BANK OF HAWAII CORPORATION (BOH) Business

Bank of Hawaii Corporation (“Bank of Hawai‘i Corporation” or the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawai‘i. The Parent’s principal operating wholly-owned subsidiary, Bank of Hawai‘i (“Bank of Hawaiʻi” or the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawai‘i. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System. The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaiʻi, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. We are organized into three business segments for management reporting purposes: Consumer Banking, Commercial Banking, and Treasury and Other. See Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations” (“MD&A”) and Note 12 in Item 8. “Notes to Consolidated Financial Statements” for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaiʻi, 96813.

We use our website at https://ir.boh.com as a routine channel of distribution of Company information, including press releases, presentations, financial and other supplemental information, as a means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD. Accordingly, investors should monitor the investor relations portion of our website in addition to following our social media channels, press releases, SEC filings, and public conference calls and webcasts. None of the information provided on our website, in our press releases, public conference calls and webcasts, or through social media channels is incorporated into, or deemed to be a part of, this Annual Report on Form 10-K or in any other report or document we file with the SEC.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, allowing them to receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The federal banking regulators regularly issue new guidance and standards, and update existing guidance and standards, regarding cybersecurity intended to enhance cyber risk management among financial institutions. Financial institutions are expected to comply with such guidance and standards and to accordingly develop appropriate security controls and risk management process.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Federal Reserve Bank (“FRB”). The Parent is also registered as a financial institution holding company under the Hawaiʻi Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank(s). A BHC is also expected to commit resources to support its subsidiary bank(s) in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank(s) during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank(s).

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”), banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger under the Riegle-Neal Act. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaiʻi.

Bank of Hawaiʻi

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision of the FRB and examination by the Federal Reserve Bank of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaiʻi Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate to, among other compliance matters, operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take informal (non-public) or formal (public) supervisory actions against regulated entities, including BHCs and banks, that fail to meet such standards, including, without limitation, the issuance of written agreements, cease-and-desist orders, and consent orders, which may, among other things, result in restrictions on a bank’s ability to pay dividends, requirements to increase capital, restrictions on activities, the imposition of civil monetary penalties, and revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Pacific Century Life Insurance Corporation is a subsidiary of the Bank and is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations, among other things, mandated capital and liquidity requirements, established standards for mortgage lenders, regulated executive and incentive-based compensation, imposed various consumer protections and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations,

such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Capital Requirements

In 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted capital rules (the “Rules”) designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2025, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective actions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 10 in Item 8. “Notes to Consolidated Financial Statements” for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and preferred stock and to service its liabilities is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 10 in Item 8. “Notes to Consolidated Financial Statements.”

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also apply to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

The Volcker Rule

In 2013, the FRB, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volcker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s financial condition and results of operation.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits held by the Bank through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Bank is assessed deposit insurance premiums by the FDIC using a risk-based assessment rate and adjusted average total assets. The Bank’s FDIC insurance assessment was $11.2 million in 2025, $17.9 million in 2024 and $28.3 million in 2023. The FDIC insurance expense for the years 2024 and 2023 was primarily related to a special assessment, discussed below.

In November 2023, the FDIC implemented a special assessment to recover the loss to the Deposit Insurance Fund following the closures of Silicon Valley Bank, Signature Bank and First Republic Bank. The assessment was based on reported uninsured deposits as of December 31, 2022. The FDIC could cease collection early or extend the special assessment period as they deem necessary depending on whether the amount the FDIC collects from the special assessment is higher or lower than the actual or estimated FDIC losses. The initial FDIC special assessment of $14.7 million was accrued during the year ended December 31, 2023. Subsequent adjustments increased the special assessment by $1.9 million to $16.6 million. These adjustments were accrued during the year ended December 31, 2024. In 2025, the Bank’s portion of the special assessment was reduced, which decreased the Company’s FDIC insurance expense by $4.8 million. The reduction in the special assessment was due to a decrease in the FDIC’s estimation of losses, as well as a downward adjustment made to the initially reported uninsured deposits balance as of December 31, 2022. The special assessment is being paid in eight quarterly installments, which began in June 2024.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaiʻi.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

•Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low- and moderate-income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applications to open, close, or relocate a branch or facility. The Bank’s current CRA rating is “outstanding.”

•Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. Historically, the CFPB has exercised broad rule making authority for a wide range of consumer protection laws that apply to all providers of consumer products and services, including the Bank, as well as the authority to prohibit “unfair, deceptive or abusive” acts and practices. Additionally, under the Dodd-Frank Act, the CFPB has near-exclusive supervision authority, including examination authority, to assess compliance with federal consumer financial laws for a bank and its affiliates if the bank has total assets of more than $10 billion, which includes the Bank. With changes in priority of the new administration, the role of the CFPB is changing. The CFPB has adopted a deregulatory approach, with the CFPB recently announcing that it plans to roll back certain rulemakings adopted over the last several years and will limit its supervision and examination activity. The U.S. Congress is also pursuing Congressional Review Act resolutions or otherwise taking steps to overturn certain recent CFPB rulemaking. Nonetheless, the CFPB’s consumer protection laws and rules will continue to govern the Bank’s relationship with its customers unless and until they are changed. The timing and impact of any changes to the regulatory, enforcement, and supervisory priorities of the CFPB is not known at this time. Changes in applicable law or regulation, and in their application by regulators, may have a material effect on the business of the Company and the Bank.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys

general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions. These agencies are focusing their examinations on anti-money laundering compliance, and we will continue to monitor and augment, where necessary, the Company’s anti-money laundering compliance programs.

In January 2021, the Anti-Money Laundering Act of 2020 (“AMLA”), which amends the Bank Secrecy Act, was enacted. Among other things, the AMLA codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the U.S. Department of the Treasury to promulgate priorities for anti-money laundering and countering the financing of terrorism policy requires the development of standards by the U.S. Department of the Treasury for testing technology and internal processes for Bank Secrecy Act compliance; expands enforcement and investigation-related authority, including a significant expansion in the available sanctions for certain Bank Secrecy Act violations; and expands Bank Secrecy Act whistleblower incentives and protections. Many of the statutory provisions in the AMLA will require additional rulemaking, reports and other measures, and the impact of the AMLA will depend on, among other measures, the impact of the AMLA will depend on, among other things, rulemaking and implementation guidance.

As of December 31, 2025, we employed 1,877 full-time equivalent employees, of which 1,729 are located in the State of Hawaiʻi, with the remainder located in Guam, other Pacific Islands, and other U.S. states. None of our employees are subject to a collective bargaining agreement.

People are our heart and soul, and we value the contributions of all of our teammates. We are committed to building an engaged and connected employee community. We introduced a role dedicated to Culture and Employee Experience. A driving focus is creating a human-centric, inclusive and innovative environment that nurtures a strong sense of belonging, fuels continuous learning and develops effective leaders, who drive exceptional employee experiences and continued organizational success. Key areas of focus for us include:

We believe in a work environment where teammates feel they belong and be their authentic selves leading them to thrive, contribute and succeed. As of December 31, 2025, approximately 89% of our workforce identifies as minorities (non-Caucasian) and approximately 61% of our employees are female: 35% of senior leaders and 61% of managers are women. We conduct regular external pay equity studies to evaluate compensation practices and confirm that gender pay gaps do not exist. Our commitment is to create a workplace where every individual feels valued, known, empowered and inspired.

Leadership and Employee Development: We are committed to the success of our teammates and have focused on their growth and development both personally and professionally. We nurture a collaborative, digitally connected workplace aligned to the changing needs of the work environment. Future focused skills and professional development is provided to employees at all levels, with additional development sessions specifically targeted to managers and leaders. Making Leadership Excellence a Priority is a key component of the Employee Experience, and we need our leaders to deliver exceptional employee experiences and develop the workforce of tomorrow. Key initiatives include the continued support of executive coaching to elevate leadership capabilities, our senior leader development series called the Leadership Excellence Forum, a hybrid Pathways to Professional Excellence cohort with 38 employees from Oahu, the neighbor

islands and the West Pacific assisting our employees in reaching their educational goals by obtaining their first bachelor’s degree through our College Assistance Program and our Tuition Assistance Program for employees to take job-related courses at any accredited college. Additionally, with our continued focus on creating digitally fluent employees, in 2025 we rolled out three training modules for employees to complete in order to gain access to our artificial intelligence (“AI”) tool Microsoft Co-Pilot.

To help maintain Hawaiʻi’s special culture of ‘ohana and working together toward common goals, continued attention was paid to engaging teammates in a hybrid environment. Based on employee feedback from surveys, online and in-person sessions were continued in 2025 to connect with employees and encourage collaboration. “Recruit Connect” continued in 2025 to help teammates identify job opportunities within the Company and find out more about them. In some cases, sessions led to referred candidates joining the Bank, and to current employees finding a new career path. Our Managers and Teams utilize Rising Team, a team development tool to build stronger team dynamics. “Rising Team” continued to be a priority in 2025. This new and modern technology platform provides a way for us to strengthen our connection with our teammates. “Rising Team” enables managers to confidently facilitate kits with their team and offers everyone the opportunity to share thoughts and feedback in real time on a variety of leadership themed topics, such as Psychological Safety, Appreciation, Prioritization, Natural Talents as well as Mini-kit topics on Daily Energizers, Challenges and the Ideal Workspace. We also have customized to Bank of Hawaiʻi kits on our Leadership Principles, Employee Experience Principles and Operational Excellence.

Employee Benefits: We believe in enabling a healthy workforce and providing a benefits program that is designed to attract, retain, and engage employees. In addition to competitive insurance, healthcare, and retirement offerings, examples of more innovative and workforce-specific benefits offerings include mortgage discount program, student loan assistance program, well-being sessions, and personal finance education. We continue to incorporate mental health, financial wellness, social health, community, and a positive employee experience in our well-being strategies, in addition to physical health. In 2025, we expanded resources to support employees and actively sought new ways to foster an environment where employees feel empowered to bring their whole selves to work.

Health and Safety: The health and safety of our employees is a priority. We continue our commitment to workplace safety and workforce health to maintain business and operational continuity without diminishing our focus on both employee and customer safety.

The following lists the names, ages, and positions held during the past five years of the executive officers of Bank of Hawaii Corporation as of December 31, 2025. Peter S. Ho will retire from the Company and the Bank effective March 31, 2026. The Board of Directors appointed James C. Polk to the position of President and Chief Executive Officer of the Company, effective April 1, 2026. Additionally, Lead Independent Director Raymond P. Vara, will become Non-Executive Chairman of the Board, effective April 1, 2026.

Peter S. Ho, 60

Chairman and Chief Executive Officer - July 2010-present. President - April 2008-July 2024.

James C. Polk, 59

President and Chief Banking Officer - July 2024-present; Vice Chair and Chief Banking Officer - January 2022-July 2024; Vice Chair and Chief Commercial Officer - January 2020-December 2021; Vice Chair - 2016-present.

Bradley S. Satenberg, 54

Vice Chair and Chief Financial Officer - July 2025-present; Deputy Chief Financial Officer - July 2024-June 2025. From March 2018 to June 2024, Senior Vice President and Chief Financial Officer at Luther Burbank Savings, a California chartered bank and subsidiary of Luther Burbank Corporation (NASDAQ: LBC). At the time of its acquisition, Luther Burbank Savings had approximately $8 billion in total assets and Mr. Satenberg oversaw all finance and accounting functions for the bank, as well as investor relations for its public company parent.

Marco A. Abbruzzese, 60

Vice Chair and Senior Executive Director of Wealth Management - January 2022-present. Prior experience includes several senior executive leadership roles in wealth management at Wells Fargo, Citigroup, and Chase Manhattan. At Wells Fargo,

Mr. Abbruzzese served as Regional Managing Director overseeing its Washington, Oregon, and Alaska wealth management markets - June 2009-December 2021.

Matthew K.M. Emerson, 48

Vice Chair and Chief Retail Banking Officer - July 2024-present; Vice Chair and Chief Strategy Officer - November 2023-July 2024; Vice Chair - November 2022-present. Earlier roles include senior leadership in eCommerce/digital and consumer products at Bank of Hawai‘i.

Patrick M. McGuirk, 56

Vice Chair and Chief Administrative Officer - September 2023-present; Senior Executive Vice President and Chief General Counsel - November 2020-September 2023. From December 2014 to October 2020, Executive Vice President and General Counsel at Flagstar Bank (NYSE: FLG). Mr. McGuirk has over 25 years of financial services legal experience.

Taryn L. Salmon, 55

Vice Chair and Chief Information and Operations Officer - April 2024-present; Senior Executive Vice President and Chief Information Officer - December 2020-April 2024.

S. Bradley Shairson, 56

Vice Chair and Chief Risk Officer - March 2024-present; Vice Chair and Deputy Chief Risk Officer - May 2023-March 2024. From March 2017 to April 2023, Chief Operating Officer and Chief Risk Officer of Regions Bank Capital Markets for Regions Bank (NYSE: RF). Mr. Shairson was also previously the Chief Operating Officer and Chief Risk Officer of Investment Banking at Mitsubishi UFJ Union Bank.

Bank of Hawaii Corporation (“Bank of Hawai‘i Corporation” or the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawai‘i. The Parent’s principal operating wholly-owned subsidiary, Bank of Hawai‘i (“Bank of Hawaiʻi” or the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawai‘i. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System. The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaiʻi, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries are identified in Exhibit 21.1 to this Form 10-K and include, among others, Bankoh Investment Services, Inc. and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in securities brokerage, investment advisory services, and providing credit insurance. We are organized into three business segments for management reporting purposes: Consumer Banking, Commercial Banking, and Treasury and Other. See Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations” (“MD&A”) and Note 13 in Item 8. “Notes to Consolidated Financial Statements” for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaiʻi, 96813.

We use our website at https://ir.boh.com as a routine channel of distribution of Company information, including press releases, presentations, financial and other supplemental information, as a means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD. Accordingly, investors should monitor the investor relations portion of our website in addition to following our social media channels, press releases, SEC filings, and public conference calls and webcasts. None of the information provided on our website, in our press releases, public conference calls and webcasts, or through social media channels is incorporated into, or deemed to be a part of, this Annual Report on Form 10-K or in any other report or document we file with the SEC.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The federal banking regulators regularly issue new guidance and standards, and update existing guidance and standards, regarding cybersecurity intended to enhance cyber risk management among financial institutions. Financial institutions are expected to comply with such guidance and standards and to accordingly develop appropriate security controls and risk management process.

In November 2021, the United States federal bank regulatory agencies adopted a rule regarding notification requirements for banking organizations related to significant computer security incidents. Under this rule, a bank holding company, such as Parent, and a national bank, such as the Bank, are required to notify the Federal Reserve of OCC, respectively, within 36 hours of incidents that have materially disrupted or degraded, or are reasonably likely to materially disrupt or degrade, the banking organization's ability to deliver services to a material portion of its customer base, jeopardize the viability of key operations of the banking organization, or pose a threat to the financial stability of the United States.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaiʻi Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank(s). A BHC is also expected to commit resources to support its subsidiary bank(s) in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank(s) during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank(s).

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”), banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger under the Riegle-Neal Act. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaiʻi.

Bank of Hawaiʻi

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision of the FRB and examination by the Federal Reserve Bank of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaiʻi Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate to, among other compliance matters, operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take informal (non-public) or formal (public) supervisory actions against regulated entities, including BHCs and banks, that fail to meet such standards, including, without limitation, the issuance of written agreements, cease-and-desist orders, and consent orders, which may, among other things, result in restrictions on a bank’s ability to pay dividends, requirements to increase capital, restrictions on activities, the imposition of civil monetary penalties, and revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaiʻi and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is a subsidiary of the Bank and is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations, among other things, mandated capital and liquidity requirements, established standards for mortgage lenders, regulated executive and incentive-based compensation, imposed various consumer protections and numerous other provisions. Provisions also limit or

place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Capital Requirements

In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2024, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective actions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 in Item 8. “Notes to Consolidated Financial Statements” for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and preferred stock and to service its liabilities is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 in Item 8. “Notes to Consolidated Financial Statements.”

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital

and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also apply to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volcker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s financial condition and results of operation.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits held by the Bank through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Bank is assessed deposit insurance premiums by the FDIC using a risk-based assessment rate and adjusted average total assets. The Bank’s FDIC insurance assessment was $17.9 million in 2024, $28.3 million in 2023 and $6.5 million in 2022. The increase in the FDIC insurance during 2023 was primarily related to a special assessment, discussed below.

In November 2023, the FDIC implemented a special assessment to recover the loss to the Deposit Insurance Fund following the closures of Silicon Valley Bank, Signature Bank and First Republic Bank. The assessment was based on reported uninsured deposits as of December 31, 2022. The FDIC could cease collection early or extend the special assessment period as they deem necessary depending on whether the amount the FDIC collects from the special assessment is higher or lower than the actual or estimated FDIC losses. The initial FDIC special assessment of $14.7 million was accrued during the year ended December 31, 2023. Subsequent adjustments increased the special assessment by $1.9 million to $16.6 million. These adjustments were accrued during the year ended December 31, 2024. The special assessment is being paid in eight quarterly installments, which began in June 2024.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaiʻi.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

▪

Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applications to open, close, or relocate a branch or facility. The Bank’s current CRA rating is “outstanding.”

In October 2023, the U.S. banking agencies issued a final rule to amend their regulations implementing the CRA. The rule materially revises the current CRA framework, including the assessment areas in which a bank is evaluated to include activities associated with online and mobile banking, the tests used to evaluate the Bank in its assessment areas, new methods of calculating credit for lending, investment, and service activities, and additional data collection and reporting requirements. Most of the rule's provisions will become applicable on January 1, 2026. Reporting of the collected data will not be required until 2027.

▪

Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions. These agencies are focusing their examinations on anti-money laundering compliance, and we will continue to monitor and augment, where necessary, the Company's anti-money laundering compliance programs.

In January 2021, the Anti-Money Laundering Act of 2020 (“AMLA”), which amends the Bank Secrecy Act, was enacted. Among other things, the AMLA codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the U.S. Department of the Treasury to promulgate priorities for anti-money laundering and countering the financing of terrorism policy' requires the development of standards by the U.S. Department of the Treasury for testing technology and internal processes for Bank Secrecy Act compliance; expands enforcement and investigation-related authority, including a significant expansion in the available sanctions for certain Bank Secrecy Act violations; and expands Bank Secrecy Act whistleblower incentives and protections. Many of the statutory provisions in the AMLA will require additional rulemaking, reports and other measures, and the impact of the AMLA will depend on, among other measures, the impact of the AMLA will depend on, among other things, rulemaking and implementation guidance.

