Fortrea Holdings Inc. (FTRE) Risk Analysis

Even though we do not and will not order healthcare services or bill directly to Medicare, Medicaid, or other third-party payers, certain federal, state, and foreign healthcare laws and regulations pertaining to healthcare fraud and abuse, including anti-kickback and anti-inducement laws related to the furnishing of healthcare items and services, are and will be applicable to our business. Such laws also include "Sunshine Act" legislation in various jurisdictions that require us to track and report on payments and other transfers of value to certain healthcare professionals, providers and institutions. Because of the breadth of these laws and the narrowness of available statutory and regulatory exceptions, it is possible that some of our business activities could be subject to challenge under one or more of such laws. If we or our operations are found to be in violation of any of the laws described above or any other governmental regulations that apply to us, we may be subject to penalties, including civil and criminal penalties, damages, fines, imprisonment of employees or others acting on our behalf, and the curtailment or restructuring of our operations, any of which could materially adversely affect our ability to operate our business, our financial results, and our reputation.

In contracting to work on drug development trials and studies, we face a range of potential liabilities, including: - Errors or omissions that create harm to clinical trial participants during a trial or to consumers of a drug after the trial is completed and regulatory approval of the drug has been granted;- General risks associated with clinical pharmacology facilities and mobile clinical services, including negative consequences from specimen collection and processing, the administration of drugs to clinical trial participants, or the professional malpractice of clinical pharmacology physicians, clinical pharmacology staff or mobile clinical services staff; and - Errors and omissions during a trial or study that may undermine the usefulness of a trial or study, or data from the trial or study or that may delay the entry of a drug to the market. We contract with investigators to conduct, and in our clinical research units we directly conduct, the clinical trials to test new drugs on clinical trial participants. These tests can create a risk of liability for personal injury or death to clinical trial participants resulting from negative reactions to the drugs administered or from professional malpractice by third party investigators or our staff conducting the clinical trials. We also contract with third parties to perform certain other services related to clinical trials and their inability to adequately perform the services in compliance with applicable laws and regulations or the terms of our agreements with them may create additional risk of liability. We assume representative roles, including, but not limited to, European Union Legal Representative for Clinical Trials, U.K. Legal Representative for Clinical Trials, local clinical trial sponsor, and Qualified Person for Pharmacovigilance, in connection with the clinical trials we manage and these roles may create direct risks relating to patient claims, customer claims, or regulatory authority action. While we endeavor to include in our contracts provisions entitling us to be indemnified and entitling us to a limitation of liability, these provisions are not always successfully obtained and, even if obtained, do not uniformly protect us against liability arising from certain of our own actions. We may be sued in the future by individuals alleging personal injury due to their participation in clinical trials and seeking damages from us under a variety of legal theories. Although we maintain the types and amounts of insurance we view as customary in the industries and countries in which we operate, if we are required to pay damages or incur defense costs in connection with any personal injury claim that is outside the scope of indemnification agreements we have with our clients or if our liability exceeds the amount of any applicable indemnification limits or available insurance coverage, our financial condition, results of operations and reputation could be materially and adversely affected. We maintain professional liability insurance. In the future, we may not be able to get adequate insurance for these types of risks at reasonable rates, and the coverage provided by such insurance may not be adequate for all claims made and such claims may be contested by applicable insurance carriers. We could be materially and adversely affected if we were required to pay damages or bear the costs of defending any claim that is not covered by a contractual indemnification provision, or in the event that a party which must indemnify us does not fulfill its indemnification obligations, or in the event that we are not successful in limiting our liability or in the event that the damages and costs exceed our insurance coverage or are excluded from coverage. We may also be required to agree to contract provisions with clinical trial sites or its customers related to the conduct of clinical trials, and we could be materially and adversely affected if we were required to indemnify a site or customer against claims pursuant to such contract terms. There can be no assurance that we will be able to maintain sufficient insurance coverage on acceptable terms.

