Voya Financial(VOYA) - 2025 Q4 - Annual Report

Reinsurance and Capital Management - The company reported a reinsurance strategy that limits exposure to any individual claim to $5 million, with aggregate stop-loss reinsurance also capping exposure at $5 million [99]. - The company’s Total Adjusted Capital exceeded statutory minimum Risk-Based Capital (RBC) levels as of December 31, 2025, indicating no regulatory or corrective action is required [123]. - The NAIC's RBC requirements are used to identify potentially inadequately capitalized insurers, and the company’s subsidiaries currently exceed these requirements [123]. - The implementation of the NAIC's Principles-Based Bond Definition Project is effective January 1, 2025, but is not expected to materially impact the company's RBC [124]. - The company does not anticipate regulatory action as a result of its 2025 IRIS ratio results [126]. Workforce and Human Capital - As of December 31, 2025, the company employed approximately 11,000 employees, with 71% based in the U.S. and 29% in India [103]. - Approximately 86.5% of the U.S.-based workforce is fully remote, while 11.6% work in a hybrid model and 1.9% are office-essential workers [103]. - The company’s human capital strategy focuses on attracting and retaining a diverse workforce to meet evolving customer needs [102]. - The company offers market-competitive compensation and benefits to attract and retain talent, including direct compensation and company-sponsored benefits [104]. Regulatory Compliance and Oversight - The company’s insurance subsidiaries are subject to comprehensive regulation and must file financial statements with state insurance regulators [111]. - The company’s insurance subsidiaries are required to conduct annual analyses of the sufficiency of their statutory reserves, with opinions submitted by qualified actuaries [121]. - The company’s insurance subsidiaries are required to participate in state insurance guaranty associations to protect policyholders from losses due to insurer insolvency [127]. - The company’s investment and retirement products are regulated by multiple federal and state agencies, including the SEC and the DOL [131]. - The company’s broker-dealer subsidiaries must comply with the SEC's Net Capital Rule, which mandates maintaining a minimum level of net capital [139]. - The company is subject to the privacy regulations of the Gramm-Leach-Bliley Act, which imposes requirements for safeguarding personal information [147]. - The company’s futures business is regulated by the CFTC and is subject to the Commodity Exchange Act [141]. Data Privacy and Cybersecurity - Twenty-eight states have adopted versions of the NAIC's Insurance Data Security Model Law, governing cybersecurity and data protection practices for insurers [145]. - The company is subject to numerous state consumer privacy laws, including the California Consumer Privacy Act, which requires annual independent cybersecurity program audits starting July 1, 2026 [149]. - The General Data Protection Regulation (GDPR) applies to the company's subsidiaries operating in the EU, requiring compliance with data protection obligations [151]. - The NAIC Privacy Protections Working Group is revising Model 672 to modernize insurance privacy protections, focusing on existing regulations rather than creating new ones [152]. - The company may face additional privacy-related regulatory obligations from third-party vendors outside the U.S., increasing the risk of non-compliance [153]. Emerging Regulations and Environmental Compliance - Emerging federal and state regulations address the use of big data and artificial intelligence in insurance, with 24 states adopting the NAIC's Model Bulletin on AI systems [154]. - States like Colorado require financial institutions to implement effective programs to detect and prevent identity theft and regulate telemarketing practices [154]. - California's Climate Corporate Data Accountability Act mandates companies generating over $1.0 billion in revenue to disclose Scope 1 and Scope 2 GHG emissions starting in 2026 [164]. - The company is monitoring the implementation of new climate disclosure laws in California, which may not materially impact its operations [164]. - The NAIC established a Climate and Resiliency Task Force to address climate-related risks and enhance regulatory tools [161]. - The company conducts environmental assessments prior to closing new commercial mortgage loans to minimize unexpected environmental liabilities [159]. - The company is subject to anti-money laundering laws and economic sanctions, requiring compliance with various financial transparency regulations [156].

Voya Financial(VOYA) - 2025 Q4 - Annual Report - Reportify