As of December 31, 2024, we employed 1,865 full-time equivalent employees, of which 1,732 are located in the State of Hawaiʻi, with the remainder located in Guam, other Pacific Islands, and other U.S. states. None of our employees are subject to a collective bargaining agreement.

People are our heart and soul, and we value the contributions of all of our teammates. We are committed to building an engaged and connected employee community. We introduced a role dedicated to Culture and Employee Experience. A driving focus is creating a human-centric, inclusive and innovative environment that nurtures a strong sense of belonging, fuels continuous learning and develops effective leaders, who drive exceptional employee experiences and continued organizational success. Key areas of focus for us include:

We believe in a work environment where teammates feel they belong and be their authentic selves leading them to thrive, contribute and succeed. As of December 31, 2024, approximately 88% of our workforce identifies as minorities (non-Caucasian) and approximately 61% of our employees are female. Among our senior leaders and managers, 82% are minorities and 59% are female. We conduct regular external pay equity studies to evaluate compensation practices and confirm that gender pay gaps do not exist. Our commitment is to create a workplace where every individual feels valued, known, empowered and inspired.

Leadership and Employee Development: We are committed to the success of our teammates and have focused on their growth and development both personally and professionally. We nurture a collaborative, digitally connected workplace aligned to the changing needs of the work environment. Skills and professional development training is provided to employees at all levels, with additional development sessions specifically targeted to managers and leaders. Making Leadership Excellence a Priority is a key component of the Employee Experience, and we need our leaders to deliver exceptional employee experiences and develop the successful workforce of tomorrow. Key initiatives include the continued support of executive coaching to elevate leadership capabilities, a new senior leader development series called the Leadership Excellence Forum, a competitive Leadership Development Program, a hybrid Pathways to Professional Excellence cohort with 36 employees from Oahu, the neighbor islands and the West Pacific and an enhanced online performance management process that empowers the employee to own the first step of the performance review process.

To help maintain Hawaiʻi’s special culture of ‘ohana and working together toward common goals, continued attention was paid to engaging teammates in a hybrid environment. Based on employee feedback from surveys, online and in-person sessions were continued in 2024 to connect with employees and encourage collaboration. “Recruit Connect” continued in 2024 to help teammates identify job opportunities within the Company and find out more about them. In some cases, sessions led to referred candidates joining the Bank, and to current employees finding a new career path. “Manager Excellence Forums” continued in

2024 as a platform connecting managers so that they can learn from and support one another when facing real management issues and discuss practical solutions. Manager engagement has been key to navigating the ever-changing business environment, and these forums help managers stay connected and improve their management skills while moving forward with their teams. Topics have included: Evaluating Employees and Meaningful Conversations to prepare our managers for the 2024 Performance, Merit & Bonus season, Rising Team, and how our leaders can continue to build stronger team dynamics. “Rising Team” continued to be a priority in 2024. This new and modern technology platform provides a way for us to strengthen our connection with our teammates. “Rising Team” enables managers to confidently facilitate sessions with their team and offers everyone the opportunity to share thoughts and feedback in real time on a variety of leadership themed topics, such as Psychological safety, Appreciation, Natural talents and Career horizons.

Employee Benefits: We believe in enabling a healthy workforce and providing a benefits program that is designed to attract, retain, and engage employees. In addition to competitive insurance, healthcare, and retirement offerings, examples of more innovative and workforce-specific benefits offerings include: mortgage discount program, student loan assistance program, well-being sessions, and personal finance education. We continue to incorporate mental health, financial well-being, social health, community, and a positive employee experience in their well-being strategies, in addition to physical health. In 2024, we expanded resources to support employees and actively sought new ways to foster an environment where employees feel empowered to bring their whole selves to work.

Health and Safety: The health and safety of our employees is a priority. We continue our commitment to workplace safety and workforce health to maintain business and operational continuity without diminishing our focus on both employee and customer safety.

Listed below are executive officers of the Parent.

Peter S. Ho, 59

Chairman and Chief Executive Officer since July 2010; President from April 2008 to July 2024.

James C. Polk, 58

President since July 2024; Chief Banking Officer since January 2022; Chief Commercial Officer from January 2020 to December 2021; Vice Chair since June 2016.

Dean Y. Shigemura, 61

Vice Chair since December 2017; Chief Financial Officer since March 2017.

Marco A. Abbruzzese, 59

Vice Chair, Senior Executive Director of Wealth Management since January 2022; Regional Managing Director - Washington, Oregon and Alaska of Wells Fargo from June 2009 to December 2021.

Matthew K.M. Emerson, 47

Chief Retail Banking Officer since July 2024; Chief Strategy Officer since November 2023; Vice Chair since November 2022; Senior Executive Director of Mortgage Banking and Loans from February 2020 to November 2023; Senior Executive Vice President and Senior Executive Director of eCommerce from September 2018 to February 2020.

Patrick M. McGuirk, 55

Vice Chair and Chief Administrative Officer since September 2023; Senior Executive Vice President and Chief General Counsel from November 2020 to September 2023; Executive Vice President and General Counsel at Flagstar Bank from December 2014 to October 2020.

Taryn L. Salmon, 54

Vice Chair and Chief Information and Operations Officer since April 2024.

S. Bradley Shairson, 55

Vice Chair and Chief Risk Officer since March 2024; Deputy Chief Risk Officer from May 2023 to March 2024; Chief Operating Officer and Chief Risk Officer of Regions Bank Capital Markets from March 2017 to April 2023.

Bank of Hawaii Corporation (“Bank of Hawai‘i Corporation” or the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (“Bank of Hawai‘i” or the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries are identified in Exhibit 21.1 to this Form 10-K and include, among others, Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in securities brokerage, investment advisory services, and providing credit insurance. We are organized into three business segments for management reporting purposes: Consumer Banking, Commercial Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

We use our website at https://ir.boh.com as a routine channel of distribution of Company information, including press releases, presentations, financial and other supplemental information, as a means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD. Accordingly, investors should monitor the investor relations portion of our website in addition to following our social media channels, press releases, SEC filings, and public conference calls and webcasts. None of the information provided on our website, in our press releases, public conference calls and webcasts, or through social media channels is incorporated into, or deemed to be a part of, this Annual Report on Form 10-K or in any other report or document we file with the SEC.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

Table of Contents

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank(s). A BHC is also expected to commit resources to support its subsidiary bank(s) in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank(s) during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank(s).

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”), banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger under the Riegle-Neal Act. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawai‘i

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision of the FRB and examination by the Federal Reserve Bank of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate to, among other compliance matters, operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take informal (non-public) or formal (public) supervisory actions against regulated entities, including BHCs and banks, that fail to meet such standards, including, without limitation, the issuance of written agreements, cease-and-desist orders, and consent orders, which may, among other things, result in restrictions on a bank’s ability to pay dividends, requirements to increase capital, restrictions on activities, the imposition of civil monetary penalties, and revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations, among other things, mandated capital and liquidity requirements, established standards for mortgage lenders, regulated executive and incentive-based compensation, imposed various consumer protections and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Table of Contents

Capital Requirements

In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2023, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective actions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its liabilities is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These

Table of Contents

restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also apply to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volcker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits held by the Bank through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Bank is assessed deposit insurance premiums by the FDIC using a risk-based assessment rate and an adjusted average total assets. The Bank’s FDIC insurance assessment was $28.3 million in 2023, $6.5 million in 2022, and $6.5 million in 2021.

In November 2023, the FDIC implemented a special assessment to recover the loss to the Deposit Insurance Fund following the closures of Silicon Valley Bank, Signature Bank and First Republic Bank earlier in the year. The assessment was based on reported uninsured deposits as of December 31, 2022. The FDIC could cease collection early or extend the special assessment period as they deem necessary depending on whether the amount the FDIC collects from the special assessment is higher or lower than the actual or estimated FDIC losses. The Bank's share of the FDIC special assessment was $14.7 million which was recorded in the fourth quarter of 2023 and is payable in eight quarterly installments starting in June 2024.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

•

Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applications to open, close, or relocate a branch or facility. The Bank’s current CRA rating is “outstanding”.

Table of Contents

•

Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2023, we employed 1,899 full-time equivalent employees, of which 1,792 are located in the State of Hawaii, with the remainder located in Guam and other Pacific Islands. None of our employees are subject to a collective bargaining agreement.

Table of Contents

People are the heart and soul of the Company, and as such, the Company values the contributions of all of its employees and is committed to building an engaged and connected employee community within the Company. With the introduction of a new role dedicated to Culture and Employee Experience, deep focus was spent on creating a human-centric, inclusive and innovative environment that nurtures a strong sense of belonging, fuels continuous learning, and focuses on developing effective leaders, ultimately driving exceptional employee experience and sustainable organizational success. Key areas of focus for the Company include:

Diversity and Inclusion: The Company believes that a diverse and inclusive workforce fosters an environment where everyone can thrive and be successful. As of December 31, 2023, approximately 88% of our workforce are minorities (non-Caucasian) and approximately 62% of our workforce are female. Of our senior leaders and managers, 82% are minorities and 60% are female. We conduct an external pay equity study periodically to evaluate the gender pay gap and confirm one does not exist.

Employee Development and Training: The Company is committed to providing all employees with the opportunity to develop personally and professionally. We nurture a collaborative, digitally connected workplace to support changing needs. We invest in people leadership capability to deliver exceptional employee experience and develop our workforce of tomorrow. Skills and professional development training is provided to employees at all levels, with additional development sessions specifically targeted to managers and leaders. Key initiatives included the continued support of executive coaching to elevate leadership capabilities, a competitive Leadership Development Program, a hybrid Pathways to Professional Excellence cohort with 36 employees and an enhanced online performance management process that empowers the employee to own the first step of the performance review process.

To help maintain Hawaii’s special culture of ‘ohana and working together toward common goals, continued attention was paid to engaging teammates in a hybrid environment. Based on employee feedback from surveys, online and in-person sessions were continued in 2023 to connect with employees and encourage collaboration. “Recruit Connect” continued in 2023 to help teammates identify job opportunities within the Company and find out more about them. In some cases, sessions led to referred candidates joining the Bank, and to current employees finding a new career path. “Manager Connect”, formerly known as “Manager Excellence Forums” also returned in 2023 as a platform connecting managers so that they can learn from and support one another when facing real management issues, and discuss practical solutions. Manager engagement has been key to navigating the ever changing business environment, and these forums help managers stay connected and improve their management skills while moving forward with their teams. Topics have included: Evaluating Employees and Meaningful Conversations to prepare our managers for the 2023 Performance, Merit & Bonus season, Rising Team, and how our leaders can continue to build stronger team dynamics. “Rising Team” continued to be a priority in 2023. This new and modern technology platform provides a way for us to strengthen our connection with our teammates. “Rising Team” enables managers to confidently facilitate sessions with their team and offers everyone the opportunity to share thoughts and feedback in real time on a variety of leadership themed topics, such as Psychological safety, Appreciation, Natural talents and Career horizons.

Employee Benefits: The Company believes in enabling a healthy workforce and providing a benefits program that is designed to attract, retain, and engage employees. In addition to competitive insurance, healthcare, and retirement offerings, examples of more innovative and workforce-specific benefits offerings include: mortgage discount program, student loan assistance program, well-being sessions, and personal finance education. The Bank continues to incorporate mental health, financial well-being, social health, community, and a positive employee experience in their well-being strategies, in addition to physical health. In 2023, the Bank made additional resources available to employees and continued to look for more opportunities to support employees and cultivate an environment where employees can be their whole selves.

Health and Safety: The health and safety of our employees is a priority. We continue our commitment to workplace safety and workforce health to maintain business and operational continuity without diminishing our focus on both employee and customer safety.

Table of Contents

Listed below are executive officers of the Parent.

Peter S. Ho, 58

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Dean Y. Shigemura, 60

Vice Chair since December 2017; Chief Financial Officer since March 2017.

Marco A. Abbruzzese, 58

Vice Chair, Senior Executive Director of Wealth Management since January 2022; Regional Managing Director - Washington and Alaska of Wells Fargo from May 2009 to December 2021.

Sharon M. Crofts, 58

Vice Chair, Client Solutions Group since April 2016.

Matthew K.M. Emerson, 46

Chief Strategy Officer since November 2023; Vice Chair since November 2022; Senior Executive Director of Mortgage Banking and Loans from February 2020 to November 2023; Executive Vice President and Senior Executive Director of eCommerce from September 2018 to February 2020.

Patrick M. McGuirk, 54

Vice Chair and Chief Administrative Officer since September 2023; Senior Executive Vice President and Chief General Counsel from November 2020 to September 2023; Executive Vice President and General Counsel at Flagstar Bank from December 2014 to October 2020.

James C. Polk, 57

Chief Banking Officer since January 2022; Chief Commercial Officer from April 2020 to December 2021; Vice Chair since June 2016.

Mary E. Sellers, 67

Vice Chair and Chief Risk Officer since July 2005.

S. Bradley Shairson, 54

Vice Chair and Deputy Chief Risk Officer since May 2023; Chief Credit Officer from May 2023 to January 2024; Chief Operating Officer and Chief Risk Officer of Regions Bank Capital Markets from March 2017 to April 2023.

Jeanne M. Dressel, 62

Principal Accounting Officer, Senior Vice President and Controller since November 2022; Global Controller of Blockchain.com from September 2021 to October 2022; Senior Vice President and Controller of First Interstate Bank from October 2018 to September 2021.

General

Bank of Hawaii Corporation (“Bank of Hawai‘i Corporation” or the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (“Bank of Hawai‘i” or the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries are identified in Exhibit 21.1 to this Form 10-K and include, among others, Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in securities brokerage, investment advisory services, and providing credit insurance.

We are organized into three business segments for management reporting purposes: Consumer Banking, Commercial Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

Competition

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Supervision and Regulation

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank(s). A BHC is also expected to commit resources to support its subsidiary bank(s) in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank(s) during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank(s).

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”) banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger under the Riegle-Neal Act. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawai‘i

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision of the FRB and examination by the Federal Reserve Bank of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate to, among other compliance matters, operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties and restitution, the issuance of cease-and-desist orders, and other actions, up to and including revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations, among other things, mandated capital and liquidity requirements, established standards for mortgage lenders, regulated executive and incentive-based compensation, imposed various consumer protections and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Capital Requirements

In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

Table of Contents

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2022, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective actions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its liabilities is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also apply to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

Table of Contents

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volcker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits held by the Bank through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Bank is assessed deposit insurance premiums by the FDIC using a risk-based assessment rate and an adjusted average total assets. The Bank’s FDIC insurance assessment was $6.5 million in 2022, $6.5 million in 2021, and $5.8 million in 2020.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

• Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applications to open, close, or relocate a branch or facility. The Bank’s current CRA rating is “outstanding”.

• Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

Table of Contents

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Human Capital Management

As of December 31, 2022, we employed 2,076 full-time equivalent employees, of which 1,973 are located in the State of Hawaii, with the remainder located in Guam and other Pacific Islands. None of our employees are subject to a collective bargaining agreement.

The Company values the contributions of all of its employees and is committed to building an active and connected employee community within the Company. Key areas of focus for the Company include:

Diversity and Inclusion: The Company believes that a diverse and inclusive workforce fosters an environment where everyone can thrive and be successful. As of December 31, 2022, approximately 87% of our workforce are minorities (non-Caucasian) and approximately 63% of our workforce are female, which accounts for 43% and 60% of our senior leaders and managers, respectively. We conduct an external pay equity study periodically to evaluate that a gender pay gap does not exist.

Table of Contents

Employee Development and Training: The Company is committed to providing all employees with the opportunity to grow, connect and thrive within the Company. We foster a seamlessly collaborative, digitally connected workplace to support changing needs. We enhance people leadership capability to deliver exceptional employee experience and develop our workforce of tomorrow. Skills and professional development training is provided to employees at all levels, with additional development sessions specifically targeted to managers and leaders. Key initiatives included the continued support of executive coaching to elevate leadership capabilities, the launch of a new and competitive Leadership Development Program, the first hybrid Pathways to Professional Excellence cohort with the largest enrollment of 38 employees and an enhanced online performance management process that allows the employee to own the first step of the performance review process.

To help maintain Hawaii’s special culture of ‘ohana and working together toward common goals, renewed attention was paid to engaging teammates in a hybrid environment. Based on employee feedback from surveys, online and in-person sessions were created in 2022 to connect with employees and encourage collaboration. “Exec Connect” kicked off in January with our Executive Committee and returned in November during Employee Experience (“EX”) Month with our Operating Committee, giving employees opportunities to interact with members of the Executive Committee and Operating Committee. Employees were able to hear about high level strategies and share their own concerns and observations. “Exec Connect” proved to be especially valuable in welcoming new employees, allowing them to familiarize themselves with key executives and other employees. “Recruit Connect” also continued in 2022 to help teammates identify job opportunities within the Company and find out more about them. In some cases, sessions led to referred candidates joining the Bank, and to current employees finding a new career path. “Manager Excellence Forums” continued in February 2022 as a platform connecting managers so that they can learn from and support one another when facing real management issues, and discuss practical solutions. Manager engagement has been key to navigating the ever changing business environment, and these forums help managers stay connected and improve their management skills while moving forward with their teams. Forum topics are suggested by the participants, who meet every other month, and have included Reemergence, Mastering Change, Employee Experience, opportunities to deliver great EX, importance of psychological safety, and how our leaders can continue to build stronger teams. “Rising Team” launched in October 2022 to offer a new and modern way for us to strengthen our connection with our teammates. “Rising Team” is a software tool that provides managers a way to facilitate sessions with their team and offers everyone the opportunity to share thoughts and feedback in real time on a variety of leadership themed topics, such as Psychological safety, Appreciation, Natural talents and Career horizons.

Employee Benefits: The Company believes in enabling a healthy workforce and providing a benefits program that is designed to attract, retain, and motivate employees. In addition to competitive insurance, healthcare, and retirement offerings, examples of more innovative and workforce-specific benefits offerings include: mortgage discount program, student loan assistance program, well-being sessions, and personal finance education. In 2022, the Bank introduced a new Paid Time Off benefit that provides our employees with more flexibility and paid Parental Leave.

