FISFidelity National Information Services

The Company is subject to numerous global privacy, data protection, cybersecurity, cyber resilience, and AI laws and regulations, which are continuing to change in ways that impose increasingly complex and costly compliance obligations on us and that have had, and are expected to continue to have, a significant impact on our operations. Failure to comply with applicable data protection laws, as well as new and evolving laws and regulations in these areas areas, could result in significant penalties, damage to our reputation, and loss of business. Additionally, a breach of applicable data protection laws may result in regulatory investigations, reputational damage, orders to cease or change our data processing activities, enforcement notices, assessment notices (for a compulsory audit) and/or civil claims (including class actions). We have incurred, and will continue to incur, costs to comply with these new evolving laws and regulations. There are also several additional laws being considered by state legislatures, the U.S. Congress, and governments around the world. As a result, we expect that a more substantial compliance effort to comply with varying regimes in different jurisdictions will continue to be necessary in the future, which has the potential to further increase the cost and complexity of our business. Moreover, privacy, data protection, cybersecurity, cyber resilience, and AI laws may be interpreted and applied inconsistently from country to country and may impose inconsistent or conflicting requirements. Complying with varying jurisdictional requirements could increase the costs and complexity of compliance and associated recordkeeping costs or require us to change our business practices in a manner adverse to our business and to incur additional costs. Data localization requirements in evolving privacy, data protection, cybersecurity, cyber resilience, and AI laws could also increase the cost and alter the approach to housing data around the world. In addition, our businesses Since we are increasingly subject to laws and regulations relating to digital transformation, surveillance, encryption, and data onshoring in the jurisdictions in which we operate. For example, under DORA, E.U. regulators are increasingly seeking to mitigate cyber threats and enhance digital resilience within the financial system through new regulations targeting the provision of critical third-party technology services. Compliance with these laws and regulations may require us to change our technology for information security, operational infrastructure, policies, and procedures, which could be time-consuming and costly and may result in additional regulatory burdens for the Company. Furthermore, compliance with these laws and regulations may indirectly impact us in circumstances where we act as a third-party service provider to clients, who are themselves subject to these laws and regulations and who will expect us to take appropriate steps to support them in achieving compliance. supervision

In January 2021, our Board of Directors approved a share repurchase program under which it authorized the Company to repurchase up to 100 million shares of our common stock. In August 2024, our Board of Directors approved a separate, incremental share repurchase program authorizing the repurchase of up to $3.0 billion in aggregate value of shares of our common stock. stock (the "2024 Repurchase Program"). Repurchases under these programs will be this program are made at management's discretion from time to time on the open market or in privately negotiated transactions and through Rule 10b5-1 plans. Neither of these The repurchase programs has program does not have an expiration date and either program may be suspended for periods, amended or discontinued at any time. Under these share repurchase programs, the The Company repurchased approximately 54 18 million shares for an aggregate approximately $1.3 billion during 2025 inclusive of $4.0 billion repurchases completed under our share repurchase program authorized in 2024, 9 million shares for an aggregate of $0.5 billion in 2023 and 21 million shares for an aggregate of January 2021. Approximately $1.8 billion in 2022. Approximately 1 million shares remained available for repurchase under the January 2021 program 2024 Repurchase Program as of December 31, 2024, and 2025. Following the closing of the Issuer Solutions Acquisition, the Company will exhaust its authorization temporarily paused repurchases under this program in the first quarter of 2025, after which it and will repurchase shares under the 2024 authorization. We intend to repurchase approximately $1.2 billion of resume at management's discretion, taking into account our shares during the year ending December 31, 2025. target leverage ratio.

•The Company reviews all of its litigation on an ongoing basis and follows the authoritative provision guidance for accounting for contingencies when making accrual and disclosure decisions. A liability must be accrued if (a) it is probable that a liability has been incurred and (b) the amount of loss can be reasonably estimated. If one of these criteria has not been met, disclosure is required when there is at least a reasonable possibility that a material loss may be incurred. When assessing reasonably possible and probable outcomes, the Company bases decisions on the assessment of the ultimate outcome following all appeals. Legal fees associated with defending litigation matters are expensed as incurred.