The Company is required to comply with anti-corruption (including anti-bribery, anti-money-laundering, sanctions, terror finance and anti-terrorism) laws, rules and regulations in the jurisdictions in which Ericsson does business. In addition, some of the international locations in which we operate lack a developed legal system and have elevated levels of corruption affecting many aspects of conducting business. From time to time, the Company investigates potential instances of corruption, including potential violations of anti-bribery, anti-moneylaundering, sanctions, terror finance and anti-terrorism laws, rules and regulations. While Ericsson strives for compliance, the Company has not been in compliance with all such laws, rules and regulations in the past and cannot assure that all past violations have been addressed or that additional violations will not occur in the future. For example, the Company has previously acknowledged publicly that it had failed to implement sufficient internal controls, including internal controls designed to deter and detect corruption. Over the last years, Ericsson has made significant investments in compliance which have enhanced the Company’s ability to uncover and address past misconduct. We have policies and procedures designed to assist us and our personnel in complying with applicable laws, rules and regulations but our employees, subcontractors and agents have taken, and may from time to time take, actions that violate these requirements. Actions by Ericsson’s employees, or by third party intermediaries acting on the Company’s behalf in violation of these laws, rules or regulations whether carried out in the US or elsewhere in connection with the conduct of Ericsson’s business may expose the Company to significant liability for violations of such laws, rules or regulations and may have a material adverse effect on the Company, including its reputation, business, financial condition, results of operations (EBIT), cash flows, or prospects. For example, in December 2019, Ericsson resolved the previously disclosed investigations by the DOJ and SEC regarding the Company’s compliance with the FCPA. The resolution with the DOJ provided for: a DPA with a three-year term and a guilty plea by Ericsson’s Egyptian subsidiary to one criminal charge of violating the anti-bribery provisions of the FCPA. The resolution with the SEC provided for: consent to the entry of a judgment to resolve civil claims related to allegations of violations of the anti-bribery, books and records, and internal controls provisions of the FCPA. The Company paid fines, penalties and pre-judgment interest to the DOJ and SEC totalling USD 1,060,570,432. Ericsson also agreed to the retention of an independent compliance monitor for the term of three years pursuant to the resolutions with both the DOJ and SEC. Under Ericsson’s DPA with the DOJ, the Company admitted to the conduct described in the statement of facts attached to the DPA, and the DOJ agreed to defer prosecution of Ericsson for the three-year term of the DPA, after which period the charges will be dismissed with prejudice if Ericsson does not violate the terms of the DPA. In October 2021, Ericsson received correspondence from the DOJ stating that it has determined that Ericsson breached its obligations under the DPA by failing to provide certain documents and factual information and that Ericsson will have the opportunity to respond in writing to explain the nature and circumstances of such breach, as well as the actions Ericsson has taken to address and remediate the situation. The Company also publicly disclosed a 2019 internal investigation, that included a review of the conduct of Ericsson employees, vendors and suppliers in Iraq during the period 2011–2019. The 2019 investigation, which was supported by external legal counsel, conducted over the course of a year, and involved the collection and review of a large amount of information, found serious breaches of compliance rules and the Company’s Code of Business Ethics. It identified evidence of corruption-related misconduct, including: Making a monetary donation without a clear beneficiary; paying a supplier for work without a defined scope and documentation; using suppliers to make cash payments; funding inappropriate travel and expenses; and improper use of sales agents and consultants. In addition, it found violations of Ericsson’s internal financial controls; conflicts of interest; non-compliance with tax laws; and obstruction of the investigation. The investigating team also identified payments to intermediaries and the use of alternate transport routes in connection with circumventing Iraqi Customs, at a time when terrorist organizations, including ISIS, controlled some transport routes. Investigators could not determine the ultimate recipients of these payments. Payment schemes and cash transactions that potentially created the risk of money laundering were also identified. The investigation could not identify that any Ericsson employee was directly involved in financing terrorist organizations. As a result of the investigation, several employees were exited from the company and multiple other disciplinary and other remedial