Health and Safety: The health and safety of our employees is a priority. In 2022, our commitment to workplace safety and workforce health enabled the Company to maintain business and operational continuity without diminishing our focus on both employee and customer safety during the COVID-19 pandemic. We also invested in ventilation system upgrades. Employees who chose not to get COVID vaccinated, were required to complete COVID testing weekly. The Company paid for the testing, provided paid time off to complete the weekly testing, and secured on site testing arrangements for our employees. The Company hosted onsite COVID-19 vaccine and/or booster shot clinics, as well as provided paid time off for employees to receive their COVID-19 vaccine and/or booster shot.

Table of Contents

Information about our Executive Officers

Listed below are executive officers of the Parent.

Peter S. Ho, 57

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Dean Y. Shigemura, 59

Vice Chair since December 2017; Chief Financial Officer since March 2017.

Marco A. Abbruzzese, 57

Vice Chair, Senior Executive Director of Wealth Management since January 2022; Regional Managing Director - Washington and Alaska of Wells Fargo from May 2009 to December 2021.

Sharon M. Crofts, 57

Vice Chair, Client Solutions Group since April 2016.

James C. Polk, 56

Chief Banking Officer since January 2022; Chief Commercial Officer from April 2020 to December 2021; Vice Chair since June 2016.

Mary E. Sellers, 66

Vice Chair and Chief Risk Officer since July 2005.

Matthew K.M. Emerson, 45

Vice Chair since November 2022; Senior Executive Director of Mortgage Banking and Loans since February 2020; Executive Vice President and Senior Executive Director of eCommerce from September 2018 to February 2020; Executive Vice President, Director of Business and Retail Deposit Products from February 2018 to September 2018.

Jeanne M. Dressel, 61

Principal Accounting Officer, Senior Vice President and Controller since November 2022; Global Controller of Blockchain.com from September 2021 to October 2022; Senior Vice President and Controller of First Interstate Bank from October 2018 to September 2021; Corporate Controller of Ethos Lending LLC from February 2017 to October 2018.

General

Bank of Hawaii Corporation (the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries are identified in Exhibit 21.1 to this Form 10-K and include, among others, Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in equipment leasing, securities brokerage, investment advisory services, and providing credit insurance.

We are organized into three business segments for management reporting purposes: Consumer Banking, Commercial Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

Competition

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Supervision and Regulation

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank(s). A BHC is also expected to commit resources to support its subsidiary bank(s) in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank(s) during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank(s).

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”) banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger under the Riegle-Neal Act. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawaii

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision of the FRB and examination by the Federal Reserve Bank of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate to, among other compliance matters, operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties and restitution, the issuance of cease-and-desist orders, and other actions, up to and including revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations, among other things, mandated capital and liquidity requirements, established standards for mortgage lenders, regulated executive and incentive-based compensation, imposed various consumer protections and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Capital Requirements

In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

Table of Contents

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2021, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective actions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its liabilities is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also extend to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

Table of Contents

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits held by the Bank through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Bank is assessed deposit insurance premiums by the FDIC using a risk-based assessment rate and an adjusted average total assets. The Bank’s FDIC insurance assessment was $6.5 million in 2021, $5.8 million in 2020, and $5.2 million in 2019.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

• Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applications to open, close, or relocate a branch or facility. The Bank’s current CRA rating is “outstanding”.

• Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

Table of Contents

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Human Capital Management

As of December 31, 2021, we employed 2,056 full-time equivalent employees, of which 1,952 are located in the State of Hawaii, with the remainder located in Guam and other Pacific Islands. None of our employees are subject to a collective bargaining agreement.

The Company values the contributions of all of its employees and is committed to building an active and connected employee community within the Company. Key areas of focus for the Company include:

Diversity and Inclusion: The Company believes that a diverse and inclusive workforce fosters an environment where everyone can thrive and be successful. As of December 31, 2021, approximately 87% of our workforce are minorities (non-Caucasian) and approximately 63% of our workforce are female, which accounts for 45% and 56% of our senior leaders and managers, respectively. We conduct an external pay equity study periodically to evaluate that a gender pay gap does not exist.

Table of Contents

Employee Development and Training: The Company is committed to providing all employees with the opportunity to grow, connect and thrive within the Company. We foster a seamlessly collaborative, digitally connected workplace to support changing needs. We enhance people leadership capability to deliver exceptional employee experience and develop our workforce of tomorrow. Skills and professional development training is provided to employees at all levels, with additional development sessions specifically targeted to managers and leaders. Key initiatives included the launch of an enhanced Advanced Leaders program to elevate leadership capabilities, the development of a new and competitive Leadership Development Program, the first all virtual Pathways to Professional Excellence cohort with the largest enrollment of 35 employees and an improved online performance management process that allows the employee to own the first step of the performance review process.

To help maintain Hawaii’s special culture of ‘ohana and working together toward common goals, renewed attention was paid to engaging teammates during the pandemic, especially those working remotely. Based on employee feedback from surveys, special online sessions were created in 2021 to connect with employees and encourage collaboration. “Exec Connect” launched in April 2021, giving employees opportunities to interact with members of the Executive Committee. Employees hear about high level strategies and share their own concerns and observations. “Exec Connect” was a hit, and proved especially valuable in welcoming new employees, allowing them to familiarize themselves with key executives and other employees. “Recruit Connect” launched in July 2021 to help teammates identify job opportunities within the Company and find out more about them. In some cases, sessions led to referred candidates joining the Bank, and to current employees finding a new career path. “Manager Excellence Forums” launched in January 2021 as a platform connecting managers so that they can learn from and support one another when facing real management issues, and discuss practical solutions. Manager engagement has been key to navigating the pandemic environment, and these forums help managers stay connected and improve their management skills while moving forward with their teams. Forum topics are suggested by the participants, who meet every other month, and have included increasing employee morale, resilience, managing hybrid teams, self-care, and employee retention.

Employee Benefits: The Company believes in enabling a healthy workforce and providing a benefits program that is designed to attract, retain, and motivate employees. In addition to competitive insurance, healthcare, and retirement offerings, examples of more innovative and workforce-specific benefits offerings include: mortgage discount program, student loan assistance program, fitness classes, well-being sessions, and personal finance education. During the pandemic, the Company enhanced their benefit offerings to include changes to the Retirement Savings Plan and medical benefits, and increased mental wellness resources.

Health and Safety: The health and safety of our employees is a priority. In 2021, our commitment to workplace safety and workforce health enabled the Company to maintain business and operational continuity without diminishing our focus on both employee and customer safety during the COVID-19 pandemic. Examples of specific initiatives to enhance on-site safety include daily employee health screening as well as temperature scanning and social distancing protocols in both office and branch locations. We also invested in ventilation system upgrades and installed physical health guards/barriers. Employees who chose not to get COVID vaccinated, were required to complete COVID testing weekly. The Company paid for the testing, provided paid time off to complete the weekly testing, and secured on site testing arrangements for our employees.

Table of Contents

Information about our Executive Officers

Listed below are executive officers of the Parent.

Peter S. Ho, 56

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Dean Y. Shigemura, 58

Vice Chair since December 2017; Chief Financial Officer since March 2017; Senior Executive Vice President from May 2008 to November 2017; Controller from August 2014 to February 2017.

Sharon M. Crofts, 56

Vice Chair, Client Solutions Group since April 2016; Vice Chair, Operations and Technology from October 2012 to March 2016.

James C. Polk, 55

Chief Banking Officer since January 2022; Chief Commercial Officer from April 2020 to December 2021; Vice Chair since June 2016.

Mary E. Sellers, 65

Vice Chair and Chief Risk Officer since July 2005.

Andrea Wilson Ignacio, 49

Principal Accounting Officer since April 2020; Senior Vice President and Controller since August 2019; Vice President, Finance and Accounting Operations from August 2017 to July 2019.

Table of Contents

General

Bank of Hawaii Corporation (the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries are identified in Exhibit 21.1 to this Form 10-K and include, among others, Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in equipment leasing, securities brokerage, investment advisory services, and providing credit insurance.

We are organized into three business segments for management reporting purposes: Consumer Banking, Commercial Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

Competition

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Supervision and Regulation

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”) banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawaii

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision and examination by the FRB of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties and restitution, the issuance of cease-and-desist orders, and other actions, up to and including revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Capital Requirements

In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

Table of Contents

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2020, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective actions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its liabilities is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also extend to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

Table of Contents

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Company is assessed deposit insurance premiums by the FDIC using a base rate, to which is added temporary surcharges that are used to establish a FDIC reserve fund and pay certain bond obligations. A temporary surcharge ended in September 2018. The Bank’s FDIC insurance assessment was $5.8 million in 2020, $5.2 million in 2019, and $7.7 million in 2018.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

• Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applications to open, close, or relocate a branch or facility. The Bank’s current CRA rating is “outstanding”.

• Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

Table of Contents

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Human Capital Management

As of December 31, 2020, we employed 2,022 full-time equivalent employees, of which 1,932 are located in the State of Hawaii, with the remainder located in Guam and other Pacific Islands. None of our employees are subject to a collective bargaining agreement.

The Company values the contributions of all of its employees and is committed to building an active and connected employee community within the Company. Key areas of focus for the Company include:

Diversity & Inclusion: The Company believes that a diverse and inclusive workforce fosters an environment where everyone can thrive and be successful. As of December 31, 2020, approximately 86% of our workforce are minorities (non-Caucasian) and approximately 64% of our workforce are female, which accounts for 43% and 60% of our senior leaders and managers, respectively. We conduct an external pay equity study periodically to evaluate that a gender pay gap does not exist.

Table of Contents

Employee Development and Training: The Company is committed to providing all employees with the opportunity to grow, connect and thrive within the Company. A review of organizational talent and succession planning occurs annually to enable senior leadership to monitor the development of top talent within the Company. Skills and professional development training is provided to employees at all levels, with additional development sessions specifically targeted to managers and leaders. Current key initiatives include the launch of an Advanced Leaders program to elevate leadership capabilities, as well as the development of Emerging Leaders and Aspiring Leaders programs to cultivate future talent.

Employee Benefits: The Company believes in enabling a healthy workforce and providing a benefits program that is designed to attract, retain, and motivate employees. In addition to competitive insurance, healthcare, and retirement offerings, examples of more innovative and workforce-specific benefits offerings include: mortgage discount program, student loan assistance program, fitness classes, well-being sessions, and personal finance education.

Health & Safety: The health and safety of our employees is a priority. In 2020, our commitment to workplace safety and workforce health enabled the Company to maintain business and operational continuity without diminishing our focus on both employee and customer safety during the COVID-19 pandemic. Examples of specific initiatives to enhance on-site safety include daily employee health screening as well as temperature scanning and social distancing protocols in both office and branch locations. We also invested in ventilation system upgrades and installed physical health guards/barriers.

Information about our Executive Officers

Listed below are executive officers of the Parent as of December 31, 2020.

Peter S. Ho, 55

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Dean Y. Shigemura, 57

Treasurer since October 2020; Vice Chair since December 2017; Chief Financial Officer since March 2017; Senior Executive Vice President and Controller from August 2014 to February 2017.

Sharon M. Crofts, 55

Vice Chair, Client Solutions Group since April 2016; Vice Chair, Operations and Technology from October 2012 to March 2016.

James C. Polk, 54

Vice Chair, Chief Commercial Officer since April 2020; Vice Chair, Consumer Lending and Deposit Product Group from September 2018 to March 2020 and Consumer and Residential Lending from April 2018 to March 2020; Vice Chair, Mortgage Banking from July 2017 to March 2018; Vice Chair, The Private Bank from June 2016 to June 2017; Senior Executive Vice President, Consumer Banking from January 2016 to May 2016; Senior Executive Vice President, Mortgage Banking from August 2014 to January 2016.

Mary E. Sellers, 64

Vice Chair and Chief Risk Officer since July 2005.

Andrea Wilson Ignacio, 48

Principal Accounting Officer since April 2020; Senior Vice President and Controller since August 2019.

Table of Contents

Bank of Hawaii Corporation (the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in equipment leasing, securities brokerage, investment advisory services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services and Private Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”) banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawaii

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision and examination by the FRB of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties and restitution, the issuance of cease-and-desist orders, and other actions, up to and including revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Table of Contents

Capital Requirements

In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2019, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective action, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

Table of Contents

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also extend to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Company is assessed deposit insurance premiums by the FDIC using a base rate, to which is added temporary surcharges that are used to establish a FDIC reserve fund and pay certain bond obligations. A temporary surcharge ended in September 2018. The Bank’s FDIC insurance assessment was $5.2 million in 2019, $7.7 million in 2018, and $8.7 million in 2017.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

• Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applications to open, close, or relocate a branch or facility. The Bank’s current CRA rating is “outstanding”.

Table of Contents

• Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2019, we employed 2,124 full-time equivalent employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2019.

Peter S. Ho, 54

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Dean Y. Shigemura, 56

Vice Chair since December 2017, and Chief Financial Officer since March 2017; Senior Executive Vice President and Controller from August 2014 to February 2017.

Sharon M. Crofts, 54

Vice Chair, Client Solutions Group since April 2016; Vice Chair, Operations and Technology from October 2012 to March 2016.

Wayne Y. Hamano, 65

Vice Chair since December 2008 and Chief Commercial Officer since September 2007.

Kent T. Lucien, 66

Vice Chair and Chief Strategy Officer since March 2017; Vice Chair and Chief Financial Officer from April 2008 to February 2017.

James C. Polk, 53

Vice Chair, Consumer Lending and Deposit Product Group since September 2018 and Consumer and Residential Lending since April 2018; Vice Chair, Mortgage Banking from July 2017 to March 2018; Vice Chair, The Private Bank from June 2016 to June 2017; Senior Executive Vice President, Consumer Banking from January 2016 to May 2016; Senior Executive Vice President, Mortgage Banking from August 2014 to January 2016.

Mark A. Rossi, 70

Vice Chair, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007.

Mary E. Sellers, 63

Vice Chair and Chief Risk Officer since July 2005.

Andrea Wilson Ignacio, 47

Senior Vice President and Controller since August 2019.

Table of Contents

Bank of Hawaii Corporation (the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (the “Bank”), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in equipment leasing, securities brokerage, investment advisory services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services and Private Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company has developed an effective competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”) banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawaii

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision and examination by the FRB of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties and restitution, the issuance of cease-and-desist orders, and other actions, up to and including revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Table of Contents

Capital Requirements

In July, 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2018, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective action, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

Table of Contents

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also extend to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volker Rule.” The Volcker Rule generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Company is assessed deposit insurance premiums by the FDIC using a base rate, to which is added temporary surcharges that are used to establish a FDIC reserve fund and pay certain bond obligations. The Bank’s FDIC insurance assessment was $7.7 million in 2018, $8.7 million in 2017, and $8.6 million in 2016.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, its Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

• Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applicants to open or relocate a branch or facility. The Bank’s current CRA rating is “outstanding”.

Table of Contents

• Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designed Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2018, we employed 2,122 full-time equivalent employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2018.

Peter S. Ho, 53

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Dean Y. Shigemura, 55

Vice Chair since December 2017, and Chief Financial Officer since March 2017; Senior Executive Vice President and Controller from August 2014 to February 2017; Senior Executive Vice President and Treasurer from May 2008 to July 2014.

Sharon M. Crofts, 53

Vice Chair, Client Solutions Group since April 2016; Vice Chair, Operations and Technology from October 2012 to March 2016.

Wayne Y. Hamano, 64

Vice Chair since December 2008 and Chief Commercial Officer since September 2007.

Kent T. Lucien, 65

Vice Chair and Chief Strategy Officer since March 2017; Vice Chair and Chief Financial Officer from April 2008 to February 2017.

James C. Polk, 52

Vice Chair, Consumer Lending and Deposit Product Group since September 2018 and Consumer and Residential Lending since April 2018; Vice Chair, Mortgage Banking from July 2017 to March 2018; Vice Chair, The Private Bank from June 2016 to June 2017; Senior Executive Vice President, Consumer Banking from January 2016 to May 2016; Senior Executive Vice President, Mortgage Banking from August 2014 to January 2016; Senior Executive Vice President, Commercial Banking from September 2010 to July 2014.

Mark A. Rossi, 69

Vice Chair, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007.

Mary E. Sellers, 62

Vice Chair and Chief Risk Officer since July 2005.

Brent T. Flygar, 51

Senior Vice President and Controller since March 2017.

Table of Contents

Bank of Hawaii Corporation (the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (the “Bank”), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in equipment leasing, securities brokerage, investment advisory services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services and Private Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, we believe the Company has developed an effective competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a bank holding company under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank. In 2016, the FRB reaffirmed the policy by signaling concerns about some holding companies creating arrangements favoring existing shareholders in ways that might limit their financing flexibility and the ability to raise capital in the future.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”) banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawaii

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision and examination by the FRB of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. For example, these regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties and restitution, the issuance of cease-and-desist orders, and other actions including closure of an institution in extreme cases.

Bankoh Investment Services, Inc., the broker-dealer and investment advisor subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by requiring ongoing stress testing of banks’ capital, mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Most of the rules and regulations have been implemented. These new rules and regulations have and will continue to significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions, including the Company. It remains difficult to anticipate or predict the overall future financial impact the Dodd-Frank Act will have on the Company, our customers, our financial condition and results of operations, or the financial industry in general. The Company continues to monitor and implement rules and regulations as they are adopted and modified, and to evaluate their application to our current and future operations.

Table of Contents

Capital Requirements

In July, 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act. The Rules applied to the Company beginning in 2015. The Rules also include a new capital conservation buffer which began phasing in on January 1, 2016 and increases annually until fully phased-in by January 1, 2019. Certain calculations under the Rules will also have phase-in periods. See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on Basel III.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”), the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

Under regulations established by the federal banking agencies in connection with implementation of the Basel III capital guidelines, a “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2017, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the federal banking agencies’ prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

All financial companies (including banks) supervised by a primary federal financial regulatory agency and having more than $10 billion in total consolidated assets are required under the Dodd-Frank Act to conduct an annual company-run stress test. See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on the Company’s stress testing.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Table of Contents

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also extend to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volker Rule.” The Volcker Rule generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Company is assessed deposit insurance premiums by the FDIC using a base rate, to which is added temporary surcharges that are used to establish a FDIC reserve fund and pay certain bond obligations. The Bank’s FDIC insurance assessment was $8.7 million in 2017, $8.6 million in 2016, and $8.7 million in 2015.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

• Community Reinvestment. The Community Reinvestment Act of 1977 (“CRA”) requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The regulatory assessment of the bank’s record is made available to the public. Further, these assessments are considered by regulators when evaluating mergers, acquisitions and applicants to open or relocate a branch or facility. The Bank received an “outstanding” rating in its most recent CRA evaluation.

