Universal Registration Document 2024

2 RISK FACTORS AND INTERNAL CONTROL RISK FACTORS

5 – D: RISKS RELATED TO AVIATION SAFETY Groupe ADP is subject to particularly constraining civil aviation safety standards, non-compliance with which may have negative consequences for its airport management activity Criticality + Change in 2024 è Detailed description of the risk factor

Potential effects for the Group u Additional financial costs caused by compensation for all damages u Litigation and legal recourse u Impact on Group image Interconnected risks u Safety and security risks u Risks related to portfolio management u Risks related to data management

The safety of civil aviation is a priority for the air transport industry. Safety standards are established at a global level under the aegis of the International Civil Aviation Organization (ICAO). These measures make up the standards and practices recommended by the ICAO and which the signatory states of the Chicago Convention of 7 December 1944 have undertaken to implement. Not being directly applicable, their transposition into the national law of the states, with the possibility for a state to notify differences, gives them a regulatory value. They are also a commonly used reference to define the obligations of airport concessions. For airports situated in the European Union, the applicable legal framework is set by European Community law and by the rules of the European Aviation Safety Agency (EASA), which reflect the ICAO’s recommended standards and practices and make them applicable. Through these standards, the airport safety certificate can be drawn up in accordance with the provisions of Regulation (EU) 2018/1139 of the European Parliament and of the Council of 20 February 2018. Groupe ADP airports located in non-EU countries are subject to local certification processes. Violation of these standards is likely to jeopardise the safety of air transport, prevent the operation of airports and the Group could be held liable. In addition, these standards are regularly strengthened and thus impose additional obligations on Groupe ADP airports and therefore increase the costs and resources to be implemented.

MAIN RISK MANAGEMENT SYSTEMS ADP SA has developed an internal compliance monitoring process, as required by the airport regulation, based on monitoring plans for a period of up to three years set by the competent authority and reinforced by monitoring actions targeted at critical activities identified in regular risk assessments. In order to facilitate and guarantee compliance with changes in regulatory requirements, a compliance monitoring and support process has been put in place. Where necessary, this is accompanied by analysis notes and/or regulatory policies aimed at clarifying the compliance requirements to be implemented.

Support assignments carried out as part of technical service agreements (TSAs) for Groupe ADP's other platforms around the world and peer reviews for the Group's international airports focus in particular on compliance with aviation safety standards and best practices. Vigilance was increased in preparation for the 2024 Olympic and Paralympic Games as well as to take into account the new security and safety risks related to digitisation and cybersecurity risks. In terms of managing the risks associated with non-cooperative drones, Groupe ADP has put in place all the procedures, means and resources at its Paris Region platforms to detect and better control this risk.

122

AÉROPORTS DE PARIS w UNIVERSAL REGISTRATION DOCUMENT 2024