CVS Health 10-K 2023-12-31

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

☑ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2023

or

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from _________ to_________

Commission file number: 001-01011

CVS HEALTH CORPORATION

(Exact name of registrant as specified in its charter)

The aggregate market value of the registrant’s common stock held by non-affiliates was approximately $88,547,881,979 as of June 30, 2023, based on the closing price of the common stock on the New York Stock Exchange. For purposes of this calculation, only executive officers and directors are deemed to be affiliates of the registrant.

As of January 31, 2024, the registrant had 1,258,449,553 shares of common stock outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

The following materials are incorporated by reference into this Form 10-K:

Information contained in the definitive proxy statement for CVS Health Corporation’s 2024 Annual Meeting of Stockholders, to be filed with the Securities and Exchange Commission within 120 days after the end of the fiscal year ended December 31, 2023 (the “Proxy Statement”), is incorporated by reference in Parts III and IV to the extent described therein.

TABLE OF CONTENTS

Unless the context otherwise requires, references to the terms “we,” “our” or “us” used throughout this Annual Report on Form 10-K (this “10-K”) refer to CVS Health Corporation (a Delaware corporation), together with its subsidiaries (collectively, “CVS Health” or the “Company”). References to competitors and other companies throughout this 10-K, including the information incorporated herein by reference, are for illustrative or comparison purposes only and are not identifying that these companies are the only competitors or closest competitors of the Company or any of the Company’s businesses, products, or services.

CAUTIONARY STATEMENT CONCERNING FORWARD-LOOKING STATEMENTS

The Private Securities Litigation Reform Act of 1995 (the “Reform Act”) provides a “safe harbor” for forward-looking statements, so long as (1) those statements are identified as forward-looking, and (2) the statements are accompanied by meaningful cautionary statements that identify important factors that could cause actual results to differ materially from those discussed in the statement. We want to take advantage of these safe harbor provisions.

Certain information contained in this 10-K is forward-looking within the meaning of the Reform Act or Securities and Exchange Commission (“SEC”) rules. This information includes, but is not limited to: “Outlook for 2024” of Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) included in Item 7, “Quantitative and Qualitative Disclosures About Market Risk” included in Item 7A, “Government Regulation” included in Item 1, and “Risk Factors” included in Item 1A. In addition, throughout this 10-K and our other reports and communications, we use the following words or variations or negatives of these words and similar expressions when we intend to identify forward-looking statements:

All statements addressing the future operating performance of CVS Health or any segment or any subsidiary and/or future events or developments, including, but not limited to, statements relating to the Company’s investment portfolio, operating results, cash flows and/or financial condition, statements relating to corporate strategy, statements relating to future revenue, operating income or adjusted operating income, earnings per share or adjusted earnings per share, Health Care Benefits segment business, sales results and/or trends, medical cost trends, medical membership, Medicare Part D membership, medical benefit ratios and/or operations, Health Services segment business, sales results and/or trends and/or operations, Pharmacy & Consumer Wellness segment business, sales results and/or trends and/or operations, incremental investment spending, interest expense, effective tax rate, weighted-average share count, cash flow from operations, net capital expenditures, cash available for debt repayment, statements related to possible, proposed, pending or completed acquisitions, joint ventures, investments or combinations that involve, among other things, the timing or likelihood of receipt of regulatory approvals, the timing of completion, integration synergies, net synergies and integration risks and other costs, including those related to CVS Health’s acquisitions of Oak Street Health, Inc. (“Oak Street Health”) and Signify Health, Inc. (“Signify Health”), enterprise modernization, transformation, leverage ratio, cash available for enhancing shareholder value, inventory reduction, turn rate and/or loss rate, debt ratings, the Company’s ability to attract or retain customers and clients, store development and/or relocations, new product development, and the impact of industry and regulatory developments, as well as statements expressing optimism or pessimism about future operating results or events, are forward-looking statements within the meaning of the Reform Act.

Forward-looking statements rely on a number of estimates, assumptions and projections concerning future events, and are subject to a number of significant risks and uncertainties and other factors that could cause actual results to differ materially from those statements. Many of these risks and uncertainties and other factors are outside our control.

Certain additional risks and uncertainties and other factors are described under “Risk Factors” included in Item 1A of this 10-K; these are not the only risks and uncertainties we face. There can be no assurance that the Company has identified all the risks that may affect it. Additional risks and uncertainties not presently known to the Company or that the Company currently believes to be immaterial also may adversely affect the Company’s businesses. If any of those risks or uncertainties develops into actual events, those events or circumstances could have a material adverse effect on the Company’s businesses, operating results, cash flows, financial condition and/or stock price, among other effects.

You should not put undue reliance on forward-looking statements. Any forward-looking statement speaks only as of the date of this 10-K, and we disclaim any intention or obligation to update or revise forward-looking statements, whether as a result of new information, future events, uncertainties or otherwise.

PART I

Overview

CVS Health Corporation, together with its subsidiaries (collectively, “CVS Health,” the “Company,” “we,” “our” or “us”), is a leading health solutions company building a world of health around every consumer it serves and connecting care so that it works for people wherever they are. As of December 31, 2023, we had more than 9,000 retail locations, more than 1,000 walk-in medical clinics, 204 primary care medical clinics, a leading pharmacy benefits manager with approximately 108 million plan members and expanding specialty pharmacy solutions, and a dedicated senior pharmacy care business serving more than one million patients per year. We serve an estimated more than 35 million people through traditional, voluntary and consumer-directed health insurance products and related services, including expanding Medicare Advantage offerings and a leading standalone Medicare Part D prescription drug plan (“PDP”). We are creating new sources of value through our integrated model allowing us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs.

During the year ended December 31, 2023, the Company completed the acquisition of two key health care delivery assets to enhance its ability to execute on its care delivery strategy by advancing its primary care, home-based care and provider enablement capabilities. On March 29, 2023, the Company acquired Signify Health, Inc. (“Signify Health”), a leader in health risk assessments, value-based care and provider enablement services. On May 2, 2023, the Company also acquired Oak Street Health, Inc. (“Oak Street Health”), a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. Both Signify Health and Oak Street Health are included within the Health Services segment.

In connection with its new operating model adopted in the first quarter of 2023, the Company realigned the composition of its segments to reflect how its Chief Operating Decision Maker (the “CODM”) reviews information and manages the business. The Company’s CODM is the Chief Executive Officer. As a result of this realignment, the Company formed a new Health Services segment, which in addition to providing a full range of pharmacy benefit management (“PBM”) solutions, also delivers health care services in the Company’s medical clinics, virtually, and in the home, as well as provider enablement solutions. In addition, the Company created a new Pharmacy & Consumer Wellness segment, which includes its retail and long-term care pharmacy operations and related pharmacy services, as well as its retail front store operations. This segment will also provide pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. Prior period segment financial information has been recast to conform with the current period presentation. See Note 19 ‘‘Segment Reporting’’ included in Item 8 of this 10-K for segment financial information.

The Company has four reportable segments: Health Care Benefits, Health Services, Pharmacy & Consumer Wellness and Corporate/Other.