Table of Contents

• Consumer Protection Laws. In addition to the CRA, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population in connection with its lending activities. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act and the Real Estate Settlement Procedures Act.

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws require, among other things, disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, restrict the Bank’s ability to raise interest rates and subject the Bank to substantial regulatory oversight.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all United States companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designed Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains systems to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Table of Contents

As of December 31, 2017, we employed 2,132 full-time equivalent employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2017.

Peter S. Ho, 52

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Kent T. Lucien, 64

Vice Chairman and Chief Strategy Officer since March 2017; Vice Chairman and Chief Financial Officer from April 2008 to February 2017.

Dean Y. Shigemura, 54

Vice Chairman since December 2017, and Chief Financial Officer since March 2017; Senior Executive Vice President and Controller from August 2014 to February 2017; Senior Executive Vice President and Treasurer from May 2008 to July 2014.

Sharon M. Crofts, 52

Vice Chairman, Client Solutions Group since April 2016; Vice Chairman, Operations and Technology from October 2012 to March 2016; Senior Executive Vice President of Operations from May 2008 to October 2012.

Wayne Y. Hamano, 63

Vice Chairman since December 2008 and Chief Commercial Officer since September 2007.

James C. Polk, 51

Vice Chairman, Mortgage Banking since July 2017 and Consumer Banking now known as The Private Bank from June 2016 to June 2017; Senior Executive Vice President, Consumer Banking from January 2016 to May 2016; Senior Executive Vice President, Mortgage Banking from August 2014 to January 2016; Senior Executive Vice President, Commercial Banking from September 2010 to July 2014.

Mark A. Rossi, 68

Vice Chairman, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007.

Mary E. Sellers, 61

Vice Chairman and Chief Risk Officer since July 2005.

Donna A. Tanoue, 63

Vice Chairman, Client Relations and Community Activities since February 2007; President of the Bank of Hawaii Foundation since April 2006.

Brent T. Flygar, 50

Senior Vice President and Controller since March 2017.

Table of Contents

Bank of Hawaii Corporation (the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (the “Bank”), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in equipment leasing, securities brokerage, investment advisory services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, we believe the Company has developed an effective competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB’s prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect its business and activities. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent unsafe or unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. These regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker-dealer and investment advisor subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Business Registration Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) has broadly affected the financial services industry and significantly restructured the financial regulatory regime since its passage in July 2010. The Dodd-Frank Act and its regulations have implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by requiring ongoing stress testing of banks’ capital, mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Additional provisions in the Dodd-Frank Act also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds. All of these new rules and regulations are expected to result in increased compliance and other costs, increased legal risk and decreased product offerings.

As is discussed throughout the following sections, many aspects of the Dodd-Frank Act are subject to further rulemaking which will take effect over several years. These new rules and regulations will continue to significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions, including the Company and the Bank. Although we have already experienced some decrease in revenue as a result of the rules implemented under the Dodd-Frank Act, it remains difficult to anticipate or predict the overall financial impact the Dodd-Frank Act will continue to have on the Company, our customers, our financial condition and results of operations, or the financial industry in general.

Table of Contents

Capital Requirements

In December 2010, the oversight body of the Basel Committee on Banking Supervision finalized a set of international guidelines for determining regulatory capital known as “Basel III,” which includes reforms regarding capital, leverage, and liquidity. In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC finalized rules to implement the Basel III capital rules in the United States. These comprehensive rules are designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The final rules became effective for the Company on January 1, 2015. The final rules also include a new capital conservation buffer which began phasing in on January 1, 2016 and will increase annually until fully phased-in by January 1, 2019. See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on Basel III.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”), the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.” Under regulations established by the federal banking agencies, upon implementing the Basel III capital guidelines, a “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2016, the Bank was classified as “well capitalized.” The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies’ prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

As part of implementing the provisions of the Dodd-Frank Act, in October 2012, the FRB published final rules requiring banks with total consolidated assets of more than $10.0 billion to conduct and publish annual stress tests. In March 2014, the FRB, OCC, and FDIC issued final supervisory guidance for these stress tests. Compliance with these requirements began in October 2013. See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on stress testing.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called “covered transactions.” In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. The Dodd-Frank Act broadened the definition of affiliate, and the definition of covered transaction to include securities borrowing/lending, repurchase/reverse repurchase agreements, and derivative transactions that the Bank may have with an affiliate. The Dodd-Frank Act also strengthened the collateral requirements and limited FRB exemptive authority.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus.

The Federal Reserve Act also requires that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons. The FRB has issued Regulation W which codifies the above restrictions on transactions with affiliates.

Table of Contents

The restrictions on loans to directors, executive officers, principal shareholders and their related interests (collectively referred to as “insiders”) contained in the Federal Reserve Act and Regulation O apply to all insured institutions and their subsidiaries and holding companies. These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. These loans cannot exceed the institution’s total unimpaired capital and surplus. The definition of “extension of credit” for transactions with executive officers, directors, and principal shareholders was also expanded under the Dodd-Frank Act to include credit exposure arising from derivative transactions, repurchase or reverse repurchase agreements, and securities lending or borrowing transactions.

Volcker Rule

On December 10, 2013, the final “Volcker Rule” under the Dodd-Frank Act was approved by the FRB, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission. The Volcker Rule prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds (“covered funds”). The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. In connection with the issuance of the regulations, the FRB exercised its authority to extend the conformance period for compliance with the Volcker Rule by one year from July 21, 2014 to July 21, 2015. During the remaining conformance period, each banking entity was expected to engage in good faith efforts that will result in conformance of all its activities and investments with the requirements of the Volcker Rule by July 21, 2015. On December 18, 2014, the FRB issued an order extending, for an additional year to July 21, 2016, the Volcker Rule conformance period for banking entities to conform their investments in and relationships with covered funds subject to the Volcker Rule that were in place prior to December 31, 2013. No additional extension was granted for the conformance period for proprietary trading which expired on July 21, 2015. On July 7, 2016, the Board of Governors of the Federal Reserve System issued an order that extended the Volcker Rule conformance period with respect to investments in, and relationships with, covered funds and foreign funds that were in place prior to December 31, 2013, to July 21, 2017. The Company does not anticipate that the Volcker Rule will have a material impact on the Company’s Consolidated Financial Statements, but continues to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund (the “DIF”), which the FDIC maintains by assessing depository institutions an insurance premium. Pursuant to the Dodd-Frank Act, the amount of deposit insurance coverage for deposits increased permanently from $100,000 to $250,000, per depositor, for each account ownership category. The Company pays deposit insurance premiums to the FDIC based on an assessment rate established by the FDIC.

Our FDIC insurance assessment was $8.6 million in 2016, $8.7 million in 2015, and $7.9 million in 2014.

In March 2016, the FDIC approved a final rule that imposes on banks with at least $10 billion in assets, such as the Company, a surcharge of 4.5 cents per $100 of their assessment base, after making certain adjustments. The surcharge became effective for the third quarter of 2016 and the FDIC estimates the surcharge will be imposed for approximately two years. The surcharge takes effect at the same time that the regular FDIC insurance assessment rates for all banks decline under a rule adopted by the FDIC in 2011. We estimate that the net effect of the FDIC assessment changes noted above will reduce our annual FDIC insurance expense by approximately $0.8 million.

Other Safety and Soundness Regulations

As required by FDICIA, the federal banking agencies’ prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Table of Contents

Depositor Preference

The FDIC provides that, in the event of the “liquidation or other resolution” of an insured depository institution, the claims of depositors of the institution, including the claims of the FDIC as subrogee of insured depositors, and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including depositors whose deposits are payable only outside of the United States and the parent bank holding company, with respect to any extensions of credit they have made to such insured depository institution.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the Community Reinvestment Act (the “CRA”). In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods.

Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The Bank received an “outstanding” rating in its most recent CRA evaluation.

The Company is subject to a number of federal and state consumer protection laws that extensively govern its relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state usury laws and laws regarding unfair and deceptive acts and practices. These and other federal laws, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, restrict the Company’s ability to raise interest rates and subject the Company to substantial regulatory oversight. Violations of applicable consumer protection laws can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, action by the state attorney general and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain any required bank regulatory approval for transactions the Company may wish to pursue or our prohibition from engaging in such transactions even if approval is not required.

The Dodd-Frank Act created the Consumer Financial Protection Bureau (the “CFPB”) as an agency responsible for promulgating regulations designed to protect consumers including implementing, examining and enforcing compliance with federal consumer financial laws. The Dodd-Frank Act adds prohibitions on unfair, deceptive and abusive acts and practices to the scope of consumer protection regulations overseen and enforced by the CFPB. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses when offering retail financial services. The focus also has been expanded to encompass the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination. Fair and responsible banking is intended to ensure that banks provide fair and equitable access to the entire spectrum of financial products and services, including credit cards, student and auto lending, to all consumers and businesses in the marketplaces they serve, and strive to be clear and transparent in all communications with customers, treating them fairly in all circumstances.

Most of the rules and regulations under the Dodd Frank Act have been implemented. The Company continues to monitor and implement additional rules and regulations and to evaluate their application to our current and future operations.

Table of Contents

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the application of those laws outside the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2016, we employed 2,122 full-time equivalent employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2016.

Peter S. Ho, 51

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Kent T. Lucien, 63

Vice Chairman and Chief Financial Officer since April 2008.

Sharon M. Crofts, 51

Vice Chairman, Client Solutions Group since April 2016; Vice Chairman, Operations and Technology from October 2012 to March 2016; Senior Executive Vice President of Operations from May 2008 to October 2012.

Wayne Y. Hamano, 62

Vice Chairman since December 2008 and Chief Commercial Officer since September 2007.

Mark A. Rossi, 67

Vice Chairman, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007.

Mary E. Sellers, 60

Vice Chairman and Chief Risk Officer since July 2005.

Donna A. Tanoue, 62

Vice Chairman, Client Relations and Community Activities since February 2007; President of the Bank of Hawaii Foundation since April 2006.

Derek J. Norris, 67

Vice Chairman, Residential and Consumer Lending since August 2014; Senior Executive Vice President and Controller from December 2009 to July 2014.

James C. Polk, 50

Vice Chairman, Consumer Banking since June 2016; Senior Executive Vice President, Consumer Banking from January 2016 to May 2016; Senior Executive Vice President, Mortgage Banking from August 2014 to January 2016; Senior Executive Vice President, Commercial Banking from September 2010 to July 2014.

Dean Y. Shigemura, 53

Senior Executive Vice President and Controller since August 2014; Senior Executive Vice President and Treasurer from May 2008 to July 2014.

Table of Contents

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii. The Parent's principal operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to "we," "our," "us," or "the Company" refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage, investment advisory services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury and Other. See Management's Discussion and Analysis of Financial Condition and Results of Operations ("MD&A") and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, we believe the Company has developed an effective competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

Table of Contents

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs' ("DCCA") Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect its business and activities. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent unsafe or unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. These regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker-dealer and investment advisor subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act") has broadly affected the financial services industry and significantly restructured the financial regulatory regime since its passage in July 2010. The Dodd-Frank Act and its regulations have implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by requiring ongoing stress testing of banks' capital, mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Additional provisions in the Dodd-Frank Act also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds. All of these new rules and regulations are expected to result in increased compliance and other costs, increased legal risk and decreased product offerings.

As is discussed throughout the following sections, many aspects of the Dodd-Frank Act are subject to further rulemaking which will take effect over several years. These new rules and regulations will continue to significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions, including the Company and the Bank. Although we have already experienced some decrease in revenue as a result of the rules implemented under the Dodd-Frank Act, it remains difficult to anticipate or predict the overall financial impact the Dodd-Frank Act will continue to have on the Company, our customers, our financial condition and results of operations, or the financial industry in general.

Table of Contents

Capital Requirements

In December 2010, the oversight body of the Basel Committee on Banking Supervision finalized a set of international guidelines for determining regulatory capital known as “Basel III,” which includes reforms regarding capital, leverage, and liquidity. In July 2013, the FRB, the Office of the Comptroller of the Currency (the "OCC") and the FDIC finalized rules to implement the Basel III capital rules in the United States. These comprehensive rules are designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The final rules became effective for the Company on January 1, 2015. The final rules also include a new capital conservation buffer, which will be phased in beginning January 1, 2016 and will increase annually until fully phased-in by January 1, 2019. See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on Basel III.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA"), the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," and "critically undercapitalized." Under regulations established by the federal banking agencies, upon implementing the Basel III capital guidelines, a "well capitalized" institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2015, the Bank was classified as "well capitalized." The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies' prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

As part of implementing the provisions of the Dodd-Frank Act, in October 2012, the FRB published final rules requiring banks with total consolidated assets of more than $10.0 billion to conduct and publish annual stress tests. In March 2014, the FRB, OCC, and FDIC issued final supervisory guidance for these stress tests. Compliance with these requirements began in October 2013. See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on stress testing.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. The Dodd-Frank Act broadened the definition of affiliate, and the definition of covered transaction to include securities borrowing/lending, repurchase/reverse repurchase agreements, and derivative transactions that the Bank may have with an affiliate. The Dodd-Frank Act also strengthened the collateral requirements and limited FRB exemptive authority.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank's capital and surplus.

The Federal Reserve Act also requires that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons. The FRB has issued Regulation W which codifies the above restrictions on transactions with affiliates.

Table of Contents

The restrictions on loans to directors, executive officers, principal shareholders and their related interests (collectively referred to as "insiders") contained in the Federal Reserve Act and Regulation O apply to all insured institutions and their subsidiaries and holding companies. These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. These loans cannot exceed the institution's total unimpaired capital and surplus. The definition of "extension of credit" for transactions with executive officers, directors, and principal shareholders was also expanded under the Dodd-Frank Act to include credit exposure arising from derivative transactions, repurchase or reverse repurchase agreements, and securities lending or borrowing transactions.

Volcker Rule

On December 10, 2013, the final “Volcker Rule” under the Dodd-Frank Act was approved by the FRB, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission. The Volcker Rule prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The final rule may limit or restrict the Company’s activities related to proprietary trading and private equity investing. In connection with the issuance of the regulations, the FRB exercised its authority to extend the conformance period for compliance with the Volcker Rule by one year from July 21, 2014 to July 21, 2015. During the remaining conformance period, each banking entity is expected to engage in good faith efforts that will result in conformance of all its activities and investments with the requirements of the Volcker Rule by July 21, 2015. On December 18, 2014, the FRB issued an order extending, for an additional year to July 21, 2016, the Volcker Rule conformance period for banking entities to conform their investments in and relationships with covered funds subject to the Volcker Rule that were in place prior to December 31, 2013. No extension was granted for the conformance period for proprietary trading which expired on July 21, 2015. The Company does not anticipate that the Volcker Rule will have a material impact on the Company’s Consolidated Financial Statements, but continues to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund (the "DIF"), which the FDIC maintains by assessing depository institutions an insurance premium. Pursuant to the Dodd-Frank Act, the amount of deposit insurance coverage for deposits increased permanently from $100,000 to $250,000, per depositor, for each account ownership category. The Company pays deposit insurance premiums to the FDIC based on an assessment rate established by the FDIC.

Our FDIC insurance assessment was $8.7 million in 2015, $7.9 million in 2014, and $7.8 million in 2013.

Effective January 1, 2015, the FDIC modified certain elements of its deposit insurance assessment system for insured depository institutions. The FDIC revised its methodology for determining insurance assessment rates, and the ratios and ratio thresholds for “well-capitalized,” “adequately capitalized,” and “undercapitalized" evaluation categories used in its risk-based deposit insurance assessment system to conform to the prompt corrective action capital ratio thresholds adopted as part of the U.S, Basel III capital rules.

Other Safety and Soundness Regulations

As required by FDICIA, the federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Depositor Preference

The FDIC provides that, in the event of the “liquidation or other resolution” of an insured depository institution, the claims of depositors of the institution, including the claims of the FDIC as subrogee of insured depositors, and certain claims for

Table of Contents

administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including depositors whose deposits are payable only outside of the United States and the parent bank holding company, with respect to any extensions of credit they have made to such insured depository institution.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the Community Reinvestment Act (the "CRA"). In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods.

Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

The Company is subject to a number of federal and state consumer protection laws that extensively govern its relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state usury laws and laws regarding unfair and deceptive acts and practices. These and other federal laws, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, restrict the Company's ability to raise interest rates and subject the Company to substantial regulatory oversight. Violations of applicable consumer protection laws can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, action by the state attorney general and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain any required bank regulatory approval for transactions the Company may wish to pursue or our prohibition from engaging in such transactions even if approval is not required.

The Dodd-Frank Act created the Consumer Financial Protection Bureau (the “CFPB”) as an agency responsible for promulgating regulations designed to protect consumers including implementing, examining and enforcing compliance with federal consumer financial laws. The Dodd-Frank Act adds prohibitions on unfair, deceptive and abusive acts and practices to the scope of consumer protection regulations overseen and enforced by the CFPB. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses when offering retail financial services. The focus also has been expanded to encompass the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination. Fair and responsible banking is intended to ensure that banks provide fair and equitable access to the entire spectrum of financial products and services, including credit cards, student and auto lending, to all consumers and businesses in the marketplaces they serve, and strive to be clear and transparent in all communications with customers, treating them fairly in all circumstances.

Some of the rules and regulations under the Dodd-Frank Act have not yet been implemented. Accordingly, it remains difficult to predict the ultimate impact the Dodd-Frank Act will have on our financial condition or results of operations.

Table of Contents

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the application of those laws outside the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2015, we had approximately 2,200 employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2015.

Peter S. Ho, 50

Chairman and Chief Executive Officer since July 2010 and President since April 2008; Vice Chairman and Chief Banking Officer from January 2006 to April 2008.

Kent T. Lucien, 62

Vice Chairman and Chief Financial Officer since April 2008; Trustee, C. Brewer & Co., Ltd. from April 2006 to December 2007.

Peter M. Biggs, 64

Vice Chairman since February 2011 and Chief Retail Officer since April 2012; Senior Executive Vice President, Consumer Products Division from March 2006 to February 2011.

