International Paper Co (IP) Risk Factors

We operate our facilities in compliance with applicable rules and regulations and take measures to minimize the risks of disruption at our facilities. A material disruption at our corporate headquarters or one of our manufacturing facilities could prevent us from meeting customer demand, reduce our sales and/or negatively impact our financial condition. Any of our manufacturing facilities, or any of our machines within an otherwise operational facility, could cease operations unexpectedly due to a number of events, including: •fires, floods, earthquakes, hurricanes or other catastrophes (including adverse weather conditions which may be intensified by climate change); •the effect of a drought or reduced rainfall on its water supply; •the effect of other severe weather conditions on equipment and facilities; •disruption in the supply of raw materials or other manufacturing inputs; •terrorism or threats of terrorism; •information system disruptions or failures due to any number of causes, including cyber-attacks; •domestic and international laws and regulations applicable to our Company and our business partners, including joint venture partners, around the world; •unscheduled maintenance outages; •prolonged power failures; •an equipment failure; •a chemical spill or release; •explosion of a boiler or other equipment; •damage or disruptions caused by third parties operating on or adjacent to one of our manufacturing facilities; •disruptions in the transportation infrastructure, including roads, bridges, railroad tracks and tunnels; •a widespread outbreak of an illness or any other communicable disease, such as the outbreak of the COVID-19 virus, or any other public health crisis; •failure of our third party service providers and business partners to satisfactorily fulfill their commitments and responsibilities in a timely manner and in accordance with agreed upon terms; •labor difficulties; and •other operational problems. Any such downtime or facility damage could prevent us from meeting customer demand for our products and/or require us to make unplanned expenditures. If one of these machines or facilities were to incur significant downtime, our ability to meet our production targets and satisfy customer requirements could be impaired, resulting in lower sales and having a negative effect on our business and financial results.

We rely heavily on the use of certain raw materials (principally virgin wood fiber, recycled fiber, caustic soda, starch and adhesives), energy sources (principally biomass, natural gas, electricity and fuel oil) and third-party companies that transport our goods. The market price of virgin wood fiber varies based upon availability and source. The global supply and demand for recycled fiber may be affected by factors such as trade policies between countries, individual governments' legislation and regulations, and changes in the global economy. In addition, the increase in demand of products manufactured, in whole or in part, from recycled fiber, on a global basis, may cause significant fluctuations in recycled fiber prices. Energy prices, in particular prices for oil and natural gas, have fluctuated dramatically in the past and may continue to fluctuate in the future. The availability of labor and the market price for fuel may affect our costs for third-party transportation. We have recently experienced, and may continue to experience, a significant increase in various costs, including recycled fiber, energy, freight and other supply chain costs. In addition, because our businesses operate in highly competitive industry segments, we may not be able to recoup past or future increases in the costs of any raw materials, energy sources or transportation sources through price increases to our customers. Our profitability has been, and will continue to be, affected by changes in the costs and availability of such raw materials, energy sources and transportation sources.

Our operating results and business prospects could be substantially affected by risks related to the countries outside the United States in which we have manufacturing facilities or sell our products. These risks, which can vary substantially by country, may include economic or political instability, geopolitical events (such as increasing tensions between Ukraine and Russia), corruption, anti-American sentiment, social and ethnic unrest, the regulatory environment (including the risks of operating in developing or emerging markets in which there are significant uncertainties regarding the interpretation and enforceability of legal requirements), fluctuations in the value of local currency versus the U.S. dollar, repatriating cash from foreign countries to the United States, downturns or changes in economic activity (including in relation to commodity inflation), adverse tax consequences or rulings, nationalization or any change in social, political or labor conditions in any of these countries or regions impacting matters such as sustainability, environmental regulations and trade policies and agreements, could negatively affect our financial results. Trade protection measures in favor of local producers of competing products, including governmental subsidies, tax benefits and other measures giving local producers a competitive advantage over International Paper, may also adversely impact our operating results and business prospects in these countries. Likewise, disruption in existing trade agreements or increased trade friction between countries (such as in relation to the trade tensions between the United States and China), which can result in tariffs, could have a negative effect on our business and results of operations by restricting the free flow of goods and services across borders. In addition, our international operations are subject to regulation under U.S. law and other laws related to operations in foreign jurisdictions. For example, the Foreign Corrupt Practices Act prohibits U.S. companies and their representatives from offering, promising, authorizing or making payments to foreign officials for the purpose of obtaining or retaining business abroad, and the U.S. Department of Treasury’s Office of Foreign Asset Control and other non-U.S. government entities maintain economic sanctions targeting various countries, persons and entities. Failure to comply with domestic or foreign laws could result in various adverse consequences, including the imposition of civil or criminal sanctions and the prosecution of executives overseeing our international operations.

