Skip to content
KStart free
AI InfrastructureDefenseQuantumAll studies →

CVS US Equity

CVS HEALTH CorpConsumer Staples · Retail-Drug Stores and Proprietary Stores · CIK 64803 · FY ends Dec 31
$93.02
-0.63 (-0.67%)
USD · as of 2026-08-21 · marketstack

CVS · 10-K · period ended 2023-12-31

← all CVS documents
filed 2024-02-07 · EDGAR original ↗

Our rendering of the filing — original pagination and typography are not reproduced, and tables are reduced to their short label cells (the figures live on FA). Nothing is summarized: every line below is the filing's own text.

blocks 1355 of 2,853784k characters rendered

cvs-20231231

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

☑ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2023

or

☐TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from _________ to_________

Commission file number: 001-01011

CVS HEALTH CORPORATION

(Exact name of registrant as specified in its charter)

One CVS Drive, Woonsocket, Rhode Island 02895

(Address of principal executive offices) (Zip Code)

Registrant’s telephone number, including area code: (401) 765-1500

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbol(s) Name of each exchange on which registered

Common Stock, par value $0.01 per share CVS New York Stock Exchange

Securities registered pursuant to Section 12(g) of the Act: None

Large accelerated filer ☒ Accelerated filer ☐

Non-accelerated filer ☐ Smaller reporting company ☐

Emerging growth company ☐

The aggregate market value of the registrant’s common stock held by non-affiliates was approximately $88,547,881,979 as of June 30, 2023, based on the closing price of the common stock on the New York Stock Exchange. For purposes of this calculation, only executive officers and directors are deemed to be affiliates of the registrant.

As of January 31, 2024, the registrant had 1,258,449,553 shares of common stock outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

The following materials are incorporated by reference into this Form 10-K:

Information contained in the definitive proxy statement for CVS Health Corporation’s 2024 Annual Meeting of Stockholders, to be filed with the Securities and Exchange Commission within 120 days after the end of the fiscal year ended December 31, 2023 (the “Proxy Statement”), is incorporated by reference in Parts III and IV to the extent described therein.

TABLE OF CONTENTS

Page

Part I

Item 1: Business 3

Item 1A: Risk Factors 38

Item 1B: Unresolved Staff Comments 67

Item 1C: Cybersecurity 67

Item 2: Properties 68

Item 3: Legal Proceedings 69

Item 4: Mine Safety Disclosures 69

Information about our Executive Officers 70

Part II

Item 6: Reserved 74

Item 7A: Quantitative and Qualitative Disclosures About Market Risk 105

Item 8: Financial Statements and Supplementary Data 108

Item 9A: Controls and Procedures 199

Item 9B: Other Information 199

Item 9C: Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 200

Part III

Item 10: Directors, Executive Officers and Corporate Governance 200

Item 11: Executive Compensation 200

Item 14: Principal Accountant Fees and Services 201

Part IV

Item 15: Exhibits and Financial Statement Schedules 202

Unless the context otherwise requires, references to the terms “we,” “our” or “us” used throughout this Annual Report on Form 10-K (this “10-K”) refer to CVS Health Corporation (a Delaware corporation), together with its subsidiaries (collectively, “CVS Health” or the “Company”). References to competitors and other companies throughout this 10-K, including the information incorporated herein by reference, are for illustrative or comparison purposes only and are not identifying that these companies are the only competitors or closest competitors of the Company or any of the Company’s businesses, products, or services.

CAUTIONARY STATEMENT CONCERNING FORWARD-LOOKING STATEMENTS

The Private Securities Litigation Reform Act of 1995 (the “Reform Act”) provides a “safe harbor” for forward-looking statements, so long as (1) those statements are identified as forward-looking, and (2) the statements are accompanied by meaningful cautionary statements that identify important factors that could cause actual results to differ materially from those discussed in the statement. We want to take advantage of these safe harbor provisions.

Certain information contained in this 10-K is forward-looking within the meaning of the Reform Act or Securities and Exchange Commission (“SEC”) rules. This information includes, but is not limited to: “Outlook for 2024” of Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) included in Item 7, “Quantitative and Qualitative Disclosures About Market Risk” included in Item 7A, “Government Regulation” included in Item 1, and “Risk Factors” included in Item 1A. In addition, throughout this 10-K and our other reports and communications, we use the following words or variations or negatives of these words and similar expressions when we intend to identify forward-looking statements:

· Anticipates · Believes · Can · Continue · Could

· Estimates · Evaluate · Expects · Explore · Forecast

· Guidance · Intends · Likely · May · Might

· Outlook · Plans · Potential · Predict · Probable

· Projects · Seeks · Should · View · Will

All statements addressing the future operating performance of CVS Health or any segment or any subsidiary and/or future events or developments, including, but not limited to, statements relating to the Company’s investment portfolio, operating results, cash flows and/or financial condition, statements relating to corporate strategy, statements relating to future revenue, operating income or adjusted operating income, earnings per share or adjusted earnings per share, Health Care Benefits segment business, sales results and/or trends, medical cost trends, medical membership, Medicare Part D membership, medical benefit ratios and/or operations, Health Services segment business, sales results and/or trends and/or operations, Pharmacy & Consumer Wellness segment business, sales results and/or trends and/or operations, incremental investment spending, interest expense, effective tax rate, weighted-average share count, cash flow from operations, net capital expenditures, cash available for debt repayment, statements related to possible, proposed, pending or completed acquisitions, joint ventures, investments or combinations that involve, among other things, the timing or likelihood of receipt of regulatory approvals, the timing of completion, integration synergies, net synergies and integration risks and other costs, including those related to CVS Health’s acquisitions of Oak Street Health, Inc. (“Oak Street Health”) and Signify Health, Inc. (“Signify Health”), enterprise modernization, transformation, leverage ratio, cash available for enhancing shareholder value, inventory reduction, turn rate and/or loss rate, debt ratings, the Company’s ability to attract or retain customers and clients, store development and/or relocations, new product development, and the impact of industry and regulatory developments, as well as statements expressing optimism or pessimism about future operating results or events, are forward-looking statements within the meaning of the Reform Act.

Forward-looking statements rely on a number of estimates, assumptions and projections concerning future events, and are subject to a number of significant risks and uncertainties and other factors that could cause actual results to differ materially from those statements. Many of these risks and uncertainties and other factors are outside our control.

Certain additional risks and uncertainties and other factors are described under “Risk Factors” included in Item 1A of this 10-K; these are not the only risks and uncertainties we face. There can be no assurance that the Company has identified all the risks that may affect it. Additional risks and uncertainties not presently known to the Company or that the Company currently believes to be immaterial also may adversely affect the Company’s businesses. If any of those risks or uncertainties develops into actual events, those events or circumstances could have a material adverse effect on the Company’s businesses, operating results, cash flows, financial condition and/or stock price, among other effects.

1

Table of Contents

You should not put undue reliance on forward-looking statements. Any forward-looking statement speaks only as of the date of this 10-K, and we disclaim any intention or obligation to update or revise forward-looking statements, whether as a result of new information, future events, uncertainties or otherwise.

2

Table of Contents

PART I

Item 1. Business.

Overview

CVS Health Corporation, together with its subsidiaries (collectively, “CVS Health,” the “Company,” “we,” “our” or “us”), is a leading health solutions company building a world of health around every consumer it serves and connecting care so that it works for people wherever they are. As of December 31, 2023, we had more than 9,000 retail locations, more than 1,000 walk-in medical clinics, 204 primary care medical clinics, a leading pharmacy benefits manager with approximately 108 million plan members and expanding specialty pharmacy solutions, and a dedicated senior pharmacy care business serving more than one million patients per year. We serve an estimated more than 35 million people through traditional, voluntary and consumer-directed health insurance products and related services, including expanding Medicare Advantage offerings and a leading standalone Medicare Part D prescription drug plan (“PDP”). We are creating new sources of value through our integrated model allowing us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs.

During the year ended December 31, 2023, the Company completed the acquisition of two key health care delivery assets to enhance its ability to execute on its care delivery strategy by advancing its primary care, home-based care and provider enablement capabilities. On March 29, 2023, the Company acquired Signify Health, Inc. (“Signify Health”), a leader in health risk assessments, value-based care and provider enablement services. On May 2, 2023, the Company also acquired Oak Street Health, Inc. (“Oak Street Health”), a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. Both Signify Health and Oak Street Health are included within the Health Services segment.

In connection with its new operating model adopted in the first quarter of 2023, the Company realigned the composition of its segments to reflect how its Chief Operating Decision Maker (the “CODM”) reviews information and manages the business. The Company’s CODM is the Chief Executive Officer. As a result of this realignment, the Company formed a new Health Services segment, which in addition to providing a full range of pharmacy benefit management (“PBM”) solutions, also delivers health care services in the Company’s medical clinics, virtually, and in the home, as well as provider enablement solutions. In addition, the Company created a new Pharmacy & Consumer Wellness segment, which includes its retail and long-term care pharmacy operations and related pharmacy services, as well as its retail front store operations. This segment will also provide pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. Prior period segment financial information has been recast to conform with the current period presentation. See Note 19 ‘‘Segment Reporting’’ included in Item 8 of this 10-K for segment financial information.

The Company has four reportable segments: Health Care Benefits, Health Services, Pharmacy & Consumer Wellness and Corporate/Other.

Business Strategy

We are building a world of health around every consumer we serve, seeking to make it easier and more affordable to live a healthier life. This means delivering solutions that are more personalized, simpler to use and increasingly digital so consumers can receive care when, where and how they desire. We address holistic health – physical, emotional, social and economic – and we are creating new sources of value through our integrated care model which allows us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs. We believe our consumer-centric strategy will drive sustainable long-term growth and deliver value for all stakeholders.

Health Care Benefits Segment

The Health Care Benefits segment operates as one of the nation’s leading diversified health care benefits providers, serving an estimated more than 35 million people as of December 31, 2023. The Health Care Benefits segment has the information and resources to help members, in consultation with their health care professionals, make more informed decisions about their health care. The Health Care Benefits segment offers a broad range of traditional, voluntary and consumer-directed health insurance products and related services, including medical, pharmacy, dental and behavioral health plans, medical management capabilities, Medicare Advantage and Medicare Supplement plans, PDPs and Medicaid health care management services. The Health Care Benefits segment’s customers include employer groups, individuals, college students, part-time and hourly

3

workers, health plans, health care providers (“providers”), governmental units, government-sponsored plans, labor groups and expatriates.

Health Care Benefits Products and Services

The Company refers to insurance products (where it assumes all or a majority of the risk for medical and dental care costs) as “Insured” and administrative services contract products (where the plan sponsor assumes all or a majority of the risk of medical and dental care costs) as “ASC.” Health Care Benefits products and services consist of the following:

•Commercial Medical: The Health Care Benefits segment offers point-of-service (“POS”), preferred provider organization (“PPO”), health maintenance organization (“HMO”) and indemnity benefit (“Indemnity”) plans. Commercial medical products also include health savings accounts (“HSAs”) and consumer-directed health plans that combine traditional POS or PPO and/or dental coverage, subject to a deductible, with an accumulating benefit account (which may be funded by the plan sponsor and/or the member in the case of HSAs). Principal products and services are targeted specifically to large multi-site national, mid-sized and small employers, individual insureds and expatriates. The Company offers medical stop loss insurance coverage for certain employers who elect to self-insure their health benefits. Under medical stop loss insurance products, the Company assumes risk for costs associated with large individual claims and/or aggregate loss experience within an employer’s plan above a pre-set annual threshold. The segment also has a portfolio of additional health products and services that complement its medical products such as dental plans, behavioral health and employee assistance products, provider network access and vision products.

•Government Medical: In select geographies, the Health Care Benefits segment offers Medicare Advantage plans, Medicare Supplement plans and prescription drug coverage for Medicare beneficiaries; participates in Medicaid and subsidized Children’s Health Insurance Programs (“CHIP”); and participates in demonstration projects for members who are eligible for both Medicare and Medicaid (“Duals”). These Government Medical products are further described below:

•Medicare Advantage: Through annual contracts with the U.S. Centers for Medicare & Medicaid Services (“CMS”), the Company offers HMO and PPO products for eligible individuals in certain geographic areas through the Medicare Advantage program. Members typically receive enhanced benefits over traditional fee-for-service Medicare coverage (“Original Medicare”), including reduced cost-sharing for preventive care, vision and other services. The Company offered network-based HMO and/or PPO plans in 46 states and Washington, D.C. in 2023. For certain qualifying employer groups, the Company offers Medicare PPO products nationally. When combined with the Company’s PDP product, these national PPO plans form an integrated national Insured Medicare product for employers that provides medical and pharmacy benefits.

•Medicare PDP: The Company is a national provider of drug benefits under the Medicare Part D prescription drug program. All Medicare eligible individuals are eligible to participate in this voluntary prescription drug plan. Members typically receive coverage for certain prescription drugs, usually subject to a deductible, co-insurance and/or co-payment. The Company offered PDP plans in all 50 states and Washington, D.C. in 2023.

•Medicare Supplement: For certain Medicare eligible members, the Company offers supplemental coverage for certain health care costs not covered by Original Medicare. The products included in the Medicare Supplement portfolio help to cover some of the gaps in Original Medicare, and include coverage for Medicare deductibles and coinsurance amounts. The Company offered a wide selection of Medicare Supplement products in 49 states and Washington, D.C. in 2023.

•Medicaid and CHIP: The Company offers health care management services to individuals eligible for Medicaid and CHIP under multi-year contracts with government agencies in various states that are subject to annual appropriations. CHIP are state-subsidized insurance programs that provide benefits for families with uninsured children. The Company offered these services on an Insured or ASC basis in 16 states in 2023.

•Duals: The Company provides health coverage to beneficiaries who are dually eligible for both Medicare and Medicaid coverage. These members must meet certain income and resource requirements in order to qualify for this coverage. The Company coordinates 100% of the care for these members and may provide them with additional services in order to manage their health care costs.

