BankUnited, Inc., with total consolidated assets of $32.2$35.8 billion at December 31, 2018,2021, is a bank holding company with one direct wholly-owned subsidiary, BankUnited, collectively, the Company. BankUnited, a national banking association headquartered in Miami Lakes, Florida, provides a full range of bankingcommercial lending and both commercial and consumer deposit services to individual and corporate customers through 80 banking centers located in 14 Florida counties and 5 banking centers in the New York metropolitan area. The Bank also provides certain commercial lending and deposit products through national platforms. The Company has built,platforms and certain consumer deposit products through an online channel. Our core business strategy is to build a leading regional commercial and small business bank, with a distinctive value proposition based on strong service-oriented relationships, robust digital enabled customer experiences and operational excellence, with an entrepreneurial work environment that empowers employees to deliver their best. To date, we have executed our strategy primarily through organic growth, a premier commercially focused regional bank with a long-term value oriented business model serving primarily small and medium sized businesses. We endeavor to provide, through our experienced lending and relationship banking teams, personalized customer service and offer a full range of traditional banking products and services to both our commercial and consumer customers.

Asset oversight committees to administer the loan portfoliomeet at least quarterly and monitorprovide oversight of key credit governance, transactional, and manage credit risk.management functions. These committees include: (i) the Commercial Loan Committee, (ii) the

The credit approval process provides for prompt and thorough underwriting and approval or decline of loan requests. The approval method used is a hierarchy of individual lending authorities for new credits and renewals. The Credit Risk Management Committee approves authorities for lending and credit personnel, which are ultimately submitted to our Board for ratification.Our In-house Lending authorities are based on position, capability and experience of the individuals filling these positions. Authorities are periodically reviewed and updated.

We offer traditional deposit products including commercial and consumer checking accounts, money market deposit accounts, savings accounts and certificates of deposit with a variety of terms and rates as well as a robust suite of treasury, commercial payments and cash management services. We offer commercial and retail deposit products across our primary geographic footprint and certain commercial deposit, payments and treasury management products and services on a national platform. We have a limited on-linenationally. For our consumers, we also offer competitive money market and time deposit product offering. Our deposits are insured by the FDIC up to statutory limits.products through our online channel. Demand deposit balances are concentrated in commercial and small business accounts.accounts and our deposit growth strategy is focused on small business and middle market companies generally, as well as select industry verticals. Our service fee schedule and rates are competitive with other financial institutions in our markets.

Our Board of Directors oversees our risk management framework. Our Board approves the Company's business plan, risk appetite statementprimary banking markets are Florida and the policies that set standards for the natureTri-State market of New York, New Jersey and level of risk the Company is willing to assume. The Board and its established committees receive regular reporting on the Company's management of critical risks and the effectiveness of risk management systems. While our full Board maintains the ultimate oversight responsibility for the risk management framework, its committees, including the audit committee, the risk committee, the compensation committee and the nominating and corporate governance committee, oversee risk in certain specified areas.

Pinnacle and Bridge offer lending products and the Bank provides mortgage warehouse financing on a national lending andbasis. We also offer a suite of commercial deposit, gathering platforms. Our distribution network also includes ATMs, fully integrated on-line banking, mobile bankingtreasury solutions and a telephone banking service. We target small businesses, middle market and larger commercial enterprises, as well as individual consumers.

Our markets are highly competitive. Our markets containcompetitive, containing not only a large number of community and regional banks, but also a significant presence of the country's largest commercial banks. We compete with other state, national and international banks as well as savings associations, savings banks and credit unions with physical presence in our market areas or targeting our market areas digitally for deposits and loans. In addition, we compete with financial intermediaries such as FinTech companies,

Interest rates on both loans and deposits and prices of fee-based services are significant competitive factors among financial institutions generally. Other important competitive factors include convenience, quality of customer service, availability and quality of on-line, mobile and remote banking products,digital offerings, community reputation, continuity of personnel and services, and, in the case of larger commercial customers, relative lending limits and ability to offer sophisticated cash management and other commercial banking services. While we continue to provide competitive interest rates on both depository and lending products, we believe that we can compete most successfully by focusing on the financial needs of growing companies and their executives and small and middle-market businesses, offering them a broad range of personalized services, digital platforms and sophisticated cash management tools tailored to their businesses.

The U.S. banking industry is highly regulated under federal and state law. These regulations affecthave a material effect on the operations of BankUnited, Inc. and its direct and indirect subsidiaries.

Statutes, regulations and policies limit the activities in which we may engage and the conduct of our permitted activities and establish capital requirements with which we must comply. The regulatory framework is intended primarily for the protection of depositors, borrowers, customers and clients, the FDIC insurance funds and the banking system as a whole, and not for the protection of our stockholders or creditors. In many cases, the applicable regulatory authorities have broad enforcement power over bank holding companies, banks and their subsidiaries, including the power to impose substantial fines and other penalties for violations of laws and regulations. Further, the regulatory system imposes reporting and information collection obligations. We incur significant costs related to compliance with these laws and regulations. Banking statutes, regulations and policies are continually under review by federal and state legislatures and regulatory agencies, and a change in them, including changes in how they are interpreted or implemented, could have a material impact on our business.

The material statutory and regulatory requirements that are applicable to us are summarized below. The description below is not intended to summarize all laws and regulations applicable to us.

