Our business footprint, as of Magellan Complete Care on December 31, 2020, we added approximately 200,000 members, and now operate health plans in 18 states. These health plans are generally operated by our respective wholly owned subsidiaries in those states, and licensed as health maintenance organizations (“HMOs”).2022, is illustrated below.

As of December 31, 2020, we had two reportable segments: the Health Plans segment, and the Other segment. OurWe currently have four reportable segments are consistent with how we currently manage the businessconsisting of: 1) Medicaid; 2) Medicare; 3) Marketplace; and view the markets we serve.4) Other.

The Health Plans reportable segment includes our regulated health plan operatingMedicaid, Medicare, and Marketplace segments along withrepresent the recently acquired Magellan Complete Care health plans operating segment. Because this acquisition closed on December 31, 2020, Magellan Complete Care’s operating results were insignificant to our consolidated results of operations for the year ended December 31, 2020. Management will continue to evaluate the composition of its operating and reportable segments for future filings.government-funded or sponsored programs under which we offer managed healthcare services. The Other segment, which is insignificant to our consolidated results of operations, includes certain corporate amounts not associated with or allocated to the Health Plans segment.long-term services and supports consultative services in Wisconsin.

Refer to Notes to Consolidated Financial Statements, Note 16, “Segments,” for further information, including segment revenue and profit information, and Note 2, “Significant Accounting Policies” for premium revenue information by health plan.information.

Our information systems require an ongoing commitment of significant resources to maintain, protect, and enhance existing systems and develop new systems to keep pace with continuing changes in information processing technology, evolving systems and regulatory standards, changing customer preferences, acquisitions and increased security risks.

We face varying levels of competition. Healthcare reform proposals may cause organizations to enter or exit the market for government-sponsored health programs. However, the licensing requirements and bidding and contracting procedures in some states may present partial barriers to entry into our industry.

We compete for government contracts, renewals of those government contracts, members, and providers. State agencies consider many factors in awarding contracts to health plans. Among such factors are the health plan’s provider network, quality scores, medical management, degree of member satisfaction, timeliness of claims payment, and financial resources. Potential members typically choose a health plan based on a specific provider being a part of the network, the quality of care and services available, accessibility of services, and reputation or name recognition of the health plan. We believe factors that providers consider in deciding whether to contract with a health plan include potential member volume, payment methods, timeliness and accuracy of claims payment, and administrative service capabilities.

The Medicaid managed care industry is subject to ongoing changes as a result of healthcare reform, business consolidations and new strategic alliances. We compete with national, regional, and local Medicaid service providers, principally on the basis of size, location, quality of the provider network, quality of service, and reputation. Our primary competitors in the Medicaid managed care industry include Centene Corporation, CVS Health Corporation, Elevance Health, Inc., and UnitedHealth Group Incorporated Anthem, Inc., Aetna Inc., and other large not-for-profit healthcare organizations. Competition can vary considerably from state to state.

The Medicare market is highly competitive across the country, with large competitors, such as UnitedHealth Group Incorporated,CVS Health Corp., Humana Inc., and AetnaUnitedHealth Group Inc., holding significant market share.

In 2009, the Health Information Technology for Economic and Clinical Health Act (“HITECH”) imposed requirements on uses and disclosures of health information; included requirements for HIPAA business associate agreements; extended parts of HIPAA privacy and security provisions to business associates; added data breach notification requirements for covered entities and business associates and reporting requirements to the U.S. Department of Health and Human Services (“HHS”) and, in some cases, to the media; strengthened enforcement; and imposed higher financial penalties for HIPAA violations. In the conduct of our business, depending on the circumstances, we may act as either a covered entity and/or a business associate. HIPAA privacy regulations do not preempt more stringent state laws and regulations that may apply to us.

We maintain a HIPAA compliance program, which we believe complies with HIPAA privacy and security regulations, and have dedicated resources to monitor compliance with this program.

