effect on our businesses, operating results and/or financial condition.

We face significant competition in attracting and retaining talented employees. Further, managing succession for, and retention of, key executives is critical to our success, and our failure to do so could adversely affect our businesses, operating results and/or future performance.

Our ability to attract and retain qualified and experienced employees is essential to meet our current and future goals and objectives. There is no guarantee we will be able to attract and retain such employees or that competition among potential employers will not result in increased compensation and/or benefits costs. If we are unable to retain existing employees or attract additional employees, or we experience an unexpected loss of leadership, we could experience a material adverse effect on our businesses, operating results and/or future performance.

In addition, our failure to adequately plan for succession of senior management and other key management roles or the failure of key employees to successfully transition into new roles could have a material adverse effect on our businesses, operating results and/or future performance. The succession plans we have in place and our employment arrangements with certain key executives do not guarantee the services of these executives will continue to be available to us.

Sales of our products and services are dependent on our ability to attract and motivate internal sales personnel and independent third-party brokers, consultants and agents. New distribution channels create new disintermediation risk. We may be subject to penalties or other regulatory actions as a result of the marketing practices of brokers and agents selling our products.

Our products are sold primarily through our sales personnel, who frequently work with independent brokers, consultants and agents who assist in the marketing, production and servicing of business. The independent brokers, consultants and agents generally are not dedicated to us exclusively and may frequently recommend and/or market health care benefits products of our competitors. Our sales could be adversely affected if we are unable to attract, retain or motivate sales personnel and third-party brokers, consultants and agents, or if we do not adequately provide support, training and education to this sales network regarding our complex product portfolio, or if our sales strategy is not appropriately aligned across distribution channels. This risk is heightened as we develop, operate and expand our consumer-oriented products and services and we expand in the health care space and our business model evolves to include a greater focus on consumers and direct-to-consumer sales, such as competing for sales on Insurance Exchanges.

New distribution channels for our products and services continue to emerge, including Private Exchanges operated by health care consultants and technology companies. These channels may make it more difficult for us to directly engage consumers and other customers in the selection and management of their health care benefits, in health care utilization and in the effective navigation of the health care system. We also may be challenged by new technologies and marketplace entrants that could interfere with our existing relationships with customers and health plan members in these areas.

In addition, there have been several investigations regarding the marketing practices of brokers and agents selling health care and other insurance products and the payments they receive. These investigations have resulted in enforcement actions against companies in our industry and brokers and agents marketing and selling those companies’ products. These investigations and enforcement actions could result in penalties and the imposition of corrective action plans and/or changes to industry practices, which could adversely affect our ability to market our products.

Specifically, CMS, U.S. Congressional committees and state departments of insurance have each increased scrutiny of the marketing practices of brokers and agents who market Medicare products and of the Medicare Advantage organizations that use these organizations to market their products. Any of the federal agencies noted above or U.S. Congress may also recommend changes or take additional action with respect to the way in which brokers and agents are compensated for selling our Medicare Advantage and Part D plans. In addition, CMS has recently proposed new limitations on the amounts brokers and agents can earn for marketing Medicare Advantage and Part D plans.

Failure of our businesses to effectively collaborate could prevent us from maximizing our operating results.

To maximize our overall enterprise value, our various businesses need to collaborate effectively. Our businesses need to be aligned in order to carry out our business strategy, prioritize goals and coordinate the design of new products intended to utilize the offerings of multiple businesses, including implementing our transformation and enterprise modernization programs. In addition, misaligned incentives, information siloes, ineffective product development and failure of our corporate governance policies or procedures, for example significant financial decisions being made at an inappropriate level in our organization, also could prevent us from maximizing our operating results and/or achieving our financial and other projections.

We are subject to payment-related risks that could increase our operating costs, expose us to fraud or theft, subject us to new rules and other requirements and potential liability and may disrupt our business operations.

We accept payments using a variety of methods, including cash, checks, credit cards, debit cards, gift cards, mobile payments and potentially other technologies in the future that may subject us to new and additional risks related to fraud and theft. Acceptance of these payment methods subjects us to rules, regulations, contractual obligations and compliance requirements, including payment network rules and operating guidelines, data security standards and certification requirements, and rules governing electronic funds transfers. These requirements may change in the future, which could make compliance more difficult or costly. For certain payment options, including credit and debit cards, we pay interchange and other fees, which could increase periodically thereby raising our operating costs. We rely on third parties to provide payment processing services, including the processing of credit cards, debit cards, and various other forms of electronic payment. If these vendors are unable to provide these services to us, or if their systems are compromised, our operations could be disrupted. The payment methods that we offer also expose us to potential fraud and theft by persons seeking to obtain unauthorized access to, or exploit any weaknesses in, the payment systems we use. If we fail to abide by applicable rules or requirements, or if data relating to our payment systems is compromised due to a breach or misuse, we may be responsible for any costs incurred by payment card issuing banks and other third parties or subject to fines and higher transaction fees. In addition, our reputation and ability to accept certain types of payments could each be harmed resulting in reduced sales and adverse effects on our operating results.

Both our and our vendors’ operations are subject to a variety of business continuity hazards and risks, any of which could interrupt our operations or otherwise adversely affect our performance and operating results.

We and our vendors are subject to business continuity hazards and other risks, including natural disasters and extreme weather events (which may increase in frequency or intensity as a result of climate change), utility and other mechanical failures, acts of war or terrorism, acts of civil unrest, crime, disruption of communications, data security and preservation, disruption of supply or distribution, safety regulation and labor difficulties. The occurrence of any of these or other events to us or our vendors might disrupt or shut down our operations or otherwise adversely affect our operations. We also may be subject to certain liability claims in the event of an injury or loss of life, or damage to property, resulting from such events. Although we have developed procedures for crisis management and disaster recovery and business continuity plans, and we maintain insurance policies that we believe are customary and adequate for our size and industry, our crisis management and disaster recovery procedures and business continuity plans may not be effective and our insurance policies include limits and exclusions and, as a result, our coverage may be insufficient to protect against all potential hazards and risks incident to our businesses. Should any such hazards or risks occur, or should our insurance coverage be inadequate or unavailable, our businesses, operating results, cash flows and financial condition could be adversely affected.

Financial Risks

We would be adversely affected if we do not effectively deploy our capital. Downgrades or potential downgrades in our credit ratings, should they occur, could adversely affect our brand and reputation, businesses, operating results, cash flows and financial condition.

Our operations generate significant capital, and we may from time to time raise additional capital, subject to market conditions. The manner in which we deploy our capital, including investments in our businesses, our operations (such as information technology and other strategic and capital projects), dividends, acquisitions, share and/or debt repurchases, repayment of debt, reinsurance or other capital uses, impacts our financial strength, claims paying ability and credit ratings issued by nationally-recognized statistical rating organizations. Credit ratings issued by nationally-recognized statistical rating organizations are broadly distributed and generally used throughout our industries. Our ratings reflect each rating organization’s opinion of our financial strength, operating performance and ability to meet our debt obligations or obligations to our insureds. We believe our credit ratings and the financial strength and claims paying ability of our principal insurance and HMO subsidiaries are important factors in marketing our Health Care Benefits products to certain of our customers.

Each of the ratings organizations reviews our ratings periodically, and there can be no assurance that our current ratings will be maintained in the future. Downgrades in our ratings could adversely affect our businesses, operating results, cash flows and financial condition.

Goodwill and other intangible assets could, in the future, become impaired.

As of December 31, 2023 and December 31, 2022, we had $120.5 billion and $102.9 billion, respectively, of goodwill and other intangible assets. Goodwill and indefinite-lived intangible assets are subject to annual impairment reviews, or more frequent reviews if events or circumstances indicate that the carrying value may not be recoverable. When evaluating goodwill for potential impairment, we compare the fair value of our reporting units to their respective carrying amounts. We estimate the fair value of our reporting units using a combination of a discounted cash flow method and a market multiple method. If the carrying amount of a reporting unit exceeds its estimated fair value, a goodwill impairment loss is recognized in an amount equal to the excess to the extent of the goodwill balance. Indefinite-lived intangible assets are tested for impairment by comparing the estimated fair value of the asset to its carrying value. The Company estimates the fair value of its indefinite-lived trademarks using the relief from royalty method under the income approach. If the carrying value of the asset exceeds its estimated fair value, an impairment loss is recognized, and the asset is written down to its estimated fair value. Definite-lived intangible assets are tested for impairment whenever events or changes in circumstances indicate that the carrying value of such an asset may not be recoverable. If indicators of impairment are present, the Company first compares the carrying amount of the asset group to the estimated future cash flows associated with the asset group (undiscounted). If the estimated future cash flows used in this analysis are less than the carrying amount of the asset group, an impairment loss calculation is prepared. The impairment loss calculation compares the carrying amount of the asset group to the asset group’s estimated future cash flows (discounted).

Estimated fair values could change if, for example, there are changes in the business climate, industry-wide changes, changes in the competitive environment, adverse legal or regulatory actions or developments, changes in capital structure, cost of debt, interest rates, capital expenditure levels, operating cash flows or market capitalization. Because of the significance of our goodwill and intangible assets, any future impairment of these assets could require material noncash charges to our operating results, which also could have a material adverse effect on our financial condition.

Adverse conditions in the U.S. and global capital markets can significantly and adversely affect the value of our investments in debt and equity securities, mortgage loans, alternative investments and other investments, and our operating results and/or our financial condition.

The global capital markets, including credit markets, continue to experience volatility and uncertainty. As an insurer, we have a substantial investment portfolio that supports our policy liabilities and surplus and is comprised largely of debt securities of issuers located in the U.S. As a result, the income we earn from our investment portfolio is largely driven by the level of interest rates in the U.S., and to a lesser extent the international financial markets. Volatility, uncertainty and/or disruptions in the global capital markets, particularly the U.S. credit markets, and governments’ monetary policy, particularly U.S. monetary policy, can significantly and adversely affect the value of our investment portfolio, our operating results and/or our financial condition by:

• significantly reducing the value and/or liquidity of the debt securities we hold in our investment portfolio and creating realized capital losses that reduce our operating results and/or unrealized capital losses that reduce our shareholders’ equity;
• lowering interest rates on high-quality short-term or medium-term debt securities and thereby materially reducing our net investment income and operating results as the proceeds from securities in our investment portfolio that mature or are otherwise disposed of continue to be reinvested in lower yielding securities;
• reducing the fair values of our investments if interest rates rise;
• causing non-performance of or defaults on their obligations to us by third parties, including customers, issuers of securities in our investment portfolio, mortgage borrowers and/or reinsurance and/or derivatives counterparties;
• making it more difficult to value certain of our investment securities, for example if trading becomes less frequent, which could lead to significant period-to-period changes in our estimates of the fair values of those securities and cause period-to-period volatility in our net income and shareholders’ equity;
• reducing our ability to issue short-term debt securities at attractive interest rates, thereby increasing our interest expense and decreasing our operating results; and
• reducing our ability to issue other securities.

Although we seek, within guidelines we deem appropriate, to match the duration of our assets and liabilities and to manage our credit and counterparty exposures, a failure to do so adequately could adversely affect our net income and our financial condition and, in extreme circumstances, our cash flows.

Risks Related to Our Relationships with Manufacturers, Providers, Suppliers and Vendors

We face risks relating to the market availability, pricing, suppliers and safety profiles of prescription drugs and other products that we purchase and sell.

Our Pharmacy & Consumer Wellness segment and our mail order and specialty pharmacy operations generate revenues in significant part by dispensing prescription drugs. Our PBM business generates revenues primarily by contracting with clients to provide prescription drugs and related health care services to plan members. As a result, we are dependent on our relationships with prescription drug manufacturers and suppliers. We acquire a substantial amount of our mail order and specialty pharmacies’ prescription drug supply from a limited number of suppliers. Certain of our agreements with such suppliers are short-term and cancelable by either party without cause. In addition, these agreements may allow the supplier to distribute through channels other than us. Certain of these agreements also allow pricing and other terms to be adjusted periodically for changing market conditions or required service levels. A termination or modification to any of these relationships could adversely affect our prescription drug supply and have a material adverse effect on our businesses, operating results and financial condition. Moreover, many products distributed by our pharmacies are manufactured with ingredients that are susceptible to supply shortages. In some cases, we depend upon a single source of supply. Any such supply shortages or loss of any such single source of supply could adversely affect our operating results and cash flows.

Much of the branded and generic drug product that we sell in our pharmacies, and much of the other merchandise we sell, is manufactured in whole or in substantial part outside of the U.S. In most cases, the products or merchandise are imported by others and sold to us. As a result, significant changes in tax or trade policies, tariffs or trade relations between the U.S. and other countries, such as the imposition of unilateral tariffs on imported products, could result in significant increases in our costs, restrict our access to suppliers, depress economic activity, and have a material adverse effect on our businesses, operating results and cash flows. In addition, other countries may change their business and trade policies and such changes, as well as any negative sentiments towards the U.S. in response to increased import tariffs and other changes in U.S. trade regulations, could adversely affect our businesses.

Our suppliers are independent entities subject to their own operational and financial risks that are outside our control. If our current suppliers were to stop selling prescription drugs to us or delay delivery, including as a result of supply shortages, supplier production disruptions, supplier quality issues, closing or bankruptcies of our suppliers, or for other reasons, we may be unable to procure alternatives from other suppliers in a timely and efficient manner and on acceptable terms, or at all.

Our operating results may be adversely affected if we are unable to contract with providers on competitive terms and develop and maintain attractive networks with high quality providers.

We are seeking to enhance our health care provider networks by entering into joint ventures and other collaborative risk-sharing arrangements with providers. Providers’ willingness to enter these arrangements with us depends upon, among other things, our ability to provide them with up to date quality of care data to support these value-based contracts. These arrangements are designed to give providers incentives to engage in population health management and optimize delivery of health care to our members. These arrangements also may allow us to expand into new geographies, target new customer groups, increase membership and reduce medical costs and, if we provide technology or other services to the relevant health system or provider organization, may contribute to our revenue and earnings from alternative sources. If such arrangements do not result in the lower medical costs that we project or if we fail to attract providers to such arrangements, or are less successful at implementing such arrangements than our competitors, our medical costs may not be competitive and may be higher than we project, our attractiveness to customers may be reduced, we may lose or be unable to grow medical membership, and our ability to profitably grow our business and/or our operating results may be adversely affected.

