ALLSTATE CORP

Allstate is subject to extensive regulation, primarily at the U.S. state level. The method, extent and substance of such regulation vary by state but generally have their source in statutes that establish standards and requirements for conducting the business of insurance and that also delegate regulatory authority to a state agency. These rules have a substantial effect on our business and relate to a wide variety of matters, including insurer solvency and statutory surplus sufficiency, reserve adequacy, insurance company licensing and examination, agent and adjuster licensing, agent and broker compensation, policy forms, rate setting, the nature and amount of investments, claims practices, participation in shared markets and guaranty funds, transactions with affiliates, the payment of dividends, underwriting standards, statutory accounting methods, trade practices, privacy regulation and data security, corporate governance and risk management. In addition, state legislators and insurance regulators continue to examine the appropriate nature and scope of state insurance regulation.

For a discussion of regulatory contingencies, see Note 14 of the consolidated financial statements. Note 14 and Note 16 are incorporated in this Part I, Item 1 by reference. For a discussion of statutory financial information, see Note 16 of the consolidated financial statements. Allstate is also subject to regulation at the U.S. Federal level and by governments, regulators, and agencies in jurisdictions outside of the U.S. in which we conduct business.

The Dodd-Frank Wall Street Reform and Consumer Protection Act created the Federal Insurance Office (“FIO”) within the U.S. Department of the Treasury (“U.S. Treasury”). The FIO monitors the insurance industry, provides advice to the Financial Stability Oversight Council (“FSOC”), represents the U.S. on international insurance matters, and studies the current regulatory system.

Additional regulations or new requirements may emerge from the activities of various regulatory entities, including the Federal Reserve Board, FIO, FSOC, the National Association of Insurance Commissioners (“NAIC”), and the International Association of Insurance Supervisors, that are evaluating solvency and capital standards for insurance company groups. Most states have adopted substantially similar versions of the NAIC Insurance Holding Company System Model Act and the Insurance Holding Company System Model Regulation. Other states, including New York and Massachusetts, have adopted modified versions of the model act, although the supporting regulation is substantially similar to the model regulation.

We cannot predict whether any specific state or federal measures will be adopted to change the nature or scope of the regulation of insurance or what effect any such measures would have on Allstate. We are working for changes in the regulatory environment to make insurance more available and affordable for

customers, encourage market innovation, improve driving safety, strengthen cybersecurity and promote better catastrophe preparedness and loss mitigation.

Limitations on dividends by insurance subsidiaries As a holding company with most business operations conducted by subsidiaries, The Allstate Corporation relies on dividends from Allstate Insurance Company as one of the principal sources of cash to pay dividends and to meet its obligations, including the payment of principal and interest on debt or to fund non-insurance-related businesses. Allstate Insurance Company is regulated as an insurance company in Illinois, and its ability to pay dividends is restricted by Illinois law. The laws of the other jurisdictions that generally govern our other insurance subsidiaries contain similar limitations on the payment of dividends. However, such laws in some jurisdictions may be more restrictive.

For additional information regarding limitations, see Part II, Item 7 - Management’s Discussion and Analysis of Financial Condition and Results of Operations, Capital Resources and Liquidity of this report.

In addition, the NAIC adopted a group capital calculation covering all entities of the insurance company group for use in solvency monitoring activities by regulators. Any increase in the amount of capital or reserves our insurance subsidiaries are required to hold could reduce the amount of future dividends such subsidiaries are able to distribute to the holding company. Any reduction in the risk-based capital ratios of our insurance subsidiaries could also adversely affect their financial strength ratings as determined by statistical rating agencies. We have not experienced, and we do not expect to experience, any impact from the group capital calculation on our current dividend plans.

Insurance holding company regulation – change of control The Allstate Corporation is a holding company and its insurance subsidiaries are subject to regulation in the jurisdictions in which they write business. In the U.S., these subsidiaries are organized under the insurance codes of Alabama, California, Florida, Illinois, Massachusetts, Mississippi, New Jersey, New York, North Carolina and Texas. Additionally, some of these subsidiaries are considered commercially domiciled in California, Florida, and Texas.

Generally, the insurance codes in these states provide that the acquisition or change of “control” of a domestic or commercially domiciled insurer or of any person that controls such an insurer cannot be consummated without the prior approval of the relevant insurance regulator. In general, a presumption of “control” arises from the ownership, control, possession with the power to vote, or possession of proxies with respect to ten percent or more of the voting securities of an insurer or of a person who controls an insurer. In addition, certain state insurance laws require pre-acquisition notification to state agencies of a change in control with respect to a non-

The Allstate Corporation 13 domestic insurance company licensed to do business in that state. While such pre-acquisition notification statutes do not authorize the state agency to disapprove the change of control, such statutes do authorize certain remedies, including the issuance of a cease-and-desist order with respect to the non-domestic insurer if certain conditions exist, such as undue market concentration.

