ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF

1934.

For the fiscal year ended

or

TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF

(Exact name of registrant as specified in its charter)

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act:

☒

☐

☐

☒

☒

☐

S-T

☒

☐

9

non-affiliates

Number of shares of common stock of the registrant outstanding as of February 1, 20: 140,108,098.

DOCUMENTS INCORPORATED BY REFERENCE		PART OF
Definitive Proxy Statement for the Annual Meeting of Stockholders which will be filed within 120 days of the fiscal year ended December 31, 2019		Part III of Form 10-K

3b-6

10-K

These forward-looking statements relate to, among other things, anticipated future operating and financial performance, the allowance for loan losses, our financial position and liquidity, business strategies, regulatory and competitive outlook, investment and expenditure plans, capital and financing needs and availability, plans and objectives of management for future operations, expectations of the environment in which we operate, projections of future performance, perceived opportunities in the market and strategies regarding our mission and vision and statements relating to any of the foregoing. Factors that could cause actual results to differ from those discussed in the forward-looking statements include but are not limited to:

10-K.

CVB Financial Corp. (referred to herein on an unconsolidated basis as “CVB” and on a consolidated basis as “we”, “our” or the “Company”) is a bank holding company incorporated in California on April 27, 1981 and registered with the Board of Governors of the Federal Reserve System (“Federal Reserve”) under the Bank Holding Company Act of 1956, as amended (the “Bank Holding Company Act”). The Company commenced business on December 30, 1981 when, pursuant to a reorganization, it acquired all of the voting stock of Chino Valley Bank. On March 29, 1996, Chino Valley Bank changed its name to Citizens Business Bank (“CBB” or the “Bank”). The Bank is our principal asset. The Company also has one inactive subsidiary, Chino Valley Bancorp. The Company is also the common stockholder of CVB Statutory Trust III. CVB Statutory Trust III was created in January 2006 to issue trust preferred securities in order to raise capital for the Company.

980-4030.

The Bank commenced operations as a California state-chartered bank on August 9, 1974. The Bank’s deposit accounts are insured under the Federal Deposit Insurance Act up to applicable limits. The Bank is not a member of the Federal Reserve System. At December 31, 2019, the Bank had $11.28 billion in assets, $7.50 billion in net loans, $8.74 billion in deposits, and $2.00 billion in total equity.

As of December 31, 2019, there were 58 Banking Centers (“Centers”) located in the Inland Empire, Los Angeles County, Orange County, San Diego County, Ventura County, Santa Barbara County, and the Central Valley area of California. We also have one loan production office in Modesto, California

We also have three trust offices located in Ontario, Newport Beach and Pasadena. These offices serve as sales offices for the Bank’s wealth management, trust and investment products.

small-and

medium-sized

We offer a standard range of bank deposit instruments. These include checking, savings, money market and time certificates of deposit for both business and personal accounts. We also serve as a federal tax depository for our business customers.

Business Segments

Management’s Discussion and Analysis of Financial Condition and Results of Operations

Summary of Significant Accounting Policies

Business Segments

Competition

Economic Conditions/Government Policies

6

Regulation and Supervision

7

Regulatory Capital and Risk-weighted Assets

8

9

Regulatory Matters

Prompt Corrective Action Provisions

Volcker Rule

10

Bank holding companies and their subsidiaries are subject to significant regulation and restrictions by Federal and State laws and regulatory agencies, which may affect the cost of doing business, and may limit permissible activities and expansion or impact the competitive balance between banks and other financial services providers.

A wide range of requirements and restrictions are contained in both federal and state banking laws, which together with implementing regulatory authority:

Subject to prior notice or Federal Reserve approval, bank holding companies may generally engage in, or acquire shares of companies engaged in, activities determined by the Federal Reserve to be so closely related to banking or managing or controlling banks as to be a proper incident thereto. Bank holding companies which elect and retain “financial holding company” status pursuant to the Gramm-Leach-Bliley Act of 1999 (“GLBA”) may engage in these nonbanking activities and broader securities, insurance, merchant banking and other activities that are determined to be “financial in nature” or are incidental or complementary to activities that are financial in nature without prior Federal Reserve approval. Pursuant to GLBA and Dodd-Frank, in order to elect and retain financial holding company status, a bank holding company and all depository institution subsidiaries of a bank

non-compliance

CVB is also a bank holding company within the meaning of Section 3700 of the California Financial Code. Therefore, CVB and any of its subsidiaries are subject to examination by, and may be required to file reports with, the California Department of Business Oversight (“DBO”). DBO approvals may also be required for certain mergers and acquisitions.

