cnne-20241231
UNITED STATES SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
Form 10-K
(Mark One)
For the Fiscal Year Ended December 31, 2024
or
Commission File No. 1-38300
CANNAE HOLDINGS, INC.
(Exact name of registrant as specified in its charter)
1701 Village Center Circle, Las Vegas, Nevada 89134
(Address of principal executive offices) (zip code)
(702) 323-7330
_____________________________________
(Registrant’s telephone number, including area code)
Securities registered pursuant to Section 12(b) of the Act:
Title of Each Class Trading Symbol Name of Each Exchange on Which Registered
Cannae Common Stock, $0.0001 par value CNNE New York Stock Exchange
Securities registered pursuant to Section 12(g) of the Act: None
Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes☑ No ☐
Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐No☑
Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes☑ No ☐
Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes☑ No ☐
Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or a smaller reporting company. See the definitions of "large accelerated filer," "accelerated filer," "smaller reporting company" and "emerging growth company" in Rule 12b-2 of the Exchange Act.
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act.☐
Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☑
If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐
Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐
Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☑
The aggregate market value of the shares of Cannae common stock held by non-affiliates of the registrant as of June 30, 2024, was $1,014,218,592 based on the closing price of $18.14 as reported by the New York Stock Exchange.
As of February 21, 2025 there were 62,794,359 shares of Cannae common stock outstanding.
The information in Part III hereof for the fiscal year ended December 31, 2024, will be filed within 120 days after the close of the fiscal year that is the subject of this Report.
CANNAE HOLDINGS, INC.
FORM 10-K
TABLE OF CONTENTS
PageNumber
PART I
Item 1. Business 1
Item 1A. Risk Factors 10
Item 1B. Unresolved Staff Comments 24
Item 1C. Cybersecurity 24
Item 2. Properties 25
Item 3. Legal Proceedings 25
Item 4. Mine Safety Disclosures 25
PART II
Item 6. Reserved 27
Item 7A. Quantitative and Qualitative Disclosure About Market Risk 39
Item 8. Financial Statements and Supplementary Data 40
Item 9A. Controls and Procedures 75
Item 9B. Other Information 75
Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections. 75
PART III
Item 10. Directors and Executive Officers of the Registrant 75
Item 11. Executive Compensation 75
Item 14. Principal Accountant Fees and Services 75
PART IV
Item 15. Exhibits and Financial Statement Schedules 77
i
Table of Contents
PART I
Item 1. Business
Introductory Note
The following describes the business of Cannae Holdings, Inc. and its subsidiaries. Except where otherwise noted, all references to "we," "us," "our," "Cannae," "Cannae Holdings" or the "Company," are to Cannae Holdings, Inc. and its subsidiaries, taken together.
Company Background
On November 17, 2017, Fidelity National Financial, Inc. ("FNF", NYSE: FNF) redeemed each outstanding share of its FNF Ventures ("FNFV") Group common stock, par value $0.0001, for one share of common stock, par value $0.0001, of a newly formed entity, Cannae (the "Split-Off"). In conjunction with the Split-Off, FNF contributed to us its portfolio of companies unrelated to its primary insurance and real estate operations, which included majority and minority equity interests in a number of entities and certain fixed income investments. On November 20, 2017, Cannae common stock began "regular-way" trading on The New York Stock Exchange under the "CNNE" stock symbol.
Description of Business
We primarily acquire interests in operating companies and are engaged in actively managing and operating a core group of those companies, which we are committed to supporting for the long-term. From time to time, we also seek to take meaningful equity ownership stakes where we have the ability to control or significantly influence quality companies, and we bring the strength of our operational expertise to each of our subsidiaries. We are a long-term owner that secures control and governance rights of other companies primarily to engage in their lines of business and we have no preset time constraints dictating when we sell or dispose of our businesses. We believe that our long-term ownership and active involvement in the management and operations of companies helps maximize the value of those businesses for our shareholders. Our primary assets as of December 31, 2024 include our ownership interests in Dun & Bradstreet Holdings, Inc. ("Dun & Bradstreet" or "D&B"); Alight, Inc. ("Alight"); Paysafe Limited ("Paysafe"); Sightline Payments Holdings, LLC ("Sightline"); System1, Inc. ("System1"); Black Knight Football Club US, LP ("Black Knight Football" or "BKFC"); Computer Services, Inc. ("CSI"); Watkins Holdings, LLC ("Watkins"); JANA Partners Capital, LLC and JANA Partners Management, LP (together, "JANA"); High Sierra Distillery, LP ("Minden Mill"); AmeriLife Group, LLC ("AmeriLife"); O'Charley's Holdings, LLC ("O'Charley's"); 99 Restaurants Holdings, LLC ("99 Restaurants"); and various other controlled subsidiary companies and minority equity ownership interests.
The Company conducts its business through its wholly-owned subsidiary Cannae Holdings, LLC ("Cannae LLC"), a Nevada limited liability company. The Company’s board of directors ("Board") oversees the management of the Company, Cannae LLC and its businesses, and the performance of Trasimene Capital Management, LLC ("Trasimene" or our "Manager"), through which the Company manages its business operations and those of its subsidiaries. The Company, Cannae LLC, and our Manager are party to a Management Services Agreement dated as of August 27, 2019, as amended and restated from time to time (as amended and restated, the "Management Services Agreement"). Subject at all times to the supervision and direction of the Board, the Manager is responsible for, among other things, (i) managing the day-to-day business and operations of the Company and its subsidiaries, (ii) evaluating the financial and operational performance of the Company's businesses, (iii) providing a management team to serve as executive officers of the Company and (iv) performing (or causing to be performed) any other services for and on behalf of the Company and the Subsidiaries customarily performed by executive officers and employees of a public company. On February 26, 2024, the Company, Cannae LLC and Trasimene entered into a Third Amended and Restated Management Services Agreement (the "Third Amended MSA"). The Third Amended MSA amended the Management Services Agreement primarily to (i) provide for a termination of the agreement by the Company effective June 30, 2027, (ii) reduce the management fee to a fixed amount of $7.6 million annually effective beginning July 2, 2024 and (iii) provide for payment of the termination fee under the agreement of $20 million to be paid by the Company to Trasimene in installments of $6.7 million annually over the three-year period ended July 1, 2026. The Third Amended MSA has a termination date of June 30, 2027 unless earlier terminated by the Company or Trasimene.
We believe Cannae provides our investors with a compelling opportunity to participate in the acquisition, operation and growth of businesses by a world-class management team. Fundamentally, the Company seeks to take meaningful equity ownership stakes where we have an ability to control or significantly influence quality companies that are well-positioned in their respective industries, run by best-in-class management teams and that operate in industries that have attractive organic and acquired growth opportunities. Led by William P. Foley II ("Bill Foley") and facilitated through our Manager and the Company's internal management team, we leverage our management team's operational expertise, long-term relationships and industry connections and capital sourcing capabilities to identify, structure and execute on ownership interests in companies with these characteristics.
1
Table of Contents
Our management team has a proven track record of growing industry-leading companies, including the Company's subsidiaries, and we actively and continuously work with and support management teams of the companies we own in managing, operating, and growing their businesses in order to provide value for our shareholders. Bill Foley-led management teams are responsible for the growth of publicly traded companies such as FNF, Black Knight, Inc. ("Black Knight", formerly NYSE: BKI), Dayforce, Inc. ("Dayforce", NYSE: DAY), D&B (NYSE: DNB), Fidelity National Information Services (NYSE: FIS) and F&G Annuities & Life, Inc. ("FG", NYSE: FG).
As of December 31, 2024, we had the following reportable segments:
Dun & Bradstreet. This segment consists of our 15.6% ownership interest in D&B. Cannae's Chief Executive Officer, Chief Investment Officer and Chairman of our Board, Bill Foley, and director Douglas Ammerman serve on the board of directors of D&B, with Mr. Foley serving as chairman of D&B's board of directors. Dun & Bradstreet is a leading global provider of business decisioning data and analytics. Its mission is to deliver a global network of trust, enabling clients to transform uncertainty into confidence, risk into opportunity and potential into prosperity. Clients embed D&B's trusted, end-to-end solutions into their daily workflows to inform commercial credit decisions, evaluate whether suppliers and other third parties are financially viable, reputable, compliant and resilient, enhance salesforce productivity and gain visibility into key markets. D&B's solutions support its clients’ mission critical business operations by providing proprietary and curated data and analytics to help drive informed decisions and improved outcomes.
D&B is differentiated by the scale, depth, diversity and accuracy of their constantly expanding business database, known as their "Data Cloud," that contains comprehensive information on nearly 600 million total organizations as of December 31, 2024. Access to longitudinal curated data is critical for global commerce, and with only a small percentage of the world’s businesses filing public financial statements, D&B's data is a trusted source for reliable information about both public and private businesses. By building such a set of data over time, D&B is able to establish a unique identifier that creates a single thread connecting related corporate entities allowing our clients to form a holistic view of an enterprise. This unique identifier, which D&B refers to as the D-U-N-S Number, is an organization's "fingerprint" or "Social Security Number." D&B believes that they are the only scale provider to possess both worldwide commercial credit data and comprehensive public records data that are linked together by a unique identifier allowing for an accurate assessment of public and private businesses globally.
Leveraging its commercial credit data and analytics, as well as compliance intelligence, D&B's Finance & Risk solutions are used in the critical decisioning processes of finance, risk, compliance and procurement departments worldwide. D&B is a market leader in commercial credit decisioning, with many of the top businesses in the world utilizing its solutions to make informed decisions when considering extending business loans and trade credit. D&B is also a leading provider of data and analytics to businesses looking to analyze supplier relationships and more effectively collect outstanding receivables, detect and mitigate business fraud, and assess and track their business partners' Environmental, Social and Governance ("ESG") performance and activities. We believe D&B's proprietary Paydex score, a numerical indicator based on promptness of a business's payments to its suppliers and vendors, is widely relied upon as an important measure of credit health for businesses. D&B is well positioned to provide accessible and actionable insights and analytics that mitigate risk and uncertainty, and ultimately protect and drive increased profitability for its clients.
D&B's Sales & Marketing solutions combine firmographic, personal contact, intent and non-traditional, or alternative data, such as foot traffic, website usage, social media posts, online browsing activity and shipping trackers, to assist clients in optimizing their sales and marketing strategy by cleansing customer relationship management ("CRM") data and narrowing their focus and efforts on the highest probability prospects. As global competition continues to intensify, businesses need assistance with focusing their sales pipelines into a condensed list so that they can have their best sellers target the highest probability return accounts. D&B provides invaluable insights into businesses that can help its clients grow their businesses in a more efficient and effective manner.
We account for our ownership of Dun & Bradstreet using the equity method of accounting; therefore, its results of operations do not consolidate into ours.
Alight. This segment consists of our 7.6% ownership interest in Alight. Cannae's Chief Executive Officer, Chief Investment Officer and Chairman of our Board, Bill Foley, and director Erika Meinhardt serve on the board of directors of Alight, with Mr. Foley serving as chairman of Alight's board of directors. Alight is a technology-enabled services company delivering human capital management solutions to many of the world’s largest and most complex organizations. This includes the implementation and administration of employee benefits (e.g., health, wealth and leaves benefits) solutions. Alight’s numerous solutions and services are utilized year-round by employees and their family members in support of their overall health, wealth and wellbeing goals. Participants can access their solutions digitally, including through a mobile application on Alight Worklife®, their intuitive, cloud-based employee engagement platform. Through Alight Worklife, Alight believes it is defining the future of employee benefits by providing an enterprise level, integrated offering designed to drive better outcomes for organizations and individuals.
2
Table of Contents
We account for our ownership of Alight using the equity method of accounting; therefore, its results of operations do not consolidate into ours.
Black Knight Football. This segment consists of our 47.2% ownership interest in BKFC. BKFC is a partnership led by Bill Foley that owns and operates AFC Bournemouth ("AFCB"), an English Premier League ("EPL" or the "Premier League") football club founded in 1899, and minority interests in FC Lorient ("FCL"), a French football club founded in 1926, and Hibernian FC ("Hibs"), a Scottish Premiership football club founded in 1875.
Black Knight Football is a leading, multi-club operator of football assets across the world. It aims to drive on-field and financial success of each of its clubs by leveraging its multi-club model to increase pathways to player development, acquiring and developing best-in-class players and managers at each club, building best-in-class infrastructure and facilities to drive player development and supporter engagement, and increase commercial opportunities for its clubs by focusing on on-field success and leveraging the extensive networks of owners and executive management. Black Knight Football aims to continue to expand its network of clubs through strategic acquisitions to further enhance the benefits of its multi-club model.
We account for our ownership of BKFC using the equity method of accounting; therefore, its results of operations do not consolidate into ours.
Restaurant Group. This segment consists of the operations of O'Charley's and 99 Restaurants in which we have 65.4% and 88.5% equity ownership interests, respectively. O'Charley's and 99 Restaurants and their affiliates are the owners and operators of the O'Charley's restaurant and Ninety Nine Restaurants restaurant concepts, respectively.
We account for our ownership of the Restaurant Group as a consolidated subsidiary.