We are subject to taxes in the U.S. and foreign jurisdictions. Our provision for income taxes is based on a jurisdictional mix of earnings, statutory tax rates and enacted tax rules, including transfer pricing. Due to economic and political conditions, tax rates in various jurisdictions may be subject to significant change. As a result, our future effective tax rates could be affected by changes in the mix of earnings in countries with differing statutory tax rates, changes in the valuation of deferred tax assets and liabilities, or changes in tax laws or their interpretation. These changes may adversely impact our effective tax rate and harm our financial position and results of operations. We are subject to examination by the IRS and other domestic and foreign tax authorities and government bodies. We regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our income tax and other tax reserves. If our reserves are not sufficient to cover these contingencies, such inadequacy could materially adversely affect our business, prospects, financial condition, operating results, and cash flows. Additionally, the Organization for Economic Cooperation and Development has issued certain guidelines regarding base erosion and profit shifting. As these guidelines continue to be formally adopted by separate taxing jurisdictions, they may have an impact on our tax rate and the way in which we operate.

If we do not comply with existing or new laws and regulations related to protecting the privacy and security of personal or health information, we could be subject to monetary fines, civil penalties or criminal sanctions. In the U.S., we may obtain health information from third parties (e.g., healthcare providers who sponsor trials) that are subject to privacy and security requirements under the Health Insurance Portability and Accountability Act of 1996, the Health Information Technology for Economic and Clinical Health Act, and their implementing regulations, collectively referred to as "HIPAA". Although we are not directly subject to HIPAA, we could be subject to criminal penalties if we knowingly obtain, use, or disclose individually identifiable health information maintained by a HIPAA covered entity in a manner that is not authorized or permitted by HIPAA. HIPAA generally requires that healthcare providers and other covered entities obtain written authorizations from patients prior to disclosing protected health information of the patient (unless an exception to the authorization requirement applies). If authorization is required and the patient fails to execute an authorization or the authorization fails to contain all required provisions, then we may not be allowed access to and use of the patient's information and our research support efforts could be impaired or delayed. Furthermore, use and disclosure of protected health information that is provided to us pursuant to a valid patient authorization is subject to the limits set forth in the authorization. Moreover, patients about whom we or our partners obtain information, as well as third parties who share this information with us, may have contractual rights that limit our ability to use and disclose the information. In addition, HIPAA does not replace federal, state, international or other laws to which we may be subject that may grant individuals even greater privacy protections. Federal and state laws that protect the privacy and security of patient information may be subject to enforcement and interpretations by various governmental authorities and courts, resulting in complex compliance issues. For example, we could incur damages under state laws, including pursuant to an action brought by a private party for the wrongful use or disclosure of health information or other personal information. In the past few years, numerous U.S. states-including California, Virginia, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee and Texas-have enacted or proposed comprehensive privacy laws, reflecting a trend toward more stringent privacy legislation in the U.S. For example, the California Consumer Privacy Act ("CCPA"), which became effective as of January 2020, creates individual privacy rights for California consumers and increases the privacy and security obligations of entities handling certain personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. While the majority of provision went into effect on January 1, 2023, the enforcement of the California Privacy Rights Act (the "CPRA") began as of July 1, 2023, in California. The CPRA imposes additional data protection obligations on covered businesses, including additional consumer rights processes, limitations on data uses, new audit requirements for higher risk data, and opt outs for certain uses of sensitive data. It also creates a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. As such, additional compliance investment and potential business process changes may still be required. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. In the event that we are subject to or affected by the CCPA, the CPRA, or other domestic comprehensive privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition. We may also be required to comply with the data privacy and security laws of other countries in which we operate or with which we transfer and receive data. For example, in the European Economic Area, we are subject to the EU General Data Protection Regulation, and in the U.K., we are subject to the U.K. data protection regime consisting primarily of the GDPR and the U.K. Data Protection Act 2018, respectively, which include a range of compliance obligations for subject companies and imposes penalties for noncompliance of up to the greater of €20 million or 4% of worldwide revenue. We have established processes and frameworks to manage compliance with the GDPR. Potential fines and penalties in the event of a violation of the GDPR could have a material adverse effect on our business and operations. In addition, similar data protection regulations addressing access, use, disclosure and transfer of personal data have been enacted or updated in regions where we do business, including in Asia, Latin America, and Europe. We expect to make changes to our business practices and to incur additional costs associated with compliance with these evolving and complex regulations. In addition to data protection laws and regulations, government agencies are considering (or are adopting) other laws, regulations and guidelines that impact the processing of personal information. For example, the evolving landscape surrounding the use of AI and online advertising may lead to additional compliance costs and could increase our overall risk. Our employees and personnel may use generative AI technologies to perform their work, and the disclosure and use of personal data in generative AI technologies is subject to various privacy laws and other privacy obligations. Governments have passed and are likely to pass additional laws regulating generative AI. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits. If we are unable to use generative AI, it could make our business less efficient and result in competitive disadvantages.

