ESSEssex Property Trust

We are subject to laws and regulations relating to the handling of personal information and we rely on information technology to sustain our operations. Any material failure, inadequacy, interruption or breach of the Company’s privacy or information systems, or those of our vendors or other third parties, could materially adversely affect the Company’s business, financial condition and results of operations. We rely on information technology hardware, software, networks and systems (collectively, “IT Systems”), some of which are provided by vendors, to process, transmit and store personal information, tenant and lease data, and other electronic information (collectively, “Confidential Information”), and to manage or support a variety of business processes, including financial transactions and records. Our business requires us and some of our vendors to use and store personal and other sensitive information of our tenants and employees, and our collection, use and other processing of personal information is governed by certain federal and state laws and regulations. Privacy and cybersecurity laws continue to evolve, with several a number of states passing new data privacy laws that govern the processing of information about state residents, and laws may be inconsistent from one jurisdiction to another. The Company endeavors to comply with privacy laws and regulations applicable to it, including the California Consumer Privacy Act (“CCPA”) and Washington State’s “My Health My Data Act”, which governs govern the collection, use, retention, disclosure and security of personal information about California residents. The CCPA requires the Company to, among other things, provide certain disclosures to California and Washington residents, promptly respond to certain requests related to their data, and contractually impose certain obligations on vendors. respectively. Compliance with existing and future laws and regulations related to data privacy and protection may increase the Company’s operating costs and adversely impact the Company’s ability to market the Company’s properties and services, and any failure of our systems in place to comply with such laws and regulations could harm our business, reputation and financial condition. Although we have taken steps to abide by applicable privacy and cybersecurity laws, and strive to protect the security of our IT Systems and Confidential Information, the compliance and security measures put in place by the Company and its vendors cannot guarantee perfect compliance or provide absolute security, and the Company and its vendors’ IT Systems may be vulnerable to numerous and evolving cybersecurity threats and risks that threaten the confidentiality, integrity and availability of our IT Systems and Confidential Information, including through social engineering/phishing, malware (including ransomware), distributed denial-of-service attempts, data theft, account takeovers, social engineering/phishing, technological error, employee error, malfeasance by insiders, misconfigurations, “bugs”, or other vulnerabilities in Company, or vendor, IT Systems. These threats may be amplified by emerging artificial intelligence technologies, which are expected to pose new or unknown cybersecurity risks and challenges, including as integrated into our or any third party’s operations, products and services, and can also come from diverse threat actors, such as state-sponsored organizations, opportunistic hackers and hacktivists. Any incident could compromise the Company’s or our vendors’ IT Systems (or the IT Systems of third parties that facilitate the Company’s or such vendors’ business activities), and the Confidential Information stored by or on behalf of the Company or such vendors could be accessed, misused, publicly disclosed, corrupted, lost, or stolen, resulting in fraud, including wire fraud related to Company assets or tenant payments, access to company funds, or other harm. Moreover, if there is a compliance failure, or if a cybersecurity

In August 2024, the Company entered into the 2024 ATM Program. In connection with the 2024 ATM Program, the Company may also enter into related forward sale agreements whereby, at the Company's discretion, it may sell shares of its common stock under the 2024 ATM Program under forward sale agreements. The use of a forward sale agreement would allow the Company to lock in a share price on the sale of shares of its common stock at the time the agreement is executed, but defer receipt of the proceeds from the sale of shares until a later date. Furthermore, it would permit the Company, at its election, to settle the agreements by issuing common stock in exchange for net proceeds at the then-applicable forward sale price specified by the agreement or, alternatively, to settle the agreements in whole or in part through the delivery or receipt of common stock or cash. Issuances of shares under these forward sale agreements are classified as equity transactions. Accordingly, no amounts relating to the forward sale agreements are recorded in the consolidated financial statements until settlement occurs. Prior to any settlements, the only impact to the consolidated financial statements is the inclusion of incremental shares, if any, within the calculation of diluted earnings per share and diluted earnings per unit using the treasury stock method. The actual forward price per share to be received by the Company upon settlement will be determined on the applicable settlement date based on adjustments made to the initial forward price to reflect the then-current overnight federal funds rate and the amount of dividends paid to holders of the Company’s common stock over the term of the forward sale agreement.