Board Loan Committee — The Board Loan Committee is comprised of eight directors, including our Chairman, Vice Chairman, President and Chief Executive Officer, with five committee members required for a quorum. All real estate secured loans and/or aggregate real estate loan secured relationships of $4.0 million and above or total aggregate non-real estate secured debt relationships exceeding $2.5 million require the ratification of this committee. The committee meets weekly to ratify loans approved by the Bank’s Loan Committee. This committee has approval authority up to our legal lending limit, which was approximately $28.3 million as of December 31, 2016.

•

Board Committee Authorities — The Board Loan Committee is comprised of four directors, with three committee members required for a quorum. All loan relationships in excess of $20,000,000 require the approval of this committee. The committee meets weekly, as needed, to review loans approved by the AltabankTM Committee. This committee has approval authority up to our legal lending limit, which was approximately $53.8 million as of December 31, 2019.

Our loan administration is managed by PIB’s Senior Vice President — Loan Administration and staffed to maintain all credit policies and procedures, loan documentation, disbursement of loan proceeds and to review

•

Our credit department is staffed to maintain all credit policies and procedures, loan documentation, disbursement of loan proceeds, and manage the integrity of the credit risk rating system;

Should an insured depository institution controlled by a bank holding company be “significantly undercapitalized” under the applicable federal bank capital ratios, or if the bank subsidiary is “undercapitalized” and has failed to submit an acceptable capital restoration plan or has materially failed to implement such a plan, banking regulators (in the case of the Bank, the FDIC and the UDFI) may choose to require prior Federal Reserve approval for any capital distribution by the bank holding company. In addition, since we are a legal entity separate and distinct from the Bank and do not conduct stand-alone operations, an ability to pay dividends depends on the ability of the Bank to pay dividends to us and the FDIC and the UDFI may, under certain circumstances, prohibit the payment of dividends to us from the Bank as described below in “Bank Regulation—Bank Dividends.”

Capital Regulations – U.S. Basel III Capital Rules

In July 2013, federal banking regulators, including the Federal Reserve and the FDIC, adopted the U.S. Basel III Capital Rules, implementing many aspects of the Basel III Capital Standards. The U.S. Basel III Capital Rules impose higher risk-based capital and leverage requirements than those previously in place. In order to avoid restrictions on capital distributions or discretionary bonus payments to executives, a covered banking organization must maintain a capital conservation buffer on top of its minimum risk-based capital requirements. This buffer must consist solely of Tier 1 Common Equity, but the buffer applies to all three measurements (Common Equity Tier 1, Tier 1 Capital and total capital). The capital conservation buffer will be phased in incrementally over time, becoming fully effective on January 1, 2019, and will consist of an additional amount of common equity equal to 2.5% of risk-weighted assets. The U.S. Basel III Capital Rules also increase the risk weight for certain assets, meaning that more capital must be held against such assets. For example, commercial real estate loans that do not meet certain new underwriting requirements must be risk-weighted at 150% rather than the current 100%.

Additionally, the Basel III Capital Standards provide for the deduction of three categories of assets: (i) deferred tax assets arising from temporary differences that cannot be realized through net operating loss carrybacks (net of related valuation allowances and of deferred tax liabilities),; (ii) mortgage-servicing assets (net of associated deferred tax liabilities); and (iii) investments in more than 10% of the issued and outstanding common shares of unconsolidated financial institutions (net of associated deferred tax liabilities). Accumulated other comprehensive income (“AOCI”) is presumptively included in Common Equity Tier 1 Capital and often would operate to reduce this category of capital. The U.S. Basel III Capital Rules provided a one-time opportunity at the end of the first quarter of 2015 for covered banking organizations to opt out of much of this treatment of AOCI. We opted out of this treatment.

In December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms, which standards are commonly referred to as Basel IV. Among other things, these standards revise the Basel Committee’s standardized approach for credit risk (including the recalibration of the risk weights and the introduction of new capital requirements for certain “unconditionally cancellable commitments,” such as unused credit card lines of credit) and provides a new standardized approach for operational risk capital. Under the Basel framework, these standards will generally be effective on January 1, 2022, with an aggregate output floor phasing in through January 1, 2027. Under the current U.S. capital rules, operational risk capital requirements and a capital floor apply only to advanced approaches institutions, and not to the Bank. The impact of Basel IV on us will depend on the manner in which it is implemented by the federal bank regulators.

For a detailed discussion of PUB and the Bank’s actual capital ratios and capital adequacy, see “Capital Resources” in “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations” and “Note 9 – Regulatory Capital Matters” in Item“Item 8. Financial Statements and Supplementary Data.”

Bank Regulation

The BankAltabank^TM is a Utah state-chartered commercial bank, and is subject to supervision and regulation by the UDFI and the FDIC. The UDFI and the FDIC supervise and regulate all areas of the Bank’s operations, including, without limitation, the making of loans, deposit operations, the conduct of the Bank’s corporate affairs, and the satisfaction of capital-adequacy requirements, the payment of dividends, and the establishment or closing of banking offices. The UDFI and the FDIC periodically examine the Bank’s operations and financial condition and compliance with federal consumer-protection laws. In addition, the Bank’s deposit accounts are insured by the FDIC to the maximum extent permitted by law, and the FDIC has certain enforcement powers over the Bank.Altabank^TM.

Capital Adequacy

See “Holding Company Regulation—Capital Regulations” above.

Capitalization Levels and Prompt Corrective Action

Federal law and regulations establish a capital-based regulatory scheme designed to promote early intervention for troubled banks and require the FDIC to choose the least expensive resolution of bank failures. The

capital-based regulatory framework contains five categories of regulatory capital requirements, including “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.” To qualify as a “well capitalized” institution, a bank must have a leverage ratio of no less than 5%5.0%, a common equity to Tier 1 Capital ratio of no less than 6.5%, a Tier 1 Capital ratio of no less than 6%8.0%, and a total risk-based capital ratio of no less than 10%10.0%, and a bank must not be under any order or directive from the appropriate regulatory agency to meet and maintain a specific capital level. Generally, a financial institution must be “well capitalized” before the Federal Reserve will approve an application by a bank holding company to acquire a bank or merge with a bank holding company, and the FDIC applies the same requirement in approving bank merger applications.  As of December 31, 2019, Altabank^TM met these capital levels.

Immediately upon becoming undercapitalized, a depository institution becomes subject to the provisions of Section 38 of the Federal Deposit Insurance Act, or the FDIA, which:which, among other things: (i) restrictrestricts payment of capital distributions and management fees; (ii) requirerequires that the FDIC monitor the condition of the institution and its efforts to restore its capital; (iii) requirerequires submission of a capital restoration plan; (iv) restrictrestricts the growth of the institution’s assets; and (v) requirerequires prior approval of certain expansion proposals. Bank holding companies controlling depository institutions can be called upon to increase the depository institution’s capital and to partially guarantee the institutions’institution’s performance under their capital restoration plans. The appropriate federal banking agency for an undercapitalized institution also may take any number of discretionary supervisory actions if the agency determines that any of these actions is necessary to resolve the problems of the institution at the least possible long-term cost to the FDIC’s Deposit Insurance Fund, subject in certain cases to specified procedures. These discretionary supervisory actions include: (i) requiring the institution to raise additional capital; (ii) restricting transactions with affiliates; (iii) requiring divestiture of the institution or the sale of the institution to a willing purchaser; (iv) requiring the institution to change and improve its management; (v) prohibiting the acceptance of deposits from correspondent banks; (vi) requiring prior Federal Reserve approval for any capital distribution by a bank holding company controlling the institution; and (vii) any other supervisory action that the agency deems appropriate. These and additional mandatory and permissive supervisory actions may be taken with respect to significantly undercapitalized and critically undercapitalized institutions.

The Bank currently exceedsAs of December 31, 2019, Altabank^TM exceeded the requirements contained in the applicable regulations, policies and directives pertaining to capital adequacy to be classified as “well capitalized.” Rapid growth, poor loan portfolio performance, or poor earnings performance, or a combination of these or other factors, could change the Bank’s capital position in a relatively short period, of time, making additional capital infusions necessary.

Notably, the thresholds for each of the five categories for regulatory capital requirements were recently revised pursuant to the U.S. Basel III Capital Rules. Under these rules, which took effect on January 1, 2015, a well-capitalized insured depository institution is one (i) having a total risk-based capital ratio of 10 percent or greater, (ii) having a Tier 1 risk-based capital ratio of 8 percent or greater, (iii) having a Core Equity Tier 1 capital ratio of 6.5 percent or greater, (iv) having a leverage capital ratio of 5 percent or greater and (v) that is not subject to any order or written directive to meet and maintain a specific capital level for any capital measure. We meet these revised capital levels.

It should be noted that the minimum ratios referred to above in this section are merely guidelines, and the bankBank regulators possess the discretionary authority to require higher capital ratios.

Bank Reserves

The Federal Reserve requires all depository institutions, even if not members of the Federal Reserve, to maintain reserves against some deposit accounts. The balances maintained to meet the reserve requirements imposed by the Federal Reserve may be used to satisfy liquidity requirements. An institution may borrow from the Federal Reserve Bank “discount window” as a secondary source of funds, provided thatif the institution meets the Federal Reserve Bank’s credit standards.

Bank Dividends

Utah law places restrictions on the declaration of dividends by Utah state-chartered banks to their shareholders. This may decrease any amount available for the payment of dividends in a particular period if the surplus funds for the Bank failsfail to comply with this limitation. The FDIC and the UDFI may, under certain

circumstances, prohibit the payment of dividends to PUB from the Bank.Altabank^TM. Utah corporate law also requires that dividends can only be paid out of funds legally available therefor.

Limitations on Brokered Deposits

Applicable rules regarding capital requirements under the FDIC’s prompt corrective action regulations limit the ability of banks to raise funds that meet the definition of “brokered deposits” under that regulation. To avoid the applicability of this limitation, the Bank must maintain the status of a “well capitalized” institution.

Insurance of Accounts and Other Assessments

FDIC deposit insurance is critical to the continued operation of the Bank. The Bank pays deposit insurance assessments to the FDIC’s Deposit Insurance Fund, which isare determined through a risk-based assessment system. The Bank’s deposit accounts are currently insured by the Deposit Insurance Fund, generally up to a maximum of $250,000 per separately insured depositor. The Bank pays assessments to the FDIC for such deposit insurance. Under the current assessment system, the FDIC assigns an institution to a risk category based on the institution’s most recent supervisory and capital evaluations, which are designed to measure risk. Under the FDIA,Federal Deposit Insurance Act, the FDIC may terminate a bank’s deposit insurance upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order, agreement or condition imposed by the FDIC.

