Universal Registration Document 2024

2 RISK FACTORS AND INTERNAL CONTROL RISK FACTORS

2. A Vigilance Plan set out in the Sustainability Report, including: u risk mapping specific to the duty of vigilance scope, i.e. , risks of harm to the environment (carried out in 2018 and reviewed each year), Human Rights and personal health and safety (carried out in 2023, update planned for 2025) specific to the activity of Groupe ADP, and those of the parent company’s suppliers and subcontractors (carried out in 2018 and reviewed each year), which must be gradually extended to the entire Group value chain; u measures to mitigate the risks identified and prevent serious harm to the environment, Human Rights and the

health and safety of people deployed within Groupe ADP and its suppliers and subcontractors, as well as the continuous progress approach in which the Group is committed to its future actions; u systems for assessing and monitoring these risks. Following an audit conducted at the end of 2023, a roadmap was formalised in 2024 to promote a more uniform roll-out of duty of vigilance and to strengthen the culture of vigilance throughout the Group, in anticipation of the transposition of the CSDDD.

5 – B: RISKS RELATED TO REGULATORY CHANGES Groupe ADP must take into account the changes in the regulatory context applicable to its activities within a limited timeframe Criticality ++ Change in 2024 ì Detailed description of the risk factor

Potential effects for the Group u Financial consequences u Delay or inability to develop the activities u Impairment of intangible assets u Loss of information assets u Image damage Interconnected risks u Risks related to the effects of climate change u Risks of corruption and business integrity u Compliance risks u Risks related to the economic trajectory

In its various activities and geographical areas, Groupe ADP faces the risk of legal or regulatory developments (regulations, specifications, airport-related, economic, social or environmental regulations, tax, etc.), decisions by independent and regulatory authorities or court or arbitration rulings that may affect its business model and its aeronautical or non-aeronautical revenues. New developments in a changing regulatory framework, in particular regarding new non-financial disclosure requirements as a result of the implementation of the CSRD (Corporate Sustainability Reporting Directive) in 2024 and the preparation of the fourth Vigilance Plan, must be taken into account by Groupe ADP. These changes require strong coordination within the Group to meet the disclosure requirements and anticipate their impacts, particularly in the Group's communications. Furthermore, although Groupe ADP has always operated in a highly regulated sector, a change in the taxation of air transport in France or in the countries in which the Group operates could give rise to new constraints. The provisions of the 2025 French Finance Law modify the rules applicable to the financing of airport safety and security missions. This will result in an increase in the cost to be borne by Aéroports de Paris SA: based on the Company's security costs of between €500 and €600 million per year in coming years, the impact of this measure on the Company's operating income would range between €42 to €47 million per year (compared with €30 to €35 million under the provisions currently in force). The 2025 French Finance Law introduces an increase of the solidarity tax on airline tickets. While this measure has no direct impact on Groupe ADP, it could curb demand and as a result slow traffic growth, depending on price elasticity.

MAIN RISK MANAGEMENT SYSTEMS To meet the new obligations of the CSRD and the Taxonomy regulation, Groupe ADP set up a CSRD-Taxonomy Task Force (an internal Groupe ADP working group) in 2023. It is overseen and jointly led by the Finance Department and the Sustainable Development Department of Groupe ADP. This Task Force meets regularly and is composed of lead partners identified for each ESRS, responsible for reporting preparation and for monitoring the project within their scope. They work across the Group in cooperation with the various Group departments and entities located abroad involved in implementing the CSRD. Groupe ADP, which is subject to both the CSRD and the French law on duty of vigilance (Potier law), has adopted an innovative approach by integrating its Vigilance Plan into its 2024 Sustainability Report. The Task Force format will be maintained in 2025, for the preparation of the second Sustainability Report.

The Group also has an organisation and governance structure that enables it to monitor and address regulatory issues, namely: u the Public Affairs Department manages relations with public authorities at both national and European level, while the Finance Department is responsible for liaising with the regulatory authority on all issues relating to air transport; u on a day-to-day basis, these departments support the operational teams in anticipating and implementing legal and regulatory obligations. They also liaise with the teams in the various international entities responsible for local sector regulations. In addition, the Group has a tax policy aligned with its strategy, which aims to preserve its reputation and image and to reduce the tax risks to which it is exposed through the exercise and development of its activities. Lastly, the transparency of the Group's operations and the establishment of constructive relationships with the tax and public authorities contribute to the reduction of the risks of questioning, adjustment and damage to the Group's credibility.

120

AÉROPORTS DE PARIS w UNIVERSAL REGISTRATION DOCUMENT 2024