Corporate and Other. This aggregation of nonreportable operating segments consists of our share in the operations of certain controlled companies and other equity interests including Paysafe, Minden Mill, CSI, Sightline, System1, JANA, Watkins and various other minority equity ownership interests.
Paysafe is a leading payments platform with an extensive track record of serving merchants and consumers in the global entertainment sectors. Its core purpose is to enable businesses and consumers to connect and transact seamlessly through industry-leading capabilities in payment processing, digital wallet, and online cash solutions.
Minden Mill, through its wholly-owned subsidiaries, owns and operates an estate distillery and related hospitality venues. Minden is a historic agricultural and manufacturing town, located in the heart of Carson Valley close to the Nevada-California border at the eastern base of the Sierra Nevada Mountain range. Visitors enjoy easy access to South Lake Tahoe Mountain resorts, hiking trails, casinos, hot springs, legendary bars, and restaurants. Minden Mill's facilities include an American Whiskey and white spirits distillery, housed in a 100-year-old creamery, and an American Single Malt Whiskey distillery housed in a 100-year-old flour mill. Both buildings sit on the National Register of Historic Places. The flour mill includes multiple tasting areas and serves as a guest experience center.
CSI is a leading fintech, regtech and cybersecurity partner that delivers core processing, digital banking, managed cybersecurity, cybersecurity compliance, payments processing, print and electronic document distribution, and regulatory compliance solutions to financial institutions and corporate customers, both foreign and domestic.
Sightline Payments is a digital payments provider to the United States' ("U.S.") sports betting, casino gaming and digital gaming markets. Sightline aims to leverage its technology to apply modern solutions to a traditionally cash-based industry projected to grow significantly over the next few years.
System1 operates an omnichannel customer acquisition platform, delivering high-intent customers to advertisers and sells antivirus software packages to end user customers. System1 provides its services through its proprietary responsive acquisition marketing platform ("RAMP"). RAMP allows System1 to monetize users through its relationships with third-party advertisers and advertising networks. RAMP also allows third-party advertising platforms and publishers, to send user traffic to, and monetize user traffic on, System1’s owned and operated websites. RAMP operates across System1's network of owned and operated websites and related products, allowing it to monetize user traffic that it sources from various acquisition marketing channels.
AmeriLife is a leader in marketing and distributing life, health, and retirement solutions.
JANA Partners is an investment manager founded in 2001.
Watkins is a leading producer of high-quality flavoring products including spices, seasonings and extracts. For over 150 years, Watkins and its predecessors have been heralded as purveyors of flavor, with an unwavering commitment to crafting award-winning gourmet flavoring products from high-quality, natural ingredients, without the use of artificial flavors and colors, genetically modified organisms, corn syrup or gluten.
3
Table of Contents
Refer to Item 7 of Part II of this Annual Report for further information on recent results of operations and transactions and other activity of our reportable segments.
Strategy and Business Trends
Our strategy for the Company is to continue to manage and operate the diversified businesses of our group of companies to create long-term growth of those businesses in order to maximize the value of those businesses for our shareholders, and to pursue similar strategies and objectives by taking significant, active ownership stakes in new businesses.
Dun & Bradstreet. We believe D&B has an attractive business model that is underpinned by highly recurring, diversified revenue, significant operating leverage, low capital requirements and strong free cash flow. The proprietary and embedded nature of D&B's data and analytics solutions and the integral role that D&B plays in its clients’ decision-making processes have historically translated into high client retention and revenue visibility. D&B also benefits from strong operating leverage given its centralized Data Cloud and solutions, which allow D&B to generate strong contribution margins and free cash flow.
Subsequent to our acquisition of an ownership stake in D&B we worked closely with D&B to implement changes to address operational and execution issues at D&B that led to stagnant revenue growth and declining profitability prior to our involvement. We brought in a new senior leadership team, which commenced a comprehensive transformation to improve and revitalize D&B's business for long-term success. The new senior leadership team saw significant opportunity to create value by transforming the organization and improving the platform with new business unit leaders, enhanced technology and data, solution innovation and a client-centric go-to-market strategy. D&B's transformation strategy was based on Bill Foley's proven playbook of enhancing stockholder value through organizational re-alignment and re-investment. Initiatives implemented at D&B upon our acquisition resulted in significant synergies and cost savings. We continue to work closely with D&B to drive operational results through our participation on its board of directors.
Businesses rely on D&B's depth and breadth of global data and analytics to produce data-driven insights and make more informed decisions. For example, in commercial lending and trade credit, the scarcity of readily available credit history makes the extension of credit a time-consuming and imprecise process. In procurement, and business development, businesses face increasingly complex and global supply chains, making the assessment of compliance and viability of all suppliers prohibitively difficult and expensive if not conducted effectively. In sales and marketing, businesses have benefited from the advancements of CRM, Marketing Automation and Sales Acceleration tools designed to help identify, track and improve both customer management and prospecting growth activities. While these tools are helping to fill sales funnels and improve the progression of opportunities, key challenges remain in salesforce productivity, effective client segmentation and marketing campaign activation. Common stumbling blocks include incorrect, or outdated, contact information, duplicated or inaccurate firmographic data and a lack of synchronization between the various platforms in the marketing technology ecosystem.
D&B helps its clients solve these mission critical business problems. D&B believes the total addressable market ("TAM") in which it operates is large, growing and significantly under penetrated. D&B participates in the big data and analytics software market, as defined by Interactive Data Corporation ("IDC"), which represents a collection of software markets that functionally address decision support and decision automation. This market includes business intelligence and analytics tools, analytic data management and integration platforms and analytics and performance management applications. Within the broader market of data and analytics solutions, D&B serves a number of different markets, including the commercial credit data, sales and marketing data and Governance, Risk and Compliance ("GRC") markets to provide clients with decision support, valuable business insights and automation. As D&B continues to drive innovation in its solutions, it expects to address a greater portion of this TAM as new use cases for its data assets and analytical capabilities are introduced.
D&B believes there are several key trends in the global macroeconomic environment generating additional growth in D&B's TAM and increasing the demand for its solutions, including growing recognition by business of the value of analytics and data-informed business decisioning, growth in data creation and applications driven by the proliferation of new technologies with new data sets and applications, advances in analytical capabilities that are unlocking the value of data, and heightened compliance requirements in the regulatory environment for business driven by the growth of new technologies.
Alight. Alight aims to be the pre-eminent employee experience partner by providing personalized experiences that help employees make the best decisions for themselves and their families about their health, wealth and wellbeing. At the same time, Alight helps employers tackle their biggest people and business challenges by helping them understand prevalence, trends and risks to generate better outcomes for the future, such as improved employee productivity and retention, while also realizing a return on their people investment. Alight’s data, analytics and Artificial Intelligence ("AI") allow them to deliver actionable insights that drive measurable outcomes, such as healthcare claims savings, for companies and their people.
Restaurant Group. Our restaurant operations are focused in the casual dining segment of the restaurant industry. The Restaurant Group's strategy is to achieve long-term profit growth and drive increases in same store sales and guest counts. We have a highly-experienced management team that is focused on enhancing the guest experience at our restaurants and building team member engagement. We also utilize a shared service platform that takes advantage of the combined back-office synergies
4
Table of Contents
of our restaurant operating companies. Our goal is to maintain a strong balance sheet for our Restaurant Group to provide stability in all operating environments.
The restaurant industry is highly competitive and is often affected by changes in consumer tastes and discretionary spending patterns; changes in general economic conditions; public safety conditions or concerns; demographic trends; weather conditions; the cost of food products, labor, energy and other operating costs; and governmental regulations. Higher labor costs due to state and local minimum wage increases and shopping pattern shifts to e-commerce and "ready to eat" grocery and convenience stores have had a negative impact on restaurant performance, particularly in the casual dining restaurants in which the company operates.
The restaurant industry is also characterized by high capital investments for new restaurants and relatively high fixed or semi-variable restaurant operating expenses. Because of the high fixed and semi-variable expenses, changes in sales in existing restaurants are generally expected to significantly affect restaurant profitability because many restaurant costs and expenses are not expected to change at the same rate as sales. The most significant commodities that may affect our cost of food and beverage are beef, seafood, poultry, and dairy, which accounted for approximately half of our overall cost of food and beverage in the past. Generally, temporary increases in these costs are not passed on to guests; however, in the past, we have adjusted menu prices to compensate for increased costs of a more permanent nature.
Recent years were a period of high inflation relative to long-term inflation expectations in the U.S. This inflationary environment primarily impacted the commodity and labor costs of our Restaurant Group. We have adjusted menu pricing to account for these cost increases to an extent, but will continue to balance the impact of inflationary pressures on costs with the value proposition offered to customers with a focus on long-term profitability.
Average weekly sales per restaurant are typically higher in the first and fourth quarters than in other quarters, and we typically generate a disproportionate share of our earnings from operations in the first half of the year. Holidays, severe weather and other disruptive conditions may impact sales volumes seasonally in some operating regions.
Our revenues in future periods will continue to be subject to these and other factors that are beyond our control and, as a result, are likely to fluctuate.
The Restaurant Group has undertaken a project to renegotiate or terminate leases and close stores with unfavorable store-level cash flow profiles. Through this process it closed 77 O'Charley's stores in the year ended December 31, 2023. We expect the process to generally reduce the future revenue and improve the future operating profitability of our Restaurant Group, however we cannot be certain of the precise financial impact as of the date of this Annual Report.
Black Knight Football. Football, or soccer, is the most popular sport in the world with billions of fans globally. BKFC’s football clubs compete in some of the most competitive and highly visible football leagues in the world. The Premier League estimates that over 3 billion people watch its matches globally. Sports is one of the last remaining forms of content in the media ecosystem that is consumed live, making it must-have content for advertisers. As a result, major sports properties, and in particular top global soccer leagues which have the highest global viewership, are experiencing continued increases in the value of their media rights as networks rely on live sports content to attract and retain audiences and advertisers. BKFC's football clubs share in these global media trends through central distributions from their domestic leagues.
BKFC is focused on acquiring and partnering with clubs led by executives with local expertise, proven track records for financial and on-field success, and clear operational fit within BKFC's network of clubs to help further develop and implement BKFC’s strategy. In addition to the significant involvement of the Company’s chairman, Mr. Foley, who is the general partner of BKFC, the Company’s management team is extensively engaged in oversight of and working with BKFC management in helping BKFC implement its strategy. BKFC's strategy is to acquire, or partner with, clubs in top-tier leagues with valuable media rights and in countries with a history of deep player talent pools. Operating under this multiple-club model will allow BKFC to drive efficient player migration across its network of clubs, accelerate player development, and create operational, cost saving and commercial revenue synergies which we expect to give BKFC a competitive advantage over the long-term.
Top tier clubs in European football leagues earn significant revenues from revenue streams such as advertising and sponsorships, merchandise, and hospitality offerings. Most clubs competing in the top European football leagues, including BKFC's clubs, earn the majority of their revenues from media rights distributions from their domestic leagues. European leagues generally distribute their earnings from domestic and international media rights agreements with distribution partners to each of their respective clubs. In many leagues, the broadcast distributions are at least partially performance based so clubs that perform better on the pitch will earn more broadcasting income. The domestic media rights for the Premier League remain significant, totaling approximately $6.2 billion, at recent exchange rates, for the three-year period beginning with the 2022/2023 season and running through the 2024/2025 season. The international media rights for the Premier League have grown significantly in recent years, bringing in an additional approximately $6.2 billion, at recent exchange rates, for the three-year period beginning with the 2022/2023 season and running through the 2024/2025 season. We expect the proliferation of streaming and other new media distribution platforms to continue to drive demand for international football rights as streaming services seek unique content to help differentiate themselves from their competitors.
5
Table of Contents
BKFC aims to take a measured approach to investing in world-class infrastructure and top players, coaches and executive management for each of its clubs in order to improve on field performance, execute on opportunities around fan engagement and brand expansion, and create new commercial revenue streams for advertising and sponsorships.
Acquisitions, Dispositions, Minority Owned Operating Affiliates and Financings. Acquisitions are an important part of our growth strategy. We may dispose of assets when we identify opportunities to re-allocate our capital to owning, managing, and operating new companies that provide our shareholders with prudent risk-based returns on their own investment in Cannae on a long-term basis. On an ongoing basis, we actively evaluate possible transactions to enhance the value of the companies we own, such as acquisitions of business units and operating assets and business combination transactions.
We primarily engage in various lines of business through long-term ownership together with control or significant influence of companies, though in the future we may seek to sell certain subsidiaries or other assets as part of our capital reallocation initiatives. Further, we may make acquisitions in lines of business that are not directly tied to, or synergistic with, our current operating segments. While we primarily own interests in companies that we control or have the ability to significantly influence the operations of, we have allocated, and expect to allocate in the future, a smaller portion of our capital to minority ownership stakes in companies over which we do not exercise significant influence or have control.
There can be no assurance that any suitable opportunities will arise or that any particular transaction will be completed.We have made a number of acquisitions and dispositions over the past several years to strengthen and expand the service offerings and customer bases of our businesses, to expand or re-allocate our capital by acquiring significant equity ownership of other businesses or where we otherwise saw value.