BankUnited is a national bank. As a national bank organized under the National Bank Act, BankUnited is subject to ongoing and comprehensive supervision, regulation, examination and enforcement by the OCC.

Any entity that directly or indirectly controls a bank must be approved by the Federal Reserve Board under the BHC Act to become a BHC. BHCs are subject to regulation, inspection, examination, supervision and enforcement by the Federal Reserve

BankUnited, Inc., which controls BankUnited, is a BHC and, as such, is subject to ongoing and comprehensive supervision, regulation, examination and enforcement by the Federal Reserve Board.

A principal objective of the U.S. bank regulatory system is to protect depositors by ensuring the financial safety and soundness of banking organizations. To that end, the banking regulators have broad regulatory, examination and enforcement authority. The regulators regularly examine the operations of banking organizations. In addition, banking organizations are subject to periodic reporting requirements.

The regulators have various remedies available if they determine that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of a banking organization's operations are unsatisfactory.less than satisfactory. The regulators may also take action if they determine that the banking organization or its management is violating or has violated any law or regulation. The regulators have the power to, among other things:

The FDIC may terminate a depository institution's deposit insurance upon a finding that the institution's financial condition is unsafe or unsound or that the institution has engaged in unsafe or unsound practices or has violated any applicable rule, regulation, order or condition enacted or imposed by the institution's regulatory agency. Engaging in unsafe or unsound practices or failing to comply with applicable laws, regulations and supervisory agreements could subject BankUnited, Inc., the Bank and their subsidiaries or their officers, directors and institution-affiliated parties to the remedies described above and other sanctions.

Banking laws impose notice, approval, and ongoing regulatory requirements on any stockholder or other party that seeks to acquire direct or indirect "control" of an FDIC-insured depository institution. These laws include the BHC Act and the Change in Bank Control Act, and the Home Owners' Loan Act. Among other things, these laws require regulatory filings by individuals or companies that seek to acquire direct or indirect "control" of an FDIC-insured depository institution. The determination of whether an investor "controls" a depository institution is based on all of the facts and circumstances surrounding the investment. As a general matter, a party is deemed to control a depository institution or other company if the party owns or controls 25% or more of any class of voting stock. Subject to rebuttal, a party may be presumed to control a depository institution or other company if the investor owns or controls 10% or more of any class of voting stock. Ownership by affiliated parties, or parties acting in concert, is typically aggregated for these purposes. If a party's ownership of BankUnited, Inc. were to exceed certain thresholds, the investor could be deemed to "control" the Company for regulatory purposes. This could subject the investor to regulatory filings or other regulatory consequences.

Banking laws generally restrict the ability of BankUnited, Inc. to engage in activities other than those determined by the Federal Reserve Board to be so closely related to banking as to be a proper incident thereto. The GLB Act expanded the scope of permissible activities for a BHC that qualifies as a financial holding company. Under the regulations implementing the GLB Act, a financial holding company may engage in additional activities that are financial in nature or incidental or complementary to a financial activity. Those activities include, among other activities, certain insurance and securities activities. BHCs and their subsidiaries must be well-capitalized and well-managed in order for the BHC and its nonbank affiliates to engage in the expanded financial activities permissible only for a financial holding company. BankUnited, Inc. is not a financial holding company.

In addition, as a general matter, the establishment or acquisition by BankUnited, Inc. of a non-bank entity, or the initiation of a non-banking activity, requires prior regulatory approval. In approving acquisitions or the addition of activities, the Federal Reserve Board considers, among other things, whether the acquisition or the additional activities can reasonably be expected to produce benefits to the public, such as greater convenience, increased competition or gains in efficiency, that outweigh such possible adverse effects as undue concentration of resources, decreased or unfair competition, conflicts of interest or unsound banking practices.

The federal bank regulators view capital levels as important indicators of an institution's financial soundness. As a general matter, FDIC-insured depository institutions and their holding companies are required to maintain minimum capital relative to the amount and types of assets they hold. The final supervisory determination on an institution's capital adequacy is based on the regulator's assessment of numerous factors. Both BankUnited, Inc. and BankUnited are subject to regulatory capital requirements.

The Federal Reserve Board has established risk-based and leverage capital guidelines for BHCs, including BankUnited, Inc. The OCC has established substantially similar risk-based and leverage capital guidelines applicable to national banks, including BankUnited. BankUnited, Inc. and BankUnited are subject to capital rules implemented under the framework promulgated by the International Basel Committee on Banking Supervision (the "Basel III Capital Rules"). While some

The Basel III Capital Rules provide for the following minimum capital to risk-weighted assets ratios:ratios to be considered adequately capitalized:

The Basel III Capital Rules require institutions to retain a capital conservation buffer of 2.5% above these required minimum capital ratio levels. A minimum leverage ratio (tier 1 capital as a percentage of average total assets) of 4.0% is also required under the Basel III Capital Rules. Banking organizations that fail to maintain the minimum required capital conservation buffer could face restrictions on capital distributions or discretionary bonus payments to executive officers, with distributions and discretionary bonus payments being completely prohibited if no capital conservation buffer exists, or in the event of the following: (i) the banking organization's capital conservation buffer was below 2.5% (or the minimum amount required) at the beginning of a quarter; and (ii) its cumulative net income for the most recent quarterly period plus the preceding four calendar quarters is less than its cumulative capital distributions (as well as associated tax effects not already reflected in net income) during the same measurement period.

Under the FDIA, the federal bank regulatory agencies must take "prompt corrective action" against undercapitalized U.S. depository institutions. U.S. depository institutions are assigned one of five capital categories: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," and "critically undercapitalized," and are subjected to differential regulation corresponding to the capital category within which the institution falls. As of December 31, 2018,2021, a depository institution was deemed to be "well capitalized" if the banking institution had a total risk-based capital ratio of 10.0% or greater, a tier 1 risk-based capital ratio of 8.0% or greater, a CET1 risk-based capital ratio of 6.5% and a leverage ratio of 5.0% or greater, and the institution was not subject to an order, written agreement, capital directive, or prompt corrective action directive to meet and maintain a specific level for any capital measure. Under certain circumstances, a well-capitalized, adequately-capitalized or undercapitalized institution may be treated as if the institution were in the next lower capital category. A banking institution that is undercapitalized is required to submit a capital restoration plan. Failure to meet capital guidelines could subject the institution to a variety of enforcement remedies by federal bank regulatory agencies, including: termination of deposit insurance by the FDIC, restrictions on certain business activities, and appointment of the FDIC as conservator or receiver. As of December 31, 2018,2021, BankUnited, Inc. and BankUnited were well capitalized.

All companies, including BHCs, that directly or indirectly control an insured depository institution, are required to serve as a source of strength for the depository institution. Under this requirement, BankUnited, Inc. in the future could be required to provide financial assistance to BankUnited should it experience financial distress. Such support may be required at times when, absent this statutory and Federal Reserve Policy requirement, a BHC may not be inclined to provide it.

Federal law currently imposes limitations upon certain capital distributions by national banks, such as certain cash dividends, payments to repurchase or otherwise acquire its shares, payments to stockholders of another institution in a cash-out merger and other distributions charged against capital. The Federal Reserve Board and OCC regulate all capital distributions by BankUnited directly or indirectly to BankUnited, Inc., including dividend payments.

BankUnited may not pay dividends to BankUnited, Inc. if, after paying those dividends, it would fail to meet the required minimum levels under risk-based capital guidelines and the minimum leverage capital ratio requirements, or in the event the OCC notified BankUnited that it was in need of more than normal supervision. Under the FDIA, an insured depository institution such as BankUnited is prohibited from making capital distributions, including the payment of dividends, if, after making such distribution, the institution would become "undercapitalized." Payment of dividends by BankUnited also may be restricted at any time at the discretion of the appropriate regulator if it deems the payment to constitute an unsafe and unsound banking practice.

BankUnited is subject to supervisory limits on its ability to declare or pay a dividend or reduce its capital unless certain conditions are satisfied.

In addition, it is the policy of the Federal Reserve Board that BHCs should pay cash dividends on common stock only out of income available over the past year and only if prospective earnings retention is consistent with the organization’s expected future needs and financial condition. The policy provides that BHCs should not maintain a level of cash dividends that undermines the BHC’s ability to serve as a source of strength to its banking subsidiaries.

Insured depository institutions are subject to restrictions on their ability to conduct transactions with affiliates and other related parties. Section 23A of the Federal Reserve Act imposes quantitative limits, qualitative requirements, and collateral requirements on certain transactions by an insured depository institution with, or for the benefit of, its affiliates. Transactions covered by Section 23A include loans, extensions of credit, investment in securities issued by an affiliate, and acquisitions of assets from an affiliate. Section 23B of the Federal Reserve Act requires that most types of transactions by an insured depository institution with, or for the benefit of, an affiliate be on terms at least as favorable to the insured depository institution as if the transaction were conducted with an unaffiliated third party.

The OCC currently charges fees to recover the costs of examining national banks, processing applications and other filings, and covering direct and indirect expenses in regulating national banks. Various regulatory agencies have the authority to assess additional supervision fees.

The FDIC is an independent federal agency that insures the deposits of federally insured depository institutions up to applicable limits. The FDIC also has certain regulatory, examination and enforcement powers with respect to FDIC-insured institutions. The deposits of BankUnited are insured by the FDIC up to applicable limits. As a general matter, the maximum deposit insurance amount is $250,000 per depositor.

Additionally, FDIC-insured depository institutions are required to pay deposit insurance assessments to the FDIC. The amount of a particular institution's deposit insurance assessment is based on that institution's risk classification under an FDIC risk-based assessment system. An institution's risk classification is assigned based on its capital levels and the level of supervisory concern the institution poses to the regulators.

The FDIA provides that, in the event of the "liquidation or other resolution" of an insured depository institution, the claims of depositors of the institution (including the claims of the FDIC as subrogee of insured depositors) and certain claims for administrative expenses of the FDIC as a receiver will have priority over other general unsecured claims against the institution. Insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including BankUnited, Inc., with respect to any extensions of credit they have made to such insured depository institution.

As a national bank, BankUnited is required to hold shares of capital stock in a Federal Reserve Bank. BankUnited holds capital stock in the Federal Reserve Bank of Atlanta. As a member of the Federal Reserve System, BankUnited has access to the Federal Reserve discount window lending and payment clearing systems.