While we believe joint ventures, ACOs and other non-traditional health care provider organizational structures present opportunities for us, the implementation of our joint ventures and other non-traditional structure strategies may not achieve the intended results, which could adversely affect our operating results and cash flows. Among other things, joint ventures require us to maintain collaborative relationships with our counterparties, continue to gain access to provider rates that make the joint ventures economically sustainable and devote significant management time to the operation and management of the joint ventures. We may not be able to achieve these objectives in one or more of our joint ventures, which could adversely affect our operating results and cash flows.

If our suppliers or service providers fail to meet their contractual obligations to us or to comply with applicable laws or regulations, we may be exposed to brand and reputational harm, litigation and/or regulatory action. This risk is particularly high in our Medicare, Medicaid, dual eligible and dual eligible special needs plan programs.

We contract with various third parties to supply us with necessary products, perform certain functions and services and provide us with certain information technology systems. Our arrangements with suppliers and these third parties may expose us to public scrutiny, adversely affect our brand and reputation, expose us to litigation or regulatory action, and otherwise make our operations vulnerable if we fail to adequately oversee, monitor and regulate their performance or if they fail to meet their contractual obligations to us or to comply with applicable laws or regulations, including those related to human capital and climate change. For example, certain of our vendors have been responsible for releases of sensitive information of our members and employees, which has caused us to incur additional expenses and given rise to regulatory actions and litigation against us.

These risks are particularly high in our in Medicare Advantage (including dual eligible special needs plans), Medicare Part D, Medicaid, and Managed Medicaid plans, where third parties may perform medical management and other member related services for us. Any failure of our or these third parties’ prevention, detection or control systems related to regulatory compliance, compliance with our internal policies, data security and/or cybersecurity or any incident involving the theft, misappropriation, loss or other unauthorized disclosure of, or access to, members’, customers’ or other constituents’ sensitive information could require us to expend significant resources to remediate any damage, interrupt our operations and adversely affect our brand and reputation and also expose us to whistleblower, class action and other litigation, other proceedings, prohibitions on marketing or active or passive enrollment of members, corrective actions, fines, sanctions and/or penalties, any of which could adversely affect our businesses, operating results, cash flows and/or financial condition.

We may experience increased medical and other benefit costs, litigation risk and customer and member dissatisfaction when providers that do not have contracts with us render services to our Health Care Benefits members.

Some providers that render services to our Health Care Benefits members do not have contracts with us. In those cases, we do not have a pre-established understanding with these nonparticipating providers as to the amount of compensation that is due to them for services rendered to our members. In some states, the amount of compensation due to these nonparticipating providers is defined by law or regulation, but in most instances it is either not defined or it is established by a standard that is not clearly translatable into dollar terms. In such instances providers may believe that they are underpaid for their services and may either litigate or arbitrate their dispute with us or try to recover the difference between what we have paid them and the amount they charged us from our members, which may result in member dissatisfaction. For example, in 2019, certain claimant hospitals were awarded approximately $86 million in an arbitration proceeding relating to Aetna’s out-of-network benefit payment and administration practices. Such disputes may cause us to pay higher medical or other benefit costs than we projected.

Continuing consolidation and integration among providers and other suppliers may increase our medical and other covered benefits costs, make it difficult for us to compete in certain geographies and create new competitors.

Hospitals, other health care providers and health systems continue to consolidate across the health care industry. While this consolidation could increase efficiency and has the potential to improve the delivery of health care services, it also reduces competition and the number of potential contracting parties in certain geographies. These health systems also are increasingly forming and considering forming health plans to directly offer health insurance in competition with us, a process that has been accelerated by the ACA. In addition, ACOs (including Commercial and Medicaid-only ACOs developed as a result of state Medicaid laws), practice management companies, consolidation among and by integrated health systems and other changes in the organizational structures that physicians, hospitals and other providers adopt continues to change the way these providers interact with us and the competitive landscape in which we operate. These changes may increase our medical and other covered benefits costs, may affect the way we price our products and services and estimate our medical and other covered benefits costs and may require us to change our operations, including by withdrawing from certain geographies where we do not have a significant presence across our businesses or are unable to collaborate or contract with providers on acceptable terms. Each of these changes may adversely affect our businesses and operating results.

Cybersecurity Risk Management

Securing the Company’s business information, intellectual property, customer, patient and employee data and technology systems is essential for the continuity of its businesses, meeting applicable regulatory requirements and maintaining the trust of its stakeholders. Cybersecurity is an important and integrated part of the Company’s enterprise risk management function that identifies, monitors and mitigates business, operational and legal risks.

To help protect the Company from a major cybersecurity incident that could have a material impact on operations or the Company’s financial results, the Company has implemented policies, programs and controls, including technology investments that focus on cybersecurity incident prevention, identification and mitigation. The steps the Company takes to reduce its vulnerability to cyberattacks and to mitigate impacts from cybersecurity incidents include, but are not limited to: establishing information security policies and standards, implementing information protection processes and technologies, monitoring its information technology systems for cybersecurity threats, assessing cybersecurity risk profiles of key third-parties, implementing cybersecurity training and collaborating with public and private organizations on cyber threat information and best practices. The Company is currently in material compliance with applicable information privacy and cybersecurity standards.

The Company has implemented a Cybersecurity Incident Response Plan (the “Plan”), which is integrated into its overall crisis management program. The Plan provides a framework for responding to cybersecurity incidents. The Plan identifies applicable requirements for incident disclosure and reporting as well as provides protocols for incident evaluation, including the use of third-party service providers and partners, processes for notification and internal escalation of information to the Company’s senior management, the disclosure committee, the Board and appropriate Board committees. The Plan also addresses requirements for the Company’s external reporting obligations. The Plan is reviewed and updated, as necessary, under the leadership of the Company’s Chief Information Security Officer (“CISO”) and Chief Privacy Officer (“CPO”).

The Company’s information technology systems and processes are assessed by independent third parties, as appropriate to their business requirements, for compliance with the following standards: HIPAA; NIST 800-53; System and Organization Controls (“SOC”) 1; SOC 2 Type 2; HI-TRUST; Payment Card Industry Data Security Standards; and the National Association of Insurance Commissioners. The Company annually purchases a cybersecurity risk insurance policy that would help defray the costs associated with a covered cybersecurity incident if it occurred.

Although the Company did not experience a material cybersecurity incident during the year ended December 31, 2023, the scope and impact of any future incident cannot be predicted. See “Item 1A. Risk Factors” for more information on the Company’s cybersecurity-related risks.

Governance

Management has responsibility to manage risk and bring to the Board’s attention the most material near-term and long-term risks to the Company. The Company’s CISO leads management’s assessment and management of cybersecurity risk. The CISO reports to the Company’s Chief Digital, Data, Analytics & Technology Officer (the “CDDATO”), who reports directly to the Company’s Chief Executive Officer. The CDDATO, CISO and the CPO, regularly review cybersecurity matters with management. The current CDDATO, CISO and CPO each has more than 10 years of experience managing risks or advising on cybersecurity issues.

The Board is actively engaged in overseeing and reviewing the Company’s strategic direction and objectives, taking into account, among other considerations, the Company’s risk profile and related exposures, as part of this oversight the Board has delegated certain of these responsibilities to committees of the Board. The Board has delegated the responsibility for the oversight of the Company’s cybersecurity risks program to the Nominating and Corporate Governance Committee. As part of this oversight, the Nominating and Corporate Governance Committee reviews the Company’s cybersecurity program periodically, and at least annually. The Company’s CDDATO and CISO update the Nominating and Corporate Governance Committee periodically, and at least annually, and the full Board as needed, on the Company’s cybersecurity program, including with respect to particular cybersecurity threats, incidents or new developments in the Company’s risk profile. The CISO is a member of the Company’s disclosure committee, and the CPO advises the disclosure committee on cybersecurity matters on an as-needed basis. During 2023, the Board conducted a review of its overall committee structure, membership and responsibilities in an effort to enhance its oversight. As part of this review, the Board has determined that it will shift the delegation of the oversight of the Company’s cybersecurity risks program to the Audit Committee effective March 2024.

The Company’s principal office is an owned building complex located in Woonsocket, Rhode Island, which totals approximately one million square feet. The Company also leases office space in other locations in the U.S.

Health Care Benefits Segment

The Health Care Benefits segment’s principal office is an owned building complex located in Hartford, Connecticut, which totals approximately 1.7 million square feet. The Health Care Benefits segment also owns or leases office space in other locations in the U.S. and several other countries.

Health Services Segment

The Health Services segment includes owned or leased mail service dispensing pharmacies, call centers, on-site pharmacy stores, retail specialty pharmacy stores, specialty mail service pharmacies and primary care centers.

The Health Services segment leases 204 primary care centers across 25 states, totaling approximately 1.9 million square feet.

The Health Services segment also owns or leases office space used for administration, sales and marketing, technology and development and professional services throughout the U.S. and in Ireland.

Pharmacy & Consumer Wellness Segment

As of December 31, 2023, the Pharmacy & Consumer Wellness segment operated the following properties:

• Approximately 7,500 retail stores, of which approximately 5% were owned. Net selling space for retail stores was approximately 74.6 million square feet as of December 31, 2023.
• Approximately 1,895 retail pharmacies within retail chains, as well as approximately 30 clinics in Target Corporation (“Target”) stores;
• Owned distribution centers and leased distribution facilities throughout the U.S. totaling approximately 10.1 million square feet; and
• Branches for compounding, specialty infusion and enteral nutrition services throughout the U.S.
• Owned and leased LTC pharmacies throughout the U.S. and an owned LTC repackaging facility.

In connection with certain business dispositions completed between 1995 and 1997, the Company continues to guarantee lease obligations for 63 former stores. The Company is indemnified for these guarantee obligations by the respective initial purchasers. These guarantees generally remain in effect for the initial lease term and any extension thereof pursuant to a renewal option provided for in the lease prior to the time of the disposition. For additional information on these guarantees, see “Lease Guarantees” in Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K.

Management believes that the Company’s owned and leased facilities are suitable and adequate to meet the Company’s anticipated needs. At the end of the existing lease terms, management believes the leases can be renewed or replaced by alternative space. For additional information on the right-of-use assets and lease liabilities associated with the Company’s leases, see Note 7 ‘‘Leases’’ included in Item 8 of this 10-K.

The information contained in Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K is incorporated herein by reference.

The following discussion and analysis should be read in conjunction with the audited consolidated financial statements and related notes included in Item 8 of this Annual Report on Form 10-K (this “10-K”), “Risk Factors” included in Item 1A of this 10-K and the “Cautionary Statement Concerning Forward-Looking Statements” in this 10-K.

Overview of Business

CVS Health Corporation, together with its subsidiaries (collectively, “CVS Health,” the “Company,” “we,” “our” or “us”), is a leading health solutions company building a world of health around every consumer it serves and connecting care so that it works for people wherever they are. As of December 31, 2023, the Company had more than 9,000 retail locations, more than 1,000 walk-in medical clinics, 204 primary care medical clinics, a leading pharmacy benefits manager with approximately 108 million plan members and expanding specialty pharmacy solutions, and a dedicated senior pharmacy care business serving more than one million patients per year. The Company also serves an estimated more than 35 million people through traditional, voluntary and consumer-directed health insurance products and related services, including expanding Medicare Advantage offerings and a leading standalone Medicare Part D prescription drug plan (“PDP”). The Company is creating new sources of value through its integrated model allowing it to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs.

During the year ended December 31, 2023, the Company completed the acquisition of two key health care delivery assets to enhance its ability to execute on its care delivery strategy by advancing its primary care, home-based care and provider enablement capabilities. On March 29, 2023, the Company acquired Signify Health, Inc. (“Signify Health”), a leader in health risk assessments, value-based care and provider enablement services. On May 2, 2023, the Company also acquired Oak Street Health, Inc. (“Oak Street Health”), a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. Both Signify Health and Oak Street Health are included within the Health Services segment.

In connection with its new operating model adopted in the first quarter of 2023, the Company realigned the composition of its segments to reflect how its Chief Operating Decision Maker (the “CODM”) reviews information and manages the business. The Company’s CODM is the Chief Executive Officer. As a result of this realignment, the Company formed a new Health Services segment, which in addition to providing a full range of pharmacy benefit management (“PBM”) solutions, also delivers health care services in the Company’s medical clinics, virtually, and in the home, as well as provider enablement solutions. In addition, the Company created a new Pharmacy & Consumer Wellness segment, which includes its retail and long-term care pharmacy operations and related pharmacy services, as well as its retail front store operations. This segment will also provide pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. Prior period segment financial information has been recast to conform with the current period presentation. See Note 19 ‘‘Segment Reporting’’ included in Item 8 of this 10-K for segment financial information.

The Company has four reportable segments: Health Care Benefits, Health Services, Pharmacy & Consumer Wellness and Corporate/Other, which are described below.

Overview of the Health Care Benefits Segment

The Health Care Benefits segment operates as one of the nation’s leading diversified health care benefits providers. The Health Care Benefits segment has the information and resources to help members, in consultation with their health care professionals, make more informed decisions about their health care. The Health Care Benefits segment offers a broad range of traditional, voluntary and consumer-directed health insurance products and related services, including medical, pharmacy, dental and behavioral health plans, medical management capabilities, Medicare Advantage and Medicare Supplement plans, PDPs and Medicaid health care management services. The Health Care Benefits segment’s customers include employer groups, individuals, college students, part-time and hourly workers, health plans, health care providers (“providers”), governmental units, government-sponsored plans, labor groups and expatriates. The Company refers to insurance products (where it assumes all or a majority of the risk for medical and dental care costs) as “Insured” and administrative services contract products (where the plan sponsor assumes all or a majority of the risk for medical and dental care costs) as “ASC.” The Company sold Insured plans directly to individual consumers through the individual public health insurance exchanges (“Public Exchanges”) in 12 states as of December 31, 2023. The Company entered Public Exchanges in five additional states effective January 2024.

