C2.2a
(C2.2a) Which risk types are considered in your organization's climate-related risk assessments?
Relevance
&
inclusion
Please explain
Current
regulation
Relevant,
always
included
Renewable energy regulation and carbon pricing in the U.S. and globally is relevant to PayPal due to our commitment to achieve 100% renewable energy in our data centers by 2023 and
our Science-Based Target for operational emissions to reduce Scope 1 & Scope 2 emissions by 25% below our 2019 baseline by 2025. We prioritized reductions to our data center
emissions footprint since over 75% of our annual energy use is from these sources (77% as of 2022) and we achieved 100% renewable energy in our data centers in 2021, two years
ahead of our goal. In 2022, we maintained 100% renewable energy sourcing for our data centers and reached 90% total renewable energy use (up from 88% in 2021 and 76% in 2020).
PayPal’s Environmental Working Group monitors the state of renewable energy regulation in the U.S. as part of our renewable energy procurement strategy for our data centers.
Our membership in the Clean Energy Buyers Association helps enable us to understand renewable energy and carbon pricing regulation and regulatory risks in the U.S., where the
majority of our managed data center presence is located. The Environmental Working Group also assesses national, state, and local energy and water management and disclosure
regulations, such as the San Jose Energy and Water Benchmarking Ordinance for our corporate headquarters and the E.U. Energy Efficiency Directive for several of our European office
locations. The Environmental Working Group has implemented a process for monitoring and ensuring compliance with current regulations.
Emerging
regulation
Relevant,
always
included
In addition to leveraging the same measures described above for our climate-related risk assessment for current regulation, members of the Environmental Working Group, including
representatives from Public Affairs and Government Relations, collaborate with functions across PayPal to consider how current and emerging regulations may impact climate-related risks
and opportunities at PayPal. For example, in 2022, PayPal completed an initial climate risk assessment in Europe in accordance with new guidance on the management of climate-related
and environmental risks published by the Commission de Surveillance du Secteur Financier (Circular CSSF 21/773) to identify potential areas of risk exposure. We are working to
implement an action plan designed to enhance our governance processes and risk management procedures to address the identified risks. This work is instrumental in meeting current and
emerging regulatory obligations in Europe and will help inform climate risk assessments in other regions.
We are aware of and closely monitor the emergence of mandatory climate-related disclosure rulemaking processes, particularly in the U.S. We are broadly supportive of climate change
disclosures that provide stakeholders with consistent, comparable, and reliable information based on existing voluntary ESG and climate disclosure and accounting standards.
Technology Not
relevant,
included
We do not consider risks from technological improvements or innovations that support the transition to a lower carbon, energy-efficient economy to be relevant. As a company that
provides digital payment solutions, our business is not dependent on unproven or as-yet-undeveloped technologies to facilitate climate-related infrastructure upgrades or equipment
replacement. While businesses that focus on energy, resource extraction, transportation, or manufacturing may depend on such technologies to ensure viability and competitiveness, we
see low-carbon and climate-neutral technology as a meaningful opportunity for our business.
Legal Not
relevant,
included
We do not consider risks from climate-related litigation claims to be relevant at the current time. As a company that provides digital payment solutions, our business has a relatively small
climate impact. Our products and services do not directly contribute to climate change in a significant way, compared to companies in other sectors, such as energy, resource extraction,
transportation, or manufacturing. We are monitoring the potential for future climate-related litigation risks as our business grows and evolves.
Market Relevant,
always
included
Preliminary findings from the enterprise climate risk assessment and scenario analysis that we began in 2022 identified market risk exposures that could impact PayPal's operations. The
findings from this assessment will also be considered as we refine our risk management practices.
Reputation Relevant,
sometimes
included
Reputational risk is relevant in the short-term as we observe increased stakeholder interest, including from current and potential investors, customers, employees, and partners, in our
climate commitments and performance, as well as adherence to climate regulations. We manage the climate impacts of our business and seek to mitigate potential reputational issues. Our
Environmental Working Group coordinates closely with the Reputation Risk Management team to identify potential climate-related matters and exposures to our business. We regularly
engage stakeholders to understand and anticipate their climate-related expectations of PayPal. For example, we conduct benchmarking research, including monitoring media and social
media coverage of other companies facing climate-related reputational issues, to help stay ahead of trends and identify key learnings that may be applicable to PayPal’s climate-related
strategy.
Acute
physical
Relevant,
always
included
Physical risks may be acute, resulting from increased frequency and severity of extreme weather events, and also chronic, resulting from increases in global temperature and changes in
precipitation and weather patterns. In the medium and long term, PayPal considers acute disruptive events, such as severe weather, wildfires, and other climate-related risks, which could
impact operations at our physical locations including offices and data centers. These extreme weather conditions may cause impacts to our business, such as safety disruptions and supply
chain delays. The impacts may adversely affect worker productivity, cause us to incur additional costs to maintain, resume or rebuild operations, and lead to higher attrition.
Our Resiliency program and Safety and Security teams prepare incident response procedures for our physical locations to help inform emergency response plans in the event of potential
disasters or other crises. PayPal has implemented disaster recovery plans in the event of damage and/or business interruption, inclusive of impacts from climate-influenced disasters.
The enterprise climate risk assessment and scenario analysis that we began in 2022 will help us further understand and identify the potential impacts of acute physical climate risks on
PayPal’s business, strategy, and financial planning. The findings from this assessment will also be considered as we refine our risk management practices.
Chronic
physical
Relevant,
always
included
This risk type is relevant for PayPal given that we maintain a global presence with sites across the Americas, APAC, and EMEA regions which are vulnerable to chronic physical climate
changes. Our Environmental Working Group, in partnership with our Global Safety and Security team, is monitoring the impact of long-run climatic shifts, including the potential impacts of
water stress to our direct operations. We are exploring opportunities to further quantify risks and refine our understanding of chronic physical climate and extreme-weather related risks to
our locations. The enterprise climate risk assessment and scenario analysis that we began in 2022 will help us further understand and identify the potential impacts of chronic physical
climate risks on PayPal’s business, strategy, and financial planning. The findings from this assessment will also be considered as we refine our risk management practices.
C2.3
(C2.3) Have you identified any inherent climate-related risks with the potential to have a substantive financial or strategic impact on your business?
Yes
C2.3a
(C2.3a) Provide details of risks identified with the potential to have a substantive financial or strategic impact on your business.
Identifier
Risk 1
Where in the value chain does the risk driver occur?
Direct operations
Risk type & Primary climate-related risk driver
Emerging regulation Carbon pricing mechanisms
Primary potential financial impact
Increased indirect (operating) costs