Business Strategy

We are building a world of health around every consumer we serve, seeking to make it easier and more affordable to live a healthier life. This means delivering solutions that are more personalized, simpler to use and increasingly digital so consumers can receive care when, where and how they desire. We address holistic health – physical, emotional, social and economic – and we are creating new sources of value through our integrated care model which allows us to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs. We believe our consumer-centric strategy will drive sustainable long-term growth and deliver value for all stakeholders.

Health Care Benefits Segment

The Health Care Benefits segment operates as one of the nation’s leading diversified health care benefits providers, serving an estimated more than 35 million people as of December 31, 2023. The Health Care Benefits segment has the information and resources to help members, in consultation with their health care professionals, make more informed decisions about their health care. The Health Care Benefits segment offers a broad range of traditional, voluntary and consumer-directed health insurance products and related services, including medical, pharmacy, dental and behavioral health plans, medical management capabilities, Medicare Advantage and Medicare Supplement plans, PDPs and Medicaid health care management services. The Health Care Benefits segment’s customers include employer groups, individuals, college students, part-time and hourly

workers, health plans, health care providers (“providers”), governmental units, government-sponsored plans, labor groups and expatriates.

Health Care Benefits Products and Services

The Company refers to insurance products (where it assumes all or a majority of the risk for medical and dental care costs) as “Insured” and administrative services contract products (where the plan sponsor assumes all or a majority of the risk of medical and dental care costs) as “ASC.” Health Care Benefits products and services consist of the following:

• Commercial Medical: The Health Care Benefits segment offers point-of-service (“POS”), preferred provider organization (“PPO”), health maintenance organization (“HMO”) and indemnity benefit (“Indemnity”) plans. Commercial medical products also include health savings accounts (“HSAs”) and consumer-directed health plans that combine traditional POS or PPO and/or dental coverage, subject to a deductible, with an accumulating benefit account (which may be funded by the plan sponsor and/or the member in the case of HSAs). Principal products and services are targeted specifically to large multi-site national, mid-sized and small employers, individual insureds and expatriates. The Company offers medical stop loss insurance coverage for certain employers who elect to self-insure their health benefits. Under medical stop loss insurance products, the Company assumes risk for costs associated with large individual claims and/or aggregate loss experience within an employer’s plan above a pre-set annual threshold. The segment also has a portfolio of additional health products and services that complement its medical products such as dental plans, behavioral health and employee assistance products, provider network access and vision products.

• Government Medical: In select geographies, the Health Care Benefits segment offers Medicare Advantage plans, Medicare Supplement plans and prescription drug coverage for Medicare beneficiaries; participates in Medicaid and subsidized Children’s Health Insurance Programs (“CHIP”); and participates in demonstration projects for members who are eligible for both Medicare and Medicaid (“Duals”). These Government Medical products are further described below:

*•*Medicare Advantage: Through annual contracts with the U.S. Centers for Medicare & Medicaid Services (“CMS”), the Company offers HMO and PPO products for eligible individuals in certain geographic areas through the Medicare Advantage program. Members typically receive enhanced benefits over traditional fee-for-service Medicare coverage (“Original Medicare”), including reduced cost-sharing for preventive care, vision and other services. The Company offered network-based HMO and/or PPO plans in 46 states and Washington, D.C. in 2023. For certain qualifying employer groups, the Company offers Medicare PPO products nationally. When combined with the Company’s PDP product, these national PPO plans form an integrated national Insured Medicare product for employers that provides medical and pharmacy

Showing the first 8K of 196K characters. Open the full section

You should carefully consider each of the following risks and uncertainties and all of the other information set forth in this 10-K. These risks and uncertainties and other factors may affect forward-looking statements, including those we make in this 10-K or elsewhere, such as in news releases or investor or analyst calls, meetings or presentations, on our websites or through our social media channels. The risks and uncertainties described below are not the only ones we face. There can be no assurance that we have identified all the risks that affect us. Additional risks and uncertainties not presently known to us or that we currently believe to be immaterial also may adversely affect our businesses. Any of these risks or uncertainties could cause our actual results to differ materially from our expectations and the expected results discussed in our forward-looking statements. You should not consider past results to be an indication of future performance.

If any of the following risks or uncertainties develops into actual events or if the circumstances described in the risks or uncertainties occur or continue to occur, those events or circumstances could have a material adverse effect on our businesses, operating results, cash flows, financial condition and/or stock price, among other effects on us. You should read the following section in conjunction with the MD&A, included in Item 7 of this 10-K, our consolidated financial statements and the related notes, included in Item 8 of this 10-K, and our “Cautionary Statement Concerning Forward-Looking Statements” in this 10-K.

Summary

The following is a summary of the principal risks we face that could negatively impact our businesses, operating results, cash flows and/or financial condition:

Risks Relating to Our Businesses

• We may not be able to accurately forecast health care and other benefit costs.

• Adverse economic conditions in the U.S. and abroad can materially and adversely impact our businesses, operating results, cash flows and financial condition.

• Each of our segments operates in a highly competitive and evolving business environment.

• A change in our Health Care Benefits product mix may adversely affect our profit margins.

• Our recent acquisitions of Signify Health and Oak Street Health subject us to new and additional risks beyond those to which we have been historically subject.

• We can provide no assurance that we will be able to compete successfully and profitably on Public Exchanges.

• Negative public perception of the industries in which we operate can adversely affect our businesses, operating results, cash flows and prospects.

• We must maintain and improve our relationships with our retail and specialty pharmacy customers and increase the demand for our products and services.

• We face risks relating to the availability, pricing and safety profiles of prescription drugs that we purchase and sell.

• The reserves we hold for expected claims in our Insured Health Care Benefits products are based on estimates that involve an extensive degree of judgment and are inherently variable, and any reserve, including a premium deficiency reserve, may be insufficient.

• We are exposed to risks relating to the solvency of other insurers.

Risks From Changes in Public Policy and Other Legal and Regulatory Risks

• We are subject to potential changes in public policy, laws and regulations, including reform of the U.S. health care system and entitlement programs.

• If we fail to comply with applicable laws and regulations, or fail to change our operations in line with any new legal or regulatory requirements, we could be subject to significant adverse regulatory actions.

• If our compliance or other systems and processes fail or are deemed inadequate, we may suffer brand and reputational harm and become subject to contractual damages, regulatory actions and/or litigation.

• We routinely are subject to litigation and other adverse legal proceedings, including class actions and qui tam actions. Many of these proceedings seek substantial damages which may not be covered by insurance.

• We frequently are subject to regular and special governmental audits, investigations and reviews that could result in changes to our business practices and also could result in material refunds, fines, penalties, civil liabilities, criminal liabilities and other sanctions.

• Our litigation and regulatory risk profiles are changing as we offer new products and services and expand in business areas beyond our historical businesses, and we may face increased regulatory risks related to our vertical integration strategy.

• We face unique regulatory and other challenges in our PBM, Public Exchange, Medicare and Medicaid businesses.

• Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues.