Overview of the Health Services Segment

The Health Services segment provides a full range of PBM solutions, delivers health care services in its medical clinics, virtually, and in the home, and offers provider enablement solutions. PBM solutions include plan design offerings and administration, formulary management, retail pharmacy network management services, and specialty and mail order pharmacy services. In addition, the Company provides clinical services, disease management services, medical spend management and pharmacy and/or other administrative services for providers and federal 340B drug pricing program covered entities (“Covered Entities”). The Company operates a group purchasing organization that negotiates pricing for the purchase of pharmaceuticals and rebates with pharmaceutical manufacturers on behalf of its participants and provides various administrative, management and reporting services to pharmaceutical manufacturers. During 2023, the Company completed the acquisition of two key health care delivery assets – Signify Health, a leader in health risk assessments, value-based care and provider enablement services, and Oak Street Health, a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. The Company also announced the launch of CordavisTM, a wholly owned subsidiary that will work directly with pharmaceutical manufacturers to commercialize and/or co-produce high quality biosimilar products. The Health Services segment’s clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Medicaid managed care plans, CMS, plans offered on Insurance Exchanges and other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities.

Overview of the Pharmacy & Consumer Wellness Segment

The Pharmacy & Consumer Wellness segment dispenses prescriptions in its retail pharmacies and through its infusion operations, provides ancillary pharmacy services including pharmacy patient care programs, diagnostic testing and vaccination administration, and sells a wide assortment of health and wellness products and general merchandise. The segment also conducts long-term care pharmacy (“LTC”) operations, which distribute prescription drugs and provide related pharmacy consulting and ancillary services to long-term care facilities and other care settings, and provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. As of December 31, 2023, the Pharmacy & Consumer Wellness segment operated more than 9,000 retail locations, as well as online retail pharmacy websites, LTC pharmacies and on-site pharmacies, retail specialty pharmacy stores, compounding pharmacies and branches for infusion and enteral nutrition services.

Overview of the Corporate/Other Segment

The Company presents the remainder of its financial results in the Corporate/Other segment, which primarily consists of:

• Management and administrative expenses to support the Company’s overall operations, which include certain aspects of executive management and the corporate relations, legal, compliance, human resources and finance departments, information technology, digital, data and analytics, as well as acquisition-related transaction and integration costs; and
• Products for which the Company no longer solicits or accepts new customers such as its large case pensions and long-term care insurance products.

COVID-19

The coronavirus disease 2019 (“COVID-19”) continues to impact the economies of the U.S. and other countries around the world. The impact of COVID-19 on the Company’s businesses, operating results, cash flows and financial condition in the years ended December 31, 2023, 2022 and 2021, as well as information regarding certain expected impacts of COVID-19 on the Company, is discussed throughout this Annual Report on Form 10-K.

Results of Operations

The following information summarizes the Company’s results of operations for 2023 compared to 2022. Financial information for the years ended December 31, 2022 and 2021 has been revised to reflect the impact of the following items, as applicable:

• The realignment of the Company’s segments to correspond with changes made to its operating model as described in Note 1 ‘‘Significant Accounting Policies’’ included in Item 8 of this Form 10-K, including the discontinuance of the former Maintenance Choice® segment reporting practice as described within the “Segment Analysis” section of this Item 7.
• The impact of the adoption of a new accounting standard related to the accounting for long-duration insurance contracts (the “long-duration insurance accounting standard”), which the Company adopted on January 1, 2023 using a modified retrospective transition method as of January 1, 2021, as described in Note 1 “Significant Accounting Policies” included in Item 8 of this Form 10-K.
• The exclusion of the impact of net realized capital gains or losses from adjusted operating income, as described within the “Segment Analysis” section of this Item 7.

For discussion of the Company’s results of operations for 2022 compared to 2021, see “Management’s Discussion and Analysis of Financial Condition and Results of Operations with Retrospective Adjustments” for the year ended December 31, 2022, which was revised to reflect the items noted above and is included in Exhibit 99.1 to the Company’s Current Report on Form 8-K filed with the U.S. Securities and Exchange Commission (the “SEC”) on May 25, 2023.

Summary of Consolidated Financial Results

In millions

77

Commentary - 2023 compared to 2022

Revenues

• Total revenues increased $35.3 billion, or 10.9%, in 2023 compared to 2022. The increase in total revenues was driven by growth across all segments.
• Please see “Segment Analysis” later in this MD&A for additional information about the revenues of the Company’s segments.

Operating expenses

• Operating expenses increased $1.6 billion, or 4.2%, in 2023 compared to 2022. The increase in operating expenses was primarily due to increased operating expenses to support growth in the business, operating expenses associated with Oak Street Health and Signify Health, including the amortization of acquired intangible assets, incremental investments in business operations, acquisition-related transaction and integration costs recorded in 2023 and the absence of a $250 million pre-tax gain on the sale of bswift LLC (“bswift”) and a $225 million pre-tax gain on the sale of PayFlex Holdings, Inc. (“PayFlex”) recorded in 2022. These increases were partially offset by gains from anti-trust legal settlements and the favorable impact of business initiatives in 2023.
• Operating expenses as a percentage of total revenues decreased to 11.1% in 2023 compared to 11.8% in 2022. The decrease in operating expenses as a percentage of total revenues was primarily due to the increases in total revenues described above.
• Please see “Segment Analysis” later in this MD&A for additional information about the operating expenses of the Company’s segments.

Operating income

• Operating income increased $5.8 billion, or 72.8%, in 2023 compared to 2022. The increase in operating income was primarily driven by the absence of $5.8 billion of opioid litigation charges recorded in 2022 and increases in the Pharmacy & Consumer Wellness segment, primarily driven by the absence of a $2.5 billion loss on assets held for sale recorded in 2022 related to the write-down of the Company’s Omnicare® long-term care business (“LTC business”) which was partially offset by continued pharmacy reimbursement pressure and decreased COVID-19 vaccinations and diagnostic testing compared to 2022, as well as an increase in the Health Services segment. These increases in operating income were partially offset by declines in the Health Care Benefits segment, including the absence of the $250 million pre-tax gain on the sale of bswift and the $225 million pre-tax gain on the sale of PayFlex recorded in 2022, as well as the restructuring charges and acquisition-related transaction and integration costs recorded in 2023.
• Please see “Segment Analysis” later in this MD&A for additional information about the operating results of the Company’s segments.

Interest expense

• Interest expense increased $371 million, or 16.2%, in 2023 compared to 2022, due to higher debt in the year ended December 31, 2023 to fund the acquisitions of Signify Health and Oak Street Health. See “Liquidity and Capital Resources” later in this report for additional information.

Income tax provision

• The Company’s effective income tax rate decreased to 25.1% in 2023 compared to 25.9% in the prior year. The decrease was primarily due to the absence of certain nondeductible legal charges and basis differences on the sale of bswift and PayFlex in 2022. These decreases were partially offset by the absence of the impact of certain discrete tax items concluded in 2022.

Outlook

The Company believes you should consider the following key business and regulatory trends and uncertainties:

Key Business Trends and Uncertainties

• Membership enrollment in Medicare Advantage plans exceeded expectations.
• Utilization, particularly in Medicare Advantage programs, persisted at elevated levels into the end of 2023. At this time, the level of continued utilization is difficult to accurately predict.
• The Company expects growth in its new Cordavis, Oak Street Health and Signify Health businesses.
• Competitive pressures in the PBM industry have caused the Company to continue to share with clients a larger portion of rebates, fees and/or discounts received from pharmaceutical manufacturers. In addition, marketplace dynamics and regulatory changes have limited the Company’s ability to offer plan sponsors pricing that includes retail network “differential” or “spread.” The Company expects these trends to continue.
• Competitive pressures in the retail pharmacy industry are increasing, resulting in aggressive generic pricing programs, the growth of discount cards and increased utilization of digital commerce.
• Future costs are influenced by a number of factors including competitive demand for products and services, legislative and regulatory considerations, and labor and other market dynamics, including inflation. We evaluate and adjust our approach in each of the markets we serve, considering all relevant factors.
• The Company expects benefits from enterprise-wide cost savings initiatives and investments in efficiencies, which aim to reduce the Company’s operating cost structure in a way that improves the consumer experience and is sustainable.

Key Regulatory Trends and Uncertainties

• The Company is exposed to funding and regulation of, and changes in government policy with respect to and/or funding or regulation of, the various Medicare programs in which the Company participates, including changes in the amounts payable to us under those programs and/or new reforms or surcharges on existing programs, including changes to applicable risk adjustment mechanisms.
• Legislation and/or regulations seeking to regulate PBM activities in a comprehensive manner have been proposed or enacted in a majority of states and on the federal level. This legislative and regulatory activity could adversely affect the Company’s ability to conduct business on commercially reasonable terms and the Company’s ability to standardize its PBM products and services across state lines.

For additional information regarding these and other trends and uncertainties, see Item 1A, “Risk Factors” and Part I, Item 1 “Business - Government Regulation.”

Segment Analysis

The following discussion of segment operating results is presented based on the Company’s reportable segments in accordance with the accounting guidance for segment reporting and is consistent with the segment disclosure in Note 19 ‘‘Segment Reporting’’ included in Item 8 of this 10-K.

The Company has three operating segments, Health Care Benefits, Health Services and Pharmacy & Consumer Wellness, as well as a Corporate/Other segment. The Company’s segments maintain separate financial information, and the CODM evaluates the segments’ operating results on a regular basis in deciding how to allocate resources among the segments and in assessing segment performance. The CODM evaluates the performance of the Company’s segments based on adjusted operating income. Adjusted operating income is defined as operating income as measured by accounting principles generally accepted in the United States of America (“GAAP”) excluding the impact of amortization of intangible assets and other items, if any, that neither relate to the ordinary course of the Company’s business nor reflect the Company’s underlying business performance. Effective for the first quarter of 2023, adjusted operating income also excludes the impact of net realized capital gains or losses. See the reconciliations of operating income (GAAP measure) to adjusted operating income below for further context regarding the items excluded from operating income in determining adjusted operating income. The Company uses adjusted operating income as its principal measure of segment performance as it enhances the Company’s ability to compare past financial performance with current performance and analyze underlying business performance and trends. Non-GAAP financial measures the Company discloses, such as consolidated adjusted operating income, should not be considered a substitute for, or superior to, financial measures determined or calculated in accordance with GAAP.

Segment financial information for the years ended December 31, 2022 and 2021 has been revised to conform with the current period presentation for the following items:

• The realignment of the Company’s segments to correspond with changes made to its operating model as described in Note 1 ‘‘Significant Accounting Policies’’ included in Item 8 of this 10-K, including the discontinuance of the former Maintenance Choice segment reporting practice as described in Note (2) of the table included on the next page.
• The impact of the adoption of the long-duration insurance accounting standard, which the Company adopted on January 1, 2023 using a modified retrospective transition method as of January 1, 2021, as described in Note 1 “Significant Accounting Policies” included in Item 8 of this 10-K.
• The exclusion of the impact of net realized capital gains or losses from adjusted operating income, as described above.

The impact of these items on segment financial information for the years ended December 31, 2022 and 2021 is reflected in the “Adjustments” lines of the table included on the next page.

The following is a reconciliation of financial measures of the Company’s segments to the consolidated totals:

In millions

(1) Total revenues of the Health Services segment include approximately $13.7 billion, $12.6 billion and $11.6 billion of retail co-payments for 2023, 2022 and 2021, respectively. See Note 1 ‘‘Significant Accounting Policies’’ included in Item 8 of this 10-K for additional information about retail co-payments.

(2) Intersegment revenue eliminations relate to intersegment revenue generating activities that occur between the Health Care Benefits segment, the Health Services segment, and/or the Pharmacy & Consumer Wellness segment. Prior to January 1, 2023, intersegment adjusted operating income eliminations occurred when members of the Health Services segment's clients enrolled in Maintenance Choice® elected to pick up maintenance prescriptions at one of the Company’s retail pharmacies instead of receiving them through the mail. When this occurred, both the Health Services and Pharmacy & Consumer Wellness segments recorded the adjusted operating income on a stand-alone basis. Effective January 1, 2023, the adjusted operating income associated with such transactions is reported only in the Pharmacy & Consumer Wellness segment, therefore no adjusted operating income elimination is required. Segment financial information has been recast to reflect this change.

The following are reconciliations of consolidated operating income (GAAP measure) to consolidated adjusted operating income, as well as reconciliations of segment GAAP operating income (loss) to segment adjusted operating income (loss):

In millions

In millions

In millions

(1) The Company’s acquisition activities have resulted in the recognition of intangible assets as required under the acquisition method of accounting which consist primarily of trademarks, customer contracts/relationships, covenants not to compete, technology, provider networks and value of business acquired. Definite-lived intangible assets are amortized over their estimated useful lives and are tested for impairment when events indicate that the carrying value may not be recoverable. The amortization of intangible assets is reflected in the Company’s GAAP consolidated statements of operations in operating expenses within each segment. Although intangible assets contribute to the Company’s revenue generation, the amortization of intangible assets does not directly relate to the underwriting of the Company’s insurance products, the services performed for the Company’s customers or the sale of the Company’s products or services. Additionally, intangible asset amortization expense typically fluctuates based on the size and timing of the Company’s acquisition activity. Accordingly, the Company believes excluding the amortization of intangible assets enhances the Company’s and investors’ ability to compare the Company’s past financial performance with its current performance and to analyze underlying business performance and trends. Intangible asset amortization excluded from the related non-GAAP financial measure represents the entire amount recorded within the Company’s GAAP financial statements, and the revenue generated by the associated intangible assets has not been excluded from the related non-GAAP financial measure. Intangible asset amortization is excluded from the related non-GAAP financial measure because the amortization, unlike the related revenue, is not affected by operations of any particular period unless an intangible asset becomes impaired or the estimated useful life of an intangible asset is revised.

(2) The Company’s net realized capital gains and losses arise from various types of transactions, primarily in the course of managing a portfolio of assets that

support the payment of insurance liabilities. Net realized capital gains and losses are reflected in the consolidated statements of operations in net investment income within each segment. These capital gains and losses are the result of investment decisions, market conditions and other economic developments that are unrelated to the performance of the Company’s business, and the amount and timing of these capital gains and losses do not directly relate to the underwriting of the Company’s insurance products, the services performed for the Company’s customers or the sale of the Company’s products or services. Accordingly, the Company believes excluding net realized capital gains and losses enhances the Company’s and investors’ ability to compare the Company’s past financial performance with its current performance and to analyze underlying business performance and trends.