Restrictions on Transactions with Affiliates

The Bank is subject to sections 23A and 23B of the Federal Reserve Act, or FRA, and the implementing of Regulation W by the Federal Reserve’s implementing Regulation W.Reserve. An affiliate of a bank is any company or entity that controls, is controlled by or is under common control with the bank.Bank. Accordingly, certain asset transactions and contracts, between PUB, the Bank and any non-bank subsidiaries are subject to a number of restrictions. All such transactions, as well as contracts entered into between the Bank and affiliates, must be on terms that are no less favorable to the Bank than those that would be available from non-affiliated third parties.

Loans to Insiders

Loans to executive officers, directors or principal shareholders are subject to restrictions under Sections 22(g) and 22(h) of the FRA and the Federal Reserve’s implementing Regulation O (collectively, “Reg. O”). From time to time, the Bank makes loans to executive officers, directors and principal shareholders on terms permitted by Reg. O. We believe the Bank is in compliance with Reg. O and, therefore, we believe we are in compliance with the Sarbanes-Oxley Act of 2002 (“SOX”). All loans from the Bank to executive officers, directors or principal shareholders are made in the ordinary course of business, are of a type generally made available to the public and are on market terms no more favorable than those offered to persons not related to the Bank, except for the waiver of certain loan fees and a minor reduction in certain loan interest rates as part of a benefit program as allowed by Reg. O.

Change in Control

Subject to certain exceptions, the BHCA and the Change in Bank Control Act require prior approval from the Federal Reserve and/or the FDIC for any person or company to acquire “control” of a bank or a bank holding company. Control is conclusively presumed to exist if an individual or company acquires 25% or more of any class of voting securities, and in general is presumed to exist if a person acquires 10 percent or more, but less than 25%, of any class of voting securities. In certain cases, a company may also be presumed to have control under the BHCA if it acquires 5% or more of any class of voting securities. Control may also be deemed to exist where a person or company is found to hold “controlling influence” over a bank or bank holding company.

Community Reinvestment Act

The Community Reinvestment Act (“CRA”)CRA and its implementing regulations are intended to encourage banks to help meet the credit needs of their service areas, including low- and moderate-income neighborhoods, consistent with safe and sound operations. The prudential bank regulatory agencies are required to assign and make public a rating of a bank’s performance under the CRA as either “outstanding,” “satisfactory,” “needs to improve,”

or “substantial noncompliance.” The federal banking agencies consider a bank’s CRA rating when a bank submits an application to establish banking centers, merge, or acquire the assets and assume the liabilities of another bank. In the case of a bank holding company, the CRA performance record of all banks involved in the merger or acquisition are reviewed in connection with the filing of an application to acquire ownership or control of shares or assets of a bank or to merge with any other financial holding company. A less-than-satisfactory rating can substantially delay, block or impose conditions on the transaction. In its last CRA examination, the BankAltabank^TM received a rating of “outstanding.“satisfactory.”

In April 2018, the United States Department of Treasury issued a memorandum to the Federal banking regulators with recommended changes to the CRA’s implementing regulations to reduce their complexity and associated burden on banks. Leaders of the federal banking agencies recently have indicated their support for revising the CRA regulatory framework, and on August 28, 2018, the Office of the Comptroller of the Currency (“OCC”) issued an advance notice of proposed rulemaking to solicit ideas for building a new CRA framework. Subsequently, the FDIC joined the OCC in a joint notice of proposed rulemaking in December 2019.  The joint rule issued by the OCC and FDIC will be applicable to the Bank upon completion.

Interstate Branching

The Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”) provides that adequately capitalized and managed bank holding companies are permitted to acquire banks in any state. In addition, banks are permitted to establish branches in any state if that state would permitpermits the establishment of the branch by a state bank chartered in that state, although branchingsetting up a branch remains subject to applicable regulatory approval and adherence to applicable legal requirements.

Anti-Money Laundering and Economic Sanctions

The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (the “USA PATRIOT Act”) provides the federal government with additional powers to address terrorist threats. This has been implemented through enhanced domestic security measures, expanded surveillance powers, increased information sharing and broadened anti-money laundering requirements. By way of amendments to the Bank Secrecy Act, or the BSA, the USA PatriotPATRIOT Act imposed new requirements that obligate financial institutions, such as banks, to take certain steps to monitor and control the risks associated with money laundering and terrorist financing.

Among other requirements, the USA PatriotPATRIOT Act and implementing regulations require banks to establish anti-money laundering programs that include, at a minimum:

Additionally, the USA PatriotPATRIOT Act requires each financial institution to develop a customer identification program, or CIP, as part of its anti-money laundering program. The key components of the CIP are identification, verification, government list comparison, notice and record retention. The purpose of the CIP is to enable the financial institution to determine the true identity and anticipated account activity of each customer.client. To make this determination, among other things, the financial institution must collect certain information from customersclients at the time they enter into the customerclient relationship with the financial institution. This information must be verified within a reasonable time through documentary and non-documentary methods. Furthermore, all customersclients must be screened against any CIP-related government lists of known or suspected terrorists. Financial institutions are also required to comply with various reporting and recordkeeping requirements. The Federal Reserve and the FDIC consider an applicant’s effectiveness in combating money laundering, among other factors, in connection with an application to approve a bank merger or acquisition of control of a bank or bank holding company.

Likewise, the Office of Foreign Assets Control, or OFAC, is responsible for helping to ensure that U.S. entities do not engage in transactions with the subjects of U.S. sanctions, as defined by various Executive Orders, laws, regulations, treaties, and related interpretations. OFAC assembles and provides lists of names of persons and

organizations suspected of aiding, harboring or engaging in terrorist acts. If either Banka bank finds a name on any transaction, account or wire transfer that is on an OFAC list, it must freeze such account, file a suspicious activity report and notify appropriate authorities.

The Bank has adopted policies, procedures and controls to comply with the BSA, the USA PatriotPATRIOT Act and OFAC regulations.

Regulatory Enforcement Authority

Federal and state banking laws grant substantial enforcement powers to federal and state banking regulators. This enforcement authority includes, among other things, the ability to assess civil money penalties, to issue cease and desist or removal orders and to initiate injunctive actions against banking organizations and “institution-affiliated parties,” such as management, employees and agents. In general, these enforcement actions may be initiated for violations of laws and regulations and unsafe or unsound practices. Other actions or inactions may provide the basis for enforcement action, including misleading or untimely reports filed with regulatory authorities. When issued by a banking regulator, cease-and-desistcease and desist and similar orders may, among other things, require affirmative action to correct any harm resulting from a violation or practice, including restitution, reimbursement, indemnifications or guarantees against loss. A bank may also be ordered to restrict its growth, dispose of certain assets, rescind agreements or contracts, or take other actions determined to be appropriate by the ordering regulatory agency.

Loan Concentrations

The FDIC has issued guidance recommending that if certain categories of commercial real estate (“CRE”) loans and acquisition, development and construction (“ADC”) loans exceed certain thresholds, then heightened risk management practices should be employed to mitigate risk. As of December 31, 2016,2019, our ADC and CRE and ADC loans did not exceed those thresholds. An increase in ADC loan concentration could cause our ratio for ADC loans to increase and even exceedwere within the thresholds.thresholds set by the FDIC. We have exceeded these thresholds at times in the past and may do so again in the future. If we exceed the thresholds and do not manage the risk of our CRE and ADC loans, we may be subject to regulatory scrutiny, such as a requirement to raise additional capital, reduce our loan concentrations or undertake other remedial actions.

Federal Home Loan Bank System

In 2015 the Federal Home LoanThe Bank of Des Moines and the Federal Home Loan Bank of Seattle completed their merger. As a result, the Bank is now a member of and owns stock in the Federal Home Loan Bank of Des Moines.

Privacy and Data Security

Federal and state law contains extensive consumer privacy protection provisions.  Under the Gramm–Leach–Bliley Act, also known as the Financial Services Modernization Act of 1999 (“GLBA”), federal banking regulators adopted rules limiting the ability of financial institutions to disclose non-public information about consumers to non-affiliated third parties. The rules require disclosure of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to non-affiliated third parties. The GLBA also directed federal regulators to prescribe standards for the security of consumer information. The Bank is subject to such standards, as well as standards for notifying customersclients in the event of a security breach.

Other federal and state laws and regulations affect the Company’s and the Bank’s ability to share certain information with affiliates and non-affiliates for marketing and/or non-marketing purposes, or to contact clients with marketing offers.

Like other lenders, the Bank uses credit bureau data in its underwriting activities. Use of such data is regulated under the Fair Credit Reporting Act (the “FCRA”), and the FCRA also regulates reporting information to credit bureaus, prescreening individuals for credit offers, sharing of information between affiliates, and using affiliate data for marketing purposes. Similar state laws may impose additional requirements on the Company and the Bank.

Cybersecurity

The federal banking regulators, as well as the SEC and related self-regulatory organizations, regularly issue guidance regarding cybersecurity that is intended to enhance cybersecurity risk management among financial institutions. A financial institution is expected to establish lines of defense and to ensure that its risk management processes also address the risk posed by potential threats to the institution. A financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the institution’s operations after a cyberattack. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations if the institution or its critical service providers fall victim to a cyberattack.

To control cyber-security risk, we maintain active information security programs that are designed to conform with Federal Financial Institutions Examination Council (“FFIEC”) guidance. These information security programs are aligned with our operational risks and are overseen by executive management, and the Board. These programs involve the assessment of risks, continual monitoring and review of threats, the evaluation of the effectiveness of controls to mitigate risks, and review of incident response plans for each identified threat. We also utilize appropriate cybersecurity insurance that protects against certain losses, expenses, and damages associated with cybersecurity risk.

Further, we recognize our role in the overall industry, and have adopted a comprehensive model based off of the National Institute of Standards and Technology's Cyber Security Framework. We also fully participate in the federally recognized financial sector information sharing organization structure, known as the Financial Services Information Sharing and Analysis Center. Digital technology is constantly evolving, and new and unforeseen threats and actions by others may disrupt operations or result in losses beyond our risk control thresholds. Although we invest substantial time and resources to manage and reduce cybersecurity risk, it is not possible to completely eliminate this risk.

We believe that effective management of operational risk, defined as the risk of loss resulting from inadequate or failed internal processes, people, and systems, or from external events, plays a major role in both the level and the stability of our profitability. Our Enterprise Risk Management department oversees an enterprise-wide framework intended to identify, assess, control, monitor, and report on operational risks. These processes support our goals to minimize future operational losses and strengthen our performance by maintaining sufficient capital to absorb operational losses that are incurred.