Our operations are subject to regulation under a wide variety of U.S. federal and state and non-U.S. laws, regulations and other government requirements -- including, among others, those relating to the environment, health and safety, labor and employment, data privacy, tax, trade and health care. There can be no assurance that laws, regulations and government requirements will not be changed, applied or interpreted in ways that will require us to modify our operations and objectives or affect our returns on investments by restricting existing activities and products, or subjecting us to increased costs. For example, as part of our business, we are subject to increasingly stringent federal, state, local and international laws governing the protection of the environment. We have incurred significant capital, operating and other expenditures complying with applicable environmental laws and regulations. In addition, new environmental laws, regulations or other requirements, including with respect to GHG emissions or climate change, may cause us to incur increased and unexpected compliance costs. Moreover, there has historically been a lack of consistent climate legislation, which has created and continues to create economic and regulatory uncertainty. Our environmental expenditures include, among other areas, those related to air and water quality, waste disposal and the cleanup of contaminated soil and groundwater, including situations where we have been identified as a potentially responsible party. Moreover, we may be directly impacted by, and are working to manage, the risks and costs to us, our customers and our vendors of the effects of climate change, GHGs, and the availability of energy and water resources. These risks include the potentially adverse impact on forestlands, which are a key resource in the production of our products, increased product costs and a change in the types of products that customers purchase. There can be no assurance that future remediation requirements and compliance with existing and new laws and requirements will not require significant expenditures, or that existing reserves for specific matters will be adequate to cover future costs. We could also incur substantial fines or sanctions, enforcement actions (including orders limiting our operations or requiring corrective measures), natural resource damages claims, cleanup and closure costs, third-party claims for property damage and personal injury and reputational harm as a result of violations of, or liabilities under, environmental laws, regulations, codes and common law. The amount and timing of environmental expenditures is difficult to predict, and, in some cases, liability may be imposed without regard to contribution or to whether we knew of, or caused, the release of hazardous substances. Our global operations subject us to complex and evolving U.S and international data privacy laws and regulations, such as European’s Union General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act ("CPRA"), and China’s Personal Information Protection Law (“PIPL”) which came into effect as of November 1, 2021. These laws require the Company to comply with a range of compliance obligations regarding the handling of personal data. There are significant penalties for non-compliance including monetary fines, disruption of operations and reputational harm. Moreover, other states and governmental authorities around the world have introduced or passed, or are consider enacting, similar legislation which may impose varying standards and requirements on our data collection, use and processing activities. This increasingly restrictive and evolving regulatory environment at the international, federal and state level related to data privacy and data protection may require changes to our business practices and give rise to significantly expanded compliance burdens, costs and enforcement risks. Moreover, many of these laws and regulations are subject to uncertain application, interpretation or enforcement standards that could result in claims, changes to our business practices, data processing and security systems, penalties, increased operating costs or other impacts on our businesses. These laws often provide for civil penalties for violations, as well as private rights of action for data breaches that may increase data breach litigation. The Company proactively uses internal and external resources to monitor compliance with relevant legislation and continually evaluates and, where necessary, modifies its data processing practices and policies in order to comply with evolving privacy laws. Nevertheless, relevant regulatory authorities could determine that our data handling practices fail to address all the requirements of certain new laws, which could subject us to penalties and/or litigation. In addition, there is no assurance that our security controls over personal data, the training of employees and vendors on data privacy and data security, and the policies, procedures and practices we implemented or may implement in the future will prevent the improper handling of, disclosure of or access to personal data. Improper handling and disclosure of or access to personal data in violation of the GDPR, PIPL, the CCPA and/or of other data privacy and protection laws could harm our reputation, cause loss of consumer confidence, subject us to government enforcement actions (including fines), or result in private litigation against us, which could result in loss of revenue, increased costs, liability for monetary damages, fines and/or criminal prosecution, all of which could negatively affect our business and operating results. We are subject to taxes in the U.S. and various foreign jurisdictions, and changes in laws, regulation or interpretation of existing laws and regulations in the U.S. and other jurisdictions where we are subject to taxation, could increase our taxes and have an adverse effect on our financial results. In addition, the application of tax law is subject to interpretation and is subject to audit by taxing authorities. Additionally, administrative guidance can be incomplete or vary from legislative intent, and therefore the application of the tax law is uncertain. While we believe the positions reported by the Company comply with relevant tax laws and regulations, taxing authorities could interpret our application of certain laws and regulations differently. We are currently subject to tax audits in the U.S. and other taxing jurisdictions around the world. In some cases, we have appealed and may continue to appeal, assessments by taxing authorities in the court system. As such, tax controversy matters may result in previously unrecorded tax expenses, accelerated cash tax payments, higher future tax expenses, or the assessment of interest and penalties. For example, the 2015 timber monetization restructuring is currently under Internal Revenue Service examination. An unfavorable resolution in such current examination, future administrative procedures, or future tax litigation could result in material, accelerated cash tax payments as a result of all or a portion of the remaining $813 million deferred tax liability relating to the timber monetization becoming payable. See Note 15 Variable Interest Entities for more detail on the timber monetization and the 2015 restructuring. As such, tax controversy matters may result in previously unrecorded tax expenses, higher future tax expenses or the assessment of interest and penalties.