(3) In 2023, the acquisition-related transaction and integration costs relate to the acquisitions of Signify Health and Oak Street Health. In 2021, the acquisition-related integration costs relate to the acquisition (“the Aetna Acquisition”) of Aetna Inc. (“Aetna”). The acquisition-related transaction and integration costs are reflected in the Company’s GAAP consolidated statements of operations in operating expenses within the Corporate/Other segment.

(4) In 2023, the restructuring charges are primarily comprised of severance and employee-related costs, asset impairment charges and a stock-based compensation charge. During the second quarter of 2023, the Company developed an enterprise-wide restructuring plan intended to streamline and simplify the organization, improve efficiency and reduce costs. In connection with the development of this plan and the recently completed acquisitions of Signify Health and Oak Street Health, the Company also conducted a strategic review of its various transformation initiatives and determined that it would terminate certain initiatives. The restructuring charges are reflected within the Corporate/Other segment.

(5) In 2023 and 2022, the office real estate optimization charges primarily relate to the abandonment of leased real estate and the related right-of-use assets and property and equipment in connection with the planned reduction of corporate office real estate space in response to the Company’s new flexible work arrangement. The office real estate optimization charges are reflected in the Company’s GAAP consolidated statements of operations in operating expenses within the Health Care Benefits, Corporate/Other and Health Services segments.

(6) In 2023 and 2022, the loss on assets held for sale relates to the LTC reporting unit within the Pharmacy & Consumer Wellness segment. During 2022, the Company determined that its LTC business was no longer a strategic asset and committed to a plan to sell it, at which time the LTC business met the criteria for held-for-sale accounting and its net assets were accounted for as assets held for sale. The carrying value of the LTC business was determined to be greater than its estimated fair value less costs to sell and, accordingly, the Company recorded a loss on assets held for sale during 2022. During the first quarter of 2023, a loss on assets held for sale was recorded to write down the carrying value of the LTC business to the Company’s best estimate of the ultimate selling price which reflected its estimated fair value less costs to sell. As of September 30, 2023, the Company determined the LTC business no longer met the criteria for held-for-sale accounting and, accordingly, the net assets associated with the LTC business were reclassified to held and used at their respective fair values. During 2022, the loss on assets held for sale also relates to the Company’s international health care business domiciled in Thailand (“Thailand business”), which was included in the Commercial Business reporting unit in the Health Care Benefits segment. The sale of the Thailand business closed in the second quarter of 2022, and the ultimate loss on the sale was not material.

(7) In 2022, the opioid litigation charges relate to agreements to resolve substantially all opioid claims against the Company by certain states and governmental entities. The opioid litigation charges are reflected within the Corporate/Other segment.

(8) In 2022, the gain on divestiture of subsidiaries represents the pre-tax gain on the sale of bswift, which the Company sold in November 2022, and the pre-tax gain on the sale of PayFlex, which the Company sold in June 2022. The gains on divestitures are reflected as a reduction of operating expenses in the Company’s GAAP consolidated statement of operations within the Health Care Benefits segment.

(9) In 2021, the store impairment charge relates to the write down of operating lease right-of-use assets and property and equipment in connection with the planned closure of approximately 900 retail stores between 2022 and 2024. The store impairment charge is reflected within the Pharmacy & Consumer Wellness segment.

(10) In 2021, the goodwill impairment charge relates to an impairment of the remaining goodwill of the LTC reporting unit within the Pharmacy & Consumer Wellness segment.

(11) In 2021, the Company received $61 million related to a purchase price working capital adjustment for an acquisition completed during the first quarter of 2020. The resolution of this matter occurred subsequent to the acquisition accounting measurement period and is reflected in the Company’s GAAP consolidated statement of operations as a reduction of operating expenses within the Health Care Benefits segment.

Health Care Benefits Segment

The following table summarizes the Health Care Benefits segment’s performance for the respective periods:

(1) See “Segment Analysis” above in this MD&A for a reconciliation of operating income (GAAP measure) to adjusted operating income for the Health Care Benefits segment, which represents the Company’s principal measure of segment performance.

Commentary - 2023 compared to 2022

Revenues

• Total revenues increased $14.3 billion, or 15.6%, in 2023 compared to 2022 driven by growth across all product lines.

Medical Benefit Ratio

• Medical benefit ratio is calculated as health care costs divided by premium revenues and represents the percentage of premium revenues spent on medical benefits for the Company’s Insured members. Management uses MBR to assess the underlying business performance and underwriting of its insurance products, understand variances between actual results and expected results and identify trends in period-over-period results. MBR provides management and investors with information useful in assessing the operating results of the Company’s Insured Health Care Benefits products.
• The MBR increased from 83.8% to 86.2% in 2023 compared to the prior year primarily driven by increased utilization in Medicare Advantage, including outpatient and supplemental benefits, when compared with pandemic influenced utilization levels in the prior year, as well as Commercial and Medicaid trends returning to normalized levels, consistent with pricing expectations.

Loss on assets held for sale

• During 2022, the Company recorded a $41 million loss on assets held for sale on its Thailand business, which is included in the Commercial Business reporting unit within the Health Care Benefits segment. See Note 2 ‘‘Acquisitions, Divestitures and Asset Sales’’ included in Item 8 of this 10-K for additional information.

Operating expenses

• Operating expenses in the Health Care Benefits segment include selling, general and administrative expenses and depreciation and amortization expenses.
• Operating expenses increased $1.6 billion, or 11.2%, in 2023 compared to 2022. The increase in operating expenses was primarily driven by increased operating expenses to support the growth across all product lines described above, incremental investments in the business, including investments in service capabilities and member experience, as well as the absence of a $250 million pre-tax gain on the sale of bswift and a $225 million pre-tax gain on the sale of PayFlex recorded in the prior year.
• Operating expenses as a percentage of total revenues decreased to 15.3% in 2023 compared to 15.9% in 2022. The decrease in operating expenses as a percentage of total revenues was primarily driven by the increases in total revenues described above.

Adjusted operating income

• Adjusted operating income decreased $761 million, or 12.0%, in 2023 compared to 2022. The decrease in adjusted operating income was primarily driven by increased utilization in Medicare Advantage when compared with pandemic influenced utilization levels in the prior year, as well as incremental investments in the business, including investments in service capabilities and member experience. These decreases were partially offset by higher net investment income in 2023 compared to 2022.

The following table summarizes the Health Care Benefits segment’s medical membership as of December 31, 2023 and 2022:

In thousands

Medical Membership

• Medical membership represents the number of members covered by the Company’s Insured and ASC medical products and related services at a specified point in time. Management uses this metric to understand variances between actual medical membership and expected amounts as well as trends in period-over-period results. This metric provides management and investors with information useful in understanding the impact of medical membership on segment total revenues and operating results.
• Medical membership as of December 31, 2023 of 25.7 million increased 1.3 million members compared with December 31, 2022, reflecting increases in the Commercial and Medicare product lines, including an increase of 1.3 million members related to the individual exchange business within the Commercial product line. These increases were partially offset by a decline in the Medicaid product line, primarily attributable to the resumption of Medicaid redeterminations following the expiration of the PHE.

Medicare Update

On March 31, 2023, CMS issued its final notice detailing final 2024 Medicare Advantage payment rates. Final 2024 Medicare Advantage rates resulted in an expected average decrease in revenue for the Medicare Advantage industry of 1.12%, excluding the CMS estimate of Medicare Advantage risk score trend. On January 31, 2024, CMS issued an advance notice detailing proposed 2025 Medicare Advantage payment rates. The 2025 Medicare Advantage rates, if finalized as proposed, will result in an expected average decrease in revenue for the Medicare Advantage industry of 0.16%, excluding the CMS estimate of Medicare Advantage risk score trend. CMS intends to publish the final 2025 rate announcement no later than April 1, 2024.

The Patient Protection and Affordable Care Act and the Health Care and Education Reconciliation Act of 2010 ties a portion of each Medicare Advantage plan’s reimbursement to the plan’s “star ratings.” Plans must have a star rating of four or higher (out of five) to qualify for bonus payments. CMS released the Company’s 2024 star ratings in October 2023. The Company’s 2024 star ratings will be used to determine which of the Company’s Medicare Advantage plans have ratings of four stars or higher and qualify for bonus payments in 2025.

On October 13, 2023, CMS released its 2024 star ratings for Medicare Advantage and PDPs. Based on the 2024 star ratings, which will impact total revenues in 2025, the percentage of Aetna Medicare Advantage members in 4+ star plans is expected to return to 87% based on the Company’s membership as of December 2023, as compared to the unmitigated 21% in the prior year. The main driver of this increase was a half star improvement in the Aetna National preferred provider organization (“PPO”) plan, which increased from 3.5 stars to 4.0 stars. As previously discussed, the decline in membership in 4+ star plans for payment year 2024 resulted in a mitigated 2024 headwind of approximately $800 million to $1.0 billion, which was primarily driven by the decrease of the Aetna National PPO plan from 4.5 stars to 3.5 stars. Based on the increase in membership in 4+ star plans for payment year 2025, the Company now expects to be eligible for bonus payments in 2025 that will recover the majority of the 2024 revenue decrease described above. The Company expects to prudently reinvest a portion of this net improvement into its business.

Health Services Segment

The following table summarizes the Health Services segment’s performance for the respective periods:

In millions, except percentages

(1) See “Segment Analysis” above in this MD&A for a reconciliation of operating income (GAAP measure) to adjusted operating income for the Health Services segment, which represents the Company’s principal measure of segment performance.

(2) Pharmacy network revenues relate to claims filled at retail and specialty retail pharmacies, including the Company’s retail pharmacies and LTC pharmacies. Effective January 1, 2023, pharmacy network revenues also include activity associated with Maintenance Choice, which permits eligible client plan members to fill their maintenance prescriptions through mail order delivery or at a CVS pharmacy retail store for the same price as mail order. Maintenance Choice activity was previously reflected in mail & specialty revenues. Segment financial information has been revised to reflect these changes.

(3) Mail & specialty revenues relate to specialty mail claims inclusive of Specialty Connect® claims picked up at a retail pharmacy, as well as mail order and specialty claims fulfilled by the Pharmacy & Consumer Wellness segment. Effective January 1, 2023, mail & specialty revenues exclude Maintenance Choice activity, which is now reported within pharmacy network revenues. Segment financial information has been revised to reflect these changes.

(4) Includes an adjustment to convert 90-day prescriptions to the equivalent of three 30-day prescriptions. This adjustment reflects the fact that these prescriptions include approximately three times the amount of product days supplied compared to a normal prescription.

Commentary - 2023 compared to 2022

Revenues

• Total revenues increased $17.3 billion, or 10.2%, in 2023 compared to 2022. The increase was primarily driven by pharmacy drug mix, growth in specialty pharmacy, brand inflation and the acquisitions of Oak Street Health and Signify Health. These increases were partially offset by continued pharmacy client price improvements.

Operating expenses

• Operating expenses in the Health Services segment include selling, general and administrative expenses; and depreciation and amortization expense.
• Operating expenses increased $744 million, or 33.4%, in 2023 compared to 2022. The increase was primarily driven by operating expenses associated with Oak Street Health and Signify Health, including the amortization of acquired intangible assets.
• Operating expenses as a percentage of total revenues increased to 1.6% in 2023 compared to 1.3% in 2022. The increase in operating expenses as a percentage of total revenues was primarily due to the increases in operating expenses associated with Oak Street Health and Signify Health.

Adjusted operating income

• Adjusted operating income increased $531 million, or 7.8%, in 2023 compared to 2022. The increase in adjusted operating income was primarily driven by improved purchasing economics, including increased contributions from the products and services of the Company’s group purchasing organization, as well as growth in specialty pharmacy, including increased contributions from specialty generics. These increases were partially offset by continued pharmacy client price improvements.
• As you review the Health Services segment’s performance in this area, you should consider the following important information about the business:
• The Company’s efforts to (i) retain existing clients, (ii) obtain new business and (iii) maintain or improve the rebates, fees and/or discounts the Company receives from manufacturers, wholesalers and retail pharmacies continue to have an impact on adjusted operating income. In particular, competitive pressures in the PBM industry have caused the Company and other PBMs to continue to share with clients a larger portion of rebates, fees and/or discounts received from pharmaceutical manufacturers. In addition, marketplace dynamics and regulatory changes have limited the Company’s ability to offer plan sponsors pricing that includes retail network “differential” or “spread,” and the Company expects these trends to continue. The “differential” or “spread” is any difference between the drug price charged to plan sponsors, including Medicare Part D plan sponsors, by a PBM and the price paid for the drug by the PBM to the dispensing provider.

Pharmacy claims processed

• Pharmacy claims processed represents the number of prescription claims processed through the Company’s pharmacy benefits manager and dispensed by either its retail network pharmacies or the Company’s mail and specialty pharmacies. Management uses this metric to understand variances between actual claims processed and expected amounts as well as trends in period-over-period results. This metric provides management and investors with information useful in understanding the impact of pharmacy claim volume on segment total revenues and operating results.
• The Company’s pharmacy claims processed increased slightly on a 30-day equivalent basis in 2023 compared to 2022 primarily driven by net new business and increased utilization. These increases were largely offset by the impact of a Medicaid customer contract change that occurred during the second quarter of 2023 and a decrease in COVID-19 vaccinations.

Generic dispensing rate

• Generic dispensing rate is calculated by dividing the Health Services segment’s generic claims processed by its total claims processed. Management uses this metric to evaluate the effectiveness of the business at encouraging the use of generic drugs when they are available and clinically appropriate, which aids in decreasing costs for client members and retail customers. This metric provides management and investors with information useful in understanding trends in segment total revenues and operating results.
• The Health Services segment’s generic dispensing rate increased to 87.6% in 2023 compared to 87.4% in the prior year. The increase in the segment’s generic dispensing rate was primarily driven by a decrease in COVID-19 vaccinations in 2023 compared to 2022, largely offset by an increase in glucagon-like peptide 1 (“GLP-1”) pharmacy claims in 2023 compared to 2022. Excluding the impact of COVID-19 vaccinations, the segment’s generic dispensing rate was 87.9% and 88.3% in 2023 and 2022, respectively.