The Company also has a portfolio of transformative products and services aimed at creating a holistic and integrated approach to individual health and wellness. These products and services complement the Commercial Medical and Government Medical products and aim to provide innovative solutions, create integrated experience offerings and enable enhanced care delivery to customers.

4

Health Care Benefits Provider Networks

The Company contracts with physicians, hospitals and other providers for services they provide to the Company’s members. The Company uses a variety of techniques designed to help encourage appropriate utilization of medical services (“utilization”) and maintain affordability of quality coverage. In addition to contracts with providers for negotiated rates of reimbursement, these techniques include creating risk sharing arrangements that align economic incentives with providers, the development and implementation of guidelines for the appropriate utilization and the provision of data to providers to enable them to improve health care quality. At December 31, 2023, the Company’s underlying nationwide provider network had approximately 1.7 million participating providers. Other providers in the Company’s provider networks also include laboratory, imaging, urgent care and other freestanding health facilities.

Health Care Benefits Quality Assessment

CMS uses a 5-star rating system to monitor Medicare health care and drug plans and ensure that they meet CMS’s quality standards. CMS uses this rating system to provide Medicare beneficiaries with a tool that they can use to compare the overall quality of care and level of customer service of companies that provide Medicare health care and drug plans. The rating system considers a variety of measures adopted by CMS, including quality of preventative services, chronic illness management and overall customer satisfaction. See “Health Care Benefits Pricing” below in this Item 1 for further discussion of star ratings. The Company seeks Health Plan accreditation for Aetna Inc. (“Aetna”) HMO plans from the National Committee for Quality Assurance (“NCQA”), a private, not-for-profit organization that evaluates, accredits and certifies a wide range of health care organizations. Health care plans seeking accreditation must pass a rigorous, comprehensive review and must annually report on their performance.

Aetna Life Insurance Company (“ALIC”), a wholly-owned subsidiary of the Company, has received nationwide NCQA PPO Health Plan accreditation. As of December 31, 2023, all of the Company’s Commercial HMO and all of ALIC’s PPO members who were eligible participated in HMOs or PPOs that are accredited by the NCQA.

The Company’s provider selection and credentialing/re-credentialing policies and procedures are consistent with NCQA and URAC, a health care accrediting organization that establishes quality standards for the health care industry, as well as state and federal, requirements. In addition, the Company is certified under the NCQA Credentials Verification Organization (“CVO”) certification program for all certification options and has URAC CVO accreditation.

Quality assessment programs for contracted providers who participate in the Company’s networks begin with the initial review of health care practitioners. Practitioners’ licenses and education are verified, and their work history is collected by the Company or in some cases by the practitioner’s affiliated group or organization. The Company generally requires participating hospitals to be certified by CMS or accredited by The Joint Commission, the American Osteopathic Association, or Det Norske Veritas Healthcare.

The Company also offers quality and outcome measurement programs, quality improvement programs, and health care data analysis systems to providers and purchasers of health care services.

Health Care Benefits Information Systems

The Health Care Benefits segment currently operates and supports an end-to-end suite of information technology platforms to support member engagement, enrollment, health benefit administration, care management, service operations, financial reporting and analytics. The multiple platforms are supported by an integration layer to facilitate the transfer of real-time data. There is continued focus and investment in enterprise data platforms, cloud capabilities, digital products to offer innovative solutions and a seamless experience to the Company’s members through mobile and web channels. The Company is making concerted investments in emerging technology capabilities such as voice, artificial intelligence and robotics to further automate, reduce cost and improve the experience for all of its constituents. The Health Care Benefits segment is utilizing the full breadth of the Company’s assets to build enterprise technology that will help guide our members through their health care journey, provide them a high level of service, enable healthier outcomes and encourage them to take next best actions to lead healthier lives.

Health Care Benefits Customers

Medical membership is dispersed throughout the U.S., and the Company also serves medical members in certain countries outside the U.S. The Company offers a broad range of traditional, voluntary and consumer-directed health insurance products

5

and related services, many of which are available nationwide. Depending on the product, the Company markets to a range of customers, including employer groups, individuals, college students, part-time and hourly workers, health plans, providers, governmental units, government-sponsored plans, labor groups and expatriates. For additional information on medical membership, see “Health Care Benefits Segment” in the Management’s Discussion and Analysis of Financial Condition and Results of Operations (the “MD&A”) included in Item 7 of this 10-K.

The Company markets both Commercial Insured and ASC products and services primarily to employers that sponsor the Company’s products for the benefit of their employees and their employees’ dependents. Frequently, larger employers offer employees a choice among coverage options from which the employee makes his or her selection during a designated annual open enrollment period. Typically, employers pay all of the monthly premiums to the Company and, through payroll deductions, obtain reimbursement from employees for a percentage of the premiums that is determined by each employer. Some Health Care Benefits products are sold directly to employees of employer groups on a fully employee-funded basis. In some cases, the Company bills the covered individual directly. The Company sold Insured plans directly to individual consumers through the individual public health insurance exchanges (“Public Exchanges”) in 12 states as of December 31, 2023. The Company entered Public Exchanges in five additional states effective January 2024.

The Company offers Insured Medicare coverage on an individual basis as well as through employer groups to their retirees. Medicaid and CHIP members are enrolled on an individual basis. The Company also offers Insured health care coverage to members who are dually-eligible for both Medicare and Medicaid.

Health Care Benefits products are sold through: the Company’s sales personnel; independent brokers, agents and consultants who assist in the production and servicing of business; as well as private health insurance exchanges (“Private Exchanges”) and Public Exchanges (together with Private Exchanges, “Insurance Exchanges”). For large employers or other entities that sponsor the Company’s products (“plan sponsors”), independent consultants and brokers are frequently involved in employer health plan selection decisions and sales. In some instances, the Company may pay commissions, fees and other amounts to brokers, agents, consultants and sales representatives who place business with the Company. In certain cases, the customer pays the broker for services rendered, and the Company may facilitate that arrangement by collecting the funds from the customer and transmitting them to the broker. The Company supports marketing and sales efforts with an advertising program that may include television, radio, billboards, print media and social media, supplemented by market research and direct marketing efforts.

The U.S. federal government is a significant customer of the Health Care Benefits segment through contracts with CMS for coverage of Medicare-eligible individuals and federal employee-related benefit programs. Other than the contracts with CMS, the Health Care Benefits segment is not dependent upon a single customer or a few customers the loss of which would have a significant effect on the earnings of the segment. The loss of business from any one or a few independent brokers or agents would not have a material adverse effect on the earnings of the Health Care Benefits segment. Health Care Benefits segment revenues from the federal government accounted for 14% of the Company’s consolidated total revenues in 2023, 2022 and 2021. Contracts with CMS for coverage of Medicare-eligible individuals in the Health Care Benefits segment accounted for approximately 73%, 74% and 79%, respectively, of the Company’s consolidated revenues from the federal government in 2023, 2022 and 2021.

Health Care Benefits Pricing

For Commercial Insured plans, contracts containing the pricing and other terms of the relationship are generally established in advance of the policy period and typically have a duration of one year. Fees under ASC plans are generally fixed for a period of one year.

Generally, a fixed premium rate is determined at the beginning of the policy period for Commercial Insured plans. The Company typically cannot recover unanticipated increases in health care and other benefit costs in the current policy period; however, it may consider prior experience for a product in the aggregate or for a specific customer, among other factors, in determining premium rates for future policy periods. Where required by state laws, premium rates are filed and approved by state regulators prior to contract inception. Future operating results could be adversely affected if the premium rates requested are not approved or are adjusted downward or their approval is delayed by state or federal regulators.

The Company has Medicare Advantage and PDP contracts with CMS to provide HMO, PPO and prescription drug coverage to Medicare beneficiaries in certain geographic areas. Under these annual contracts, CMS pays the Company a fixed per member (or “capitation”) payment and/or a portion of the premium, both of which are based on membership and adjusted for demographic and health risk factors. CMS also considers inflation, changes in utilization patterns and average per capita fee-

6

for-service Medicare costs in the calculation of the fixed capitation payment or premium. PDP contracts also provide a risk-sharing arrangement with CMS to limit the Company’s exposure to unfavorable expenses or benefit from favorable expenses. Amounts payable to the Company under the Medicare arrangements are subject to annual revision by CMS, and the Company elects to participate in each Medicare service area or region on an annual basis. Premiums paid to the Company for Medicare products are subject to federal government reviews and audits, which can result, and have resulted, in retroactive and prospective premium adjustments and refunds to the government and/or members. In addition to payments received from CMS, some Medicare Advantage products and all PDP products require a supplemental premium to be paid by the member or sponsoring employer. In some cases, these supplemental premiums are adjusted based on the member’s income and asset levels. Compared to Commercial Medical products, Medicare contracts generate higher per member per month revenues and higher health care and other benefit costs.

The Patient Protection and Affordable Care Act and the Health Care and Education Reconciliation Act of 2010 (collectively, the “ACA”) ties a portion of each Medicare Advantage plan’s reimbursement to the plan’s “star ratings.” Plans must have a star rating of 4 or higher (out of 5) to qualify for bonus payments. CMS released the Company’s 2024 star ratings in October 2023. The Company’s 2024 star ratings will be used to determine which of the Company’s Medicare Advantage plans have ratings of four stars or higher and qualify for bonus payments in 2025. Based on the Company’s membership at December 31, 2023, 87% of the Company’s Medicare Advantage members were in plans with 2024 star ratings of at least 4.0 stars, compared to the unmitigated 21% of the Company’s Medicare Advantage members being in plans with 2023 star ratings of at least 4.0 stars based on the Company’s membership at December 31, 2022. Refer to “Medicare Star Ratings” within the “Government Regulation” section of this Item 1 for further discussion of the decrease in the Company’s star ratings.

Rates for Medicare Supplement products are regulated at the state level and vary by state and plan.

Under Insured Medicaid contracts, state government agencies pay the Company fixed monthly rates per member that vary by state, line of business and demographics; and the Company arranges, pays for and manages the health care services provided to Medicaid beneficiaries. These rates are subject to change by each state, and, in some instances, provide for adjustment for health risk factors. CMS requires these rates to be actuarially sound. The Company also receives fees from customers where it provides services under ASC Medicaid contracts. ASC Medicaid contracts generally are for periods of more than one year, and certain of them contain performance incentives and limited financial risk sharing with respect to certain medical, financial and operational metrics. Under these arrangements, performance is evaluated annually, with associated financial incentive opportunities, and financial risk share obligations are typically limited to a percentage of the fees otherwise payable to the Company. Payments to the Company under Medicaid contracts are subject to the annual appropriation process in the applicable state.

Under Duals contracts, the rate setting process is generally established by CMS in partnership with the state government agency participating in the demonstration project. Both CMS and the state government agency may seek premium and other refunds under certain circumstances, including if the Company fails to comply with CMS regulations or other contractual requirements.

The Company offers HMO and consumer-directed medical and dental plans to federal employees under the Federal Employees Health Benefits (“FEHB”) Program and the Federal Employees Dental and Vision Insurance Program. Premium rates and fees for those plans are subject to federal government review and audit, which can result, and have resulted, in retroactive and prospective premium and fee adjustments and refunds to the government and/or members.

Health Care Benefits Seasonality

The Health Care Benefits segment’s quarterly operating income progression is impacted by (i) the seasonality of benefit costs which generally increase during the year as Insured members progress through their annual deductibles and out-of-pocket expense limits, (ii) continued changes in product mix between Commercial and Government medical membership and (iii) the seasonality of operating expenses, which are generally the highest during the fourth quarter due primarily to spending to support readiness for the start of the upcoming plan year and marketing associated with Medicare annual enrollment.

During the year ended December 31, 2023, overall medical costs continued to progress toward normalized utilization in the first quarter. Beginning in the second quarter of 2023, the segment experienced higher than previously expected medical cost trend in Medicare Advantage driven by increased outpatient and supplemental benefit utilization when compared with pandemic influenced utilization levels in the prior year. This elevated utilization continued through year end, which resulted in elevated medical costs throughout the remainder of 2023.

7

During the year ended December 31, 2022, the impact of COVID-19 within the Health Care Benefits segment generally stabilized as a result of the Company’s ability to capture COVID-19 related medical costs in pricing, and the segment experienced a return to a more normal seasonality pattern, as described above.

During the year ended December 31, 2021, the customary quarterly operating income progression was impacted by COVID-19. While overall medical costs in the first quarter were generally consistent with historical baseline levels in the aggregate, the segment experienced increased COVID-19 testing and treatment costs and lower Medicare risk-adjusted revenue. During the second quarter, COVID-19 testing and treatment costs persisted, however at levels significantly lower than those observed during the first quarter. Beginning in the third quarter, medical costs once again increased primarily driven by the spread of the emerging new variants of COVID-19, which resulted in increased testing and treatment costs that continued throughout the fourth quarter.

Health Care Benefits Competition

The health care benefits industry is highly competitive, primarily due to a large number of for-profit and not-for-profit competitors, competitors’ marketing and pricing and a proliferation of competing products, including new products that are continually being introduced into the marketplace. New entrants into the marketplace, as well as consolidation within the industry, have contributed to and are expected to intensify the competitive environment. In addition, the rapid pace of change as the industry evolves towards a consumer-focused retail marketplace, including Insurance Exchanges, and the increased use of technology to interact with members, providers and customers, increase the risks the Company faces from new entrants and disruptive actions by existing competitors compared to prior periods.

The Company believes that the significant factors that distinguish competing health plans include the perceived overall quality (including accreditation status), quality of service, comprehensiveness of coverage, cost (including premium rates, provider discounts and member out-of-pocket costs), product design, financial stability and ratings, breadth and quality of provider networks, ability to offer different provider network options, providers available in such networks, and quality of member support and care management programs. The Company believes that it is competitive on each of these factors. The Company’s ability to increase the number of persons covered by its health plans or to increase Health Care Benefits segment revenues is affected by its ability to differentiate itself from its competitors on these factors. Competition may also affect the availability of services from providers, including primary care physicians, specialists and hospitals.