Competition
Dun & Bradstreet. Dun & Bradstreet primarily competes on the basis of differentiated data sets, analytical capabilities, solutions, client relationships, innovation and price. D&B believes that it competes favorably in each of these categories across its business segments. D&B's competitors vary based on the client size and geographical markets that its solutions cover.
For Dun & Bradstreet's finance and risk solutions segment, its competition generally varies by client size. D&B has a leading presence in the enterprise market as clients place a high degree of value on D&B's best-in-class commercial credit database to inform their critical decisions around the extension of credit. D&B’s main competitors in the enterprise and mid-market include Bureau van Dijk (owned by Moody’s Corporation), Experian and Creditsafe in Europe and Equifax and Experian in North America. In the small and mid-size company market D&B's competition generally includes Equifax, Experian and other consumer credit providers that offer commercial data. Additionally, there is a fragmented tail of low cost, vertical and regionally focused point solutions in this market that may be attractive to certain clients, but lack the scale and coverage breadth to compete holistically.
For Dun & Bradstreet's Sales & Marketing solutions segment, its competition has historically been very fragmented with many players offering varying levels of data quantity and quality, and with data being collected in ways that may cross ethical and privacy boundaries. D&B's direct competitors vary depending on use cases, such as market segmentation, digital marketing lead generation, lead enrichment, sales effectiveness and data management. In the market for professional contact data, D&B's competition generally includes ZoomInfo and a few consultancies building bespoke solutions. For other Sales & Marketing solutions such as customer data platform, visitor intelligence, audience targeting and intent data, D&B faces several competitors including 6Sense and Demandbase.
Overall, outside North America, D&B's competitive environment varies by region and country, and can be significantly impacted by the legislative actions of local governments, availability of data and local business preferences. In the United Kingdom, D&B's direct competition for its Finance & Risk solutions segment is primarily from Moody's Analytics and Creditsafe. Additionally, the Sales & Marketing solutions landscape in these markets is both localized and fragmented, where numerous local players of varying sizes compete for business. In Northern Europe, D&B faces competition from Enento and Experian and in Central and Eastern European markets they compete with several regional and local players. In Asia Pacific, D&B faces competition in its Finance & Risk solutions segment from a mix of local and global providers. In China, D&B primarily competes with global providers such as Experian and Moody's Corporation, as well as technology driven local players focusing on domestic data. In India, D&B competes with local competitors. In addition, D&B's Sales & Marketing solutions landscape in the United Kingdom and throughout Asia is localized and fragmented.
Alight. The markets for Alight’s solutions are competitive, rapidly evolving and fragmented. Alight’s business faces competition from other global and national companies. The market for Alight’s solutions is subject to change as a result of economic, regulatory and legislative changes, technological developments, shifting client needs, and increased competition from established and new competitors. Alight does not believe there is any single competitor with the breadth of its solutions, and thus Alight’s competitors vary for each of its solutions. Alight’s primary competitors include Accolade, ADP, bswift, Businessolver, Conduent, Empower, Fidelity, Included Health, HealthEquity, Mercer, Personify, Sedgwick, Quantum Health, Voya, and WTW. Alight competes primarily on the basis of product and service quality, technology, breadth of offerings, ease of use and accessibility of technology, data protection, innovation, trust and reliability, price and reputation.
6
Table of Contents
Restaurant Group. The restaurant industry is highly competitive and is often affected by changes in consumer tastes. Competition for our restaurant brands varies by location. In general, our restaurant brands compete within each market with national and regional chains and locally-owned restaurants for guests, management and hourly personnel and suitable real estate sites. Restaurants are increasingly competing with grocery stores who are expanding their offerings of quick serve, ready-made meals and meal kits and with meal kit delivery services, which have increased market share in recent years. We expect to continue to compete in these areas.
Black Knight Football. BKFC’s football clubs compete against other football clubs in their respective domestic leagues for match attendance, matchday revenue and in domestic competitions. BKFC’s football clubs also compete against football clubs around Europe and the rest of the world to attract the best players and coaches in the global transfer and football staff markets. Additionally, BKFC’s clubs and their respective leagues compete against other types of television programming for attention and advertiser income both domestically and globally in markets around the world. BKFC’s clubs also compete against alternative forms of live entertainment for the sale of matchday tickets, including other live sports, concerts, festivals, and similar events.
Competitive Strengths
Proven management team. Our Board and executive management team, led by Bill Foley, has a proven track record of identifying, acquiring, managing and operating businesses. In particular, Bill Foley has led the growth of several multi-billion dollar companies with hundreds of acquisitions across diverse platforms, including, FNF, FIS, Black Knight, Dayforce, D&B and FG. Our Board and executive management's breadth of knowledge of operational matters and capital markets allows us to identify companies and strategic assets with attractive value propositions, to structure acquisitions to maximize the value acquired businesses, and to return the value created to our shareholders through long-term profitable operation of those businesses and, when appropriate, dispositions.
Intellectual Property
Dun & Bradstreet. D&B owns and controls various intellectual property rights, such as trade secrets, confidential information, trademarks, service marks, tradenames, copyrights, patents and applications to the foregoing. These rights, in the aggregate, are of material importance to D&B's business. D&B believes that the Dun & Bradstreet name and related tradenames, marks and logos are also of material importance to its business. D&B is licensed to use certain technology and other intellectual property rights owned and controlled by others, and other companies are licensed to use certain technology and other intellectual property rights owned and controlled by it. D&B's trademarks, service marks, databases, software, copyrights, patents, patent applications and other intellectual property are proprietary and accordingly it relies on a combination of statutory (e.g., copyright, trademark, trade secret, patent, etc.) and contractual safeguards for protecting them throughout the world.
D&B owns patents and patent applications both in the U.S. and in other selected countries of importance to them. The patents and patent applications include claims, which pertain to certain technologies and inventions that D&B has determined are proprietary and warrant patent protection. The protection of its innovative technology and inventions, such as its proprietary methods for data curation and identity resolution, through the filing of patent applications, is part of D&B's business strategy. Filing of patent applications may or may not provide D&B with a dominant position in the fields of technology. However, these patents and/or patent applications may provide D&B with legal defenses should subsequent patents in these fields be issued to third parties and later asserted against it. Where appropriate, D&B may also consider asserting or cross-licensing its patents.
Alight. Alight's intellectual property portfolio is comprised of various copyrights (including copyrights in software) and trademarks, as well as certain trade secrets or proprietary know-how of its business. Alight's success has resulted in part from its proprietary methodologies, processes and other intellectual property, such as certain of its platforms. However, any of Alight's proprietary rights could be challenged, invalidated or circumvented, or may not provide significant competitive advantages.
Alight's business relies on software provided by both internal development and external sourcing to deliver its services. With respect to internally developed software, Alight claims copyright on all such software, registering works where appropriate. Alight requires all employees and contractors to assign to it the rights to works developed on Alight's behalf. In addition, Alight relies on maintaining source code confidentiality to maintain its market competitiveness. With respect to externally sourced software, Alight relies on contracts to allow for continued access for its business usage.
In the U.S., trademark registrations may have a perpetual life, subject to continuous use and renewal every ten years, and may be subject to cancellation or invalidation based on certain use requirements and third-party challenges, or on other grounds. Alight vigorously enforces and protects its trademarks.
Restaurant Group. We regard our Restaurant Group's service marks, including "O'Charley's", "Ninety Nine" and other service marks and trademarks as important factors in the marketing of our restaurants. We have also obtained trademarks for several of our brands' menu items and for various advertising slogans. Our policy is to pursue registration of our marks whenever possible and to oppose vigorously any infringement of our marks.
7
Table of Contents
Black Knight Football. BKFC's football clubs have service marks and trademarks which we believe are critical to the clubs' brand values and commercial revenues. BKFC's policy is to pursue registration of its marks whenever possible and to oppose vigorously any infringement of its marks.
Regulation
Our corporate business activities are subject to regulation under the laws of the U.S. at the federal and state level. The activities of our various businesses are also subject to regulation and in the U.S. and other jurisdictions in which they operate, including foreign jurisdictions. See Item 1A Risk Factors of this Annual Report for further information on risks related to regulations impacting Cannae, D&B, Alight and BKFC that may have an adverse effect on our businesses.
Information Security
We and our unconsolidated affiliates are highly dependent on information technology networks and systems to securely process, transmit and store electronic information. Attacks on information technology systems continue to grow in frequency, complexity and sophistication. Such attacks have become a point of focus for individuals, businesses and governmental entities. These attacks can create system disruptions, shutdowns or unauthorized disclosure of confidential information, including non-public personal information, consumer data and proprietary business information.
We and our unconsolidated affiliates remain focused on making strategic investments in information security to protect the clients and information systems of our operating subsidiaries and unconsolidated affiliates. This includes both capital expenditures and operating expenses on hardware, software, personnel and consulting services. As the primary products and services of our operating subsidiaries and unconsolidated affiliates evolve, we apply a comprehensive approach to the mitigation of identified security risks. We have established risk management policies, including those related to information security and cybersecurity, designed to monitor and mitigate information security related risks.
See Item 1C Cybersecurity of this Annual Report for further discussion of the Company's information security and related risk management processes.
Human Capital Resources
Employees
As of December 31, 2024, Cannae and our consolidated subsidiaries had 7,317 employees, which includes 7,101 in our Restaurant Group and 216 in the various consolidated businesses comprising our Corporate and Other segment. None of our employees are unionized or represented by any collective agency. We believe that our relations with employees are generally good.
Our Manager and Cannae LLC rely on the experience and expertise of a small number of highly qualified employees which make up our corporate management team. We continually assess our management team's capabilities and capacity with a view toward the long-term sustainability of the Company's operations.
Diversity
Diversity is a part of our success, both at Cannae and within our subsidiary companies. We stand committed to our philosophy that all employees deserve an inclusive workplace, one where each employee feels heard and empowered. We believe that the diversity of our employees and directors provides a variety of ideas and perspectives that allow us to achieve superior business results. Cannae and Cannae’s subsidiary companies are committed to being equal opportunity employers and enhancing diversity and inclusion across our businesses. Cannae’s Code of Conduct & Ethics prohibits discrimination and harassment. Our nondiscrimination policy is distributed to all employees as part of our employee handbook, which employees must acknowledge annually. Our employees participate in annual programs including Code of Business Conduct and Ethics Training, and Reporting Harassment: Everyone’s Responsibility Training.
Sustainability
We recognize that in our rapidly changing global economy, the management of risks and opportunities is important for our long-term business success. Our Company and our board are committed to addressing sustainability issues to better serve our employees, business partners, and the communities where we live and work. We aim to achieve superior financial performance for shareholders and maximize the value of our assets while mitigating risk, and we are committed to managing our business in an environmentally responsible, socially responsible, and ethical manner.
Our sustainability efforts are focused on:
Responsible Capital Deployment. We monitor sustainability issues with our companies which we believe helps us generate stronger returns for our shareholders while improving our impact on society. Dun & Bradstreet is committed to enhancing responsible business practices through automated solutions. Alight is committed to helping companies care for their biggest asset, their people, by empowering workers and their families to make confident decisions around their health, wealth and
8
Table of Contents
wellbeing. The Restaurant Group is building inclusive workplaces while driving community outcomes in the areas where we operate. Our companies each have unique impacts, and we are working to further formalize and enhance the management of sustainability across our companies.
Preserving the Environment. We recognize the importance of conducting business in an environmentally responsible manner and integrating responsibly designed environmental management practices into our operations. We are continually seeking to improve our environmental management practices at our Las Vegas headquarters. From efforts to reduce water consumption to participating in recycling programs, we are working to reduce our environmental impact.
Supporting Our Employees and Communities. We are dedicated to serving our employees and their families, and supporting our local communities. We value our talented workforce and the outstanding contributions our employees make each day. We are dedicated to attracting, developing, and retaining talented teams through competitive compensation and benefits. We believe in the importance of volunteerism and philanthropy to strengthen and engage local communities across our companies. Through local community involvement, corporate initiatives, and philanthropic giving, we work hard each day to support the communities we all live in.
Operating Ethically. We are committed to strong governance systems and policies that are designed to ensure fair, transparent, and efficient business practices. Our reputation for integrity is one of our most important assets and each of our employees and directors is expected to contribute to the care and preservation of that asset. We operate in ways that we believe are fair, transparent, and compliant with all applicable regulations. We implement strong governance practices, policies, training, and reporting avenues to encourage and promote that all employees adhere to the highest standards for business integrity.