actions were taken. This included closing gaps in our internal processes in the region and incorporating lessons from the investigation into our ethics and compliance program. Furthermore, Ericsson terminated a number of third-party relationships and prioritized the Iraq country business for enhanced training and awareness activities, policies and procedures, and third-party management processes. Ericsson is continuing to work with external counsel to review the findings and remediation resulting from the 2019 investigation to identify any additional measures that the company should take. On March 1, 2022, the DOJ informed Ericsson that the disclosure made by the Company prior to the DPA about its internal investigation into conduct in Iraq in the period 2011 until 2019 was insufficient. Furthermore, it determined that the Company breached the DPA by failing to make subsequent disclosure related to the investigation postDPA. The company is in communication with the DOJ regarding the facts and circumstances of the breach determination and is committed to co-operating with the DOJ to resolve the matter. If the DOJ determines that the Company violated the terms of the DPA for these or any other reason, the DOJ may in its sole discretion commence prosecution, including, but not limited to, for the charged conspiracy to violate the anti-bribery and books and records and internal controls provisions of the FCPA that were included in the information filed in conjunction with the DPA. In such circumstances, the DOJ would be permitted to rely upon the admissions Ericsson made in the DPA and would benefit from Ericsson’s waiver of certain procedural and evidentiary defenses. In addition, the DOJ may in its sole discretion decide to extend the term of the DPA. Under Ericsson’s consent judgment with the SEC, Ericsson is permanently enjoined from violating the anti-bribery and books and records and internal controls provisions of the FCPA. Failure to comply with this injunction or other violations of the consent judgment could result in the imposition of civil or criminal penalties, a new enforcement action, or both. Any criminal prosecution or civil or criminal penalties imposed as a result of non-compliance for any reason with the DPA or consent judgment could have a material adverse effect on the Company, including its reputation, business, financial condition, results of operations (EBIT), cash flows, or prospects. Ericsson may also face other potentially negative consequences relating to the investigations by, and settlements with, the DOJ and SEC, or to other potential investigations. Enforcement authorities in the US or elsewhere, including the SEC, the DOJ or OFAC, could investigate us for additional possible violations of applicable anti-corruption (including anti-bribery, anti-money laundering, sanctions, terror finance and anti-terrorism) laws, rules or regulations of which we are aware or unaware at any time. Such violations could result in severe reputational damage, and have a materially adverse effect on Ericsson, including its reputation, business, financial condition, results of operations (EBIT), cash flows, or prospects and could constitute a violation of the DPA or the consent judgment with the SEC. Neither the DPA nor the consent judgment prevents the DOJ, SEC or any other authorities from carrying out investigations with respect to facts not covered in the agreements or in other jurisdictions, or prevents other authorities from carrying out investigations related to these or other matters. It has been reported that Swedish authorities have initiated an investigation into the conduct that resulted in the above-mentioned resolutions with the DOJ and SEC. Similarly, the resolutions with the DOJ and SEC do not foreclose third parties, such as competitors, customers, suppliers, or shareholders, from commencing litigation related to these or other matters. There can be no assurance that the remedial measures described above and any others Ericsson may take in the future will be effective or that there will not be a finding of material weakness in Ericsson’s internal controls. Any one or more of the foregoing could have a material adverse effect on the Company, including its reputation, business, financial condition, results of operations (EBIT), cash flows, or prospects. Additionally, any ongoing media or governmental interest in investigations and resolutions or additional company investigations that we are currently undertaking or may undertake in the future could result in the discovery of additional facts, impact the public perception of Ericsson and result in reputational harm and other negative consequences. For example, customers or suppliers may reconsider their relationships with the Company, or governmental and regulatory authorities in the relevant jurisdictions or elsewhere could seek to penalize the Company or place restrictions on its operations or ability to participate in public tenders. Harm to reputation, or any resulting disruption in customer or supplier relationships, could have a material adverse impact on Ericsson, including its reputation, business, financial condition, results of operations (EBIT), cash flows, or prospects.