The recruitment of physicians, also referred to as investigators, and patients for clinical trials is essential to our business. Investigators are typically located at hospitals, clinics, or other sites and supervise the administration of the investigational drug or device to patients during the course of a clinical trial. Because the successful conduct of a clinical trial at a particular site is often dependent upon the integrity, experience, and capabilities of the investigators conducting the trial, recruiting qualified investigators is critical. Patients generally include people from the communities in which the clinical trials are conducted. Several of our competitors have purchased site networks or site management organizations as a strategy for priority access to a specific site, which could put us at a competitive disadvantage. Our Clinical Development business could be adversely affected if we are unable to contract with suitable and willing investigators or recruit and enroll patients for clinical trials on a consistent basis. The expanding global nature of clinical trials increases the risk associated with attracting suitable investigators and patients, especially if these trials are conducted in regions where our resources or experience may be more limited. For example, if we are unable to engage investigators to conduct clinical trials as planned or enroll sufficient patients in clinical trials, we might need to expend additional funds to obtain access to more investigators and patients than planned or else be compelled to delay or modify the clinical trial plans, which may result in additional costs to us or cancellation of the clinical trial by our customer. If realized, these risks may also inhibit our ability to attract new business, particularly in certain regions.

We send, receive and store certain personal and financial information about our customers, suppliers, investigators and employees. Our processes for the protection of this information include the utilization of third-party service providers and vendors as well as secure data transmission and storage. A compromise in our processes or systems, or those processes and systems provided to us by third-party service providers and vendors, could adversely affect our reputation with our customers and others, as well as our results of operations, financial condition and liquidity. Such a compromise could also result in litigation against us and the imposition of fines and penalties.

We develop, maintain and license software as a service and application solutions alongside licensed technology systems to implement and manage various aspects of clinical trials. These systems are used in clinical trial randomization, investigational product supply management, DCT execution and other clinical trial functions. These systems often involve integrations with third party systems. Incorrect design, programming or validation of these systems could lead to substantial data integrity or patient safety issues potentially resulting in the invalidation of the clinical trial and/or claims against us and could otherwise adversely affect our financial results.

We have many contracts that provide for services on a fixed-price or fee-for-service with a cap basis and they may be terminated or reduced in scope either immediately or upon notice. Cancellations may occur for a variety of reasons, including: - failure of products to satisfy safety requirements;- unexpected or undesired results of the products;- insufficient clinical trial subject enrollment;- insufficient investigator recruitment;- a customer's decision to terminate the development of a product or to end a particular study; and - our failure to perform our duties properly under the contract. We bear the financial risk if these contracts are underpriced or if contract costs exceed estimates. Such underpricing or significant cost overruns could have an adverse effect on our business, results of operations, financial condition and cash flows. Although our contracts often entitle us to receive the costs of winding down the terminated projects, as well as all fees earned up to the time of termination, the loss, reduction in scope or delay of a large contract or the loss, delay or conclusion of multiple contracts could materially adversely affect us.

Building awareness of our brand is an ongoing initiative as we continue to conduct our business under the name Fortrea and certain associated brands, with the potential for new names and systems. Maintaining and continually enhancing the value of our brands is critical to the success of our business. Brand value is based in large part on customer perceptions. Success in promoting and enhancing brand value depends in large part on our ability to provide high-quality products. We may not improve upon the brand recognition associated with Labcorp and its historical or associated brands with customers, sites, suppliers, employees and candidates. If we fail to maintain and/or enhance brand recognition associated with the "Fortrea" name, it may affect our relationships with investigator sites or customers, which may adversely affect our ability to generate revenues and could impede our business in a highly competitive industry. Damage to our brand, reputation or loss of customer confidence in our brand or products could result in decreased demand for our products and have a negative impact on our business, results of operations or financial condition.

