Finally, the Company is subject to the provisions of the California General Corporation Law, while the Bank is also subject to the Financial Code provisions.

Environmental Regulations

In the course of our business, we may foreclose and take title to real estate, and could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination, or may be required to investigate or clean up hazardous or toxic substances, or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, as the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. If we ever become subject to significant environmental liabilities, our business, financial condition, liquidity and results of operations could be materially and adversely affected.

Climate-related Developments

Climate change and the risks it may pose to financial institutions is an area of increased focus by the federal and state legislative bodies and regulators, including the federal banking agencies. In the future, new regulations or guidance may be issued, or other regulatory or supervisory actions may be taken, in this area by the federal banking agencies or other regulatory agencies, or new statutory requirements may be adopted. For example, the federal banking agencies have issued principles for climate-related financial risk management, which are designed to support the identification and management of climate-related financial risks at regulated institutions with more than $100 billion in total consolidated assets. Recently, on March 6, 2024, the SEC adopted new rules that require public companies to disclose substantial information about the material impacts of climate-related risks on their business, financial condition, and governance. These new rules require disclosure of a range of climate-related matters, including: (i) any material climate-related risks and their impacts on the registrant’s business strategy, results of operations, and financial condition, as well as on the registrant’s outlook and business model, (b) any activities, plans, or processes to mitigate, adapt to, or manage material climate-related risks, including the use of transition plans, scenario analyses, or internal carbon prices, (c) Any board oversight and management role in assessing and managing material climate-related risks, (d) any targets or goals that have materially affected or are reasonably likely to materially affect the registrant’s business, results of operations, or financial condition, and (e) the financial statement effects of severe weather events and other natural conditions, including costs and losses. Compliance dates will be phased-in among different classes of registrants, with most disclosure and financial statement rules taking effect for smaller reporting companies beginning on fiscal year 2027.

Other Pending and Proposed Legislation

Other legislative and regulatory initiatives which could affect us and the banking industry, in general, are pending and additional initiatives may be proposed or introduced before the United States Congress, the California legislature and other governmental bodies in the future. Such proposals, if enacted, may further alter the structure, regulation and competitive relationship among financial institutions, and may subject us to increased regulation, disclosure and reporting requirements. In addition, the various banking regulatory agencies often adopt new rules and regulations to implement and enforce existing legislation. We cannot predict whether, or in what form, any such legislation or regulations may be enacted or the extent to which our business would be affected thereby.

Available Information

The Company maintains an Internet website at www.ovcb.com. The Company makes available its annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and amendments to such reports filed or furnished pursuant to Section 13(a) or 15(d) of the 1934 Act and other information related to the Company free of charge, through this site as soon as reasonably practicable after it electronically files those documents with, or otherwise furnishes them to, the SEC. The SEC maintains a website, http://www.sec.gov., that contains the reports, proxy and information statements and other information we file with them. The Company’s website also contains its Committee Charters, Code of Ethics, Code of Conduct and Corporate Governance Guidelines. We also use our website as a tool to disclose important information about the company and comply with our disclosure obligations under Regulation Fair Disclosure. The Company’s internet website and the information contained therein or connected thereto are not intended to be incorporated into this annual report on Form 10-K.

In addition, copies of our filings are available by requesting them in writing or by phone from:

Corporate Secretary

Oak Valley Bancorp

125 North Third Avenue
Oakdale, California

209-844-7578

ITEM 1A. RISK FACTORS

An investment in our securities is subject to certain risks. These risk factors and the risks discussed in Management’s Discussion and Analysis of Financial Condition and Results of Operations and Quantitative and Qualitative Disclosures About Market Risk should be considered by prospective and current investors in our securities when evaluating the disclosures in this Annual Report on Form 10-K. The risks and uncertainties not presently known to us or that we currently deem immaterial also may impair our business operations. If any of the following risks actually occur, our business, results of operations and financial condition could suffer. In that event, the value of our securities could decline, and you may lose all or part of your investment.

Risks Associated with Our Business

Russell E. StahlOur business strategy includes sustainable growth plans, and our financial condition and results of operations could be negatively affected if we fail to grow or fail to manage our growth effectively.

We intend to pursue an organic growth strategy for our business. If appropriate opportunities present themselves, we may also engage in selected acquisitions of financial institutions, branch acquisitions and other business growth initiatives or undertakings. There can be no assurance that we will successfully execute our organic growth strategy, that we will be able to negotiate or finance such activities or that such activities, if undertaken, will be successful.

There are risks associated with our growth strategy. To the extent that we grow through acquisitions, we cannot ensure that we will be able to adequately or profitably manage this growth. Acquiring other banks, branches or other assets, as well as other expansion activities, involves various risks including the risks of incorrectly assessing the credit quality of acquired assets, encountering greater than expected costs of integrating acquired banks or branches, the risk of loss of customers and/or employees of the acquired institution or branch, executing cost savings measures, not achieving revenue enhancements and otherwise not realizing the transaction’s anticipated benefits. Our ability to address these matters successfully cannot be assured. There is also the risk that the requisite regulatory approvals might not be received and other conditions to consummation of a transaction might not be satisfied during the anticipated timeframes, or at all. In addition, our strategic efforts may divert resources or management’s attention from ongoing business operations, may require investment in integration and in development and enhancement of additional operational and reporting processes and controls, and may subject us to additional regulatory scrutiny. To finance an acquisition, we may borrow funds, thereby increasing our leverage and diminishing our liquidity, or raise additional capital, which could dilute the interests of our existing stockholders.