BankUnited is a member of the Federal Home Loan Bank of Atlanta. Each FHLB provides a central credit facility primarily for its member institutions as well as other entities involved in home mortgage lending. Any advances from a FHLB

Under federal law, financial institutions must maintain anti-money laundering programs that include established internal policies, procedures, and controls; a designated compliance officer; an ongoing employee training program; a risk-based customer due diligence program; and testing of the program by an independent audit function. Financial institutions are also

The U.S. Department of the Treasury's OFAC is responsible for helping to insureensure that U.S. entities do not engage in transactions with certain prohibited parties, as defined by various Executive Orders and Acts of Congress. OFAC publishes lists of persons, organizations, and countries suspected of money laundering or aiding, harboring or engaging in terrorist acts, known as Specially Designated Nationals and Blocked Persons. If BankUnited, Inc. or BankUnited finds a name on any transaction, account or wire transfer that is on an OFAC list, BankUnited, Inc. or BankUnited must freeze or block such account or transaction, file a suspicious activity report and notify the appropriate authorities.

Banking organizations are subject to numerous laws and regulations intended to protect consumers. These laws include, among others:

Many states and local jurisdictions have consumer protection laws analogous, and in addition to, those listed above. These federal, state and local laws regulate the manner in which financial institutions deal with customers when taking deposits, making loans, or conducting other types of transactions. Failure to comply with these laws and regulations could give rise to regulatory sanctions, customer rescission rights, action by state and local attorneys general, and civil or criminal liability.

The CFPB is tasked with establishing and implementing rules and regulations under certain federal consumer protection laws with respect to the conduct of providers of certain consumer financial products and services. The CFPB has rulemaking authority over many of the statutes governing products and services offered to bank and thrift consumers. For banking organizations with assets of $10 billion or more, such as BankUnited, Inc. and the Bank, the CFPB has exclusive rule making and examination, and primary enforcement authority under certain federal consumer protection financial law.laws. In addition, states are permitted to adopt consumer protection laws and regulations that are stricter than those regulations promulgated by the CFPB.

The CRA is intended to encourage banks to help meet the credit needs of their service areas, including low and moderate-income neighborhoods, consistent with safe and sound operations. The bank regulators examine and assign each bank a public CRA rating.

The CRA requires bank regulators to take into account the bank's record in meeting the needs of its service area when considering an application by a bank to establish or relocate a branch or to conduct certain mergers or acquisitions. The Federal Reserve Board is required to consider the CRA records of a BHC's controlled banks when considering an application by the BHC to acquire a banking organization or to merge with another BHC. If BankUnited, Inc. or BankUnited applies for regulatory approval to make certain investments, the regulators will consider the CRA record of target institutions and BankUnited, Inc.'s depository institution subsidiaries. An unsatisfactoryA less than satisfactory CRA recordrating could substantially delay approval or result in denial of an application. The regulatory agency's assessment of the institution's recordCRA performance is made available to the public. Following its most recent CRA examinationperformance evaluation in September 2015,October 2021, BankUnited received an overall rating of "Satisfactory."

At December 31, 2018,2021, we employed 1,735had 1,465 full-time employees and 5530 part-time employees. None of our employees are parties to a collective bargaining agreement. We believe that our relationsemployees are our greatest asset and vital to our success. As such, we seek to hire and retain the best candidate for each position, without regard to age, gender, ethnicity, or other protected trait, but with an appreciation for a diversity of perspectives and experience. We have designed a compensation structure including an array of benefit plans and programs that we believe is attractive to our current and prospective employees.

Through our Go for More™ Academy, we provide employees with training and resources designed to increase skillsets and product knowledge, develop leadership, promote collaboration and facilitate career development. Examples of our leadership development programs include our LEAD program for senior leaders, Rising Leaders Program for middle managers and the EXCELerate career development program for individual contributors. All of our employees are good.required to participate in compliance and cyber-security training.

Our website address is www.bankunited.com. Our electronic filings with the SEC (including all Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and if applicable, amendments to those reports) are available free of charge on the website as soon as reasonably practicable after they are electronically filed with, or furnished to, the SEC. The information posted on our website is not incorporated into this Annual Report. In addition, the SEC maintains a website that contains reports and other information filed with the SEC. The website can be accessed at http://www.sec.gov.

If any of the level of non-performing, criticized, classified and restructured loansevents described in the portfolio, product mix, underwriting and credit administration policies and practices, portfolio trends, concentrations, industry conditions, economic trends and otherrisk factors considered by management to have an impact on the ability of borrowers to repay their loans.

In July 2017,March 2020, the Financial Conduct Authority,World Health Organization declared COVID-19 a regulatorglobal pandemic. The pandemic resulted in governmental authorities implementing numerous measures attempting to contain the spread and impact of financial services firmsCOVID-19 such as travel bans and restrictions, quarantines, shelter in place orders, and limitations on business activities, including in major markets in which the Company and its clients are located or do business. Vaccines have become available, most of these restrictions have been lifted or moderated and we believe economic indicators currently point to a continued recovery; however, the pandemic and these precautionary measures negatively impacted the global and domestic economies, including in the United Kingdom, announcedCompany's primary market areas. There is no assurance that it intends to stop persuadingthese or compelling banks to submit LIBOR rates after 2021. The announcement indicates that the continuation of LIBOR on the current basis cannot andsimilar measures will not be guaranteed after 2021. At this time, no consensus exists as to what rate or rates may become acceptable alternatives to LIBOR and it is impossible to predictreinstated, particularly if the effect of any such alternatives on the value of LIBOR-based securities and variable rate loans, subordinated debentures, or other securities or financial arrangements, given LIBOR's role in determining market interest rates globally. Uncertainty as to the nature of alternative reference rates and as to potential changes or other reforms to LIBOR may adversely affect LIBOR rates and the value of LIBOR-based loans and securities in our portfolio, and may impact the availability and cost of hedging instruments and borrowings. If LIBOR rates are no longer available, and we are required to implement substitute indices for the calculation of interest rates under our loan agreements with our borrowers, we may incur significant expenses in effecting the transition, and may be subject to disputes or litigation with customers over the appropriateness or comparability to LIBORtrajectory of the substitute indices, whichvirus worsens.

