Omnicom Group (OMC) Risk Analysis

The operational and financial performance of our international businesses are affected by global and regional economic conditions, competition for new business and personnel, currency exchange rate fluctuations, political conditions, differing tax and regulatory environments and other risks associated with extensive international operations. We conduct business in numerous high-growth markets and developing countries. Such countries tend to have longer billing collection cycles, currency repatriation restrictions and commercial laws that can be undeveloped, vague, inconsistently enforced, retroactively applied or frequently changed. Our operations are also subject to the United States Foreign Corrupt Practices Act and other anti-corruption and anti-bribery laws and regulations. These laws and regulations are complex and stringent, and any changes and violations could have an adverse effect on our business and reputation. Our business, results of operations and financial condition can be adversely affected if we are unable to effectively operate, or manage the risks associated with operating in these markets and countries. For financial information by geographic region, see Notes 3 and 8 to the consolidated financial statements.

In 2024, our international operations represented approximately 48% of our revenue. We operate in all major international markets including the Euro Zone, the United Kingdom, or the U.K., Australia, Brazil, Canada, China and Japan. Our agencies transact business in more than 50 different currencies. Substantially all of our foreign operations transact business in their local currency and, accordingly, their financial statements are translated into U.S. Dollars. As a result, both adverse and beneficial fluctuations in foreign exchange rates impact our business, results of operations and financial condition. In addition, funds transferred to the United States can be adversely or beneficially impacted by changes in foreign currency exchange rates.

Government agencies and consumer groups directly or indirectly affect or attempt to affect the scope, content and manner of presentation of marketing and communications services, through regulation or other governmental action, which could affect our ability to meet our clients' needs. Such regulation may seek, among other things, to limit the tax deductibility of advertising expenditures by certain industries or for certain products and services. In addition, there has been a tendency on the part of businesses to resort to the judicial system to challenge advertising practices and claims, which could cause our clients affected by such actions to reduce their spending on our services, and from time to time we may be subject to claims, lawsuits, regulatory proceedings or government investigations into whether our business practices comport with applicable law. Regardless of the merit of such claims, lawsuits, proceedings or investigations, defending against them could cost us a significant amount of time and money and result in negative publicity. Any regulatory or judicial action that affects our ability to meet our clients' needs or reduces client spending on our services could have a material adverse effect on our business, results of operations and financial condition.

Securities class action lawsuits and derivative lawsuits are often brought against public companies that have entered into acquisition, merger or other business combination agreements like the Merger Agreement. Even if such a lawsuit is without merit, defending against these claims can result in substantial costs and divert management time and resources. An adverse judgment could result in monetary damages, which could have a negative impact on our liquidity and financial condition. Lawsuits that may be brought against us, IPG, or our or their directors could also seek, among other things, injunctive relief or other equitable relief, including a request to rescind parts of the Merger Agreement already implemented and to otherwise enjoin the parties from consummating the Merger. One of the conditions to the closing of the Merger is that no Law or Order (each as defined in the Merger Agreement) is promulgated, entered, enforced, enacted or issued by any governmental entity of competent jurisdiction in which we, IPG, or our or their subsidiaries have material assets or material business operations, which prohibits, restrains or makes illegal the consummation of the Merger. Consequently, if a plaintiff is successful in obtaining an injunction prohibiting completion of the Merger, that injunction may delay or prevent the Merger from being completed within the expected timeframe or at all, which may adversely affect our businesses, results of operations, financial condition and cash flows. In addition, either we or IPG may terminate the Merger Agreement if any Law or Order has been promulgated, entered, enforced, enacted or issued by any governmental entity of competent jurisdiction in which we, IPG, or our or their subsidiaries have material assets or material business operations, which is in effect and permanently prohibits, restrains, enjoins or makes illegal the consummation of the Merger, so long as our or Merger Sub's (in the case of a termination by us) or IPG's (in the case of a termination by IPG) material breach of any obligations under the Merger Agreement has not been the primary cause of, or resulted in, the enactment or issuance of such Law or Order, decree, ruling, injunction or other action. There can be no assurance that any of the defendants would be successful in the outcome of any potential future lawsuits. The defense or settlement of any lawsuit or claim that remains unresolved at the time the Merger is completed may adversely affect the combined company's business, results of operations, financial condition and cash flows.