Our growth initiatives may also require us to recruit experienced personnel to assist in such initiatives. Accordingly, the failure to identify and retain such personnel would place significant limitations on our ability to successfully execute our growth strategy. In addition, to the extent we expand our lending beyond our current market areas, we could incur additional risks related to those new market areas. We may not be able to expand our market presence in our existing market areas or successfully enter new markets.

If we do not successfully execute our growth plan, it could adversely affect our business, financial condition, results of operations, reputation and growth prospects. In addition, if we were to conclude that the value of an acquired business had decreased and that the related goodwill had been impaired, that conclusion would result in an impairment of goodwill charge to us, which would adversely affect our results of operations. While we believe we will have the executive management resources and internal systems in place to successfully manage our future growth, there can be no assurance growth opportunities will be available or that we will successfully manage our growth.

Our financial condition and results of operations are dependent on the economy, particularly in the Bank’s market areas.

Our primary market area is concentrated in the Central Valley and the Eastern Sierras. Adverse economic conditions in any of these areas can reduce our rate of growth, affect our customers’ ability to repay loans and adversely impact our financial condition and earnings. General economic conditions, including inflation, unemployment and money supply fluctuations, also may affect our profitability adversely.

A deterioration in economic conditions in the market areas we serve could result in the following consequences, any of which could have a material adverse effect on our business, financial condition and results of operations:

We cannot accurately predict the possibility of weakness in the national or local economy effecting our future operating results.

We cannot accurately predict the possibility of the national or local economy’s return to recessionary conditions or to a period of economic weakness, which would adversely impact the markets we serve. Any deterioration in national or local economic conditions would have an adverse effect, which could be material, on our business, financial condition, results of operations and prospects, and any economic weakness could present substantial risks for the banking industry and for us.

Adverse developments affecting the financial services industry, such as actual events or concerns involving liquidity, defaults, or non-performance by financial institutions or transactional counterparties, could adversely affect our current and projected business operations and our financial condition and results of operations.

Actual events involving limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions, transactional counterparties or other companies in the financial services industry or the financial services industry generally, or concerns or rumors about any events of these kinds or other similar risks, have in the past and may in the future lead to market-wide liquidity problems. For example, on March 10, 2023, Silicon Valley Bank (“SVB”) was closed by the California Department of Financial Protection and Innovation, which appointed the FDIC as receiver. Similarly, on March 12, 2023, Signature Bank and Silvergate Capital Corp. were each swept into receivership. Although a statement by the Department of the Treasury, the Federal Reserve and the FDIC indicated that all depositors of SVB would have access to all of their money after only one business day of closure, including funds held in uninsured deposit accounts, it is not certain that the Federal Reserve or FDIC will treat future bank failures similarly. Hence, borrowers under credit agreements, letters of credit and certain other financial instruments with any financial institution that is placed into receivership by the FDIC may be unable to access undrawn amounts thereunder. In addition, if any of our customers, suppliers or other parties with whom we conduct business are unable to access funds pursuant to such instruments or lending arrangements with such a financial institution, such parties’ ability to pay their obligations to us or to enter into new commercial arrangements requiring additional payments to us could be adversely affected.

Inflation and rapid increases in interest rates have led to a decline in the trading value of previously issued government securities with interest rates below current market interest rates. Additionally, there is no guarantee that the U.S. Department of Treasury, FDIC and Federal Reserve Board will provide access to uninsured funds in the future in the event of the closure of other banks or financial institutions, or that they would do so in a timely fashion. There can be no assurance that there will not be additional bank failures or issues such as liquidity concerns in the broader financial services industry or in the U.S. financial system as a whole. Adverse financial market and economic conditions can exert downward pressure on stock prices, security prices, and credit availability for certain issuers without regard to their underlying financial strength.

Any of these impacts, or any other impacts resulting from the factors described above or other related or similar factors, could have material adverse effect on our liquidity and our current and/or projected business operations and financial condition and results of operations.

Recent bank failures have created significant market volatility, regulatory uncertainty, and decreased confidence in the U.S. banking system.

The failures of Silicon Valley Bank and Signature Bank in March 2023, followed by the failure of First Republic Bank in May 2023, have caused significant market volatility, regulatory uncertainty, and decreased confidence in the U.S. banking system. These bank failures occurred during a period of rapidly rising interest rates which, among other things, has resulted in unrealized losses in longer duration securities and more competition for bank deposits, and may increase the risk of a potential economic recession in the United States. The failure of other financial institutions may cause deposit outflows as customers spread deposits among several different banks so as to maximize their amount of FDIC insurance, move deposits to banks deemed "too big to fail" or remove deposits from the U.S. financial system entirely. Given such an environment, we may experience more deposit volatility as customers react to adverse events or market speculation involving financial institutions. Inability to access short-term funding or the loss of client deposits could increase our cost of funding, limit access to capital markets or negatively impact our overall liquidity or capitalization.