Statement Regarding Forward-Looking Information
The statements contained in this Annual Report or in our other documents or in oral presentations or other statements made by our management that are not purely historical are forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended (the "Exchange Act") including statements regarding our expectations, hopes, intentions, or strategies regarding the future. These statements relate to, among other things, future financial and operating results of the Company. In many cases, you can identify forward-looking statements by terminology such as "may,""will,""should,""expect,""plan,""anticipate,""believe,""estimate,""predict,""potential," or "continue," or the negative of these terms and other comparable terminology. Actual results could differ materially from those anticipated in these statements as a result of a number of factors, including, but not limited to the following:
•changes in general economic, business, and political conditions, including changes in the financial markets;
•compliance with extensive government regulation of our operating subsidiaries and adverse changes in applicable laws or regulations or in their application by regulators;
•the effects of our external management structure and the Management Services Agreement;
•loss of key personnel that could negatively affect our financial results and impair our operating abilities;
•our potential inability to find suitable acquisition candidates, as well as the risks associated with acquisitions in lines of business that will not necessarily be limited to our traditional areas of focus, or difficulties integrating acquisitions;
•other risks detailed in "Risk Factors" below and elsewhere in this document and in our other filings with the SEC.
We are not under any obligation (and expressly disclaim any such obligation) to update or alter our forward-looking statements, whether as a result of new information, future events or otherwise. You should carefully consider the possibility that actual results may differ materially from our forward-looking statements.
Additional Information
The Company’s Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and amendments to reports filed pursuant to Sections 13(a) and 15(d) of the Exchange Act, are filed with the Securities and Exchange Commission (the "SEC"). The Company is subject to the informational requirements of the Exchange Act and files or furnishes reports, proxy statements and other information with the SEC. The SEC maintains an internet site that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC at www.sec.gov.
Our website address is www.cannaeholdings.com. We make available free of charge on or through our website our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and all amendments to those reports filed or furnished pursuant to the Exchange Act as soon as reasonably practicable after such material is electronically filed with or furnished to the SEC. However, the information found on our website is not part of this or any other report.
9
Table of Contents
Item 1A. Risk Factors
In the course of conducting our business operations, we are exposed to a variety of risks, some of which are inherent in our industry and others of which are more specific to our own businesses. In addition to the other information set forth in this Annual Report and other filings we have made and make in the future with the SEC, you should carefully consider the following risk factors and uncertainties, which could materially affect our business, financial condition or results of operations in future periods. However, other factors not discussed below or elsewhere in this Annual Report could also adversely affect our businesses, results of operations and financial condition. Therefore, the risk factors below should not be considered a complete list of potential risks that we may face.
Risks Relating to our External Management Structure and Our Manager
The Management Service Agreement was negotiated between related parties and the terms, including fees payable, may not be as favorable to us as if it were negotiated with an unaffiliated third party.
Because our Manager is owned by our Chairman and Chief Executive Officer ("CEO"), Mr. Foley, and in the past was also owned by certain of our directors and executive officers, the Management Services Agreement was developed by related parties, although our independent directors reviewed and approved the Management Services Agreement. The terms of the Management Services Agreement, including fees payable, may not reflect the terms we may have received if it was negotiated with an unrelated third party. In addition, particularly as a result of our relationship with the present and past principal owners of the Manager, who are or were certain directors and members of our management team, our independent directors may determine that it is in the best interests of our shareholders not to enforce, or to enforce less vigorously, our rights under the Management Services Agreement because of our desire to maintain our ongoing relationship with our Manager.
Our executive officers and directors may allocate some of their time to other businesses, thereby causing conflicts of interest in their determination as to how much time to devote to our affairs, which may materially adversely affect our results of operations.
While the members of our management team devote a substantial amount of their time to the affairs of the Company, our executive officers, directors, Manager and other members of our management team may engage in other business activities. This may result in a conflict of interest in allocating their time between our operations and our management and the operations of other businesses. Their other business endeavors may involve related or unrelated parties. Conflicts of interest that arise over the allocation of time may not always be resolved in our favor and may materially adversely affect our results of operations.
Conflicts of interest could arise in connection with certain of our directors’ and executive officers’ discharge of fiduciary duties to our shareholders.
Certain of our directors and executive officers are or were members of the Manager. Such persons, by virtue of their positions with us, have fiduciary duties to us and our shareholders. The duties of such persons as directors or executive officers to us and our shareholders may conflict with the interests of such persons in their capacities as members or employees of the Manager.
Our Manager and members of our management team may engage in activities that compete with us or our businesses.
While the members of our management team intend to devote a substantial majority of their time to the affairs of the Company, and while our Manager currently does not manage any other businesses that are in lines of business similar to our businesses, neither our management team nor our Manager is expressly prohibited from investing in or managing other entities, including those that are in the same or similar line of business as our businesses, or required to present any particular acquisition or business opportunity to the Company. In this regard, the Management Services Agreement and the obligation thereunder to provide management services to us will not create a mutually exclusive relationship between our Manager, on the one hand, and the Company, on the other.
Our Manager can resign on 180 days’ notice, subject to a limited extension, and we may not be able to find a suitable replacement, resulting in a disruption in our operations that could materially adversely affect our financial condition, business and results of operations as well as the market price of our shares.
Our Manager has the right, under the Management Services Agreement, to resign at any time on 180 days’ written notice, whether we have found a replacement or not, subject to the Company’s right to extend such period by an additional 180 days or until a replacement manager has been in place for 30 days, if no replacement manager has been found by the 150th day following the Manager’s notice of resignation. If our Manager resigns, we may not be able to contract with a new manager or hire internal management with similar expertise and ability to provide the same or equivalent services on acceptable terms within 180 days (subject to possible extension), or at all, in which case our operations are likely to experience a disruption; our financial condition, business and results of operations as well as our ability to pay distributions are likely to be adversely affected; and the market price of our shares may decline. In addition, the coordination of our internal management, acquisition activities and supervision of our businesses is likely to suffer if we are unable to identify and reach an agreement with a single
10
Table of Contents
institution or group of executives having the expertise possessed by our Manager. Even if we are able to retain comparable management, whether internal or external, the integration of such management and their lack of familiarity with our businesses may result in additional costs and time delays that could materially adversely affect our financial condition, business and results of operations.
Risks Relating to the Restaurant Group
The Restaurant Group companies face significant competition for customers, real estate and employees and competitive pressure to adapt to changes in conditions driving customer demand. The Restaurant Group companies' inability to compete effectively may affect guest counts, sales and profit margins, which could have a material adverse effect on our business, financial condition and results of operations.
The restaurant industry is intensely competitive with a substantial number of restaurant operators that compete directly and indirectly with the Restaurant Group companies with respect to price, service, ambiance, brand, customer service, dining experience, location, food quality and variety and value perception of menu items and there are other well established competitors with substantially greater financial and other resources than the Restaurant Group companies. Some of our Restaurant Group companies' competitors advertise on national television, which may provide customers with greater awareness and name recognition than our Restaurant Group companies can achieve through their advertising efforts. There is also active competition for management personnel and attractive suitable real estate sites. Consumer tastes and perceptions, nutritional and dietary trends, guest count patterns and the type, number and location of competing restaurants often affect the restaurant business, and our Restaurant Group companies' competitors may react more efficiently and effectively to those conditions. For instance, prevailing health or dietary preferences or perceptions of our Restaurant Group companies' products may cause consumers to avoid certain menu items or products our Restaurant Group companies offer in favor of foods that are perceived as more healthy, and such choices by consumers could have a material adverse effect on our business, financial condition and results of operations. Further, our Restaurant Group companies face growing competition from the supermarket industry, with the improvement of their "convenient meals" in the deli and prepared food sections, from quick service and fast casual restaurants and online food delivery services as a result of food and beverage offerings by those food providers. As our Restaurant Group companies' competitors expand operations in markets where our restaurant businesses operate or expect to operate, we expect competition to intensify. If our Restaurant Group companies are unable to continue to compete effectively, their guest counts, sales and profit margins could decline, which could have a material adverse effect on our business, financial condition and results of operations.
Increased commodity, energy and other costs could decrease our Restaurant Group companies' profit margins or cause the Restaurant Group companies to limit or otherwise modify their menus, which could have a material adverse effect on our business, financial condition and results of operations.
The cost, availability and quality of ingredients restaurant operations use to prepare their food is subject to a range of factors, many of which are beyond their control. A significant component of our restaurant businesses' costs will be related to food commodities, including beef, pork, chicken, seafood, poultry, dairy products, oils, produce, fruit, flour and other related costs such as energy and transportation over which we may have little control, that can be subject to significant price fluctuations due to seasonal shifts, climate conditions, industry demand, changes in international commodity markets and other factors. If there is a substantial increase in prices for these commodities, our Restaurant Group companies' results of operations may be negatively affected. In addition, the Restaurant Group companies' restaurants are dependent upon frequent deliveries of perishable food products that meet certain specifications. Shortages or interruptions in the supply of perishable food products caused by unanticipated demand, problems in production or distribution, disease or food-borne illnesses, inclement weather or other conditions could adversely affect the availability, quality, and cost of ingredients, which would likely lower revenues, damage the Restaurant Group companies' reputation or otherwise harm our business.
Negative customer experiences or negative publicity surrounding our Restaurant Group companies' restaurants or other restaurants could adversely affect sales in one or more of our Restaurant Group companies' restaurants and make our concepts less valuable, which could have a material adverse effect on our business, financial condition and results of operations.
Because we believe our Restaurant Group companies' success depends significantly on their ability to provide exceptional food quality, outstanding service and an excellent overall dining experience, adverse publicity, whether or not accurate, relating to food quality, public health concerns, illness, safety, injury or government or industry findings concerning our Restaurant Group companies' restaurants, restaurants operated by other food service providers or others across the food industry supply chain could affect our Restaurant Group companies more than it would other restaurants that compete primarily on price or other factors. If customers perceive or experience a reduction in the food quality, service or ambiance at our Restaurant Group companies' restaurants or in any way believe our Restaurant Group companies' restaurants have failed to deliver a consistently positive experience, the value and popularity of one or more of our Restaurant Group companies' concepts could suffer. Further, because our restaurant businesses rely heavily on "word-of-mouth," as opposed to more conventional mediums of
11
Table of Contents
advertisement, to establish concept recognition, our restaurant businesses may be more adversely affected by negative customer experiences than other dining establishments, including those of our restaurant businesses' competitors.
Our restaurant businesses could suffer due to reduced demand for our restaurant businesses' brands or specific menu offerings if our restaurant businesses are the subject of negative publicity or litigation regarding allegations of food-related contaminations or illnesses, which could have a material adverse effect on our business, financial condition and results of operations.
Food safety is a top priority, and our Restaurant Group companies dedicate substantial resources to ensuring that their customers enjoy safe, quality food products. Food-related contaminations and illnesses may be caused by a variety of food-borne pathogens, such as E. coli or salmonella, which are frequently carried on unwashed fruits and vegetables, from a variety of illnesses transmitted by restaurant workers, such as hepatitis A, which may not be diagnosed prior to being infectious, and from contamination of food by foreign substances. Contamination and food borne illness incidents could also be caused at the point of source or by food suppliers and distributors. As a result, we cannot control all of the potential sources of contamination or illness that can be contained in or transmitted from our Restaurant Group companies' food. Regardless of the source or cause, any report of food-borne illnesses or other food safety issues including food tampering or contamination, at one of our Restaurant Group companies' restaurants could adversely affect the reputation of our Restaurant Group companies' brands and have a negative impact on their sales. Even instances of food-borne illness, food tampering or food contamination occurring solely at restaurants of our Restaurant Group companies' competitors or at one of our Restaurant Group companies' suppliers could result in negative publicity about the food service industry generally and adversely impact our Restaurant Group companies' sales.
If any person becomes injured or ill, or alleges becoming injured or ill, as a result of eating our Restaurant Group companies' food, our Restaurant Group companies may temporarily close some restaurants, which would decrease their revenues, and our restaurant businesses may be liable for damages or be subject to governmental regulatory action, either of which could have long-lasting, negative effects on our restaurant businesses' reputation, financial condition and results of operations, regardless of whether the allegations are valid or whether our restaurant businesses are found liable. The occurrence of food-borne illnesses or food safety issues could also adversely affect the price and availability of affected ingredients, resulting in higher costs and lower margins.
The success of the Restaurant Group depends, in part, on its intellectual property, which we may be unable to protect.
We regard our Restaurant Group's service marks, including "O'Charley's," "Ninety Nine" and other service marks and trademarks as important factors in the marketing of our restaurants. We have also obtained trademarks for several of our brands' menu items and for various advertising slogans. Our policy is to pursue registration of our marks whenever possible and to oppose vigorously any infringement of our marks.
Risks Relating to Dun & Bradstreet
D&B faces significant competition for its solutions, which may increase as D&B expands its business.
D&B faces significant competition for its solutions. D&B competes on the basis of differentiated solutions, datasets, analytics capabilities, ease of integration with its clients’ technology, stability of services, client relationships, innovation and price. D&B's global and regional competitors vary in size, financial and technical capability, and in the scope of the products and services they offer. Some of D&B's competitors may be better positioned to develop, promote and sell their products and services. Larger competitors may benefit from greater cost efficiencies and may be able to win business simply based on pricing. D&B's competitors may also be able to respond to opportunities before it does, by taking advantage of new technologies, changes in client requirements or market trends. In addition, D&B faces competition from non-traditional and free data sources.
Many of D&B's competitors have extensive client relationships, including relationships with D&B's current and potential clients. New competitors, or alliances among competitors, may emerge and gain significant market share. Existing or new competitors may develop products and services that are superior to D&B's solutions or that achieve greater acceptance than D&B's solutions. If D&B is unable to respond to changes in client requirements as quickly and effectively as its competition, D&B's ability to expand its business and sell its solutions may be adversely affected.
