Company: FCNCB
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000798941-25-000010
Chunk: 281

Company: FIRST CITIZENS BANCSHARES INC /DE/
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1A
Chunk 281
---
 for additional information. These laws and others impact, among other things, our operations, taxes, corporate governance, executive compensation and financial accounting and reporting.

Compliance with the extensive laws and regulations applicable to BHCs and banks can be difficult and costly. In addition, changes to statutes, regulations, or regulatory policies, including changes in interpretation or implementation of statutes, regulations, or policies, could affect us in substantial and unpredictable ways, including increased compliance costs that may limit our ability to pursue business opportunities and result in a material adverse impact on our financial condition and results of operations. Such changes could subject us to additional compliance and other costs, limit the types of financial services and products we may offer or business opportunities we may pursue, increase the ability of nonbanks to offer competing financial services and products, among other things, any of which may result in a material adverse impact on our financial condition and results of operations. Failure to comply with laws, regulations, or policies could result in adverse regulatory action (including potential limitations on our future acquisitions or activities, or requirements to forfeit assets), civil money penalties, or reputation damage. In addition to the other limitations described herein, the ability of our bank and its subsidiaries to guarantee our debt may be restricted and certain regulatory requirements may be imposed that may be more restrictive and may result in greater or earlier charges to earnings or reductions in our capital under United States Generally Accepted Accounting Principles (“GAAP”).

Information security and data privacy are areas of heightened legislative and regulatory focus.

Data privacy and security risks have become the subject of increasing legislative and regulatory focus in recent years. The federal banking agencies have proposed regulations that would enhance cyber risk management standards, which apply to a wide range of LFIs and their third-party service providers, including us and FCB, and would focus on cyber risk governance and management, management of internal and external dependencies, and incident response, cyber resilience, and situational awareness. Virtually all states have also proposed or adopted information security legislation and regulations, which require, among other things, notification to affected individuals and/or attorneys general, in the event of a data breach. 

38

We collect, process, maintain, and store personal information of customers, prospects and employees. We employ data security and technology solutions to support adherence to our data protection obligations and risk mitigation efforts. The collection, sharing, use, disclosure, and protection of these types of information are governed by federal and state law. An increasing number of states have actual or proposed privacy and information security regulations, the intent of which is to