Insured products compete with local and regional health care benefits plans, health care benefits and other plans sponsored by other large commercial health care benefit insurance companies, health system owned health plans, new entrants into the marketplace and numerous for-profit and not-for-profit organizations operating under licenses from the Blue Cross and Blue Shield Association. The largest competitor in Medicare products is Original Medicare. Additional Health Care Benefits segment competitors include other types of medical and dental provider organizations, various specialty service providers (including PBM services providers), health care consultants, financial services companies, integrated health care delivery organizations (networks of providers who also coordinate administrative services for and assume insurance risk of their members), third party administrators (“TPAs”) and, for certain plans, programs sponsored by the federal or state governments. Emerging competitors include start up health care benefits plans, provider-owned health plans, new joint ventures (including not-for-profit joint ventures among firms from multiple industries), financial services firms that are distributing competing products on their proprietary Private Exchanges, and consulting firms that are distributing competing products on their proprietary Private Exchanges, as well as non-traditional distributors such as retail companies. The Company’s ability to increase the number of persons enrolled in Insured Commercial Medical products also is affected by the desire and ability of employers to self-fund their health coverage.

The Health Care Benefits segment’s ASC plans compete primarily with other large commercial health care benefit companies, numerous for-profit and not-for-profit organizations operating under licenses from the Blue Cross and Blue Shield Association and TPAs.

In addition to competitive pressures affecting the Company’s ability to obtain new customers or retain existing customers, the Health Care Benefits segment’s medical membership has been and may continue to be adversely affected by adverse and/or uncertain economic conditions and reductions in workforce by existing customers due to adverse and/or uncertain general economic conditions, especially in the U.S. and industries where such membership is concentrated.

8

Health Care Benefits Reinsurance

The Companycurrently hasseveral reinsurance agreements with non-affiliated insurers that relate to Health Care Benefits insurance policies. The Company entered into these contracts to reduce the risk of catastrophic losses which in turn reduces capital and surplus requirements. The Company frequently evaluates reinsurance opportunities and refines its reinsurance and risk management strategies on a regular basis.

Health Services Segment

The Health Services segment provides a full range of PBM solutions, delivers health care services in its medical clinics, virtually, and in the home, and offers provider enablement solutions. PBM solutions include plan design offerings and administration, formulary management, retail pharmacy network management services, and specialty and mail order pharmacy services. In addition, the Company provides clinical services, disease management services, medical spend management and pharmacy and/or other administrative services for providers and federal 340B drug pricing program covered entities (“Covered Entities”). The Company operates a group purchasing organization that negotiates pricing for the purchase of pharmaceuticals and rebates with pharmaceutical manufacturers on behalf of its participants and provides various administrative, management and reporting services to pharmaceutical manufacturers. During 2023, the Company completed the acquisition of two key health care delivery assets – Signify Health, a leader in health risk assessments, value-based care and provider enablement services, and Oak Street Health, a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. The Company also announced the launch of CordavisTM, a wholly owned subsidiary that will work directly with pharmaceutical manufacturers to commercialize and/or co-produce high quality biosimilar products. The Health Services segment’s clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Medicaid managed care (“Managed Medicaid”) plans, CMS, plans offered on Insurance Exchanges and other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities. During the year ended December 31, 2023, the Company’s PBM filled or managed 2.3 billion prescriptions on a 30-day equivalent basis.

Health ServicesProducts and Services

PBM Solutions

The Health Services segment manages prescription drug distribution directly through the Company’s specialty and mail order pharmacies and through pharmacies in its retail network. All prescriptions processed by the Company are analyzed, processed and documented by the Company’s proprietary prescription management systems. These systems provide essential features and functionality to allow plan members to utilize their prescription drug benefits. These systems also streamline the process by which prescriptions are processed by staff and network pharmacists by enhancing review of various items through automation, including plan eligibility, early refills, duplicate dispensing, appropriateness of dosage, drug interactions or allergies, over-utilization and potential fraud.

Plan Design Offerings and Administration

The Company assists its PBM clients in designing pharmacy benefit plans that help improve health outcomes while minimizing the costs to the client. The Company also assists PBM clients in monitoring the effectiveness of their plans through frequent, informal communications, the use of proprietary software, as well as through formal annual, quarterly and sometimes monthly performance reviews. The Company administers pharmacy benefit plans for clients who contract with it to facilitate prescription drug coverage and claims processing for their eligible plan members. The Company also provides administrative services for Covered Entities.

The Company makes recommendations to help PBM clients design benefit plans that promote the use of lower cost, clinically appropriate drugs and helps its PBM clients control costs by recommending plan designs that encourage the use of generic equivalents of brand name drugs when such equivalents are available. Clients also have the option, through plan design, to further lower their pharmacy benefit plan costs by setting different member payment levels for different products on their drug lists or “formularies,” which helps guide members to choose lower cost alternatives through appropriate financial incentives.

Formulary Management

The Company utilizes an independent panel of doctors, pharmacists and other medical experts, referred to as the CVS Caremark National Pharmacy and Therapeutics Committee, to review and approve the selection of drugs that meet the Company’s standards of safety and efficacy for inclusion on one of the Company’s template formularies. The Company’s formularies provide recommended products in numerous drug classes to help ensure member access to clinically appropriate drugs with alternatives within a class under the client’s pharmacy benefit plan, while helping to drive the lowest net cost for clients that

9

select one of the Company’s formularies. To help improve clinical outcomes for members and clients, the Company conducts ongoing, independent reviews of all drugs, including those appearing on the formularies and generic equivalent products. Many of the Company’s clients choose to adopt a template formulary offering as part of their plan design. PBM clients are given capabilities to offer real time benefits information for a member’s specific plan design, provided electronically in the Electronic Health Record at the point of prescribing, at the CVS pharmacy and directly to members.

Retail Pharmacy NetworkManagement Services

The Company maintains a national network of approximately 66,000 retail pharmacies, consisting of approximately 38,000 chain pharmacies (which include CVS pharmacy locations) and approximately 28,000 independent pharmacies, in the U.S., including Puerto Rico, the District of Columbia, Guam and the U.S. Virgin Islands. When a customer fills a prescription in a retail pharmacy, the pharmacy sends prescription data electronically to the Company from the point-of-sale. This data interfaces with the Company’s proprietary prescription management systems, which verify relevant plan member data and eligibility, while also performing a drug utilization review to help evaluate clinical appropriateness and safety and confirming that the pharmacy will receive payment for the prescription.

Specialty and Mail Order Pharmacy Services

The Company operates mail order pharmacies, specialty mail order pharmacies and retail specialty pharmacy stores in the U.S. The mail order pharmacies are used primarily for maintenance medications, while the specialty mail order pharmacies and retail specialty pharmacy stores are used for the delivery of advanced medications to individuals with chronic or genetic diseases and disorders. The Health Services segment’s plan members or their prescribers submit prescriptions or refill requests to these pharmacies, and staff pharmacists review these prescriptions and refill requests with the assistance of the Company’s prescription management systems. This review may involve communications with the prescriber and, with the prescriber’s approval when required, can result in generic substitution, therapeutic interchange or other actions designed to help reduce cost and/or improve quality of treatment.

The Company’s mail order pharmacies and specialty mail order pharmacies have been awarded Mail Service Pharmacy and Specialty Pharmacy accreditation, respectively, from URAC. Substantially all of the Company’s specialty mail order pharmacies also have been accredited by The Joint Commission and the Accreditation Commission for Health Care (“ACHC”), which are independent, not-for-profit organizations that accredit and certify health care programs and organizations in the U.S. The ACHC accreditation includes an additional accreditation by the Pharmacy Compounding Accreditation Board, which certifies compliance with the highest level of pharmacy compounding standards.

In connection with its new operating model adopted in the first quarter of 2023, the Company consolidated its specialty and mail order pharmacy fulfillment operations, which were previously included in the former Pharmacy Services segment, with its retail and long-term care pharmacy fulfillment operations in the newly formed Pharmacy & Consumer Wellness segment. Under this new operating model, the Health Services segment pays an administrative service fee to the Pharmacy & Consumer Wellness segment, in exchange for which the Pharmacy & Consumer Wellness segment provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings.

Clinical Services

The Company offers multiple clinical programs and services to help clients manage overall pharmacy and health care costs in a clinically appropriate manner. These programs are primarily designed to promote better health outcomes and to help target inappropriate medication utilization and non-adherence to medication, each of which may result in adverse medical events that negatively affect member health and client pharmacy and medical spend. These programs include utilization management (“UM”), medication management, quality assurance, adherence and counseling programs to complement the client’s plan design and clinical strategies. To help address prescription opioid abuse and misuse, the Company introduced an industry-leading UM approach that limits to seven days the supply of opioids dispensed for certain acute prescriptions for patients who are new to therapy, limits the daily dosage of opioids dispensed based on the strength of the opioid and requires the use of immediate-release formulations of opioids before extended-release opioids are dispensed. The Company’s Pharmacy Advisor® program facilitates pharmacist counseling, both face-to-face and over the telephone, to help participating plan members with certain chronic diseases, such as diabetes and cardiovascular conditions, to identify gaps in care, adhere to their prescribed medications and manage their health conditions. The Company also has digital connectivity that helps to lower drug costs for patients by providing expanded visibility to lower cost alternatives through enhanced analytics and data sharing.

Disease Management Programs

The Company’s clinical programs and services utilize advanced protocols and offer clients convenience in working with providers and other third parties. The Company’s care management program covers diseases such as rheumatoid arthritis,

10

Parkinson’s disease, epilepsy and multiple sclerosis and is accredited by the NCQA. The Company’s UM program covers similar diseases and is accredited by the NCQA and URAC.

Medical Benefit Management

The Company’s NovoLogix® online preauthorization tool helps identify and capture cost savings opportunities for specialty drugs billed under the medical benefit by identifying outliers to appropriate dosages and costs, and helps to ensure clinically appropriate use of specialty drugs.

Group Purchasing Organization Services

The Company operates a group purchasing organization that negotiates pricing for the purchase of pharmaceuticals and rebates with pharmaceutical manufacturers on behalf of its participants. The Company also provides various administrative, management and reporting services to pharmaceutical manufacturers.

Value-Based Care

In response to rising healthcare spending in the U.S., commercial, government and other payors are shifting away from fee-for-service payment models towards value-based models, including risk-based payment models that tie financial incentives to quality, efficiency and coordination of care. Value-based care (“VBC”) refers to the goal of incentivizing healthcare providers to simultaneously increase quality while lowering the cost of care for patients. More specifically, providers in a VBC model are incentivized to focus on more preventative care, higher quality of care and better coordination of care to create better health outcomes and avoid potentially expensive complications from illnesses that could be managed more conveniently and cost effectively.

The Company is committed to expanding value-based care in the U.S. and delivering higher quality care to patients at a lower overall cost to the industry. The Company operates in value-based care through two primary means: providing comprehensive primary care through its Oak Street Health primary care centers and enabling independent health systems transition to value-based care through contracting and care management services. The Company’s value-based care assets typically contract with payors, primarily Medicare Advantage plans, and/or CMS.

The Company’s Oak Street Health business operates retail-like, community-based centers that provide medical primary care services and support Medicare eligible patients in the management of chronic illnesses and the prevention of unnecessary acute events. Through its centers and management services organization, the Company combines an innovative health care model and its proprietary Canopy technology with superior patient experience and quality care. The Company engages its patients through the use of an innovative community outreach approach. Once engaged, the Company integrates population health analytics, social support services and primary care into the care model to drive improved patient outcomes. The Company contracts with health plans and CMS to generate medical costs savings, assume full financial risk of its patients and realize a return on its investment in primary care.

The Company’s clinics implement a branded and consumer-focused design to create a welcoming environment that engages patients. While traditional healthcare facilities are often located in medical office buildings that are removed from where patients spend a majority of their time, the Company targets locations in highly accessible, convenient locations close to where patients live, work and shop. Each of the Company’s centers has a consistent look and feel, which contributes to the success in acquiring patients. Subsequent to the Company’s acquisition of Oak Street Health, the Company has opened 31 locations. As of December 31, 2023, the Company operated 204 centers across 25 states, which provided care for approximately 270,000 patients.

In addition to its primary care centers, the Company provides enablement services to independent health systems, assisting these groups with their transition to value-based care. The Company’s customers practice value-based care primarily through two programs administered by CMS, the Accountable Care Organization (“ACO”) Realizing Equity, Access, and Community Health (“REACH”) Model (collectively, “ACO REACH”) and the Medicare Shared Savings Program (“MSSP”), under which the Company served approximately 793,000 covered lives as of December 31, 2023.

ACOs are networks of healthcare providers and suppliers that work together to invest in infrastructure and redesign delivery processes to attempt to achieve high quality and efficient delivery of services. ACOs that achieve performance standards established by the U.S. Department of Health and Human Services (“HHS”) are eligible to share in a portion of the amounts saved by the Medicare program. ACOs employ a retrospective payment system in which Medicare reimburses providers in accordance with their usual fee-for-service payment schedule, while also tracking the total fee-for-service costs for all billable services rendered for attributed Medicare beneficiaries over the course of a year. CMS periodically compares the total amount of all fee-for-service payments for a beneficiary against a benchmark price for the annual cost of such beneficiary’s medical

11

care. If the total fee-for-service costs exceed the benchmark price, then typically the ACO owes a portion of the difference to CMS and, likewise, if total fee-for-service costs are lower than the benchmark price, then CMS pays a portion of the difference, representing the shared savings achieved, to the ACO.

The Company’s ACO REACH contracts are global risk arrangements and the ACO assumes full risk for the total cost of care for aligned beneficiaries and, accordingly, the ACO is subject to 100% of shared savings and shared losses. The final shared savings due from CMS or shared losses due to CMS for each performance period is reconciled in the year following the performance year.