Additionally, D&B's competitors often sell services at lower prices than it does, individually or as part of integrated suites of several related services. This may cause D&B's clients to purchase from its competitors rather than from D&B, which could result in reduced prices for certain solutions or the loss of clients. Price reductions by D&B's competitors could also negatively impact its operating margins or harm its ability to obtain new long-term contracts or renewals of existing contracts on favorable terms. Additionally, some of D&B's clients may develop their own solutions that replace the solutions they currently purchase from D&B or look to new technologies, which could result in lower revenue.
12
Table of Contents
We believe that D&B's D-U-N-S Number and D&B's ability to link its data together with this unique identifier provides it with a strategic advantage by allowing for a global, end-to-end assessment of businesses throughout the world. However, some of D&B's competitors and clients utilize their own unique identifiers, and clients have and may continue to adopt alternative standards to D&B's D-U-N-S Number and stop using D&B's solutions. In addition, public and commercial sources of free or relatively inexpensive business information have become increasingly available and this trend is expected to continue. To the extent the availability of free or relatively inexpensive business information increases, the demand for some of D&B's solutions may decrease. If more clients adopt alternative standards to the D-U-N-S Number or look to these other sources of data, it could have a material adverse effect on D&B's business, financial condition and results of operations.
D&B also expect that there will be significant competition as it expands its business, and it may not be able to compete effectively against current and future competitors. If it is unable to compete successfully, it could have a material adverse effect on its business, financial condition and results of operations.
A failure in the integrity of D&B's data, models, or the systems upon which it relies could harm its brand and result in a loss of sales and an increase in legal claims.
The reliability of D&B's solutions is dependent upon the integrity of the data in its global datastores as well as its models, including scores and other analytics. D&B utilizes single source providers in certain countries to support the needs of its clients globally and relies on members of its world-wide network to provide local data in certain countries. A failure in the integrity of D&B's datastores, or an inability to ensure that its usage of data is consistent with any terms or restrictions on such use, whether inadvertently or through the actions of a third party, could harm D&B by exposing it to client or third-party claims or by causing a loss of client confidence in its solutions. For example, D&B licenses data from third parties for inclusion in the data solutions that it sells to its clients, and while D&B has guidelines and quality control requirements in place, it does not have absolute control over such third parties’ data collection and compliance practices. D&B may experience an increase in risks to the integrity of its datastores as it acquires content through the acquisition of companies with existing databases that may not be of the same quality or integrity as D&B's existing datastores.
In addition, there are continuous improvements in computer hardware, network operating systems, programming tools, programming languages, operating systems, data matching, data filtering and other database technologies and the use of the internet as well as emergence of new technologies. These improvements, as well as changes in client preferences or regulatory requirements or transitions to non-traditional or free data sources or new technologies, may require D&B to make changes in the technology it uses to gather and process its data and deliver its solutions. Further, D&B relies on third-party technology contractors that have extensive knowledge of its systems and database technologies. The loss of these third-party contractors could negatively affect D&B's ability to maintain and improve its systems. D&B's success will depend, in part, upon its ability to:
•internally develop and implement new and competitive technologies;
•use leading third-party technologies and contractors effectively;
•respond to changing client needs and regulatory requirements, including being able to bring new solutions to the market quickly; and
•transition clients and data sources successfully to new interfaces or other technologies.
D&B may not successfully implement new technologies, cause clients or data suppliers to implement compatible technologies or adapt its technology to evolving client, regulatory and competitive requirements. If D&B fails to respond, or fails to cause its clients or data suppliers to respond, to changes in technology, regulatory requirements or client preferences, the demand for D&B's solutions, the delivery of D&B's solutions or D&B's market reputation could be adversely affected. Additionally, D&B's failure to implement important updates or the loss of key third-party technology consultants could affect its ability to successfully meet the timeline for it to generate cost savings resulting from its investments in improved technology. Failure to achieve any of these objectives would impede D&B's ability to deliver strong financial results.
Although D&B is continually evolving the systems upon which it relies to sustain delivery of its solutions, meet client demands and support the development of new solutions and technologies, certain of D&B's existing infrastructure is comprised of complex legacy technology that requires time and investment to upgrade without disruption to its business. D&B has in the past been subject to client and third-party complaints and lawsuits regarding its data, which have occasionally been resolved by the payment of monetary damages. D&B has also licensed, and it may license in the future, proprietary rights to third parties. While D&B attempts to ensure that the quality of its brand is maintained by the third parties to whom it grants such licenses and by clients, they may take actions that could materially adversely affect the value of D&B's proprietary rights or reputation, which could have a material adverse effect on D&B's business, financial condition and results of operations.
13
Table of Contents
D&B could lose its access to data sources or ability to transfer data across the data sources in markets it operates, which could prevent D&B from providing its solutions.
D&B's solutions depend extensively upon continued access to and receipt of data from external sources, including data received from clients, strategic partners and various government and public records repositories. In some cases, D&B competes with its data providers. D&B's data providers could stop providing data, restrict the scope of data to which they have access, provide untimely data or increase the costs for their data for a variety of reasons, including changing regulatory requirements, judicial decisions, a perception that its systems are unsecure as a result of data security incidents, budgetary constraints, a desire to generate additional revenue or for regulatory or competitive reasons. European regulators and the European Commission have adopted prescriptive measures for assessing and demonstrating that all cross-border data transfers comply with the Court of Justice of the European Union ruling in Case 311/18 Data Protection Commission v Facebook Ireland and Maximillian Schrems ("Schrems II"), and China adopted its own restrictions on cross-border data transfers under its new DSL and PIPL data compliance laws. Additional supplemental measures in China requiring prior authorization for certain data transfers as well as regulatory enforcement decisions and opinions have been adopted pursuant to these laws. In 2024, the U.S. adopted its own version of data export controls under Executive Order 14117 and associated regulation promulgated thereunder as well as the Protecting Americans' Data from Foreign Adversaries Act. Other countries have adopted or may adopt similar measures restricting or placing additional regulatory burdens on cross-border data transfers. As a result of these developments and related regulatory decisions, D&B has become and may become subject to further increased restrictions or mandates on the collection, disclosure or use or transfer of such data, in particular if such data is not collected by D&B's providers in a way that allows it to legally use the data or cannot be transferred out of the country where it has been collected. D&B may not be successful in maintaining its relationships with these external data source providers or be able to continue to obtain data from them on acceptable terms or at all. Furthermore, D&B may not be able to obtain data from alternative sources if its current sources become unavailable. If D&B were to lose access to this external data or if its access or use were restricted or were to become less economical or desirable, D&B's ability to provide solutions could be negatively impacted, which could have a material adverse effect on its business, financial condition and results of operations. Additionally, due to data transfer restrictions, existing and prospective D&B clients may be reluctant to acquire or use data that is subject to these restrictions, and it may be limited in its ability to provide solutions to customers across markets, which may impede D&B's growth.
D&B is subject to various and a rapidly increasing number of governmental regulations, laws and orders, including a 20-year consent order with the U.S. Federal Trade Commission ("FTC"), compliance with which may cause D&B to incur significant expenses or reduce the availability or effectiveness of its solutions, and the failure to comply with which could subject D&B to civil or criminal penalties or other liabilities.
D&B is subject to an increasing number of government regulations affecting the collection, processing, and sale of its data-driven solutions, such as the FTC Act and the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), existing and expected rules and regulations in various U.S. states governing the collection, processing and protection of data, privacy rights, data security breach notification and related matters, the General Data Protection Regulation ("GDPR") and certain credit information laws and permits as well as constitutional requirements in the European Union, the Cyber Security Law, DSL, and PIPL, and new AI regulations in the U.S., EU, and China new data export laws and regulations. See "Business—Regulatory Matters" for a description of select regulatory regimes to which D&B is subject.
These laws and regulations, which generally are designed to protect information relating to individuals and small businesses, the data rights of individuals, national security, and to prevent the unauthorized collection, access to and use of personal or confidential information available in the marketplace and prohibit certain deceptive and unfair acts, are complex and have tended to become more stringent over time, but have begun to accelerate in their adoption and applicability to its business. Further, new laws and regulations are likely to be enacted and existing laws and regulations may change or be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible they will be interpreted and applied in ways that will materially and adversely affect D&B's business. New and amended data protection, privacy, credit, data security, artificial intelligence, economic sanctions, export control and ESG legislation that may impact Dun & Bradstreet has also been proposed both in the U.S. and internationally. D&B incurs significant expenses in their effort to ensure compliance with these laws, and those expenses may increase as new laws or regulations are enacted or the interpretation and application of existing laws and regulations change.
On September 21, 2021, D&B agreed to enter into an Agreement Containing Consent Order (the "FTC Consent Order") subject to acceptance by the FTC, the approval of which was finalized on April 6, 2023. The FTC Consent Order requires that D&B undertake specific compliance practices, recordkeeping, monitoring and reporting during its term, which ends on April 6, 2042. D&B's compliance with the FTC Consent Order may cause them to incur significant expenses or to reduce the availability or effectiveness of their solutions. Failure to comply with the FTC Consent Order could subject D&B to civil or criminal penalties or other liabilities.
As required by the Consent Order, D&B has provided regular reporting to the FTC regarding its compliance with the Consent Order and timely complied with and responded to all FTC requests for information. In November 2024, the FTC sent
14
Table of Contents
D&B notice regarding alleged violations of the Consent Order and a potential FTC enforcement action. D&B is discussing a potential resolution of the matter with the FTC.
On March 17, 2023, D&B, along with four other industry peers, were served by the FTC with an Order under Section 6(b) of the FTC Act (the "6(b) Order"), which authorizes the FTC to conduct wide-ranging studies that do not have a specific law enforcement purpose, in connection with the FTC’s inquiry into the small business credit reporting industry. Certain requirements of the 6(b) Order relate to subject matter similar to the scope of the FTC Consent Order. The FTC’s 6(b) inquiry is expected to examine various aspects of the collection, processing, and quality of information concerning small businesses for purposes of business credit reports and other business risk solutions, as well as the marketing and commercial practices related to such solutions, and various related matters. At this time, it is unclear what action, if any, the FTC may take with respect to its findings from its inquiry. It is possible that the FTC’s findings could result in FTC rule making or other action that may impact D&B's business.
Some new U.S. state laws are intended to provide consumers (including sole proprietors) with greater transparency and control over their personal data as well as to provide additional obligations and duties for businesses. These laws place requirements on a broad scope of data sales and processing, which are likely to affect D&B's business. Additionally, the duties and obligations for data handling, time sensitive privacy rights management, assessments, contracts, and similar requirements are expected to create more operational burdens on D&B's business. D&B anticipates that additional state and/or federal legislation in the U.S. relating to these matters will be enacted in the future and that our operations will need to continue to evolve to accommodate unique considerations across jurisdictions.
The following legal and regulatory developments also could have a material adverse effect on D&B's business, financial condition or results of operations:
•changes in cultural and consumer attitudes in favor of further restrictions on information collection use and transfer, which may lead to regulations that prevent full utilization of our solutions and impair D&B's ability to transfer data across borders;
•failure of data suppliers, third-party processors, or clients to comply with laws or regulations, where mutual compliance is required or where D&B's ability to comply is dependent on the compliance of those parties;
•failure of D&B's solutions to comply with current laws and regulations or the requirements of the FTC Consent Order; and
•failure to adapt D&B's solutions to changes in the regulatory environment in an efficient, cost-effective manner. This would include the failure to modify existing solutions, or new solutions created internally or acquired through mergers, to comply with existing or evolving legal requirements.
Changes in applicable legislation or regulations that restrict or dictate how D&B collects, maintains, combines and disseminates information could have a material adverse effect on D&B's business, financial condition or results of operations. In the future, D&B may be subject to significant additional expense to ensure continued compliance with applicable laws and regulations and to investigate, defend or remedy actual or alleged violations. Moreover, D&B's compliance with privacy and other data laws and regulations and D&B's reputation depend in part on its clients’ and business partners’ adherence to such laws and regulations and their use of D&B's solutions in ways consistent with client expectations and regulatory requirements. Businesses today are under intense scrutiny to comply with an ever-expanding and evolving set of data regulatory requirements, which can vary by geography and industry served. As such, performing adequate diligence on clients and suppliers can be cumbersome and dampen the pace of their business expansion or leave a business exposed to fines and penalties. Further, certain of the laws and regulations governing D&B's business are subject to interpretation by judges, juries and administrative entities, creating substantial uncertainty for its business. D&B cannot predict what effect the interpretation of existing or new laws or regulations may have on its business.
Risks Relating to Alight
Alight faces significant competition and its failure to compete successfully could have a material adverse effect on the financial condition and results of operations of its business.