Pharmacy & Consumer Wellness Segment

The following table summarizes the Pharmacy & Consumer Wellness segment’s performance for the respective periods:

In millions, except percentages

(1) See “Segment Analysis” above in this MD&A for a reconciliation of operating income (GAAP measure) to adjusted operating income for the Pharmacy & Consumer Wellness segment, which represents the Company’s principal measure of segment performance.

(2) Includes an adjustment to convert 90‑day prescriptions to the equivalent of three 30‑day prescriptions. This adjustment reflects the fact that these prescriptions include approximately three times the amount of product days supplied compared to a normal prescription.

(3) Same store sales and prescription volume represent the change in revenues and prescriptions filled in the Company’s retail pharmacy stores that have been operating for greater than one year, expressed as a percentage that indicates the increase or decrease relative to the comparable prior period. Same store metrics exclude revenues and prescriptions from LTC and infusion services operations. Effective January 1, 2023, same store sales also include digital sales initiated online or through mobile applications and fulfilled through the Company’s distribution centers. Segment financial information has been revised to reflect these changes. Management uses these metrics to evaluate the performance of existing stores on a comparable basis and to inform future decisions regarding existing stores and new locations. Same-store metrics provide management and investors with information useful in understanding the portion of current revenues and prescriptions resulting from organic growth in existing locations versus the portion resulting from opening new stores.

Commentary - 2023 compared to 2022

Revenues

• Total revenues increased $8.2 billion, or 7.5%, in 2023 compared to 2022. The increase was primarily driven by pharmacy drug mix, increased prescription volume, brand inflation and increased contributions from vaccinations. These increases

were partially offset by the impact of recent generic introductions, continued pharmacy reimbursement pressure, a decrease in store count and decreased contributions from COVID-19 OTC test kits and diagnostic testing.

• Pharmacy same store sales increased 13.6% in 2023 compared to 2022. The increase was primarily driven by pharmacy drug mix, the 3.9% increase in pharmacy same store prescription volume on a 30-day equivalent basis and brand inflation. These increases were partially offset by the impact of recent generic introductions and continued pharmacy reimbursement pressure.
• Front store same store sales increased slightly in 2023 compared to 2022 primarily driven by increased beauty and personal care product sales, largely offset by decreased sales of COVID-19 OTC test kits and general merchandise.
• Other revenues decreased 7.6% in 2023 compared to 2022. The decrease was primarily due to decreased COVID-19 diagnostic testing in 2023 compared to the prior year.

Loss on assets held for sale

• During 2023 and 2022, the Company recorded losses on assets held for sale of $349 million and $2.5 billion, respectively, related to the write-down of its LTC business. See Note 2 ‘‘Acquisitions, Divestitures and Asset Sales’’ included in Item 8 of this 10-K for additional information.

Operating expenses

• Operating expenses in the Pharmacy & Consumer Wellness segment include payroll, employee benefits and occupancy costs associated with the segment’s stores and pharmacy fulfillment operations; selling expenses; advertising expenses; depreciation and amortization expense and certain administrative expenses.
• Operating expenses decreased $863 million, or 4.2%, in 2023 compared to 2022. The decrease was primarily due to the decrease in store count, lower expenses associated with COVID-19 vaccination administration compared to the prior year, gains from anti-trust legal settlements recorded in 2023 and a decrease in intangible asset amortization expense.
• Operating expenses as a percentage of total revenues decreased to 16.8% in 2023 compared to 18.9% in 2022. The decrease in operating expenses as a percentage of total revenues was primarily driven by the increases in total revenues and decreases in operating expenses described above.

Adjusted operating income

• Adjusted operating income decreased $568 million, or 8.7%, in 2023 compared to 2022. The decrease in adjusted operating income was primarily driven by continued pharmacy reimbursement pressure and decreased COVID-19 vaccinations and diagnostic testing. These decreases were partially offset by increased prescription volume, improved generic drug purchasing and lower operating expenses in 2023.
• As you review the Pharmacy & Consumer Wellness segment’s performance in this area, you should consider the following important information about the business:
• The segment’s adjusted operating income has been adversely affected by the efforts of managed care organizations, PBMs and governmental and other third-party payors to reduce their prescription drug costs, including the use of restrictive networks, as well as changes in the mix of business within the pharmacy portion of the Pharmacy & Consumer Wellness segment. If the pharmacy reimbursement pressure accelerates, the segment may not be able to grow revenues, and its adjusted operating income could be adversely affected.
• The increased use of generic drugs has positively impacted the segment’s adjusted operating income but has resulted in third-party payors augmenting their efforts to reduce reimbursement payments to retail pharmacies for prescriptions. This trend, which the Company expects to continue, reduces the benefit the segment realizes from brand-to-generic drug conversions.

Prescriptions filled

• Prescriptions filled represents the number of prescriptions dispensed through the Pharmacy & Consumer Wellness segment’s retail and long-term care pharmacies and infusion services operations. Management uses this metric to understand variances between actual prescriptions dispensed and expected amounts as well as trends in period-over-period results. This metric provides management and investors with information useful in understanding the impact of prescription volume on segment total revenues and operating results.
• Prescriptions filled increased 1.5% on a 30-day equivalent basis in 2023 compared to 2022 primarily driven by increased utilization, partially offset by a decrease in COVID-19 vaccinations and the decrease in store count. Excluding the impact of COVID-19 vaccinations, prescriptions filled increased 2.5% on a 30-day equivalent basis in 2023 compared to 2022.

Generic dispensing rate

• Generic dispensing rate is calculated by dividing the Pharmacy & Consumer Wellness segment’s generic drug prescriptions filled by its total prescriptions filled. Management uses this metric to evaluate the effectiveness of the business at encouraging the use of generic drugs when they are available and clinically appropriate, which aids in decreasing costs for client members and retail customers. This metric provides management and investors with information useful in understanding trends in segment total revenues and operating results.
• The Pharmacy & Consumer Wellness segment’s generic dispensing rate increased to 88.4% in 2023 compared to 87.4% in the prior year. The increase in the segment’s generic dispensing rate was primarily driven by a decrease in COVID-19 vaccinations in 2023 compared to 2022, largely offset by an increase in GLP-1 pharmacy claims in 2023 compared to 2022. Excluding the impact of COVID-19 vaccinations, the segment’s total generic dispensing rate was 89.0% in both 2023 and 2022.

Corporate/Other Segment

The following table summarizes the Corporate/Other segment’s performance for the respective periods:

In millions, except percentages

(1) See “Segment Analysis” above in this MD&A for a reconciliation of Corporate/Other segment operating loss (GAAP measure) to adjusted operating loss, which represents the Company’s principal measure of segment performance.

Commentary - 2023 compared to 2022

Revenues

• Revenues primarily relate to products for which the Company no longer solicits or accepts new customers, such as large case pensions and long-term care insurance products.
• Total revenues decreased $79 million, or 14.9%, in 2023 compared to 2022. The decrease was primarily driven by a decrease in services revenues as well as a decline in net investment income, which decreased due to increased realized capital losses in 2023 compared to 2022, partially offset by favorable average investment yields in 2023 compared to 2022.

Restructuring charges

• During 2023, the Company recorded $507 million in pre-tax restructuring charges, comprised of $344 million of severance and employee-related costs associated with corporate workforce optimization, $152 million of asset impairment charges and an $11 million stock-based compensation charge associated with the impacted employees. See Note 3 ‘‘Restructuring Program’’ included in Item 8 of this 10-K for additional information.

Opioid litigation charges

• During 2022, the Company recorded $5.8 billion of opioid litigation charges. See Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K for additional information.

Adjusted operating loss

• Adjusted operating loss decreased $295 million, or 18.3%, in 2023 compared to 2022 primarily driven by decreased operating expenses associated with the termination of certain transformation initiatives.

Liquidity and Capital Resources

Cash Flows

The Company maintains a level of liquidity sufficient to allow it to meet its cash needs in the short-term. Over the long term, the Company manages its cash and capital structure to maximize shareholder return, maintain its financial condition and maintain flexibility for future strategic initiatives. The Company continuously assesses its regulatory capital requirements, working capital needs, debt and leverage levels, debt maturity schedule, capital expenditure requirements, dividend payouts, potential share repurchases and future investments or acquisitions. The Company believes its operating cash flows, commercial paper program, credit facilities, as well as any potential future borrowings, will be sufficient to fund these future payments and long-term initiatives. As of December 31, 2023, the Company had approximately $8.2 billion in cash and cash equivalents, approximately $735 million of which was held by the parent company or nonrestricted subsidiaries.

The net change in cash, cash equivalents and restricted cash for the years ended December 31, 2023, 2022 and 2021 was as follows:

In millions

Commentary - 2023 compared to 2022

• Net cash provided by operating activities decreased by $2.8 billion in 2023 compared to 2022 primarily due to the timing of payments and receipts, partially offset by lower inventory purchases.
• Net cash used in investing activities increased by $15.8 billion in 2023 compared to 2022 primarily due to the acquisitions of Oak Street Health in May 2023 and Signify Health in March 2023. In addition, cash used in investing activities reflected the following activity:
• Gross capital expenditures remained relatively consistent at approximately $3.0 billion and $2.7 billion in 2023 and 2022, respectively. During 2023, approximately 74% of the Company’s total capital expenditures were for technology, digital and other strategic initiatives and 26% were for store, fulfillment and support facilities expansion and improvements.
• Net cash provided by financing activities was $2.7 billion in 2023 compared to net cash used in financing activities of $10.5 billion in 2022. The change in cash provided by (used in) financing activities primarily related to proceeds from the issuance of approximately $10.9 billion of long-term senior notes in 2023 and reflects lower repayments of long-term debt and lower share repurchases in 2023 compared to the prior year.

Included in net cash used in investing activities for the years ended December 31, 2023, 2022 and 2021 was the following store development activity: (1)

(1) Includes retail drugstores and pharmacies within retail chains, primarily in Target Corporation (“Target”) stores.

(2) Relocated stores are not included in new and acquired stores or closed stores totals.

Short-term Borrowings

Commercial Paper and Back-up Credit Facilities

The Company had $200 million of commercial paper outstanding at a weighted average interest rate of 4.31% as of December 31, 2023. The Company did not have any commercial paper outstanding as of December 31, 2022. In connection with its commercial paper program, the Company maintains a $2.5 billion, five-year unsecured back-up revolving credit facility, which expires on May 16, 2025, a $2.5 billion, five-year unsecured back-up revolving credit facility, which expires on May 11, 2026, and a $2.5 billion, five-year unsecured back-up revolving credit facility, which expires on May 16, 2027. The credit facilities allow for borrowings at various rates that are dependent, in part, on the Company’s public debt ratings and require the Company to pay a weighted average quarterly facility fee of approximately 0.03%, regardless of usage. As of December 31, 2023 and 2022, there were no borrowings outstanding under any of the Company’s back-up credit facilities.

Term Loan Agreement

On May 1, 2023, the Company entered into a 364-day $5.0 billion term loan agreement. The term loan agreement allows for borrowings at various rates that are dependent, in part, on the Company’s debt ratings. On May 2, 2023, the Company borrowed $5.0 billion at an interest rate of approximately 6.2% under the term loan agreement to fund a portion of the Oak Street Health acquisition purchase price. On June 2, 2023, the Company repaid the outstanding balance under the term loan agreement.

Federal Home Loan Bank of Boston (“FHLBB”)

A subsidiary of the Company is a member of the FHLBB. As a member, the subsidiary has the ability to obtain cash advances, subject to certain minimum collateral requirements. The maximum borrowing capacity available from the FHLBB as of December 31, 2023 was approximately $1.0 billion. At both December 31, 2023 and 2022, there were no outstanding advances from the FHLBB.

Long-term Borrowings

2023 Notes

On June 2, 2023, the Company issued $1.0 billion aggregate principal amount of 5.0% senior notes due January 2029, $750 million aggregate principal amount of 5.25% senior notes due January 2031, $1.25 billion aggregate principal amount of 5.3% senior notes due June 2033, $1.25 billion aggregate principal amount of 5.875% senior notes due June 2053 and $750 million aggregate principal amount of 6.0% senior notes due June 2063 for total proceeds of approximately $4.9 billion, net of discounts and underwriting fees. The net proceeds of these offerings were used, along with cash on hand, to repay the outstanding balance under the term loan agreement described above.

On February 21, 2023, the Company issued $1.5 billion aggregate principal amount of 5.0% senior notes due February 2026, $1.5 billion aggregate principal amount of 5.125% senior notes due February 2030, $1.75 billion aggregate principal amount of 5.25% senior notes due February 2033 and $1.25 billion aggregate principal amount of 5.625% senior notes due February 2053 for total proceeds of approximately $6.0 billion, net of discounts and underwriting fees. The net proceeds of these offerings were used to fund general corporate purposes, including a portion of the Signify Health acquisition purchase price.

Oak Street Health Convertible Notes

Prior to the Oak Street Health acquisition, Oak Street Health held 0% convertible senior notes with an aggregate principal amount of $920 million (the “Convertible Notes”), which were assumed by the Company in connection with the Oak Street Health acquisition. The Oak Street Health acquisition constituted a fundamental change in the Convertible Notes giving the holders the right to require the Company to repurchase the Convertible Notes. The repurchase price was an amount in cash equal to 100% of the principal amount of the Convertible Notes. On May 31, 2023, the Company issued a notice of repurchase to the holders of the Convertible Notes. In connection with this notice, $917 million of the Convertible Notes were submitted for repurchase and settled on July 21, 2023. Substantially all of the remaining $3 million of the Convertible Notes were submitted for repurchase and settled on October 20, 2023.

Exercise of Par Call Redemptions

In May 2022, the Company exercised the par call redemption on its outstanding 3.5% senior notes due July 2022 to redeem for cash on hand the entire $1.5 billion aggregate principal amount.

In August 2022, the Company exercised the par call redemption on its outstanding 2.75% senior notes due November 2022 (issued by Aetna) to redeem for cash on hand the entire $1.0 billion aggregate principal amount.