Ratings agencies have also reacted to recent events by issuing updated ratings and assessments. On April 21, 2023, Moody’s lowered the macro profile of the U.S. banking system reflecting general concern around the banking industry as a whole. Our ratings are subject to further adjustments based on a number of factors, including our financial strength and ability to generate earnings as well as factors not entirely within our control, such as conditions affecting the financial services industry generally.

In response to the bank failures, the United States government may adopt a variety of measures and new regulations designed to strengthen capital levels, liquidity standards, and risk management practices and otherwise restore confidence in financial institutions. Any reforms, if adopted, could have a significant impact on banks and bank holding companies. The premiums of the FDIC’s deposit insurance program are expected to increase, and banking regulators have signaled further review of regulatory requirements and the potential for changes to laws or regulations governing banks and bank holding companies. Changes resulting from these events could include increased regulatory oversight, higher capital requirements or changes in the way regulatory capital is calculated, and the impositions of additional restrictions through regulatory changes or supervisory or enforcement activities, each of which could have a material impact on our business.

The failure to address the federal debt ceiling in a timely manner, downgrades of the U.S. credit rating and uncertain credit and

financial market conditions may affect the stability of securities issued or guaranteed by the federal government, which may affect the valuation or liquidity of our investment securities portfolio and increase future borrowing costs.

Recent federal budget deficit concerns and political conflict over 30legislation to raise the U.S. government’s debt limit have increased the possibility of a default by the U.S. government on its debt obligations, related credit-rating downgrades, or an economic recession in the United States. As a result of uncertain political, credit and financial market conditions, including the potential consequences of the federal government defaulting on its obligations for a period of time due to federal debt ceiling limitations or other unresolved political issues, investments in financial instruments issued or guaranteed by the federal government pose credit default and liquidity risks. Given that future deterioration in the U.S. credit and financial markets is a possibility, losses or significant deterioration in the fair value of our U.S. government issued or guaranteed investments may occur. Downgrades to the U.S. credit rating could affect the stability of securities issued or guaranteed by the federal government and the valuation or liquidity of our portfolio of such investment securities, and could result in our counterparties requiring additional collateral for our borrowings. Further, unless and until U.S. political, credit and financial market conditions have been sufficiently resolved or stabilized, it may increase our future borrowing costs.

There are risks associated with our lending activities and our allowance for credit losses may prove to be insufficient to absorb actual incurred losses in our loan portfolio.

Lending money is a substantial part of our business. Every loan carries a certain risk that it will not be repaid in accordance with its terms or that any underlying collateral will not be sufficient to assure repayment. This risk is affected by, among other things:

We maintain an allowance for credit losses which we believe is appropriate to provide for current expected credit losses inherent in our loan portfolio. The amount of this allowance is determined by our management through a periodic review and consideration of several factors, including, but not limited to:

If actual losses on our loans exceed our estimates used to establish our allowance for credit losses, our business, financial condition and profitability may suffer.

The determination of the appropriate level of the allowance for credit losses inherently involves a high degree of subjectivity and requires us to make various assumptions and judgments about the collectability of our loan portfolio, including the creditworthiness of our borrowers and the value of the real estate and other assets serving as collateral for the repayment of many of our loans. In determining the amount of the allowance for credit losses, we review our loans and the loss and delinquency experience, and evaluate economic conditions and make significant estimates of current credit risks and future trends, all of which may undergo material changes. If our estimates are incorrect, the allowance for credit losses may not be sufficient to cover losses inherent in our loan portfolio, resulting in the need for additions to our allowance through an increase in the provision for credit losses. Deterioration in economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside of our control, may require an increase in the allowance for credit losses. In addition, bank regulatory agencies periodically review our allowance for credit losses and may require an increase in the provision for credit losses or the recognition of further charge-offs (which will in turn also require an increase in the provision for credit losses if the charge-offs exceed the allowance for credit losses), based on judgments different than that of management. Any increases in the provision for credit losses will result in a decrease in net income and may have a material adverse effect on our financial condition and results of operations.

Our underwriting practices may not protect us against losses in our loan portfolio.

We seek to mitigate the risks inherent in our loan portfolio by adhering to specific underwriting practices, including: analyzing a borrower’s credit history, financial statements, tax returns and cash flow projections; valuing collateral based on reports of independent appraisers; and verifying liquid assets. Although we believe that our underwriting criteria are, and historically have been, appropriate for the various kinds of loans we make, we have incurred losses on loans that have met these criteria, and may continue to experience higher than expected losses depending on economic factors and consumer behavior. In addition, our ability to assess the creditworthiness of our customers may be impaired if the models and approaches we use to select, manage, and underwrite our customers become less predictive of future behaviors. Finally, we may have higher credit risk, or experience higher credit losses, to the extent our loans are concentrated by loan type, industry segment, borrower type, or location of the borrower or collateral. Deterioration in real estate values and underlying economic conditions in the Central Valley and the Eastern Sierras could result in significantly higher credit losses to our portfolio.