Alight's competitors may have greater resources, larger customer bases, greater name recognition, stronger presence in certain geographies and more established relationships with their customers and suppliers than it has. In addition, new competitors, alliances among competitors or mergers of competitors could result in Alight's competitors gaining significant market share and some of Alight's competitors may have or may develop a lower cost structure, adopt more aggressive pricing policies or provide services that gain greater market acceptance than the services that Alight offers or develops. Large and well-capitalized competitors may be able to respond to the need for technological changes (including the implementation of AI and Machine Learning ("ML")) and innovate faster, or price their services more aggressively. They may also compete for skilled professionals, finance acquisitions, fund internal growth and compete for market share more effectively than Alight does. If
15
Table of Contents
Alight is unable to compete successfully, it could lose market share and clients to competitors, which could materially adversely affect its results of operations. To respond to increased competition and pricing pressure, Alight may have to lower the cost of its solutions or decrease the level of service provided to clients, which could have an adverse effect on its financial condition or results of operations.
Alight relies on complex information technology systems and networks to operate its business. Any significant system or network disruption could expose Alight to legal liability, impair its reputation or have a negative impact on its operations, sales and operating results and could expose Alight to litigation and negatively impact our relationships with clients.
Alight relies on the efficient, uninterrupted and secure operation of complex information technology systems, and networks and data centers, some of which are within its business and some of which are outsourced to third-party providers, including cloud infrastructure service providers such as Amazon Web Services ("AWS") and Microsoft Azure Cloud. Alight does not have control over the operations of such third parties. Alight also may decide to employ additional offsite data centers in the future to accommodate growth. Problems faced by Alight's data center locations, with the telecommunications network providers with whom Alight or such providers contract, or with the systems by which Alight's telecommunications providers allocate capacity among their clients, including Alight, could adversely affect the availability and processing of Alight's solutions and related services and the experience of Alight's clients. If Alight's data centers are unable to keep up with its growing needs for capacity, this could have an adverse effect on Alight's business and cause it to incur additional expense. In addition, any financial difficulties faced by Alight's third-party data center’s operator or any of the service providers with whom Alight or such providers contract may have negative effects on Alight's business, the nature and extent of which are difficult to predict. These facilities are vulnerable to damage or interruption from catastrophic events, such as earthquakes, hurricanes, floods, fires, cyber security attacks (including "ransomware" and phishing attacks), terrorist attacks, power losses, telecommunications failures and similar events. The risk of cyber-attacks could be exacerbated by geopolitical tensions, including the ongoing Russia-Ukraine conflict, or other hostile actions taken by nation-states and terrorist organizations. While Alight has adopted, and continues to enhance, business continuity and disaster recovery plans and strategies, there is no guarantee that such plans and strategies will be effective, which could interrupt the functionality of our information technology systems or those of third parties. The occurrence of a natural disaster (or other extreme weather as a result of climate change) or an act of terrorism, a decision to close the facilities without adequate notice, or other unanticipated problems could result in lengthy interruptions in Alight's services and solutions. The facilities also could be subject to break-ins, computer viruses, sabotage, intentional acts of vandalism and other misconduct. Any errors, failures, interruptions or delays experienced in connection with these third-party technologies and information services, or Alight's own systems, could negatively impact Alight's relationships with customers and adversely affect its business and could expose it to third-party liabilities. Any errors, defects, disruptions or other performance problems with our information technology systems including any changes in service levels at Alight's third-party data center could adversely affect its reputation and may damage its clients’ stored files or result in lengthy interruptions in its services. Interruptions in Alight's services might reduce its revenues, subject it to potential liability or other expenses or adversely affect its renewal rates.
In relation to Alight's third-party data centers, while Alight owns, controls and has access to its servers and all of the components of its network that are located in these centers, Alight does not control the operation of these facilities. The operators of Alight's third-party data center facilities have no obligation to renew their agreements with Alight on commercially reasonable terms, or at all. If Alight is unable to renew these agreements on commercially reasonable terms, or if the data center operators are acquired, Alight may be required to transfer its servers and other infrastructure to new data center facilities, and Alight may incur costs and experience service interruption in doing so.
Compliance with applicable laws and regulations including changes in such laws and regulations, their application and their interpretation, could have an adverse effect on Alight's business.
Alight's business is subject to extensive legal and regulatory oversight throughout the world including a variety of laws, rules, and regulations addressing, among other things, licensing, data privacy and protection, wage and hour standards, employment and labor relations, occupational health and safety, environmental matters, anti-competition, anti-corruption, anti-money laundering, language requirements, economic sanctions, currency, reserves and government contracting. This legal and regulatory oversight could reduce Alights profitability or limit its growth by increasing the costs of legal and regulatory compliance; by limiting or restricting the products or services it sells, the markets it enters, the methods by which it sells its services, the prices it can charge for our services, and the form of compensation it can accept from its clients and third parties; or by subjecting its business to the possibility of legal and regulatory actions or proceedings.
The global nature of Alight's operations increases the complexity and cost of compliance with laws and regulations, including training and employee expenses, adding to its cost of doing business. In addition, many of these laws and regulations may have differing or conflicting legal standards across jurisdictions, increasing further the complexity and cost of compliance. In emerging markets and other jurisdictions with less developed legal systems, local laws and regulations may not be established with sufficiently clear and reliable guidance to provide us adequate assurance that Alight is operating its business in a compliant manner with all required licenses or that our rights are otherwise protected.
16
Table of Contents
In addition, certain laws and regulations, such as the U.S. Foreign Corrupt Practices Act and similar laws in other jurisdictions in which Alight operates, could impact its operations outside of the legislating country by imposing requirements for the conduct of overseas operations, and in a number of cases, requiring compliance by foreign subsidiaries. Alight is also subject to economic and trade sanctions programs, including those administered by the U.S. Treasury Department’s Office of Foreign Assets Control ("OFAC"), which prohibit or restrict transactions or dealings with specified countries, their governments, and in certain circumstances, their nationals, and with individuals and entities that are specially designated.
Alight's employees, consultants or agents may still take actions in violation of its policies for which it may be ultimately responsible, or its policies and procedures may be inadequate or may be determined to be inadequate by regulators. Any violations of applicable anti-corruption, economic and trade sanctions or anti-money laundering laws or regulations could limit certain of Alight's business activities until they are satisfactorily remediated and could result in civil and criminal penalties, including fines that could damage its reputation and have a materially adverse effect on its results of operation or financial condition. In addition to the complexity of the laws and regulations themselves, the development of new laws and regulations, changes in application or interpretation of laws and regulations and Alight's continued operational changes and development into new jurisdictions and new service offerings also increases Alight's legal and regulatory compliance complexity as well as the type of governmental oversight to which it may be subject. These changes in laws and regulations could mandate significant and costly changes to the way Alight implements its services and solutions or could impose additional licensure requirements or costs to Alight's operations and services, or limit its ability to mitigate risk. In addition, new regulatory or industry developments could create an increase in competition that could adversely affect Alight. These potential developments include:
•changes in regulations relating to health and welfare plans including potential challenges or changes to the Patient Protection and Affordable Care Act, expansion of government-sponsored coverage through Medicare or the creation of a single payer system;
•changes in regulations relating to defined contribution and defined benefit plans, including pension reform that could decrease the attractiveness of certain of our retirement products and services to retirement plan sponsors and administrators or have an unfavorable effect on Alight's ability to earn revenues from these products and services;
•changes in regulations relating to payroll processing and payments or withholding taxes or other required deductions;
•additional requirements respecting data privacy and data usage in jurisdictions in which Alight operates that may increase its costs of compliance and potentially reduce the manner in which data can be used by Alight to develop or further its product offerings;
•changes in regulations relating to fiduciary rules;
•changes in federal or state regulations relating to marketing and sale of Medicare plans, Medicare Advantage and Medicare Part D prescription drug plans;
•changes to regulations of producers, brokers, agents or third-party administrators such as the Consolidated Appropriations Act of 2021, that may alter operational costs, the manner in which Alight markets or is compensated for certain services or other aspects of Alight's business; and
•additional regulations or revisions to existing regulations promulgated by other regulatory bodies in jurisdictions in which Alight operates.
For example, there have been, and likely will continue to be, legislative and regulatory proposals at the federal and state levels directed at addressing the availability of healthcare and containing or lowering the cost of healthcare. Although Alight cannot predict the ultimate content or timing of any healthcare reform legislation, potential changes resulting from any amendment, repeal or replacement of these programs, including any reduction in the future availability of healthcare insurance benefits, could adversely affect Alight's business and future results of operations. Further, the federal government from time to time considers pension reform legislation, which could negatively impact Alight's sales of defined benefit or defined contribution plan products and services and cause sponsors to discontinue existing plans for which Alight provides administrative or other services. Certain tax-favored savings initiatives that have been proposed could hinder sales and persistency of Alight's products and services that support employment-based retirement plans.
Alight's services are also the subject of ever-evolving government regulation, either because the services provided to or business conducted by Alight's clients are regulated directly or because third parties upon whom Alight relies on to provide services to its clients are regulated, thereby indirectly impacting the manner in which Alight provides services to those clients. Changes in laws, government regulations or the way those regulations are interpreted in the jurisdictions in which Alight operates could affect the viability, value, use or delivery of benefits and HR programs, including changes in regulations relating to health and welfare plans (such as medical), defined contribution plans (such as 401(k)), defined benefit plans (such as retirement or pensions) or payroll delivery, may adversely affect the demand for, or profitability of, Alight's services.
17
Table of Contents
In addition, as Alight, and the third parties upon whom Alight relies, implement and expand direct-to-consumer sales and marketing solutions, Alight is subject to various federal and state laws and regulations that prescribe when and how Alight may market to consumers (including, without limitation, the Telephone Consumer Protection Act (the "TCPA") and other telemarketing laws and the Medicare Communications and Marketing Guidelines issued by the Center for Medicare Services of the U.S. Department of Health and Human Service). The TCPA provides for private rights of action and potential statutory damages for each violation and additional penalties for each willful violation. Alight has in the past and may in the future become subject to claims that it has violated the TCPA and/or other telemarketing laws. Changes to these laws could negatively affect Alight's ability to market directly to consumers or increase Alight's costs or liabilities.
Issues relating to the use of new and evolving technologies, such as Artificial Intelligence and Machine Learning, in Alight's offerings may result in reputational harm and liability.
A quickly evolving social, legal and regulatory environment may cause Alight to incur increased operational and compliance costs, including increased research and development costs, or divert resources from other development efforts, to address potential issues related to usage of AI and ML. Alight is increasingly building AI and ML into many of its offerings including in its generative AI-enhanced Search and Chat function for Alight Worklife as well as its intelligent document processing tools. As with many cutting-edge innovations, AI and ML present new risks and challenges, and existing laws and regulations may apply to Alight in new ways, the nature and extent of which are difficult to predict. The risks and challenges presented by AI and ML could undermine public confidence in AI and ML, which could slow its adoption and affect Alight's business. Alight incorporates AI and ML into its offerings for use cases that could potentially impact civil, privacy, or employment benefit rights. Failure to adequately address issues that may arise with such use cases could negatively affect the adoption of Alight's solutions and subject it to reputational harm, regulatory action, or legal liability, which may harm its financial condition and operating results. Potential government regulation related to AI, including relating to ethics and social responsibility, may also increase the burden and cost of compliance and research and development. Employees, customers, or customers’ employees who are dissatisfied with Alight's public statements, policies, practices, or solutions related to the development and use of AI and ML may express opinions that could introduce reputational or business harm, or legal liability.
Risks Relating to Black Knight Football
BKFC is dependent on the performance and popularity of its football clubs.
Black Knight Football's revenue is driven by the performance and popularity of its football clubs. BKFC's football clubs earn most of their revenue from media rights distributions from their domestic leagues which vary significantly depending on the level at which each club competes in their domestic league systems. For example, AFCB competes in the Premier League, the top league in the English football system. Relegation from the Premier League to lower tiers of the English Football League system would result in a significant decrease in the media rights revenue earned by AFCB. Relegation from the Premier League or a general decline in the success of AFCB, particularly in consecutive seasons, may also negatively affect AFCB's ability to attract or retain talented players and coaching staff, as well as supporters, sponsors and other commercial partners, which would have a material adverse effect on Black Knight Football's business, results of operations, financial condition and cash flow.
BKFC's business is dependent upon its ability to attract and retain key personnel, including players.
Black Knight Football is highly dependent on members of the management, coaching staff and players of its clubs. Competition for talented players and staff is, and will continue to be, intense. BKFC's ability to attract and retain the highest quality players and coaching staff for its clubs is critical to the on field success of its clubs and, consequently, to its business, results of operations, financial condition and cash flow. A downturn in the performance of BKFC's clubs could adversely affect its clubs ability to attract and retain coaches and players. While Black Knight Football and its clubs enter into employment contracts with its key personnel, including players and coaches, with the aim of securing their services for the term of the contract, the retention of their services for the full term of the contract cannot be guaranteed due to possible contract disputes or approaches by other clubs. Black Knight Football's failure to attract and retain key personnel for each of its clubs could have a negative impact on its ability to effectively manage and grow its business.
Negotiation, pricing and terms of key media contracts are outside of Black Knight Football's control and those contracts may change in the future or expose it to certain risks.