This macroeconomic environment has had, and could continue to have, an adverse effect on the Company’s business and operations as well as on the business and operations of the Company's borrowers, customers and counterparties. The actual, expected or potential impact of the pandemic resulted in reduction in the level of demand for certain of the Company's products and services, particularly certain lending products. While there has been significant economic recovery and we believe that economic indicators currently point to that recovery continuing, should economic and social impacts of COVID-19 persist or further deteriorate, the macroeconomic environment could have a further adverse effect on our resultsbusiness and operations, including, but not limited to, decreased demand for the Company’s products and services, protracted periods of lower interest rates which may negatively impact the Company's net interest margin, loss of income resulting from forbearances, deferrals and fee waivers provided by the Company to its borrowers, increased credit losses due to deterioration in the financial condition of our borrowers including declining asset and collateral values, which may increase our provision for credit losses and net charge-offs and possible constraints on liquidity and capital. The business operations of the Company may also be disrupted if significant portions of its workforce or those of vendors or third-party service providers are unable to work effectively, including because of illness, quarantines, government actions, restrictions in connection with the pandemic, and technology limitations and/or disruptions. The Company also faces an increased risk of litigation and governmental and regulatory scrutiny as a result of the effects of the pandemic on market and economic conditions and actions taken by governmental authorities in response to those conditions.

As the COVID-19 pandemic continues to evolve, the Company may be subject to governmental vaccination and mask-wearing mandates. A recent vaccination mandate, requiring employees to show proof they have been fully vaccinated or provide a COVID-19 test at least once a week, was overturned by the Supreme Court. While current and future mandates are being challenged in state and federal courts, it is difficult to predict the full impact these mandates, if implemented, on our workforce, business and operations.

A failureThe extent to maintain adequate liquidity could adversely affect ourwhich the COVID-19 pandemic impacts the Company’s business, financial condition and results of operations.

OrganicOptimizing risk adjusted returns, continued organic, diversified growth and diversification of our businessloan and deposit customer base, and improving the deposit mix are essential components of our business strategy. Commercial and consumer banking, for both loan and deposit products, in our primary markets is highly competitive. Our ability to achieve profitable organic growth is also dependent on economic conditions, on the interest rate environment, which is in turn dependent to a large degree on fiscal and monetary policy, and on depositor behavior and preferences. There is no guarantee that we will be able to successfully or profitably execute our organic growthfundamental business strategy.

While acquisitions have not historically been a primary contributor tocomponent of our growth,business strategy, we opportunistically consider potential acquisitions of financial institutions and complementary non-bank businesses. There are risks that may inhibit our ability to successfully execute such acquisitions. We competeacquisitions, such as competition with other financial institutions for acquisition opportunities and there are a limited number of candidates that meet our acquisition criteria. Consequently, we may not be able to identify suitable candidates for acquisitions. If we do identify suitable candidates, there is no assurance that we will be ablepotential acquirers, the ability to obtain the

Growth, whether organic or through acquisition is dependent on the availability of capital and funding. Our ability to raise capital through the sale of stock or debt securities may be affected by market conditions, economic conditions or regulatory changes. There is no assurance that sufficient capital or funding to enable growth will be available in the future, upon acceptable terms or at all.

The primary markets we currently serve are Florida and the New York metropolitan area. Commercial and consumer banking in these markets is highly competitive. Our markets contain not only a large number of community and regional banks, but also a significant presence of the country's largest commercial banks. We compete with other state and national banks as well as savings and loan associations, savings banks and credit unions located in Florida, New York and adjoining states as well as those targeting our markets digitally for deposits and loans. In addition, we compete with financial intermediaries, such as FinTech companies, consumer finance companies, marketplace lenders, mortgage banking companies, insurance companies, securities firms, mutual funds and several government agencies as well as major retailers, all actively engaged in providing various types of loans and other financial services. The variety of entities providing financial services to businesses and consumers, as well as the technologies and delivery channels through which those services are provided are rapidly evolving.

The financial services industry is likely to become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Banks, securities firms and insurance companies can merge under the umbrella of a financial holding company, which can offer virtually any type of financial service, including banking, securities underwriting, insurance (both agency and underwriting) and merchant banking. Increased competition among financial services companies may adversely affect our ability to market our products and services. Technology has lowered barriers to entry and made it possible for banks to compete in our markets without a retail footprint by offering competitive rates, as well as non-banks, including online providers and a growing number of FinTech companies, to offer products and services traditionally provided by banks. Many of our competitors have fewer regulatory constraints and may have lower cost structures. Additionally, due to their size or particular technology capabilities, many competitors may offer a broader range of products and services as well asor may be able to offer better pricing for certain products and services than we can.

Our ability to compete successfully depends on a number of factors, including:

Failure to perform well in any of these areas could significantly weaken our competitive position, which could adversely affect our growth and profitability, which, in turn, could harm our business, financial condition and results of operations.

Crypto-currencies and blockchain technology eventually may be the foundation for greatly enhancing transactional security throughout the banking industry, but also may eventually greatly reduce or alter the need for banks as financial deposit-keepers and intermediaries.

From time to time, we may launch new lines of business or offer new banking products and services, which offerings may significantly increase operational, credit or reputational risks. Significant effort and resources may be required to manage and oversee the successful development, implementation, launch or scaling of new offerings, which effort and resources may be diverted from other of our products or services. While we invest significant time and resources in taxesdeveloping, marketing and other assessments maymanaging new products and services, there are material uncertainties that could adversely affect us.

We are exposed to many types of operational risks, including legal and compliance risk, the risk of fraud or theft by employees or outsiders and operational errors, including clerical or record-keeping errors or those resulting from ineffective processes and controls or faulty or disabled technology. The occurrence of any of these events could cause us to suffer financial loss, face regulatory action and suffer damage to our reputation.

Because the nature of the financial services business involves a high volume of transactions, certain errors may be repeated or compounded before they are discovered and successfully rectified. Our necessary dependence upon automated systems to record and process transactions and our large transaction volume may further increase the risk that technical flaws or employee tampering or manipulation of those systems will result in losses that are difficult to detect. We also may be subject to disruptions of our operating systems arising from events that are wholly or partially beyond our control which may give rise to disruption of service to customers and to financial loss or liability. The occurrence of any of these events could result in a diminished ability to operate our business as well as potential liability to customers and counterparties, reputational damage and regulatory intervention, which could adversely affect our business, financial condition or results of operations.

Our business is highly dependent on the successful and uninterrupted functioning of our information technology and telecommunications systems. We rely on these systems to process new and renewed loans, gather deposits, process customer and other transactions, provide customer service, facilitate collections, and share data across our organization. The failure of these systems could interrupt our operations. We may be subject to disruptions of our information technology and telecommunications systems arising from events that are wholly or partially beyond our control which may give rise to disruption of service to customers. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services exceeds capacity or such third-party systems fail or experience interruptions. If sustained or repeated, a system failure or service denial could result in a deterioration of our ability to process new and renewed loans, gather deposits, process customer transactions, provide customer service, compromise our ability to operate effectively, damage our reputation, result in a loss of customer business, and/or subject us to additional regulatory scrutiny and possible financial liability, any of which could have a material adverse effect on our financial condition and results of operations.

We rely on third parties to provide key components of our business infrastructure and major systems including, but not limited to, core banking systems such as loan servicing and deposit transaction processing systems, cloud based data storage, our electronic funds transfer transaction processing, cash management, and online banking services.services, and computer and networking infrastructure. We have migrated a significant portion of our core information technology systems, data storage and customer-facing applications to private and public cloud infrastructure platforms. If we fail to administer these new environments in a well-managed, secure and effective manner, or if these platforms become unavailable or do not meet their service level agreements for any reason, we may experience unplanned service disruption or unforeseen costs which could result in material harm to our business, financial condition and results of operations. We must successfully develop and maintain information, financial reporting, disclosure, data-protection and other controls adapted to our reliance on outside platforms and providers. In addition, service providers could experience system breakdowns or failures, outages, downtime, cyber-attacks, adverse changes to financial condition, bankruptcy, or other adverse conditions, which could have a material adverse effect on our business and reputation. While we have an established third party risk management framework and select and monitor the performance of third-party vendors carefully, we do not control their actions. Any problems caused by these third parties, including those resulting from disruptions in communication services provided by a vendor, failure of a vendor to handle current or higher volumes, failure of a vendor to provide services for any reason or poor performance of services, or the termination of a third-party software license or service agreement on which any of these systems is based, could adversely affect our ability to deliver products and services to our customers and otherwise conduct our business. In many cases, our operations rely heavily on the secure processing, storage and transmission of information and the monitoring of a large number of transactions on a minute-by-minute basis, and even a short interruption in service could have significant consequences. Financial or operational difficulties of a third-party vendor could also adversely affect our operations if those difficulties interfere with the vendor's

In the normal course of our business, we collect, process, and retain sensitive and confidential client and customer information. Despite the security measures we have in place, our facilities and systems may be vulnerable to cyber attacks,cyber-attacks, security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming and/or human errors, or other similar events, especially because, in the case of any intentional breaches, the techniques used change frequently or are not recognized until launched, and cyber attackscyber-attacks can originate from a wide variety of sources, including third parties.

We provide our customers the ability to bank remotely, including online, via mobile devices and over the telephone. The secure transmission of confidential information over the internet and other remote channels is a critical element of remote banking. Our network could be vulnerable to unauthorized access, computer viruses, phishing schemes and other security breaches. In addition to cyber attackscyber-attacks or other security breaches involving the theft of sensitive and confidential information, hackers recently have engaged in attacks against large financial institutions, particularly denial of service attacks, designed to disrupt key business services such as customer-facing websites. We may be required to spend significant capital and other resources to protect against the threat of security breaches and computer viruses, or to alleviate problems caused by security breaches or viruses. Any cyber attackcyber-attack or other security breach involving the misappropriation, loss or other unauthorized disclosure of confidential customer information could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business.