Thus, any transaction involving the acquisition of ten percent or more of The Allstate Corporation’s common stock would generally require prior approval by the state insurance departments in Alabama (where the threshold is five percent or more of The Allstate Corporation’s common stock), California, Florida, Illinois, Massachusetts, Mississippi, New Jersey, New York, North Carolina and Texas. Moreover, notification would be required in those other states that have adopted pre-acquisition notification provisions and where the insurance subsidiaries are admitted to transact business. Such approval requirements may deter, delay or prevent certain transactions affecting the ownership of The Allstate Corporation’s common stock.

Rate regulation Nearly all states and D.C (collectively, “locations”) have insurance laws requiring personal property and casualty insurers to file rating plans, policy or coverage forms, and other information with the location’s regulatory authority. In many cases, such rating plans, policy forms, or both must be approved prior to use.

The speed with which an insurer can change rates in response to competition or increasing costs depends on the location’s rating laws, which include the following categories:

•Prior approval — Regulators must approve a rate before the insurer may use it (21 locations for auto and 20 locations for home). Some of these permit insurers to make rate changes without prior approval within a limited range

•File-and-use — Insurers do not have to wait for the regulator’s approval to use a rate, but the rate must be filed with the regulatory authority prior to being used (20 locations for auto and 21 locations for home)

•Use-and-file — Requires an insurer to file rates within a certain period of time after the insurer begins using them (9 locations for auto and home)

•No filing or approval — One location for auto and home, with an immaterial amount of written premiums, does not require a filing to be submitted

Under these rating laws, the regulator has the authority to disapprove a rate filing.

An insurer’s ability to adjust its rates in response to competition or to changing costs is dependent on an insurer’s ability to demonstrate to the regulator that its rates or proposed rating plan meets the requirements of the rating laws. In those locations that significantly restrict an insurer’s discretion in selecting the business that it wants to underwrite, an insurer can manage its risk of loss by charging a rate that reflects the cost and expense of providing the insurance. In those locations that significantly restrict an insurer’s ability to charge a rate that reflects the cost and expense of providing the insurance, the insurer may be able to manage its risk of loss by being more selective in the type of business it underwrites. When a location significantly restricts both underwriting and pricing, it becomes more difficult for an insurer to maintain its targeted level of profitability.

From time to time, the personal lines insurance industry comes under pressure from state regulators, legislators, and special-interest groups to reduce, freeze, or set rates at levels that do not correspond with underlying costs, catastrophe loss exposure, and expenses. We expect this kind of pressure to persist. Allstate and other insurers are using increasingly sophisticated pricing models and rating plans that are reviewed by regulators and special-interest groups. Regulators may limit the ability of insurers to include variables in their rating plans even though they are indicative of risk. Regulators may interpret existing law or rely on future legislation or regulations to impose new restrictions that adversely affect profitability or growth. We cannot predict the impact on our business of possible future legislative and regulatory measures regarding insurance rates.

We are also subject to limitations for cancellations and non-renewals for certain periods of time due to catastrophe events. In January 2025, the California Insurance Commissioner issued a mandatory one-year moratorium on non-renewing or canceling residential insurance coverage in specific zip codes affected by the wildfires.

Involuntary markets As a condition of maintaining our licenses to write personal property and casualty insurance in various states, we are required to participate in assigned risk plans, reinsurance facilities, and joint underwriting associations that provide various types of insurance coverage to individuals or entities that otherwise are unable to purchase such coverage from private insurers, including the California FAIR Plan Association.

14 www.allstate.com

For a discussion of these items see Note 14 of the consolidated financial statements. Note 14 is incorporated in this Part I, Item 1 by reference.

Indemnification programs We are a participant in state-based industry pools, facilities or associations, mandating participation by insurers offering certain coverage in their state, including the Michigan Catastrophic Claims Association (“MCCA”), the New Jersey Property-Liability Insurance Guaranty Association, the North Carolina Reinsurance Facility and the Florida Hurricane Catastrophe Fund. We also sell and service Federal Government National Flood Insurance Program (“NFIP”) flood policies as an agent of the Federal Emergency Management Agency (“FEMA”).

For a discussion of these items see Note 11 of the consolidated financial statements and Part II, Item 7 - Management’s Discussion and Analysis of Reinsurance and indemnification programs. Note 11 is incorporated in this Part I, Item 1 by reference.

Guaranty funds Under state insurance guaranty fund laws, insurers doing business in a state can be assessed, up to prescribed limits, in order to cover certain obligations of insolvent insurance companies. We do not anticipate any material adverse financial impact on Allstate from these assessments.

For a discussion of these items see Note 14 of the consolidated financial statements. Note 14 is incorporated in this Part I, Item 1 by reference.

Investment regulation Our insurance subsidiaries are subject to state regulation that specifies the types of investments that can be made and concentration limits of invested assets. Failure to comply with these rules leads to the treatment of non-conforming investments as non-admitted assets for purposes of measuring statutory surplus. Further, in some instances, these rules require divestiture of non-conforming investments. The NAIC periodically reviews the statutory accounting and risk-based capital (“RBC”) requirements for investments and makes changes from time to time.

Exiting geographic markets; canceling and non-renewing policies Most states regulate an insurer’s ability to exit a market. For example, states may limit, to varying degrees, an insurer’s ability to cancel and non-renew policies. Some states restrict or prohibit an insurer from withdrawing one or more types of insurance business from the state, except pursuant to a plan that is approved by the state insurance department. Regulations that limit cancellation and non-renewal and that subject withdrawal plans to prior approval requirements may restrict an insurer’s ability to exit unprofitable markets.

Broker-dealer and investment advisers The Allstate entities that operate as a broker-dealer and registered investment advisers are subject to regulation and supervision by the Securities and Exchange Commission (“SEC”), Financial Institution Regulatory Authority and/or, in some cases, state

securities administrators. The SEC has proposed rules and amendments related to cybersecurity risk management and cybersecurity-related disclosure for broker-dealers, registered investment advisers, registered investment companies, and business development companies. The SEC has adopted a comprehensive set of rules and interpretations for broker-dealers and investment advisers, including Regulation Best Interest. In addition, individual states and their securities regulators have and may adopt their own enhanced conduct standards for broker-dealers that could impact products provided by Allstate agents and Allstate’s broker-dealer, their sales processes, sales volume, and producer compensation arrangements.

Climate disclosures In October 2023, California enacted several climate disclosure bills. One of these is the Climate Corporate Data Accountability Act, which requires disclosure and assurance over greenhouse gas emissions using a phased reporting approach. The California Air Resources Board has issued proposed regulations with an initial reporting deadline of August 2026. Allstate has publicly reported its greenhouse gas inventory since 2010 and is well-positioned to comply with the new law, subject to the proposed regulations being finalized. We will continue evaluating the anticipated impacts and scope of the new laws on our reporting and disclosures.

Privacy regulation and data security Federal law and the laws of many states require companies, including financial institutions, to protect the security and confidentiality of consumer information and to notify consumers about their policies and practices relating to collection, use, disclosure, and protection of consumer information. Federal law and the laws of many states also regulate disclosures and disposal of consumer information. Congress, state legislatures, and regulatory authorities continue to consider additional privacy regulation.

In addition to laws and regulations specific to financial institutions, there are comprehensive privacy laws that apply across industries. For example, the California Consumer Privacy Act, as well as similar laws in Virginia, Connecticut, and many other states, impose significant compliance requirements for certain larger businesses in those states. Among other things, these privacy laws provide consumers with privacy rights such as the right to request access to or deletion of their personal information. The California Consumer Privacy Act also established a new privacy regulatory agency. In November 2023, the New York State Department of Financial Services amended its cybersecurity regulation, including both new and heightened requirements. Many states have now adopted some form of the NAIC Insurance Data Security Model Law, establishing standards for data security, including the investigation of and notification to insurance commissioners of cybersecurity events. Additional states are also likely to adopt similarly themed cybersecurity requirements in the future. We cannot predict the impact on our business of possible future legislative or regulatory measures regarding privacy or cybersecurity.

The Allstate Corporation 15

Asbestos, environmental and other run-off lines Congress has repeatedly considered legislation to address asbestos claims and litigation in the past. We cannot predict the impact on our business of possible future legislative measures regarding asbestos.

Environmental pollution and clean-up of polluted waste sites is the subject of federal and state regulation. The Comprehensive Environmental Response Compensation and Liability Act of 1980 and comparable state statutes (collectively, the “Environmental Clean-up Laws” or “ECLs”) govern the clean-up and restoration of waste sites by Potentially Responsible Parties (“PRPs”). The ECLs establish a mechanism to assign liability to PRPs or to fund the clean-up of waste sites if PRPs fail to do so. The extent of liability to be allocated to a PRP depends on a variety of factors. The insurance industry is involved in extensive litigation regarding coverage issues arising out of the clean-up of waste sites by insured PRPs and the insured parties’ alleged liability to third parties responsible for the clean-up.

Allstate’s exposure to liability with regard to its insureds that have been, or may be, named as PRPs is uncertain.

Developments in the insurance and reinsurance industries have fostered a movement to segregate asbestos, environmental and other run-off lines exposures into separate legal entities with dedicated capital. Regulatory bodies in certain cases have supported these actions. We are unable to determine the impact, if any, that these developments will have on the collectability of reinsurance recoverables in the future.

16 www.allstate.com