As part of the MSSP, the Company helps unrelated providers join together to form a “collaborative ACO.” The collaborative ACO has a large attributed patient population, consisting of the beneficiaries attributed to all of the participating providers. Risks are therefore spread across a much larger beneficiary population, helping to stabilize performance and reduce downside risk for participating providers. The Company offers providers a suite of tools and services that are designed to enhance their ability to effectively manage and coordinate the care of attributed patients in order to improve patient outcomes, reduce costs and generate savings. The Company assumes a portion of the collaborative ACO’s financial risk and also receives a portion of any shared savings received by the collaborative ACO.

In-Home Health Evaluations

As a complement to its value-based care delivery, the Company operates a large mobile network of credentialed providers in the U.S. through its Signify Health business. These credentialed providers are deployed into the home primarily to conduct in-home health evaluations (“IHEs”) and perform select diagnostic services. IHEs may also be performed virtually or at a healthcare provider facility. From the date of the Signify Health acquisition through December 31, 2023, the Company performed nearly 2 million IHEs. While in the home, providers perform IHEs with the assistance of the Company’s longitudinal patient records and proprietary clinical workflow software with its integrated device hub. The Company’s software guides clinical workflows as well as in-home diagnostic screenings, yielding a rich patient report of hundreds of data points. The Company also offers diagnostic and preventive services and provides comprehensive medication review services while in the home. Through its IHEs, the Company creates a comprehensive, documented record of the clinical, social and behavioral needs of its health plan customers’ medically complex populations and seek to further engage them with the healthcare system.

The evaluation results of IHEs are provided to individuals’ primary care physicians. The Company believes sharing these results helps to fill gaps in care, while encouraging individuals who have not regularly visited their PCP to schedule a visit. The IHEs also provide health plans with insights into member health without taking members out of the home, the reports IHEs produce form a basis of the Medicare Risk Adjustment Factor (“RAF”) scores, which contribute to health plans’ ability to effectively participate in value-based and risk-adjusted government programs such as Medicare Advantage, and affect the premiums health plans receive for Medicare Advantage beneficiaries. The data gathered during an IHE is also a resource that can be used by health plans to improve their Healthcare Effectiveness Data and Information Set (“HEDIS”) scores and Medicare Advantage star ratings.

MinuteClinic

As of December 31, 2023, the Company operated more than 1,000 MinuteClinic locations in the U.S. The clinics are staffed by nurse practitioners and physician assistants who utilize nationally established guidelines to deliver a variety of health care services. Payors value these clinics because they provide convenient, high-quality, cost-effective care, in many cases offering an attractive alternative to more expensive sites of care. MinuteClinic also offers virtual care services to connect customers with licensed providers to provide access to health services remotely. MinuteClinic is collaborating with the Company’s medical and pharmacy members to help meet the needs of the Company’s health plan and client plan members by offering programs that can improve member health and lower costs. MinuteClinic also maintains relationships with leading hospitals, clinics and physicians in the communities we serve to support and enhance quality, access and continuity of care.

Health Services Information Systems

The Health Services segment’s claim adjudication platform incorporates architecture that centralizes the data generated from adjudicating retail pharmacy, specialty and mail order claims and delivering other solutions to PBM clients. The Health Engagement Engine® technology and proprietary clinical algorithms help connect various parts of the enterprise and serve an essential role in cost management and health improvement, leveraging cloud-native technologies and practices. This capability transforms pharmacy data into actionable interventions at key points of care, including in retail, mail and specialty pharmacies as well as in customer care call center operations, leveraging our enterprise data platform to improve the quality of care. The technology leverages assisted artificial intelligence to deliver insights to the business and bring automation to otherwise manual tasks. Specialty services also connects with our claim adjudication platform and various health plan adjudication platforms with

12

a centralized architecture servicing many clients and members. Operating services, such as Specialty Expedite®, provide an interconnected onboarding solution for specialty medications and branding solutions ranging from fulfillment to total patient management. These services are managed through our new innovative specialty workflow and web platform.

The Health Services segment’s custom-built proprietary Canopy technology is a key driver of the success of its value-based care model and foundation for patients receiving a consistent, high-quality level of care. Canopy underlies every aspect of the Company’s day-to-day clinical and operational workflows, allowing care teams to tailor care plans to the needs of both the patient and the business. Canopy integrates an immense amount of data about patients from a broad set of sources, including payor claims data, pharmacy data and medical records from hospitals and specialists and provides actionable insights and workflows to accelerate effective clinical management and oversight. Canopy leverages artificial intelligence and machine learning capabilities to create and refine a clinical rules engine (predictive models and prescriptive algorithms) that informs care delivery and addresses hospital admissions and readmissions, medical costs and patient retention.

Through the collaboration of its digital and technical teams, the Company has established critical tools which enable patients to schedule appointments through MinuteClinic.com. Key elements of the offerings include landing pages which highlight services and answer common questions, screening capabilities to determine patient eligibility, service location locator and appointment selection tools to efficiently identify the requested service on a specified date, time, and location and registration pages to collect required patient information, accelerating check-in once at the MinuteClinic. Once scheduled, the tools provide the user with instructions and notifications including SMS text message and email reminders, and also provide digital results and records, enabling patients to view and save their medical records for convenient access at a later point.

Health Services Clients & Customers

The Company’s Health Services clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Managed Medicaid plans, CMS, plans offered on Insurance Exchanges, other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities. The Health Services segment’s revenues are primarily generated from the sale and managing of prescription drugs to eligible members in benefit plans maintained by clients. Pharmaceuticals are provided to eligible members in benefit plans maintained by clients and utilize the Company’s information systems, among other things, to help perform safety checks, drug interaction screening and identify opportunities for generic substitution.

The Company’s primary care operations rely on its value-based capitated partnerships with payors and CMS which manage and market Medicare Advantage plans across the U.S. The Company has strategic value-based relationships with over 30 different payors as of December 31, 2023, including each of the top 5 national payors by number of Medicare Advantage patients. These existing contracts and relationships and their understanding of the value of the Company’s model reduces the risk of entering into new markets as the Company typically has payor contracts before entering a new market. Maintaining, supporting and growing these relationships, particularly as the Company enters new geographies, is critical to its long-term success.

The Company’s value-based care arrangements are primarily directed at independent health systems, including community hospitals, physician practices and clinics, participating in, or seeking to participate in, ACOs or contract with Medicare Advantage plans.

The Company’s IHE operations customers are primarily Medicare Advantage health plans and Managed Medicaid organizations. In 2023, the Company had IHE contracts with 52 health plans in the U.S., including 25 of the 50 largest Medicare Advantage plans.

Health Services Seasonality

The majority of the Health Services segment revenues, including revenues generated from its PBM services, are not seasonal in nature.

The Company’s primary care operations experience some variability depending upon the time of year in which they are measured. Typically, a significant portion of the Company’s at-risk patient growth is experienced during the first quarter, when plan enrollment selections made during the prior annual enrollment period from October 15th through December 7th of the prior year take effect. Per-patient revenue will generally decline over the course of the year as new patients typically join with less complete or accurate documentation (and therefore lower risk-adjustment scores), and patient attrition skews towards higher-risk (and therefore greater revenue) patients. Finally, medical costs will vary seasonally depending on a number of factors including the weather, which can be a driver of certain illnesses such as the influenza virus.

13

Revenues generated from the Company’s IHEs and related services are generally lower in the fourth quarter of each calendar year than the other quarters. Each year, IHE customers provide a member list, which may be supplemented or amended during the year. Customers generally limit the number of times the Company may attempt to contact their members. Throughout the year, as IHEs are completed and the Company attempts to contact members, the number of members who have not received an IHE and whom the Company is still able to contact declines, typically resulting in fewer IHEs scheduled during the fourth quarter.

Health Services Competition

The Company believes the primary competitive factors in the health services industry include: (i) the ability to negotiate favorable discounts from drug manufacturers as well as to negotiate favorable discounts from, and access to, retail pharmacy networks; (ii) the ability to identify and apply effective cost management programs utilizing clinical strategies, including the development and utilization of preferred formularies; (iii) the ability to market PBM and other health products and services; (iv) the commitment to provide flexible, clinically-oriented services to clients and be responsive to clients’ needs; (v) the ability to attract and retain physicians, nurse practitioners, physician assistants and other medical personnel; (vi) the quality, scope and costs of products and services offered to clients and their members, as well as the care delivered to customers; and (vii) operational excellence in delivering services.

The Health Services segment has a significant number of competitors offering PBM services, including large, national PBM companies (e.g., Prime Therapeutics and MedImpact), PBMs owned by large national health plans (e.g., the Express Scripts business of Cigna Corporation and the OptumRx business of UnitedHealth) and smaller standalone PBMs. The Health Services segment’s MinuteClinic offerings compete with retail health clinics, urgent care and primary care offices. The Company competes for provider solutions and health information technology (“HIT”) business with other large health plans and commercial health care benefit insurance companies as well as information technology companies and companies that specialize in provider solutions and HIT.

The Company’s primary care operations compete with large and medium-sized local and national providers of primary care services, such as Aledade, Centerwell and health system affiliated practices, for, among other things, contracts with payors, recruitment of physicians and other medical and non-medical personnel and individual patients. Principal primary care competitors for patients and payor contracts vary considerably in type and identity by market. Because of the low barriers of entry into the primary care business and the ability of physicians to own primary care centers and/or also be medical directors for their own centers, competition for growth in existing and expanding markets is not limited to large competitors with substantial financial resources.

The Company’s ACO operations compete with healthcare risk management providers. Key competitors are companies that work directly with providers to enable them to successfully take risk in value-based care arrangements. Some of these competitors focus on a specific function – like analytics – while others offer more comprehensive services. The MSSP offers comprehensive services, including a collaborative ACO model, a suite of population health tools and services, and the ability to facilitate in-home annual wellness visits, which is unique and distinguishes the Company from competitors. Some key competitors operate nationally (e.g., Aledade, Collaborative Health Systems, Evolent Health, Vytalize Health and Stellar Health) while other competitors are more geographically focused (e.g., Equality Health and Physicians of Southwest Washington).

The Company’s IHE and related services operations compete with a wide variety of local and national providers of in-home, virtual and in-person diagnostic and evaluative services. Competitors include pure-play companies whose principal business is providing health risk assessments and similar services (e.g., Matrix Medical Network), as well as large payors, which may use a variety of different providers to perform health risk assessments across care settings or may perform some or all of their health risk assessments utilizing their own in-house capabilities.

Pharmacy & Consumer Wellness Segment

The Pharmacy & Consumer Wellness segment dispenses prescriptions in its retail pharmacies and through its infusion operations, provides ancillary pharmacy services including pharmacy patient care programs, diagnostic testing and vaccination administration, and sells a wide assortment of health and wellness products and general merchandise. The segment also conducts long-term care pharmacy (“LTC”) operations, which distribute prescription drugs and provide related pharmacy consulting and ancillary services to long-term care facilities and other care settings, and provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. As of December 31, 2023, the Pharmacy

14

& Consumer Wellness segment operated more than 9,000 retail locations, as well as online retail pharmacy websites, LTC pharmacies and on-site pharmacies, retail specialty pharmacy stores, compounding pharmacies and branches for infusion and enteral nutrition services. During the year ended December 31, 2023, the Pharmacy & Consumer Wellness segment filled 1.6 billion prescriptions on a 30-day equivalent basis and dispensed approximately 26.7% of total retail pharmacy prescriptions in the U.S.

Pharmacy & Consumer Wellness Products and Services

A typical retail store sells prescription drugs and a wide assortment of high-quality, nationally advertised brand name and proprietary brand merchandise. Pharmacy locations may also contract with Covered Entities under the federal 340B drug pricing program. Front store categories include over-the-counter drugs, consumer health products, beauty products and personal care products. The Company purchases merchandise from numerous manufacturers and distributors. The Company believes that competitive sources are readily available for substantially all of the products carried in its retail stores and the loss of any one supplier would not likely have a material effect on the Pharmacy & Consumer Wellness segment. LTC operations include distribution of prescription drugs and related consulting and ancillary services.

Pharmacy & Consumer Wellness revenues by major product group are as follows:

Percentage of Revenues

_____________________________________________

(1)Pharmacy includes LTC sales and sales in pharmacies within Target Corporation (“Target”) and other retail stores.

(2)“Other” represents less than 11% of the “Front store and other” revenue category in all periods presented.

Pharmacy

Pharmacy revenues represented over three-fourths of Pharmacy & Consumer Wellness segment revenues in each of 2023, 2022 and 2021. The Company believes that retail pharmacy operations will continue to represent a critical part of the Company’s business due to industry demographics, e.g., an aging American population consuming a greater number of prescription drugs, prescription drugs being used more often as the first line of defense for managing illness, the introduction of new pharmaceutical products, the need for vaccinations, including the COVID-19 vaccination, and Medicare Part D growth. The Company believes the retail pharmacy business benefits from investment in both people and technology, as well as innovative collaborations with health plans, PBMs and providers. Given the nature of prescriptions, consumers want their prescriptions filled accurately by professional pharmacists using the latest tools and technology, and ready when promised. Consumers also need medication management programs and better information to help them get the most out of their health care dollars. To assist consumers with these needs, the Company has introduced integrated pharmacy health care services that provide an earlier, easier and more effective approach to engaging consumers in behaviors that can help lower costs, improve health and save lives.

Front Store

Front store revenues reflect the Company’s strategy of innovating with new and unique products and services, using innovative personalized marketing and adjusting the mix of merchandise to match customers’ needs and preferences. A key component of the front store strategy is the ExtraCare® card program, which is one of the largest and most successful retail loyalty programs in the U.S. The ExtraCare program allows the Company to balance marketing efforts so it can reward its best customers by providing them with automatic sale prices, customized coupons, ExtraBucks® rewards and other benefits. The Company also offers a subscription-based membership program, ExtraCare PlusTM, under which members are entitled to a suite of benefits delivered over the course of the subscription period, as well as a promotional reward that can be redeemed for future goods and services. The Company continues to launch and enhance new and exclusive brands to create unmatched offerings in beauty products and deliver other unique product offerings, including a full range of high-quality proprietary brand products that are only available through CVS stores. The Company currently carries approximately 5,500 proprietary brand products, which accounted for approximately 21% of front store revenues during 2023.

On-site Pharmacies

The Company also operates a limited number of pharmacies located at client sites, which provide certain health plan members and customers with a convenient alternative for filling their prescriptions and receiving vaccinations, including the COVID-19 vaccination.

15

Specialty and Mail Order Pharmacy Fulfillment Services

The Pharmacy & Consumer Wellness segment provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings, in exchange for which the Health Services segment pays an administrative service fee to the Pharmacy & Consumer Wellness segment.

Infusion and Enteral Services

The Company operates branches for compounding, specialty infusion and enteral nutrition services in the U.S.

Medical Diagnostic Testing

The Company offers medical diagnostic testing through its CVS pharmacy locations. The Company offered point of care COVID-19 testing at more than 2,000 pharmacy locations as of December 31, 2023.

Long-term Care Pharmacy Operations

The Pharmacy & Consumer Wellness segment provides LTC pharmacy services through the Omnicare® business. Omnicare’s customers consist of skilled nursing facilities, assisted living facilities, independent living communities, hospitals, correctional facilities, and other health care service providers. The Company provides pharmacy consulting, including monthly patient drug therapy evaluations, to assist in compliance with state and federal regulations and provide proprietary clinical and health management programs. It also provides pharmaceutical case management services for retirees, employees and dependents who have drug benefits under corporate-sponsored health care programs.

Community Location Development

CVS Health’s community health destinations are an integral part of its ability to meet the needs of consumers and maintain its leadership position in the changing health care landscape. When paired with its rapidly expanding digital presence, the Company’s physical presence in thousands of communities across the country represents a competitive advantage by allowing it to develop deep and trusted relationships through everyday engagement in consumer health. The Company’s community health destinations have played, and will continue to play, a key role in the Company’s continued growth and success. During 2023, the Company opened approximately 39 new locations, relocated 5 locations and closed approximately 318 locations.

The Company’s continuous assessment of its national footprint is an essential component of competing effectively in the current health care environment. On an ongoing basis, the Company evaluates changes in population, consumer buying patterns and future health needs to assess the ability of its existing stores and locations to meet the needs of its consumers and the business. During the fourth quarter of 2021, the Company completed a strategic review of its retail business and announced its plans to reduce store density in certain locations through the closure of approximately 900 retail stores between 2022 and 2024. As of December, 31, 2023, the Company has closed approximately 600 retail stores in connection with this strategic review.

Pharmacy & Consumer Wellness Information Systems

The Company has continued to invest in information systems to enable it to deliver exceptional customer service, enhance safety and quality, and expand patient care services while lowering operating costs. The proprietary WeCARE Workflow tool supports pharmacy teams by prioritizing work to meet customer expectations, facilitating prescriber outreach, and seamlessly integrating clinical programs. This solution delivers improved efficiency and enhances customer experience, as well as provides a framework to accommodate the evolution of pharmacy practice and the expansion of clinical programs. The Company’s Health Engagement Engine technology and data science clinical algorithms enable the Company to help identify opportunities for pharmacists to deliver face-to-face counseling regarding patient health and safety matters, including medication adherence issues, gaps in care and management of certain chronic health conditions. The Company’s digital strategy is to empower the consumer to navigate their pharmacy experience and manage their condition through integrated online and mobile solutions that offer utility and convenience. The Company’s LTC digital technology suite, Omniview®, improves the efficiency of customers’ operations with tools that include executive dashboards, pre-admission pricing, electronic ordering of prescription refills, proof-of-delivery tracking, access to patient profiles, receipt and management of facility bills, and real-time validation of Medicare Part D coverage, among other capabilities. The Company has also established tools which enable customers to schedule diagnostic testing and vaccination appointments through CVS.com, provide instructions and notifications to the customer regarding the services, and, following administration, allow customers to access digital results for tests and records for vaccinations.

16

Pharmacy & Consumer Wellness Customers

The success of the Pharmacy & Consumer Wellness segment’s businesses is dependent upon the Company’s ability to establish and maintain contractual relationships with pharmacy benefit managers and other payors on acceptable terms. Substantially all of the Pharmacy & Consumer Wellness segment’s pharmacy revenues are derived from pharmacy benefit managers, managed care organizations (“MCOs”), government funded health care programs, commercial employers and other third-party payors. No single Pharmacy & Consumer Wellness payor accounted for 10% or more of the Company’s consolidated total revenues in 2023, 2022 or 2021.

Pharmacy & Consumer Wellness Seasonality

The majority of Pharmacy & Consumer Wellness segment revenues, particularly pharmacy revenues, generally are not seasonal in nature. However, front store revenues tend to be higher during the December holiday season. In addition, both pharmacy and front store revenues are affected by the timing and severity of the cough, cold and flu season. Uncharacteristic or extreme weather conditions also can adversely affect consumer shopping patterns and Pharmacy & Consumer Wellness revenues, expenses and operating results.

During the year ended December 31, 2023, the impact of COVID-19 on the Pharmacy & Consumer Wellness segment continued to decline compared to the prior year. OTC test kit demand was highest during the first quarter and declined to its lowest quarterly volume during the fourth quarter. In contrast, contributions from COVID-19 vaccinations reached their highest quarterly volume during the fourth quarter.

During the year ended December 31, 2022, the customary quarterly operating income progression in the Pharmacy & Consumer Wellness segment continued to be impacted by COVID-19. During the first quarter, the Company saw high volumes of administration of COVID-19 vaccinations, as well as demand for OTC test kits in the front store, particularly in the beginning of the year when the Omicron variant incidence was high. In addition, the Company administered the highest quarterly volume of COVID-19 diagnostic tests of 2022 during the first quarter, however a decline compared to the prior year. During the second and third quarters, the Company continued to generate earnings from the sale of OTC test kits, as customers performed more in-home testing versus diagnostic testing, in addition to earnings from the continued administration of COVID-19 diagnostic testing and vaccinations, albeit at lower levels than those experienced in the first quarter. During the fourth quarter, the Company saw an increase in COVID-19 vaccine administration from the prior quarter related to the bivalent COVID-19 booster.

During the year ended December 31, 2021, the customary quarterly operating income progression was impacted by COVID-19. During the first quarter, the Company experienced reduced customer traffic in its retail pharmacies, which reflected the impact of a weaker cough, cold and flu season, while it administered the highest quarterly volume of COVID-19 diagnostic tests. During the second quarter, the segment generated earnings from COVID-19 vaccinations and saw improved customer traffic as vaccinated customers began more actively shopping in CVS locations. During the third and fourth quarters, emerging new variants drove the continued administration of COVID-19 vaccinations (including booster shots) and diagnostic testing, while the segment also generated earnings from the sale of OTC test kits in the front store.

Pharmacy & Consumer Wellness Competition

The retail pharmacy business is highly competitive. The Company believes that it competes principally on the basis of: (i) store location and convenience, (ii) customer service and satisfaction, (iii) product selection and variety, and (iv) price. In the areas it serves, the Company competes with other drugstore chains (e.g., Walgreens and Rite Aid), supermarkets, discount retailers (e.g., Walmart), independent pharmacies, restrictive pharmacy networks, online retailers (e.g., Amazon), membership clubs, infusion pharmacies, as well as mail order dispensing pharmacies.

LTC pharmacy services are highly regional or local in nature, and within a given geographic area of operation, highly competitive. The Company’s largest LTC pharmacy competitor nationally is PharMerica. The Company also competes with numerous local and regional institutional pharmacies, pharmacies owned by long-term care facilities and local retail pharmacies. Some states have enacted “freedom of choice” or “any willing provider” requirements as part of their state Medicaid programs or in separate legislation, which may increase the competition that the Company faces in providing services to long-term care facility residents in these states.

17

Corporate/Other Segment

The Company presents the remainder of its financial results in the Corporate/Other segment, which primarily consists of:

•Management and administrative expenses to support the Company’s overall operations, which include certain aspects of executive management and the corporate relations, legal, compliance, human resources and finance departments, information technology, digital, data and analytics, as well as acquisition-related transaction and integration costs; and

•Products for which the Company no longer solicits or accepts new customers such as its large case pensions and long-term care insurance products.

Generic Sourcing Venture

The Company and Cardinal Health, Inc. (“Cardinal”) each have a 50% ownership in Red Oak Sourcing, LLC (“Red Oak”), a generic pharmaceutical sourcing entity. Under this arrangement, the Company and Cardinal contributed their sourcing and supply chain expertise to Red Oak and agreed to source and negotiate generic pharmaceutical supply contracts for both companies through Red Oak. Red Oak does not own or hold inventory on behalf of either company.

Working Capital Practices

The Company funds the growth of its businesses through a combination of cash flow from operations, commercial paper and other short-term borrowings, as well as long-term borrowings. For additional information on the Company’s working capital practices, see “Liquidity and Capital Resources” in the MD&A included in Item 7 of this 10-K. Employer groups, individuals, college students, part-time and hourly workers, health plans, providers, governmental units, government-sponsored plans (with the exception of Medicare Part D services, which are described below), labor groups and expatriates, which represent the vast majority of Health Care Benefits segment revenues, typically settle in less than 30 days. As a provider of Medicare Part D services, the Company contracts annually with CMS. Utilization of services each plan year results in the accumulation of either a receivable from or a payable to CMS. The timing of settlement of the receivable or payable with CMS takes several quarters, which impacts working capital from year to year. The majority of the Pharmacy & Consumer Wellness segment non-pharmacy revenues are paid in cash, or with debit or credit cards. Managed care organizations, pharmacy benefit managers, government funded health care programs, commercial employers and other third party insurance programs, which represent the vast majority of the Company’s consolidated pharmacy revenues, typically settle in less than 30 days. The remainder of the Company’s consolidated pharmacy revenues are paid in cash, or with debit or credit cards.

Human Capital

Overview

At CVS Health, we share a single, clear purpose: bringing our heart to every moment of your health. We devote significant time and attention to the attraction, development and retention of talent to deliver high levels of service to our customers. Our commitment to them includes a competitive rewards package and programs that support our diverse range of colleagues in rewarding and fulfilling careers. As of December 31, 2023, we employed over 300,000 colleagues primarily in the U.S. including in all 50 states, the District of Columbia and Puerto Rico, approximately 73% of whom were full-time.

We believe engaged colleagues produce stronger business results and are more likely to build a career with the Company. Each year we conduct engagement surveys that provide colleagues with an opportunity to share their opinions and experiences with respect to their role, their team and the enterprise to help CVS Health Corporation’s Board of Directors (the “Board”) and our management identify areas where we can improve colleague experience. These surveys cover a broad range of topics including development and opportunities, diversity management, recognition, performance, well-being, compliance and continuous improvement. In 2023, we conducted engagement surveys in both January and November. More than 145,000 colleagues participated in each survey and overall engagement stayed consistent across surveys.

The Board, our Chief Executive Officer (“CEO”) and our Chief People Officer provide oversight of our human capital strategy, which consists of the following categories: total rewards; diversity, equity and inclusion; colleague development; and health and safety.

18

Total Rewards

We recognize how vital our colleagues are to our success and strive to offer a comprehensive and competitive mix of pay and benefits to meet the varying needs of our colleagues and their families. In addition to competitive wages, the comprehensive list of programs and benefits that we offer include annual bonuses, stock awards, 401(k) plans including matching company contributions, no cost comprehensive wellness screenings, tobacco cessation and weight management programs, no cost confidential counseling and no cost financial navigation support, an employee stock purchase plan, health care and insurance benefits, paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs and tuition assistance, retiree medical access, and discount programs, among many others, depending on eligibility.

Diversity, Equity, Inclusion & Belonging

We believe that a diverse workforce creates a healthier, stronger and more sustainable company. We aim to attract, develop, retain and support a diverse workforce that reflects the many customers, patients, members and communities we serve. Our Diversity Management Leadership Council, a cross-functional group of senior leaders appointed by our CEO, works with our Strategic Diversity Management leadership team to intentionally embed the full spectrum of diversity across all facets of our business. For our efforts, we have been recognized as one of Seramount’s Best Companies for Multicultural Women and earned a 100 percent score on the Disability Equality Index, meaning the company is recognized as a “Best Place to Work for Disability Inclusion.” The Company discloses information on our diversity, equity, inclusion and belonging strategy and programs in our annual Environmental, Social and Governance (“ESG”) Report.

As a foundation of diversity and inclusion, we continuously focus on talented representation across our business. In 2023, 70% of our total colleague population and 46% of our colleagues at the manager level and above self-reported as female. In addition, in 2023 our colleagues reported their race/ethnicity as: White (47%), Black/African American (18%), Hispanic/Latino (17%), Asian (12%) and Other (6%). The appendix to our ESG Report and our EEO-1 Employer Information Report include additional information on the diversity of our workforce.

Our diversity strategy emphasizes workforce representation across the full spectrum of diversity, a workplace that promotes inclusion and belonging for all, and a marketplace that reflects the customers, consumers, and communities we serve. We have continued the deployment of our INCLUDE program to activate inclusive behaviors. We support 16 Colleague Resource Groups (“CRGs”) that include more than 29,000 colleagues across the enterprise. These groups represent a wide range of professional, cultural, ethical and personal affinities and interests, as well as formal mentoring programs. Our CRGs provide all of our colleagues with an opportunity to connect and network with one another through a particular affinity, culture or interest. Each of our CRGs is sponsored by a senior leader.

Colleague Development

The Company offers a number of resources and programs that attract, engage, develop, advance and retain colleagues. Training and development provides colleagues the support they need to perform well in their current role while planning and preparing for future roles and career growth. We offer an online orientation program that pairs new hires with seasoned colleagues and the training continues throughout a colleague’s career through in-person, virtual and self-paced learning at all levels. We also provide mentoring, tools and workshops for colleagues to manage their career development. We offer a variety of management and leadership programs that develop incumbent diverse and other high potential colleagues. In addition, we offer leadership development to all leaders across the organization to best support their growth and their leadership of our colleagues. Our broad training practices include updated, tech-enabled tools and keep our colleagues informed of new developments in our industry that are relevant to their roles. During the year ended December 31, 2023, our colleagues invested approximately 14 million hours in learning and development courses.

Our colleague development programming also promotes the importance of compliance across our business. Our colleagues demonstrate this commitment through our annual Code of Conduct training, which nearly 100% of active colleagues completed in 2023. In 2023, we launched approximately 70 different training courses as part of our Enterprise Compliance Training Program.

Health & Safety

We have a strong commitment to providing a safe working environment. We have implemented an environmental health and safety management system to support adherence and monitoring of programs designed to make our various business operations compliant with applicable occupational safety and health regulations and requirements. Our Health, Safety, & Environmental

19

Department oversees the implementation and adherence to programs like Powered Industrial Truck training, materials handling and storage, selection of personal protective equipment and workplace violence prevention.

We utilize a Management Information System to track compliance, analyze data and concentrate on key areas of risk to reduce the chance of workplace incidents. We focus on identifying causes and improving performance when workplace incidents occur. We capture colleague observations and feedback through programs like our Behavior Based Safety and our Safety Hazard and Awareness Reporting Program. We also engage leaders in promoting a culture of safety. With safety task forces in place at each distribution center, we empower leaders and safety business partners to identify policies, procedures and processes that could improve their own operations.

From the outset of the COVID-19 pandemic, we took a comprehensive approach to managing occupational health and safety challenges presented by the pandemic, including implementing facial covering requirements for our workplaces and providing face masks to colleagues, providing sick leave, implementing symptom screening measures and implementing additional protocols in accordance with applicable Occupational Safety and Health Administration (“OSHA”) requirements and guidance and Centers for Disease Control and Prevention (“CDC”) guidelines for workplaces. We have emphasized the importance of taking immediate steps toward full vaccination.

Environmental, Social and Governance Strategy

Overview

Our Healthy 2030 ESG strategy outlines how we are creating a more equitable health care system and sustainable future. It reinforces our company’s strategy and is embedded in our purpose-driven culture. Healthy 2030 is constructed through our four-pillar framework – Healthy People, Healthy Business, Healthy Community and Healthy Planet. We are focused on making a meaningful, measurable impact within each of the pillars outlined below. We believe this strategy is achievable without materially adversely affecting our operating results and/or cash flows.

Healthy People

We keep people at the center of all our decisions across CVS Health because we believe every person has the fundamental right to be as healthy as possible. Every day, we work to make health care simpler, more accessible, affordable and more convenient for every person we serve. Whether we are increasing equitable access to health care and services, reducing energy use or making investments to support under-resourced communities to improve health outcomes, we are leveraging our expertise and resources to improve people’s health.

Healthy Business

We are purpose-driven – all of us. Diversity, equity, inclusion and belonging are a part of our core values and imperative to operating at our best. Together, we set high standards and hold ourselves to them. We work daily to create value for everyone who trusts and relies on us and ensure every action we take is done ethically and transparently. We support our colleagues' education and growth with scholarships, promote and develop leadership skills through training and development courses and continue strengthening our pipeline for a diverse workforce by expanding our workforce initiatives into our communities. We integrate governance and partnership across our business units and seek responsible and equitable purchasing practices throughout our supply chain. We hold our supplier's partners to the same standard.

Healthy Community

We are strengthening our communities by addressing the unique barriers to improving health outcomes locally. We will make a lasting impact by pulling together all our assets to encourage a more holistic approach and collaboration across our programs, investments and organizations. As part of this work, we are investing nationwide to expand access to mental and maternal health care services and address health-related social needs to complement our company’s strategy and focus areas. When a natural disaster or other incident affects the communities where we live and work, we swiftly take action to ensure our response addresses our colleagues' and customers' evolving needs. Our colleagues are also making a meaningful difference in the communities where we live and work by donating their time and talents, and we’re supporting their efforts by contributing to the causes that mean the most to them.

20

Healthy Planet

We are inseparable from the environment we operate in and the people we serve. That’s why we continue to invest in initiatives and programs that focus on improving the health of our planet by advancing our sustainability commitments and addressing the environmental factors that contribute to health inequities. We were one of the first companies in the world to have our net-zero targets validated by the Science-Based Targets Initiative’s (SBTi) net-zero methodology. This set us on the path to achieving net-zero emissions from our direct operations by 2048 and across our value chain by 2050. We’re also committed to achieving carbon neutrality by 2030. To make a meaningful impact, we are reducing the carbon footprint of our direct operations and supply chain by working across our expansive retail footprint and supply chain to increase energy efficiency, implement water-saving programs, eliminate waste, and reduce fuel usage.

Intellectual Property

The Company has registered and/or applied to register a variety of trademarks and service marks used throughout its businesses, as well as domain names, and relies on a combination of copyright, patent, trademark and trade secret laws, in addition to contractual restrictions, to establish and protect the Company’s proprietary rights. The Company regards its intellectual property as having significant value in the Health Care Benefits, Health Services and Pharmacy & Consumer Wellness segments. The Company is not aware of any facts that could materially impact the continuing use of any of its intellectual property.

Government Regulation

Overview

The Company’s operations are subject to comprehensive federal, state and local laws and regulations and comparable multiple levels of international regulation in the jurisdictions in which it does business. There also continues to be a heightened level of review and/or audit by federal, state and international regulators of the health and related benefits industry’s business and reporting practices. In addition, many of the Company’s PBM clients and the Company’s payors in the Pharmacy & Consumer Wellness segment, including insurers, Medicare plans, Managed Medicaid plans and MCOs, are themselves subject to extensive regulations that affect the design and implementation of prescription drug benefit plans that they sponsor. Similarly, the Company’s LTC clients, such as skilled nursing facilities, are subject to government regulations, including many of the same government regulations to which the Company is subject.

The laws and rules governing the Company’s businesses, the contracts they enter into, and interpretations of those laws and rules continue to expand and become more restrictive each year and are subject to frequent change. The application of these complex legal and regulatory requirements to the detailed operation of the Company’s businesses creates areas of uncertainty. Further, there are numerous proposed health care, financial services and other laws and regulations at the federal, state and international levels, some of which could adversely affect the Company’s businesses if they are enacted. The Company cannot predict whether pending or future federal or state legislation or court proceedings will change aspects of how it operates in the specific markets in which it competes or the health care industry generally, but if changes occur, the impact of any such changes could have a material adverse impact on the Company’s businesses, operating results, cash flows and/or stock price. Possible regulatory or legislative changes include the federal or one or more state governments fundamentally restructuring the Commercial, Medicare or Medicaid marketplace; reducing payments to the Company in connection with Medicare, Medicaid, dual eligible or special needs programs; increasing its involvement in drug reimbursement, pricing, purchasing, and/or importation; or changing the laws governing PBMs.

The Company has internal control policies and procedures and conducts training and compliance programs for its employees to help prevent, detect and correct prohibited practices. However, if the Company’s employees or agents fail to comply with applicable laws governing its international or other operations, it may face investigations, prosecutions and other legal proceedings and actions which could result in civil penalties, administrative remedies and criminal sanctions. Any failure or alleged failure to comply with applicable laws and regulations summarized below, or any adverse applications or interpretations of, or changes in, the laws and regulations affecting the Company and/or its businesses, could have a material adverse effect on the Company’s operating results, financial condition, cash flows and/or stock price. See Item 1A of this 10-K, “Risk Factors—Risks from Changes in Public Policy and Other Legal and Regulatory Risks,” and Item 3 of this 10-K, “Legal Proceedings,” for further information.

The Company can give no assurance that its businesses, financial condition, operating results and/or cash flows will not be materially adversely affected, or that the Company will not be required to materially change its business practices, based on: (i)

21

future enactment of new health care or other laws or regulations; (ii) the interpretation or application of existing laws or regulations, including the laws and regulations described in this Government Regulation section, as they may relate to one or more of the Company’s businesses, one or more of the industries in which the Company competes and/or the health care industry generally; (iii) pending or future federal or state governmental investigations of one or more of the Company’s businesses, one or more of the industries in which the Company competes and/or the health care industry generally; (iv) pending or future government audits, investigations or enforcement actions against the Company; or (v) adverse developments in pending or future legal proceedings against or affecting the Company, including qui tam lawsuits, or affecting one or more of the industries in which the Company competes and/or the health care industry generally.

Laws and Regulations Related to Multiple Segments of the Company’s Business

Laws Related to Reimbursement by Government Programs - The Company is subject to various federal and state laws concerning its submission of claims and other information to Medicare, Medicaid and other federal and state government-sponsored health care programs. Potential sanctions for violating these laws include recoupment or reduction of government reimbursement amounts, civil penalties, treble damages, and exclusion from participation in government health care programs. Such laws include the federal False Claims Act (the “False Claims Act”), the federal anti-kickback statute (the “AKS”), state false claims acts and anti-kickback statutes in most states, the federal “Stark Law” and related state laws. In particular, the False Claims Act prohibits intentionally submitting, conspiring to submit, or causing to be submitted, false claims, records, or statements to the federal government, or intentionally failing to return overpayments, in connection with reimbursement by federal government programs. In addition, any claim for government reimbursement also violates the False Claims Act where it results from a violation of the AKS.

The AKS prohibits, among other things, knowingly and willfully offering, paying, soliciting or receiving remuneration, directly or indirectly, in cash or kind, to induce or reward either the referral of an individual for, or the purchase, order or recommendation of, any good or service, for which payment may be made in whole or in part under federal health care programs, such as Medicare and Medicaid. Some court decisions have held that the statute may be violated even if only one purpose of remuneration is to induce referrals. Certain of the Company’s programs involve arrangements with payments intended to influence behavior relative to Medicare and other federal health care program beneficiaries, including risk sharing and “gainsharing” arrangements. While there is no fixed definition of a gainsharing arrangement, the term typically refers to an arrangement in which a share of cost savings for patient care attributable in part to a physician’s efforts are shared with the physician. The Office of the Inspector General of the HHS (the “OIG”) has recognized that there are legitimate interests in enlisting physicians in effort to reduce unnecessary costs from the health care system and, if appropriately structured, such gainsharing arrangements should not violate the AKS. Effective in early 2021, CMS and the OIG established new safe harbors that protect certain value-based arrangements, and the Company has integrated its understanding of these safe harbors into its new and existing programs.

The Stark Law prohibits a physician who has a financial relationship, or who has an immediate family member who has a financial relationship, with entities providing “designated health services” (“DHS”) from referring Medicare patients to such entities for the furnishing of DHS, unless an exception applies. The Stark Law prohibits any entity providing DHS that has received a prohibited referral from presenting, or causing to be presented, a claim or billing for the services arising out of the prohibited referral. Similarly, the Stark Law prohibits an entity from “furnishing” DHS to another entity with which it has a financial relationship when that entity bills for the service. The prohibition applies regardless of the reasons for the financial relationship and the referral. Unlike the AKS, the Stark Law is a strict liability statute where unlawful intent need not be demonstrated. Although uncertainty exists, some federal agencies and some courts have taken the position that the Stark Law also applies to Medicaid. With respect to certain CMS innovation models in which we may participate, the OIG and CMS jointly issued waivers of the Stark Law. In early 2021, CMS established new exceptions to the Stark Law that protect certain value-based arrangements.

Both federal and state false claims laws permit private individuals to file qui tam or “whistleblower” lawsuits on behalf of the federal or state government. Participants in the health and related benefits industry, including the Company, frequently are subject to actions under the False Claims Act or similar state laws. The federal Stark Law generally prohibits physicians from referring Medicare or Medicaid beneficiaries for certain services, including outpatient prescription drugs, to any entity with which the physician, or an immediate family member of the physician, has a financial relationship. The Stark Law further prohibits the entity receiving a prohibited referral from presenting a claim for reimbursement by Medicare or Medicaid for services furnished pursuant to the prohibited referral. Various states have enacted similar laws.

The ACA - The ACA significantly increased federal and state oversight of health plans. Among other requirements, it specifies minimum medical loss ratios (“MLRs”) for Commercial and Medicare Insured products, specifies features required to be

22

included in commercial benefit designs, limits commercial individual and small group rating and pricing practices, encourages additional competition (including potential incentives for new participants to enter the marketplace), and includes regulations and processes that could delay or limit the Company’s ability to appropriately increase its health plan premium rates. This in turn could adversely affect the Company’s ability to continue to participate in certain product lines and/or geographies that it serves today.

In June 2021, the U.S. Supreme Court dismissed a challenge on procedural grounds that argued the ACA is unconstitutional in its entirety and issued an opinion preserving the ACA and its consumer protections in its current form. Even though the ACA was deemed constitutional, there may nevertheless be continued efforts to invalidate, modify, repeal or replace portions of it. In addition to litigation, parts of the ACA continue to evolve through the promulgation of executive orders, legislation, regulations and guidance at the federal or state level. The Company expects the ACA, including potential changes thereto, to continue to significantly impact its business operations and operating results, including pricing, medical benefit ratios (“MBRs”) and the geographies in which the Company’s products are available.

Medicare Regulation - The Company’s Medicare Advantage products compete directly with Original Medicare and Medicare Advantage products offered by other Medicare Advantage organizations and Medicare Supplement products offered by other insurers. The Company’s Medicare PDP and Medicare Supplement products are products that Medicare beneficiaries who are enrolled in Original Medicare purchase to enhance their Original Medicare coverage. Medicare regulations also have the potential to impact products and services used by Medicare beneficiaries, including services provided by Oak Street Health and Signify Health.

The Company continues to expand the number of counties in which it offers Medicare products. The Company has expanded its Medicare service area and products in 2023 and is seeking to substantially grow its Medicare membership, revenue and operating results over the next several years, including through growth in Medicare Supplement products. The anticipated organic expansion of the Medicare service area and Medicare products offered and the Medicare-related provisions of the ACA significantly increase the Company’s exposure to funding and regulation of, and changes in government policy with respect to and/or funding or regulation of, the various Medicare programs in which the Company participates, including changes in the amounts payable to us under those programs and/or new reforms or surcharges on existing programs. For example, the ACA requires minimum MLRs for Medicare Advantage and Medicare Part D plans of 85%. If a Medicare Advantage or Medicare Part D contract pays minimum MLR rebates for three consecutive years, it will become ineligible to enroll new members. If a Medicare Advantage or Medicare Part D contract pays such rebates for five consecutive years, it will be terminated by CMS. It is possible that certain Medicare Advantage contracts may not meet the 85% MLR for consecutive years.

The Company’s Medicare Advantage and PDP products are heavily regulated by CMS. The regulations and contractual requirements applicable to the Company and other private participants in Medicare programs are complex, expensive to comply with and subject to change. Payments the Company receives from CMS for its Medicare Advantage and Part D businesses also are subject to risk adjustment based on the health status of the individuals enrolled. Elements of that risk adjustment mechanism continue to be challenged by the U.S. Department of Justice (the “DOJ”), the OIG and CMS itself. For example, CMS made significant changes to the structure of the hierarchical condition category model in version 28, which may impact risk adjustment factor (“RAF”) scores for a larger percentage of Medicare Advantage beneficiaries and could result in changes to beneficiary RAF scores with or without a change in the patient’s health status. Substantial changes in the risk adjustment mechanism, including changes that result from enforcement or audit actions, could materially affect the amount of the Company’s Medicare reimbursement; require the Company to raise prices or reduce the benefits offered to Medicare beneficiaries; impact the services provided by, or the financial performance of, Oak Street Health and Signify Health; and potentially limit the Company’s (and the industry’s) participation in the Medicare program.

The Company has invested significant resources to comply with Medicare standards, and its Medicare compliance efforts will continue to require significant resources. CMS may seek premium and other refunds, prohibit the Company from continuing to market and/or enroll members in or refuse to passively enroll members in one or more of the Company’s Medicare or dual eligible plans, exclude us from participating in one or more Medicare, dual eligible or dual eligible special needs plan programs and/or institute other sanctions and/or civil monetary penalties against the Company if it fails to comply with CMS regulations or its Medicare contractual requirements. The Company’s Medicare Supplement products are regulated at the state level and are subject to similar significant compliance requirements and risks.

In addition, in November 2020, the HHS released the final Rebate Rule (the “Rebate Rule”), which eliminates the regulatory safe harbor from prosecution under the AKS for rebates from pharmaceutical companies to PBMs in Medicare Part D, replacing it with two far narrower safe harbors designed to directly benefit patients with high out-of-pocket costs and to change the way PBMs are compensated. The new safe harbors are (i) for rebates which are passed on to the patient at the point of sale and (ii)

23

for flat service fee payments made to PBMs which cannot be tied to the list prices of drugs. It is unclear whether the Rebate Rule will be enforceable, whether pharmaceutical companies will respond by reducing list prices, whether list prices in the private market may also be reduced, and what the resulting impact will be to PBMs or the Company. The Pharmaceutical Care Management Association (the “PCMA”), which represents PBMs, has filed a suit in an effort to block the Rebate Rule, claiming that the Rebate Rule would lead to higher premiums in Medicare Part D and was adopted in an unlawful manner. The Bipartisan Infrastructure Act of 2021 delays the effective date of the rebate rule to January 2026, and the Inflation Reduction Act, enacted in August 2022 (the “IRA”), further delays the Rebate Rule through 2032.

Going forward, the Company expects CMS, the OIG, the DOJ, other federal agencies and the U.S. Congress to continue to scrutinize closely each component of the Medicare program (including Medicare Advantage, PDPs, dual eligible plans, broker compensation and marketing, and provider network access and adequacy), modify the terms and requirements of the program and possibly seek to recast or limit private insurers’ roles. Any of the federal agencies noted above or U.S. Congress may also recommend changes or take additional action with respect to the way in which producers are compensated. For example, CMS has recently proposed new limitations on the amounts producers may earn for selling our Medicare Advantage and Part D plans, and the IRA contains changes to the Part D program that began in 2023 and will continue to 2032 that could shift more of the claim liability to plans and away from the government. It is also possible that Congress may consider changes to Medicare Advantage payment policies due to recent recommendations by the Medicare Payment Advisory Commission and to reduce the potential added cost burden of costly new benefits, or policies that impact drug pricing such as price controls and inflationary rebates applied to pharmaceutical manufacturers. In addition, states are increasingly requiring companies to offer Medicaid within a state and conducting competitive bid processes to qualify to offer dual eligible products.

It is not possible to predict the outcome of such regulatory or Congressional activity, any of which could materially and adversely affect the Company.

Medicaid Regulation - The Company is seeking to substantially grow its Medicaid, dual eligible and dual eligible special needs plan businesses over the next several years. As a result, the Company also is increasing its exposure to changes in government policy with respect to and/or regulation of the various Medicaid, dual eligible and dual eligible special needs plan programs in which the Company participates, including changes in the amounts payable to the Company under those programs.

In addition to a quality rating system that applies to Medicaid and Managed Medicaid plans, federal regulations give states the option to choose to establish a minimum MLR of at least 85% for their Managed Medicaid plans, including those offered by the Company. Regardless of whether a state establishes a minimum MLR, it must use plan-reported MLR data to set future payment rates for managed care, so that its plans will “reasonably achieve” an MLR of at least 85%. For Managed Medicaid products, states may use more stringent definitions of “medical loss ratio” or impose other requirements related to minimum MLR. Minimum MLR requirements and similar actions further limit the level of margin the Company can earn in its Insured Medicaid products while leaving the Company exposed to medical costs that are higher than those reflected in its pricing. The Company also may be subject to significant fines, penalties, premium refunds and litigation if it fails to comply with minimum MLR laws and regulations.

States may also establish their own standards and use discretion in choosing what determines compliance within Medicaid contracts, including, among other provisions, standards for determining provider network adequacy, staffing, service operations, utilization management, provider support and claims payment.

States continue to consider Medicaid expansion; however, ten states have not yet expanded and may not do so. States may opt out of the elements of the ACA requiring expansion of Medicaid coverage without losing their current federal Medicaid funding. In addition, the election of new Governors and/or state legislatures may impact states’ previous decisions regarding Medicaid expansion. Although Congress enacted incentives for states that had not yet done so to expand Medicaid, this incentive alone may not persuade holdout states to expand.

States have flexibility related to rate setting and provider network adequacy that could adversely or positively impact our Medicaid plans. Other changes related to managed care operations include beneficiary communications, appeals and grievances, and provider directories.

The economic aspects of the Medicaid, dual eligible and dual eligible special needs plan business vary from state to state and are subject to frequent change. Medicaid premiums are paid by each state and differ from state to state. The federal government and certain states also are considering proposals and legislation for Medicaid and dual eligible program reforms or redesigns, including restrictions on the collection of manufacturer’s rebates on pharmaceuticals by Medicaid MCOs and their contracted PBMs, further program, population and/or geographic expansions of risk-based managed care, increasing beneficiary cost-

24

sharing or payment levels, and changes to benefits, reimbursement, eligibility criteria, provider network adequacy requirements (including requiring the inclusion of specified high cost providers in the Company’s networks) and program structure. In some states, current Medicaid and dual eligible funding and premium revenue may not be adequate for the Company to continue program participation. The Company’s Medicaid and dual eligible contracts with states (or sponsors of Medicaid managed care plans) are subject to cancellation by the state (or the sponsors of the managed care plans) after a short notice period without cause (e.g., when a state discontinues a managed care program) or in the event of insufficient state funding.

The Company’s Medicaid, dual eligible and dual eligible special needs plan products also are heavily regulated by CMS and state Medicaid agencies, which have the right to audit the Company’s performance to determine compliance with CMS contracts and regulations. The Company’s Medicaid products, dual eligible products and CHIP contracts also are subject to complex federal and state regulations and oversight by state Medicaid agencies regarding the services provided to Medicaid enrollees, payment for those services, network requirements (including mandatory inclusion of specified high-cost providers), and other aspects of these programs, and by external review organizations which audit Medicaid plans on behalf of state Medicaid agencies. The laws, regulations and contractual requirements applicable to the Company and other participants in Medicaid and dual eligible programs, including requirements that the Company submit encounter data to the applicable state agency, are extensive, complex and subject to change. The Company has invested significant resources to comply with these standards, and its Medicaid and dual eligible program compliance efforts will continue to require significant resources. CMS and/or state Medicaid agencies may fine the Company, withhold payments to the Company, seek premium and other refunds, terminate the Company’s existing contracts, elect not to award the Company new contracts or not to renew the Company’s existing contracts, prohibit the Company from continuing to market and/or enroll members in or refuse to automatically assign members to one or more of the Company’s Medicaid or dual eligible products, exclude the Company from participating in one or more Medicaid or dual eligible programs and/or institute other sanctions and/or civil monetary penalties against the Company if it fails to comply with CMS or state regulations or contractual requirements. CMS has proposed requiring that health plans offering certain dual eligible programs must also offer Medicaid programs, which could impact the Company’s ability to obtain or retain membership in its dual eligible programs.

The Company cannot predict whether pending or future federal or state legislation or court proceedings will change various aspects of the Medicaid program, nor can it predict the impact those changes will have on its business operations or operating results, but the effects could be materially adverse.

Medicare and Medicaid Audits - CMS regularly audits the Company’s performance to determine its compliance with CMS’s regulations and its contracts with CMS and to assess the quality of services it provides to Medicare Advantage and PDP beneficiaries. For example, CMS conducts risk adjustment data validation (“RADV”) audits of a subset of Medicare Advantage contracts for each contract year. Since 2011, CMS has selected certain of the Company’s Medicare Advantage contracts for various years for RADV audit, and the number of RADV audits continues to increase. The OIG also is auditing the Company’s risk adjustment data and that of other companies, and the Company expects CMS and the OIG to continue auditing risk adjustment data. The Company also has received Civil Investigative Demands (“CIDs”) from, and provided documents and information to, the Civil Division of the DOJ in connection with investigations of the Company’s identification and/or submission of diagnosis codes related to risk adjustment payments, including patient chart review processes, under Parts C and D of the Medicare program.

On January 30, 2023, CMS released the final rule concerning Part C contract-level Risk Adjustment Data Validation Audits (the “RADV Audit Rule”). The RADV Audit Rule eliminated the application of a fee-for-service adjuster (“FFS Adjuster”) in contract-level RADV audits but continued the use of extrapolation in such audits of Medicare Advantage organizations. The FFS Adjuster that was announced in 2012 was to be used by CMS to determine a permissible level of payment error. By applying the FFS Adjuster, Medicare Advantage organizations would have been liable for repayments only to the extent that their extrapolated payment errors exceeded the error rate in Original Medicare, which could have impacted the extrapolated repayments to which Medicare Advantage organizations are subject. Under the RADV Audit Rule, CMS is now conducting RADV audits of Medicare Advantage organizations, including the Company’s Medicare Advantage plans, for payment year 2018 and subsequent payment years using extrapolation without the application of a FFS Adjuster. The RADV Audit Rule may have potential adverse effects, which could be material, on the Company’s operating results, financial condition, and cash flows. CMS also has announced that it will not conduct RADV audits on all contracts; instead, it will only audit contracts it believes are at the highest risk for overpayments based on its statistical modeling. The RADV Audit Rule is subject to ongoing litigation and the outcome and future impacts are uncertain.

In addition, state Medicaid agencies regularly audit the Company’s performance across all areas of its contractual obligations to the state to determine compliance and quality of services. The Company may be subject to, among other penalties, significant fines, sanctions, corrective actions, and enrollment freezes depending on the findings of these audits and reviews. The

25

Company’s ongoing performance and compliance with program requirements can impact our ability to expand and retain Medicaid business. State Medicaid agencies are also increasingly using the audit process to challenge the legality of PBM practices, such as guaranteed effective rate reconciliations with retail pharmacies and transmission fees.

Medicare Star Ratings - A portion of each Medicare Advantage plan’s reimbursement is tied to the plan’s “star ratings.” The star rating system considers a variety of measures adopted by CMS, including quality of preventative services, chronic illness management, compliance and overall customer satisfaction. Only Medicare Advantage plans with an overall star rating of 4 or more stars (out of 5 stars) are eligible for a quality bonus in their basic premium rates. CMS also gives PDPs star ratings that affect each PDP’s enrollment. Medicare Advantage and PDP plans that are rated less than 3 stars for three consecutive years are subject to contract termination by CMS. CMS continues to revise its star ratings system to make it harder to achieve 4 or more stars. There can be no assurances that the Company will be successful in maintaining or improving its star ratings in future years. Accordingly, the Company’s Medicare Advantage plans may not continue to be or become eligible for full level quality bonuses, which could adversely affect the benefits such plans can offer, reduce membership and/or reduce profit margins.

The Company’s 2023 star ratings were used to determine which of its Medicare Advantage plans qualify for bonus payments in 2024. Based on the 2023 star ratings, the Company’s Medicare Advantage plans are not eligible for full level quality bonuses in 2024, which could reduce profit margin. CMS released the Company’s 2024 star ratings in October 2023, which will impact revenues in 2025. The percentage of Aetna Medicare Advantage members in 4+ Star plans is expected to return to 87% in 2024 (based on enrollment and contract affiliation as of December 31, 2023), as compared to the unmitigated 21% in 2023 based on the 2023 star ratings. The main driver of this increase was a half star improvement in the Aetna National PPO, which increased from 3.5 stars to 4.0 stars. This means that the Company expects its Medicare Advantage plans will again be eligible for full level quality bonuses in 2025.

Medicare Payment Rates - In March 2023, CMS issued its final notice detailing final 2024 Medicare Advantage payment rates. Final 2024 Medicare Advantage rates resulted in an expected average increase in revenue for the Medicare Advantage industry of 3.32%, and the year-to-year percentage change included a (1.24%) decrease for star ratings, a risk model revision and normalization of (2.16%), and a risk score trend of 4.44%. In March 2023, CMS also finalized the 2024 Medicare Advantage reimbursement rates, which result in an expected average decrease in revenue for the Medicare Advantage industry of 1.12%, excluding the CMS estimate of Medicare Advantage risk score trend, though the rates may vary widely depending on the provider group and patient demographics. On January 31, 2024, CMS issued an advance notice detailing proposed 2025 Medicare Advantage payment rates. The 2025 Medicare Advantage rates, if finalized as proposed, will result in an expected average decrease in revenue for the Medicare Advantage industry of 0.16%, excluding the CMS estimate of Medicare Advantage risk score trend. CMS intends to publish the final 2025 rate announcement no later than April 1, 2024.

The Company faces a challenge from the impact of the increasing cost of medical care (including prescription medications), changes to methodologies for determining payments and CMS local and national coverage decisions that require the Company to pay for services and supplies that are not factored into the Company’s bids. The federal government may seek to impose restrictions on the configuration of pharmacy or other provider networks for Medicare Advantage and/or PDP plans, or otherwise restrict the ability of these plans to alter benefits, negotiate prices or establish other terms to improve affordability or maintain viability of products. The Company currently believes that the payments it has received and will receive in the near term are adequate to justify the Company’s continued participation in the Medicare Advantage and PDP programs, although there are economic and political pressures to continue to reduce spending on the program, and this outlook could change.

340B Drug Pricing Program – The 340B Drug Pricing Program allows eligible Covered Entities to purchase prescription drugs from manufacturers at a steep discount, and is overseen by the HHS and the Health Resources and Services Administration (“HRSA”). In 2020, a number of pharmaceutical manufacturers began programs that limited Covered Entities’ participation in the program through contract pharmacies arrangements. In May 2021, HRSA sent enforcement letters to multiple manufacturers to curb these practices. In September 2021, HRSA forwarded the enforcement actions to the OIG for potential imposition of civil monetary penalties. Those enforcement actions are currently subject to ongoing litigation. In November 2022, HRSA issued proposed rules that would overhaul the 340B Drug Pricing Programs Administrative Dispute Resolution process. The revisions are designed to make the process more accessible by making it more expeditious and less formal, as well as more equitable by requiring fewer resources to participate. A reduction in Covered Entities’ participation in contract pharmacy arrangements, as a result of the pending enforcement actions or otherwise, a reduction in the use of the Company’s administrative services by Covered Entities, or a reduction in drug manufacturers’ participation in the program could materially and adversely affect the Company.

Anti-Remuneration Laws - Federal law prohibits, among other things, an entity from knowingly and willfully offering, paying, soliciting or receiving, subject to certain exceptions and “safe harbors,” any remuneration to induce the referral of

26

individuals or the purchase, lease or order of items or services for which payment may be made under Medicare, Medicaid or certain other federal and state health care programs. A number of states have similar laws, some of which are not limited to services paid for with government funds. Sanctions for violating these federal and state anti-remuneration laws may include imprisonment, criminal and civil fines, and exclusion from participation in Medicare, Medicaid and other federal and state government-sponsored health care programs. Companies involved in public health care programs such as Medicare and/or Medicaid are required to maintain compliance programs to detect and deter fraud, waste and abuse, and are often the subject of fraud, waste and abuse investigations and audits. The Company has invested significant resources to comply with Medicare and Medicaid program standards. Ongoing vigorous law enforcement and the highly technical regulatory scheme mean that the Company’s compliance efforts in this area will continue to require significant resources.

Antitrust and Unfair Competition - The U.S. Federal Trade Commission (“FTC”) investigates and prosecutes practices that are “unfair trade practices” or “unfair methods of competition.” Numerous lawsuits have been filed throughout the U.S against pharmaceutical manufacturers, retail pharmacies and/or PBMs under various federal and state antitrust and unfair competition laws challenging, among other things: (i) brand name drug pricing and rebate practices of pharmaceutical manufacturers, (ii) the maintenance of retail or specialty pharmacy networks by PBMs, and (iii) various other business practices of PBMs and retail pharmacies. In July 2021, the FTC approved several resolutions that direct agency staff to use compulsory process, such as subpoenas, to investigate seven specific enforcement priorities. Priority targets include, among other businesses, health care businesses, such as pharmaceutical companies, pharmacy benefits managers and hospitals. To the extent that the Company appears to have actual or potential market power in a relevant market or CVS pharmacy, CVS specialty or MinuteClinic plays a unique or expanded role in a Health Care Benefits or Health Services segment product offering, the Company’s business arrangements and uses of confidential information may be subject to heightened scrutiny from an anti-competitive perspective and possible challenge by state and/or federal regulators and/or private parties.

Privacy and Confidentiality Requirements - Many of the Company’s activities involve the receipt, use and disclosure by the Company of personally identifiable information (“PII”) as permitted in accordance with applicable federal and state privacy and data security laws, which require organizations to provide appropriate privacy and security safeguards for such information. In addition to PII, the Company uses and discloses de-identified data for analytical and other purposes when permitted. Additionally, there are industry standards for handling credit card data known as the Payment Card Industry Data Security Standard, which are a set of requirements designed to help ensure that entities that process, store or transmit credit card information maintain a secure environment. Certain states have incorporated these requirements into state laws or enacted other requirements relating to the use and/or disclosure of PII.

The federal Health Insurance Portability and Accountability Act of 1996 and the regulations issued thereunder (collectively, “HIPAA”), as further modified by the American Recovery and Reinvestment Act of 2009 (“ARRA”) impose extensive requirements on the way in which health plans, providers, health care clearinghouses (known as “covered entities”) and their business associates use, disclose and safeguard protected health information (“PHI”). Further, ARRA requires the Company and other covered entities to report any breaches of PHI to impacted individuals and to the HHS and to notify the media in any states where 500 or more people are impacted by the unauthorized release or use of or access to PHI. Criminal penalties and civil sanctions may be imposed for failing to comply with HIPAA standards. The Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”), enacted as part of ARRA, amended HIPAA to impose additional restrictions on third-party funded communications using PHI and the receipt of remuneration in exchange for PHI. The HITECH Act also extended HIPAA privacy and security requirements and penalties directly to business associates.

In addition to HIPAA, state health privacy laws apply to the extent they are more protective of individual privacy than is HIPAA, including laws that place stricter controls on the release of information relating to specific diseases or conditions and requirements to notify members of unauthorized release or use of or access to PHI. States also have adopted regulations to implement provisions of the Financial Modernization Act of 1999 (also known as the Gramm-Leach-Bliley Act (“GLBA”)) which generally require insurers, including health insurers, to provide customers with notice regarding how their non-public personal health and financial information is used and the opportunity to “opt out” of certain disclosures before the insurer shares such information with a non-affiliated third party. Like HIPAA, GLBA sets a “floor” standard, allowing states to adopt more stringent requirements governing privacy protection. Complying with additional state requirements requires us to make additional investments beyond those the Company has made to comply with HIPAA and GLBA.

The Cybersecurity Information Sharing Act of 2015 encourages organizations to share cyber threat indicators with the federal government and, among other things, directs HHS to develop a set of voluntary cybersecurity best practices for organizations in the health care industry. In addition, states have begun to enact more comprehensive privacy laws and regulations addressing consumer rights to data access, deletion, protection or transparency, such as the California Consumer Privacy Act (“CCPA”). States also are starting to issue regulations and proposed regulations specifically related to cybersecurity, such as the regulations

27

issued by the New York Department of Financial Services. Complying with conflicting cybersecurity regulations, which may differ from state to state, requires significant resources. In addition, differing approaches to state privacy and/or cyber-security regulation and varying enforcement philosophies may materially and adversely affect the Company’s ability to standardize its products and services across state lines. Widely-reported large scale commercial data breaches in the U.S and abroad increase the likelihood that additional data security legislation will be considered by additional states. These legislative and regulatory developments will impact the design and operation of the Company’s businesses, its privacy and security strategy and its web-based and mobile assets.

Finally, each Public Exchange is required to adhere to privacy and security standards with respect to PII, and to impose privacy and security standards that are at least as protective of PII as those the Public Exchange has implemented for itself or non-Public Exchange entities, which include insurers offering plans through the Public Exchange and their designated downstream entities, including PBMs and other business associates. These standards may differ from, and be more stringent than, HIPAA.

See Item 1C of this 10-K, “Cybersecurity,” for more information on the Company’s cybersecurity risk management and governance.

Consumer Protection Laws - The federal government has many consumer protection laws, such as the Federal Trade Commission Act, the Federal Postal Service Act and the Consumer Product Safety Act. Most states also have similar consumer protection laws and a growing number of states regulate subscription programs. In addition, the federal government and most states have adopted laws and/or regulations requiring places of public accommodation, health care services and other goods and services to be accessible to people with disabilities. These consumer protection and accessibility laws and regulations have been the basis for investigations, lawsuits and multistate settlements relating to, among other matters, the marketing of loyalty programs, and health care products and services, pricing accuracy, expired front store products, financial incentives provided by drug manufacturers to pharmacies in connection with therapeutic interchange programs, disclosures related to how personal data is used and protected and the accessibility of goods and services to people with disabilities. As a result of the Company’s direct-to-consumer activities, including mobile and web-based solutions offered to members and to other consumers, the Company also is subject to federal and state regulations applicable to electronic communications and to other general consumer protection laws and regulations. For example, the CCPA became effective in 2020, and additional federal and state regulation of consumer privacy protection may be proposed or enacted in the future. The Company expects these new laws and regulations to impact the design of its products and services and the management and operation of its businesses and to increase its compliance costs.

Transparency in Coverage Rule - In October 2020, the HHS, the U.S. Department of Labor (“DOL”) and the U.S. Internal Revenue Service (“IRS,” and together with the HHS and DOL, the “Tri-Departments”) released a final rule requiring health insurers to disclose negotiated prices of drugs, medical services, supplies and other covered items. The rule requires group health plans and health insurance issuers in the individual and group markets to disclose cost-sharing information upon request, to a participant, beneficiary, or enrollee and require plans and issuers to publicly disclose in-network provider rates, historical out-of-network allowed amounts and the associated billed charges, and negotiated rates and historical net prices for prescription drugs. Insurers are required to implement a consumer tool and disclose data in a machine readable file. The public disclosure of insurer- or PBM-negotiated price concessions may result in drug manufacturers lowering discounts or rebates, resulting in higher drug costs for patients and impacting the ability of the Company to negotiate drug prices and provide competitive products and services to consumers. In addition, most group health plans and issuers of group or individual health insurance coverage are required to disclose personalized pricing information to their participants, beneficiaries, and enrollees through an online consumer tool, by phone, or in paper form, upon request. Cost estimates must be provided in real-time based on cost-sharing information that is accurate at the time of the request.

The Consolidated Appropriations Act of 2021 was signed into law in December 2020 and contains further transparency provisions requiring group health plans and health insurance issuers to report certain prescription drug costs, overall spending on health services and prescription drugs, and information about premiums and the impact of rebates and other remuneration on premiums and out-of-pocket costs to the Tri-Departments. No later than 18 months after the first submission and bi-annually thereafter, the Tri-Departments will release a public report on drug pricing trends, drug reimbursement, and the impact of drug prices on premiums. The first filings of plan year data were required in December 2022 and will be required annually in June of each year on an ongoing basis.

Telemarketing and Other Outbound Contacts - Certain federal and state laws, such as the Telephone Consumer Protection Act and the Telemarketing Sales Rule, give the FTC, the Federal Communications Commission and state Attorneys General the ability to regulate, and bring enforcement actions relating to, telemarketing practices and certain automated outbound contacts

28

such as phone calls, texts or emails. Under certain circumstances, these laws provide consumers with a private right of action. Violations of these laws could result in substantial statutory penalties and other sanctions.

Pharmacy and Professional Licensure and Regulation - The Company is subject to a variety of intersecting federal and state statutes and regulations that govern the wholesale distribution of drugs; operation of retail, specialty, infusion, LTC and mail order pharmacies; licensure of facilities and professionals, including pharmacists, technicians, nurses and other health care professionals; registration of facilities with the U.S. Drug Enforcement Administration (the “DEA”) and analogous state agencies that regulate controlled substances; packaging, storing, shipping and tracking of pharmaceuticals; repackaging of drug products; labeling, medication guides and other consumer disclosures; interactions with prescribers and health care professionals; compounding of prescription medications; dispensing of controlled and non-controlled substances; counseling of patients; transfers of prescriptions; advertisement of prescription products and pharmacy services; security; inventory control; recordkeeping; reporting to Boards of Pharmacy, the U.S. Food and Drug Administration (the “FDA”), the U.S. Consumer Product Safety Commission, the DEA and related state agencies; and other elements of pharmacy practice. Pharmacies are highly regulated and have contact with a wide variety of federal, state and local agencies with various powers to investigate, inspect, audit or solicit information, including Boards of Pharmacy and Nursing, the DEA, the FDA, the DOJ, HHS and others. Many of these agencies have broad enforcement powers, conduct audits on a regular basis, can impose substantial fines and penalties, and may revoke the license, registration or program enrollment of a facility or professional.

Source: SEC EDGAR (public domain) · 10-K for the period ended 2023-12-31, filed 2024-02-07 · accession 0000064803-24-000007

Filing HTML rendered to line-structured narrative text by the shipped reducer (datafeeds.edgar_fulltext.visible_text, keep_table_headers=True): scripts and inline-XBRL headers are dropped, and table content is reduced to its short label cells — numeric table data is not rendered and is therefore not counted. The same rendering is used for every year, so a year-over-year comparison is like for like.

The text is our rendering of the filing, not a facsimile: original pagination, typography and tables are not reproduced, and the numbers live in the financial statements (FA).

The outline locates item HEADINGS in this document. Only Items 1A and 7 have certified boundaries elsewhere in the terminal (the redline and the narrative-overlap number); every span here runs from one heading found to the next heading found.

How the outline was chosen. It is the longest chain of item headings that runs forward through both the document and the standard item order: 23 headings are on that chain and 17 further heading-shaped lines are not — the table-of-contents echo of every item, cross-references and exhibit-list mentions. Each entry's length is measured from its heading to the next heading on the chain.