Sharon M. Crofts, 50

Vice Chairman of Operations and Technology since October 2012; Senior Executive Vice President of Operations from May 2008 to October 2012; Executive Vice President and Chief Compliance Officer from December 2005 to May 2008.

Wayne Y. Hamano, 61

Vice Chairman since December 2008 and Chief Commercial Officer since September 2007 and oversees the Commercial Banking and Investment Services Groups; Senior Executive Vice President, Hawaii Commercial Banking Division from July 2006 to September 2007.

Mark A. Rossi, 66

Vice Chairman, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007; President of Lane Powell PC from July 2004 to January 2007.

Mary E. Sellers, 59

Vice Chairman and Chief Risk Officer since July 2005.

Donna A. Tanoue, 61

Vice Chairman, Client Relations and Community Activities since February 2007; President of the Bank of Hawaii Foundation since April 2006.

Derek J. Norris, 66

Vice Chairman, Residential and Consumer Lending, since August 2014; Senior Executive Vice President and Controller since December 2009; Executive Vice President and Controller since December 2008; Executive Vice President and General Auditor from January 2002 to December 2008.

Dean Y. Shigemura, 52

Senior Executive Vice President and Controller since August 2014; Senior Executive Vice President and Treasurer since May 2008.

Table of Contents

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii.

The Parent's principal operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank provides a broad range of financial services and products primarily to customers in Hawaii, Guam, and other Pacific Islands. References to "we," "our," "us," or "the Company" refer to the Parent and its subsidiaries that are consolidated for financial reporting purposes.

The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage, investment services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury and Other. See Management's Discussion and Analysis of Financial Condition and Results of Operations ("MD&A") and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, we believe the Company has developed an effective competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

Table of Contents

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs' ("DCCA") Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect business and activities. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that represent unsafe or unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. These regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker-dealer and investment advisor subsidiary of the Bank, is incorporated in Hawaii and is regulated by the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act") has broadly affected the financial services industry and significantly restructured the financial regulatory regime since its passage in July 2010. The Dodd-Frank Act and its regulations have implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by requiring ongoing stress testing of banks' capital, mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Additional provisions in the Dodd-Frank Act also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds. All of these new rules and regulations may result in increased compliance and other costs, increased legal risk and decreased product offerings.

As is discussed throughout the following sections, many aspects of the Dodd-Frank Act are subject to further rulemaking which will take effect over several years. These new rules and regulations will continue to significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions, including the Company and the Bank. Although we have already experienced some decrease in revenue as a result of the rules implemented under the Dodd-Frank Act, it remains difficult to anticipate or predict the overall financial impact the Dodd-Frank Act will

Table of Contents

continue to have on the Company, our customers, our financial condition and results of operations, or the financial industry in general.

Capital Requirements

The federal bank regulatory agencies have issued substantially similar risk-based and leverage capital guidelines applicable to BHCs and the banks they supervise. Under the risk-based capital requirements, the Company and the Bank are each generally required to maintain a minimum ratio of total capital to risk-weighted assets of 8% to be considered "adequately capitalized." At least half of the total capital is to be composed of common equity, retained earnings, and qualifying perpetual preferred stock, less certain intangibles ("Tier 1 Capital"). The remainder may consist of certain subordinated debt, certain hybrid capital instruments and other qualifying preferred stock, and a limited amount of the allowance for loan and lease losses ("Tier 2 Capital") and, together with Tier 1 Capital, equals total capital ("Total Capital"). Risk-weighted assets are calculated by taking assets and credit equivalent amounts of off-balance-sheet items and assigning them to one of several broad risk categories. The risk categories are assigned according to the obligor, or, if relevant, to the guarantor, or to the nature of the collateral. The aggregate dollar value of the amount in each category is then multiplied by the risk weight associated with that category.

BHCs and banks are also required to maintain minimum leverage ratios established by the federal bank regulatory agencies. These requirements provide for a minimum leverage ratio of Tier 1 Capital to adjusted quarterly average assets ("Tier 1 Leverage Ratio") equal to 3% to be considered "adequately capitalized" for BHCs and banks that have the highest regulatory rating and are not experiencing significant growth or expansion. All other BHCs and banks will generally be required to maintain a Tier 1 Leverage Ratio of at least 100 to 200 basis points above the stated minimum. See Note 11 to the Consolidated Financial Statements for capital ratios for the Company and the Bank.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA"), the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," or "critically undercapitalized." Under regulations established by the federal banking agencies, a "well capitalized" institution must have a Tier 1 Capital Ratio of at least 6%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2014, the Bank was classified as "well capitalized." The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies' prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution.

In December 2010, the oversight body of the Basel Committee on Banking Supervision finalized a set of international guidelines for determining regulatory capital known as “Basel III,” which includes reforms regarding capital, leverage, and liquidity. In July 2013, the FRB, the Office of the Comptroller of the Currency (the "OCC") and the FDIC finalized rules to implement the Basel III capital rules in the United States. These comprehensive rules are designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The phase-in period for the final rules became effective for the Company on January 1, 2015, with full compliance with all of the final rule's requirements phased in over a multi-year schedule to be fully phased-in by January 1, 2019.

As part of implementing the provisions of the Dodd-Frank Act, in October 2012, the FRB published final rules requiring banks with total consolidated assets of more than $10.0 billion to conduct and publish annual stress tests. Compliance with these requirements began in October 2013, with the first public disclosure of the annual stress testing results to be made between June 15 and June 30, 2015.

See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on Basel III and stress testing.

Table of Contents

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. The Dodd-Frank Act broadened the definition of affiliate, and the definition of covered transaction to include securities borrowing/lending, repurchase/reverse repurchase agreements, and derivative transactions that the Bank may have with an affiliate. The Dodd-Frank Act also strengthened the collateral requirements and limited FRB exemptive authority.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank's capital and surplus.

The Federal Reserve Act also requires that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons. The FRB has issued Regulation W which codifies the above restrictions on transactions with affiliates.

The restrictions on loans to directors, executive officers, principal shareholders and their related interests (collectively referred to as "insiders") contained in the Federal Reserve Act and Regulation O apply to all insured institutions and their subsidiaries and holding companies. These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. These loans cannot exceed the institution's total unimpaired capital and surplus. The definition of "extension of credit" for transactions with executive officers, directors, and principal shareholders was also expanded under the Dodd-Frank Act to include credit exposure arising from derivative transactions, repurchase or reverse repurchase agreements, and securities lending or borrowing transactions.

Volcker Rule

On December 10, 2013, the final “Volcker Rule” under the Dodd-Frank Act was approved by the FRB, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission. The Volcker Rule prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The final rule may limit or restrict the Company’s activities related to proprietary trading and private equity investing. In connection with the issuance of the regulations, the FRB exercised its authority to extend the conformance period for compliance with the Volcker Rule by one year from July 21, 2014 to July 21, 2015. During the remaining conformance period, each banking entity is expected to engage in good faith efforts that will result in conformance of all its activities and investments with the requirements of the Volcker Rule by July 21, 2015. On December 18, 2014, the FRB issued an order extending, for an additional year to July 21, 2016, the Volcker Rule conformance period for banking entities to conform their investments in and relationships with covered funds subject to the Volcker Rule that were in place prior to December 31, 2013. No extension was granted for the conformance period for proprietary trading which will expire on July 21, 2015. The Company does not anticipate that the Volcker Rule will have a material impact on the Company’s Consolidated Financial Statements, but continues to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund (the "DIF"), which the FDIC maintains by assessing depository institutions an insurance premium. Pursuant to the Dodd-Frank Act, the amount of deposit

Table of Contents

insurance coverage for deposits increased permanently from $100,000 to $250,000, per depositor, for each account ownership category. The Company pays deposit insurance premiums to the FDIC based on an assessment rate established by the FDIC.

On February 7, 2011, as required by the Dodd-Frank Act, the FDIC approved final rules on assessments which became effective on April 1, 2011. These final rules redefined the base for FDIC insurance assessments from the amount of insured deposits to an institution's "average consolidated total assets minus average tangible equity." Our FDIC insurance assessment was $7.9 million in 2014, $7.8 million in 2013, and $7.9 million in 2012.

On November 18, 2014, the FDIC published a final rule, effective January 1, 2015, modifying certain elements of its deposit insurance assessment system for insured depository institutions. The final rule amends the FDIC’s 2011 revised methodology for determining insurance assessment rates. The final rule also revises the ratios and ratio thresholds for “well-capitalized,” “adequately capitalized,” and “undercapitalized" evaluation categories used in the FDIC’s risk-based deposit insurance assessment system to conform to the prompt corrective action capital ratio thresholds adopted as part of the U.S, Basel III capital rules.

Other Safety and Soundness Regulations

As required by FDICIA, the federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the Community Reinvestment Act (the "CRA"). In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods.

Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

The Dodd-Frank Act created the Consumer Financial Protection Bureau (the “CFPB”) as an agency responsible for promulgating regulations designed to protect consumers including implementing, examining and enforcing compliance with federal consumer financial laws. The Dodd-Frank Act adds prohibitions on unfair, deceptive and abusive acts and practices to the scope of consumer protection regulations overseen and enforced by the CFPB. In 2013, the CFPB focused its rulemaking in the area of mortgage reform, issuing six mortgage-related rules that became effective January 10, 2014, involving new Ability-To-Repay requirements, standards for the “Qualified Mortgage” safe harbor, a new regulatory framework for mortgage servicing, and changes to loan originator compensation. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded their regulatory examinations and investigations focus to a concept of “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of the consumer or businesses when offering retail financial services. The focus has been expanded to encompass the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination. Fair and responsible banking ensures that banks provide fair

Table of Contents

and equitable access to the entire spectrum of financial products and services, including credit cards, student and auto lending, to all consumers and businesses in the marketplace it serves, and strives to be clear and transparent in all communications with customers, treating them fairly in all circumstances.

Since many of the rules and regulations under the Dodd-Frank Act have not yet been implemented, it remains difficult to predict the ultimate impact the Dodd-Frank Act will have on our financial condition or results of operations.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the extra-territorial jurisdiction of the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2014, we had approximately 2,200 employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2014.

Peter S. Ho, 49

Chairman and Chief Executive Officer since July 2010 and President since April 2008; Vice Chairman and Chief Banking Officer from January 2006 to April 2008.

Kent T. Lucien, 61

Vice Chairman and Chief Financial Officer since April 2008; Trustee, C. Brewer & Co., Ltd. from April 2006 to December 2007.

Peter M. Biggs, 63

Vice Chairman since February 2011 and Chief Retail Officer since April 2012; Senior Executive Vice President, Consumer Products Division from March 2006 to February 2011.

Sharon M. Crofts, 49

Vice Chairman of Operations and Technology since October 2012; Senior Executive Vice President of Operations from May 2008 to October 2012; Executive Vice President and Chief Compliance Officer from December 2005 to May 2008.

Wayne Y. Hamano, 60

Vice Chairman since December 2008 and Chief Commercial Officer since September 2007 and oversees the Commercial Banking and Investment Services Groups; Senior Executive Vice President, Hawaii Commercial Banking Division from July 2006 to September 2007.

Mark A. Rossi, 65

Vice Chairman, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007; President of Lane Powell PC from July 2004 to January 2007.

Mary E. Sellers, 58

Vice Chairman and Chief Risk Officer since July 2005.

Donna A. Tanoue, 60

Vice Chairman, Client Relations and Community Activities since February 2007; President of the Bank of Hawaii Foundation since April 2006.

Derek J. Norris, 65

Vice Chairman, Residential and Consumer Lending, since August 2014; Senior Executive Vice President and Controller since December 2009; Executive Vice President and Controller since December 2008; Executive Vice President and General Auditor from January 2002 to December 2008.

Dean Y. Shigemura, 51

Senior Executive Vice President and Controller since August 2014; Senior Executive Vice President and Treasurer since May 2008.

Table of Contents

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii.

The Parent's principal and only operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank provides a broad range of financial services and products primarily to customers in Hawaii, Guam, and other Pacific Islands. References to "we," "our," "us," or "the Company" refer to the Parent and its subsidiaries that are consolidated for financial reporting purposes.

The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage, investment services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury and Other. See Management's Discussion and Analysis of Financial Condition and Results of Operations ("MD&A") and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Parent's other subsidiary is the BOHC Investment Fund, LLC (the "Fund"). The Fund was organized in September 2007, to invest in and hold securities of Qualified High Technology Businesses, as defined in the Hawaii Revised Statutes.

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, we believe the Company has developed an effective competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

Table of Contents

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under the BHC Act, a BHC may elect to become a financial holding company and thereby engage in a broader range of financial and other activities than are permissible for traditional BHCs. In order to qualify for the election, all of the depository institution subsidiaries of the BHC must be well-capitalized and well-managed. Additionally, all of its insured depository institution subsidiaries must have achieved a rating of "satisfactory" or better under the Community Reinvestment Act (the "CRA"). Financial holding companies are permitted to engage in activities that are "financial in nature"; activities incidental to or complementary of the financial activities of traditional BHCs, as determined by the FRB. The Parent has not elected to become a financial holding company.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs' ("DCCA") Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect business and activities. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that represent unsafe or unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. These regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker dealer subsidiary of the Bank, is incorporated in Hawaii and is regulated by the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act") has broadly affected the financial services industry and significantly restructured the financial regulatory regime since its passage in July 2010. The Dodd-Frank Act and its regulations have implemented sweeping changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services sector by requiring ongoing stress testing of banks' capital, mandating higher capital and liquidity requirements, establishing new standards for mortgage lenders, increasing regulation of executive and incentive-based compensation and numerous other provisions. Additional provisions in the Dodd-Frank Act also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in

Table of Contents

swap and derivative transactions, proprietary trading and investing in private equity and other funds. All of these new rules and regulations may result in increased compliance and other costs, increased legal risk and decreased product offerings.

As is discussed throughout the following sections, many aspects of the Dodd-Frank Act are subject to further rulemaking which will take effect over several years. These new rules and regulations will continue to significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions, including the Company and the Bank. Although we have already experienced some decrease in revenue as a result of the rules implemented under the Dodd-Frank Act, it remains difficult to anticipate the overall financial impact the Dodd-Frank Act will have on the Company, our customers or the financial industry in general.

Capital Requirements

The federal bank regulatory agencies have issued substantially similar risk-based and leverage capital guidelines applicable to BHCs and the banks they supervise. Under the risk-based capital requirements, the Company and the Bank are each generally required to maintain a minimum ratio of total capital to risk-weighted assets of 8% to be considered "adequately capitalized." At least half of the total capital is to be composed of common equity, retained earnings, and qualifying perpetual preferred stock, less certain intangibles ("Tier 1 Capital"). The remainder may consist of certain subordinated debt, certain hybrid capital instruments and other qualifying preferred stock, and a limited amount of the allowance for loan and lease losses ("Tier 2 Capital") and, together with Tier 1 Capital, equals total capital ("Total Capital"). Risk-weighted assets are calculated by taking assets and credit equivalent amounts of off-balance-sheet items and assigning them to one of several broad risk categories. The risk categories are assigned according to the obligor, or, if relevant, to the guarantor, or to the nature of the collateral. The aggregate dollar value of the amount in each category is then multiplied by the risk weight associated with that category.

BHCs and banks are also required to maintain minimum leverage ratios established by the federal bank regulatory agencies. These requirements provide for a minimum leverage ratio of Tier 1 Capital to adjusted quarterly average assets ("Tier 1 Leverage Ratio") equal to 3% to be considered "adequately capitalized" for BHCs and banks that have the highest regulatory rating and are not experiencing significant growth or expansion. All other BHCs and banks will generally be required to maintain a Tier 1 Leverage Ratio of at least 100 to 200 basis points above the stated minimum. See Note 11 to the Consolidated Financial Statements for capital ratios for the Company and the Bank.

The risk-based capital standards identify concentrations of credit risk and the risk arising from non-traditional banking activities, as well as an institution's ability to manage these risks, as important factors to be taken into account by the agencies in assessing an institution's overall capital adequacy. The capital guidelines also provide that exposure to a decline in the economic value of an institution's capital due to changes in interest rates is a factor to be considered in evaluating a bank's capital adequacy.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA"), the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," or "critically undercapitalized." Under regulations established by the federal banking agencies, a "well capitalized" institution must have a Tier 1 Capital Ratio of at least 6%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2013, the Bank was classified as "well capitalized." The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies' prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution.

In December 2010, the oversight body of the Basel Committee on Banking Supervision finalized a set of international guidelines for determining regulatory capital known as “Basel III,” which includes reforms regarding capital, leverage, and liquidity. In July 2013, the FRB, the Office of the Comptroller of the Currency (the "OCC") and the FDIC finalized rules to implement the Basel III capital rules in the United States. These comprehensive rules are designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations.

As part of implementing the provisions of the Dodd-Frank Act, in October 2012, the FRB published final rules requiring banks with total consolidated assets of more than $10.0 billion to conduct and publish annual stress tests. Compliance with these requirements began in October 2013.

See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information on Basel III and stress testing.

Table of Contents

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. The Dodd-Frank Act broadened the definition of affiliate, and the definition of covered transaction to include securities borrowing/lending, repurchase/reverse repurchase agreements, and derivative transactions that the Bank may have with an affiliate. The Dodd-Frank Act also strengthened the collateral requirements and limited FRB exemptive authority.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank's capital and surplus.

The Federal Reserve Act also requires that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons. The FRB has issued Regulation W which codifies the above restrictions on transactions with affiliates.

The restrictions on loans to directors, executive officers, principal shareholders and their related interests (collectively referred to as "insiders") contained in the Federal Reserve Act and Regulation O apply to all insured institutions and their subsidiaries and holding companies. These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. These loans cannot exceed the institution's total unimpaired capital and surplus. The definition of "extension of credit" for transactions with executive officers, directors, and principal shareholders was also expanded under the Dodd-Frank Act to include credit exposure arising from derivative transactions, repurchase or reverse repurchase agreements, and securities lending or borrowing transactions.