• We may not be able to obtain adequate premium rate increases in our Insured Health Care Benefits products, MBRs and operating results, which could magnify the adverse impact of increases in health care and other benefit costs and of ACA assessments, fees and taxes.

• Minimum MLR rebate requirements limit the level of margin we can earn in our Insured Health Care Benefits products while leaving us exposed to higher than expected medical costs. Challenges to our minimum MLR rebate methodology and/or reports could adversely affect our operating results.

• Our operating results may be adversely affected by changes in laws and policies governing employers and by union organizing activity.

Risks Associated with Mergers, Acquisitions, and Divestitures

• We may be unable to successfully integrate companies we acquire.

• We expect to continue to pursue acquisitions, joint ventures, strategic alliances and other inorganic growth opportunities, which may be unsuccessful, cause us to assume unanticipated liabilities, disrupt our existing businesses, be dilutive or lead us to assume significant debt, among other things.

Risks Related to Our Operations

• Failure to meet customer and investor expectations, including with respect to environmental, social and governance (“ESG”) goals, may harm our brand and reputation, our ability to retain and grow our customer base and membership.

• We and our vendors have experienced and continue to experience information security incidents. We can provide no assurance that we or our vendors will be able to contain, detect or prevent incidents.

• Data governance failures or the failure or disruption of our information technology or infrastructure can adversely affect our reputation, businesses and prospects. Our use and disclosure of members’, customers’ and other constituents’ sensitive information is subject to complex regulations.

• Pursuing multiple information technology improvement initiatives simultaneously could make continued development and implementation significantly more challenging.

• Product liability, product recall, professional liability or personal injury issues could damage our reputation.

• We face significant competition in attracting and retaining talented employees. Further, managing succession for, and retention of, key executives is critical to our success.

• Sales of our products and services are dependent on our ability to attract and motivate internal sales personnel and independent third-party brokers, consultants and agents. We may be subject to penalties or other regulatory actions as a result of the marketing practices of brokers and agents selling our products.

• Failure of our businesses to effectively collaborate could prevent us from maximizing our operating results.

• We are subject to payment-related risks that could increase our operating costs, expose us to fraud or theft, subject us to potential liability and disrupt our business operations.

• Both our and our vendors’ operations are subject to a variety of business continuity hazards and risks that

Showing the first 8K of 157K characters. Open the full section

There are no unresolved SEC Staff Comments.

Cybersecurity Risk Management

Securing the Company’s business information, intellectual property, customer, patient and employee data and technology systems is essential for the continuity of its businesses, meeting applicable regulatory requirements and maintaining the trust of its stakeholders. Cybersecurity is an important and integrated part of the Company’s enterprise risk management function that identifies, monitors and mitigates business, operational and legal risks.

To help protect the Company from a major cybersecurity incident that could have a material impact on operations or the Company’s financial results, the Company has implemented policies, programs and controls, including technology investments that focus on cybersecurity incident prevention, identification and mitigation. The steps the Company takes to reduce its vulnerability to cyberattacks and to mitigate impacts from cybersecurity incidents include, but are not limited to: establishing information security policies and standards, implementing information protection processes and technologies, monitoring its information technology systems for cybersecurity threats, assessing cybersecurity risk profiles of key third-parties, implementing cybersecurity training and collaborating with public and private organizations on cyber threat information and best practices. The Company is currently in material compliance with applicable information privacy and cybersecurity standards.

The Company has implemented a Cybersecurity Incident Response Plan (the “Plan”), which is integrated into its overall crisis management program. The Plan provides a framework for responding to cybersecurity incidents. The Plan identifies applicable requirements for incident disclosure and reporting as well as provides protocols for incident evaluation, including the use of third-party service providers and partners, processes for notification and internal escalation of information to the Company’s senior management, the disclosure committee, the Board and appropriate Board committees. The Plan also addresses requirements for the Company’s external reporting obligations. The Plan is reviewed and updated, as necessary, under the leadership of the Company’s Chief Information Security Officer (“CISO”) and Chief Privacy Officer (“CPO”).

The Company’s information technology systems and processes are assessed by independent third parties, as appropriate to their business requirements, for compliance with the following standards: HIPAA; NIST 800-53; System and Organization Controls (“SOC”) 1; SOC 2 Type 2; HI-TRUST; Payment Card Industry Data Security Standards; and the National Association of Insurance Commissioners. The Company annually purchases a cybersecurity risk insurance policy that would help defray the costs associated with a covered cybersecurity incident if it occurred.

Although the Company did not experience a material cybersecurity incident during the year ended December 31, 2023, the scope and impact of any future incident cannot be predicted. See “Item 1A. Risk Factors” for more information on the Company’s cybersecurity-related risks.

Governance

Management has responsibility to manage risk and bring to the Board’s attention the most material near-term and long-term risks to the Company. The Company’s CISO leads management’s assessment and management of cybersecurity risk. The CISO reports to the Company’s Chief Digital, Data, Analytics & Technology Officer (the “CDDATO”), who reports directly to the Company’s Chief Executive Officer. The CDDATO, CISO and the CPO, regularly review cybersecurity matters with management. The current CDDATO, CISO and CPO each has more than 10 years of experience managing risks or advising on cybersecurity issues.

The Board is actively engaged in overseeing and reviewing the Company’s strategic direction and objectives, taking into account, among other considerations, the Company’s risk profile and related exposures, as part of this oversight the Board has delegated certain of these responsibilities to committees of the Board. The Board has delegated the responsibility for the oversight of the Company’s cybersecurity risks program to the Nominating and Corporate Governance Committee. As part of this oversight, the Nominating and Corporate Governance Committee reviews the Company’s cybersecurity program periodically, and at least annually. The Company’s CDDATO and CISO update the Nominating and Corporate Governance Committee periodically, and at least annually, and the full Board as needed, on the Company’s cybersecurity program, including with respect to particular cybersecurity threats, incidents or new developments in the Company’s risk profile. The CISO is a member of the Company’s disclosure committee, and the CPO advises the disclosure committee on cybersecurity matters on an as-needed basis. During 2023, the Board conducted a review of its overall committee structure, membership and responsibilities in an effort to enhance its oversight. As part of this review, the Board has determined that it will shift the delegation of the oversight of the Company’s cybersecurity risks program to the Audit Committee effective March 2024.

The Company’s principal office is an owned building complex located in Woonsocket, Rhode Island, which totals approximately one million square feet. The Company also leases office space in other locations in the U.S.

Health Care Benefits Segment

The Health Care Benefits segment’s principal office is an owned building complex located in Hartford, Connecticut, which totals approximately 1.7 million square feet. The Health Care Benefits segment also owns or leases office space in other locations in the U.S. and several other countries.

Health Services Segment

The Health Services segment includes owned or leased mail service dispensing pharmacies, call centers, on-site pharmacy stores, retail specialty pharmacy stores, specialty mail service pharmacies and primary care centers.

The Health Services segment leases 204 primary care centers across 25 states, totaling approximately 1.9 million square feet.