A significant majority of the revenue of BKFC and its clubs is generated from the domestic and international media rights for domestic league matches. Contracts for these media rights and certain other revenue for those competitions are negotiated collectively by the domestic leagues in which BKFC's football clubs compete. BKFC and its clubs are generally not a party to the contracts negotiated by the domestic leagues. Further, BKFC and its clubs do not participate in and therefore do not have any direct influence on the outcome of contract negotiations. Although an agreement has been reached for the sale of Premier League domestic broadcasting rights in the UK through the end of the 2028/2029 football season, future agreements may not maintain the current level of broadcasting revenues. Furthermore, a change in credit quality at one of the media broadcasters for the domestic leagues in which BKFC's clubs compete could increase the risk that such counterparty is unable or unwilling to
18
Table of Contents
pay amounts owed to the domestic league and ultimately, BKFC's clubs. The failure of a major television broadcaster for the domestic league competitions to pay outstanding amounts owed to its respective league could have a material adverse effect on BKFC's business, results of operations, financial condition and cash flow.
The markets in which Black Knight Football operates are highly competitive and increased competition could adversely affect Black Knight Football's results of operations, financial condition and cash flow.
Black Knight Football faces competition from other football clubs in England and Europe. In the domestic leagues in which BKFC's clubs operate, investment from wealthy team owners has led to teams with deep financial backing that are able to acquire top players and coaching staff, which could continue to result in increased competition for, and cost of, key personnel. As European football and particularly the Premier League continues to grow in popularity, the interest of wealthy potential owners may increase, leading to additional clubs substantially improving their financial position. Despite the pervasive adoption of financial monitoring rules on clubs in European domestic leagues and club competitions, European and Premier League football clubs are spending substantial resources on transfer fees and player salaries. Competition from top European football leagues, including the Premier League, has led to higher salaries for football players as well as increased competition on the field. The increase in competition could result in BKFC's football clubs finishing lower in their domestic leagues or being relegated to lower tiers of their domestic league systems, which could have a material adverse effect on Black Knight Football's results of operations, financial condition and cash flows.
Risks Relating to the Company's Structure
We may become subject to the Investment Company Act of 1940.
We do not believe that we are subject to regulation under the Investment Company Act of 1940, as amended (the "40 Act"). We primarily acquire interests in operating companies and are engaged in actively managing and operating a core group of those companies, which we are committed to supporting for the long-term. Our officers, the Manager and employees devote their activities to these businesses. Based on these factors, we believe that we are not an investment company under the 40 Act, including by virtue of the exception from the definition of “investment company” Section 3(b)(1) of the 40 Act, and we intend to continue to conduct our operations so that we will not be deemed an investment company. If, at any time, we become or are determined to be primarily engaged in the business of investing, reinvesting or trading in securities, we could become subject to regulation under the 40 Act. In these circumstances, after giving effect to any applicable grace periods, we may be required to register as an investment company, which could result in significant registration and compliance costs, could require changes to our corporate governance structure and financial reporting, and could restrict our activities going forward. In addition, if we were to become subject to the 40 Act, any violation of the 40 Act could subject us to material adverse consequences, including potentially significant regulatory penalties and the possibility that certain of our contracts would be deemed unenforceable.
Certain executive officers and members of our Board of Directors have or will have interests and positions that could present potential conflicts.
Certain executive officers and members of our Board serve on the boards of directors of other entities or are employed by other entities, including but not limited to D&B, Trasimene, Alight, System1, BKFC, CSI, Minden Mill and Watkins.
As a result of the foregoing, there may be circumstances where certain executive officers and directors may be subject to conflicts of interest with respect to, among other things: (i) our ongoing relationships with D&B, Trasimene, Alight, System1, BKFC, CSI, Minden Mill or Watkins; (ii) business opportunities arising for any of us; and (iii) conflicts of time with respect to matters potentially or actually involving or affecting us. For example, from time to time, we may enter into transactions with such other entities and/or their respective subsidiaries or other affiliates. There can be no assurance that the terms of any such transactions will be as favorable to our company or any of our respective subsidiaries or affiliates as would be the case where there is no potential conflict of interest.
We have in place a code of business conduct and ethics prescribing procedures for managing conflicts of interest and our Chief Legal Officer, General Counsel and our related persons transaction committee are responsible for the review, approval or ratification of any potential conflicts of interest transactions. Additionally, we expect that interested directors will abstain from decisions with respect to conflicts of interest as a matter of practice. Our related person transaction committee and related person transaction policy governs all transactions with directors (and director nominees), executive officers, immediate family members of directors and executive officers, shareholders that own greater than 5% of any class of the Company's voting securities, our Manager, and generally any entity in which a director or officer of the Company controls. All transactions or series of transactions exceeding $120,000 with such persons or entities must be reviewed and approved by the related person transaction committee. The related person transaction committee consists of two independent directors and if a member of such committee is involved in a transaction under review, they are required to recuse themself from the review under our related person transaction policy. However, there can be no assurance that such measures will be effective, that we will be able to resolve all potential conflicts or that the resolution of any such conflicts will be no less favorable to us than if we were dealing with an unaffiliated third party.
19
Table of Contents
Refer to Note O - Related Party Transactions to the Notes to Consolidated Financial Statements for more information regarding our related party relationships and transactions with our Manager and entities affiliated with certain members of our Board.
An inability of our material unconsolidated affiliates to maintain effective financial reporting processes may adversely impact our ability to report our results of operations or financial condition accurately and timely.
The accuracy and timeliness of the Company's financial reporting is dependent on the timely financial reporting and effectiveness of internal controls over financial reporting of our material investments in unconsolidated affiliates. Material deficiencies in the internal controls over financial reporting or other matters impacting the ability of our unconsolidated affiliates to accurately and timely report their standalone results of operations and financial condition or meet related debt covenants, if any, may cause us to be unable to report the financial information of the Company on a timely basis or reduce the value of the Company's related investment. Furthermore, restatements to prior period financial information reported by our material unconsolidated affiliates could require the Company to similarly restate its prior period financial information. If the Company is unable to timely and accurately report its financial information it could subject us to adverse regulatory consequences, including potential sanctions by the SEC or violations of applicable stock exchange listing rules. There also could be a negative reaction in the financial markets due to a loss of investor confidence in us and the reliability of our financial statements. This could materially adversely affect us and lead to a decline in the price of the Company's common stock.
General Risk Factors
The loss of key personnel could impair our operating abilities and could have a material adverse effect on our business, financial condition and results of operations.
Our success will substantially depend on our ability to attract and retain key members of our senior management team and officers. If we lose one or more of these key employees, our operating results and in turn the value of our common stock could be materially adversely affected. Although we may enter into employment agreements with our officers, there can be no assurance that the entire term of any employment agreement will be served or that any employment agreement will be renewed upon expiration.
Data security and integrity are critically important to the businesses we own and manage, and cybersecurity incidents, including cyberattacks, breaches of security, unauthorized access to or disclosure of confidential information, business disruption, or the perception that confidential information is not secure, could result in a material loss of business, regulatory enforcement, substantial legal liability and/or significant harm to their reputation, which could have a material adverse effect on our business, financial condition and results of operations.
Improper access to, misappropriation, destruction or disclosure of confidential, personal or proprietary data could result in significant harm to our reputation or the reputation of any of the businesses we own.
For example, D&B collects, stores and transmits a large amount of confidential company information on hundreds of millions of businesses, including financial information and personal information, as well as certain consumer information and credit information. D&B operates in an environment of significant risk of cybersecurity incidents resulting from unintentional events or deliberate attacks by third parties or insiders, which may involve exploiting highly obscure security vulnerabilities or sophisticated attack methods.
With respect to Alight, one of its significant responsibilities is to maintain the security and privacy of its employees’ and clients’ confidential and proprietary information and the confidential information about clients’ employees’ compensation, health and benefits information and other personally identifiable information. With respect to our Restaurant Group companies, they rely heavily on information technology systems across their operations and corporate functions, including for order and delivery from suppliers and distributors, point-of-sale processing in their restaurants, management of their supply chains, payment of obligations, collection of cash, data warehousing or support analytics, finance or accounting systems, labor optimization tools, gift cards, online business and various other processes and transactions, including the storage of employee and customer information.
The businesses we own and manage have experienced and we expect will continue to experience numerous attempts to access their computer systems, software, networks, data and other technology assets on a daily basis. The security and protection of their data is a top priority for them. Such businesses devote significant resources to maintain and regularly upgrade the wide array of physical, technical and contractual safeguards that they employ to provide security around the collection, storage, use, access and delivery of information they possess. These businesses have implemented various measures to manage their risks related to system and network security and disruptions, but an actual or perceived security breach, a failure to make adequate disclosures to the public or law enforcement agencies following any such event or a significant and extended disruption in the functioning of its information technology systems could damage a subsidiary company’s reputation and cause it to lose clients, adversely impact its operations, sales and operating results and require it to incur significant expense to address and remediate or otherwise resolve such issues.
20
Table of Contents
Although our businesses have not incurred material losses or liabilities to date as a result of any breaches, unauthorized disclosure, loss or corruption of their data or inability of their clients to access their systems, such events could result in intellectual property or other confidential information being lost or stolen, including client, employee or business data, disrupt their operations, subject them to substantial regulatory and legal proceedings and potential liability and fines, result in a material loss of business and/or significantly harm their reputation. If they are unable to efficiently manage the vulnerability of their systems and effectively maintain and upgrade their system safeguards, they may incur unexpected costs and certain of their systems may become more vulnerable to unauthorized access.
Furthermore, if we are unable to similarly and effectively maintain and upgrade our corporate system safeguards, data and confidential information we may have access to from time to time about the businesses we own and manage may also become more vulnerable to unauthorized access. We utilize a third party to manage the Company's corporate IT network and related resources and we actively collaborate with the third party to monitor risks and recent threats to our IT environment, develop protocols for responding to cybersecurity incidents, and train employees on common techniques used in cyber attacks. Our failure to adequately monitor our key third-party IT service provider could result in the failure of all or a portion of our IT resources and impact the operations of our business. Furthermore, loss of our third-party IT service provider could result in increased cost associated with acquiring new internal IT resources and developing internal IT processes.
Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies have adopted breach notification and other requirements in the event that information subject to such laws is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible. For example, in the United States, D&B is subject to laws that provide for at least 50 disparate notification regimes. D&B is also subject to various laws in regulations in the other global markets it operates including Europe and Asia. Complying with such numerous and complex regulations in the event of unauthorized access would be expensive and difficult, and failure to comply with these regulations could subject D&B to regulatory scrutiny and additional liability. In many jurisdictions, including North America and the European Union, Alight is subject to laws and regulations relating to the collection, use, retention, security and transfer of this information including the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA") and the HIPAA regulations governing, among other things, the privacy, security and electronic transmission of individually identifiable protected health information, the Personal Information Protection and Electronic Documents Act and the European Union General Data Protection Regulation ("GDPR"). California also enacted legislation, the California Consumer Privacy Act of 2018 ("CCPA") and the related California Privacy Rights Act ("CPRA"), that afford California residents expanded privacy protections and a private right of action for security breaches affecting their personal information. Virginia and Colorado have similarly enacted comprehensive privacy laws, the Consumer Data Protection Act and Colorado Privacy Act, respectively, both laws of which emulate the CCPA and CPRA in many respects. The Virginia Consumer Data Protection Act took effect on January 1, 2023, and the Colorado Privacy Act took effect on July 1, 2023. We anticipate federal and state regulators to continue to consider and enact regulatory oversight initiatives and legislation related to privacy and cybersecurity. These and other similar laws and regulations are frequently changing and are becoming increasingly complex and sometimes conflict among the various jurisdictions and countries in which Alight provides services both in terms of substance and in terms of enforceability. This makes compliance challenging and expensive. Alight’s failure to adhere to or successfully implement processes in response to changing regulatory requirements in this area could result in legal liability or impairment to our reputation in the marketplace. Further, regulatory initiatives in the area of data protection are more frequently including provisions allowing authorities to impose substantial fines and penalties, and therefore, failure to comply could also have a significant financial impact.
If Cannae or its businesses are unable to protect their computer systems, software, networks, data and other technology assets it could have a material adverse effect on the value of our businesses, and ultimately, our financial condition and results of operations.
The due diligence process that we undertake in connection with new acquisitions may not reveal all facts that may be relevant in connection with acquisitions of ownership interests and we may not realize the anticipated benefits from past or potential future acquisitions, strategic transactions, investments, or our business model.
Before making acquisitions, we conduct due diligence that we deem reasonable and appropriate based on the facts and circumstances applicable to each investment. When conducting due diligence, we may be required to evaluate important and complex business, financial, tax, accounting, environmental and legal issues. Outside consultants, legal advisers, accountants and investment banks may be involved in the due diligence process in varying degrees depending on the type of business and transaction. Nevertheless, when conducting due diligence and making an assessment regarding an acquisition, we rely on the resources available to us, including information provided by the target of the transaction and, in some circumstances, third-party investigations. The due diligence investigation that we carry out with respect to any opportunity may not reveal or highlight all relevant facts (including fraud) that may be necessary or helpful in evaluating such opportunity. Moreover, such an investigation will not necessarily result in the acquisition being successful. As a result, we may not realize the benefits from our acquisitions that we anticipated at the time of our diligence and initial consummation of transactions.
21
Table of Contents
Our management may seek growth through acquisitions in lines of business that will not necessarily be limited to our current areas of focus or geographic areas. This expansion of our business subjects us to associated risks, such as the diversion of management's attention and lack of experience in operating such businesses, which could have a material adverse effect on our business, financial condition and results of operations.
We may make acquisitions in lines of business that are not directly tied to or synergistic with our current subsidiary companies. Accordingly, we may in the future acquire businesses in industries or geographic areas with which management is less familiar than we are with our current businesses.
The acquisition and integration of any business we may acquire involves a number of risks and may result in unforeseen operating difficulties and expenditures in assimilating or integrating the businesses, technologies, products, personnel or operations of the acquired business. Furthermore, acquisitions may: (1) involve our entry into geographic or business markets in which we have little or no prior experience; (2) involve difficulties in retaining the customers of the acquired business; (3) involve difficulties and expense associated with regulatory requirements, competition controls or investigations; (4) result in a delay or reduction of sales for both us and the business we acquire; and (5) disrupt our ongoing business, divert our resources and require significant management attention that would otherwise be available for ongoing development of our current business.
To complete future acquisitions, we may determine that it is necessary to use a substantial amount of our cash or engage in equity or debt financing. If we raise additional funds through further issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges senior to those of holders of our common stock. Any debt financing obtained by us in the future could involve restrictive covenants relating to our capital-raising activities and other financial and operational matters that make it more difficult for us to obtain additional capital in the future and to pursue other business opportunities, including potential acquisitions. In addition, we may not be able to obtain additional financing on terms favorable to us, if at all, which could limit our ability to engage in acquisitions. Moreover, we can make no assurances that the anticipated benefits of any acquisition, such as operating improvements or anticipated cost savings, would be realized or that we would not be exposed to unexpected liabilities in connection with any acquisition.
Further, an acquisition may negatively affect our operating results because it may require us to incur charges and substantial debt or other liabilities, may cause adverse tax consequences, substantial depreciation and amortization of deferred compensation charges, may require the amortization, write-down or impairment of amounts related to deferred compensation, goodwill and other intangible assets, may include substantial contingent consideration payments or other compensation that reduces our earnings during the quarter in which it is incurred, or may not generate sufficient financial return to offset acquisition costs.
We may often pursue opportunities that involve business, regulatory, legal or other complexities, which could have a material adverse effect on our business, financial condition and results of operations.
As an element of our strategy, we may pursue unusually complex opportunities. This could often take the form of substantial business, regulatory or legal complexity. Our tolerance for complexity may present risks, and as such, transactions can be more difficult, expensive and time-consuming to finance and execute; it may be more difficult to manage or realize value from the assets acquired in such transactions; and such transactions may sometimes entail a higher level of regulatory scrutiny or a greater risk of contingent liabilities. Any of these risks could harm our performance.
We and the businesses we own and manage, from time to time in the ordinary course of business, are involved in legal proceedings and may experience unfavorable outcomes, which could have a material adverse effect on our business, financial condition and results of operations.
We and the businesses we own and manage, from time to time in the ordinary course of business, are involved in pending and threatened litigation matters, some of which include claims for punitive or exemplary damages. We and such companies are also subject to compliance with extensive government laws and regulations related to employment practices and policies. We may not be able to successfully resolve these types of conflicts to their satisfaction, and these matters may involve claims for substantial amounts of money or for other relief that might necessitate changes to their business or operations. The defense of these actions may be both time consuming and expensive and their outcomes cannot be predicted with certainty. Determining reserves for pending litigation is a complex, fact-intensive process that requires significant legal judgment. It is possible that unfavorable outcomes in one or more such proceedings could result in substantial payments that could have a material adverse effect on our cash flows in a particular period or on our business, financial condition and results of operations.
The lack of liquidity in certain of our ownership interests may adversely affect our business.
We invest, and will continue to invest, in companies whose securities are not publicly traded and whose securities will be subject to legal and other restrictions on resale or will otherwise be less liquid than publicly traded securities. The illiquidity of ownership interests with these characteristics may make it difficult for us to sell these positions when desired. In addition, if we
22
Table of Contents
are required or otherwise choose to liquidate all or a portion of our assets quickly, we may realize significantly less than the value at which we had previously recorded these ownership interests. Our businesses are often subject to contractual or legal restrictions on resale or are otherwise illiquid because there is usually no established trading market for such ownership interests. Because certain of our businesses are illiquid, we may be unable to dispose of them timely or we may be unable to do so at a favorable price, and, as a result, we may suffer losses.
Our Articles of Incorporation and Nevada law may discourage, delay or prevent a change of control of our Company or changes in our management, which could have the result of depressing the trading price of our common stock.
Certain anti-takeover provisions of Nevada law could have the effect of delaying or preventing a third-party from acquiring us, even if the acquisition arguably could benefit our stockholders.
Nevada’s "combinations with interested stockholders" statutes (NRS 78.411 through 78.444, inclusive) prohibit specified types of business "combinations" between certain Nevada corporations and any person deemed to be an "interested stockholder" for two years after such person first becomes an "interested stockholder" unless the corporation’s board of directors approves the combination (or the transaction by which such person becomes an "interested stockholder") in advance, or unless the combination is approved by the board of directors and sixty percent of the corporation’s voting power not beneficially owned by the interested stockholder, its affiliates and associates. Further, in the absence of prior approval certain restrictions may apply even after such two-year period. However, these statutes do not apply to any combination of a corporation and an interested stockholder after the expiration of four years after the person first became an interested stockholder. For purposes of these statutes, an “interested stockholder” is any person who is (1) the beneficial owner, directly or indirectly, of ten percent or more of the voting power of the outstanding voting shares of the corporation, or (2) an affiliate or associate of the corporation and at any time within the two previous years was the beneficial owner, directly or indirectly, of ten percent or more of the voting power of the then outstanding shares of the corporation. The definition of the term "combination" is sufficiently broad to cover most significant transactions between a corporation and an "interested stockholder."
Nevada law also provides that directors may resist a change or potential change in control if the directors determine that the change is opposed to, or not in the best interests of, the corporation. The existence of the foregoing provisions and other potential anti-takeover measures could limit the price that investors might be willing to pay in the future for shares of our common stock. They could also deter potential acquirers of our company, thereby reducing the likelihood that you could receive a premium for your common stock in an acquisition.
Our consolidated financial statements include estimates made by management and actual results could differ materially from those estimates.
The preparation of our consolidated financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities at the date of the Consolidated Financial Statements and the reported amounts of revenues and expenses during the reporting period. Significant estimates made by management include fair value measurements and accounting for income taxes. Actual results could differ from estimates. See Item 8 of Part II of this Annual Report for further discussion.
We record many of our ownership interests using the equity method of accounting, through which we record our proportionate share of their net earnings or loss in our consolidated financial statements. Equity-method investments are reviewed for impairment whenever events or changes in circumstances indicate that the carrying amount of the investment may not be recoverable. If we determine that there are indicators that the book value of any of our equity-method investments are not recoverable, we are required to estimate the fair value of the ownership interest. Determining the fair value of our non-public businesses is subjective and involves the use of estimates. If we determine the fair value of any of our ownership interests is less than its recorded book value, we may be required to record an impairment charge, which could have a material adverse effect on our results of operations. See further discussion of our policies and process for monitoring impairment in Item 7 of Part II of this Annual Report under the header Critical Accounting Policies and Estimates.
The global operations of certain of our ownership interests including D&B, Alight and BKFC may subject us to risks that could negatively affect our business.
These risks, which can vary substantially by country, include political, financial or social instability or conditions, geopolitical events, corruption, social unrest, natural disasters, military conflicts and terrorism, as well as exposure to the macroeconomic environment in such markets (including consumer preferences and spending, unemployment levels, wage and commodity inflation and foreign exchange rate fluctuations), the regulatory environment (including the risks of operating in markets in which there are uncertainties regarding the interpretation and enforceability of legal requirements and the enforceability of contract rights and intellectual property rights), and income and non-income based tax rates and laws. Adverse changes in any of these factors may materially adversely impact the businesses and value of our ownership interests in D&B, Alight and BKFC.
23
Table of Contents
Changing rules, public disclosure regulations and stakeholder expectations on environmental, social and corporate governance related matters create a variety of risks for our business.
In addition to the changing rules and regulations related to environmental, social and governance matters imposed by governmental and self-regulatory organizations such as the SEC and the New York Stock Exchange, a variety of third-party organizations, institutional investors and customers evaluate the performance of companies on ESG topics, and the results of these assessments are widely publicized. These changing rules, regulations and stakeholder expectations have resulted in, and are likely to continue to result in, increased general and administrative expenses and increased management time and attention spent complying with or meeting such regulations and expectations. Reduced access to or increased cost of capital may occur as financial institutions and investors increase or change expectations related to ESG matters.
Developing and acting on initiatives within the scope of ESG, and collecting, measuring and reporting ESG-related information and metrics can be costly, difficult and time consuming and is subject to evolving reporting standards. We may also communicate certain initiatives and goals, regarding environmental matters, diversity, social investments and other ESG-related matters, in our SEC filings or in other public disclosures. These initiatives and goals within the scope of ESG could be difficult and expensive to implement, the technologies needed to implement them may not be cost effective and may not advance at a sufficient pace, and we could be criticized for the accuracy, adequacy or completeness of the disclosure. If our ESG-related data, processes and reporting are incomplete or inaccurate, or if we fail to achieve progress with respect to our goals, including our previously announced commitments to reduce greenhouse gas emissions, within the scope of ESG on a timely basis, or at all, our reputation, business, financial performance and growth could be adversely affected.
In addition, in recent years "anti-ESG" sentiment has gained momentum across the U.S., with several states and Congress having proposed or enacted "anti-ESG" policies, legislation, or initiatives or issued related legal opinions, and the President having recently issued an executive order opposing diversity equity and inclusion ("DEI") initiatives in the private sector. Such anti-ESG and anti-DEI-related policies, legislation, initiatives, litigation, legal opinions, and scrutiny could result in additional compliance obligations, investigations and enforcement actions, or reputational harm.
Item 1B. Unresolved Staff Comments
None.
Item 1C. Cybersecurity
At Cannae, the board of directors oversees management’s process for identifying and mitigating risks, including cybersecurity risks. Senior leadership, including our Chief Information Security Officer ("CISO"), works diligently to identify, assess and manage material risks through our Enterprise Risk Management ("ERM") program. As part of that program, we conduct risk assessments to identify and assess our material business, operational and environmental risks and works with our management team to develop strategies and plans to mitigate and manage those risks, including cybersecurity risks related to the use of third-party service providers.
Our ERM program is overseen by a group of highly-qualified individuals and is tailored to the unique structure of our business. As a holding company with a small group of highly qualified employees, we are well positioned to maintain operations in the event of a disaster or a material disruption to our information technology ("IT") infrastructure and networks. Our CISO has extensive information technology, cybersecurity and program management experience as do many of the employees in the information security group for our third-party provider. Our CISO, as well as others in our third-party provider's information security group, hold certifications such as the Certified Information System Security Professional certification. Each of our various businesses separately maintains business continuity functions that adhere to the unique requirements of their business.
On an ongoing basis, management assesses the cybersecurity risks of Cannae and aligns its procedures and its audit plan with the identified and addressable risks. The underlying controls of the cyber risk management program are based on the recognized standards as outlined in the National Institute of Standards and Technology ("NIST") Cybersecurity Framework. We utilize a third party to manage our IT network and processes and our ERM personnel work directly with the provider on all aspects of the Company's IT infrastructure and cybersecurity risks. Risks are evaluated over various timeframes; however, the focus of management’s risk assessment is on risks to the long-term solvency and sustainability of the ongoing operations of Cannae. Risks with the potential for an adverse impact to the Company in the near term are prioritized to the extent they present a material risk to the financial viability of the Company.
We apply a comprehensive approach to the mitigation of identified security risks, including monitoring our third-party IT service provider and management of our unconsolidated affiliates. As a holding company with relatively low volumes of personnel and third-party data, we have established policies, procedures and controls, including those related to privacy, information security and cybersecurity, and we employ a broad and diversified set of IT risk monitoring and risk mitigation techniques tailored to the unique nature of our business, including threat and vulnerability management, security monitoring,
24
Table of Contents
identity and access management, phishing awareness, risk oversight, third-party risk management, disaster recovery and business continuity management.
In the event of a cybersecurity incident, we have established protocols for management's response to incidents and we regularly test those protocols with appropriate management personnel. Such protocols include an incident response playbook with the assessment of cybersecurity risks and procedures and hierarchies for escalating and reporting incidents to executive management, the board of directors, investors, government agencies and the general public.
The employees at our consolidated companies are the strongest assets in protecting information and mitigating risk. We monitor the security practices of our employees, including training programs that focus on applicable privacy, security, legal, and regulatory requirements that provide ongoing enhancement of their respective security and risk cultures. Our employees participate in an annual Information Security Training.