Pandemics, including the COVID-19 pandemic, and associated economic repercussions have significantly impacted our business and our operations. Other epidemics, pandemics, or widespread public health crises may impact our business and operations in the future. The possibility of epidemics or pandemics, including the spread of variants, could continue to adversely impact our business and results of operations in a number of ways, including, but not limited to: - delays or difficulties in commencing new and operating ongoing clinical trials, including intermittent challenges accessing investigative sites, delays in enrolling patients, delays in obtaining approvals from regulatory authorities, and difficulty obtaining necessary pharmaceutical and other products and supplies;- restrictions on the ability of our field teams to visit healthcare providers and difficulty securing appropriate personal protective equipment and testing and other tools required for client-facing engagements and visits to sites/healthcare providers;- diversion of healthcare resources away from the conduct of clinical trials, including the diversion of hospitals serving as our clinical trial sites and hospital staff supporting the conduct of our clinical trials, as well as the reduction of our customers' operating budgets;- interruption of key clinical trial activities, such as clinical trial site data monitoring, due to social distancing requirements, quarantine and isolation protocols or interruption of clinical trial subject visits and study procedures, which may impact the collection and integrity of study data and ability to measure clinical trial endpoints;- business disruptions at our customers;- limitations on our employee resources, including because of quarantine and isolation protocols, sickness of employees or their families or the desire of employees to avoid contact with large groups of people;- continued disruptions to our supply chain;- diversion of management resources to focus on mitigating the impacts of pandemics;- increased cybersecurity risks due to the number of employees that are working remotely in regions impacted by stay-at-home orders, increased levels of remote access creating additional opportunities for cybercriminals to exploit vulnerabilities and employees that may be more susceptible to phishing and social engineering attempts;- increased cyber-attacks, such as phishing attacks by threat actors using the attention placed on a pandemic as a method for targeting our personnel; and - strained technological resources due to the number of remote users. These and other impacts of a pandemic could also have the effect of heightening many of the other factors described in these "Risk Factors" and other parts of this Annual Report on Form 10-K. The ultimate impact depends on the severity and duration of a pandemic, including the emergence and spread of variants, the continued availability and effectiveness of vaccines and treatments, and actions taken by governmental authorities and other third parties in response to the pandemic, each of which is uncertain, rapidly changing and difficult to predict. Any of these disruptions could adversely impact our business and results of operations.

We have business and operations outside the U.S. and derive a significant portion of our revenues from international operations. Since our consolidated and combined financial statements are denominated in U.S. dollars, fluctuations in exchange rates from period to period will have an impact on reported results. In addition, we may incur costs in one currency related to our services or products for which we are paid in a different currency. To reduce our exposure to currency exchange fluctuations, we may from time to time enter into, for these or other purposes, financial swaps, or hedging arrangements, with various financial counterparties. In addition to any risks related to the counterparties, there can be no assurances that our hedging activity will be effective in insulating us from the risks associated with the underlying transactions, that we would not have been better off without entering into these hedges, or that we will not have to pay additional amounts upon settlement. As a result, factors associated with international operations, including changes in foreign currency exchange rates and our hedging activities, could significantly affect our results of operations, financial condition and cash flows.

The loss of key management personnel or the inability to attract and retain experienced and qualified employees and increased costs related to such personnel and employees could adversely affect the business. There is significant competition for qualified personnel in the CRO industry. In the future, if competition for the services of these professionals increases and, correspondingly, the cost of these professionals increases, we may not be able to continue to attract and retain individuals in our markets. Changes in key management, or the ability to attract and retain qualified personnel, as a result of increased competition for talent, wage growth, or other market factors (including costs) could lead to strategic and operational challenges and uncertainties, distractions of management from other key initiatives, and inefficiencies and increased costs, any of which could adversely affect our business, financial condition, results of operations, and cash flows.