We rely on our own and third-party service providers' information technology systems and infrastructure to connect with our clients, people and others, and to collect, store, transfer, process and use business, personal and financial data. We face cybersecurity risks that threaten the confidentiality, integrity and availability of our information technology systems or data stored on such systems. Additionally, hardware, software applications or services that we develop or procure from third parties may contain defects in design or manufacture or other problems that could compromise the confidentiality, integrity or availability of our information technology systems or data stored on such systems. Cybersecurity threats and attacks, including computer viruses, advanced persistent threats, malware, hacking, ransomware or other destructive or disruptive activities or software, are constantly evolving and pose a risk to our information technology systems and data. There can be no assurance that our cybersecurity risk management program and processes will be fully implemented, complied with or effective in detecting and preventing such threats or protecting our information technology systems or data. Security breaches, improper use of our systems and unauthorized access to our data and information by employees and others may pose a risk that data may be exposed to unauthorized persons. Such occurrences could adversely affect our business, results of operations, financial condition and reputation and could result in litigation or regulatory action, as discussed below. Also, we have acquired or may acquire companies that have cybersecurity vulnerabilities or different cybersecurity risk management processes, which may increase our risks from cybersecurity threats and attacks. In addition, we make extensive use of third-party service providers, including cloud providers, that store, transmit and process data. These third-party service providers are also subject to malicious attacks and cybersecurity threats that could adversely affect our business, results of operations, financial condition and reputation and could result in litigation or regulatory action, as discussed below. Currently, many of our agencies operate in a flexible working environment that allows for partial remote work. The number of personnel working remotely varies by market and is dependent on local conditions. When our employees work remotely, the risk of cybersecurity incidents and attacks and unauthorized exposure of sensitive business and client advertising and marketing information, as well as personal data or information, increases. We and certain of our third-party providers regularly experience cyberattacks and other incidents, and we expect such attacks and incidents to continue. For example, we have experienced cybersecurity incidents that resulted in the disruption of our information technology systems and required us to engage third parties to remediate the issues. While, to date, no incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. Any attack or incident could result in legal claims or proceedings (such as class actions), regulatory investigations and enforcement actions, fines and penalties, negative reputational impacts, and/or significant incident response, system restoration or remediation and future compliance costs, which could materially adversely affect our business, results of operations and financial condition. We also cannot guarantee that any such costs or losses will be covered by our existing insurance policies or that applicable insurance will be available to us in the future on economically reasonable terms or at all.

We continually evaluate the use of AI in our business processes, and in 2023, we entered into strategic partnerships with leading AI technology companies, enabling enhanced product and service capabilities in generative AI. In recent years, the use of AI has come under increased scrutiny. This technology, which is a new and emerging technology in early stages of commercial use, presents a number of risks inherent in its use, including ethical considerations, public perception and reputation concerns, intellectual property protection, regulatory compliance and privacy and data security concerns, all of which could have a material adverse effect on our business, results of operations and financial condition. Further, new laws, guidance and decisions in this area may limit our ability to use AI or decrease its usefulness. As a result, we cannot predict future developments in AI and related impacts to our business and our industry. If we fail to increase our capabilities in generative AI, or if we are unable to successfully adapt to new developments related to the risks and challenges associated with AI, demand for our services could be reduced, and our business, results of operations and financial condition could be negatively impacted.

In 2024, our largest client represented approximately 2.7% and our 100 largest clients represented approximately 54% of our revenue. Clients generally are able to reduce or cancel current or future spending on marketing and communications services at any time on short notice for any reason. A significant reduction in spending on our services by our largest clients, or the loss of several of our largest clients, if not replaced by new clients or an increase in business from existing clients, would adversely affect our revenue and could have a material adverse effect on our business, results of operations and financial condition.

We operate in a highly competitive industry. Key competitive considerations for retaining existing clients and winning new clients include our ability to develop solutions that meet client needs in a rapidly changing environment, the quality and effectiveness of our services and our ability to serve clients efficiently, particularly large multinational clients, on a broad geographic basis. From time to time, clients may put their marketing and communications business up for competitive review. We have won and lost accounts as a result of these reviews. To the extent that we are not able to remain competitive or retain key clients, our revenue may be adversely affected, which could have a material adverse effect on our business, results of operations and financial condition.

Our ability to acquire new clients and retain existing clients may, in some cases, be limited by clients' perceptions of, or policies concerning, conflicts of interest arising from our other client relationships. If we are unable to maintain multiple agencies to manage multiple client relationships and avoid potential conflicts of interests, our business, results of operations and financial condition may be adversely affected. As a service business, our ability to attract and retain key personnel is an important aspect of our competitiveness. If we are unable to attract and retain key personnel, our ability to provide our services in the manner clients have come to expect may be adversely affected, which could harm our reputation and result in a loss of clients, which could have a material adverse effect on our business, results of operations and financial condition.