Because our loan portfolio has a large concentration of real estate loans, and commercial real estate loans in particular,negative changes in the economy affecting real estate values and liquidity, or regional and national market conditions, could impair the value of collateral securing our real estate loans and result in loan and other losses.

As of December 31, 2023, consumer and commercial real estate loans constituted 90% of our loan portfolio, of which 97% were commercial real estate loans. Our real estate portfolio is subject to certain risks, including (i) downturns in the California economy, (ii) significant interest rate fluctuations, (iii) reduction in real estate values in the California Central Valley, (iv) increased competition in pricing and loan structure, and (v) environmental risks, including natural disasters.  As a result of the high concentration of real estate loans in our loan portfolio, potential difficulties in the real estate markets could cause significant increases in nonperforming loans, which would reduce our profits. The market value of real estate can fluctuate significantly in a short period of time as a result of market conditions in the geographic area in which the real estate is located. A decline in real estate values could cause some of our mortgage loans to become inadequately collateralized, which would expose us to a greater risk of loss.  Real estate values and real estate markets are generally affected by changes in national, regional or local economic conditions, the rate of unemployment, fluctuations in interest rates and the availability of loans to potential purchasers, changes in tax laws and other governmental statutes, regulations and policies and acts of nature, such as earthquakes and other natural disasters. Additionally, a decline in real estate values could adversely affect our portfolio of commercial real estate loans and could result in a decline in the origination of such loans.

Our commercial real estate loans involve higher principal amounts than other loans and repayment of these loans may be dependent on factors outside our control or the control of our borrowers.

We originate commercial real estate loans for individuals and businesses for various purposes, which are secured by commercial properties. These loans typically involve higher principal amounts than other types of loans, and repayment is dependent upon income generated, or expected to be generated, by the property securing the loan in amounts sufficient to cover operating expenses and debt service, which may be adversely affected by changes in the economy or local market conditions. For example, if the cash flow from the borrower’s project is reduced as a result of leases not being obtained or renewed in a timely manner or at all, the borrower’s ability to repay the loan may be impaired.

Commercial real estate loans also expose us to greater credit risk than loans secured by residential real estate because the collateral securing these loans typically cannot be sold as easily as residential real estate. In addition, many of our commercial real estate loans are not fully amortizing and contain large balloon payments upon maturity. Such balloon payments may require the borrower to either sell or refinance the underlying property in order to make the payment, which may increase the risk of default or non-payment.

If we foreclose on a commercial real estate loan, our holding period for the collateral typically is longer than for residential mortgage loans because there are fewer potential purchasers of the collateral. Additionally, commercial real estate loans generally have relatively large balances to single borrowers or groups of related borrowers. Accordingly, if we make any errors in judgment in the collectability of our commercial real estate loans, any resulting charge-offs may be larger on a per loan basis than those incurred with our residential or consumer loan portfolios.

Repayment of our commercial and industrial loans is often dependent on the cash flows of the borrower, which may be unpredictable, and the collateral securing these loans may not be sufficient to repay the loan in the event of default.

We make our commercial and industrial loans primarily based on the identified cash flow of the borrower and secondarily on the underlying collateral provided by the borrower. Collateral securing commercial and industrial loans may depreciate over time, be difficult to appraise and fluctuate in value. In the case of loans secured by accounts receivable, the availability of funds for the repayment of these loans may be substantially dependent on the ability of the borrower to collect the amounts due from its customers.

We are exposed to risk of environmental liabilities with respect to real properties which we may acquire.

In prior years, due to weakness of the U.S. economy and, more specifically, the California economy, including higher levels of unemployment than the nationwide average and declines in real estate values, certain borrowers have been unable to meet their loan repayment obligations and, as a result, we have had to initiate foreclosure proceedings with respect to and take title to a number of real properties that had collateralized their loans. As an owner of such properties, we could become subject to environmental liabilities and incur substantial costs for any property damage, personal injury, investigation and clean-up that may be required due to any environmental contamination that may be found to exist at any of those properties, even though we did not engage in the activities that led to such contamination. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties seeking damages for environmental contamination emanating from the site. If we were to become subject to significant environmental liabilities or costs, our business, financial condition, results of operations and prospects could be adversely affected.

Our business is subject to interest rate risk and variations in interest rates may hurt our profits.

To be profitable, we have to earn more money in interest that we receive on loans and investments than we pay to our depositors and lenders in interest. If interest rates rise, our net interest income and the value of our assets could be reduced if interest paid on interest-bearing liabilities, such as deposits, increases more quickly than interest received on interest-earning assets, such as loans, other mortgage-related investments and investment securities. This is most likely to occur if short-term interest rates increase at a faster rate than long-term interest rates, which would cause our net interest income to go down. In addition, rising interest rates may hurt our income, because that may reduce the demand for loans and the value of our securities. In a rapidly changing interest rate environment, we may not be able to manage our interest rate risk effectively, which would adversely impact our financial condition and results of operations.