Healthcare reform created additional tools for fraud prevention, including increased oversight of providers and suppliers participating or enrolling in Medicaid, CHIP, and Medicare. Those enhancements included mandatory licensure for all providers, and site visits, fingerprinting, and criminal background checks for higher risk providers.

Because we receive payments from federal and state governmental agencies, we are subject to various laws commonly referred to as “fraud and abuse” laws, including federal and state anti-kickback statutes, prohibited referrals, and the federal False Claims Act, which permit agencies and enforcement authorities to institute a suit against us for violations and, in some cases, to seek treble damages, criminal and civil fines, penalties, and assessments. Violations of these laws can also result in exclusion, debarment, temporary or permanent suspension from participation in government healthcare programs, or the institution of corporate integrity agreements. Liability under such federal and state statutes and regulations may arise if we know, or it is determined that we should have known, that information we provide to form the basis for a claim for government payment is false or fraudulent, and

some courts have permitted False Claims Act suits to proceed if the claimant was out of compliance with program requirements.

Fraud, waste and abuse prohibitions encompass a wide range of operating activities, including kickbacks or other inducements for referral of members or for the coverage of products (such as prescription drugs) by a plan, billing for unnecessary medical services by a provider, upcoding, payments made to excluded providers, improper marketing, and the violation of patient privacy rights. In particular, there has recently been increased scrutiny by the Department of Justice on health plans’ risk adjustment practices, particularly in the Medicare program. Companies involved in public healthcare programs such as Medicaid and Medicare are required to maintain compliance programs to detect and deter fraud, waste and abuse, and are often the subject of fraud, waste and abuse investigations and audits.

You should carefully consider the risks described below and all of the other information set forth in this Form 10-K, including our consolidated financial statements and accompanying notes. These risks and other factors may affect our forward-looking statements, including those we make in this Form 10-K or elsewhere, such as in press releases, presentations to securities analysts or investors, or other communications made by or with the approval of one of our executive officers.

The risks described in the following section are not the only risks facing our Company.

Moreover, with the significant and rapid change in the list of those eligible for Medicaid, actuarial assumptions related to the health acuity of the remaining members may become more difficult to predict or inaccurate, resulting in inaccurate rates to be paid to health plans. Finally, the COVID-19 pandemic willmay also continue to impact our business by causing potential spikes in hospitalizations related to the continued emergence of new variants of potentially greater transmissibility and virulence.

Nearly allThe preponderance of our premium revenues come from the joint federal and state funding of the Medicaid Medicare, and CHIP programs.program. The states in which we operate regularly face significant budgetary pressures. State budgetary pressurestermination of enhanced federal matching funds may result in unexpected Medicaid CHIP, or Medicare rate cuts which could reduce our revenues and profit margins. For example, in 2020, variousStarting April 1, 2023, states enacted temporary premium refundscan resume Medicaid redeterminations and related actions in responsedisenrollments. States would be eligible for phase-down of the enhanced FMAP (6.2 percentage points through March 2023; 5 percentage points through June 2023; 2.5 percentage points through September 2023 and 1.5 percentage points through December 2023) if they comply with certain rules. Due to the reduced demand for medical services stemming from COVID-19, which resulted in a reduction of our medical margin. In some cases, these premium actions were retroactive to earlier periods in 2020, or as early as the beginning of the states’ fiscal years in 2019. Beginning in the second quarter of 2020, we have recognized retroactive premium actions that we believe to be probable, and where the ultimate premium amount is reasonably estimable. We recognized $564 million related to these retroactive premium actions, in the aggregate, in 2020. It is possible that certainuncertainties surrounding what states could increase the level of existing premium refunds, and it is also possible that other states could implement some form of retroactive premium refund in the future. Due to these uncertainties,may do, the ultimate outcomes could differ materially from our estimates as a result of changes in facts or further developments, which could have an adverse effect on our consolidated financial position, results of operations, or cash flows.