The Health Services segment also owns or leases office space used for administration, sales and marketing, technology and development and professional services throughout the U.S. and in Ireland.

Pharmacy & Consumer Wellness Segment

As of December 31, 2023, the Pharmacy & Consumer Wellness segment operated the following properties:

• Approximately 7,500 retail stores, of which approximately 5% were owned. Net selling space for retail stores was approximately 74.6 million square feet as of December 31, 2023.

• Approximately 1,895 retail pharmacies within retail chains, as well as approximately 30 clinics in Target Corporation (“Target”) stores;

• Owned distribution centers and leased distribution facilities throughout the U.S. totaling approximately 10.1 million square feet; and

• Branches for compounding, specialty infusion and enteral nutrition services throughout the U.S.

• Owned and leased LTC pharmacies throughout the U.S. and an owned LTC repackaging facility.

In connection with certain business dispositions completed between 1995 and 1997, the Company continues to guarantee lease obligations for 63 former stores. The Company is indemnified for these guarantee obligations by the respective initial purchasers. These guarantees generally remain in effect for the initial lease term and any extension thereof pursuant to a renewal option provided for in the lease prior to the time of the disposition. For additional information on these guarantees, see “Lease Guarantees” in Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K.

Management believes that the Company’s owned and leased facilities are suitable and adequate to meet the Company’s anticipated needs. At the end of the existing lease terms, management believes the leases can be renewed or replaced by alternative space. For additional information on the right-of-use assets and lease liabilities associated with the Company’s leases, see Note 7 ‘‘Leases’’ included in Item 8 of this 10-K.

The information contained in Note 18 ‘‘Commitments and Contingencies’’ included in Item 8 of this 10-K is incorporated herein by reference.

Not applicable.

Information about our Executive Officers

The following sets forth the name, age and biographical information for each of the Registrant’s executive officers as of February 7, 2024. In each case the officer’s term of office extends to the date of the meeting of the Board following the next annual meeting of stockholders of CVS Health Corporation. Previous positions and responsibilities held by each of the executive officers over the past five years or more are indicated below:

Sreekanth K. Chaguturu, M.D., age 45, Executive Vice President and Chief Medical Officer of CVS Health Corporation since May 2022; Chief Medical Officer of CVS Caremark from September 2019 through May 2022; Chief Population Health Officer at Mass General Brigham, a non-profit hospital formerly known as Partners HealthCare, from August 2017 through August 2019; Vice President, Population Health Management at Mass General Brigham from June 2014 through August 2017. Dr. Chaguturu is also an Attending Physician at Massachusetts General Hospital and an Instructor in Internal Medicine at Harvard Medical School from July 2007 to the present.

James D. Clark, age 59, Senior Vice President - Controller and Chief Accounting Officer of CVS Health Corporation since November 2018; Vice President - Finance and Accounting of CVS Pharmacy, Inc. from September 2009 through October 2018.

Thomas F. Cowhey, age 51, Executive Vice President and Chief Financial Officer of CVS Health Corporation since January 2024; Interim Chief Financial Officer of CVS Health Corporation from October 2023 through January 2024; Senior Vice President, Corporate Finance of CVS Health Corporation from September 2023 through October 2023; Senior Vice President, Capital Markets of CVS Health Corporation from February 2022 through September 2023; and Executive Vice President and Chief Financial Officer of Surgical Partners, a large independent operator of short-stay surgical facilities, from April 2018 through February 2022.

Laurie P. Havanec, age 63, Executive Vice President and Chief People Officer of CVS Health Corporation since February 2021; Executive Vice President and Chief People Officer, Otis Worldwide Corporation, an elevator, escalator and moving walkway manufacturer, from October 2019 through January 2021; Corporate Vice President, Talent of United Technologies Corporation, a multinational manufacturing conglomerate, from April 2017 through October 2019; Vice President - Human Resources, Institution Businesses of Aetna Inc. from 2013 through March 2017. Ms. Havanec is also a member of the board of directors of American Water Works Company, Inc., a publicly traded water and wastewater utility company.

J. David Joyner, age 59, Executive Vice President of CVS Health Corporation and President of Pharmacy Services since January 2023; Strategic Business Advisor to gWell, Inc., a wellness technology company, since July 2021; Advisor to Podimetrics Inc., a health care company focused on the identification and treatment of diabetic foot ulcers since September 2020; Advisory Council to the Rawls College of Business of Texas Tech University since July 2020; Executive Vice President – Sales and Account Services, CVS Caremark for CVS Health Corporation from March 2011 through December 2019.

Brian A. Kane, age 51, Executive Vice President of CVS Health Corporation and President of Aetna since September 2023; Independent Strategic Advisor to private equity firms focused on health care services from June 2022 to September 2023; and Chief Financial Officer of Humana, Inc., a publicly traded health and well-being company, from June 2014 through May 2021.

Samrat S. Khichi, age 56, Executive Vice President, Chief Policy Officer and General Counsel of CVS Health Corporation since February 2023; Executive Vice President, Corporate Development, Public Policy, Regulatory Affairs and General Counsel of Becton Dickinson Company (“BD”), a global medical technology company, from December 2017 through February 2023; and Senior Vice President, General Counsel and Secretary of C.R. Bard, a medical technology company that was acquired from BD, from July 2014 through December 2017.

Karen S. Lynch, age 61, President and Chief Executive Officer of CVS Health Corporation since February 2021; Executive Vice President of CVS Health Corporation from November 2018 through January 2021; President of Aetna Inc. from January 2015 through January 2021; and a director of CVS Health Corporation since February 2021.

Tilak Mandadi, age 60, Executive Vice President and Chief Data, Digital and Technology Officer of CVS Health Corporation since July 2022; Chief Strategy Officer, MGM Resorts International from July 2021 through July 2022; Executive Vice President, Digital & Global Chief Technology Officer, Disney Parks, Experiences and Products from March 2013 through July 2021.

Prem S. Shah, age 44, Executive Vice President and Chief Pharmacy Officer of CVS Health Corporation since November 2021 and Co-President of Retail since January 2022; Executive Vice President, Specialty and Product Innovation, CVS Caremark

from August 2018 through November 2021; Vice President - Specialty Pharmacy, CVS Caremark from February 2013 through July 2018.

PART II

Market Information

CVS Health Corporation’s common stock is listed on the New York Stock Exchange under the symbol “CVS.”

Dividends

During 2023, 2022 and 2021, the quarterly cash dividend was $0.605, $0.55 and $0.50 per share, respectively. In December 2023, the Board authorized an increase of approximately 10% in the quarterly cash dividend to $0.665 per share effective in 2024. CVS Health Corporation has paid cash dividends every quarter since becoming a public company. Future dividends will depend on the Company’s earnings, capital requirements, financial condition and other factors considered relevant by the Board.

See Note 14 ‘‘Shareholders’ Equity’’ included in Item 8 of this 10-K for information regarding CVS Health Corporation’s dividends.

Holders of Common Stock

As of January 31, 2024, there were 23,098 registered holders of the registrant’s common stock according to the records maintained by the registrant’s transfer agent.

Issuer Purchases of Equity Securities

The following share repurchase programs have been authorized by the Board:

Each of the share Repurchase Programs was effective immediately and permit the Company to effect repurchases from time to time through a combination of open market repurchases, privately negotiated transactions, accelerated share repurchase (“ASR”) transactions, and/or other derivative transactions. Both the 2022 and 2021 Repurchase Programs can be modified or terminated by the Board at any time.

During the years ended December 31, 2023 and 2022, the Company repurchased an aggregate of 22.8 million shares of common stock for approximately $2.0 billion and an aggregate of 34.1 million shares of common stock for approximately $3.5 billion, respectively, both pursuant to the 2021 Repurchase Program. This activity includes the share repurchases under the ASR transactions described below. During the year ended December 31, 2021, the Company did not repurchase any shares of common stock.

Pursuant to the authorization under the 2021 Repurchase Program, the Company entered into a $3.0 billion fixed dollar ASR with Morgan Stanley & Co. LLC (“Morgan Stanley”). Upon payment of the $3.0 billion purchase price on January 4, 2024, the Company received a number of shares of CVS Health Corporation’s common stock equal to 85% of the $3.0 billion notional amount of the ASR or approximately 31.4 million shares at a price of $81.19 per share, which were placed into treasury stock in January 2024. At the conclusion of the ASR, the Company may receive additional shares representing the remaining 15% of the $3.0 billion notional amount. The ultimate number of shares the Company may receive will depend on the daily volume-weighted average price of the Company’s stock over an averaging period, less a discount. It is also possible, depending on such weighted average price, that the Company will have an obligation to Morgan Stanley which, at the Company’s option, could be settled in additional cash or by issuing shares. Under the terms of the ASR, the maximum number of shares that could be delivered to the Company is 73.9 million.

Pursuant to the authorization under the 2021 Repurchase Program, the Company entered into a $2.0 billion fixed dollar ASR with Citibank, N.A. Upon payment of the $2.0 billion purchase price on January 4, 2023, the Company received a number of

shares of CVS Health Corporation’s common stock equal to 80% of the $2.0 billion notional amount of the ASR or approximately 17.4 million shares at a price of $92.19 per share, which were placed into treasury stock in January 2023. The ASR was accounted for as an initial treasury stock transaction for $1.6 billion and a forward contract for $0.4 billion. The forward contract was classified as an equity instrument and was recorded within capital surplus. In February 2023, the Company received approximately 5.4 million shares of CVS Health Corporation’s common stock, representing the remaining 20% of the $2.0 billion notional amount of the ASR, thereby concluding the ASR. These shares were placed into treasury and the forward contract was reclassified from capital surplus to treasury stock in February 2023.

Pursuant to the authorization under the 2021 Repurchase Program, the Company entered into a $1.5 billion fixed dollar ASR with Barclays Bank PLC. Upon payment of the $1.5 billion purchase price on January 4, 2022, the Company received a number of shares of CVS Health Corporation’s common stock equal to 80% of the $1.5 billion notional amount of the ASR or approximately 11.6 million shares at a price of $103.34 per share, which were placed into treasury stock in January 2022. The ASR was accounted for as an initial treasury stock transaction for $1.2 billion and a forward contract for $0.3 billion. The forward contract was classified as an equity instrument and was recorded within capital surplus. In February 2022, the Company received approximately 2.7 million shares of CVS Health Corporation’s common stock, representing the remaining 20% of the $1.5 billion notional amount of the ASR, thereby concluding the ASR. These shares were placed into treasury stock and the forward contract was reclassified from capital surplus to treasury stock in February 2022.

At the time they were received, the initial and final receipt of shares resulted in an immediate reduction of the outstanding shares used to calculate the weighted average common shares outstanding for basic and diluted earnings per share.

See Note 14 ‘‘Shareholders’ Equity’’ included in Item 8 of this 10-K for additional information regarding the Company’s share repurchases.

Stock Performance Graph

The following graph compares the cumulative total shareholder return on CVS Health Corporation’s common stock (assuming reinvestment of dividends) with the cumulative total return on the S&P 500 Index, the S&P 500 Food and Staples Retailing Industry Group Index and the S&P 500 Healthcare Sector Group Index from December 31, 2018 through December 31, 2023. The graph assumes a $100 investment in shares of CVS Health Corporation’s common stock on December 31, 2018.

(1)Includes CVS Health Corporation.

(2)Includes eight companies (COST, DG, DLTR, KR, SYY, TGT, WBA, WMT).

(3)Includes 64 companies.

The year-ended values of each investment shown in the preceding graph are based on share price appreciation plus dividends, with the dividends reinvested as of the last business day of the month during which such dividends were ex-dividend. The calculations exclude trading commissions and taxes. Total shareholder returns from each investment can be calculated from the year-end investment values shown beneath the graph.

Not applicable.

The following discussion and analysis should be read in conjunction with the audited consolidated financial statements and related notes included in Item 8 of this Annual Report on Form 10-K (this “10-K”), “Risk Factors” included in Item 1A of this 10-K and the “Cautionary Statement Concerning Forward-Looking Statements” in this 10-K.

Overview of Business

CVS Health Corporation, together with its subsidiaries (collectively, “CVS Health,” the “Company,” “we,” “our” or “us”), is a leading health solutions company building a world of health around every consumer it serves and connecting care so that it works for people wherever they are. As of December 31, 2023, the Company had more than 9,000 retail locations, more than 1,000 walk-in medical clinics, 204 primary care medical clinics, a leading pharmacy benefits manager with approximately 108 million plan members and expanding specialty pharmacy solutions, and a dedicated senior pharmacy care business serving more than one million patients per year. The Company also serves an estimated more than 35 million people through traditional, voluntary and consumer-directed health insurance products and related services, including expanding Medicare Advantage offerings and a leading standalone Medicare Part D prescription drug plan (“PDP”). The Company is creating new sources of value through its integrated model allowing it to expand into personalized, technology driven care delivery and health services, increasing access to quality care, delivering better health outcomes and lowering overall health care costs.

During the year ended December 31, 2023, the Company completed the acquisition of two key health care delivery assets to enhance its ability to execute on its care delivery strategy by advancing its primary care, home-based care and provider enablement capabilities. On March 29, 2023, the Company acquired Signify Health, Inc. (“Signify Health”), a leader in health risk assessments, value-based care and provider enablement services. On May 2, 2023, the Company also acquired Oak Street Health, Inc. (“Oak Street Health”), a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. Both Signify Health and Oak Street Health are included within the Health Services segment.

In connection with its new operating model adopted in the first quarter of 2023, the Company realigned the composition of its segments to reflect how its Chief Operating Decision Maker (the “CODM”) reviews information and manages the business. The Company’s CODM is the Chief Executive Officer. As a result of this realignment, the Company formed a new Health Services segment, which in addition to providing a full range of pharmacy benefit management (“PBM”) solutions, also delivers health care services in the Company’s medical clinics, virtually, and in the home, as well as provider enablement solutions. In addition, the Company created a new Pharmacy & Consumer Wellness segment, which includes its retail and long-term care pharmacy operations and related pharmacy services, as well as its retail front store operations. This segment will also provide pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. Prior period segment financial information has been recast to conform with the current period presentation. See Note 19 ‘‘Segment Reporting’’ included in Item 8 of this 10-K for segment financial information.

The Company has four reportable segments: Health Care Benefits, Health Services, Pharmacy & Consumer Wellness and Corporate/Other, which are described below.

Overview of the Health Care Benefits Segment

The Health Care Benefits segment operates as one of the nation’s leading diversified health care benefits providers. The Health Care Benefits segment has the information and resources to help members, in consultation with their health care professionals, make more informed decisions about their health care. The Health Care Benefits segment offers a broad range of traditional, voluntary and consumer-directed health insurance products and related services, including medical, pharmacy, dental and behavioral health plans, medical management capabilities, Medicare Advantage and Medicare Supplement plans, PDPs and Medicaid health care management services. The Health Care Benefits segment’s customers include employer groups, individuals, college students, part-time and hourly workers, health plans, health care providers (“providers”), governmental units, government-sponsored plans, labor groups and expatriates. The Company refers to insurance products (where it assumes all or a majority of the risk for medical and dental care costs) as “Insured” and administrative services contract products (where the plan sponsor assumes all or a majority of the risk for medical and dental care costs) as “ASC.” The Company sold Insured plans directly to individual consumers through the individual public health insurance exchanges (“Public Exchanges”) in 12 states as of December 31, 2023. The Company entered Public Exchanges in five additional states effective January 2024.

Overview of the Health Services Segment

The Health Services segment provides a full range of PBM solutions, delivers health care services in its medical clinics, virtually, and in the home, and offers provider enablement solutions. PBM solutions include plan design offerings and administration, formulary management, retail pharmacy network management services, and specialty and mail order pharmacy services. In addition, the Company provides clinical services, disease management services, medical spend management and pharmacy and/or other administrative services for providers and federal 340B drug pricing program covered entities (“Covered Entities”). The Company operates a group purchasing organization that negotiates pricing for the purchase of pharmaceuticals and rebates with pharmaceutical manufacturers on behalf of its participants and provides various administrative, management and reporting services to pharmaceutical manufacturers. During 2023, the Company completed the acquisition of two key health care delivery assets – Signify Health, a leader in health risk assessments, value-based care and provider enablement services, and Oak Street Health, a leading multi-payor operator of value-based primary care centers serving Medicare eligible patients. The Company also announced the launch of CordavisTM, a wholly owned subsidiary that will work directly with pharmaceutical manufacturers to commercialize and/or co-produce high quality biosimilar products. The Health Services segment’s clients and customers are primarily employers, insurance companies, unions, government employee groups, health plans, PDPs, Medicaid managed care plans, CMS, plans offered on Insurance Exchanges and other sponsors of health benefit plans throughout the U.S., patients who receive care in the Health Services segment’s medical clinics, virtually or in the home, as well as Covered Entities.

Overview of the Pharmacy & Consumer Wellness Segment

The Pharmacy & Consumer Wellness segment dispenses prescriptions in its retail pharmacies and through its infusion operations, provides ancillary pharmacy services including pharmacy patient care programs, diagnostic testing and vaccination administration, and sells a wide assortment of health and wellness products and general merchandise. The segment also conducts long-term care pharmacy (“LTC”) operations, which distribute prescription drugs and provide related pharmacy consulting and ancillary services to long-term care facilities and other care settings, and provides pharmacy fulfillment services to support the Health Services segment’s specialty and mail order pharmacy offerings. As of December 31, 2023, the Pharmacy & Consumer Wellness segment operated more than 9,000 retail locations, as well as online retail pharmacy websites, LTC pharmac

Showing the first 8K of 146K characters. Open the full section

The Company’s earnings and financial condition are exposed to interest rate risk, credit quality risk, market valuation risk, foreign currency risk, commodity risk and operational risk.

Evaluation of Interest Rate and Credit Quality Risk

The Company manages interest rate risk by seeking to maintain a tight match between the durations of assets and liabilities when appropriate. The Company manages credit quality risk by seeking to maintain high average credit quality ratings and diversified sector exposure within its debt securities portfolio. In connection with its investment and risk management objectives, the Company also uses derivative financial instruments whose market value is at least partially determined by, among other things, levels of or changes in interest rates (short-term or long-term), duration, prepayment rates, equity markets or credit ratings/spreads. The Company’s use of these derivatives is generally limited to hedging risk and has principally consisted of using interest rate swaps, treasury rate locks, forward contracts, futures contracts, warrants, put options and credit default swaps. These instruments, viewed separately, subject the Company to varying degrees of interest rate, equity price and credit risk. However, when used for hedging, the Company expects these instruments to reduce overall risk.

Investments

The Company’s investment portfolio supported the following products at December 31, 2023 and 2022:

(1)Includes long-term investments of $17 million which were accounted for as assets held for sale and were included in assets held for sale on the consolidated balance sheet at December 31, 2022. See Note 2 ‘‘Acquisitions, Divestitures and Asset Sales’’ included in Item 8 of this 10-K for additional information.

Investment risks associated with experience-rated products generally do not impact the Company’s operating results. The risks associated with investments supporting experience-rated pension and annuity products in the large case pensions business in the Company’s Corporate/Other segment are assumed by the contract holders and not by the Company (subject to, among other things, certain minimum guarantees). Assets supporting experience-rated products may be subject to contract holder or participant withdrawals.

The debt securities in the Company’s investment portfolio had an average credit quality rating of A at both December 31, 2023 and 2022, with a fair value of approximately $4.6 billion and $6.0 billion rated AAA at December 31, 2023 and 2022, respectively. The fair value of debt securities that were rated below investment grade (that is, having a credit quality rating below BBB-/Baa3) was $2.1 billion and $1.9 billion at December 31, 2023 and 2022, respectively (of which 1.5% and 1.6% at December 31, 2023 and 2022, respectively, supported experience-rated products).

At December 31, 2023 and 2022, the Company held $218 million and $202 million, respectively, of municipal debt securities that were guaranteed by third parties, representing 1% of total investments at both December 31, 2023 and 2022. These securities had an average credit quality rating of AA+ at both December 31, 2023 and 2022, with the guarantee. These securities had an average credit quality rating of AA- and A at December 31, 2023 and 2022, respectively, without the guarantee. The Company does not have any significant concentration of investments with third party guarantors (either direct or indirect).

The Company generally classifies debt securities as available for sale, and carries them at fair value on the consolidated balance sheets. At both December 31, 2023 and 2022, less than 1% of debt securities were valued using inputs that reflect the Company’s assumptions (categorized as Level 3 inputs in accordance with GAAP). See Note 5 ‘‘Fair Value’’ included in Item 8 of this 10-K for additional information on the methodologies and key assumptions used to determine the fair value of investments. For additional information related to investments, see Note 4 ‘‘Investments’’ included in Item 8 of this 10-K.

The Company regularly reviews debt securities in its portfolio to determine whether a decline in fair value below the cost basis or carrying value has occurred. If a debt security is in an unrealized loss position and the Company has the intent to sell the security, or it is more likely than not that the Company will have to sell the security before recovery of its amortized cost basis, the amortized cost basis of the security is written down to its fair value and the difference is recognized in net income. If a debt

security is in an unrealized loss position and the Company does not have the intent to sell and it is more likely than not that the Company will not have to sell such security before recovery of its amortized cost basis, the Company bifurcates the impairment into credit-related and non-credit related components. The amount of the credit-related component is recorded as an allowance for credit losses and recognized in net income, and the amount of the non-credit related component is included in other comprehensive income (loss). The impairment of debt securities is considered a critical accounting policy. See ‘‘Critical Accounting Policies - Impairments of Debt Securities” in the MD&A included in Item 7 of this 10-K for additional information.

Evaluation of Market Valuation Risks

The Company regularly evaluates its risk from market-sensitive instruments by examining, among other things, levels of or changes in interest rates (short-term or long-term), duration, prepayment rates, equity markets and/or credit ratings/spreads. The Company also regularly evaluates the appropriateness of investments relative to management-approved investment guidelines (and operates within those guidelines) and the business objectives of its portfolios.

On a quarterly basis, the Company reviews the impact of hypothetical net losses in its investment portfolio on the Company’s consolidated near-term financial condition, operating results and cash flows assuming the occurrence of certain reasonably possible changes in near-term market rates and prices. Interest rate changes (whether resulting from changes in treasury yields or credit spreads or other factors) represent the most material risk exposure category for the Company. The Company has estimated the impact on the fair value of market sensitive instruments based on the net present value of cash flows using a representative set of likely future interest rate scenarios. The assumptions used were as follows: an immediate increase of 100 basis points in interest rates (which the Company believes represents a moderately adverse scenario) for long-term debt issued by the Company, as well as its interest rate sensitive investments and an immediate decrease of 15% in prices for publicly traded domestic equity securities in the Company’s investment portfolio.

Assuming an immediate increase of 100 basis points in interest rates, the theoretical decline in the fair values of market sensitive instruments at December 31, 2023 is as follows:

• The fair value of long-term debt issued by the Company would decline by approximately $3.5 billion ($4.4 billion pretax). Changes in the fair value of long-term debt do not impact the Company’s operating results or financial condition.

• The theoretical reduction in the fair value of interest rate sensitive investments partially offset by the theoretical reduction in the fair value of interest rate sensitive liabilities would result in a net decline in fair value of approximately $570 million ($720 million pretax) related to continuing non-experience-rated products. Net reductions in fair value would be reflected as an unrealized loss in equity, as the Company classifies these debt securities as available for sale and the effect of the interest rate on interest rate sensitive liabilities is recorded in other comprehensive income (loss).

If the value of the Company’s publicly traded domestic equity securities held within its investment portfolio were to decline by 15%, this would result in a net decline in fair value of $32 million ($41 million pretax).

Based on overall exposure to interest rate risk and equity price risk, the Company believes that these changes in market rates and prices would not materially affect consolidated near-term financial condition, operating results or cash flows as of December 31, 2023.

Evaluation of Foreign Currency and Commodity Risk

At December 31, 2023 and 2022, the Company did not have any material foreign currency exchange rate or commodity derivative instruments in place and believes its exposure to foreign currency exchange rate risk is not material.

Evaluation of Operational Risks

The Company also faces certain operational risks. Those risks include risks related to information security, including cybersecurity.

The Company and its vendors have experienced diverse cyber attacks and expect to continue to experience cyber attacks going forward. As examples, the Company and its vendors have experienced attempts to gain access to systems, denial of service attacks, attempted malware infections, account takeovers, scanning activity and phishing emails. Attacks can originate from external criminals, terrorists, nation states or internal actors. The Company is dedicating and will continue to dedicate significant resources and incur significant expenses to maintain and update on an ongoing basis the systems and processes that are designed to mitigate the information security risks it faces and protect the security of its computer systems, software,

networks and other technology assets against attempts by unauthorized parties to obtain access to confidential information, disrupt or degrade service or cause other damage. The impact of cyber attacks has not been material to the Company’s operations or operating results through December 31, 2023. The Board and its Audit Committee and Nominating and Corporate Governance Committee are regularly informed regarding the Company’s information security policies, practices and status. Please see “Cybersecurity” included in Item 1C of this 10-K for further information.

Index to Consolidated Financial Statements

Index to Consolidated Financial Statements

Consolidated Statements of Operations

See accompanying notes to consolidated financial statements.

Index to Consolidated Financial Statements

Consolidated Statements of Comprehensive Income

Showing the first 8K of 413K characters. Open the full section

None.

Evaluation of disclosure controls and procedures

The Company’s Chief Executive Officer and Chief Financial Officer, after evaluating the effectiveness of the design and operation of the Company’s disclosure controls and procedures (as defined in Rules 13a-15 (f) and 15d-15(f) under the Securities Exchange Act of 1934) as of December 31, 2023, have concluded that as of such date the Company’s disclosure controls and procedures were adequate and effective at a reasonable assurance level and designed to ensure that material information relating to the Company and its consolidated subsidiaries would be made known to such officers on a timely basis.

Management’s report on internal control over financial reporting

Management is responsible for establishing and maintaining adequate internal control over financial reporting. The Company’s internal control over financial reporting includes those policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the Company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of the Company’s consolidated financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the Company are being made only in accordance with authorizations of management and directors of the Company; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the Company’s assets that could have a material effect on the Company’s consolidated financial statements. In order to ensure the Company’s internal control over financial reporting is effective, management regularly assesses such control and did so most recently for its financial reporting as of December 31, 2023.

Management conducted an assessment of the effectiveness of the Company’s internal control over financial reporting based on the criteria established in Internal Control-Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 Framework). This evaluation included review of the documentation, evaluation of the design effectiveness and testing of the operating effectiveness of controls. The Company’s system of internal control over financial reporting is enhanced by periodic reviews by the Company’s internal auditors, written policies and procedures and a written Code of Conduct adopted by CVS Health Corporation’s Board of Directors, applicable to all employees of the Company. In addition, the Company has an internal Disclosure Committee, comprised of management from each functional area within the Company, which performs a separate review of disclosure controls and procedures. There are inherent limitations in the effectiveness of any system of internal control over financial reporting.

Based on management’s assessment, management concluded that the Company’s internal control over financial reporting is effective and provides reasonable assurance that assets are safeguarded and that the financial records are reliable for preparing financial statements as of December 31, 2023.

Ernst & Young LLP, the Company’s independent registered public accounting firm, is appointed by CVS Health Corporation’s Board of Directors and ratified by CVS Health Corporation’s stockholders. They were engaged to render an opinion regarding the fair presentation of the Company’s consolidated financial statements as well as conducting an audit of internal control over financial reporting. Their reports included in Item 8 of this Form 10-K are based upon audits conducted in accordance with the standards of the Public Company Accounting Oversight Board (United States).

Changes in internal control over financial reporting

There has been no change in the Company’s internal control over financial reporting identified in connection with the evaluation required by paragraph (d) of Rule 13a-15 or Rule 15d-15 that occurred during the fourth quarter ended December 31, 2023 that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.

No events have occurred during the fourth quarter ended December 31, 2023 that would require disclosure under this item.

Securities Trading Plans of Directors and Executive Officers

During the year ended December 31, 2023, none of our directors or executive officers adopted or terminated any contract, instruction or written plan for the purchase or sale of CVS Health Corporation securities that was intended to satisfy the affirmative defense conditions of Rule 10b5-1(c) or any “non-Rule 10b5-1 trading arrangement.”

None.

PART III

Information concerning the Executive Officers of CVS Health Corporation is included in Part I of this 10-K pursuant to General Instruction G to Form 10-K.

The sections of the Proxy Statement under the captions “Committees of the Board as of the Annual Meeting,” “Code of Conduct,” “Audit Committee Report,” and “Biographies of our Incumbent Board Nominees” are incorporated herein by reference.

The sections of the Proxy Statement under the captions “Non-Employee Director Compensation” and “Executive Compensation and Related Matters,” including “Letter from the Management Planning and Development Committee,” “Compensation Committee Report,” “Compensation Discussion and Analysis” and “Compensation of Named Executive Officers” are incorporated herein by reference.

The sections of the Proxy Statement under the captions “Share Ownership of Directors and Certain Executive Officers” and “Share Ownership of Principal Stockholders” are incorporated herein by reference. Those sections contain information concerning security ownership of certain beneficial owners and management and related stockholder matters.

The following table summarizes information about the registrant’s common stock that may be issued upon the exercise of options, warrants and rights under all of the Company’s equity compensation plans as of December 31, 2023:

(1)Consists of: (i) 14,131 thousand shares of common stock underlying outstanding options, (ii) 440 thousand shares of common stock issuable upon the exercise of outstanding stock appreciation rights (“SARs”) and (iii) 17,521 thousand shares of common stock issuable on the vesting of outstanding restricted stock units, deferred stock units and performance stock units, assuming target level performance in the case of performance stock units. The number of shares included with respect to outstanding SARs is the number of shares of CVS Health Corporation common stock that would have been issued had the SARs been exercised based on the closing price per share of CVS Health Corporation common stock on December 31, 2023, as reported on the NYSE, which was $78.96.

(2)Consists of the CVS Health 2017 Incentive Compensation Plan.

(3)Consists of: (i) 2,618 thousand shares of common stock underlying outstanding equity awards pursuant to the Amended Aetna Inc. 2010 Stock Incentive Plan (the “Aetna Plan”); (ii) 1,190 thousand shares of common stock underlying outstanding equity awards pursuant to the Oak Street Health, Inc. Omnibus Incentive Plan (the “Oak Street Health Plan”), (iii) 65 thousand shares of common stock underlying outstanding equity awards pursuant to the Oak Street Health, Inc. Omnibus Incentive Plan, as amended (the “Amended Oak Street Health Plan”), (iv) 2,149 thousand shares of common stock underlying outstanding equity awards pursuant to the Signify Health, Inc. 2021 Long-Term Incentive Plan (the “Signify Plan”), and (v) 49 thousand shares of common

stock underlying outstanding equity awards pursuant to the Signify Health, Inc. 2021 Long-Term Incentive Plan, as amended (the “Amended Signify Plan”).

(4)Consists of (i) 7,306 thousand shares of authorized and unissued common stock available for issuance under the Amended Oak Street Health Plan and (ii) 9,424 thousand shares of authorized and unissued common stock available for issuance under the Amended Signify Plan. There are no securities available for future grants under the Aetna Plan.

The Company elected to continue to grant awards under the Aetna Plan to employees of Aetna and its subsidiaries following the completion of the Company’s acquisition of Aetna. The Aetna Plan was designed to promote Aetna’s interests and those of its stockholders and to further align the interests of stockholders and employees by tying awards to total return to stockholders, enabling plan participants to acquire additional equity interests and providing compensation opportunities dependent upon the Company’s performance. The Aetna Plan was not submitted to the Company’s stockholders and expired on May 21, 2020. Under the Aetna Plan, eligible participants could be granted stock options to purchase shares of CVS Health Corporation common stock, SARs, time-vesting and/or performance-vesting incentive stock or incentive units and other stock-based awards.

The Oak Street Plan and the Signify Plan were each approved by their respective company stockholders prior to their acquisition by CVS Health and have not been approved by the Company’s stockholders. The purpose of the Oak Street Plan was to enhance the profitability and value of Oak Street Health for the benefit of its stockholders by enabling it to offer eligible individuals stock- and cash-based incentives in order to attract, retain, and reward such individuals and strengthen the mutuality of interests between such individuals and stockholders. Under the Oak Street Plan, eligible participants could be granted time-based restricted stock units and awards. The purpose of the Signify Plan was to motivate and reward employees and other individuals to perform at the highest level and contribute significantly to the success of Signify Health, thereby furthering the best interests of its stockholders. Under the Signify Plan, eligible participants could be granted stock options to purchase shares of CVS Health Corporation common stock and time-based restricted stock units.

The Company elected to continue to grant awards under the Oak Street Plan and the Signify Plan until July 28, 2023, when the Amended Oak Street Plan and the Amended Signify Plan became effective. The Amended Oak Street Plan and the Amended Signify Plan, while not approved by the Company’s stockholders, have terms consistent with those of the CVS Health 2017 Incentive Compensation Plan.

The sections of the Proxy Statement under the captions “Independence Determinations for Directors” and “Related Person Transaction Policy” are incorporated herein by reference.

The section of the Proxy Statement under the caption “Item 2: Ratification of Appointment of Independent Registered Public Accounting Firm for 2024” is incorporated herein by reference.

PART IV

The following documents are filed as part of this 10-K:

1.Financial Statements. See “Index to Consolidated Financial Statements” in Item 8 of this 10-K.

2.Financial Statement Schedules. All financial statement schedules are omitted because they are not applicable, not required under the instructions, or the information is included in the consolidated financial statements or related notes.

3.Exhibits. The exhibits listed in the “Index to Exhibits” in this Item 15 are filed or incorporated by reference as part of this 10-K. Exhibits marked with an asterisk (*) are management contracts or compensatory plans or arrangements. Exhibits other than those listed are omitted because they are not required to be listed or are not applicable. Pursuant to Item 601(b)(4)(iii) of Regulation S-K, the Registrant hereby agrees to furnish to the Securities and Exchange Commission a copy of any omitted instrument that is not required to be listed.

INDEX TO EXHIBITS

† Certain of the exhibits and schedules to this exhibit, as well as certain information marked by [***], have been omitted in accordance with Regulation S-K Item 601(b)(2). The Registrant agrees to furnish supplementally a copy of all omitted exhibits and schedules to the Securities and Exchange Commission upon its request.

None.

SIGNATURES

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant and in the capacities and on the dates indicated.