Volcker Rule

On December 10, 2013, the final “Volcker Rule” under the Dodd-Frank Act was approved by the FRB, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission. The Volcker Rule prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The final rule may limit or restrict the Company’s activities related to proprietary trading and private equity investing. In connection with the issuance of the regulations, the FRB exercised its authority to extend the conformance period for compliance with the Volcker Rule by one year from July 21, 2014 to July 21, 2015. During the remaining conformance period, each banking entity is expected to engage in good faith efforts that will result in conformance of all its activities and investments with the requirements of the Volcker Rule by July 21, 2015. The Company has determined that the Volcker Rule does not materially apply to our current or anticipated future operations, and therefore, is not expected to have a material impact on the Company's Consolidated Financial Statements.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund (the "DIF"), which the FDIC maintains by assessing depository institutions an insurance premium. As a result of higher levels of bank failures over the last few years and the dramatic increase in resolution costs of the FDIC, the DIF was depleted. In addition, the amount of FDIC insurance coverage for insured deposits was increased from $100,000 to $250,000 per depositor, per institution, and until January 1, 2013, the insurance coverage for non-interest bearing demand deposits was unlimited. These developments caused increased

Table of Contents

stress on the DIF. To restore reserves and ensure that the DIF would be able to adequately cover losses from future bank failures, the FDIC approved new deposit insurance rules in November 2009. These new rules required insured depository institutions to prepay their estimated quarterly risk-based assessments for all of 2010, 2011, and 2012. As a result, on December 30, 2009, the Bank prepaid its assessment in the amount of $42.3 million related to years 2010 through 2012. During 2013, the FDIC returned the remaining balance of $15.5 million of our prepaid FDIC assessment.

On February 7, 2011, as required by the Dodd-Frank Act, the FDIC approved final rules on assessments which became effective on April 1, 2011. These final rules redefined the base for FDIC insurance assessments from the amount of insured deposits to an institution's "average consolidated total assets minus average tangible equity." The FDIC's final rules eliminated risk categories and debt ratings from the assessment calculation for large banks (over $10.0 billion) and combined CAMELS ratings and certain financial measures into two scorecards; one for most large banks and another for the remaining large, highly complex banks. Each scorecard assesses risk measures to produce two scores, a performance score and a loss severity score, that will be combined and converted to an initial assessment rate. However, the FDIC retains the ability to adjust the total score of large and highly complex banks based upon quantitative or qualitative measures not adequately captured in the scorecards. Our FDIC insurance assessment was $7.8 million in 2013, $7.9 million in 2012, and $9.3 million in 2011.

Other Safety and Soundness Regulations

As required by FDICIA, the federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the Community Reinvestment Act (the "CRA"). In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods.

Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

The Dodd-Frank Act created the Consumer Financial Protection Bureau (the “CFPB”) as an agency responsible for promulgating regulations designed to protect consumers including implementing, examining and enforcing compliance with federal consumer financial laws. The Dodd-Frank Act adds prohibitions on unfair, deceptive and abusive acts and practices to the scope of consumer protection regulations overseen and enforced by the CFPB. In 2013, the CFPB focused its rulemaking in the area of mortgage reform, issuing six mortgage-related rules that became effective January 10, 2014, involving new Ability-To-Repay requirements, standards for the “Qualified Mortgage” safe harbor, a new regulatory framework for mortgage servicing, and changes to loan originator compensation. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded their regulatory examinations and investigations focus to a concept of “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of the consumer or businesses when offering retail financial services. The focus will be expanded to

Table of Contents

encompass the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination. Fair and responsible banking ensures that banks provide fair and equitable access to the entire spectrum of financial products and services, including credit cards, student and auto lending, to all consumers and businesses in the marketplace it serves, and strives to be clear and transparent in all communications with customers, treating them fairly in all circumstances.

Additional rulemakings to come under the Dodd-Frank Act make it difficult to predict the ultimate effect on our financial condition or results of operations.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the extra-territorial jurisdiction of the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2013, we had approximately 2,200 employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2013.

Peter S. Ho, 48

Chairman and Chief Executive Officer since July 2010 and President since April 2008; Vice Chairman and Chief Banking Officer from January 2006 to April 2008.

Kent T. Lucien, 60

Vice Chairman and Chief Financial Officer since April 2008; Trustee, C. Brewer & Co., Ltd. from April 2006 to December 2007.

Peter M. Biggs, 62

Vice Chairman since February 2011 and Chief Retail Officer since April 2012; Senior Executive Vice President, Consumer Products Division from March 2006 to February 2011.

Sharon M. Crofts, 48

Vice Chairman of Operations and Technology since October 2012; Senior Executive Vice President of Operations from May 2008 to October 2012; Executive Vice President and Chief Compliance Officer from December 2005 to May 2008.

Wayne Y. Hamano, 59

Vice Chairman since December 2008 and Chief Commercial Officer since September 2007 and oversees the Commercial Banking and Investment Services Groups; Senior Executive Vice President, Hawaii Commercial Banking Division from July 2006 to September 2007.

Mark A. Rossi, 64

Vice Chairman, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007; President of Lane Powell PC from July 2004 to January 2007.

Mary E. Sellers, 57

Vice Chairman and Chief Risk Officer since July 2005.

Donna A. Tanoue, 59

Vice Chairman, Client Relations and Community Activities since February 2007; President of the Bank of Hawaii Foundation since April 2006.

Derek J. Norris, 64

Senior Executive Vice President and Controller since December 2009; Executive Vice President and Controller since December 2008; Executive Vice President and General Auditor from January 2002 to December 2008.

Table of Contents

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii.

The Parent's principal and only operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank provides a broad range of financial services and products primarily to customers in Hawaii, Guam, and other Pacific Islands. References to "we," "our," "us," or "the Company" refer to the Parent and its subsidiaries that are consolidated for financial reporting purposes.

The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage, investment services, and providing credit insurance.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury and Other. See Management's Discussion and Analysis of Financial Condition and Results of Operations ("MD&A") and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Parent's other subsidiary is the BOHC Investment Fund, LLC (the "Fund"). The Fund was organized in September 2007, to invest in and hold securities of Qualified High Technology Businesses, as defined in the Hawaii Revised Statutes.

The Company is subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, we believe the Company has developed an effective competitive advantage in its market.

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The description is qualified in its entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

Table of Contents

On July 21, 2010, the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act") became effective. This law has broadly affected the financial services industry by implementing changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services industry, and will continue to significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions and their holding companies, including the Company and the Bank. Under the Dodd-Frank Act a broad range of new rules and regulations by various federal agencies have been implemented, and further rulemaking must be proposed and adopted which will take effect over several years. Although we have already experienced some decrease in revenue as a result of the rules implemented under the Dodd-Frank Act, it remains difficult to anticipate the overall financial impact the Dodd-Frank Act will have on the Company, our customers or the financial industry in general.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under the BHC Act, a BHC may elect to become a financial holding company and thereby engage in a broader range of financial and other activities than are permissible for traditional BHCs. In order to qualify for the election, all of the depository institution subsidiaries of the BHC must be well-capitalized and well-managed. Additionally, all of its insured depository institution subsidiaries must have achieved a rating of "satisfactory" or better under the Community Reinvestment Act (the "CRA"). Financial holding companies are permitted to engage in activities that are "financial in nature"; activities incidental to or complementary of the financial activities of traditional BHCs, as determined by the FRB. The Parent has not elected to become a financial holding company.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs' ("DCCA") Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect business and activities. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that represent unsafe or unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. These regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker dealer subsidiary of the Bank, is incorporated in Hawaii and is regulated by the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

Table of Contents

Capital Requirements

The federal bank regulatory agencies have issued substantially similar risk-based and leverage capital guidelines applicable to BHCs and the banks they supervise. Under the risk-based capital requirements, the Company and the Bank are each generally required to maintain a minimum ratio of total capital to risk-weighted assets of 8% to be considered "adequately capitalized." At least half of the total capital is to be composed of common equity, retained earnings, and qualifying perpetual preferred stock, less certain intangibles ("Tier 1 Capital"). The remainder may consist of certain subordinated debt, certain hybrid capital instruments and other qualifying preferred stock, and a limited amount of the allowance for loan and lease losses ("Tier 2 Capital") and, together with Tier 1 Capital, equals total capital ("Total Capital"). Risk-weighted assets are calculated by taking assets and credit equivalent amounts of off-balance-sheet items and assigning them to one of several broad risk categories. The risk categories are assigned according to the obligor, or, if relevant, to the guarantor, or to the nature of the collateral. The aggregate dollar value of the amount in each category is then multiplied by the risk weight associated with that category.

BHCs and banks are also required to maintain minimum leverage ratios established by the federal bank regulatory agencies. These requirements provide for a minimum leverage ratio of Tier 1 Capital to adjusted quarterly average assets ("Tier 1 Leverage Ratio") equal to 3% to be considered "adequately capitalized" for BHCs and banks that have the highest regulatory rating and are not experiencing significant growth or expansion. All other BHCs and banks will generally be required to maintain a Tier 1 Leverage Ratio of at least 100 to 200 basis points above the stated minimum. See Note 11 to the Consolidated Financial Statements for capital ratios for the Company and the Bank.

The risk-based capital standards identify concentrations of credit risk and the risk arising from non-traditional banking activities, as well as an institution's ability to manage these risks, as important factors to be taken into account by the agencies in assessing an institution's overall capital adequacy. The capital guidelines also provide that exposure to a decline in the economic value of an institution's capital due to changes in interest rates is a factor to be considered in evaluating a bank's capital adequacy.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA"), the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," or "critically undercapitalized." Under regulations established by the federal banking agencies, a "well capitalized" institution must have a Tier 1 Capital Ratio of at least 6%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2012, the Bank was classified as "well capitalized." The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies' prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution.

In December 2010, the oversight body of the Basel Committee on Banking Supervision finalized a set of international guidelines for determining regulatory capital known as “Basel III,” which includes reforms regarding capital, leverage, and liquidity. The new capital requirements were to be phased in between January 2013 and January 2015. However, on November 9, 2012, the U.S. federal banking agencies indicated that a delay in implementation of the proposed dates was necessary, but did not provide a substitute effective date for the new rules.

In October 2012, in implementing provisions of the Dodd-Frank Act, the FRB published final rules requiring banks with total consolidated assets of more than $10.0 billion to conduct and publish annual stress tests. Compliance with these requirements has been delayed until October 2013.

See the “Regulatory Initiatives Related to Liquidity, Capital, and Stress Testing” section in MD&A for more information on Basel III and stress testing.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Table of Contents

Transactions with Affiliates and Insiders

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. The Dodd-Frank Act broadened the definition of affiliate, and the definition of covered transaction to include securities borrowing/lending, repurchase/reverse repurchase agreements, and derivative transactions that the Bank may have with an affiliate. The Dodd-Frank Act also strengthened the collateral requirements and limited FRB exemptive authority.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank's capital and surplus.

The Federal Reserve Act also requires that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons. The FRB has issued Regulation W which codifies the above restrictions on transactions with affiliates.

The restrictions on loans to directors, executive officers, principal shareholders and their related interests (collectively referred to as "insiders") contained in the Federal Reserve Act and Regulation O apply to all insured institutions and their subsidiaries and holding companies. These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. These loans cannot exceed the institution's total unimpaired capital and surplus. The definition of "extension of credit" for transactions with executive officers, directors, and principal shareholders was also expanded under the Dodd-Frank Act to include credit exposure arising from derivative transactions, repurchase or reverse repurchase agreements, and securities lending or borrowing transactions.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits through the Deposit Insurance Fund (the "DIF"), which the FDIC maintains by assessing depository institutions an insurance premium. As a result of higher levels of bank failures over the last few years and the dramatic increase in resolution costs of the FDIC, the DIF has been depleted. In addition, the amount of FDIC insurance coverage for insured deposits has been increased from $100,000 to $250,000 per depositor, per institution, and until January 1, 2013, the insurance coverage for non-interest bearing demand deposits was unlimited. These developments have caused increased stress on the DIF. In order to restore reserves and ensure that the DIF will be able to adequately cover losses from future bank failures, the FDIC approved new deposit insurance rules in November 2009. These new rules required insured depository institutions to prepay their estimated quarterly risk-based assessments for all of 2010, 2011, and 2012. As a result, on December 30, 2009, the Bank prepaid its assessment in the amount of $42.3 million related to years 2010 through 2012. As of December 31, 2012 the remaining balance of our prepaid FDIC assessment was $15.6 million.

On February 7, 2011, as required by the Dodd-Frank Act, the FDIC approved final rules on assessments which became effective on April 1, 2011. These final rules redefined the base for FDIC insurance assessments from the amount of insured deposits to an institution's "average consolidated total assets minus average tangible equity." The FDIC's final rules eliminated risk categories and debt ratings from the assessment calculation for large banks (over $10.0 billion) and combined CAMELS ratings and certain financial measures into two scorecards; one for most large banks and another for the remaining large, highly complex banks. Each scorecard assesses risk measures to produce two scores, a performance score and a loss severity score, that will be combined and converted to an initial assessment rate. However, the FDIC retains the ability to adjust the total score of large and highly complex banks based upon quantitative or qualitative measures not adequately captured in the scorecards. Our FDIC insurance assessment was $7.9 million in 2012 and $9.3 million in 2011.

Table of Contents

Other Safety and Soundness Regulations

As required by FDICIA, the federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the Community Reinvestment Act (the "CRA"). In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods.

Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

The Dodd-Frank Act created the Consumer Financial Protection Bureau (the “CFPB”) as an agency to centralize responsibility for consumer financial protection, including implementing, examining and enforcing compliance with federal consumer financial laws. The CFPB has begun exercising supervisory review of banks under its jurisdiction. The CFPB is expected to focus its rulemaking in several areas, particularly in the areas of mortgage reform involving the Real Estate Settlement Procedures Act, the Truth in Lending Act, the Equal Credit Opportunity Act, and the Fair Debt Collection Practices Act; however, the content of the final rules and impact to our businesses are uncertain at this time.

Additional rulemakings to come under the Dodd-Frank Act will dictate compliance changes for financial institutions. Any such changes in regulations or regulatory policies applicable to the Bank make it difficult to predict the ultimate effect on our financial condition or results of operations.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the extra-territorial jurisdiction of the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

As of December 31, 2012, we had approximately 2,300 employees.

Table of Contents

Listed below are executive officers of the Parent as of December 31, 2012.

Peter S. Ho, 47

Chairman and Chief Executive Officer since July 2010 and President since April 2008; Vice Chairman and Chief Banking Officer from January 2006 to April 2008.

Kent T. Lucien, 59

Vice Chairman and Chief Financial Officer since April 2008; Trustee, C. Brewer & Co., Ltd. from April 2006 to December 2007.

Peter M. Biggs, 61

Vice Chairman since February 2011 and Chief Retail Officer since April 2012; Senior Executive Vice President, Consumer Products Division from March 2006 to February 2011.

Sharon M. Crofts, 47

Vice Chairman of Operations and Technology since October 2012; Senior Executive Vice President of Operations from May 2008 to October 2012; Executive Vice President and Chief Compliance Officer from December 2005 to May 2008.

Wayne Y. Hamano, 58

Vice Chairman since December 2008 and Chief Commercial Officer since September 2007; Senior Executive Vice President, Hawaii Commercial Banking Division from July 2006 to September 2007.

Mark A. Rossi, 63

Vice Chairman, Chief Administrative Officer, General Counsel, and Corporate Secretary since February 2007; President of Lane Powell PC from July 2004 to January 2007.

Mary E. Sellers, 56

Vice Chairman and Chief Risk Officer since July 2005.

Donna A. Tanoue, 58

Vice Chairman, Client Relations and Community Activities since February 2007; President of the Bank of Hawaii Foundation since April 2006.

Derek J. Norris, 63

Senior Executive Vice President and Controller since December 2009; Executive Vice President and Controller since December 2008; Executive Vice President and General Auditor from January 2002 to December 2008.

Table of Contents

General

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii.

The Parent's principal and only operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank provides a broad range of financial services and products primarily to customers in Hawaii, Guam, and other Pacific Islands. References to "we," "our," "us," or "the Company" refer to the Parent and its subsidiaries that are consolidated for financial reporting purposes.

The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., Pacific Century Life Insurance Corporation, BOH Wholesale Insurance Agency, Inc. (formerly known as Triad Insurance Agency, Inc.), and Bank of Hawaii Insurance Services, Inc. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage, investment services, wholesale insurance, and insurance agency services.

We are organized into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury and Other. See Management's Discussion and Analysis of Financial Condition and Results of Operations ("MD&A") and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Executive and Strategic Planning Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

The Parent's other subsidiary is the BOHC Investment Fund, LLC (the "Fund"). The Fund was organized in September 2007, to invest in and hold securities of Qualified High Technology Businesses, as defined in the Hawaii Revised Statutes.

Competition

The Company is subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, we believe the Company has developed an effective competitive advantage.

Table of Contents

Supervision and Regulation

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system. The following information describes some of the more significant laws and regulations applicable to us. The description is qualified in its entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

On July 21, 2010, the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act") became effective. This new law has broadly affected the financial services industry by implementing changes to the financial regulatory landscape aimed at strengthening the sound operation of the financial services industry, and will continue to significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions and their holding companies, including the Company and the Bank. Under the Dodd-Frank Act a broad range of new rules and regulations by various federal agencies have been implemented, and further rulemaking must be proposed and adopted which will take effect over several years. Although we have already experienced some decrease in revenue as a result of the rules already implemented under the Dodd-Frank Act, it remains difficult to anticipate the overall financial impact the Dodd-Frank Act will have on the Company, our customers or the financial industry in general.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under the BHC Act, a BHC may elect to become a financial holding company and thereby engage in a broader range of financial and other activities than are permissible for traditional BHCs. In order to qualify for the election, all of the depository institution subsidiaries of the BHC must be well-capitalized and well-managed. Additionally, all of its insured depository institution subsidiaries must have achieved a rating of "satisfactory" or better under the Community Reinvestment Act (the "CRA"). Financial holding companies are permitted to engage in activities that are "financial in nature"; activities incidental to or complementary of the financial activities of traditional BHCs, as determined by the FRB. The Parent has not elected to become a financial holding company.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Table of Contents

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs' ("DCCA") Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect business and activities. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that represent unsafe or unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. These regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker dealer subsidiary of the Bank, is incorporated in Hawaii and is regulated by the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. The Bank's insurance subsidiaries, BOH Wholesale Insurance Agency, Inc. and Bank of Hawaii Insurance Services, Inc. are incorporated in Hawaii and are regulated by the DCCA's Division of Insurance. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

Capital Requirements

The federal bank regulatory agencies have issued substantially similar risk-based and leverage capital guidelines applicable to BHCs and the banks they supervise. Under the risk-based capital requirements, the Company and the Bank are each generally required to maintain a minimum ratio of total capital to risk-weighted assets of 8% to be considered "adequately capitalized." At least half of the total capital is to be composed of common equity, retained earnings, and qualifying perpetual preferred stock, less certain intangibles ("Tier 1 Capital"). The remainder may consist of certain subordinated debt, certain hybrid capital instruments and other qualifying preferred stock, and a limited amount of the allowance for loan and lease losses ("Tier 2 Capital") and, together with Tier 1 Capital, equals total capital ("Total Capital"). Risk-weighted assets are calculated by taking assets and credit equivalent amounts of off-balance-sheet items and assigning them to one of several broad risk categories. The risk categories are assigned according to the obligor, or, if relevant, to the guarantor, or to the nature of the collateral. The aggregate dollar value of the amount in each category is then multiplied by the risk weight associated with that category.

