Nebius Group (NBIS) Risk Analysis

As we increase the range of services we offer and diversify our business we may have to apply for additional licenses. Maintenance of granted licenses and obtaining new licenses may require us to spend additional resources. Licensing requirements may also limit our flexibility in running our business. Failure to maintain required licenses may significantly limit our ability to provide new services in respect of which these licenses are required. As the legal framework in Russia continues to evolve, we may be required to take additional actions in order to comply with new legislation. Although we believe that we are in full compliance with applicable laws, ambiguities in legislation and the wide discretion granted to regulatory authorities may result in us being subject to additional regulatory requirements. Compliance with expanded or new regulatory requirements, or new interpretations or applications of existing requirements, may also require us to spend additional resources and limit our flexibility in providing our services.

Based on certain management estimates with respect to our gross income and the average value of our gross assets and on the nature of our business, we believe that we were not a “passive foreign investment company,” or PFIC, for U.S. federal income tax purposes for the 2021 tax year, and do not expect to be a PFIC in the foreseeable future. However, because our PFIC status for any taxable year will depend on the composition of our income and assets and the value of our assets in such year, and because this is a factual determination made annually after the end of each taxable year and there are uncertainties in the application of the rules, there can be no assurance that we will not be considered a PFIC for the current taxable year or any future taxable year. In particular, the value of our assets may be determined in large part by reference to the market price of our Class A shares, which has fluctuated, and may continue to fluctuate, significantly. If we were to be treated as a PFIC for any taxable year during which a U.S. holder held our Class A shares, certain adverse U.S. federal income tax consequences could apply to the U.S. holder. See “Taxation—Taxation in the United States—Passive foreign investment company considerations.”

The law and enforcement practice relating to the liability of providers of online services for the activities of their users is currently not settled in Russia and certain other countries in which we operate. Claims may be brought against us for defamation, libel, negligence, copyright, patent or trademark infringement, tort (including personal injury), fraud, other unlawful activity or other theories and claims based on the nature and content of information to which we link or that may be posted online via blogs and message boards, generated by our users or delivered or shared through our services, including if appropriate licenses and/or rights holder’s consents have not been obtained. For example, we have previously been involved in litigation regarding alleged copyright infringement in the United States. We are also regularly required to remove content uploaded by users on grounds of alleged copyright infringement, and from time to time we receive requests from individuals who do not want their names or websites to appear in our search results. In addition, under applicable laws companies and their officers may be held liable for the failure to delete or to stop distributing such information as is required by a court enforcement officer’s act. The liability may include penalties for companies and imprisonment for officers. Third parties may also seek to assert claims against us alleging unfair competition, data misappropriation, violations of privacy rights or failure to maintain the confidentiality of user data. Our defense of any such actions could be costly and involve significant time and attention of our management and other resources. If any of these complaints result in liability for us, the judgment or settlement could potentially be costly, encourage similar lawsuits, and harm our reputation and possibly our business. Additional recent legislation in Russia has introduced a system of information and website blocking measures both to prevent and stop copyright and related rights infringements and to prevent dissemination of illegal information, such as child pornography, content encouraging suicides and drug use, information on minors hurt by illegal actions and extremist information. The regulations generally require a request from a governmental authority to take down the allegedly infringing or illegal information prior to blocking a particular website. However, in some cases, such as dissemination of extremist information, access to such information can be blocked without notification or prior judicial scrutiny. Moreover, under recent legislative amendments a website may be blocked if the information published contains disrespectful and indecent statements about the society, state, Constitution or governmental authorities. Additionally, the subjects who are accused of disseminating such statements can face administrative fines. If we fail to identify the above-mentioned types of information and delete them from our websites in timely manner, our websites might be blocked and our business may be materially adversely affected. For example, Russian legislation allows for permanent blocking of websites for repeated violation of copyright and related rights. A number of large websites have been blocked pursuant to this legislation so far, including, for example, a major hosting provider. We may be subject to unpredictable blocking measures, injunctions or court decisions that may require us to block or remove content and may adversely affect our services and operations. In addition, to ensure compliance with such laws, we may be required to commit greater resources, or to limit functionality of our services, which may adversely affect the appeal of our services to our customers. Although we believe that we are in full compliance with applicable laws, the application of new norms by government authorities might be sometimes inconsistent or unpredictable. New legislation and regulations may impose additional requirements on us and our operations and lead to material legal liability, which can be difficult to foresee or limit. For instance, in December 2020 the European Commission proposed a draft of the Digital Services Act which is aimed at creating a common set of rules on obligations and accountability of online intermediaries providing services in the European Union. The document is now under consideration of the European Parliament and Member States and, if adopted, could impose new obligations on our services provided (or to be provided in the future) to users in the EU. Also, legislation adopted in 2021 and coming into full effect in 2022 introduces a mandatory system for the measurement of the audience of internet services and content by a specially designated uniform measurements organization, which would provide Russian state authorities with measurement reports on the internet audience (similar to the mandatory measurement of the TV audience). Such legislation imposes obligations on popular internet resources in Russia (including those provided by Yandex) to either integrate required data collection and reporting instruments or to ensure independent collection of the data and information required for the measurement of the internet audience, and to transfer such data to the designated measurements organization. The regulations related to the foregoing legislation provide a significant list of information to be collected by or to be provided to the designated measurements organization, including data such as user ID, user device ID, and information on the content. Neither the legislation nor the regulations provide sufficient protection of our information and user data, including with respect to the competitive commercial interests of the appointed ‘measurements organization’. Mediascope, a leading Russian media research company, was appointed as the designated measurements organization in February 2022. In addition, Russian legislation mandates the placement of “social advertising” (i.e., ads relating to the promotion of charities, socially useful activities and governmental functions) by all advertising platforms and distributors in their inventory free of charge, in an amount up to 5% of their commercial advertising inventory (calculated on the basis of the preceding year and nominated in currency or advertising impressions). The legislation also establishes a designated operator of social advertising on the internet, which is authorized to use the 5% free-of-charge quota to place social ads. The Institute for the Development of the Internet (IRI) was appointed as the social advertising operator in 2021. Although the legislation provides some degree of discretion for the advertising platforms and distributors regarding the interaction with the operator, the latter holds substantial authority to require any advertising platform or distributor to place social advertising on the terms determined by the operator. The regulations provide detailed provisions on reporting from the advertising platforms and distributors to the operator regarding their commercial advertising inventory, forecasting obligations related to the use of the 5% quota by the operator and some other provisions.

We rely on a combination of patents, trademarks, trade secrets and copyrights, as well as nondisclosure agreements, to protect our intellectual property rights. Our patent department is responsible for developing and implementing our group-wide patent protection strategy in selected jurisdictions, and to date we have filed more than 1,100 patent applications, of which more than 700 have resulted in issued patents. The protection and enforcement of intellectual property rights in Russia and other markets in which we operate, however, may not be as effective as that in the United States or Western Europe. Also, the efforts we have taken to protect our proprietary rights may not be sufficient or effective. Any significant infringement of our intellectual property rights could harm our business, our brand and/or our ability to compete, all of which could adversely affect our competitive position, our business, financial condition and results of operations.

Our business depends on our ability to provide accurate and reliable search results and other user services, which may be disrupted. For example, because our search technology ranks a webpage’s relevance based in part on the importance of the websites that link to it, people have attempted to link groups of websites together to manipulate search results. If our efforts to combat these and other types of “index spamming” are unsuccessful, our reputation for delivering relevant results could be harmed. This could result in a decline in user traffic, which may adversely affect our business, financial condition and results of operations. Although we maintain a robust network of security measures, our systems are potentially vulnerable to damage or interruption from terrorist attacks, denial-of-service attacks, computer viruses or other cyber-attacks or attempts to harm our system, power losses, telecommunications failures, floods, fires, extreme weather conditions, earthquakes and similar events. Our data centers are also potentially subject to break-ins, sabotage and intentional acts of vandalism, and to potential disruptions. At the same time, our data centers are located in different geographical areas. Most of Yandex’s services may function in the normal course even when one of the company's data centers is disconnected or lost. The occurrence of a natural disaster or other unanticipated problems at our data centers could result in lengthy interruptions in our service, or a pandemic or an outbreak of disease or similar public health concern, such as the recent coronavirus outbreak, or fear of such an event, could result in reduced customer traffic and consumer spending as well as a reduction of the equipment maintenance quality, partial or complete shutdown of equipment, labor shortages, delays in manufacturing and shipment of products, and possible interruptions in the provision of services. Such events could reduce our revenues and profits, and our brand could be damaged if people believe our services are unreliable. From time to time, we have experienced power outages that may have interrupted access to our services and impacted the functioning of our internal systems. Any unscheduled interruption in our services places a burden on our entire organization and would result in an immediate loss of revenue. If we experience frequent or persistent system failures on our websites, our reputation and brand could be permanently harmed. The steps we have taken to increase the reliability and redundancy of our systems are expensive, reduce our operating margin and may be insufficient to reduce the frequency or duration of unscheduled downtime. Although we test software updates before implementation and there have been no significant downtime periods in recent years, errors made by our employees in maintaining or expanding our systems may damage our brand and may have a materially adverse effect on our business, financial condition and results of operations.

We license much of our content from third parties, such as video content, music, news items, weather reports and TV program schedules. If we are unable to maintain and build relationships with third-party content providers, this would likely result in a loss of user traffic. Our ability to license content from international producers may also be limited in light of the current geopolitical crisis. In addition, we may be required to make substantial payments to third parties from whom we license or acquire such content. An increase in the prices charged to us by third-party content providers would adversely affect our business, financial condition and results of operations. In addition, many of our content licenses with third parties are non-exclusive. Accordingly, other websites and streaming platforms, as well as other media such as television, may be able to offer similar or identical content. If other companies make available competitive content, the number of users of our services may not grow as anticipated, or may decline. This increases the importance of our ability to aggregate compelling content in order to differentiate Yandex from other businesses.

We believe that the brand identity that we have developed through the strength of our technology, our user focus, our independence from political considerations and, in particular, our ability to deliver relevant answers and recommendations, has significantly contributed to the success of our business. We also believe that maintaining and enhancing the Yandex brand is critical to expanding our base of users, advertisers, advertising network partners, and other business partners. We have also from time to time established joint ventures or other partnerships with respect to some of our business units. Although we have sought to implement appropriate controls and protections, depending on specific terms of joint venture or partnership arrangements we may have more limited ability to ensure that these businesses are operated in a manner that is consistent with the broader Yandex brand. Maintaining and enhancing our brand, especially in relation to mobile services, will depend largely on our ability to continue to be a technology leader and a provider of high-quality, reliable services, which we may not continue to do successfully.

In response to the current geopolitical crisis, numerous governments, including those of the United States, European Union and United Kingdom, have imposed an extensive range of additional economic sanctions on certain Russian government officials, private individuals and Russian companies, as well as extensive controls on the export of technology to parties in Russia. In addition, many businesses are taking a cautious approach to sanctions and export compliance matters and have adopted internal policies more restrictive than are strictly required by the applicable rules. Although neither Yandex N.V nor any of its group companies is a target of sanctions, these restrictions and policies significantly limit the ability of our core businesses to enter into agreements with international parties and may make it more difficult for us to enter into agreements with other counterparties, including our key providers who may refuse to work with us because of the geopolitical situation. Additional restrictive measures that could be implemented that could affect our business include the following: ? sanctions directly targeting one or more of our group companies, Board members, or senior executives; ? expanding the scope of sanctioned activities or transactions; ? designating parties with whom we have or may have significant business relationships as “specially designated nationals” or “blocked” parties, meaning that all dealings with them by US, UK and/or EU persons, or persons from other countries which impose economic sanctions, or involving items or technologies from these jurisdictions would be prohibited; or ? expanding sanctions to cover entities that are less than 50% owned or controlled by a sanctioned party. If sanctions were to be imposed directly on Yandex N.V. or our operating subsidiaries, our business, operations may be materially adversely affected. None of Yandex or our group companies is a target of sanctions in the United States, United Kingdom or European Union. Our former Executive Director and Deputy Chief Executive Officer, Tigran Khudaverdyan, was designated under EU and UK sanctions on March 14, 2022, and immediately resigned from his board and executive positions at Yandex N.V. and its Dutch subsidiaries. If we were to become a target of sanctions, it may have a material adverse effect on our business and our ability to operate our business and satisfy our obligations to our stakeholders.