The Company received an opinion of tax counsel and a private letter ruling from the U.S. Internal Revenue Service (the “IRS”) regarding the qualification of the spin-off of Sylvamo Corporation and certain related transactions as a transaction that is generally tax-free to Sylvamo Corporation, the Company and the shareholders of the Company for U.S. federal income tax purposes. A tax opinion is not binding on the IRS or the courts, and there can be no assurance that the IRS or a court will not take a contrary position. In addition, the Company’s tax counsel and the IRS relied on certain representations and covenants delivered by the Company and Sylvamo Corporation in rendering such opinion and private letter ruling. If any of the representations or covenants relied upon for the tax opinion or private letter ruling become inaccurate, incomplete or not complied with by the Company, Sylvamo Corporation or any of their respective subsidiaries, the tax opinion may be invalid and the conclusions reached therein could be jeopardized. If the IRS ultimately determines that the spin-off is taxable, then the spin-off could be treated as a taxable dividend or capital gain to the Company’s shareholders for U.S. federal income tax purposes, and the Company could incur significant U.S. federal income tax liabilities. These income tax liabilities may be indemnifiable by Sylvamo Corporation pursuant to a tax matters agreement between the Company and Sylvamo. However, there can be no assurance that Sylvamo would have the resources or liquidity required to indemnify the Company for any such tax liability. Even if the spin-off otherwise qualifies for non-recognition of gain or loss under Section 355 of the Code, the spin-off may be taxable to the Company (but not the shareholders of the Company) pursuant to Section 355(e) of the Code if there is a 50% or more (by vote or value) change in ownership of either the Company or Sylvamo Corporation, directly or indirectly, as part of a plan or series of related transactions that include the spin-off. For this purpose, any acquisitions of the Company’s or Sylvamo Corporation’s common stock within two years before or after the spin-off are presumed to be part of such a plan, although the Company or Sylvamo Corporation may be able to rebut that presumption based on either applicable facts and circumstances or a “safe harbor” described in the U.S. tax regulations.

We operate in a competitive environment, both in the United States and internationally, in all of our operating segments. Our products compete with similar products produced by other forest products companies. Product innovations, manufacturing and operating efficiencies, additional manufacturing capacity, marketing, distribution and pricing strategies pursued or achieved by competitors, and the entry of new competitors in to the markets we serve could negatively impact our financial results. In addition, our products also compete, in some instances, with companies in other industries that produce substitutes for wood-fiber products, such as plastics and various types of metal, and customer shifts away from wood-fiber products toward such substitute products may adversely affect our business.

Substantially all of our businesses have experienced, and are likely to continue to experience, cycles relating to industry capacity and general economic conditions. The length and magnitude of these cycles have varied over time and by product. In addition, changes in consumer preferences may increase or decrease the demand for our fiber-based products and non-fiber substitutes. Moreover, consumer preferences are constantly changing based on, among other factors, cost, convenience and health, environmental and social concerns and perceptions. These consumer preferences may affect the prices of our products. Consequently, our financial results are sensitive to changes in the pricing and demand for our products. In addition, our results may be adversely affected if we fail to anticipate trends that would enable us to offer products that respond to changing customer preferences and technological and regulatory developments.

Our business operations rely upon securely managed information technology systems for data capture, processing, storage and reporting. We have invested in information technology security initiatives and information technology risk management, as well as business continuity and disaster recovery plans. The development and maintenance of these measures is costly and requires ongoing monitoring, testing and updating as technologies and processes change, and efforts to overcome security measures become increasingly sophisticated. The current cyber threat environment presents increased risk for all companies, including those in our industry. Like other global companies, our systems are subject to recurring attempts by third parties to access information, manipulate data or disrupt our operations, and we have experienced cyber threats and incidents, although none have been material or had a material adverse effect on our business. Despite careful security and controls design, implementation, updating and independent third party verification, our information technology systems, and those of our third party providers or joint venture partners, could become subject to employee error or malfeasance, cyber-attacks, such as ransomware and data theft, by common hackers, criminal groups or nation-state organizations or social activist ("hacktivist") organizations, geopolitical events, natural disasters, failures or impairments of telecommunications networks or other catastrophic events. In addition, the cybersecurity-related threats that we face may remain undetected for an extended period of time. Network, system, application and data breaches, and other cybersecurity incidents, could result in operational disruptions, data loss or manipulation, or information misappropriation including, but not limited to, interruption to systems availability, denial of access to and misuse of applications required by our customers to conduct business with the Company. Access to applications required to plan our operations, source materials, manufacture and ship finished goods and account for orders could be denied or misused. Theft of intellectual property or trade secrets, and loss or inappropriate disclosure of confidential company, employee, customer or vendor information, could stem from such incidents. While we have significant security processes and initiatives in place, we may be unable to detect or prevent a breach or disruption. Any significant cybersecurity incident or operational disruptions and/or misappropriation of information could result in lost sales, business delays, negative publicity, cause us to incur legal liability and increased costs to address such events and related security concerns, and have a material effect on our business. Additionally, while we have insurance coverage designed to address certain aspects of cyber risks in place, such insurance coverage may be insufficient to cover all losses or all types of claims that may arise in connection with such incidents.