Consumer Laws and Regulations

The Bank is also subject to a number of other federal and state consumer laws and regulations that are designed to protect consumers in transactions with banks. While the list set forth below is not exhaustive, these laws and regulations include the Truth-in-Lending Act, the Truth-in-Savings Act, the Electronic FundsFund Transfer Act, the Expedited Funds Availability Act, the Check Clearing for the 21st Century Act, the Fair Credit Reporting Act,FRCA, the Fair Debt Collection Practices Act, the Equal Credit Opportunity Act, the Fair Housing Act, the Home Mortgage Disclosure Act, the Fair and Accurate Credit Transactions Act, the Servicemembers Civil Relief Act, the Military Lending Act, and the Real Estate Settlement Procedures Act, among others.Act. These laws and regulations mandate certain

disclosure requirements and regulate the manner in which financial institutions must deal with consumers when offering consumer financial products and services.

Rulemaking authority for most federal consumer-financial-protection laws rests with the CFPB.Consumer Financial Protection Bureau (“CFPB”). The CFPB also has broad authority to prohibit unfair, deceptive andor abusive acts andor practices, or UDAAP, and to investigate and penalize financial institutions that violate this prohibition. While the statutory language of the Dodd-Frank Act sets forth the standards for acts and practices that violate the prohibition on UDAAP, certain aspects of these standards are untested, and thus it is currently not possible to predict how the CFPB will exercise this authority.

The Dodd-Frank Act also authorized the CFPB to establish certain minimum standards for the origination of residential mortgages, including a determination of the borrower’s ability to repay. The rules also impose both underwriting standards and limits on the terms, including pricing, of such loans. In 2014, the CFPB adopted regulations that combine mortgage disclosures required by the Real Estate Settlement Procedures Act and its implementing Regulation X, and the Truth-in-Lending Act and its implementing Regulation Z. This new disclosure scheme requiresrequired mortgage lenders such as the Bank to substantially revise their loan-origination and disclosure systems in order to comply with the new regulations. The Bank has implemented necessary modifications in order to meet these requirements. In 2018, portionsPortions of a significant expansion of the Home Mortgage Disclosure Act and its implementing Regulation C will take effect.took effect in 2018.

Other Dodd-Frank Act Reforms

Volcker Rule

The Volcker Rule prohibits insured depository institutions, such as the Bank, and their affiliates, such as PUB, from (i) engaging in “proprietary trading,” and (ii) investing in or sponsoring certain types of funds, or covered funds, in each case subject to certain limited exceptions. The final rules impose significant compliance and reporting obligations on banking entities.

In May 2018, the five federal agencies with rulemaking authority with respect to the Volcker Rule released a proposal to revise the Volcker Rule. The Federal Reserve recently extendedproposal would tailor the conformance period forVolcker Rule’s compliance requirements to the amount of a firm’s trading activity, revise the definition of trading account, clarify certain covered fundskey provisions in the Volcker Rule, and modify the information companies are required to July 21, 2017. provide the federal agencies. If adopted, the proposed changes to the definition of a trading account would likely expand the scope of investing and trading activities subject to the Volcker Rule’s restrictions.

PUB is reviewing the scope of any compliance program that may be required but is of the view that the impact of the Volcker Rule will not be material to its business operations.

Executive Compensation and Corporate Governance

The Dodd-Frank Act requires public companies to include, at least once every three years,years; a separate non-binding “say-on-pay” vote in their proxy statement by which shareholders may vote on the compensation of the public company’s named executive officers. In addition, if such public companies are involved in a merger, acquisition, or consolidation, or if they propose to sell or dispose of all or substantially all of their assets, shareholders have a right to an advisory vote on any golden parachute arrangements in connection with such transaction. Other provisions of the act may impactaffect our corporate governance. In addition, the act requires the SEC to adopt rules requiring all exchange-traded companies to adopt claw-back policies for incentive compensation paid to executive officers in the event of accounting restatements based on material non-compliance with financial reporting requirements. We are an “Emerging Growth Company” under the JOBS Act and therefore subject to reduced disclosure requirements related to executive compensation.

Future Legislative and Regulatory Developments

Various legislative acts are from time to time enacted by Congress or by the Utah Legislature. Additionally, regulatory agencies frequently modify or create new regulationregulations and guidance. Such acts and modifications or new regulation and guidance may change the environment in which PUB and the Bank operate in substantial and unpredictable ways. We cannot determine the ultimate impact that potential legislation, if enacted, or implementing regulations and guidance with respect thereto, would have upon PUB’s or the Bank’s financial condition or results of operations. Finally, on February 3, 2017, President Trump signed an executive order pursuant to which he ordered the Secretary of the Treasury to consult with the heads of the member agencies of the Financial Stability Oversight Council on the extent to which existing laws, treaties, regulations, guidance, reporting and recordkeeping requirements, and other government policies promote certain core principles laid out in the executive order. This may result in repeals of or amendments to existing laws, treaties, regulations, guidance, reporting and recordkeeping requirements and other government policies.

State Corporate Law Restrictions

As Utah corporations, PUB and the Bank are subject to certain limitations and restrictions under applicable Utah corporate law. For example, state-lawstate law restrictions in Utah include limitations and restrictions relating to indemnification of directors; distributions to shareholders; transactions involving directors, officers, or interested shareholders; maintenance of books, records, and minutes; and observance of certain corporate formalities.

Corporate Governance and Accounting Legislation

SOX established a new accounting oversight board that enforces auditing standards and restricts the scope of services that accounting firms may provide to their public-company audit clients. Among other things, SOX also (i) requires chief executive officers and chief financial officers to certify to the accuracy of periodic reports filed with the SEC; (ii) imposes new disclosure requirements regarding internal controls, off-balance-sheet transactions, and pro forma (non-GAAP) disclosures; (iii) accelerates the time frame for reporting of insider transactions and periodic disclosures by public companies; and (iv) requires companies to disclose whether or not they have adopted a code of ethics for senior financial officers and whether the audit committee includes at least one “audit committee financial expert.” As a public reporting company, we are subject to requirements under SOX and related rules and regulations issued by the SEC and NASDAQ. We incur additional expense as a result of SOX and these rules and regulations.

Effects of Government Monetary Policy

Our earnings and growth are affected not only by general economic conditions, but also by the fiscal and monetary policies of the Federal Government, particularly the Federal Reserve. The Federal Reserve can and does implement national monetary policy for such purposes as curbing inflation, combating recession, and facilitating the national debt. The nature and impact of future changes in monetary policies and their impact on us cannot be predicted with certainty.

Item 1A. RiskRisk Factors

An investment in the Company’s common shares involves certain risks. The following is a discussion of the most significant risks and uncertainties that may affect the Company’s business, financial condition and future results.

Risks Relating to Our Business and Market

As a business operating in the financial services industry, our business and operations may be adversely affected in numerous and complex ways by weak economic conditions.

Our businesses andbusiness operations, which primarily consist of lending money to customersclients in the form of loans, borrowing money from customersclients in the form of deposits and investing in securities, are sensitive to general business and economic conditions in the United States. If the U.S. economy weakens, our growth and profitability from our lending, deposit and investment operations could be constrained. Uncertainty about the federal fiscal policymaking process, the mediumthree to ten year and long-termlonger fiscal outlook of the federal government,economy, and future tax rates is a concern for businesses, consumers and investors in the United States. In addition, economic conditions in foreign countries could affect the stability of global financial markets, which could hinder U.S. economic growth. Weak economic conditions are characterized by deflation,by: i) deflation; ii) fluctuations in debt and equity capital markets,markets; iii) a lack of liquidity and/or depressed prices in the secondary market for mortgage loans,loans; iv) increased delinquencies on mortgage, consumer and commercial loans,loans; v) residential and commercial real estate price declinesdeclines; and vi) lower home sales and commercial activity. The current economic environment is also characterized by interest rates at historically low levels, which impacts our ability to attract deposits and to generate attractive earnings through our investment portfolio. All of these factors are detrimental toadversely affect our business, and the interplay between these factors can be complex and unpredictable. Our business is also significantly affected by monetary and related policies of the U.S. federal government and its agencies. Changes in any of these policies are influenced by macroeconomic conditions and other factors that are beyond our control. Adverse economic conditions and government policy responses to such conditions could have a material adverse effect on our business, financial condition and results of operations.

We were affected negatively by the weak economic conditions present during the recent financial crisis that began in 2008, and our total assets and annual net income dropped to lows of $810.9 million and $3.1 million, respectively in 2009 and 2008, due to these economic conditions. A future crisis or similar weak economic conditions could affect us similarly, which would negatively impact our business, financial condition and results of operations.

A substantial majority of our loans and operations are in Utah, Salt Lake, Davis, Cache, Box Elder and Washington counties, andCounties; therefore, our business is particularly vulnerable to a downturn in the local economies of those counties.

Unlike larger financial institutions that are more geographically diversified, our business is concentrated primarily in the state of Utah. As of December 31, 2016,2019, approximately 79.6%82.1% of our loans were secured by real estate, the substantial majority of which are located in Utah, Salt Lake, Davis, Cache, Box Elder, and Washington counties. If the local economy, and particularly the real estate market, declines, the rates of delinquencies, defaults, foreclosures, bankruptcies and losses in our loan portfolio would likely increase. This risk increases for our variable rate loans, which represent 63.5%79.2% of our loans. As a result of this lack of diversification in our loan portfolio, a downturn in the local economy generally and real estate market specifically could significantly reduce our profitability and growth and adversely affect our financial condition.condition and operations.

A large portion of our loan portfolio is tied to the real estate market and we may be negatively impacted by downturns in that market.

The majority of loans in our loan portfolio are real estate related, includingconsisting of loans for construction and land development projects, and for the purchase, improvement or refinancing of residential and commercial real estate. A downturn in the real estate market could increase loan delinquencies, defaults and foreclosures, and significantly impair the value of our collateral and our ability to sell the collateral upon foreclosure. The real estate collateral in each case provides an alternate source of repayment in the event of default by the borrowerclient and may deteriorate in value during the time the credit is extended. If real estate values decline, it is also more likely that we would be required to increase our allowance for loan losses. If during a period of reduced real estate values we are required to liquidate the property collateralizing a loan to satisfy the debt or to increase our allowance for loan losses, it could materially reduce our profitability and adversely affect our financial condition.

As of December 31, 2016, 21.4%2019, 16.3% of our loan portfolio consisted of real estate construction, and acquisition and land development loans, which generally have a higher degree of risk than long-term financing of existing properties because repayment depends on the completion of the project and usually on the sale or long term financing of the property. In addition, these loans are often “interest-only loans,” which normally require only the payment of interest accrued prior to maturity. Interest-only loans carry greater risk than principal and interest loans because no principal is paid prior to maturity. This risk is particularly apparent during periods of rising interest rates and declining real estate values. If there is a significant decline in the real estate market due to a material increase in interest rates or for other reasons, many of these loans could default and result in foreclosure. Moreover, most of these loans are for projects located in our primary market area. If we are forced to foreclose on a project prior to completion, we may not be able to recover the entire unpaid portion of the loan or we may be required to fund additional money to complete the project or hold the property for an indeterminate period of time.period. Any of these outcomes may result in losses and reduce our earnings.

The FDIC has given guidance recommending that if the sum of (i) certain categories of commercial real estate, or CRE loans and (ii) acquisition, development and construction, or ADC loans exceeds 300% of total risk-based capital, or if ADC loans exceed 100% of total risk- based capital, heightened risk management practices should be employed to mitigate risk. As of December 31, 2016,2019, our ratio for the sum of CRE and ADC loans was 202.0%204% and our ratio for ADC loans was 101.8%84%.  Our concentration in ADC loans is cyclical and tends to increase in the second and third quarters of each year as demand for ADC loans increases. An increase in ADC loan concentration could cause our ratio for ADC loans to increase and even exceed the FDIC’s guideline. We have exceeded these guidance ratios at times in the past and may do so in the future.  We actively monitor and believe that we effectively manage our CRE and ADC loan concentrations.  If we exceed the FDIC’s guidelines and do not effectively manage the risk of our CRE and ADC loans, we may be subject to regulatory scrutiny, including a requirement to raise additional capital, reduce our loan concentrations or undertake other remedial actions.

We are a community bank and our ability to maintain our reputation is critical to the success of our business and the failure to do so may materially and adversely affect our performance.

We operate community banks, and our reputation is one of the most valuable components of our business. As such, we strive to conduct our business in a manner that enhances our reputation. This is done, in part, by recruiting, hiring and retaining associates who share our core values of being an integral part of the communities we serve, delivering superior service to our customers and caring about our customers and associates. If our reputation is negatively affected by the actions of our associates or otherwise, our business and, therefore, our operating results may be materially and adversely affected.

We could suffer material credit losses if we do not appropriately manage our credit risk.

There are risks inherent in making any loan, including risks inherent in dealing with individual borrowers,clients, risks of non-payment, risks resulting from uncertainties as to the future value of collateral and risks resulting from changes in economic and industry conditions. Changes in the economy canmay cause the assumptions that we made at origination to change and canmay cause borrowersclients to be unable to make payments on their loans, and significantloans.  Significant changes in collateral values canmay cause us to be unable to collect the full value of loans we make. There is no assurance that our credit risk monitoring and loan approval procedures are or will be adequate or will reduce the inherent risks associated with lending. Our credit administration personnel, and policies and procedures may not adequately adapt to changes in economic or any other conditions affecting customersclients and the quality of our loan portfolio. Any failure to manage such credit risks may materially adversely affect our business, financial condition and results of operations.

The small- to medium-sizedsmall-to-medium sized businesses that we lend to may have fewer resources to weather adverse business developments, which may impair their ability to repay a loan, and such impairment could adversely affect our results of operations and financial condition.

We focus our business development and marketing strategy primarily on small-to medium-sizedsmall-to-medium sized businesses. Small-to medium-sizedSmall-to-medium sized businesses frequently have smaller market shares than their competition, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete and may experience substantial volatility in operating results, any of which may impair a borrower’sclient’s ability to repay a loan. In addition, the success of a small-small to medium-sizedmedium sized business often depends on the management skills, talents and efforts of one or two people or a small group of people, and the death, disability or resignation of one or more of these people could have a material adverse impact on the business and its ability to repay its loan. If general economic conditions negatively impactaffect Utah and small- to medium-sizedsmall-to-medium sized businesses are adversely affected or our borrowersclients are otherwise affected by adverse business conditions or developments, our business, financial condition and results of operations could be adversely affected.

If we are not able to maintain our past levels of growth, our future prospects and competitive position could be diminished and our profitability could be reduced.

We may not be able to sustain our deposit, loan, and asset growth at the rate we have enjoyed during the past several years. Our growth over the past several years has been driven primarily by a strong residential housing and commercial real estate market in our market areas and our ability to identify attractive expansion opportunities. Although the local economic market conditions are not exhibiting signs of slowing, we are seeing credit opportunities tightening.  A downturn in local economic market conditions, particularly in the real estate market, a failure to attract and retain high performing associates,employees, heightened competition from other financial services providers, and an inability to attract additional core deposits and lending customers,clients, among other factors, could limit our ability to grow as rapidly as we have in the past and as such could have a negative effect on our business, financial condition and results of operations.

If we are unable to manage our growth effectively, we may incur higher-than-anticipatedhigher than anticipated costs, and our ability to execute our growth strategy could be impaired.

We expect to continue to grow our assets and deposits by increasing our product and service offerings and expanding our operations through new branches and possibly acquisitions. Our ability to manage growth successfully will depend on our ability to:

Mergers and acquisitions also frequently result in the recording of goodwill and other intangible assets, which are subject to potential impairments in the future and that could harm our financial results. In addition, if we finance acquisitions by issuing convertible debt or equity securities, our existing shareholders may be diluted, which could affect the market price of our common shares. As a result, if we fail to properly evaluate mergers, acquisitions or investments, we may not achieve the anticipated benefits of any such merger or acquisition, and we may incur costs in excess of what we anticipate. The failure to successfully evaluate and execute mergers, acquisitions or investments or otherwise adequately address these risks could materially harm our business, financial condition and results of operations.

Our allowance for loan losses may not be adequate to cover actual losses.

A significant source of risk arises from the possibility that we could sustain losses due to loan defaults and non-performance on loans. We maintain an allowance for loan losses in accordance with accounting principles generally accepted in the United States to provide for such defaults and other non-performance. As of December 31,

2016, 2019, our allowance for loan losses (“ALLL”) as a percentage of gross loans held for investment was 1.46%1.87%.  The determination of the appropriate level of loan loss allowance is an inherently difficult process and is based on numerous assumptions. The amount of future losses is susceptible to changes in economic, operating and other conditions, including changes in interest rates, which may be beyond our control. In addition, our underwriting policies, adherence to credit monitoring processes, and risk management systems and controls may not prevent unexpected losses. Our allowance for loan losses may not be adequate to cover actual loan losses. Moreover, any increase in our allowance for loan losses will adversely affect our earnings.

In June 2016, the FinancialFASB issued Accounting Standards Board (“FASB”) amended FASB ASC Topic 326, Update 2016-13, Measurement of Credit Losses on Financial Instruments - Credit Losses. (“ASU 2016-13”).  ASU 2016-13 became effective January 1, 2020, and will substantially change the accounting for credit losses on loans and other financial assets held by banks, financial institutions and other organizations. The amendments in this Update replace the currentstandard replaces existing incurred loss model withimpairment guidance and establishes a methodology that reflects expectedsingle allowance framework for financial assets carried at amortized cost. Upon adoption of ASU 2016-13, companies must recognize credit losses on these assets equal to management’s estimate of credit losses over the life of the loanfull remaining expected life. Companies must consider all relevant information when estimating expected credit losses, including details about past events, current conditions, and requires consideration of a broader range of reasonable and supportable informationforecasts. In December 2018, the Federal Reserve, OCC and FDIC released a final rule to calculaterevise their regulatory capital rules to address this upcoming change to the treatment of credit loss estimates.expense and allowances. The amendments are effective for public business entitiesfinal rule provides an optional three-year phase-in period for the first interimday-one adverse regulatory capital effects upon adopting the standard. The standard is likely to result in increases to the level of allowance held by us and annual reporting periods beginningour overall capital position after December 15, 2019.adoption in 2020 as regulatory agencies have limited the amount of ALLL that may be included in regulatory capital calculations.  The Company is currently evaluating the impact of these amendments to the Company’s financial position and results of operations and currently does not know or cannot reasonably quantify the impact of the adoption of the amendments as a result of the complexity and extensive changes from the amendments. The ALLL is a material estimate of the Company and given the change from an incurred loss model to a methodology that considers the credit loss over the life of the loan, there is the potential for an increase in the ALLL at adoption date. The Company is anticipating a significant change in the processes and procedures to calculate the ALLL, including changes in assumptions and estimates to consider expected credit losses over the life of the loan versus the current accounting practice that utilizes the incurred loss model. The Company will also developdeveloping new procedures for determining an allowance for credit losses relating to held-to-maturityheld to maturity investment securities.  In addition, the current accounting policy and procedures for other-than-temporary impairment on available-for-saleavailable for sale investment securities will be replaced with an allowance approach.  However, we are still evaluating the overall impact that adopting this new accounting standard will have on both our financial condition and regulatory capital position. It is also highly likely that PUB’s ongoing reported earnings and lending activities will be negatively impacted in periods following adoption.

As a community bank, our ability to maintain our positive reputation is critical to the success of our business.  The Companyfailure to maintain that reputation may materially and adversely affect our financial performance.

Our reputation is expectingone of the most valuable components of our business. As such, we strive to begin developingconduct our business in a manner that enhances our reputation. This is done, in part, by recruiting, hiring and implementing processesretaining employees who share our core values of being an integral part of the communities we serve, delivering superior service to our clients and procedures duringcaring about our clients and employees. If our reputation is negatively affected by the next two years to ensure it is fully compliant with the amendments at adoption date.actions of our employees or otherwise, our business and, therefore, our operating results may be materially and adversely affected.

We may have difficulty attracting additional necessary personnel, which may divert resources and limit our ability to successfully expand our operations.

Our business plan includes, and is dependent upon, our hiring and retaining highly qualified and motivated associatesemployees at every level. In addition, we anticipate that the reporting and related obligations to which we will become subject as a public reporting company may require us to hire additional accounting and finance staff. We expect to experience substantial competition in identifying, hiring and retaining top-quality associates.employees due to Utah’s low unemployment rate and new financial institutions entering our markets. If we are unable to hire and retain qualified associatesemployees, we may be unable to successfully execute our business strategy and manage our growth.

The unexpected loss of key officers would materially and adversely affect our ability to execute our business strategy, and diminish our future prospects.

Our success to date and our prospects for success in the future are substantially dependent on our senior management team. The loss of key members of our senior management team could materially and adversely affect our ability to successfully implement our business plan and, as a result, our future prospects. The loss of senior management without qualified successors who can execute our strategy would also have an adverse impact on us.

Our financial and accounting estimates and risk management framework rely on analytical forecasting and models.

The processes we use to estimate our inherent loan losses and to measure the fair value of financial instruments, as well as the processes used to estimate the effects of changing interest rates and other market measures on our financial condition and operations, depend upon the use of analytical and forecasting models. Some of our tools and metrics for managing risk are based upon our use of observed historical market behavior. We rely on quantitative models to measure risks and to estimate certain financial values. Models may be used in such processes as determining the pricing of various products, grading loans and extending credit, measuring interest rate and other market risks, predicting losses, assessing capital adequacy and calculating regulatory capital levels, as well as estimating the value of financial instruments and balance sheet items. Poorly designed or implemented models present the risk that our business decisions based on information incorporating such models will be adversely affected due to the inadequacy of that information. Moreover, our models may fail to predict future risk exposures if the information used in the model is incorrect, obsolete or not sufficiently comparable to actual events as they occur. We seek to incorporate appropriate historical data in our models, but the range of market values and behaviors reflected in any period of historical data is not at all times predictive of future developments in any particular period and the period of data we incorporate into our models may turn out to be inappropriate for the future period being modeled. In such case, our ability to manage risk would be limited and our risk exposure and losses could be significantly greater than our models indicated. In addition, if existing or potential clients believe our risk management is inadequate, they could take their business elsewhere. This could harm our reputation as well as our revenues and profits. Finally, information we provide to our regulators based on poorly designed or implemented models could also be inaccurate or misleading. Some of the decisions that our regulators make, including those related to capital distributions to our stockholders, could be affected adversely due to their perception that the quality of the models used to generate the relevant information is insufficient.

Our profitability depends on interest rates generally, and we may be adversely affected by changes in market interest rates.

Our profitability depends in substantial part on our net interest income. Our net interest income depends on many factors that are partly or completely outside of our control, including competition, federal economic, monetary and fiscal policies, and economic conditions generally. Our net interest income will be adversely affected if market interest rates change so that the interest we pay on deposits and borrowings increases faster than the interest we earn on loans and investments. In addition, an increase in interest rates could adversely affect borrowers’clients’ ability to pay the principal or interest on existing loans or reduce their desire to borrow more money. This may lead to an increase in our non-performing assets, a decrease in loan originations, or a reduction in the value of and income from our loans, any of which could have a material and negative effect on our results of operations. Fluctuations in market rates and other market disruptions are neither predictable nor controllable and may adversely affect our financial condition and earnings.  In response to market concerns arising from the spread of COVID-19, among other domestic and global events, interest rates in the U.S. have recently declined. Interest rates may decrease further as a result of such events, which could adversely affect our financial condition and earnings.

The ratio of variable to fixed-rate loans in our loan portfolio, the ratio of short-term (maturing at a given time within 12 months) to long-term loans, and the ratio of our demand, money market and savings deposits to CDs (and their time periods), are the primary factors affecting the sensitivity of our net interest income to changes in market interest rates. The composition of our rate-sensitive assets or liabilities is subject to change and could result in a more unbalanced position that would cause market rate changes to have a greater impact on our earnings.

In periods of rising interest rates, commercial and consumer demand for new residential mortgageslending and re-financings decreases, which, in turn adversely impactsaffects our mortgage business.lending activities.

If we need additional capital in the future to continue our growth, we may not be able to obtain it on terms that are favorable.

We may need to raise additional capital in the future to support our continued growth and to maintain our capital levels. Our ability to raise capital through the sale of additional securities will depend primarily upon our financial condition and the condition of financial markets at that time. Accordingly, we may not be able to obtain additional capital in the amounts or on terms satisfactory to us. Our growth may be constrained if we are unable to raise additional capital as needed.

Our funding sources may prove insufficient to provide liquidity, replace deposits and support our future growth.

We rely on customerclient deposits, advances from the FHLB, the Federal Reserve System and lines of credit at other financial institutions and the Federal Reserve System to fund our operations. Although we have historically been able to replace maturing deposits and advances if desired, we may not be able to replace such funds in the future if our financial condition, the financial condition of the FHLB or market conditions were to change. Our financial flexibility will be severely constrained if we are unable to maintain our access to funding or if adequate financing is not available to accommodate future growth at acceptable interest rates. Finally, if we are required to rely more heavily on more expensive funding sources to support future growth, our revenues may not increase proportionately to cover our costs. In this case, our profitability would be adversely affected.

FHLB borrowings and other current sources of liquidity may not be available or, if available, not sufficient to provide adequate funding for operations. Furthermore, our own actions could result in a loss of adequate funding. For example, our availability at the FHLB could be reduced if we are deemed to have poor documentation or processes. Accordingly, we may be required to seek additional higher-cost debt in the future to achieve our long- termlong-term business objectives. Additional borrowings, if sought, may not be available to us or, if available, may not be available on favorable terms. If additional financing sources are unavailable or are not available on reasonable terms, our growth and future prospects could be adversely affected.

We may be adversely affected by the lack of soundness of other financial institutions or financial market utilities.

Our ability to engage in routine funding and other transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial institutions are interrelated as a resultbecause of trading, clearing, counterparty or other relationships. Defaults by, or even rumors or questions about, one or more financial institutions or financial market utilities, or the financial services industry generally, may lead to market-wide liquidity problems and losses of depositor,client, creditor and counterparty confidence and could lead to losses or defaults by us or by other financial institutions.

Impairment of investment securities could require charges to earnings, which would negatively impact our results of operations.

We maintain a significant amount of our assets in investment securities, and must periodically test our investment securities for impairment in value. In assessing whether the impairment of investment securities is other-than-temporary, we considerconsider; i) the length of time and extent to which the fair value has been less than cost, ii) the financial condition and near- term prospects of the issuer, and iii) the intent and ability to retain itsour investment in the security for a period of time sufficient to allow for any anticipated recovery in fair value in the near term. If we conclude that impairment of investment securities is required, we could be required to incur charges to earnings, which would result in a negative impact on our results of operations. The impact of these impairment matters could have a material adverse effect on our business, results of operations,financial condition and financial condition.operations.

We face strong competition from banks, credit unions and other financial services providers that offer banking services, which may limit our ability to attract and retain banking customers.clients.

Competition in the banking industry generally, and in our geographic market specifically, is intense.strong. Competitors include banks, as well as other financial services providers, such as savings and loan institutions, consumer finance companies, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. In particular, our competitors include several larger national and regional financial institutions whose greater resources may afford them a marketplace advantage by enabling them to maintain numerous banking locations and ATMs, to offer a wider array of banking services and to conduct extensive promotional

and advertising campaigns. Additionally, banks and other financial institutions with larger capitalization and financial intermediaries not subject to bank regulatory restrictions have larger lending limits and are thereby able to serve the credit needs of a broader customerclient base than us. Larger competitors may also be able to offer better lending and deposit rates to customers,clients, and could increase their competition as we become a public companyincrease in asset size and our growth becomesbecome more visible. Moreover, larger competitors may not be as vulnerable as uswe are to downturns in the local economy and real estate market since they have a broader geographic area and their loan portfolio is more diversified. While our deposit base has increased, several larger banks have grown their deposit market share in our markets faster than we have resulting in a declining relative deposit market share for us in our existing markets. We believe our declining relative market share in deposits has resulted primarily from aggressive marketing and advertising, branch expansion, expanded delivery channels and more attractive rates offered by larger bank competitors. We also compete against community banks, credit unions and non-bank financial services companies that have strong local ties. These smaller institutions are likely to cater to the same small-small to medium-sizedmedium sized businesses that we target. Additionally, financial technology companies (“Fintech”) have developed technology whichthat allows customersclients to obtain loans via the internetInternet in an expeditious manner and couldhave become competitors to us.  If we are unable to attract and retain banking customers,clients, we may be unable to continue to grow our loan and deposit portfolios and our results of operations and financial condition may otherwise be adversely affected. Ultimately, we may be unable to compete successfully against current and future competitors.

Cyber-attacks or other security breaches could have a material adverse effect on our business.

In the normal course of business, we collect, process, and retain sensitive and confidential information regarding our customers.clients. We also have arrangements in place with other third parties through which we share and receive information about their customersclients who are or may become our customers.clients. Although we devote significant resources and management focus to ensuring the integrity of our systems through information security and business continuity programs, our facilities and systems, and those of third party service providers, are vulnerable to external or internal security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming or human errors or other similar events.

Information security risks for financial institutions like us have increased recently in part because of new technologies, the use of the Internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions and the increased sophistication and activities of organized crime, perpetrators of fraud, hackers, terrorists and others. In addition to cyber-attacks or other security breaches involving the theft of sensitive and confidential information, hackers recently have engaged in attacks against large financial institutions, particularly denial of service attacks that are designed to disrupt key business services, such as customer-facingclient-facing websites. We are not able to anticipate or implement effective preventive measures against all potential security breaches, of these types, especially because the techniques used change frequently and because attacks can originate from a wide variety of sources. We employ detection and response mechanisms designed to contain and mitigate security incidents, but early detection may be thwarted by sophisticated attacks and malware designed to avoid detection.

We also face risks related to cyber-attacks and other security breaches in connection with credit and debit card transactions that typically involve the transmission of sensitive information regarding our customersclients through various third parties, including merchant acquiring banks, payment processors, payment card networks and our core processors. Some of these parties have in the past been the target of security breaches and cyber-attacks, and because the transactions involve third parties and environments such as the point of sale that we do not control or secure, future security breaches or cyber-attacks affecting any of these third parties could impact us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them. We also rely on numerous other third party service providers to conduct other aspects of our business operations and face similar risks relating to them. While we regularly conduct security assessments on these third parties, we cannot be sure that their information security protocols are sufficient at all times to withstand a cyber-attack or other security breach.

The access by unauthorized persons to, or the improper disclosure by us of, confidential information regarding our customersclients or our own proprietary information, software, methodologies, and business secrets could result in significant legal and financial exposure, supervisory liability, damage to our reputation or a loss of confidence in the security of our systems, products and services, which could have a material adverse effect on our business, financial condition or results of operations. In addition, recentlyRecently, there have been a number of well-publicized attacks or

breaches affecting others in our industry that have heightened concern by consumersconsumers.  These concerns generally aboutrevolve around the security of using credit and debit cards, which have caused some consumers, including our customers,clients, to use our credit and debit cards less in favor of alternative methods of payment andpayment.  This has led to increased regulatory focus on, and potentially new regulations relating to, these matters. FurtherFurthermore, cyber-attacks or other breaches in the future, whether affecting usothers or others,us, could intensify consumer concern and regulatory focus and result in reduced use of our cards and increased costs, all of which could have a material adverse effect on our business. To the extent we are involved in any future cyber-attacks or other breaches, our brand and reputation could be affected, and this could also have a material adverse effect on our business, financial condition or results of operations.

If we experience a cyber-attack, our insurance coverage may not cover all of our losses, and furthermore, we may experience a loss of reputation.

Our risk management framework may not be effective in mitigating risks and losses to us.

Our risk management framework is comprised of various processes, systems and strategies, and is designed to manage the types of risk to which we are subject, including, among others, credit, market, liquidity, interest rate and compliance. Our framework also includes financial or other modeling methodologies that involve management assumptions and judgment. Our risk management framework may not be effective under all circumstances and may not adequately mitigate any risk of loss to us. If our framework is not effective, we could suffer unexpected losses and our business, financial condition, results of operations or business prospects could be materially and adversely affected. We may also be subject to potentially adverse regulatory consequences.

We are subject to certain operating risks, related to customerclient or employee fraud which could harm our reputation and business.

Employee error, andor employee and customeror client misconduct, could subject us to financial losses or regulatory sanctions and seriously harm our reputation. Misconduct by our employees could include hiding unauthorized activities from us, improper or unauthorized activities on behalf of our customersclients or improper use of confidential information. It is not always possible to prevent employee error and misconduct, and the precautions we take to prevent and detect this activity may not be effective in all cases. Employee error could also subject us to financial claims for negligence.

If our internal controls fail to prevent or detect an occurrence, or if any resulting loss is not insured, excess insurance coverage is denied or not available, it could have a material adverse effect on our business, financial condition and results of operations.

If we need additional capital in the future to continue our growth, we may not be able to obtain it on terms that are favorable.

Our business strategy calls for continued growth. We anticipate that we will be able to support this growth through the net proceeds from our initial public offering, as well as by adding deposits at existing and new branch locations. However, we may need to raise additional capital in the future to support our continued growth and to maintain our capital levels. Our ability to raise capital through the sale of additional securities will depend primarily upon our financial condition and the condition of financial markets at that time. Accordingly, we may not be able to obtain additional capital in the amounts or on terms satisfactory to us. Our growth may be constrained if we are unable to raise additional capital as needed.

If third parties infringe upon our intellectual property or if we were to infringe upon the intellectual property of third parties, we may expend significant resources enforcing or defending our rights or suffer competitive injury.

We rely on a combination of copyright, trademark, trade secret laws and confidentiality provisions to establish and protect our proprietary rights. If we fail to successfully maintain, protect and enforce our intellectual property rights, our competitive position could suffer. Similarly, if we were to infringe on the intellectual property rights of others, our competitive position could suffer. Third parties may challenge, invalidate, circumvent, infringe or misappropriate our intellectual property, or such intellectual property may not be sufficient to permit us to take advantage of current market trends or otherwise to provide competitive advantages, which could result in costly redesign efforts, discontinuance of certain product or service offerings or other competitive harm. We may also be required to spend significant resources to monitor and police our intellectual property rights. Others, including our

competitors may independently develop similar technology, duplicate our products or services or design around our intellectual property, and in such cases we could not assert our intellectual property rights against such parties. Further, our contractual arrangements may not effectively prevent disclosure of our confidential information or provide an adequate remedy in the event of unauthorized disclosure of our confidential or proprietary information. We may have to litigate to enforce or determine the scope and enforceability of our intellectual property rights, trade secrets and know-how, which could be time-consuming and expensive, could cause a diversion of resources and may not prove successful. The loss of intellectual property protection or the inability to obtain rights with respect to third party intellectual property could harm our business and ability to compete. In addition, because of the rapid pace of technological change in our industry, aspects of our business and our products and services rely on technologies developed or licensed by third parties, and we may not be able to obtain or continue to obtain licenses and technologies from these third parties on reasonable terms or at all.

In some instances, litigation may be necessary to enforce our intellectual property rights and protect our proprietary information, or to defend against claims by third parties that our products, services or technology infringe or otherwise violate their intellectual property or proprietary rights. Third parties may have, or may eventually be issued, patents that could be infringed by our products, services or technology. Any of these third parties could bring an infringement claim against us with respect to our products, services or technology. We may also be subject to third party infringement, misappropriation, breach or other claims with respect to copyright, trademark, license usage or other intellectual property rights. In addition, in recent years, individuals and groups, including patent holding companies have been purchasing intellectual property assets in order to make claims of infringement and attempt to extract settlements from companies in the banking and financial services industry. Any litigation or claims brought by or against us, whether with or without merit, could result in substantial costs to us and divert the attention of our management, which could harm our business and results of operations. In addition, any intellectual property litigation or claims against us could result in the loss or compromise of our intellectual property and proprietary rights, subject us to significant liabilities, including damage awards, result in an injunction prohibiting us from marketing or selling certain of our services, require us to redesign affected products or services, or require us to seek licenses which may only be available on unfavorable terms, if at all, any of which could harm our business and results of operations.

We are exposed to risk of environmental liabilities with respect to properties to which we take title.

Approximately 79.6%82.1% of our outstanding loan portfolio was secured by real estate as of December 31, 2016 was secured by real estate.2019.  In the course of our business, we may foreclose and take title to real estate, and could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination, or may be required to investigate or clean up hazardous or toxic substances, or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. If we ever become subject to significant environmental liabilities, our business, financial condition, liquidity and results of operations could be materially and adversely affected.

We rely on our information technology and telecommunications systems and third party servicers, and the failure of these systems could adversely affect our business.

Our business is highly dependent on the successful and uninterrupted functioning of our information technology and telecommunications systems and third party servicers. Our primary banking and accounting systems are third party software platforms operated on an in-house basis:basis; however, we outsource certain of our information technology systems including our electronic funds transfer, or EFT, ATM and debit card processing, credit and debit card and transaction processing, and our online Internet bill payment and banking services. We rely on these systems to process new and renewal loans, provide customerclient service, facilitate collections and share data across our organization. The failure of these systems, or the termination of a third party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third party systems, we could experience service denials if demand for such services exceeds capacity or such third party systems fail or experience interruptions. If sustained or repeated, a system failure or service denial could result in a deterioration of our ability to process new and renewal loans and provide customerclient service or compromise our ability to collect loan payments in a timely manner.

In addition, our  Our ability to adopt new information technology and technological products needed to meet our customers’clients’ banking needs may be limited if our third party servicers are slow to adopt or choose not to adopt such new technology and products. Such a failure to provide this technology and products to our customersclients could result in a loss of customers,clients, which would negatively impactaffect our businessfinancial condition and results of operations.

We depend on the accuracy and completeness of information about customersclients and counterparties.

In deciding whether to extend credit or enter into other transactions with customersclients and counterparties, we may rely on information furnished to us by or on behalf of customersclients and counterparties, including financial statements and other financial information. We also may rely on representations of customersclients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. In deciding whether to extend credit, we may rely upon our customers’clients’ representations that their financial statements conform to U.S. generally accepted accounting principles, or GAAP, and present fairly, in all material respects, the financial condition, results of operations and cash flows of the customer.client. We also may rely on customerclient representations and certifications, or other auditors’ reports, with respect to the business and financial condition of our customers.clients. Our financial condition, results of operations, financial reporting and reputation could be negatively affected if we rely on materially misleading, false, inaccurate or fraudulent information.

Our planned growth in our leasing division includes increased risks, including risks related to collateralizing leases, our relative inexperience in this area,information provided by or about clients and complying with state lending and other requirements with which we are unfamiliar.

We intend to grow our leasing business by originating direct leases on a national level through our newly formed GrowthFunding Equipment Finance division.  We have acquired rental streams of payments on leases from third-party leasing companies for approximately four years but to this point the negotiation and administration of such leases have been handled by third-party leasing companies. We formed our GrowthFunding Equipment Finance division in 2016 to increase our leasing portfolio and scale diversification of the commercial and industrial loan portfolio. This division will seek to underwrite leases nationwide. These leases are used to purchase equipment essential to the operations of our borrowers/lessees and are secured by the specific equipment financed. Because this division is a new line of business to the Bank, we are not certain how quickly the new, nationwide customer base will accept this new business venture, or if it will be subject to new state lending laws that are unfamiliar to us, which will result in a greater regulatory burden on the Bank. Starting a new line of business may require significant investment in personnel which, if the business is not successful, may not be recovered.   While we have hired personnel with experience in leasing, there is no assurance we will be profitable or will be able to properly administer the lease portfolio. Finally, this new division is subject to state lending requirements and other laws with which we are unfamiliar, and failure to comply with these requirements and laws could result in significant penalties to the Bank.

Leasing is traditionally based on cash flow lending. Cash flow lending involves lending money based primarily on the expected cash flow, profitability and enterprise value of a business rather than on the value of its assets or resale of the collateral for the loan or lease. When cash flow loans or leases become non-performing, our primary resource to recover some, or all, of the principal of our loan or lease is to liquidate the collateral. If there is a shortfall in the collateral value, the Bank must pursue the corporate or personal guarantors, the sale of the entire company as a going concern, or restructure the company in a way we believe would enable us to generate sufficient cash flow over time to repay our loan or lease. These alternatives may not generate enough proceeds to repay the loan or lease.

For some types of leases, the Bank will own and have risk of loss on the leased property and the customer will make rental lease payments over a set lease period. The lease payments are determined, in part, based on the expected residual value of the property at the end of the lease. At the end of the lease, the Bank must sell or re-lease the property to the lessee or a third party. Leases with significant residual values have higher risk than many other types of lending because the economics of the lease also rely on the leased property’s value in addition to the other sources of repayment from the lease. We may be unable to re-lease or sell the property within a reasonable timeframe or may experience market price changes in the expected residual value of the leased property over the lease term. If we do not properly manage residual values of the leased property we may not be able to recover our investment.counterparties.

Catastrophic events including, but not limited to, hurricanes, tornadoes, earthquakes, fires, floods, prolonged drought, and pandemics may adversely affect the general economy, financial and capital markets, specific industries, and the Bank.

The Bank has significant operations and a significant customer base in regions where natural and other disasters may occur. These regions are known for being vulnerable to natural disasters and other risks, such as hurricanes, tornadoes, earthquakes, fires, floods, and prolonged drought. These types of natural catastrophic events at times have disrupted the local economy, the Bank’s business and clients, and could pose physical risks to the Bank’s property. In addition, catastrophic events, such as natural disasters or global pandemics, occurring in other regions of the world may have an impact on the Bank’s clients and in turn on the Bank. Although we have business continuity and disaster recovery programs in place, a significant catastrophic event could materially adversely affect the Bank’s operating results.

Our financial condition and results of operations for fiscal 2020 may be adversely affected by the recent coronavirus outbreak.

If a pandemic, epidemic or outbreak of an infectious disease occurs in the United States or globally, our business may be adversely affected. In December 2019, a novel strain of COVID-19 was reported to have surfaced in Wuhan, China. The virus continues to spread globally and, at the time of this filing, has spread to over 50 countries, including the United States. Our operations could be adversely affected to the extent that coronavirus or any other epidemic harms the world economy or Utah economy in general. Our operations may experience disruptions, such as temporary closure of our offices and/or suspension of services, which may materially and adversely affect our business, financial condition and operational results. The duration of the business disruption and related financial impact cannot be reasonably estimated at this time but may materially affect our ability to operate our business and result in additional costs. Such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in lost revenue, or cause us to incur additional expenses. The extent to which the coronavirus or other health epidemic may impact our results will depend on future developments, which are highly uncertain and cannot be predicted, including new information which may emerge concerning the severity of the coronavirus and the actions to contain the coronavirus or treat its impact, among others.

Risks Related to Our Regulatory Environment

We are subject to regulation, which increases the cost and expense of regulatory compliance, and therefore reduces our net income and may restrict our growth and our ability to acquire other financial institutions.

Supervision, regulation, and examination of PUB and the Bank by the bank regulatory agencies are intended primarily for the protection of consumers, bank clients and the Deposit Insurance Fund of the FDIC, rather than holders of our common shares.

As a bank holding company under federal law, we are subject to regulation under the Bank Holding Company Act of 1956, as amended, or the BHCA, and the examination and reporting requirements of the Federal Reserve. In addition to supervising and examining us, the Federal Reserve, through its adoption of regulations implementing the BHCA, places certain restrictions on the permissible activities that are deemed permissible for bank holding companies to engage in.companies. Changes in the number or scope of permissible activities could have an adverse effect on our ability to realize our strategic goals.

As a Utah state-chartered bank that is not a member of the Federal Reserve System, the Bank is separately subject to regulation by both the FDIC and the Utah Department of Financial Institutions, or UDFI. The FDIC and UDFI regulate numerous aspects of the Bank’s operations, including adequate capital and financial condition, permissible types and amounts of extensions of credit and investments, permissible non- bankingnon-banking activities and restrictions on dividend payments. The Bank undergoes periodic examinations by the FDIC and UDFI. Following such examinations, the Bank may be required, among other things, to change its respective asset valuations or the amounts of required loan loss allowances or to restrict its respective operations, as well as increase its respective capital levels, which could adversely affect our results of operations.

Supervision, regulation, and examination of PUB and the Bank by the bank regulatory agencies are intended primarily for the protection of consumers, bank depositors and the Deposit Insurance Fund of the FDIC, rather than holders of our common shares.

Particularly as a result of new regulations and regulatory agencies under the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, or the Dodd-Frank Act, weWe may be required to invest significant management attention and resources to evaluate and make any changes necessary to comply with applicable laws and regulations. This allocation of resources, as well as any failure to comply with applicable requirements, may negatively impactaffect our results of operations and financial condition.

Banking agencies periodically conduct examinations of our business, including compliance with laws and regulations, and our failure to comply with any regulatory actions to which we become subject because such examinations could materially and adversely affect us.

The UDFI, the FDIC, and the Federal Reserve periodically conduct examinations of our business, including compliance with laws and regulations. Accommodating such examinations may require management to reallocate resources that would otherwise be used in the day-to-day operation of other aspects of our business. If, as a result of an examination, the UDFI or a federal banking agency were to determine that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of our operations had become unsatisfactory, or that we or our management were in violation of any law or regulation, it may take a number of different remedial actions as it deems appropriate. These actions could include the power to enjoin “unsafe or unsound” practices, to require affirmative actions to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil monetary penalties against us, our officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to clients, to terminate our deposit insurance. FDIC deposit insurance is critical to the continued operation of the Bank. If we become subject to such regulatory actions, our business operations could be materially and adversely affected.

Changes in laws, government regulation and monetary policy may have a material adverse effect on our results of operations.

Financial institutions have been the subject of significant legislative and regulatory changes and may be the subject of further significant legislation or regulation in the future, none of which is within our control. For example, on February 3, 2017, President Trump signed an executive order pursuant to which he ordered the Secretary of the Treasury to consult with the heads of the member agencies of the Financial Stability Oversight Council on the extent to which existing laws, treaties, regulations, guidance, reporting and recordkeeping requirements, and other government policies promote certain core principles laid out in the executive order. This may result in repeals of or amendments to, existing laws, treaties, regulations, guidance, reporting, and recordkeeping requirements, and other government policies.  Significant new laws or regulations or changes in, or repeals of, existing laws or regulations, including those with respect to federal and state taxation, may cause our results of operations to differ materially. In addition, the costs and burden of compliance could adversely affect our ability to operate profitably. Further, federal monetary policy significantly affects the Bank’s credit conditions, as well as for the Bank’s borrowers,clients, particularly as implemented through the Federal Reserve, primarily through open market operations in U.S. government securities, the discount rate for bank borrowings and reserve requirements. A material change in any of these conditions could have a material impact on us, the Bank and the Bank’s borrowers,clients, and therefore on our results of operations.

The continuing enactment, potential repeal or amendment of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 may have a material effect on our operations.

In 2010, the Dodd-Frank Act was adopted, which imposes significant regulatory and compliance changes. The key effects of the Dodd-Frank Act on our business are, or may include:

In addition, the Dodd-Frank Act restricts the ability of banks to engage in certain proprietary trading or to sponsor or invest in private equity or hedge funds. The Dodd-Frank Act also contains provisions designed to limit the ability of insured depository institutions, their holding companies and their affiliates to conduct certain swaps and derivatives activities and to take certain principal positions in financial instruments.

Some provisionsFurthermore, while PUB and Altabank^TM will likely remain subject to extensive regulation and supervision, including; because of the Dodd-Frank Act, have not been completely implemented. In addition, President Trump’s new administrationthe regulatory environment has discussedentered a period of rebalancing of the possibility of repealing or amendingpost-financial crisis framework.  For example, on May 24, 2018, the Dodd-Frank Act andEGRRCPA was signed into law. Among other regulatory changes, the February 3, 2017 executive order could lead to such repeals or amendments.  The changes resulting from this executive order and the continuing implementationEGRRCPA amended various sections of the Dodd-Frank Act may impactAct. The EGRRCPA includes a number of provisions, which are favorable to bank holding companies with total consolidated assets of less than $10 billion, such as the profitabilityCompany, and makes changes to consumer mortgage and credit reporting regulations and to the authorities of our business activities or otherwise adverselythe agencies that regulate the financial industry. Because a number of the provisions included in the EGRRCPA require the federal banking agencies to undertake notice and comment rulemaking, it will likely take some time before these provisions are fully implemented and we do not know how these will ultimately affect our business. Failure to comply with the requirements may negatively impact our results of operations and financial condition.us. While we cannot predict what effect any presently contemplated or future changes in the laws or regulations or their interpretations would have on us, these changes could be materially adverse to us and investors in our common shares.

Rulemaking changes implemented by the CFPB will result in higher regulatory and compliance costs related to originating and servicing mortgages and may adversely affect our results of operations.

The CFPB has finalized a number of significant rules which will impact nearly every aspect of the lifecycle of a residential mortgage. These rules implement the Dodd-Frank Act amendments to the Equal Credit Opportunity Act, the Truth in Lending Act and the Real Estate Settlement Procedures Act. The final rules require banks to, among other things: (i) develop and implement procedures to ensure compliance with a new “reasonable ability to repay” test and identify whether a loan meets a new definition for a “qualified mortgage;” (ii) implement new or revised disclosures, policies and procedures for servicing mortgages including, but not limited to, early intervention with delinquent borrowers and specific loss mitigation procedures for loans secured by a borrower’s principal residence; (iii) comply with additional restrictions on mortgage loan originator compensation; and (iv) comply with new disclosure requirements and standards for appraisals and escrow accounts maintained for “higher priced mortgage loans.” These new rules create operational and strategic challenges for us, as we are both a mortgage originator and a servicer. For example, business models for cost, pricing, delivery, compensation, and risk management will need to be re-evaluated and potentially revised, perhaps substantially. Some of these new rules became effective in June 2013, while others became effective in January 2014 and August 2015.  Forthcoming additional rulemaking affecting the residential mortgage business is also expected.

New and future rulemaking by the CFPB and other regulators, as well as enforcement of existing consumer protection laws, may have a material effect on our operations and operating costs.

The CFPB has the authority to implement and enforce a variety of existing federal consumer protection statutes and to issue new regulations but,regulations.  However, with respect to institutions of our size, it does not have primary examination

and enforcement authority with respect to such laws and regulations. The authority to examine depository institutions with $10.0$10 billion or less in assets, such as the Bank, for compliance with federal consumer laws remains largely with our primary federal regulator, the FDIC. However, the CFPB may participate in examinations of smaller institutions on a “sampling basis” and may refer potential enforcement actions against such institutions to their primary regulators. In some cases, regulators such as the Federal Trade Commission, or FTC, and the Department of Justice also retain certain rulemaking or enforcement authority, and we also remain subject to certain state consumer protection laws. As an independent bureau within the Federal Reserve, the CFPB may impose requirements more severe than the previous bank regulatory agencies. The CFPB has placed significant emphasis on consumer complaint management and has established a public consumer complaint database to encourage consumers to file complaints they may have against financial institutions. We are expected to monitor and respond to these complaints, including those that we deem frivolous, and doing so may require management to reallocate resources away from more profitable endeavors.

Pursuant toThe CFPB has a number of significant rules that affect nearly every aspect of the lifecycle of a residential mortgage. These rules implement the Dodd-Frank Act amendments to the CFPB issuedEqual Credit Opportunity Act, the Truth in Lending Act and the Real Estate Settlement Procedures Act. The rules require banks to, among other things: (i) develop and implement procedures to ensure compliance with a series of final rules in January 2013 relatednew “reasonable ability to repay” test and identify whether a loan meets a new definition for a “qualified mortgage”; (ii) implement new or revised disclosures, policies and procedures for servicing mortgages including, but not limited to, early intervention with delinquent clients and specific loss mitigation procedures for loans secured by a client’s principal residence; (iii) comply with additional restrictions on mortgage loan originationoriginator compensation; and mortgage loan servicing. These final rules, most provisions of which became effective January 2014, and August 2015, prohibit creditors, such as the Bank, from extending mortgage loans without regard for a consumer’s ability to repay and add restrictions and requirements to mortgage origination and servicing practices. In addition, these rules restrict the application of prepayment penalties and compensation practices relating to mortgage loan underwriting. Further, mortgage origination systems used by the Bank must be significantly modified to(iv) comply with extensive new loan origination disclosures. Compliance with thesedisclosure requirements and standards for appraisals and escrow accounts maintained for “higher priced mortgage loans.” These rules create operational and strategic challenges for us, as we are both a mortgage originator and a servicer. For example, business models for cost, pricing, delivery, compensation, and risk management will likely increase our overall regulatory compliance costsneed to be re-evaluated and require us to change our underwriting practices. Moreover, these rules may adversely affect the volume of mortgage loans that we underwrite and may subject the Bank to increased potential liability related to its residential loan origination activities.potentially revised, perhaps substantially.

As a result of the Dodd-Frank Act and recent rulemaking, we will becomeWe are subject to more stringent capital requirements.

Pursuant to the Dodd-Frank Act, the federal banking agencies adopted final rules, or the U.S. Basel III Capital Rules, to update their general risk-based capital and leverage capital requirements to incorporate agreements reflected in the Third Basel Accord adopted by the Basel Committee on Banking Supervision, or Basel III Capital Standards, as well as the requirements of the Dodd-Frank Act. The U.S. Basel III Capital Rules are described in more detail in “Supervision and Regulation — Basel III.” While weIn December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms, which standards are continuingcommonly referred to prepareas Basel IV. Among other things, these standards revise the Basel Committee’s standardized approach for credit risk (including the recalibration of the risk weights and the introduction of new capital requirements for certain “unconditionally cancellable commitments,” such as unused credit card lines of credit) and provides a new standardized approach for operational risk capital. Under the Basel framework, these standards will generally be effective on January 1, 2022, with an aggregate output floor phasing in through January 1, 2027. Under the current U.S. capital rules, operational risk capital requirements and a capital floor apply only to advanced approaches institutions, and not to the Bank. The impact of Basel IV on us will depend on the U.S. Basel III Capital Rules,manner in which it is implemented by the U.S. Basel III Capital Rules may still have a material impact on our business, financial condition and results of operations. In addition, thefederal bank regulators.

The failure to meet the established capital requirements could result in one or more of our regulators placing limitations or conditions on our activities or restricting the commencement of new activities, and suchactivities.  Such failure could subject us to a variety of enforcement remedies available to the federal regulatory authorities, including limiting our ability to pay dividends, issuing a directive to increase our capital and terminating our FDIC deposit insurance. FDIC deposit insurance is critical to the continued operation of the Bank.

Our ability to raise additional capital, when and if needed, will depend on conditions in the capital markets, economic conditions and a number of other factors, including investor perceptions regarding the banking industry and market condition, and governmental activities, many of which are outside our control, and on our financial condition and performance. Accordingly, we may not be able to raise additional capital if needed or on terms acceptable to us. If we fail to meet these capital and other regulatory requirements, our financial condition, liquidity and results of operations would be materially and adversely affected. Higher capital levels could also lower our return on equity.

Our failure to meet applicable regulatory capital requirements, or to maintain appropriate capital levels in general, could affect customerclient and investor confidence, our ability to grow, our costs of funds and FDIC insurance costs, our ability to pay dividends on common shares, our ability to make acquisitions, and our business, results of operations and financial condition, generally.

We may be required to contribute capital or assets to the Bank that could otherwise be invested or deployed more profitably elsewhere.

Federal law and regulatory policy impose a number of obligations on bank holding companies that are designed to reduce potential loss exposure to the depositorsclients of insured depository subsidiaries and to the FDIC’s deposit insurance fund. For example, a bank holding company is required to serve as a source of financial strength to its FDIC-insured depository subsidiaries and to commit financial resources to support such institutions where it might not do so otherwise, even if we would not ordinarily do so and even if such contribution is to our detriment or the detriment of our shareholders.otherwise. These situations include guaranteeing the compliance of an “undercapitalized” bank with its obligations under a capital restoration plan, as described further in this prospectus.plan.

A capital injection into the Bank may be required at times when we do not have the resources to provide it at the holding-holding company level, and therefore we may be required to issue common shares or debt to obtain the required capital. Issuing additional common shares would dilute our current shareholders’ percentage of ownership and could cause the price of our common shares to decline. If we are required to issue debt, and in the event of a bankruptcy by PUB, the bankruptcy trustee would assume any commitment by us to a federal bank regulatory agency to maintain the capital of the Bank. Moreover, bankruptcy law provides that claims based on any such commitment will be entitled to a priority of payment over the claims of PUB’s general unsecured creditors including the holders of any note obligations.or equity holdings. Thus, any borrowing that must be done by PUB in order to make the required capital injection becomes more difficult and expensive and would adversely impactaffect our cash flows, financial condition, results of operations and prospects. Pursuant to applicable laws and regulations, the liabilities of the Bank could harm us. Under the Federal Deposit Insurance Act, or FDIA, we may, under certain circumstances, be responsible for liabilities of the Bank and may be responsible for damages to the FDIC.

Banking agencies periodically conduct examinations of our business including compliance with laws and regulations, and our failure to comply with any supervisory actions to which we become subject as a result of such examinations could materially and adversely affect us.prospects.

The UDFI, the FDIC, and the Federal Reserve periodically conduct examinations of our business, including compliance with laws and regulations. Accommodating such examinations may require management to reallocate resources, which would otherwise be used in the day-to-day operation of other aspects of our business. If, as a result of an examination, the UDFI or a federal banking agency were to determine that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of our operations had become unsatisfactory, or that we or our management was in violation of any law or regulation, it may take a number of different remedial actions as it deems appropriate. These actions include the power to enjoin “unsafe or unsound” practices, to require affirmative actions to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil monetary penalties against us, our officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate our deposit insurance. FDIC deposit insurance is critical to the continued operation of the Bank. If we become subject to such regulatory actions, we could be materially and adversely affected.

We face a risk of non-compliance and enforcement actions with respect to the Bank Secrecy Act and other anti-money laundering statutes and regulations.

Like all U.S. financial institutions, we are subject to monitoring requirements under federal law, including anti-money laundering, or AML, and Bank Secrecy Act, or BSA matters. Since September 11, 2001, banking regulators have intensified their focus on AML and BSA compliance requirements, particularly the AML provisions of the USA PatriotPATRIOT Act. There is also increased scrutiny of compliance with the rules enforced by the U.S. Treasury Department’s Office of Foreign Assets Control, or OFAC, which involve sanctions for dealing with certain persons or countries. While the Bank has adopted policies, procedures and controls to comply with the BSA, other AML statutes and regulations and OFAC regulations, this aggressive supervision and examination and increased likelihood of enforcement actions may increase our operating costs, which could negatively affect our results of operations and reputation.

We are subject to federal and state fair lending laws, and failure to comply with these laws could lead to material penalties.

Federal and state fair lending laws and regulations, such as the Equal Credit Opportunity Act and the Fair Housing Act, impose non-discriminatory lending requirements on financial institutions. The FDIC, the Department of Justice, the CFPB and other federal and state agencies are responsible for enforcing these laws and regulations. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation. A successful challenge to our performance under the fair lending laws and regulations could adversely impact our rating under the Community Reinvestment Act, or CRA, and result in a wide variety of sanctions, including the required payment of damages and civil money penalties, injunctive relief, imposition of restrictions on merger and acquisition activity and restrictions on expansion activity, which could negatively impact our reputation, business, financial condition and results of operations.

Regulations relating to privacy, information security and data protection could increase our costs, affect or limit how we collect and use personal information and adversely affect our business opportunities.

We are subject to various privacy, information security and data protection laws, including requirements concerning security breach notification, and wethese laws could be negatively impacted by these laws.affect us. For example, our business is subject to the Gramm-Leach-Bliley ActGLBA which, among other things: (i) imposes certain limitations on our ability to share non-public personal information about our customersclients with non-affiliated third parties; (ii) requires that we provide certain disclosures to customersclients about our information collection, sharing and security practices and afford customersclients the right to “opt out” of any information sharing by us with non-affiliated third parties (with certain exceptions) and (iii) requires that we develop, implement and maintain a written comprehensive information security program containing appropriate safeguards appropriate based on our size and complexity, the nature and scope of our activities, and the sensitivity of customerclient information we process, as well as plans for responding to data security breaches. Various state and federal banking regulators and states have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in certain circumstances in the event of a security breach. Moreover, legislators and regulators in the United States are increasingly adopting or revising privacy, information security and data protection laws that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of consumer or employee information, and some of our current or planned business activities. This could also increase our costs of compliance and business operations and could reduce income from certain business initiatives. This includes increased privacy-related enforcement activity at the federal level, by the FTC, as well as at the state level, such as with regard to mobile applications.

Compliance with current or future privacy, data protection and information security laws (including those regarding security breach notification) affecting customerclient or employee data to which we are subject could result in higher compliance and technology costs and could restrict our ability to provide certain products and services, which could have a material adverse effect on our business, financial conditions or results of operations. Our failure to comply with privacy, data protection and information security laws could result in potentially significant regulatory or governmental investigations or actions, litigation, fines, sanctions and damage to our reputation, which could have a material adverse effect on our business, financial condition or results of operations.

We may be unable to, or choose not to, pay dividends on our common shares.

We have declared an annual cash dividend for over 50 years. We began declaring quarterly cash dividends in 2015 with the dividend being declared after the end of each quarter. Our ability to pay dividends depends on the following factors, among others:

Such a failure to pay dividends may negatively impactaffect your investment.

The price of our common shares may fluctuate significantly and our stock may have low trading volumes, which may make it difficult for you to resell common shares owned by you at times or prices you find attractive.

The stock market and, in particular, the market for financial institution stocks, has experienced significant volatility.  The markets may produce downward pressure on stock prices for certain issuers without regard to those issuers’ underlying financial strength.  As a result, the trading volume in our common shares may fluctuate and cause significant price variations to occur.  This may make it difficult for you to resell common shares owned by you at times or at prices you find attractive.  The low trading volume in our common shares on the NasdaqNASDAQ Capital Market means that our shares may have less liquidity than other publicly traded companies.  We cannot ensure that the volume of trading in our common shares or the price of our common shares will be maintained or will increase in the future.

Item 1B – UnresolvedUnresolved Staff Comments

None

Item 2 – Properties

We conduct our business through our executive office, located in American Fork, Utah with approximately 7,300 square feet of office space. We conduct our businessand through our 18 full-service branch offices26 full service retail branches in Utah, Salt Lake, Davis, Cache, Box Elder, and Washington countiesCounties in Utah and in Preston, Idaho. We also have a mortgage banking center and an information technology and operations center.center located in Utah County. We own all of our facilities except for foursix branch properties, which are leased. We also sublease portions of onethree of our buildings to other tenants under short-term lease arrangements. We believe that the leases to which we are subject are generally on terms consistent with prevailing market terms, and none of the leases areis with our affiliates.an affiliate. We believe that our facilities are in good condition and are adequate to meet our operating needs for the foreseeablenear future.

Item 3 – Legal Proceedings

There are no material pending legal proceedings to which weour subsidiaries or our subsidiarieswe are a party or to which any of our properties are subject. There are no material proceedings known to us to be contemplated by any governmental authority. We are involved in a variety of litigation matters in the ordinary course of our business and anticipate that we will become involved in new litigation matters from time to time in the future.

Item 4 – Mine Safety Disclosures

Not Applicable.

PartPART II

Item 5 – Market for Registrant’s Common Equity, Related Shareholder Matters and Issuer Purchases of Equity Securities

The Company’s shares trade on the NASDAQ Capital Market under the symbol “PUB”. As of February 28, 2017,29, 2020, there were approximately 1,6932,054 shareholders of record for the Company’s common shares. The market range of high and low closing prices for the Company’s common shares for the periods indicated are shown below:

The following table summarizes the Company’s dividends declared per quarter for the periods indicated: