Company: NEWTP
Filing Date: 2025-08-13
Form Type: 424B2
Source: 0001587987-25-000144
Chunk: 90

Company: NewtekOne, Inc.
Filing Date: 2025-08-13
Form: 424B2
Chunk 90
---
 to industry best practices, with respect to these topics. For example, they will evaluate our security of user and customer credentials, business continuity planning, and the ability to identify and thwart cyber-attacks.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. For example, the California Privacy Rights Act of 2020 became fully operative on January 1, 2023. We expect this trend of state-level activity in those areas to continue, and are continually monitoring developments in the states in which our clients are located.

<div align='center'>14</div>

Limitations on Transactions with Affiliates and Loans to Insiders

Banks are subject to restrictions on their ability to conduct transactions with affiliates and other related parties under federal banking laws. For example, federal banking laws impose quantitative limits, qualitative requirements, and collateral standards on certain extensions of credit and other transactions by an insured depository institution with, or for the benefit of, its affiliates. In addition, most types of transactions by an insured depository institution with, or for the benefit of, an affiliate must be on terms substantially the same or at least as favorable to the insured depository institution as if the transaction were conducted with an unaffiliated third party. Federal banking laws also impose restrictions and procedural requirements in connection with the extension of credit by an insured depository institution to directors, executive officers, principal stockholders (including the Company) and their related interests. In addition, purchases and sales of assets between an insured depository institution and its executive officers, directors, and principal stockholders may also be limited under such laws. The Sarbanes-Oxley Act generally prohibits loans by public companies to their executive officers and directors. However, there is a specific exception for loans by financial institutions, such as Newtek Bank, to its executive officers and directors that are made in compliance with federal banking laws.

Acquisition of a Significant Interest in the Company

Banking laws impose various regulatory requirements on parties that may seek to acquire a significant interest in the Company. For example, the Change in Bank Control Act of 1978 would generally require that any party file a formal notice with, and obtain non-objection of, the Federal Reserve prior to acquiring (directly or indirectly, whether alone or acting in concert with any