Regulatory Compliance - The Company is subject to ongoing supervision and regulation by the FRB and DFPI as a bank holding company [82]. - The Company must serve as a source of financial and managerial strength for any FDIC-insured depository institution it controls [92]. - The regulatory framework requires prior approval for various corporate actions, including acquisitions and branch establishments [88]. - The Bank is subject to supervision and enforcement by the CFPB due to its assets exceeding 10billion[125].−TheactingdirectoroftheCFPBdirectedstafftoceaseallsupervisionandexaminationactivity,impactingregulatoryoversight[126].−TheCompanyexpectsregulatorychangesunderthenewpresidentialadministrationtoimpactrulemakingandsupervisionpriorities[83].−TheCompanycannotpredictthefutureimpactofregulatorychangesonitsbusinessandfinancialcondition[135].CapitalRatiosandFinancialHealth−AsofDecember31,2024,theCompanyhadcapitalratiosexceedingtheminimumsrequiredtobeconsidered"wellcapitalized"[90].−AsofDecember31,2024,theBankwasclassifiedas"wellcapitalized"undertheFDICregulations[104].−TheBankisincompliancewithminimumCET1,Tier1,totalcapital,andleverageratiosasofDecember31,2024[109].−TheBankadoptedafive−yeartransitionperiodtophaseinthefulleffectofCECLonregulatorycapital,withanadd−backrangingfrom0to3basispointsonvariouscapitalratiosasofDecember31,2024[108].−TheabilityoftheCompanytobuybackstockandmakecapitaldistributionsislimitedbyregulatorycapitalrules[90].−TheFRBmaydisapprovestockrepurchasesifdeemedunsafeorunsound[90].DividendsandEarnings−TheBankmaydeclaredividendswithouttheapprovaloftheDFPIaslongastotaldividendsdonotexceedretainedearningsornetearningsforthepreviousthreefiscalyears[100].RegulatoryChangesandImpact−TheFDICfinalizedaruletoincreasetheinitialbasedepositinsuranceassessmentrateby2.0basispointsstartingfromthefirstquarterlyassessmentperiodof2023[102].−AspecialassessmentwasimplementedbytheFDICatanannualrateof13.4basispoints,expectedtototal38.6 million over ten quarterly assessment periods [103]. - The Federal Reserve's monetary policies have materially affected the operating results of commercial banks and are expected to continue doing so [133]. - Future legislation or regulation could adversely affect the operating environment and profitability of the Company [135]. Cybersecurity and Privacy Regulations - Compliance with new cybersecurity incident notification rules was required by May 1, 2022, and the Company believes it is currently in compliance [129]. - The California Consumer Privacy Act and the California Privacy Rights Act have established stringent data privacy requirements, effective from January 1, 2020, and January 1, 2023, respectively [128]. - The Company is subject to increasing state-level privacy and cybersecurity regulations, which are being closely monitored [128]. Investment and Trading Regulations - The Volcker Rule imposes restrictions on short-term proprietary trading, but currently does not have a material impact on the Company's activities [131]. - The SEC has recommended enhancing examination authority over investment advisers, which may impact the Company's subsidiary BAM [134].