BHCs and banks are also required to maintain minimum leverage ratios established by the federal bank regulatory agencies. These requirements provide for a minimum leverage ratio of Tier 1 Capital to adjusted quarterly average assets ("Tier 1 Leverage Ratio") equal to 3% to be considered "adequately capitalized" for BHCs and banks that have the highest regulatory rating and are not experiencing significant growth or expansion. All other BHCs and banks will generally be required to maintain a Tier 1 Leverage Ratio of at least 100 to 200 basis points above the stated minimum. See Note 11 to the Consolidated Financial Statements for capital ratios for the Company and the Bank.

The risk-based capital standards identify concentrations of credit risk and the risk arising from non-traditional banking activities, as well as an institution's ability to manage these risks, as important factors to be taken into account by the agencies in assessing an institution's overall capital adequacy. The capital guidelines also provide that exposure to a decline in the economic value of an institution's capital due to changes in interest rates is a factor to be considered in evaluating a bank's capital adequacy.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA") the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," or "critically undercapitalized." Under regulations established by the federal banking agencies, a "well capitalized" institution must have a Tier 1 Capital Ratio of at least 6%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2011, the Bank was classified as "well capitalized." The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies'

Table of Contents

prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution.

On December 16, 2010, the oversight body of the Basel Committee on Banking Supervision published the final text of the Basel III package of reforms regarding capital, leverage, and liquidity. See the "Regulatory Initiatives Related to Liquidity and Capital" section in MD&A for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries.

For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. The Dodd-Frank Act broadened the definition of affiliate, and the definition of covered transaction to include securities lending, repurchase agreements, and derivative transactions that the Bank may have with an affiliate. The Dodd-Frank Act also strengthened the collateral requirements and limited FRB exemptive authority.

Unless an exemption applies, 1) covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and 2) with respect to all covered transactions with affiliates in the aggregate, to 20% of the Bank's capital and surplus.

The Federal Reserve Act also requires that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons. The Federal Reserve has issued Regulation W which codifies the above restrictions on transactions with affiliates.

The restrictions on loans to directors, executive officers, principal shareholders and their related interests (collectively referred to as "insiders") contained in the Federal Reserve Act and Regulation O apply to all insured institutions and their subsidiaries and holding companies. These restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. These loans cannot exceed the institution's total unimpaired capital and surplus. The definition of "extension of credit" for transactions with executive officers, directors, and principal shareholders was also expanded under the Dodd-Frank Act to include credit exposure arising from a derivative transaction, a repurchase or reverse repurchase agreement, and securities lending or borrowing transactions.

FDIC Insurance

The Deposit Insurance Fund ("DIF") of the FDIC insures deposit accounts in the Bank up to a maximum amount of $250,000 per depositor, per institution, for each account ownership category as defined by the FDIC. On November 9, 2010, the FDIC issued a final rule to implement a provision of the Dodd-Frank Act that provides temporary unlimited deposit insurance coverage for noninterest-bearing transaction accounts at all FDIC-insured depository institutions. Institutions cannot opt out of this coverage, nor will the FDIC charge a separate assessment for the insurance. On December 29, 2010, President Obama signed into law an amendment to the Federal Deposit Insurance Act to include Interest on Lawyers Trust Accounts ("IOLTA") within the definition of noninterest-bearing transaction accounts. This amendment will provide IOLTAs with the same temporary, unlimited insurance coverage afforded to noninterest-bearing transaction accounts under the Dodd-Frank Act. This unlimited coverage for noninterest-bearing transaction

Table of Contents

accounts became effective on December 31, 2010 and terminates on December 31, 2012.

FDIC-insured depository institutions are required to pay deposit insurance premiums based on the risk an institution poses to the DIF. In order to restore reserves and ensure that the DIF will be able to adequately cover losses from future bank failures, the FDIC approved new deposit insurance rules in November 2009. These new rules required insured depository institutions to prepay their estimated quarterly risk-based assessments for all of 2010, 2011, and 2012. On December 30, 2009, the Bank prepaid its assessment in the amount of $42.3 million related to years 2010 through 2012. As of December 31, 2011 the remaining balance of our prepaid FDIC assessment was $22.6 million.

As required by the Dodd-Frank Act, on February 7, 2011, the FDIC finalized new rules which redefined the base for FDIC insurance assessments from the amount of insured deposits to "average consolidated total assets less average tangible equity." A new rate schedule and other revisions to the assessment rules became effective April 1, 2011, and were used to calculate the June 2011 assessments which were due in September 2011. The FDIC's final rules also eliminated risk categories and debt ratings from the assessment calculation for large banks (over $10.0 billion) and will instead use scorecards that the FDIC believes better reflect risks to the DIF. Our FDIC insurance assessment for 2011 was approximately $9.3 million.

Other Safety and Soundness Regulations

As required by FDICIA, the federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the Community Reinvestment Act (the "CRA"). In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

The Dodd-Frank Act also created the Consumer Financial Protection Bureau (the "CFPB"), an independent bureau within the FRB that is responsible for implementing, examining and enforcing compliance with federal consumer financial laws. The CFPB has broad rule-making, supervisory and examination authority to set and enforce rules in the consumer protection area over financial institutions that have assets of $10.0 billion or more, such as the Bank. The Dodd-Frank Act also gives the CFPB expanded data collecting powers for fair lending purposes for both small business and mortgage loans, as well as expanded authority to prevent unfair, deceptive and abusive practices. The consumer complaint function has also been consolidated into the CFPB.

Table of Contents

Several major regulatory and legislative initiatives adopted under the Dodd-Frank Act will have significant future impacts on our business and financial results. Amendments to Regulation E, which implement the Electronic Funds Transfer Act (the "EFTA"), involve changes to the way banks may charge overdraft fees by limiting our ability to charge an overdraft fee for ATM and one-time debit card transactions that overdraw a consumer's account, unless the consumer affirmatively consents to payment of overdrafts for those transactions. Additional amendments to the EFTA include the "Durbin Amendment," which mandates limiting debit card interchange fees that banks may charge merchants.

Additional rulemakings to come under the Dodd-Frank Act will dictate compliance changes for lenders and financial institutions, particularly in the areas of mortgage reform involving the Real Estate Settlement Procedures Act, the Truth in Lending Act, the fair lending laws and the fair debt collection practices laws. Any such changes in regulations or regulatory policies applicable to the Bank make it difficult to predict the ultimate effect on our financial condition or results of operations.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the extra-territorial jurisdiction of the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Employees

As of December 31, 2011, we had approximately 2,400 employees.

General

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii.

The Parent's principal and only operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank provides a broad range of financial services and products primarily to customers in Hawaii, Guam, and other Pacific Islands. References to "we," "our," "us," or "the Company" refer to the holding company and its subsidiaries that are consolidated for financial reporting purposes.

The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., Pacific Century Life Insurance Corporation, BOH Wholesale Insurance Agency, Inc. (formerly known as Triad Insurance Agency, Inc.), and Bank of Hawaii Insurance Services, Inc. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage, investment services, wholesale insurance, and insurance agency services. In 2009, the Company sold most of the assets and operations of its wholesale insurance agency and retail insurance brokerage subsidiaries, including the name of its wholesale insurance agency business, Triad Insurance Agency, Inc., to third parties.

We are aligned into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury. See Management's Discussion and Analysis of Financial Condition and Results of Operations ("MD&A") and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Executive and Strategic Planning Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website. Upon written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813, this information is available in print form.

The Parent's other subsidiary is the BOHC Investment Fund, LLC (the "Fund"). The Fund was organized in September 2007, to invest in and hold securities of Qualified High Technology Businesses, as defined in the Hawaii Revised Statutes.

We have included the Chief Executive Officer and the Chief Financial Officer certifications required by Section 302 of the Sarbanes-Oxley Act of 2002 as Exhibits 31.1 and 31.2 of this report.

Competition

We are subject to substantial competition from banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other providers of financial services, including financial service subsidiaries of commercial and manufacturing companies. We also compete with non-financial institutions that offer financial products and services. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the internet, may be based outside of the markets that we serve. Our extensive branch network, exceptional service levels, and knowledge of local trends and conditions contribute to our competitive advantage.

Table of Contents

Supervision and Regulation

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system. The following information describes significant laws and regulations applicable to us. The description is qualified in its entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

On July 21, 2010, President Obama signed into law the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act"). This new law will significantly change the current bank regulatory structure and affect the lending, deposit, investment, trading and operating activities of financial institutions and their holding companies, including the Company and the Bank. A broad range of new rules and regulations by various federal agencies must be adopted and, consequently, many details and much of the impact of this act may not be known for many months or years.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under the BHC Act, a BHC may elect to become a financial holding company and thereby engage in a broader range of financial and other activities than are permissible for traditional BHCs. In order to qualify for the election, all of the depository institution subsidiaries of the BHC must be well-capitalized and well-managed. Additionally, all of its insured depository institution subsidiaries must have achieved a rating of "satisfactory" or better under the Community Reinvestment Act (the "CRA"). Financial holding companies are permitted to engage in activities that are "financial in nature"; activities incidental to or complementary of the financial activities of traditional BHCs, as determined by the FRB. The Parent has not elected to become a financial holding company.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii

Table of Contents

Department of Commerce and Consumer Affairs ("DCCA"), Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect business and activities. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that represent unsafe and unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. These regulatory bodies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker dealer subsidiary of the Bank, is incorporated in Hawaii and is regulated by the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. The Bank's insurance subsidiaries, BOH Wholesale Insurance Agency, Inc. and Bank of Hawaii Insurance Services, Inc. are incorporated in Hawaii and are regulated by the DCCA's Division of Insurance. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

Capital Requirements

The federal bank regulatory agencies have issued substantially similar risk-based and leverage capital guidelines applicable to BHCs and the banks they supervise. Under the risk-based capital requirements, the Company and the Bank are each generally required to maintain a minimum ratio of total capital to risk-weighted assets of 8% to be considered "adequately capitalized." At least half of the total capital is to be composed of common equity, retained earnings, and qualifying perpetual preferred stock, less certain intangibles ("Tier 1 Capital"). The remainder may consist of certain subordinated debt, certain hybrid capital instruments and other qualifying preferred stock, and a limited amount of the allowance for loan and lease losses ("Tier 2 Capital") and, together with Tier 1 Capital, equals total capital ("Total Capital"). Risk weighted assets are calculated by taking assets and credit equivalent amounts of off-balance-sheet items and assigning them to one of several broad risk categories. The risk categories are assigned according to the obligor, or, if relevant, to the guarantor, or to the nature of the collateral. The aggregate dollar value of the amount in each category is then multiplied by the risk weight associated with that category.

BHCs and banks are also required to maintain minimum leverage ratios established by the federal bank regulatory agencies. These requirements provide for a minimum leverage ratio of Tier 1 Capital to adjusted quarterly average assets ("Tier 1 Leverage Ratio") equal to 3% to be considered "adequately capitalized" for BHCs and banks that have the highest regulatory rating and are not experiencing significant growth or expansion. All other BHCs and banks will generally be required to maintain a Tier 1 Leverage Ratio of at least 100 to 200 basis points above the stated minimum. See Note 11 to the Consolidated Financial Statements for capital ratios for the Company and the Bank.

The risk-based capital standards identify concentrations of credit risk and the risk arising from non-traditional banking activities, as well as an institution's ability to manage these risks, as important factors to be taken into account by the agencies in assessing an institution's overall capital adequacy. The capital guidelines also provide that exposure to a decline in the economic value of an institution's capital due to changes in interest rates is a factor to be considered in evaluating a bank's capital adequacy.

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA") the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," or "critically undercapitalized." Under regulations established by the federal banking agencies, a "well capitalized" institution must have a Tier 1 Capital Ratio of at least 6%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2010, the Bank was classified as "well capitalized." The classification of

Table of Contents

a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies' prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of any financial institution.

In December 2009, the Basel Committee on Banking Supervision (the "BCBS") released a comprehensive list of proposals for changes to capital, leverage, and liquidity requirements for banks (commonly referred to as "Basel III"). In December 2010, the oversight body of the Basel Committee published the final Basel III rules on capital, leverage, and liquidity. See the "Regulatory Initiatives Related to Capital and Liquidity" section in MD&A for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries.

For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. Unless an exemption applies, 1) covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and 2) with respect to all covered transactions with affiliates in the aggregate, to 20% of the Bank's capital and surplus.

The Dodd-Frank Act expands the affiliate transaction rules of the federal law to broaden the definition of affiliate and to apply such rules to securities lending, repurchase agreements, and derivative activities that the Bank may have with an affiliate, as well as to strengthen collateral requirements and limit FRB exemptive authority. The definition of "extension of credit" for transactions with executive officers, directors, and principal shareholders is also being expanded to include credit exposure arising from a derivative transaction, a repurchase or reverse repurchase agreement, and securities lending or borrowing transactions.

FDIC Insurance

The Deposit Insurance Fund ("DIF") of the Federal Deposit Insurance Corporation (the "FDIC") insures deposit accounts in the Bank up to a maximum amount per separately insured depositor. Under the Dodd-Frank Act, the maximum amount of federal deposit insurance coverage has been permanently increased from $100,000 to $250,000 per depositor, per institution. On November 9, 2010, the FDIC issued a final rule to implement a provision of the Dodd-Frank Act that provides temporary unlimited deposit insurance coverage for noninterest-bearing transaction accounts at all FDIC-insured depository institutions. Institutions cannot opt out of this coverage, nor will the FDIC charge a separate assessment for the insurance. On December 29, 2010, President Obama signed into law an amendment to the Federal Deposit Insurance Act to include Interest on Lawyers Trust Accounts ("IOLTA") within the definition of noninterest-bearing transaction accounts. This amendment will provide IOLTAs with the same temporary, unlimited insurance coverage afforded to noninterest-bearing transaction accounts under the Dodd-Frank Act. This unlimited coverage for noninterest-bearing transaction accounts became effective on December 31, 2010 and terminates on December 31, 2012.

The FDIC did not extend its Transaction Account Guarantee Program beyond its sunset date of December 31, 2010, which provided a full guarantee of certain Negotiable Order of Withdrawal accounts ("NOW accounts"). The FDIC insures NOW

Table of Contents

accounts up to the standard maximum deposit insurance amount as noted above.

FDIC-insured depository institutions are required to pay deposit insurance premiums based on the risk an institution poses to the DIF. In order to restore reserves and ensure that the DIF will be able to adequately cover losses from future bank failures, the FDIC approved new deposit insurance rules in November 2009. These new rules required insured depository institutions to prepay their estimated quarterly risk-based assessments for all of 2010, 2011, and 2012. On December 30, 2009, the Bank prepaid its assessment in the amount of $42.3 million related to years 2010 through 2012. As of December 31, 2010 the remaining balance of our prepaid FDIC assessment was $31.0 million.

As required by the Dodd-Frank Act, on February 7, 2011, the FDIC finalized new rules which would redefine the assessment base as "average consolidated total assets minus average tangible equity." The new rate schedule and other revisions to the assessment rules will become effective April 1, 2011, to be used to calculate the June 2011 assessments which will be due in September 2011. The FDIC's final rules will also eliminate risk categories and debt ratings from the assessment calculation for large banks (over $10 billion) and will instead use scorecards that the FDIC believes better reflect risks to the DIF. We continue to assess the impact that these changes will have on our deposit insurance premiums in future periods.

Other Safety and Soundness Regulations

As required by FDICIA, the federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the Community Reinvestment Act (the "CRA"). In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

The Dodd-Frank Act also creates a new Bureau of Consumer Financial Protection (the "CFPB") that will take over responsibility for the federal consumer financial protection laws. The CFPB will be an independent bureau within the FRB and will have broad rule-making, supervisory and examination authority to set and enforce rules in the consumer

Table of Contents

protection area over financial institutions that have assets of $10.0 billion or more, such as the Bank. The Dodd-Frank Act also gives the CFPB expanded data collecting powers for fair lending purposes for both small business and mortgage loans, as well as expanded authority to prevent unfair, deceptive and abusive practices. The consumer complaint function will also be consolidated into the CFPB.

Several major regulatory and legislative initiatives recently adopted and revised by the Dodd-Frank Act, will have significant future impacts on our business and financial results. Amendments to Regulation E, which implement the Electronic Fund Transfer Act (the "EFTA"), involve changes to the way banks may charge overdraft fees by limiting our ability to charge an overdraft fee for ATM and one-time debit card transactions that overdraw a consumer's account, unless the consumer affirmatively consents to payment of overdrafts for those transactions. Additional amendments to the EFTA include the "Durbin Act," which mandates limiting debit card interchange fees that banks may charge merchants.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the extra-territorial jurisdiction of the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of their customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Employees

As of January 31, 2011, we had approximately 2,400 employees.

General

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii.

The Parent's principal and only operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank provides a broad range of financial services and products primarily to customers in Hawaii and the Pacific Islands (Guam, nearby islands, and American Samoa). References to "we," "our," "us," or "the Company" refer to the holding company and its subsidiaries that are consolidated for financial reporting purposes.

The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., Pacific Century Life Insurance Corporation, BOH Wholesale Insurance Agency, Inc. (formerly known as Triad Insurance Agency, Inc.), and Bank of Hawaii Insurance Services, Inc. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage, investment services, wholesale insurance, and insurance agency services. In 2009, the Company sold most of the assets and operations of its wholesale insurance agency and retail insurance brokerage subsidiaries, including the name of its wholesale insurance agency business, Triad Insurance Agency, Inc., to third parties.