To coordinate care for those who qualify to receive both Medicare and Medicaid services (the “dual eligibles”), and to deliver services to these individuals in a more financially efficient manner, under the direction of CMS some states implemented demonstration pilot programs to integrate Medicare and Medicaid services for the dual eligibles. The health plans participating in such demonstrations are referred to as Medicare-Medicaid Plans (“MMPs”). WeMMPs. Pursuant to the 2023 CMS Medicare Final Rule, which will require MMP plans to end no later than December 2025, the five states that we operate MMPs in six states: California,– Illinois, Michigan, Ohio, South Carolina, and Texas. At December 31, 2020,Texas – were required to submit a transition plan to CMS by October 1, 2022, to convert their MMPs to integrated Dual Eligible Special Needs Plan (“D-SNP”). However, the five MMP plans will now be required to wind down or convert their product in line with the applicable state’s MMP transition planning. California concluded its MMP at the end of calendar year 2022 and began transitioning enrollees into integrated EAE-SNPs beginning on January 1, 2023. The economic impact of such wind down or conversion to D-SNP on our membership included approximately 62,000 integrated MMP members, representing approximately 2%premium revenue is uncertain at this point.

We are a corporate parent holding company and hold most of our assets in, and conduct most of our operations through, our direct subsidiaries. As a holding company, our results of operations depend on the results of operations of our subsidiaries. Moreover, we are dependent on dividends or other intercompany transfers of funds from our subsidiaries to meet our debt service and other obligations. The ability of our subsidiaries to pay dividends or make other payments or advances to us will dependdepends on their operating results and will beis subject to applicable laws and restrictions contained in agreements governing the debt of such subsidiaries. In addition, our health plan subsidiaries are subject to laws and regulations that limit the amount of ordinary dividends and distributions that they can pay to us without prior approval of, or notification to, state regulators. In general, our health plans must give thirty days’ advance notice and the opportunity to disapprove “extraordinary” dividends to the respective state departments of insurance for amounts that exceed either (a) ten percent of surplus or net worth at the prior year end or (b) the net income for the prior year, depending on the respective state statute. The discretion of the state regulators, if any, in approving or disapproving a dividend is not clearly defined. Our health plans generally must provide notice to the applicable state regulator prior to paying a dividend or other distribution to us. Our parent company received $635$668 million and $1,373$564 million in dividends from our regulated health plan subsidiaries during 20202022 and 2019,2021, respectively. If the regulators were to deny or significantly restrict our subsidiaries’ requests to pay dividends to us, the funds available to our Company as a whole would be limited, which could have a material adverse effect on our business, financial condition, cash flows, or results of operations.

State and federal laws and regulations including, but not limited to, the Health Insurance Portability and Accountability Act, as amended by the Health Information Technology for Economic and Clinical Health Act, and all regulations promulgated thereunder (collectively, “HIPAA”), the California Consumer Privacy Act (the “CCPA”), the California Privacy Rights Act (the “CPRA”) and the Gramm-Leach-Bliley Act, govern the collection, dissemination, use, privacy, confidentiality, security, availability, and integrity of personally identifiable information (“PII”), including protected health information (“PHI”). HIPAA establishes basic national privacy and security standards for protection of PHI by covered entities and business associates, including health plans such as ours. HIPAA requires covered entities like us to develop and maintain policies and procedures regarding PHI, and to adopt administrative, physical, and technical safeguards to protect PHI.

HIPAA violations may result in significant civil penalties. HIPAA authorizes state attorneys general to file suit under HIPAA on behalf of state residents. Courts can award damages, costs, and attorneys’ fees related to violations of HIPAA in such cases. We have experienced HIPAA breaches in the past, including breaches affecting over 500 individuals.

Even when HIPAA does not apply, according to the Federal Trade Commission (the “FTC”), failing to take appropriate steps to keep consumers’ personal information secure constitutes unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act, 15 U.S.C § 45(a). The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Individually identifiable health information is considered sensitive data that merits stronger safeguards. The FTC’s guidance for appropriately securing consumers’ personal information is similar to what is required by the HIPAA security regulations.

In addition, certain state laws govern the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways, thus complicating compliance efforts. For example, California enacted the CCPA, which became effective on January 1, 2020. The CCPA, among other things, creates new data privacy obligations for covered companies and provides new privacy rights to California residents, including the right to opt out of certain disclosures of their information. The CCPA also creates a private right of action with statutory damages for certain data breaches, thereby potentially increasing risks associated with a data breach. On January 1, 2023, the CPRA, which is the successor legislation to the CCPA, became effective. The CPRA amends and expands the CCPA, creating new privacy obligations, consumer privacy rights and enforcement mechanisms.

If we or one or more of our significant vendors do not comply with existing or new laws and regulations related to PHI, PII, or non-public information, we could be subject to criminal or civil sanctions. Any security breach involving the misappropriation, loss, or other unauthorized disclosure or use of confidential member information, whether by us or a third party, such asby our

Pharmaceutical products and services are a significant component of our healthcare costs. Evolving regulations and state and federal mandates regarding coverage may impact the ability of our health plans to continue to receive existing price discounts on pharmaceutical products for our members. Other factors affecting our pharmaceutical costs include, but are not limited to, the price of pharmaceuticals, geographic variation in utilization of new and existing pharmaceuticals, and changes in discounts. The unpredictable nature of these factors may have a material adverse effect on our business, financial condition, cash flows, or results of operations.

Introduction of new high cost specialty drugs and sudden cost spikes for existing drugs increase the risk that the pharmacy cost assumptions used to develop our capitation rates are not adequate to cover the actual pharmacy costs, which jeopardizes the overall actuarial soundness of our rates. Bearing the high costs of new specialty drugs or the high cost inflation of generic drugs without an appropriate rate adjustment or other reimbursement mechanism would have an adverse impact on our financial condition and results of operations. In addition, evolving regulations and state and federal mandates regarding coverage may impact the ability of our health plans to

continue to receive existing price discounts on pharmaceutical products for our members. Other factors affecting our pharmaceutical costs include, but are not limited to, geographic variation in utilization of new and existing pharmaceuticals, and changes in discounts.discounts, civil investigations, and litigation. Some of our competitors have been subject to substantial sanctions related to allegations of improper transfer pricing practices. Further, our principal pharmacy benefit manager, or PBM, CVS Caremark (“CVS”), is party to certain lawsuits and putative class actions regarding its drug pricing practices and its rebate arrangements with drug manufacturers. The ultimate outcome of these complaints may have an adverse impact on our pharmaceutical costs, or potentially could result in our becoming involved or impleaded into similar or related costly litigation. Although we will continue to work with state Medicaid agencies in an effort to ensure that we receive appropriate and actuarially sound reimbursement for all new drug therapies and pharmaceuticals trends, there can be no assurance that we will be successful in thisthat regard.

Large-scale medical emergencies can take many forms and be associated with widespread illness or medical conditions. For example, natural disasters, such as a major earthquake or wildfire in California, or a major hurricane affecting Florida, South Carolina or Texas, could have a significant impact on the health of a large number of our covered members. Other conditions that could impact our members include a virulent flu season or epidemic, newly emergent mosquito-borne illnesses, such as the Zika virus, the West Nile virus, or the Chikungunya virus, or new viruses such as COVID-19, conditions for which vaccines may not exist, are not effective, or have not been widely administered.

In addition, federal and state law enforcement officials have issued warnings about potential terrorist activity involving biological or other weapons of mass destruction. All of these conditions, and others, could have a significant impact on the health of the population of wide-spread areas. If one of the states in which we operate were to experience a large-scale natural disaster, a significant terrorist attack, or some other large-scale event affecting the health of a large number of our members, our covered medical expenses in that state would rise, which could have a material adverse effect on our business, financial condition, cash flows, or results of operations.

We are subject to various risks inherent in the government contracting process. These risks include routine and non-routine governmental reviews, audits, and investigations, and compliance with government reporting requirements. Violation of the laws, regulations, or contract provisions governing our operations, or changes in interpretations of those laws and regulations, could result in the imposition of civil or criminal penalties, the cancellation of our government contracts, the suspension or revocation of our licenses, the exclusion from participation in government sponsored health programs, or the revision and recoupment of past payments made based on audit findings. If we are unable to correct any noted deficiencies, or become subject to material fines or other sanctions, we could suffer a substantial reduction in profitability, and could also lose one or more of our government contracts. In addition, government receivables are subject to government audit and negotiation, and government contracts are vulnerable to disagreements with the government. The final amounts we ultimately receive under government contracts may be different from the amounts we initially recognize in our financial statements.

Our business is extensively regulated by the federal government and the states in which we operate. The laws and regulations governing our operations are generally intended to benefit and protect health plan members and providers rather than managed care organizations. The government agencies administering these laws and regulations have broad latitude in interpreting and applying them. Changes in the interpretation or application of our contracts could reduce our profitability if we have detrimentally relied on a prior interpretation or application. These laws and regulations, along with the terms of our government contracts, regulate how we do business, what services we offer, and how we interact with our members and the public. For instance, some states mandate minimum medical expense levels as a percentage of premium revenues. These laws and regulations, and their interpretations, are subject to frequent change. The interpretation of certain contract provisions by our governmental regulators may also change. Changes in existing laws or regulations, or their interpretations, or the enactment of new laws or regulations, could reduce our profitability by imposing additional capital requirements, increasing our liability, increasing our administrative and other costs, increasing mandated benefits, forcing us to restructure our relationships with providers, requiring us to implement additional or different programs and systems, or making it

more difficult to predict future results. ChangesThus, any significant changes in the interpretationexisting health care laws or regulations could materially impact our business, financial condition, cash flows, or results of our contracts could also reduce our profitability if we have detrimentally relied on a prior interpretation.operations.

Because we receive payments from federal and state governmental agencies, we are subject to various laws commonly referred to as “fraud and abuse” laws, including federal and state anti-kickback statutes, prohibited referrals, and the federal False Claims Act, which permit agencies and enforcement authorities to institute a suit against us for violations and, in some cases, to seek treble damages, criminal and civil fines, penalties, and assessments. Violations of these laws can also result in exclusion, debarment, temporary or permanent suspension from participation in government healthcare programs, or the institution of corporate integrity agreements. Liability under such federal and state statutes and regulations may arise if we know, or it is determined that we should have known, that information we provide to form the basis for a claim for government payment is false or fraudulent, and some courts have permitted False Claims Act suits to proceed if the claimant was out of compliance with program requirements.

Fraud, waste and abuse prohibitions encompass a wide range of operating activities, including kickbacks or other inducements for referral of members or for the coverage of products (such as prescription drugs) by a plan, billing for unnecessary medical services by a provider, upcoding, payments made to excluded providers, improper marketing, and the violation of patient privacy rights. In particular, there has recently been increased scrutiny by the Department of Justice on health plans’ risk adjustment practices, particularly in the Medicare program. Companies involved in public healthcare programs such as Medicaid and Medicare are required to maintain compliance programs to detect and deter fraud, waste and abuse, and are often the subject of fraud, waste and abuse investigations and audits.

We currently derive our premium revenues from health plans that operate in 18 states, including the states added in our acquisition of Magellan Complete Care on December 31, 2020.19 states. Our consolidated Medicaid premium revenue constituted 73%80% of our totalconsolidated premium revenue in the year ended December 31, 2020.2022. Measured by Medicaid premium revenue by health plan, our top four health plans were in California,New York, Ohio, Texas, and Washington, with aggregate Medicaid premium revenue of $8.9$13.3 billion, or approximately 63%54% of consolidatedtotal Medicaid premium revenue, in the year ended December 31, 2020.2022. If we are unable to continue to operate in any of our existing jurisdictions, or if our current operations in those jurisdictions or any portions of those jurisdictions are significantly curtailed or terminated entirely, our revenues could decrease materially.

Many of our government contracts are effective only for a fixed period of time and will only be extended for an additional period of time if the contracting entity elects to do so. For example, our contract in California is expected to be subject to re-procurement in late 2021. When our government contracts expire, they may be opened for bidding by competing health plans, and there is no guarantee that the contracts will be renewed or extended. Even if our contracts are renewed or extended, there can be no assurance that they will be renewed or extended on the same terms or without a reduction in the applicable service areas.

Even if our responsive bids are successful, the bids may be based upon assumptions regarding enrollment, utilization, medical costs, or other factors which could result in the contract being less profitable than we had expected or could result in a net loss. Furthermore, our contracts contain certain provisions regarding, among other things, eligibility, enrollment and dis-enrollment processes for covered services, eligible providers, periodic financial and information reporting, quality assurance and timeliness of claims payment, and are subject to cancellation if we fail to perform in accordance with the standards set by regulatory agencies.

As part of our normal operations, we routinely collect, process, store, and transmit large amounts of data, including sensitive personal information as well as proprietary or confidential information relating to our business or third parties. To ensure information security, we have implemented controls designed to protect the confidentiality, integrity and availability of this data and the systems that store and transmit such data. However, our information technology systems and safety control systems are subject to a growing number of threats from computer programmers, hackers, and other adversaries that may be able to penetrate our network security and misappropriate our confidential information or that of third parties, create system disruptions, or cause damage, security issues, or shutdowns. They also may be able to develop and deploy viruses, worms, and other malicious software programs that attack our systems or otherwise exploit security vulnerabilities. All of these risks are also faced by our significant vendors who are also in possession of sensitive confidential information. As a result of the COVID-19 pandemic, we may face increased cybersecurity risks due to our reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Because the techniques used to circumvent, gain access to, or sabotage security systems can be highly sophisticated and change frequently, they often are not recognized until launched against a target, and may originate from less regulated and remote areas around the world. We may be unable to anticipate these techniques or implement adequate preventive measures, resulting in potential data loss and damage to our systems. Our systems are also subject to compromise from internal threats such as improper action by employees, including malicious insiders, or by vendors, counterparties, and other third parties with otherwise legitimate access to our systems. Our policies, employee training (including phishing prevention training), procedures and technical safeguards may not prevent all improper access to our network or proprietary or confidential information by employees, vendors, counterparties, or other third parties. Our facilities may also be vulnerable to security incidents or security attacks, acts of vandalism or theft, misplaced or lost data, human errors, or other similar events that could negatively affect our systems and our and our members’ data.

breadth of our operations and the increasing sophistication of cyberattacks, a particular incident could occur and persist for an extended period of time before being detected. The extent of a particular cyberattack and the steps that we may need to take to investigate the attack may take a significant amount of time before such an investigation could be completed and full and reliable information about the incident is known. During such time, the extent of any harm or how best to remediate it might not be known, which could further increase the risks, costs, and consequences of a data security incident. In addition, our systems must be routinely updated, patched, and upgraded to protect against known vulnerabilities. The volume of new software vulnerabilities has increased substantially, as has the importance of patches and other remedial measures. In addition to remediating newly identified vulnerabilities, previously identified vulnerabilities must also be updated. We are at risk that cyber attackers exploit these known vulnerabilities before they have been addressed. The complexity of our systems and platforms, the increased frequency at which vendors are issuing security patches to their products, our need to test patches and, in some instances, coordinate with third-parties before they can be deployed, all could further increase our risks.

Our acquisitions and the related integration activities involve a number of risks, including the following:

Many of these factors are outside of our control and any one of them could result in delays, increased costs, decreases in the amount of expected revenues, and diversion of management's time and energy, which could materially affecthave a material adverse effect on our business, financial position,condition, cash flows or results of operations, or cash flows.operations. There can be no assurances that we will be successful in managing our expanded operations as a result of acquisitions or that we will realize the expected growth in earnings, operating efficiencies, cost savings, or other benefits.

As of December 31, 2020,2022, we had two reportable segments: the Health Plans segment,served approximately 5.3 million members eligible for Medicaid, Medicare, and the Other segment. Ourother government-sponsored healthcare programs for low-income families and individuals, including Marketplace members, most of whom receive government premium subsidies.

We currently have reportable segments are consistent with howconsisting of: 1) Medicaid; 2) Medicare; 3) Marketplace; and 4) Other.

The Medicaid, Medicare, and Marketplace segments represent the government-funded or sponsored programs under which we currently manage the businessoffer managed healthcare services. The Other segment, which is insignificant to our consolidated results of operations, includes long-term services and view the markets we serve.supports consultative services in Wisconsin.

We derive our revenues primarily from health insurance premiums. Our primary customers are state Medicaid agencies and the federal government.

The key metrics used to assess the performance of our Health Plans segmentMedicaid, Medicare, and Marketplace segments are premium revenue, medical margin and MCR. MCR represents the amount of medical care costs as a percentage of premium revenue. Therefore, the underlying medical margin, or the amount earned by the Health Plans segmentMedicaid, Medicare, and Marketplace segments after medical costs are deducted from premium revenue, isrepresents the most important measure of earnings reviewed by management.

We manage our cash, investments, and capital structure to meet the short- and long-term obligations of our business while maintaining liquidity and financial flexibility. We forecast, analyze, and monitor our cash flows to enable prudent investment management and financing within the confines of our financial strategy.

We maintain liquidity at two levels: 1) the regulated health plan subsidiaries; and 2) the parent company.

Our regulated health plan subsidiaries’ primary liquidity requirements include payment of medical claims and other health care services; payment of certain settlements with our state and federal customers, such as minimum medical loss ratio and risk corridors and Marketplace risk transfers on behalf of CMS; general and administrative costs directly incurred or paid through an administrative services agreement to the parent company; and federal tax payments to the parent company under an intercompany tax sharing agreement. Our regulated health plan subsidiaries generate significantmeet their liquidity needs by generating cash flows from operating activities, primarily from premium revenue; cash flows from investing activities, including investment income and sales of investments; and capital contributions received from our parent company.

Our regulated health plan subsidiaries are each subject to applicable state regulations that, among other things, require the maintenance of minimum levels of capital and surplus. We continue to maintain appropriate levels of aggregate excess statutory capital and surplus in our regulated health plan subsidiaries is in the form of cash, cash equivalents,subsidiaries. See further discussion under “Regulatory Capital and investments.

Parent company liquidity requirements generally consist of payment of administrative costs not directly incurred by our regulated operations, including, but not limited to, staffing costs, lease payments, branding and certain information technology services; capital contributions paid to our regulated health plan subsidiaries, including funding for newer health plans; capital expenditures; debt service; funding for common stock purchases, acquisitions and other growth-related activities; and federal tax payments. The parent company contributed capital of $107$159 million and $43$440 million in 20202022 and 2019,2021, respectively, to our regulated health plan subsidiaries to satisfy statutory capital and surplus requirements. The higher contributions in 2021 were mainly attributed to fund growth in our New York and Kentucky health plans. Our parent company normally meets its liquidity requirements from administrative services fees earned under administrative services agreements; dividends received from our regulated subsidiaries; federal tax payments collected from the regulated subsidiaries; proceeds received from the issuance of debt and equity securities; and cash flows from investing activities, including investment income and sales of investments.

Cash, cash equivalents and investments at the parent company amounted to $644$375 million and $997$348 million as of December 31, 2020,2022, and 2019,2021, respectively. The decreaseincrease in 20202022 was mainlyprimarily due to cash used for Magellan Complete Care and other acquisitions, and common stock repurchases. These outflows were partially offset by inflows from net debt financing transactions, andthe dividends received from our regulated health plan subsidiaries, netpartially offset by the share repurchase program and the timing of corporate payments and capital contributions as described above. See further discussion below, in “Investing Activities,” and “Financing Activities.”

After considering expected cash flows from operating activities, we generally invest cash of regulated subsidiaries that exceeds our expected short-term obligations in longer term, investment-grade, and marketable debt securities to improve our overall investment return. These investments are made pursuant to board-approved investment policies which conform to applicable state laws and regulations.

Our cash flows are summarized as follows: