Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 36

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 36
---
 and organizational measures and the bank may be required to devote significant resources to data protection on an ongoing basis. In the event that the bank is found to have not met the standards required by the GDPR, the bank may incur damage to its reputation and the imposition by data protection supervisory authorities of significant fines or restrictions on its ability to process personal data, and the bank may be required to defend claims for compensation brought by affected individuals, all of which could have a material adverse effect on the bank. More generally, there continues to be scrutiny from both EU and non-EU authorities over financial services firms’ compliance with anti-money laundering (AML) and counter-terrorism financing rules, which has led to a number of regulatory proceedings, criminal prosecutions and other enforcement action against firms in various jurisdictions. Risks Relating to the Bank’s Internal Control Environment A robust and effective internal control environment and adequate infrastructure (comprising people, policies and procedures, controls testing and IT systems) are necessary to enable Deutsche Bank to conduct its business in compliance with the laws, regulations and associated supervisory expectations applicable to the bank. The bank has identified the need to strengthen its internal control environment and infrastructure and has been required to do so in certain areas by its regulators. The bank has undertaken initiatives to accomplish this. If these initiatives are not successful or proceed too slowly, Deutsche Bank’s reputation, regulatory position and financial condition may be materially adversely affected, and its ability to achieve the bank’s strategic ambitions may be impaired. Deutsche Bank’s businesses are highly dependent on its ability to maintain a robust and effective internal control environment. This is needed for the bank to process and monitor, on a daily basis, a wide variety of transactions, many of which are highly complex and occur at high speeds, volumes and frequencies, and across numerous and diverse markets and currencies. Such a robust and effective control environment is in turn dependent on the sufficiency of the bank’s infrastructure to support that environment. This infrastructure consists broadly of internal policies and procedures, testing protocols, and the IT systems and employees needed to enforce and enable them. An effective control environment is dependent on infrastructure systems and procedures that cover the processing and settling of transactions; the valuation of assets; the identification, monitoring, aggregation, measurement and reporting of risks and positions against various metrics; the evaluation of counterparties and customers for legal, regulatory and compliance purposes; the escalation of reviews; and the taking of mitigating and remedial actions where necessary. They are also critical for regulatory reporting and other data processing and compliance activities.

| 25 |

| Deutsche