CVB’s common stock is publicly held and listed on the NASDAQ Stock Market (“NASDAQ”), and CVB is subject to the periodic reporting, information, proxy solicitation, insider trading, corporate governance and other requirements and restrictions of the Securities Exchange Act of 1934 and the regulations of the Securities and Exchange Commission (“SEC”) promulgated thereunder as well as listing requirements of NASDAQ.

The Company is subject to the accounting oversight and corporate governance requirements of the Sarbanes-Oxley Act of 2002, including, among other things, required executive certification of financial presentations, requirements for board audit committees and their members, and disclosure of controls and procedures and internal control over financial reporting.

As a California commercial bank whose deposits are insured by the FDIC, the Bank is subject to regulation, supervision, and regular examination by the DBO and by the FDIC, as the Bank’s primary Federal regulator, and must additionally comply with certain applicable regulations of the Federal Reserve. Specific federal and state laws and regulations which are applicable to banks regulate, among other things, the scope of their business, their investments, their reserves against deposits, the timing of the availability of deposited funds, their activities relating to dividends, investments, loans, the nature and amount of and collateral for certain loans, servicing and foreclosing on loans, borrowings, capital requirements, certain check-clearing activities, branching, and mergers and acquisitions. California banks are also subject to statutes and regulations including Federal Reserve Regulation O and Federal Reserve Act Sections 23A and 23B and Regulation W, which restrict or limit loans or extensions of credit to “insiders”, including officers, directors, and principal shareholders, and loans or extension of credit by banks to affiliates or purchases of assets from affiliates, including parent bank holding companies, except pursuant to certain exceptions and only on terms and conditions at least as favorable to those prevailing for comparable transactions with unaffiliated parties. Failure to comply with applicable bank regulation or adverse results from any examinations of the Bank could affect the cost of doing business, and may limit or impede otherwise permissible activities and expansion activities by the Bank.

so-called

The federal and California regulatory structure gives the bank regulatory agencies extensive discretion in connection with their supervisory and enforcement activities and examination policies, including policies with respect to the classification of assets and the establishment of appropriate loan loss reserves for regulatory purposes. The regulatory agencies have adopted guidelines to assist in identifying and addressing potential safety and soundness concerns before an institution’s capital becomes impaired. The guidelines establish operational and managerial standards generally relating to: (1) internal controls, information systems, and internal audit systems; (2) loan documentation; (3) credit underwriting; (4) interest-rate exposure; (5) asset growth and asset quality; and (6) compensation, fees, and benefits. Further, the regulatory agencies have adopted safety and soundness guidelines for asset quality and for evaluating and monitoring earnings to ensure that earnings are sufficient for the maintenance of adequate capital and reserves. If, as a result of an examination, the DBO or the FDIC should determine that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity, or other aspects of the Bank’s operations are unsatisfactory or that the Bank or its management is violating or has violated any law or regulation, the DBO and the FDIC, and separately the FDIC as insurer of the Bank’s deposits, have residual authority to:

The FDIC is an independent federal agency that insures deposits, up to prescribed statutory limits, of federally insured banks and savings institutions and safeguards the safety and soundness of the banking and savings industries. The FDIC insures our customer deposits through the DIF up to prescribed limits for each depositor. The Dodd-Frank Act revised the FDIC’s DIF management authority by setting requirements for the Designated Reserve Ratio (the DIF balance divided by estimated insured deposits) and redefining the assessment base, which is used to calculate banks’ quarterly assessments. The amount of FDIC assessments paid by each DIF member institution is based on its asset size and relative risk of default as measured by regulatory capital ratios and other supervisory factors. The FDIC may terminate a depository institution’s deposit insurance upon a finding that the institution’s financial condition is unsafe or unsound or that the institution has engaged in unsafe or unsound practices that pose a risk to the DIF or that may prejudice the interest of the bank’s depositors. The termination of deposit insurance for a bank would also result in the revocation of the bank’s charter by the DBO.

We are generally unable to control the amount of premiums that we are required to pay for FDIC insurance, which can be affected by the cost of bank failures to the FDIC among other factors. The FDIC is an independent federal agency that insures deposits through the DIF up to prescribed statutory limits of federally insured banks and savings institutions and safeguards the safety and soundness of the banking and savings industries. The Dodd-Frank Act revised the FDIC’s DIF management authority by setting requirements for the Designated Reserve Ratio (the “DRR”, calculated as the DIF balance divided by estimated insured deposits) and redefining

the assessment base which is used to calculate banks’ quarterly assessments. The amount of FDIC assessments paid by each DIF member institution is based on its asset size and its relative risk of default as measured by regulatory capital ratios and other supervisory factors. As a result of our acquisition of CB our FDIC assessments will increase.

On September 30, 2018, the DRR reached 1.36%. Because the reserve ratio has exceeded 1.35%, two deposit insurance assessment changes occurred under the FDIC regulations: 1) surcharges on large banks (total consolidated assets of $10 billion or more) ended; the last surcharge on large banks was collected on December 28, 2018. and 2) small banks (total consolidated assets of less than $10 billion) were awarded assessment credits for the portion of their assessments that contributed to the growth in the reserve ratio from 1.15% to 1.35%, to be applied when the reserve ratio is at least 1.38%.The FDIC will, at least semi-annually, update its income and loss projections for the Deposit Insurance Fund and, if necessary, propose rules to further increase assessment rates. Any future increases in FDIC insurance premiums may have a material and adverse effect on our earnings and could have a material adverse effect on the value of, or market for, our common stock.

It is the Federal Reserve’s policy that bank holding companies should generally pay dividends on common stock only out of income available over the past year, and only if prospective earnings retention is consistent with the organization’s expected future needs and financial condition. It is also the Federal Reserve’s policy that bank holding companies should not maintain dividend levels that undermine their ability to be a source of strength to its banking subsidiaries. The Federal Reserve also discourages dividend payment ratios that are at maximum allowable levels unless both asset quality and capital are very strong. In addition, a bank holding company may be unable to pay dividends on its common stock if it fails to maintain an adequate capital conservation buffer under the Current Capital Rules.

The Bank is a legal entity that is separate and distinct from its holding company. CVB relies on dividends received from the Bank for use in the operation of the Company and the ability of CVB to pay dividends to shareholders. Future cash dividends by the Bank will also depend upon management’s assessment of future capital requirements, contractual restrictions, and other factors. The Current Capital Rules may restrict dividends by the Bank if the additional capital conservation buffer is not achieved. See “Capital Adequacy Requirements”.

The ability of the Bank to declare a cash dividend to CVB is subject to California law, which restricts the amount available for cash dividends to the lesser of a bank’s retained earnings or net income for its last three fiscal years (less any distributions to shareholders made during such period). Where the above test is not met, cash dividends may still be paid, with the prior approval of the DBO, in an amount not exceeding the greatest of (1) retained earnings of the bank; (2) the net income of the bank for its last fiscal year; or (3) the net income of the bank for its current fiscal year.

re-proposed

employee, director, or principal shareholder with excessive compensation, fees, or benefits, or (2) that could lead to material financial loss to the institution. The proposal would also impose certain governance and recordkeeping requirements on institutions of the Company’s and the Bank’s size. The regulatory organizations would reserve the authority to impose more stringent requirements on institutions of the Company’s and the Bank’s size.

Federal regulators have issued multiple statements regarding cybersecurity and that financial institutions need to design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing internet-based services of the financial institution. In addition, a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the institution’s operations in the event of a cyber-attack. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to a cyber-attack. If we fail to observe the regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states, notably including California where we conduct substantially all our banking business, have adopted laws and/or regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many such states have also recently implemented or modified their data breach notification and data privacy requirements including California which adopted the California Consumer Privacy Act in 2018 and New York which adopted the Shield Act in 2019. We expect this trend of state-level activity in those areas to continue, and we continue to monitor relevant legislative and regulatory developments in California where nearly all our customers are located.

In the ordinary course of business, we rely on electronic communications and information systems to conduct our operations and to store sensitive data. We employ a layered, defensive approach that leverages people, processes and technology to manage and maintain cybersecurity controls. We employ a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Notwithstanding the strength of our defensive measures, the threat from cyber-attacks is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures. While to date we have not detected a significant compromise, significant data loss or any material financial losses related to cybersecurity attacks, our systems and those of our customers and third-party service providers are under constant threat and it is possible that we could experience a significant event in the future. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking and other technology-based products and services by us and our customers. In addition, to the extent we experience any data breaches, we may become subject to governmental fines or enforcement actions as well as potential liability arising out of governmental or private litigation. See Item 1A. Risk Factors for a further discussion of risks related to cybersecurity and data breaches.

The Bank must comply with numerous federal and state anti-money laundering and consumer protection statutes and implementing regulations, including the USA PATRIOT Act of 2001, the Bank Secrecy Act, the Foreign Account Tax Compliance Act, the CRA, the California Consumer Privacy Act, the Fair Debt Collection Practices Act, the Fair Credit Reporting Act, the Equal Credit Opportunity Act, the Truth in Lending Act, the Fair Housing Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the National Flood Insurance Act, the California Homeowner Bill of Rights and various federal and state privacy protection

CAN-SPAM

These laws and regulations mandate certain disclosure and reporting requirements and regulate the manner in which financial institutions must deal with customers when taking deposits, making loans, servicing, collecting and foreclosure of loans, and providing other services. Failure to comply with these laws and regulations can subject the Bank and the Company to various penalties, including but not limited to enforcement actions, injunctions, fines or criminal penalties, punitive damages to consumers, and the loss of certain contractual rights.

The Bank received a “Satisfactory” rating in its most recent FDIC overall CRA performance evaluation, which measures how financial institutions support their communities in the areas of lending, investment and service, although the Bank received “Low Satisfactory” ratings on certain of the components within its most recent overall CRA performance rating evaluation.

The Dodd-Frank Act provided for the creation of the Bureau of Consumer Finance Protection (“CFPB”) as an independent entity within the Federal Reserve with broad rulemaking, supervisory and enforcement authority over consumer financial products and services, including deposit products, residential mortgages, home-equity loans and credit cards. The CFPB’s functions include investigating consumer complaints, conducting market research, rulemaking, and enforcing rules related to consumer financial products and services. CFPB regulations and guidance apply to all covered persons and banks with $10 billion or more in assets are subject to supervision including examination by the CFPB, including the Bank following completion of the acquisition of CB.

“ability-to-repay”

ability-to-repay

pre-loan

The review of products and practices to prevent unfair, deceptive or abusive acts or practices (“UDAAP”) is a continuing focus of the CFPB, and of banking regulators more broadly. The ultimate impact of this heightened scrutiny is uncertain but could result in changes to pricing, practices, products and procedures. It could also result in increased costs related to regulatory oversight, supervision and examination, additional remediation efforts and possible penalties. In addition, the Dodd-Frank Act provides the CFPB with broad supervisory, examination and enforcement authority over various consumer financial products and services, including the ability to require reimbursements and other payments to customers for alleged violations of UDAAP and other legal requirements and to impose significant penalties, as well as injunctive relief that prohibits lenders from engaging in allegedly unlawful practices. The CFPB also has the authority to obtain cease and desist orders providing for affirmative relief or monetary penalties. The Dodd-Frank Act does not prevent states from adopting stricter consumer protection standards. State regulation of financial products and potential enforcement actions could also adversely affect the Bank’s business, financial condition or results of operations.

non-public

Under the Durbin Amendment to the Dodd-Frank Act, the Federal Reserve adopted rules establishing standards for assessing whether the interchange fees that may be charged with respect to certain electronic debit transactions are “reasonable and proportional” to the costs incurred by issuers for processing such transactions.

Interchange fees, or “swipe” fees, are charges that merchants pay to us and other card-issuing banks for processing electronic payment transactions. Under the final rules, the maximum permissible interchange fee is equal to no more than 21 cents plus 5 basis points of the transaction value for many types of debit interchange transactions. The Federal Reserve also adopted a rule to allow a debit card issuer to recover one cent per transaction for fraud prevention purposes if the issuer complies with certain fraud-related requirements required by the Federal Reserve. The Federal Reserve also has rules governing routing and exclusivity that require issuers to offer two unaffiliated networks for routing transactions on each debit or prepaid product.

As a result of our acquisition of CB, we became subject to the interchange fee cap on July 1, 2019. The interchange fee cap did not have a material impact on our noninterest income.

In December 2006, the federal banking regulators issued guidance entitled “Concentrations in Commercial Real Estate Lending, Sound Risk Management Practices” to address increased concentrations in commercial real estate, or CRE, loans. In addition, in December 2015, the federal bank agencies issued additional guidance entitled “Statement on Prudent Risk Management for Commercial Real Estate Lending.” Together, these guidelines describe the criteria the agencies will use as indicators to identify institutions potentially exposed to CRE concentration risk. An institution that has (i) experienced rapid growth in CRE lending, (ii) notable exposure to a specific type of CRE, (iii) total reported loans for construction, land development, and other land representing 100% or more of the institution’s capital, or (iv) total CRE loans representing 300% or more of the institution’s capital, and the outstanding balance of the institutions CRE portfolio has increased by 50% or more in the prior 36 months, may be identified for further supervisory analysis of the level and nature of its CRE concentration risk. As of December 31, 2019, the Bank’s total CRE loans and unfunded loan commitments represented 265% of its capital.

The U.S. Treasury Department’s Office of Foreign Assets Control, or OFAC, administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. We are responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious financial, legal and reputational consequences, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required. Regulatory authorities have imposed cease and desist orders and civil money penalties against institutions found to be violating these obligations.

On December 22, 2017, the Tax Cuts and Jobs Act of 2017 (“Tax Reform Act”) was signed into law. The Tax Reform Act included a number of provisions that impact us, including the following:

re-measurement

• FDIC Insurance Premiums. The Tax Reform Act prohibits taxpayers with consolidated assets over $50 billion from deducting any FDIC insurance premiums and prohibits taxpayers with consolidated assets between $10 and $50 billion from deducting the portion of their FDIC premiums equal to the ratio, expressed as a percentage, that (i) the taxpayer’s total consolidated assets over $10 billion, as of the close of the taxable year, bears to (ii) $40 billion;

• Employee Compensation. A “publicly held company” is not permitted to deduct compensation in excess of $1 million per year paid to certain employees. The Tax Reform Act eliminates certain exceptions to the $1 million limit applicable under prior law related to performance-based compensation, such as equity grants and cash bonuses that are paid only on the attainment of performance goals. As a result, our ability to deduct certain compensation paid to our most highly compensated employees is limited; and

• Business Asset Expensing. The Tax Reform Act allows taxpayers immediately to expense the entire cost (instead of only 50%, as under prior law) of certain depreciable tangible property and real property improvements acquired and placed in service after September 27, 2017 and before January 1, 2023 (with an additional year for certain property). This 100% “bonus” depreciation is phased out proportionately for property placed in service on or after January 1, 2023 and before January 1, 2027 (with an additional year for certain property).

Congress may enact, modify or repeal legislation from time to time that affects the regulation of the financial services industry, and state legislatures may enact, modify or repeal legislation from time to time affecting the regulation of financial institutions chartered by or operating in those states. Federal and state regulatory agencies also periodically propose and adopt changes to their regulations or change the manner in which existing regulations are applied. The substance or impact of pending or future legislation or regulation, or the application thereof, cannot be predicted, although enactment of proposed legislation (or modification or repeal of existing legislation) could impact the regulatory structure under which the Company and Bank operate and may significantly increase its costs, impede the efficiency of its internal business processes, require the Bank to increase its regulatory capital and modify its business strategy, and limit its ability to pursue business opportunities in an efficient manner. The Company’s business, financial condition, results of operations or prospects may be adversely affected, perhaps materially.

10-K,

10-Q

8-K.

10-K,

10-Q,

8-K,

10-K.

The following sets forth certain information regarding our executive officers, their positions and their ages.