In September 2022, the Company exercised the par call redemptions on its outstanding 2.75% senior notes due December 2022 and 4.75% senior notes due December 2022 (including notes issued by Omnicare, Inc.) to redeem for cash on hand the entire aggregate principal amount of $1.25 billion and $399 million, respectively.

Early Extinguishments of Debt

In December 2021, the Company redeemed for cash the remaining $2.3 billion of its outstanding 3.7% senior notes due 2023. In connection with the early redemption of such senior notes, the Company paid a make-whole premium of $80 million in excess of the aggregate principal amount of the senior notes that were redeemed, wrote-off $8 million of unamortized deferred financing costs and incurred $1 million in fees, for a total loss on early extinguishment of debt of $89 million.

In August 2021, the Company purchased approximately $2.0 billion of its outstanding 4.3% senior notes due 2028 through a cash tender offer. In connection with the purchase of such senior notes, the Company paid a premium of $332 million in excess of the aggregate principal amount of the senior notes that were purchased, wrote-off $26 million of unamortized deferred financing costs and incurred $5 million in fees, for a total loss on early extinguishment of debt of $363 million.

See Note 10 ‘‘Borrowings and Credit Agreements’’ included in Item 8 of this 10-K for additional information about debt issuances and debt repayments.

Derivative Financial Instruments

The Company uses derivative financial instruments in order to manage interest rate and foreign exchange risk and credit exposure. The Company’s use of these derivatives is generally limited to hedging risk and has principally consisted of using interest rate swaps, treasury rate locks, forward contracts, futures contracts, warrants, put options and credit default swaps.

Debt Covenants

The Company’s back-up revolving credit facilities and unsecured senior notes (see Note 10 ‘‘Borrowings and Credit Agreements’’ included in Item 8 of this 10-K) contain customary restrictive financial and operating covenants. These covenants do not include an acceleration of the Company’s debt maturities in the event of a downgrade in the Company’s credit ratings. The Company does not believe the restrictions contained in these covenants materially affect its financial or operating flexibility. As of December 31, 2023, the Company was in compliance with all of its debt covenants.

Debt Ratings

As of December 31, 2023, the Company’s long-term debt was rated “Baa2” by Moody’s Investors Service, Inc. (“Moody’s”) and “BBB” by Standard & Poor’s Financial Services LLC (“S&P”), and its commercial paper program was rated “P-2” by Moody’s and “A-2” by S&P. The outlook on the Company’s long-term debt is “Stable” by both Moody’s and S&P. In assessing the Company’s credit strength, the Company believes that both Moody’s and S&P considered, among other things, the Company’s capital structure and financial policies as well as its consolidated balance sheet, its historical acquisition activity and other financial information. Although the Company currently believes its long-term debt ratings will remain investment grade, it cannot guarantee the future actions of Moody’s and/or S&P. The Company’s debt ratings have a direct impact on its future borrowing costs, access to capital markets and new store operating lease costs.

Share Repurchase Programs

The following share repurchase programs have been authorized by CVS Health Corporation’s Board of Directors (the “Board”):

The following share repurchase programs have been authorized by the Board:

In billions Authorization Date

Each of the share Repurchase Programs was effective immediately and permit the Company to effect repurchases from time to time through a combination of open market repurchases, privately negotiated transactions, accelerated share repurchase (“ASR”) transactions, and/or other derivative transactions. Both the 2022 and 2021 Repurchase Programs can be modified or terminated by the Board at any time.

During the years ended December 31, 2023 and 2022, the Company repurchased an aggregate of 22.8 million shares of common stock for approximately $2.0 billion and an aggregate of 34.1 million shares of common stock for approximately $3.5 billion, respectively, both pursuant to the 2021 Repurchase Program. This activity includes the share repurchases under the ASR transactions described below. During the year ended December 31, 2021, the Company did not repurchase any shares of common stock.

Pursuant to the authorization under the 2021 Repurchase Program, the Company entered into a $3.0 billion fixed dollar ASR with Morgan Stanley & Co. LLC (“Morgan Stanley”). Upon payment of the $3.0 billion purchase price on January 4, 2024, the Company received a number of shares of CVS Health Corporation’s common stock equal to 85% of the $3.0 billion notional amount of the ASR or approximately 31.4 million shares at a price of $81.19 per share, which were placed into treasury stock in January 2024. At the conclusion of the ASR, the Company may receive additional shares representing the remaining 15% of the $3.0 billion notional amount. The ultimate number of shares the Company may receive will depend on the daily volume-weighted average price of the Company’s stock over an averaging period, less a discount. It is also possible, depending on such weighted average price, that the Company will have an obligation to Morgan Stanley which, at the Company’s option, could be settled in additional cash or by issuing shares. Under the terms of the ASR, the maximum number of shares that could be delivered to the Company is 73.9 million.

Pursuant to the authorization under the 2021 Repurchase Program, the Company entered into a $2.0 billion fixed dollar ASR with Citibank, N.A. Upon payment of the $2.0 billion purchase price on January 4, 2023, the Company received a number of shares of CVS Health Corporation’s common stock equal to 80% of the $2.0 billion notional amount of the ASR or approximately 17.4 million shares at a price of $92.19 per share, which were placed into treasury stock in January 2023. The ASR was accounted for as an initial treasury stock transaction for $1.6 billion and a forward contract for $0.4 billion. The forward contract was classified as an equity instrument and was recorded within capital surplus. In February 2023, the Company received approximately 5.4 million shares of CVS Health Corporation’s common stock, representing the remaining 20% of the $2.0 billion notional amount of the ASR, thereby concluding the ASR. These shares were placed into treasury and the forward contract was reclassified from capital surplus to treasury stock in February 2023.

Pursuant to the authorization under the 2021 Repurchase Program, the Company entered into a $1.5 billion fixed dollar ASR with Barclays Bank PLC. Upon payment of the $1.5 billion purchase price on January 4, 2022, the Company received a number of shares of CVS Health Corporation’s common stock equal to 80% of the $1.5 billion notional amount of the ASR or approximately 11.6 million shares at a price of $103.34 per share, which were placed into treasury stock in January 2022. The ASR was accounted for as an initial treasury stock transaction for $1.2 billion and a forward contract for $0.3 billion. The forward contract was classified as an equity instrument and was recorded within capital surplus. In February 2022, the Company received approximately 2.7 million shares of CVS Health Corporation’s common stock, representing the remaining 20% of the $1.5 billion notional amount of the ASR, thereby concluding the ASR. These shares were placed into treasury stock and the forward contract was reclassified from capital surplus to treasury stock in February 2022.

At the time they were received, the initial and final receipt of shares resulted in an immediate reduction of the outstanding shares used to calculate the weighted average common shares outstanding for basic and diluted earnings per share.

Dividends

During 2023, 2022 and 2021 the quarterly cash dividend was $0.605, $0.55 and $0.50 per share, respectively. In December 2023, the Board authorized an increase of approximately 10% in the quarterly cash dividend to $0.665 per share effective in 2024. CVS Health Corporation has paid cash dividends every quarter since becoming a public company. Future dividend payments will depend on the Company’s earnings, capital requirements, financial condition and other factors considered relevant by the Board.

Future Cash Requirements

The following table summarizes certain estimated future cash requirements under the Company’s various contractual obligations at December 31, 2023, in total and disaggregated into current and long-term obligations. The table below does not include future payments of claims to health care providers or pharmacies because certain terms of these payments are not determinable at December 31, 2023 (for example, the timing and volume of future services provided under fee-for-service arrangements and future membership levels for capitated arrangements).

In millions

(1) Refer to Note 7 ‘‘Leases’’ included in Item 8 of this 10-K for additional information regarding the maturity of lease liabilities under operating and finance leases.

(2) The Company leases pharmacy and clinic space from Target. See Note 7 ‘‘Leases’’ included in Item 8 of this 10-K for additional information regarding the lease arrangements with Target. Amounts related to such operating and finance leases are reflected within the operating lease liabilities and finance lease liabilities in the table above. Pharmacy lease amounts due in excess of the remaining estimated economic life of the buildings are reflected in the table above assuming equivalent stores continue to operate through the term of the arrangements.

(3) Refer to Note 10 ‘‘Borrowings and Credit Agreements’’ included in Item 8 of this 10-K for additional information regarding the maturities of debt principal and commercial paper borrowings. Interest payments on long-term debt are calculated using outstanding balances and interest rates in effect on December 31, 2023.

(4) Refer to Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K for additional information regarding the opioid litigation settlement agreements.

(5) Payments of other long-term liabilities exclude Separate Accounts liabilities of approximately $3.3 billion because these liabilities are supported by assets that are legally segregated and are not subject to claims that arise out of the Company’s business.

(6) Total payments of future policy benefits, unpaid claims and policyholders’ funds include $614 million, $1.1 billion and $152 million, respectively, of reserves for contracts subject to reinsurance. The Company expects the assuming reinsurance carrier to fund these obligations and has reflected these amounts as reinsurance recoverable assets on the consolidated balance sheets.

(7) Customer funds associated with group life and health contracts of approximately $58 million have been excluded from the table above because such funds may be used primarily at the customer’s discretion to offset future premiums and/or for refunds, and the timing of the related cash flows cannot be determined. Additionally, net unrealized capital losses on debt securities supporting experience-rated products of $18 million, before tax, have been excluded from the table above.

Restrictions on Certain Payments

In addition to general state law restrictions on payments of dividends and other distributions to stockholders applicable to all corporations, health maintenance organizations (“HMOs”) and insurance companies are subject to further regulations that, among other things, may require those companies to maintain certain levels of equity (referred to as surplus) and restrict the amount of dividends and other distributions that may be paid to their equity holders. These regulations are not directly applicable to CVS Health Corporation as a holding company, since CVS Health Corporation is not an HMO or an insurance company. In addition, in connection with the Aetna Acquisition, the Company made certain undertakings that require prior regulatory approval of dividends by certain of its HMOs and insurance companies. The additional regulations and undertakings applicable to the Company’s HMO and insurance company subsidiaries are not expected to affect the Company’s ability to service the Company’s debt, meet other financing obligations or pay dividends, or the ability of any of the Company’s subsidiaries to service their debt or other financing obligations. Under applicable regulatory requirements and undertakings, at December 31, 2023, the maximum amount of dividends that may be paid by the Company’s insurance and HMO subsidiaries without prior approval by regulatory authorities was $3.1 billion in the aggregate.

The Company maintains capital levels in its operating subsidiaries at or above targeted and/or required capital levels and dividends amounts in excess of these levels to meet liquidity requirements, including the payment of interest on debt and stockholder dividends. In addition, at the Company’s discretion, it uses these funds for other purposes such as funding share and debt repurchase programs, investments in new businesses and other purposes considered advisable.

At December 31, 2023 and 2022, the Company held investments of $307 million and $331 million, respectively, that are not accounted for as Separate Accounts assets but are legally segregated and are not subject to claims that arise out of the Company’s business. See Note 4 ‘‘Investments’’ included in Item 8 of this 10-K for additional information on investments related to the 2012 conversion of an existing group annuity contract from a participating to a non-participating contract.

Solvency Regulation

The National Association of Insurance Commissioners (the “NAIC”) utilizes risk-based capital (“RBC”) standards for insurance companies that are designed to identify weakly-capitalized companies by comparing each company’s adjusted surplus to its required surplus (the “RBC Ratio”). The RBC Ratio is designed to reflect the risk profile of insurance companies. Within certain ratio ranges, regulators have increasing authority to take action as the RBC Ratio decreases. There are four levels of regulatory action, ranging from requiring an insurer to submit a comprehensive financial plan for increasing its RBC to the state insurance commissioner to requiring the state insurance commissioner to place the insurer under regulatory control. At December 31, 2023, all of the Company’s insurance and HMO subsidiaries were either above the RBC level that would require regulatory action or otherwise subject to an agreement to avoid any regulatory action. The RBC framework described above for insurers has been extended by the NAIC to health organizations, including HMOs. Although not all states had adopted these rules at December 31, 2023, at that date each of the Company’s active HMOs had a surplus that exceeded either the applicable state net worth requirements or, where adopted, the levels that would require regulatory action under the NAIC’s RBC rules, or were otherwise subject to an agreement to avoid any regulatory action. External rating agencies use their own capital models and/or RBC standards when they determine a company’s rating.

Critical Accounting Policies

The Company prepares the consolidated financial statements in conformity with generally accepted accounting principles, which require management to make certain estimates and apply judgment. Estimates and judgments are based on historical experience, current trends and other factors that management believes to be important at the time the consolidated financial statements are prepared. On a regular basis, the Company reviews its accounting policies and how they are applied and disclosed in the consolidated financial statements. While the Company believes the historical experience, current trends and other factors considered by management support the preparation of the consolidated financial statements in conformity with generally accepted accounting principles, actual results could differ from estimates, and such differences could be material.

Significant accounting policies are discussed in Note 1 ‘‘Significant Accounting Policies’’ included in Item 8 of this 10-K. Management believes the following accounting policies include a higher degree of judgment and/or complexity and, thus, are considered to be critical accounting policies. The Company has discussed the development and selection of these critical accounting policies with the Audit Committee of the Board (the “Audit Committee”), and the Audit Committee has reviewed the disclosures relating to them.

Revenue Recognition

Health Care Benefits Segment

Health Care Benefits revenue is principally derived from insurance premiums and fees billed to customers. Revenue related to the Company’s Government business is collected monthly from the U.S. federal government and various government agencies based on fixed payment rates and member eligibility.

Some of the Company’s Government contracts allow for premiums to be adjusted to reflect actual experience or the relative health status of Insured members. Such adjustments are reasonably estimable at the outset of the contract, and adjustments to those estimates are made based on actual experience of the customer emerging under the contract and the terms of the underlying contract.

Health Services Segment

The Health Services segment sells prescription drugs directly through its specialty and mail order pharmacy offerings and indirectly through the Company’s retail pharmacy network. The Company’s pharmacy benefit arrangements are accounted for in a manner consistent with a master supply arrangement as there are no contractual minimum volumes and each prescription is considered a separate purchasing decision and distinct performance obligation transferred at a point in time. PBM services performed in connection with each prescription claim are considered part of a single performance obligation which culminates in the fulfillment of prescription drugs.

The Company recognizes revenue using the gross method at the contract price negotiated with its clients when the Company has concluded it controls the prescription drug before it is transferred to the client plan members. The Company controls prescriptions fulfilled indirectly through its retail pharmacy network because it has separate contractual arrangements with those pharmacies, has discretion in setting the price for the transaction and assumes primary responsibility for fulfilling the promise to provide prescription drugs to its client plan members while also performing the related PBM services.

Revenues include (i) the portion of the price the client pays directly to the Company, net of any discounts earned on brand name drugs or other discounts and refunds paid back to the client, (ii) the price paid to the Company by client plan members for mail order prescriptions and the price paid to retail network pharmacies by client plan members for retail prescriptions, and (iii) claims based administrative fees for retail pharmacy network contracts. Sales taxes are not included in revenues.

The Company recognizes revenue when control of the prescription drugs is transferred to customers, in an amount that reflects the consideration the Company expects to be entitled to receive in exchange for those prescription drugs. The Company has established the following revenue recognition policies for the Health Services segment:

• Revenues generated from prescription drugs sold by third party pharmacies in the Company’s retail pharmacy network and associated administrative fees are recognized at the Company’s point-of-sale, which is when the claim is adjudicated by the Company’s online claims processing system and the Company has transferred control of the prescription drug and completed all of its performance obligations.
• Revenues generated from prescription drugs sold by specialty and mail order pharmacies are recognized when the prescription drug is delivered to the client plan member. At the time of delivery, the Company has performed substantially

all of its performance obligations under its client contracts and does not experience a significant level of returns or reshipments.

For contracts under which the Company acts as an agent or does not control the prescription drugs prior to transfer to the client plan member, revenue is recognized using the net method.

Drug Discounts

The Company records revenue net of manufacturers’ rebates earned by its clients based on their plan members’ utilization of brand-name formulary drugs. The Company estimates these rebates at period-end based on actual and estimated claims data and its estimates of the manufacturers’ rebates earned by its clients. The estimates are based on the best available data at period-end and recent history for the various factors that can affect the amount of rebates due to the client. The Company adjusts its rebates payable to clients to the actual amounts paid when these rebates are paid or as significant events occur. Any cumulative effect of these adjustments is recorded against revenues at the time it is identified. Adjustments generally result from contract changes with clients or manufacturers that have retroactive rebate adjustments, differences between the estimated and actual product mix subject to rebates, or whether the brand name drug was included in the applicable formulary. The effect of adjustments between estimated and actual manufacturers’ rebate amounts has not been material to the Company’s operating results or financial condition.

Impairments of Debt Securities

The Company regularly reviews its debt securities to determine whether a decline in fair value below the cost basis or carrying value has occurred. If a debt security is in an unrealized loss position and the Company has the intent to sell the security, or it is more likely than not that the Company will have to sell the security before recovery of its amortized cost basis, the amortized cost basis of the security is written down to its fair value and the difference is recognized in net income. If a debt security is in an unrealized loss position and the Company does not have the intent to sell and it is more likely than not that the Company will not have to sell such security before recovery of its amortized cost basis, the Company bifurcates the impairment into credit-related and non-credit related (yield-related) components. The amount of the credit-related component is recorded as an allowance for credit losses and recognized in net income, and the amount of the non-credit related component is included in other comprehensive income (loss). The Company analyzes all facts and circumstances believed to be relevant for each investment when performing this analysis, in accordance with applicable accounting guidance.

In evaluating whether a credit related loss exists, the Company considers a variety of factors including: the extent to which the fair value is less than the amortized cost basis; adverse conditions specifically related to the issuer of a security, an industry or geographic area; the payment structure of the security; the failure of the issuer of the security to make scheduled interest or principle payments; and any changes to the rating of the security by a rating agency.

Among the factors considered in evaluating whether a decline in fair value below the cost basis or carrying value has occurred are whether the decline results from a change in the quality of the debt security itself, whether the decline results from a downward movement in the market as a whole, and the prospects for realizing the carrying value of the debt security based on the investment’s current and short-term prospects for recovery. For unrealized losses determined to be the result of market conditions (for example, increasing interest rates and volatility due to conditions in the overall market) or industry-related events, the Company determines whether it intends to sell the debt security or if it is more likely than not that the Company will be required to sell the debt security prior to the anticipated recovery of the debt security’s amortized cost basis. If either case is true, the Company recognizes a non-credit related impairment, and the cost basis or carrying amount of the debt security is written down to fair value.

During the years ended December 31, 2023, 2022 and 2021, the Company recorded yield-related impairment losses on debt securities of $152 million, $143 million and $42 million, respectively. During the years ended December 31, 2023 and 2022 the Company recorded credit-related losses on debt securities of $3 million and $13 million, respectively. During the year ended December 31, 2021, the Company did not record any credit-related impairment losses on debt securities.

The risks inherent in assessing the impairment of a debt security include the risk that market factors may differ from projections and the risk that facts and circumstances factored into the Company’s assessment may change with the passage of time. Unexpected changes to market factors and circumstances that were not present in past reporting periods are among the factors that may result in a current period decision to sell debt securities that were not impaired in prior reporting periods.

Inventory

Inventories are valued at the lower of cost or net realizable value using the weighted average cost method.

The value of ending inventory is reduced for estimated inventory losses that have occurred during the interim period between physical inventory counts. Physical inventory counts are taken on a regular basis in each retail store and pharmacy, and a continuous cycle count process is the primary procedure used to validate the inventory balances on hand in each distribution center and mail facility to ensure that the amounts reflected in the consolidated financial statements are properly stated. The Company’s accounting for inventory contains uncertainty since management must use judgment to estimate the inventory losses that have occurred during the interim period between physical inventory counts. When estimating these losses, a number of factors are considered which include historical physical inventory results on a location-by-location basis and current physical inventory loss trends.

The total reserve for estimated inventory losses covered by this critical accounting policy was $607 million and $559 million as of December 31, 2023 and 2022, respectively. Although management believes there is sufficient current and historical information available to record reasonable estimates for estimated inventory losses, it is possible that actual results could differ. In order to help investors assess the aggregate risk, if any, associated with the inventory-related uncertainties discussed above, a ten percent (10%) pre-tax change in estimated inventory losses, which is a reasonably likely change, would increase or decrease the total reserve for estimated inventory losses by approximately $61 million as of December 31, 2023.

Although management believes that the estimates discussed above are reasonable and the related calculations conform to generally accepted accounting principles, actual results could differ from such estimates, and such differences could be material.

Recoverability of Long-Lived Assets

Recoverability of Definite-Lived Assets

The Company evaluates the recoverability of long-lived assets, excluding goodwill and indefinite-lived intangible assets, which are tested for impairment using separate tests described below, whenever events or changes in circumstances indicate that the carrying value of such an asset may not be recoverable. The Company groups and evaluates these long-lived assets for impairment at the lowest level at which individual cash flows can be identified. If indicators of impairment are present, the Company first compares the carrying amount of the asset group to the estimated future cash flows associated with the asset group (undiscounted). If the estimated future cash flows used in this analysis are less than the carrying amount of the asset group, an impairment loss calculation is prepared. The impairment loss calculation compares the carrying amount of the asset group to the asset group’s estimated future cash flows (discounted). If required, an impairment loss is recorded for the portion of the asset group’s carrying value that exceeds the asset group’s estimated future cash flows (discounted).

The long-lived asset impairment loss calculation contains uncertainty since management must use judgment to estimate each asset group’s future sales, profitability and cash flows. When preparing these estimates, the Company considers historical results and current operating trends and consolidated sales, profitability and cash flow results and forecasts. These estimates can be affected by a number of factors including general economic and regulatory conditions, efforts of third party organizations to reduce their prescription drug costs and/or increased member co-payments, the continued efforts of competitors to gain market share and consumer spending patterns.

During the fourth quarter of 2022, the Company undertook an initiative to evaluate its corporate office real estate space in response to its new flexible work arrangement. As part of this initiative, the Company evaluated its current real estate space and changes in employee work arrangement requirements to ensure it had the appropriate space to support the business. As a result of this assessment, the Company determined that it would vacate and abandon certain leased corporate office spaces. Accordingly, in the three months ended December 31, 2022, the Company recorded office real estate optimization charges of $117 million, primarily consisting of $71 million related to operating lease right-of-use assets and $44 million related to property and equipment. During the year ended December 31, 2023, the Company recorded an incremental $46 million of office real estate optimization charges associated with this initiative, primarily consisting of $20 million related to operating lease right-of-use assets and $18 million related to property and equipment. The office real estate optimization charges were recorded within the Health Care Benefits, Corporate/Other and Health Services segments.

During the fourth quarter of 2021, the Company completed a strategic review of its retail business and announced the creation of new formats for its stores to continue to drive higher engagement with customers. As part of this review, the Company evaluated changes in population, consumer buying patterns and future health needs to ensure it has the right kinds of stores in the right locations for consumers and for the business. In connection with this initiative, on November 17, 2021, the Board authorized the closing of approximately 900 retail stores, approximately 300 stores each year, between 2022 and 2024. As a result, management determined that there were indicators of impairment with respect to the impacted stores’ asset groups, including the associated operating lease right-of-use assets and property and equipment. A long-lived asset impairment test was performed during the fourth quarter of 2021 and the results of the impairment test indicated that the fair value of certain retail store asset groups was lower than their respective carrying values. Accordingly, in the three months ended December 31, 2021, the Company recorded a store impairment charge of approximately $1.4 billion, consisting of a write down of approximately $1.1 billion related to operating lease right-of-use assets and $261 million related to property and equipment, within the Pharmacy & Consumer Wellness segment.

Recoverability of Goodwill

Goodwill represents the excess of amounts paid for acquisitions over the fair value of the net identifiable assets acquired. Goodwill is subject to annual impairment reviews, or more frequent reviews if events or circumstances indicate that the carrying value may not be recoverable. Goodwill is tested for impairment on a reporting unit basis. The impairment test is performed by comparing the reporting unit’s fair value with its net book value (or carrying amount), including goodwill. The fair value of the reporting units is estimated using a combination of a discounted cash flow method and a market multiple method. If the net book value (carrying amount) of the reporting unit exceeds its fair value, the reporting unit’s goodwill is considered to be impaired, and an impairment is recognized in an amount equal to the excess.

The determination of the fair value of the reporting units requires the Company to make significant assumptions and estimates. These assumptions and estimates primarily include the selection of appropriate peer group companies; control premiums and valuation multiples appropriate for acquisitions in the industries in which the Company competes; discount rates; terminal growth rates; and forecasts of revenue, operating income, depreciation and amortization, income taxes, capital expenditures and future working capital requirements. When determining these assumptions and preparing these estimates, the Company considers each reporting unit’s historical results and current operating trends; consolidated revenues, profitability and cash flow results and forecasts; and industry trends. The Company’s estimates can be affected by a number of factors, including general economic and regulatory conditions; the risk-free interest rate environment; the Company’s market capitalization; efforts of customers and payers to reduce costs, including their prescription drug costs, and/or increase member co-payments; the continued efforts of competitors to gain market share, consumer spending patterns and the Company’s ability to achieve its revenue growth projections and execute on its cost reduction initiatives.

Effective for the 2023 annual goodwill impairment test, the Company elected to change its annual goodwill impairment test date from August 31st to October 31st to better align with its annual budgeting processes, as its previous election predated large acquisitions such as Caremark Rx, Inc. and Aetna.

2023 Goodwill Impairment Test

Prior to the Company’s 2023 goodwill impairment test, the most recent goodwill impairment test was performed as of January 1, 2023, in connection with the segment realignment previously described in Note 1 ‘‘Significant Accounting Policies’’. During the fourth quarter of 2023, the Company performed its required annual impairment test of goodwill. The results of the impairment tests indicated that there was no impairment of goodwill as of the testing date. The fair values of the reporting units with goodwill exceeded their carrying values by significant margins, with the exception of the Health Care Delivery reporting unit, which exceeded its carrying value by approximately 9%.

In connection with its new operating model adopted in the first quarter of 2023, the Company formed a new Health Care Delivery reporting unit within the Health Services segment. The Health Care Delivery reporting unit is primarily comprised of the Signify Health and Oak Street Health care delivery assets, which were acquired on March 29, 2023 and May 2, 2023, respectively. These transactions were accounted for using the acquisition method of accounting which requires, among other things, the assets acquired and liabilities assumed to be recognized at their fair values at the date of acquisition. Given the close proximity of the acquisition dates to the 2023 annual impairment test of goodwill, as expected, the fair value of these two businesses and, therefore, of the Health Care Delivery reporting unit, remained relatively in line with the carrying value of the reporting unit. This fair value estimate is sensitive to significant assumptions including the revenue growth rate, operating income and the discount rate.

2022 Goodwill Impairment Test

During the third quarter of 2022, the Company performed its required annual impairment test of goodwill. The results of the impairment tests indicated that there was no impairment of goodwill as of the testing date. The fair values of the reporting units with goodwill exceeded their carrying values by significant margins.

2021 Goodwill Impairment Test

During the third quarter of 2021, the Company performed its required annual impairment tests of goodwill. The results of the impairment tests indicated an impairment of the goodwill associated with the LTC reporting unit, as the reporting unit’s carrying value exceeded its fair value as of the testing date. The results of the impairment tests of the remaining reporting units indicated that there was no impairment of goodwill as of the testing date. The fair values of the reporting units with goodwill exceeded their carrying values by significant margins, with the exception of the Commercial Business reporting unit, which exceeded its carrying value by approximately 3%.

As discussed in Note 6 ‘‘Goodwill and Other Intangibles’’ included in Item 8 of this 10-K, during 2021, the LTC reporting unit continued to face challenges that impacted the Company’s ability to grow the LTC reporting unit’s business at the rate estimated when its 2020 goodwill impairment test was performed. These challenges included lower net facility admissions, net long-term care facility customer losses and the prolonged adverse impact of the COVID-19 pandemic and the emerging new variants, which resulted in more significant declines in occupancy rates experienced by the Company’s long-term care facility customers than previously anticipated. During the third quarter of 2021, LTC management updated their 2021 annual forecast and submitted their long-term plan which showed deterioration in the financial results for the remainder of 2021 and beyond. The Company utilized these updated projections in performing its annual impairment test, which indicated that the fair value of the LTC reporting unit was lower than its carrying value, resulting in a $431 million goodwill impairment charge in the third quarter of 2021. The fair value of the LTC reporting unit was determined using a combination of a discounted cash flow method and a market multiple method. Subsequent to the impairment charge recorded in the third quarter of 2021, there was no remaining goodwill balance in the LTC reporting unit.

Recoverability of Indefinite-Lived Intangible Assets

Indefinite-lived intangible assets are subject to annual impairment reviews, or more frequent reviews if events or circumstances indicate that their carrying value may not be recoverable. Indefinite-lived intangible assets are tested by comparing the estimated fair value of the asset to its carrying value. If the carrying value of the asset exceeds its estimated fair value, an impairment loss is recognized, and the asset is written down to its estimated fair value.

The indefinite-lived intangible asset impairment loss calculation contains uncertainty since management must use judgment to estimate fair value based on the assumption that, in lieu of ownership of an intangible asset, the Company would be willing to pay a royalty in order to utilize the benefits of the asset. Fair value is estimated by discounting the hypothetical royalty payments to their present value over the estimated economic life of the asset. These estimates can be affected by a number of factors including general economic conditions, availability of market information and the profitability of the Company. There were no impairment losses recognized on indefinite-lived intangible assets in any of the years ended December 31, 2023, 2022 or 2021.

Health Care Benefits’ IBNR Liabilities

The Health Care Benefits segment’s health care costs payable include estimates of the ultimate cost of (i) services rendered to the segment’s Insured members but not yet reported to the Company and (ii) claims which have been reported to the Company but not yet paid (collectively, “IBNR”). Health care costs payable also include an estimate of the cost of services that will continue to be rendered after the financial statement date if the Company is obligated to pay for such services in accordance with contractual or regulatory requirements. IBNR estimates are developed using actuarial principles and assumptions that consider numerous factors. See Note 1 ‘‘Significant Accounting Policies’’ included in Item 8 of this 10-K for additional information on the Company’s reserving methodology.

During 2023 and 2022, the segment observed an increase in completion factors relative to those assumed at the prior year end. After considering the claims paid in 2023 and 2022 with dates of service prior to the fourth quarter of the previous year, the segment observed assumed incurred claim weighted average completion factors that were 4 and 3 basis points higher, respectively, than previously estimated, resulting in a decrease of $55 million and $32 million in 2023 and 2022, respectively, in health care costs payable that related to the prior year. The segment has considered the pattern of changes in its completion factors when determining the completion factors used in its estimates of IBNR as of December 31, 2023. However, based on historical claim experience, it is reasonably possible that the estimated weighted average completion factors may vary by plus or minus 9 basis points from the assumed rates, which could impact health care costs payable by approximately plus or minus $166 million pretax.

Also, during 2023 and 2022, the Health Care Benefits segment observed that health care costs for claims with claim incurred dates of three months or less before the financial statement date were lower than previously estimated. Specifically, after considering the claims paid in 2023 and 2022 with claim incurred dates for the fourth quarter of the previous year, the segment observed health care costs that were 4.5% and 4.8% lower, respectively, for each fourth quarter than previously estimated, resulting in a reduction of $620 million and $622 million in 2023 and 2022, respectively, in health care costs payable that related to prior year.

Management considers historical health care cost trend rates together with its knowledge of recent events that may impact current trends when developing estimates of current health care cost trend rates. When establishing reserves as of December 31, 2023, the segment increased its assumed health care cost trend rates for the most recent three months by 7.1% from health care cost trend rates recently observed. Health care cost trend rates during the past three years have been impacted by utilization changes driven by the COVID-19 pandemic. The impact has not been uniform, with products and select geographies experiencing utilization impacts due to COVID-19 waves. Based on historical claim experience, it is reasonably possible that the segment’s estimated health care cost trend rates may vary by plus or minus 3.5% from the assumed rates, which could impact health care costs payable by plus or minus $595 million pretax.

New Accounting Pronouncements Recently Adopted

See Note 1 ‘‘Significant Accounting Policies’’ included in Item 8 of this 10-K for a description of recently adopted new accounting pronouncements applicable to the Company.

The Company’s earnings and financial condition are exposed to interest rate risk, credit quality risk, market valuation risk, foreign currency risk, commodity risk and operational risk.

Evaluation of Interest Rate and Credit Quality Risk

The Company manages interest rate risk by seeking to maintain a tight match between the durations of assets and liabilities when appropriate. The Company manages credit quality risk by seeking to maintain high average credit quality ratings and diversified sector exposure within its debt securities portfolio. In connection with its investment and risk management objectives, the Company also uses derivative financial instruments whose market value is at least partially determined by, among other things, levels of or changes in interest rates (short-term or long-term), duration, prepayment rates, equity markets or credit ratings/spreads. The Company’s use of these derivatives is generally limited to hedging risk and has principally consisted of using interest rate swaps, treasury rate locks, forward contracts, futures contracts, warrants, put options and credit default swaps. These instruments, viewed separately, subject the Company to varying degrees of interest rate, equity price and credit risk. However, when used for hedging, the Company expects these instruments to reduce overall risk.

Investments

The Company’s investment portfolio supported the following products at December 31, 2023 and 2022:

In millions

(1) Includes long-term investments of $17 million which were accounted for as assets held for sale and were included in assets held for sale on the consolidated balance sheet at December 31, 2022. See Note 2 ‘‘Acquisitions, Divestitures and Asset Sales’’ included in Item 8 of this 10-K for additional information.

Investment risks associated with experience-rated products generally do not impact the Company’s operating results. The risks associated with investments supporting experience-rated pension and annuity products in the large case pensions business in the Company’s Corporate/Other segment are assumed by the contract holders and not by the Company (subject to, among other things, certain minimum guarantees). Assets supporting experience-rated products may be subject to contract holder or participant withdrawals.

The debt securities in the Company’s investment portfolio had an average credit quality rating of A at both December 31, 2023 and 2022, with a fair value of approximately $4.6 billion and $6.0 billion rated AAA at December 31, 2023 and 2022, respectively. The fair value of debt securities that were rated below investment grade (that is, having a credit quality rating below BBB-/Baa3) was $2.1 billion and $1.9 billion at December 31, 2023 and 2022, respectively (of which 1.5% and 1.6% at December 31, 2023 and 2022, respectively, supported experience-rated products).

At December 31, 2023 and 2022, the Company held $218 million and $202 million, respectively, of municipal debt securities that were guaranteed by third parties, representing 1% of total investments at both December 31, 2023 and 2022. These securities had an average credit quality rating of AA+ at both December 31, 2023 and 2022, with the guarantee. These securities had an average credit quality rating of AA- and A at December 31, 2023 and 2022, respectively, without the guarantee. The Company does not have any significant concentration of investments with third party guarantors (either direct or indirect).

The Company generally classifies debt securities as available for sale, and carries them at fair value on the consolidated balance sheets. At both December 31, 2023 and 2022, less than 1% of debt securities were valued using inputs that reflect the Company’s assumptions (categorized as Level 3 inputs in accordance with GAAP). See Note 5 ‘‘Fair Value’’ included in Item 8 of this 10-K for additional information on the methodologies and key assumptions used to determine the fair value of investments. For additional information related to investments, see Note 4 ‘‘Investments’’ included in Item 8 of this 10-K.

The Company regularly reviews debt securities in its portfolio to determine whether a decline in fair value below the cost basis or carrying value has occurred. If a debt security is in an unrealized loss position and the Company has the intent to sell the security, or it is more likely than not that the Company will have to sell the security before recovery of its amortized cost basis, the amortized cost basis of the security is written down to its fair value and the difference is recognized in net income. If a debt security is in an unrealized loss position and the Company does not have the intent to sell and it is more likely than not that the Company will not have to sell such security before recovery of its amortized cost basis, the Company bifurcates the impairment into credit-related and non-credit related components. The amount of the credit-related component is recorded as an allowance for credit losses and recognized in net income, and the amount of the non-credit related component is included in other comprehensive income (loss). The impairment of debt securities is considered a critical accounting policy. See ‘‘Critical Accounting Policies - Impairments of Debt Securities” in the MD&A included in Item 7 of this 10-K for additional information.

Evaluation of Market Valuation Risks

The Company regularly evaluates its risk from market-sensitive instruments by examining, among other things, levels of or changes in interest rates (short-term or long-term), duration, prepayment rates, equity markets and/or credit ratings/spreads. The Company also regularly evaluates the appropriateness of investments relative to management-approved investment guidelines (and operates within those guidelines) and the business objectives of its portfolios.

On a quarterly basis, the Company reviews the impact of hypothetical net losses in its investment portfolio on the Company’s consolidated near-term financial condition, operating results and cash flows assuming the occurrence of certain reasonably possible changes in near-term market rates and prices. Interest rate changes (whether resulting from changes in treasury yields or credit spreads or other factors) represent the most material risk exposure category for the Company. The Company has estimated the impact on the fair value of market sensitive instruments based on the net present value of cash flows using a representative set of likely future interest rate scenarios. The assumptions used were as follows: an immediate increase of 100 basis points in interest rates (which the Company believes represents a moderately adverse scenario) for long-term debt issued by the Company, as well as its interest rate sensitive investments and an immediate decrease of 15% in prices for publicly traded domestic equity securities in the Company’s investment portfolio.

Assuming an immediate increase of 100 basis points in interest rates, the theoretical decline in the fair values of market sensitive instruments at December 31, 2023 is as follows:

• The fair value of long-term debt issued by the Company would decline by approximately $3.5 billion ($4.4 billion pretax). Changes in the fair value of long-term debt do not impact the Company’s operating results or financial condition.
• The theoretical reduction in the fair value of interest rate sensitive investments partially offset by the theoretical reduction in the fair value of interest rate sensitive liabilities would result in a net decline in fair value of approximately $570 million ($720 million pretax) related to continuing non-experience-rated products. Net reductions in fair value would be reflected as an unrealized loss in equity, as the Company classifies these debt securities as available for sale and the effect of the interest rate on interest rate sensitive liabilities is recorded in other comprehensive income (loss).

If the value of the Company’s publicly traded domestic equity securities held within its investment portfolio were to decline by 15%, this would result in a net decline in fair value of $32 million ($41 million pretax).

Based on overall exposure to interest rate risk and equity price risk, the Company believes that these changes in market rates and prices would not materially affect consolidated near-term financial condition, operating results or cash flows as of December 31, 2023.

Evaluation of Foreign Currency and Commodity Risk

At December 31, 2023 and 2022, the Company did not have any material foreign currency exchange rate or commodity derivative instruments in place and believes its exposure to foreign currency exchange rate risk is not material.

Evaluation of Operational Risks

The Company also faces certain operational risks. Those risks include risks related to information security, including cybersecurity.

The Company and its vendors have experienced diverse cyber attacks and expect to continue to experience cyber attacks going forward. As examples, the Company and its vendors have experienced attempts to gain access to systems, denial of service attacks, attempted malware infections, account takeovers, scanning activity and phishing emails. Attacks can originate from external criminals, terrorists, nation states or internal actors. The Company is dedicating and will continue to dedicate significant resources and incur significant expenses to maintain and update on an ongoing basis the systems and processes that are designed to mitigate the information security risks it faces and protect the security of its computer systems, software, networks and other technology assets against attempts by unauthorized parties to obtain access to confidential information, disrupt or degrade service or cause other damage. The impact of cyber attacks has not been material to the Company’s operations or operating results through December 31, 2023. The Board and its Audit Committee and Nominating and Corporate Governance Committee are regularly informed regarding the Company’s information security policies, practices and status. Please see “Cybersecurity” included in Item 1C of this 10-K for further information.

Evaluation of disclosure controls and procedures

The Company’s Chief Executive Officer and Chief Financial Officer, after evaluating the effectiveness of the design and operation of the Company’s disclosure controls and procedures (as defined in Rules 13a-15 (f) and 15d-15(f) under the Securities Exchange Act of 1934) as of December 31, 2023, have concluded that as of such date the Company’s disclosure controls and procedures were adequate and effective at a reasonable assurance level and designed to ensure that material information relating to the Company and its consolidated subsidiaries would be made known to such officers on a timely basis.

Management’s report on internal control over financial reporting

Management is responsible for establishing and maintaining adequate internal control over financial reporting. The Company’s internal control over financial reporting includes those policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the Company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of the Company’s consolidated financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the Company are being made only in accordance with authorizations of management and directors of the Company; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the Company’s assets that could have a material effect on the Company’s consolidated financial statements. In order to ensure the Company’s internal control over financial reporting is effective, management regularly assesses such control and did so most recently for its financial reporting as of December 31, 2023.

Management conducted an assessment of the effectiveness of the Company’s internal control over financial reporting based on the criteria established in Internal Control-Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 Framework). This evaluation included review of the documentation, evaluation of the design effectiveness and testing of the operating effectiveness of controls. The Company’s system of internal control over financial reporting is enhanced by periodic reviews by the Company’s internal auditors, written policies and procedures and a written Code of Conduct adopted by CVS Health Corporation’s Board of Directors, applicable to all employees of the Company. In addition, the Company has an internal Disclosure Committee, comprised of management from each functional area within the Company, which performs a separate review of disclosure controls and procedures. There are inherent limitations in the effectiveness of any system of internal control over financial reporting.

Based on management’s assessment, management concluded that the Company’s internal control over financial reporting is effective and provides reasonable assurance that assets are safeguarded and that the financial records are reliable for preparing financial statements as of December 31, 2023.

Ernst & Young LLP, the Company’s independent registered public accounting firm, is appointed by CVS Health Corporation’s Board of Directors and ratified by CVS Health Corporation’s stockholders. They were engaged to render an opinion regarding the fair presentation of the Company’s consolidated financial statements as well as conducting an audit of internal control over financial reporting. Their reports included in Item 8 of this Form 10-K are based upon audits conducted in accordance with the standards of the Public Company Accounting Oversight Board (United States).

Changes in internal control over financial reporting

There has been no change in the Company’s internal control over financial reporting identified in connection with the evaluation required by paragraph (d) of Rule 13a-15 or Rule 15d-15 that occurred during the fourth quarter ended December 31, 2023 that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.