If interest rates decline, our net interest income could be reduced if interest rates on interest-earning assets such as loans, investment securities and cash balances, decrease more quickly than interest paid on interest-bearing liabilities, such as deposits.

New lines of business, new products and services, or strategic project initiatives may subject us to additional risks.

From time to time, we may seek to implement new lines of business or offer new products and services within existing lines of business. There are substantial risks and uncertainties associated with these efforts, particularly in instances where the markets are not fully developed. In developing and marketing new lines of business and/or new products and services, we may invest significant time and resources. Initial timetables for the introduction and development of new lines of business and/or new products or services may not be achieved, and price and profitability targets may not prove feasible, which could in turn have a material negative effect on our operating results. New lines of business and/or new products or services also could subject us to additional regulatory requirements, increased scrutiny by our regulators and other legal risks.

Additionally, from time to time we undertake strategic project initiatives. Significant effort and resources are necessary to manage and oversee the successful completion of these initiatives. These initiatives often place significant demands on a limited number of employees with subject matter expertise and management and may involve significant costs to implement as well as increase operational risk as employees learn to process transactions under new systems. The failure to properly execute on these strategic initiatives could adversely impact our business and results of operations.

Strong competition within our market areas may limit our growth and profitability.

Competition in the banking and financial services industry is intense. In our market areas, we compete with commercial banks, savings institutions, mortgage brokerage firms, credit unions, finance companies, mutual funds, insurance companies, and brokerage and investment banking firms operating locally and elsewhere. Many of these competitors have substantially greater name recognition, resources and lending limits than we do and may offer certain services or prices for services that we do not or cannot provide. Our profitability depends upon our continued ability to successfully compete in our markets.

In addition, our future success will depend, in part, upon our ability to address the needs of our clients by using technology to provide products and services that will satisfy client demands for convenience, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements. We may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to our clients.

Risks Related to Our Operations

We face significant operational risks.

We operate many different financial service functions and rely on the ability of our employees, third party vendors and systems to process a significant number of transactions. Operational risk is the risk of loss from operations, including fraud by employees or outside persons, employees’ execution of incorrect or unauthorized transactions, data processing and technology errors or hacking and breaches of internal control systems.

Our enterprise risk management framework may not be effective in mitigating risk and reducing the potential for losses.

Our enterprise risk management framework seeks to mitigate risk and loss to us. We have established comprehensive policies and procedures and an internal control framework designed to provide a sound operational environment for the types of risk to which we are subject, including credit risk, market risk (interest rate and price risks), liquidity risk, operational risk, compliance risk, strategic risk, and reputational risk. However, as with any risk management framework, there are inherent limitations to our current and future risk management strategies, including risks that we have not appropriately anticipated or identified. In certain instances, we rely on models to measure, monitor and predict risks. However, these models are inherently limited because they involve techniques, including the use of historical data in some circumstances, and judgments that cannot anticipate every economic and financial outcome in the markets in which we operate, nor can they anticipate the specifics and timing of such outcomes. There is no assurance that these models will appropriately capture all relevant risks or accurately predict future events or exposures. Accurate and timely enterprise-wide risk information is necessary to enhance management’s decision-making in times of crisis. If our enterprise risk management framework proves ineffective or if our enterprise-wide management information is incomplete or inaccurate, we could suffer unexpected losses, which could materially adversely affect our results of operations or financial condition. In addition, our businesses and the markets in which we operate are continuously evolving. We may fail to fully understand the implications of changes in our businesses or the financial markets or fail to adequately or timely enhance our enterprise risk framework to address those changes. If our enterprise risk framework is ineffective, either because it fails to keep pace with changes in the financial markets, regulatory requirements, our businesses, our counterparties, clients or service providers or for other reasons, we could incur losses, suffer reputational damage or find ourselves out of compliance with applicable regulatory or contractual mandates.

An important aspect of our enterprise risk management framework is creating a risk culture in which all employees fully understand that there is risk in every aspect of our business and the importance of managing risk as it relates to their job functions. We continue to enhance our enterprise risk management program to support our risk culture, ensuring that it is sustainable and appropriate to our role as a major financial institution. Nonetheless, if we fail to create the appropriate environment that sensitizes all of our employees to managing risk, our business could be adversely impacted.

Managing reputational risk is important to attracting and maintaining customers, investors and employees.

Threats to our reputation can come from many sources, including adverse sentiment about financial institutions generally, unethical practices, employee misconduct, failure to deliver minimum standards of service or quality, compliance deficiencies, regulatory investigations, cybersecurity breaches, marketplace rumors and questionable or fraudulent activities of our customers. We have policies and procedures in place to promote ethical conduct and protect our reputation. However, these policies and procedures may not be fully effective and cannot adequately protect against all threats to our reputation. Negative publicity regarding our business, employees, or customers, with or without merit, may result in the loss of customers, investors and employees, costly litigation, a decline in revenues and increased governmental oversight.

Liquidity risk could impair our ability to fund operations and jeopardize our financial condition.

Liquidity is essential to our business. An inability to raise funds through deposits, borrowings, the sale of loans and other sources could have a substantial negative effect on our liquidity. Our access to funding sources in amounts adequate to finance our activities or on terms that are acceptable to us could be impaired by factors that affect us specifically or the financial services industry or economy in general.

Factors that could detrimentally impact our access to liquidity sources include a decrease in the level of our business activity as a result of a downturn in the markets in which our loans are concentrated or adverse regulatory action against us. Our ability to borrow could also be impaired by factors that are not specific to us, such as a disruption in the financial markets or negative views and expectations about the prospects for the financial services industry.

We currently hold a significant amount of bank owned life insurance.

At December 31, 2023, we held bank owned life insurance (“BOLI”) on certain key and former employees and executives and our directors, with a cash surrender value of $31,506,000. The eventual repayment of the cash surrender value is subject to the ability of the various insurance companies to pay death benefits or to return the cash surrender value to us if needed for liquidity purposes. We continually monitor the financial strength of the various companies with whom we carry these policies.

However, any one of these companies could experience a decline in financial strength, which could impair its ability to pay benefits or return our cash surrender value. If we need to liquidate these policies for liquidity purposes, we would be subject to taxation on the increase in cash surrender value and penalties for early termination, both of which would adversely impact earnings.

We rely on numerous external vendors.

We rely on numerous external vendors to provide us with products and services necessary to maintain our day-to-day operations. Accordingly, our operations are exposed to risk that these vendors will not perform in accordance with the contracted arrangements under service level agreements. The failure of an external vendor to perform in accordance with the contracted arrangements under service level agreements because of changes in the vendor's organizational structure, financial condition, support for existing products and services or strategic focus or for any other reason, could be disruptive to our operations, which in turn could have a material negative impact on our financial condition and results of operations. We also could be adversely affected to the extent such an agreement is not renewed by the third-party vendor or is renewed on terms less favorable to us.

Our holding company relies on dividends from the Bank for substantially all of its income and the net proceeds of capital raising transactions are currently the primary source of funds for cash dividends to our preferred and common stockholders.

Our primary source of revenue at the holding company level is dividends from the Bank and we also have previously relied on the net proceeds of capital raising transactions as the primary source of funds for cash dividends to our preferred and common stockholders. To the extent we are limited in our ability to raise capital in the future, our ability to pay cash dividends to our stockholders could likewise be limited, especially if we are unable to increase the amount of dividends the Bank pays to us. If the Bank is unable to pay dividends to us, then we may not be able to service our debt, including our senior notes, pay our other obligations or pay cash dividends on our preferred and common stock. Our inability to service our debt, pay our other obligations or pay dividends to our stockholders could have a material adverse impact on our financial condition and the value of your investment in our securities.

We may elect or be compelled to seek additional capital in the future, but that capital may not be available when it is needed.

We are required by federal regulatory authorities to maintain adequate levels of capital to support our operations. At some point, we may need to raise additional capital to support continued growth.

Our ability to raise additional capital, if needed, will depend on conditions in the capital markets, economic conditions, our financial performance and a number of other factors, many of which are outside our control. Accordingly, we cannot assure you of our ability to raise additional capital if needed or on terms acceptable to us. If we cannot raise additional capital when needed, our ability to further expand our operations could be materially impaired and our financial condition and liquidity could be materially and adversely affected.

Climate change manifesting as physical or transition risks could adversely affect our operations, businesses and customers.

There is an increasing concern over the risks of climate change and related environmental sustainability matters. The physical risks of climate change include discrete events, such as flooding and wildfires, and longer term shifts in climate patterns, such as extreme heat, sea level rise, and more frequent and prolonged drought. Such events could disrupt the Company’s operations or those of its clients or third parties on which it relies, including through direct damage to assets and indirect impacts from supply chain disruption and market volatility. Additionally, transitioning to a low carbon economy may entail extensive policy, legal, technology, and market initiatives. Transition risks, including changes in consumer preferences and additional regulatory requirements or taxes, could increase expenses and undermine business strategies. In addition, Company’s reputation and client relationships may be damaged as a result of practices related to climate change, including its involvement, or its clients’ involvement, in certain industries or projects associated with causing or exacerbating climate change, as well as any decisions the Company makes to continue to conduct or change its activities in response to considerations relating to climate change, including the setting of climate-related goals, commitments and targets. As climate risk is interconnected with all key risk types, the Company is advancing its processes to embed climate risk considerations into risk management strategies such as market, credit and operational risks; however, because the timing and severity of climate change may not be predictable, risk management strategies may not be effective in mitigating climate risk exposure.

Technology Risks

Our security measures may not be sufficient to mitigate the risk of a cyber-attack or cyber theft.

Communications and information systems are essential to the conduct of our business, as we use such systems to manage our customer relationships, our general ledger and virtually all other aspects of our business. Our operations rely on the secure collection, processing, storage, and transmission of confidential, personal, and other information using our computer systems and networks and as part of our internet banking activities, as well as the computer systems and networks of third party service providers that support our operations, but which we do not control. Although we take protective measures and endeavor to enhance them as circumstances warrant, the security of our computer systems, software, and networks, as well as those of our computer systems and networks of third party service providers that support our operations, may be vulnerable to security breaches, unauthorized access, misuse, computer viruses, or other malicious code and cyber-attacks whose objectives include obtaining unauthorized access confidential and personal information, manipulation or destruction of data, disruption or our services, or theft of money. The rapid evolution and increased adoption of artificial intelligence technologies have also given rise to additional vulnerabilities and potential entry points for cyber threats. If one or more of these events occur, this could jeopardize our or our customers' confidential, personal, and other information collected and processed by, stored in, and transmitted through our computer systems and networks and our third party service providers, or otherwise cause interruptions or malfunctions in our operations or adversely impact our customers or counterparties. These adverse consequences could include causing certain customers to cease doing business with us, impair our ability to attract new customers or expand relationships with existing customers and third parties, making it difficult to service customers and comply with regulatory obligations (including privacy and banking laws), or impair our brand and reputation. We may be required to expend significant additional resources to enhance our protective measures, to investigate any such event, notify individuals, third parties, or regulators, and remediate vulnerabilities or other exposures, and we may be subject to litigation and financial losses that are either not insured against or not fully covered through any insurance maintained by us. We could also suffer significant reputational damage.

Our security measures may not protect us from systems failures or interruptions.

While we have established policies and procedures to prevent or limit the impact of systems failures and interruptions, there can be no assurance that such events will not occur or that they will be adequately addressed if they do. In addition, we outsource certain aspects of our data processing and other operational functions to certain third-party providers. If our third-party providers encounter difficulties, or if we have difficulty in communicating with them, our ability to adequately process and account for transactions could be affected, and our business operations could be adversely impacted. Threats to information security also exist in the processing of customer information through various other vendors and their personnel.

We may be required to expend significant additional resources to continue to modify or enhance our information security infrastructure or to investigate and remediate any information security vulnerabilities in response to continuing information systems security threats.

The occurrence of any systems failure or interruption could damage our reputation and result in a loss of customers and business, could subject us to additional regulatory scrutiny, or could expose us to legal liability. Any of these occurrences could have a material adverse effect on our financial condition and results of operations.

We rely on communications, information, operating and financial control systems technology from third party service providers, and we may suffer an interruption in those systems.

We rely heavily on third party service providers for much of our communications, information, operating and financial control systems technology, including our online banking services and data processing systems. We also rely on third party vendors, who may experience unauthorized access to and disclosure of client or customer information or the destruction or theft of such information. Any failure or interruption, or breaches in security, of these systems could result in failures or interruptions in our customer relationship management, general ledger, deposit, servicing and/or loan origination systems and, therefore, could harm our business, operating results and financial condition. Additionally, interruptions in service and security breaches could lead existing customers to terminate their banking relationships with us and could make it more difficult for us to attract new banking customers.

We are subject to a variety of federal and state privacy and data security laws, which govern the collection, safeguarding, sharing and use of customer information

We are subject to a variety of federal and state privacy and data security laws, which govern the collection, safeguarding, sharing and use of customer information, and require that financial institutions have in place policies regarding information privacy and security. For example, the Gramm-Leach-Bliley Act of 1999 (“GLBA”) requires all financial institutions offering financial products or services to retail customers to provide such customers with the financial institution’s privacy policy and practices for sharing nonpublic information with third parties, provide advance notice of any changes to the policies and provide such customers the opportunity to “opt out” of the sharing of certain personal financial information with unaffiliated third parties. It also requires banks to safeguard personal information of consumer customers. Some state laws also protect the privacy of information of state residents and require adequate security for such data, and certain state laws may, in some circumstances, require us to notify affected individuals of security breaches of computer databases that contain their personal information. These laws may also require us to notify law enforcement, regulators or consumer reporting agencies in the event of a data breach, as well as businesses and governmental agencies that own data.

Data privacy and data security are areas of increasing state legislative focus. The California Consumer Privacy Act (“CCPA”), which became effective and enforceable in 2020 requires, among other things, covered companies to provide new disclosures to California consumers regarding the use of personal information, gives California residents expanded rights to access their personal information and allows such consumers new abilities to opt-out of certain sales of personal information.  Further, the new California Privacy Rights Act (“CPRA”) which was passed in November 2020, significantly modifies the CCPA. These modifications may result in additional uncertainty and require us to incur additional costs and expenses in our effort to comply. Because we meet the thresholds set forth in the CCPA and the CPRA, we will be required to comply with these laws. We will continue to monitor developments related to the CCPA and the CPRA. The full impact of the CCPA and the CPRA on our business is yet to be determined.

Like other lenders, we use credit bureau data in their underwriting activities. Use of such data is regulated under the Fair Credit Reporting Act (“FCRA”), and the FCRA also regulates reporting information to credit bureaus, prescreening individuals for credit offers, sharing of information between affiliates and using affiliate data for marketing purposes. Similar state laws may impose additional requirements on us.

Regulatory Risks

We operate in a highly regulated environment and our operations and income may be affected adversely by changes in laws, rules and regulations governing our operations.

We are subject to extensive regulation and supervision by the DFPI, FRB and the FDIC. The FRB regulates the supply of money and credit in the United States. Its fiscal and monetary policies determine in a large part our cost of funds for lending and investing and the return that can be earned on those loans and investments, both of which affect our net interest margin. FRB policies can also materially affect the value of financial instruments that we hold, such as debt securities. Its policies also can affect our borrowers, potentially increasing the risk that they may fail to repay their loans or satisfy their obligations to us. Changes in policies of the FRB are beyond our control and the impact of changes in those policies on our activities and results of operations can be difficult to predict.

The Company and the Bank are heavily regulated. This regulation is to protect depositors, federal deposit insurance funds and the banking system as a whole, and not stockholders. These regulatory authorities have extensive discretion in connection with their supervisory and enforcement activities, including the ability to impose increased capital requirements and restrictions on a bank’s operations, to reclassify assets, to determine the adequacy of a bank’s allowance for credit losses and to set the level of deposit insurance premiums assessed.

Congress, state legislatures and federal and state agencies continually review banking, lending and other laws, regulations and policies for possible changes. Any change in such regulation and oversight, whether in the form of regulatory policy, new regulations or legislation, that applies to us or additional deposit insurance premiums could have a material adverse impact on our operations. Because our business is highly regulated, the laws and applicable regulations are subject to frequent change. Any new laws, rules and regulations could make compliance more difficult or expensive or otherwise adversely affect our business, financial condition or growth prospects. Such changes could subject us to additional costs, limit the types of financial services and products we may offer and/or increase the ability of non-banks to offer competing financial services and products, among other things.

The Dodd-Frank Act and supporting regulations could have a material adverse effect on us.

The Dodd-Frank Act provides for various capital requirements and new restrictions on financial institutions and their holding companies. These changes may result in additional restrictions on investments and other activities.

Regulations under the Dodd-Frank Act significantly impact our operations, and we expect to continue to face increased regulation. These regulations may affect the manner in which we do business and the products and services that we provide, affect or restrict our ability to compete in our current businesses or our ability to enter into or acquire new businesses, reduce or limit our revenue or impose additional fees, assessments or taxes on us, intensify the regulatory supervision of us and the financial services industry, and adversely affect our business operations.

The Dodd-Frank Act, among other things, established the CFPB with broad authority to administer and enforce a new federal regulatory framework of consumer financial regulation. Many of the provisions of the Dodd-Frank Act have extended implementation periods and require extensive rulemaking, guidance and interpretation by various regulatory agencies. While some rules have been finalized or issued in proposed form, some have yet to be proposed. It is impossible to predict when all such additional rules will be issued or finalized, and what the content of such rules will be.

We must apply resources to ensure that we are in compliance with all applicable provisions of the Dodd-Frank Act and any implementing rules, which may increase our costs of operations and adversely impact our earnings. We expect that the Dodd-Frank Act, including current and future rules implementing its provisions and the interpretations of those rules, will reduce our revenues, increase our expenses, require us to change certain of our business practices, increase the regulatory supervision of us, increase our capital requirements and impose additional assessments and costs on us, and otherwise adversely affect our business.

The short-term and long-term impact of the changing regulatory capital requirements and new capital rules is uncertain.

Under the U.S. regulatory capital rules to implementing the Basel III regulatory capital framework, banking organizations, including the Company are subject to a common equity Tier 1 minimum capital requirement of 4.5 percent of risk-weighted assets and a minimum Tier 1 risk-based capital requirement of 6.0 percent of risk-weighted assets and assigns higher risk-weightings than in the past (150 percent) to exposures that are more than two decades within90 days past due or are on non-accrual status and certain commercial real estate facilities that finance the information technology area. Since joining Oak Valley Community Bankacquisition, development or construction of real property. The final rule also limits a banking organization’s capital distributions and certain discretionary bonus payments if the banking organization does not hold a “capital conservation buffer” in 1998, he has managedexcess of 2.5 percent of common equity tier 1 capital in addition to the development, operations,minimum risk-based capital ratios. An institution will be subject to limitations on paying dividends, engaging in share repurchases, and securitypaying discretionary bonuses if its capital level falls below the buffer amount.

While our current capital levels exceed the capital requirements, our capital levels could decrease in the future as a result of factors such as acquisitions, faster than anticipated growth, reduced earnings levels, operating losses and other factors. The application of more stringent capital requirements for us could, among other things, result in lower returns on equity, require the bank’s technology infrastructure. Mr. Stahl servedraising of additional capital, and result in our inability to pay dividends or repurchase shares if we were to be unable to comply with such requirements.

We are subject to federal and state fair lending laws, and failure to comply with these laws could lead to material penalties.

Federal and state fair lending laws and regulations, such as Senior Vice President, Information Technology priorthe Equal Credit Opportunity Act, impose nondiscriminatory lending requirements on financial institutions. The Department of Justice, CFPB and other federal and state agencies are responsible for enforcing these laws and regulations. Private parties may also have the ability to his promotionchallenge an institution’s performance under fair lending laws in private class action litigation. A successful challenge to Executive Vice President, Chief Information Officer in January 2017.