In addition, we interact with and rely on financial counterparties for whom we process transactions and who process transactions for us and rely on other third parties, as discussed above. Each of these third parties may be targets of the same types of fraudulent activity, computer break-ins, and other cyber security breaches described above. The cyber security measures that they maintain to mitigate the risk of such activity may be different from our own and, in many cases, we do not have any control over the types of security measures they may choose to implement. We may also incur costs as a result of data or security breaches of third parties with whom we do not have a significant direct relationship. As a result of financial entities and technology systems becoming more interdependent and complex, a cyber incident, information breach or loss, or technology failure that compromises the systems or data of one or more financial entities could have a material impact on counterparties or other market participants, including us.

Concerns regarding the effectiveness of our measures to safeguard personal information, or even the perception that such measures are inadequate, could cause us to lose customers or potential customers for our products and services and thereby reduce our revenues.

We have taken measures to implement safeguards to support our operations, but our ability to conduct business may be adversely affected by any significant disruptions to us or to third parties with whom we interact. We have a comprehensive set of information security policies and protocols and a dedicated information security division that reports to the Chief Information Officer, with oversight by the Chief Risk Officer and the Risk Committee of the Board of Directors. The Risk Committee receives regular reporting related to information security risks and the monitoring and management of those risks.

Financial products and services have become increasingly technology driven. Our ability to meet the needs of our customers competitively, and in a cost-efficient manner, is dependent on our ability to keep pace with and pro-actively and quickly respond to technological advances and to invest in new technology as it becomes available. Many of our larger competitors have greater resources to invest in technology than we do and may be better equipped to market new technology-driven products and services. The widespread adoption of new technologies, including, but not limited to, digitally-enabled products and delivery channels and payment systems, could require us to incur substantial expenditures to modify or adapt our existing products and services. Our failure to respond to the impact of technological change could have a material adverse impact on our business, financial condition and results of operations.

Our ability to engage in routine funding and other transactions could be adversely affected by the stability and actions of other financial services institutions. Financial services institutions are interrelated as a result of trading, clearing, servicing,

Adverse developments affecting the overall strength and soundness of the financial services industry as a whole and third parties with whom we have important relationships could have a negative impact on our business even if we are not subject to the same adverse developments.

Further, federal, state and local legislators and regulators regularly introduce measures or take actions that would modify the regulatory requirements applicable to banks, their holding companies and other financial institutions. Changes in laws, regulations or regulatory policies could adversely affect the operating environment for the Company in substantial and unpredictable ways, increase our cost of doing business, impose new restrictions on the way in which we conduct our operations or add significant operational constraints that might impair our profitability. We cannot predict whether new legislation will be enacted and, if enacted, the effect that it, or any implementing regulations, would have on our business, financial condition or results of operations.

We may identify opportunities to complement and expand our business by pursuing strategic acquisitions of financial institutions and other complementary businesses. We must generally receive federal regulatory approval before we can acquire an institution or business. In determining whether to approve a proposed acquisition, federal banking regulators will consider, among other factors, the effect of the acquisition on competition, our financial condition, our future prospects, and the impact of the proposal on U.S. financial stability. The regulators also review current and projected capital ratios and levels, the competence, experience, and integrity of management and its record of compliance with laws and regulations, the convenience and needs of the communities to be served (including the acquiring institution's record of compliance under the CRA) and the effectiveness of the acquiring institution in combating money laundering activities. Such regulatory approvals may not be granted on terms that are acceptable to us, or at all. We may also be required to sell or close branches as a condition to receiving regulatory approval, which condition may not be acceptable to us or, if acceptable to us, may reduce the benefit of any acquisition.

The Bank Secrecy Act, the USA PATRIOT Act, and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective anti-money laundering program and file suspicious activity and currency transaction reports as appropriate. The Financial Crimes Enforcement Network, established by the U.S. Treasury Department to administer the Bank Secrecy Act, is authorized to impose significant civil money penalties for violations of those requirements, and has engaged in coordinated enforcement efforts with the individual federal banking regulators, as well as the U.S. Department of Justice, Drug Enforcement Administration, and Internal Revenue Service. There is also increased scrutiny of compliance with the sanctions programs and rules administered and enforced by the U.S. Treasury Department's Office of Foreign Assets Control.

In order to comply with regulations, guidelines and examination procedures in this area, we dedicate significant resources to the ongoing execution of our anti-money laundering program, continuously monitor and enhance as necessary our policies and procedures and maintain a robust automated anti-money laundering software solution. If our policies, procedures and systems are deemed deficient or the policies, procedures and systems of financial institutions that we may acquire in the future are deemed deficient, we could be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain aspects of our business plan, including our expansion plans.

The CRA, the Equal Credit Opportunity Act, the Fair Housing Act and other fair lending laws and regulations impose nondiscriminatory lending requirements on financial institutions. The Department of Justice and other federal agencies are responsible for enforcing these laws and regulations. A successful challenge to an institution's performance under the CRA or fair lending laws and regulations could result in a wide variety of sanctions, including the required payment of damages and civil money penalties, injunctive relief, imposition of restrictions on mergers and acquisitions activity, and restrictions on expansion activity. Private parties may also have the ability to challenge an institution's performance under fair lending laws in private class action litigation.

Insured depository institutions such as BankUnited are required to pay deposit insurance premiums to the FDIC.FDIC, which maintains a DIF. If the current level of deposit premiums is insufficient for the DIF to meet its funding requirements in the future, special assessments or increases in deposit insurance premiums may be required. A change in BankUnited's risk classification within the FDICs'FDIC's risk-based assessment framework could also result in increased deposit insurance premiums. We are generally unable to control the amount of premiums that we are required to pay for FDIC insurance. If there are additional bank or financial institution failures in the future, we may be required to pay FDIC premiums higher than current levels. Any future additional assessments or increases in FDIC insurance premiums may adversely affect our financial condition or results of operations.

Our business requires the collection and retention of large volumes of customer data, including personally identifiable information in various information systems that we maintain and in those maintained by third parties with whom we contract to provide data services. We are subject to complex and evolving laws and regulations governing the privacy and protection of personal information of individuals (including customers, employees, suppliers and other third parties). For example, our business is subject to the Gramm-Leach-Bliley Act which, among other things: (i) imposes certain limitations on our ability to share nonpublic personal information about our customers with nonaffiliatednon-affiliated third parties; (ii) requires that we provide certain disclosures to customers about our information collection, sharing and security practices and afford customers the right to “opt out” of any information sharing by us with nonaffiliatednon-affiliated third parties (with certain exceptions); and (iii) requires that we develop, implement and maintain a written comprehensive information security program containing appropriate safeguards based on our size and complexity, the nature and scope of our activities, and the sensitivity of customer information we process, as well as plans for responding to data security breaches. Various state and federal banking regulators and states have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in certain circumstances in the event of a security breach. Ensuring that our collection, use, transfer and storage of personal information complies with all applicable laws and regulations can increaseincreases our costs. Furthermore, we may not be able to ensure that all of our customers, suppliers, counterparties and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is

BankUnited's corporate headquarters is located in leased office space in Miami Lakes, Florida. The headquartersWe also lease office space is used forin Manhattan and in Melville, Long Island. Our subsidiaries lease office space in Baltimore, Maryland and operations.Scottsdale, Arizona. At December 31, 2018,2021, we provided banking services at 85 branches67 banking centers located in Florida and New York. In Florida, we had 80 branch locations in 14 Florida counties. Of the 80 Florida branch properties, we leased 77 locations and owned 3 branch locations. In New York, we leased 5 branch locations, including 3 branch locations in New York City, 1 branch location in Brooklyn and 1 branch location in Melville. We also leased office space in Florida at 7 locations excluding the corporate headquarters and in New York at 5 locations.

The Company is involved as plaintiff or defendant in various legal actions arising in the normal course of business. In the opinion of management, based upon advice of legal counsel, the likelihood is remote that the impact of these proceedings, either individually or in the aggregate, would be material to the Company’s consolidated financial position, results of operations or cash flows.

None.

Shares of our common stock trade on the NYSE under the symbol "BKU". The last sale price of our common stock on the NYSE on February 25, 201922, 2022 was $36.73$43.45 per share. As of February 25, 2019,22, 2022, there were 565562 stockholders of record of our common stock.

The information set forth under the caption "Equity Compensation Plan Information" in our definitive proxy statement for the Company's 20192022 annual meeting of stockholders (the "Proxy Statement") is incorporated herein by reference.

The Company declared a quarterly dividend of $0.21$0.23 per share on its common stock for each of the four quarters of 20182021 and 2017,2020, resulting in total dividends for 20182021 and 20172020 of $89.9$83.4 million and $92.2$88.1 million, respectively,respectively; or $0.84$0.92 per common share for each of the years ended December 31, 20182021 and 2017.2020. Dividends from the Bank are the principal source of funds for the payment of dividends on our common stock. The Bank is subject to certain restrictions that may limit its ability to pay dividends to us. See "Business—Regulation and Supervision—Regulatory Limits on Dividends and Distributions". The quarterly dividends on our common stock are subject to the discretion of our board of directors and dependent on, among other things, our financial condition, results of operations, capital requirements restrictions contained in financing instruments and other factors that our board of directors may deem relevant.

The graph set forth below compares the cumulative total stockholder return on an initial investment of $100 in our common stock between December 31, 20132016 and December 31, 2018,2021, with the comparative cumulative total return of such amount on the S&P 500 Index, and the S&P 500 Bank Index and the KBW Nasdaq Regional Bank Index over the same period. Reinvestment of all dividends is assumed to have been made in our common stock.

In evaluating our financial performance, we consider the level of and trends in net interest income, the net interest margin, the cost of deposits, levels and composition of non-interest income and non-interest expense, performance ratios such as the return on average equity and return on average assets and asset quality ratios, including the ratio of non-performing loans to total loans, non-performing assets to total assets, trends in criticized and classified assets and portfolio delinquency and charge-off trends. We consider growth in and the composition of earning assets and deposits, trends in funding mix and cost of funds. We analyze these ratios and trends against our own historical performance, our budgeted performance and the financial condition and performance of comparable financial institutions.

Performance highlights include: