Company: CMA
Filing Date: 2025-11-25
Form Type: DEFM14A
Source: 0001193125-25-297173
Chunk: 290

Company: COMERICA INC
Filing Date: 2025-11-25
Form: DEFM14A
Chunk 290
---
 horses, worms, viruses, or other Software routines that permit or cause unauthorized access to, or disruption, impairment, disablement, or destruction of, any Software, data or other materials
(“”), in each case of the foregoing, including protection against any (x) unauthorized or unlawful operations performed upon Personal Data or IT Assets, or (y) other act or omission that compromises the
security or confidentiality of Personal Data or IT Assets (each of clauses (i) and (ii), a “”). To the knowledge of Comerica, Comerica and its Subsidiaries have not experienced any Security Breach (A) that
would, individually or in the aggregate,

A-19

reasonably be expected to have a Material Adverse Effect on Comerica or (B) in a manner that has resulted or is reasonably likely to result in a duty to notify any Governmental Entity or any
person. To the knowledge of Comerica, there are no data security or other technological vulnerabilities with respect to IT Assets owned or used by Comerica or its Subsidiaries that, individually or in the aggregate, would reasonably be expected to
have a Material Adverse Effect on Comerica. To the knowledge of Comerica, since December 31, 2022, neither Comerica nor any of its Subsidiaries has been the subject of any inquiry or action of any Governmental Entity with respect to any
unauthorized processing of Personal Data or material violation of any Privacy Law. The IT Assets owned or used by Comerica or its Subsidiaries are free from any Malicious Code and have not, since December 31, 2022, experienced any failure,
malfunction or unscheduled outage, in each case, that would, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect on Comerica.

(e) Without limitation, none of Comerica or any of its Subsidiaries, or to the knowledge of Comerica, any director, officer, employee, agent
or other person acting on behalf of Comerica or any of its Subsidiaries has, directly or indirectly, (i) used any funds of Comerica or any of its Subsidiaries for unlawful contributions, unlawful gifts, unlawful entertainment or other expenses
relating to political activity, (ii) made any unlawful payment to foreign or domestic governmental officials or employees or to foreign or domestic political parties or campaigns from funds of Comer