Company: SFNC
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001628280-25-008639
Chunk: 28

Company: SIMMONS FIRST NATIONAL CORP
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1
Chunk 28
---
 commerce. The Dodd-Frank Act expanded regulation in this space to apply to unfair, deceptive or abusive acts or practices (“UDAAP”) and delegated to the CFPB supervision and enforcement authority for UDAAP with respect to our subsidiary bank and rulemaking authority with respect to UDAAP. These laws have been used to, among other things, address certain problematic practices that may not fall directly within the scope of other banking or consumer protection laws.

Financial Privacy and Data Security

The Company is subject to federal laws, including the Gramm-Leach-Bliley Act of 1999 (“GLBA”), and certain state laws containing consumer privacy protection and data security provisions. These federal and state laws, and the rules and regulations promulgated thereunder, impose restrictions on our ability to disclose non-public information concerning consumers to nonaffiliated third parties. These laws, rules and regulations also mandate the distribution of privacy policies to consumers, as well as provide consumers an ability to prevent our disclosure of their information under certain circumstances. 

In addition, the GLBA requires that financial institutions, such as our subsidiary bank, implement comprehensive written information security programs that include administrative, technical, and physical safeguards to protect consumer information and data. Further, pursuant to interpretive guidance issued under the GLBA and certain state laws, financial institutions are also generally required to notify customers of security breaches that result in unauthorized access to their nonpublic personal information. 

Although these laws and regulations impose compliance costs and create obligations and, in some cases, reporting obligations, and compliance with all of the laws, regulations, and reporting obligations may require significant resources of the Company and our subsidiary bank, these laws and regulations do not materially affect our products, services or other business activities.

Anti-Money Laundering and Anti-Terrorism

Simmons Bank is subject to the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (also known as the “PATRIOT Act”), the Bank Secrecy Act (“BSA”) and rules and regulations of the Office of Foreign Assets Control (“OFAC”). 

Under Title III of the PATRIOT Act, all financial institutions are required to take certain measures to identify their customers, prevent money laundering, monitor customer transactions, and report suspicious activity to U.S. law enforcement agencies. Financial institutions also are required to respond to requests for information from federal banking agencies and law enforcement agencies. Information sharing among financial institutions for the above purposes is encouraged by an exemption granted to complying financial institutions