We are aligned into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury. See Management's Discussion and Analysis of Financial Condition and Results of Operations ("MD&A") and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit Committee, the Executive and Strategic Planning Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website. Upon written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813, this information is available in print form.

The Parent's other subsidiary is the BOHC Investment Fund, LLC (the "Fund"). The Fund was organized in September 2007, to invest in and hold securities of Qualified High Technology Businesses, as defined in the Hawaii Revised Statutes.

We have included the Chief Executive Officer and the Chief Financial Officer certifications required by Section 302 of the Sarbanes-Oxley Act of 2002 as Exhibits 31.1 and 31.2 of this report.

Competition

We are subject to substantial competition from banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other providers of financial services, including financial service subsidiaries of commercial and manufacturing companies. We also compete with non-financial institutions that offer financial products and services. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the internet, may be based outside of the markets that we serve. Our extensive branch network, exceptional service levels, and knowledge of local trends and conditions contribute to our competitive advantage.

Table of Contents

Supervision and Regulation

We are extensively regulated under both federal and state laws. The following information describes significant laws and regulations applicable to us. The description is qualified in its entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. The recent intervention into the banking system by the federal government to deal with the current financial crisis and its impact on the supervision and regulation of the banking and financial services industries may adversely affect our business, operations, and earnings. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Under the BHC Act, a BHC may elect to become a financial holding company and thereby engage in a broader range of financial and other activities than are permissible for traditional BHCs. In order to qualify for the election, all of the depository institution subsidiaries of the BHC must be well-capitalized and well-managed. Additionally, all of its insured depository institution subsidiaries must have achieved a rating of "satisfactory" or better under the Community Reinvestment Act (the "CRA"). Financial holding companies are permitted to engage in activities that are "financial in nature"; activities incidental to or complementary of the financial activities of traditional BHCs, as determined by the FRB. The Parent has not elected to become a financial holding company.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs ("DCCA"), Division of Financial Institutions. The Bank is subject to extensive federal and state regulations that significantly affect business and activities. Regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that represent unsafe and unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators.

Table of Contents

The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. The agencies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker dealer subsidiary of the Bank, is incorporated in Hawaii and is regulated by the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. The Bank's insurance subsidiaries, Bank of Hawaii Insurance Services, Inc. and BOH Wholesale Insurance Agency, Inc. are incorporated in Hawaii and are regulated by the DCCA's Division of Insurance. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

Capital Requirements

The federal bank regulatory agencies have issued substantially similar risk-based and leverage capital guidelines applicable to BHCs and the banks they supervise. Under the risk-based capital requirements, the Company and the Bank are each generally required to maintain a minimum ratio of total capital to risk-weighted assets of 8%. At least half of the total capital is to be composed of common equity, retained earnings, and qualifying perpetual preferred stock, less certain intangibles ("Tier 1 Capital"). The remainder may consist of certain subordinated debt, certain hybrid capital instruments and other qualifying preferred stock, and a limited amount of the allowance for loan and lease losses ("Tier 2 Capital") and, together with Tier 1 Capital, equals total capital ("Total Capital"). Risk weighted assets are calculated by taking assets and credit equivalent amounts of off-balance-sheet items and assigning them to one of several broad risk categories. The risk categories are assigned according to the obligor, or, if relevant, to the guarantor, or to the nature of the collateral. The aggregate dollar value of the amount in each category is then multiplied by the risk weight associated with that category.

BHCs and banks are also required to maintain minimum leverage ratios established by the federal bank regulatory agencies. These requirements provide for a minimum leverage ratio of Tier 1 Capital to adjusted quarterly average assets equal to 3% for BHCs and banks that have the highest regulatory rating and are not experiencing significant growth or expansion. All other BHCs and banks will generally be required to maintain a leverage ratio of at least 100 to 200 basis points above the stated minimum. See Note 11 to the Consolidated Financial Statements for capital ratios for the Company and the Bank.

The risk-based capital standards identify concentrations of credit risk and the risk arising from non-traditional banking activities, as well as an institution's ability to manage these risks, as important factors to be taken into account by the agencies in assessing an institution's overall capital adequacy. The capital guidelines also provide that exposure to a decline in the economic value of an institution's capital due to changes in interest rates is a factor to be considered in evaluating a bank's capital adequacy.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries, is also subject to the prior claims of creditors of those subsidiaries.

For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of

Table of Contents

value from the Bank to an affiliate or for the benefit of an affiliate. Unless an exemption applies, 1) covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and 2) with respect to all covered transactions with affiliates in the aggregate, to 20% of the Bank's capital and surplus.

FDIC Insurance

The Deposit Insurance Fund ("DIF") of the FDIC insures deposit accounts in the Bank up to a maximum amount per separately insured depositor. Beginning in October 2008, the FDIC temporarily increased FDIC deposit insurance coverage per separately insured depositor to $250,000 through December 31, 2013. On January 1, 2014, the standard coverage limit is scheduled to return to $100,000, per depositor, per insured bank, for all account ownership categories except certain retirement accounts, which will remain at $250,000 permanently per depositor, per insured bank.

FDIC-insured depository institutions are required to pay deposit insurance premiums based on the risk an institution poses to the DIF. In order to restore reserves and ensure that the DIF will be able to adequately cover losses from future bank failures, the FDIC approved new deposit insurance rules in November 2009. These rules modify the way the assessment system differentiates risks among insured institutions and implements changes in assessment rates, including base assessment rates, in order to increase assessment revenue. The FDIC's new deposit insurance rules required insured depository institutions to prepay their estimated quarterly risk-based assessments for all of 2010, 2011, and 2012. On December 30, 2009, the Bank prepaid its assessment in the amount of $42.3 million related to years 2010 through 2012. For purposes of calculating the prepayment amount, an institution's third quarter 2009 assessment base will be increased quarterly at a 5 percent annual growth rate through the end of 2012. In addition, the annual assessment rate will increase uniformly by 3 basis points beginning in 2011. Continuing declines in the DIF may result in the FDIC imposing additional assessments in the future, which could adversely affect the Company's capital levels and earnings.

In addition to DIF assessments, all FDIC-insured depository institutions must pay an annual assessment to provide funds for the repayment of debt obligations of the Financing Corporation. The Financing Corporation is a government-sponsored entity that was formed to borrow the money necessary to carry out the closing and ultimate disposition of failed thrift institutions by the Resolution Trust Corporation. As of January 1, 2010, the annualized assessment rate of risk-adjusted deposits, established by the FDIC for all DIF-assessable deposits was 1.06 basis points.

In October 2008, the FDIC introduced the Temporary Liquidity Guarantee Program (the "TLGP"), a program designed to improve the functioning of the credit markets and to strengthen capital in the financial system during this period of economic distress. The TLGP has two components: 1) a debt guarantee program, guaranteeing newly issued senior unsecured debt, and 2) a transaction account guarantee program, providing a full guarantee of noninterest-bearing deposit transaction accounts, Negotiable Order of Withdrawal (or "NOW") accounts paying less than 0.5% annual interest, and interest on Lawyers Trust Accounts, regardless of the amount. The Bank has not issued any senior unsecured debt to take advantage of the debt guarantee program, however, this program remains available to the Bank. The Bank participated in the transaction account guarantee program and, as such, all funds in covered accounts held through December 31, 2009 were covered with a full guarantee. In connection with this guarantee, a 10 basis point annual rate surcharge was assessed on amounts in covered accounts exceeding $250,000. Although the FDIC has extended the transaction account guarantee program through June 30, 2010, the Bank is not participating in this extension.

In the event of the liquidation or insolvency of an insured depository institution, the claims of depositors and the FDIC, where the FDIC succeeds to the claims of depositors or has been appointed as a receiver, will be afforded priority over other general unsecured claims against such an institution.

Other Safety and Soundness Regulations

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA") the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies

Table of Contents

five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," or "critically undercapitalized." Under regulations established by the federal banking agencies, a "well capitalized" institution must have a Tier 1 Capital Ratio of at least 6%, a Total Capital Ratio of at least 10%, a Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2009, the Bank was classified as "well capitalized." The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies' prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of any financial institution.

The federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

As required by FDICIA, the federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the CRA. In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the extra-territorial jurisdiction of the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing and to verify the identity of their customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Employees

As of January 31, 2010, we had approximately 2,400 employees.

Table of Contents

General

Bank of Hawaii Corporation (the "Parent") is a Delaware corporation and a bank holding company ("BHC") headquartered in Honolulu, Hawaii.

The Parent's principal and only operating subsidiary, Bank of Hawaii (the "Bank"), was organized on December 17, 1897 and is chartered by the State of Hawaii. The Bank's deposits are insured by the Federal Deposit Insurance Corporation (the "FDIC") and the Bank is a member of the Federal Reserve System.

The Bank provides a broad range of financial services and products primarily to customers in Hawaii and the Pacific Islands (Guam, nearby islands, and American Samoa). References to "we," "our," "us," or "the Company" refer to the holding company and its subsidiaries that are consolidated for financial reporting purposes.

The Bank's subsidiaries include Bank of Hawaii Leasing, Inc., Bankoh Investment Services, Inc., Pacific Century Life Insurance Corporation, Triad Insurance Agency, Inc., Bank of Hawaii Insurance Services, Inc., Pacific Century Insurance Services, Inc., Bankoh Investment Partners, LLC, and Bank of Hawaii International, Inc. The Bank's subsidiaries are engaged in equipment leasing, securities brokerage and investment services, and insurance and insurance agency services.

We are aligned into four business segments for management reporting purposes: Retail Banking, Commercial Banking, Investment Services, and Treasury. See Table 9 of Management's Discussion and Analysis of Financial Condition and Results of Operation ("MD&A") and Note 12 to the Consolidated Financial Statements for more information.

Information on the Bank's limited foreign activities is presented in Table 15 of MD&A.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the "SEC"). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit Committee, the Executive and Strategic Planning Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website. Upon written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813, this information is available in print form.

The Parent's other subsidiary is the BOHC Investment Fund, LLC (the "Fund"). The Fund was organized in September 2007, to invest in and hold securities of Qualified High Technology Businesses, as defined in the Hawaii Revised Statutes.

We have included the Chief Executive Officer and the Chief Financial Officer certifications required by Section 302 of the Sarbanes-Oxley Act of 2002 as Exhibits 31.1 and 31.2 of this report. Additionally, we filed with the New York Stock Exchange (the "NYSE") the Chief Executive Officer certification regarding our compliance with the NYSE's Corporate Governance Listing Standards (the "Listing Standards") pursuant to Section 303A.12(a) of the Listing Standards. The certification was dated May 15, 2008 and indicated that the Chief Executive Officer was not aware of any violations of the Listing Standards by the Company.

Competition

We are subject to substantial competition from banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other providers of financial services, including financial service subsidiaries of commercial and manufacturing companies. We also compete with non-financial institutions that offer financial products and services. Some of our competitors are not subject to the same level of regulation and oversight that is required of

Table of Contents

banks and BHCs. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through alternative delivery channels such as the internet, may be based outside of the markets that we serve. Our extensive branch network, exceptional service levels, and knowledge of local trends and conditions contribute to our competitive advantage.

Supervision and Regulation

We are extensively regulated under both federal and state laws. The following information describes significant laws and regulations applicable to us. The description is qualified in its entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. The recent intervention into the banking system by the federal government to deal with the current financial crisis and its impact on the supervision and regulation of the banking and financial services industries may adversely affect our business, operations, and earnings. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the "BHC Act"), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve Bank (the "FRB"). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the "Code") and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring beneficial ownership or control of more than 5% of the voting shares of any company, including a bank, without the FRB's prior approval. The Act also prohibits a BHC from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or furnishing services to or performing services for its subsidiaries.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank. A BHC is also expected to commit resources to support its subsidiary bank in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to stand ready to provide adequate capital funds to its subsidiary bank during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank.

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act, banks and bank holding companies from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. The Bank also has the ability, subject to certain restrictions, to acquire branches outside its home state by acquisition or merger. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii. Interstate branches are subject to certain laws of the states in which they are located.

Under the BHC Act, a BHC may elect to become a financial holding company and thereby engage in a broader range of financial and other activities than are permissible for traditional BHCs. In order to qualify for the election, all of the depository institution subsidiaries of the BHC must be well-capitalized and well-managed. Additionally, all of its insured depository institution subsidiaries must have achieved a rating of "satisfactory" or better under the Community Reinvestment Act (the "CRA"). Financial holding companies are permitted to engage in activities that are "financial in nature"; activities incidental to or complementary of the financial activities of traditional BHCs, as determined by the FRB. The Parent has not elected to become a financial holding company.

Bank of Hawaii

The Bank is subject to supervision and examination by the FRB of San Francisco and the State of Hawaii Department of Commerce and Consumer Affairs ("DCCA"), Division of Financial Institutions. The Bank is subject to extensive federal and state

Table of Contents

regulations that significantly affect business and activities. Regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that represent unsafe and unsound banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate generally to operations and management, asset quality, interest rate exposure, capital, and executive compensation. The agencies are authorized to take action against institutions that fail to meet such standards, including the assessment of civil monetary penalties, the issuance of cease-and-desist orders, and other actions.

Bankoh Investment Services, Inc., the broker dealer subsidiary of the Bank, is incorporated in Hawaii and is regulated by the Financial Industry Regulatory Authority, and the DCCA's Business Registration Division. The Bank's insurance subsidiaries, Bank of Hawaii Insurance Services, Inc., Triad Insurance Agency, Inc., and Pacific Century Insurance Services, Inc., are incorporated in Hawaii and are regulated by the DCCA's Division of Insurance. Pacific Century Life Insurance Corporation is incorporated in Arizona and is regulated by the State of Arizona Department of Insurance.

Capital Requirements

The federal bank regulatory agencies have issued substantially similar risk-based and leverage capital guidelines applicable to BHCs and the banks they supervise. Under the risk-based capital requirements, the Company and the Bank are each generally required to maintain a minimum ratio of total capital to risk-weighted assets of 8%. At least half of the total capital is to be composed of common equity, retained earnings, and qualifying perpetual preferred stock, less certain intangibles ("Tier 1 Capital"). The remainder may consist of certain subordinated debt, certain hybrid capital instruments and other qualifying preferred stock, and a limited amount of the allowance for loan and lease losses ("Tier 2 Capital") and, together with Tier 1 Capital, equals total capital ("Total Capital"). Risk weighted assets are calculated by taking assets and credit equivalent amounts of off-balance-sheet items and assigning them to one of several broad risk categories. The risk categories are assigned according to the obligor, or, if relevant, to the guarantor, or to the nature of the collateral. The aggregate dollar value of the amount in each category is then multiplied by the risk weight associated with that category.

BHCs and banks are also required to maintain minimum leverage ratios established by the federal bank regulatory agencies. These requirements provide for a minimum leverage ratio of Tier 1 Capital to adjusted quarterly average assets equal to 3% for BHCs and banks that have the highest regulatory rating and are not experiencing significant growth or expansion. All other BHCs and banks will generally be required to maintain a leverage ratio of at least 100 to 200 basis points above the stated minimum. See Note 10 to the Consolidated Financial Statements for capital ratios for the Company and the Bank.

The risk-based capital standards identify concentrations of credit risk and the risk arising from non-traditional banking activities, as well as an institution's ability to manage these risks, as important factors to be taken into account by the agencies in assessing an institution's overall capital adequacy. The capital guidelines also provide that exposure to a decline in the economic value of an institution's capital due to changes in interest rates is a factor to be considered in evaluating a bank's capital adequacy.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent's principal source of funds to pay dividends on its common stock and to service its debt is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors, to participate in any distribution of the assets or earnings of its subsidiaries, is also subject to the prior claims of creditors of those subsidiaries.

For information regarding the limitations on the Bank's ability to pay dividends to the Parent, see Note 10 to the Consolidated Financial Statements.

Table of Contents

Transactions with Affiliates

Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in so-called "covered transactions." In general, covered transactions include loans, leases, other extensions of credit, investments and asset purchases, as well as other transactions involving the transfer of value from the Bank to an affiliate or for the benefit of an affiliate. Unless an exemption applies, 1) covered transactions by the Bank with a single affiliate are limited to 10% of the Bank's capital and surplus, and 2) with respect to all covered transactions with affiliates in the aggregate, to 20% of the Bank's capital and surplus.

FDIC Insurance

The Deposit Insurance Fund ("DIF") of the FDIC insures deposit accounts in the Bank generally up to a maximum of $100,000 per separately insured depositor, and up to a maximum of $250,000 per separately insured depositor for certain retirement accounts. Beginning in October 2008, the FDIC temporarily increased FDIC deposit insurance coverage per separately insured depositor to $250,000 through December 31, 2009. On January 1, 2010, the standard coverage limit is scheduled to return to $100,000 for all deposit accounts, except for certain retirement accounts.

FDIC-insured depository institutions are required to pay deposit insurance premiums based on the risk an institution poses to the DIF. The current annual risk-based assessment rates range from $0.05 per $100 of domestic deposits for well-managed, well-capitalized banks with the highest ratings, to $0.43 per $100 of domestic deposits for institutions posing the most risk to the DIF. The FDIC may increase or decrease the assessment rate schedule on a quarterly basis. The Federal Deposit Insurance Reform Act of 2005 ("FDIRA") provided for a one-time assessment credit to be allocated among member institutions. As of December 31, 2008, the remaining assessment credit available to offset our future deposit insurance assessments was $2.5 million. We expect to exhaust this remaining assessment credit in 2009.

In addition to DIF assessments, all FDIC-insured depository institutions must pay an annual assessment to provide funds for the repayment of debt obligations of the Financing Corporation. The Financing Corporation is a government-sponsored entity that was formed to borrow the money necessary to carry out the closing and ultimate disposition of failed thrift institutions by the Resolution Trust Corporation. As of January 1, 2009, the annualized assessment rate of risk-adjusted deposits, established by the FDIC for all DIF-assessable deposits was 1.14 basis points.

In October 2008, the FDIC introduced the Temporary Liquidity Guarantee Program (the "TLGP"), a program designed to improve the functioning of the credit markets and to strengthen capital in the financial system during this period of economic distress. The TLGP has two components: 1) a debt guarantee program, guaranteeing newly issued senior unsecured debt, and 2) a transaction account guarantee program, providing a full guarantee of noninterest-bearing deposit transaction accounts, Negotiable Order of Withdrawal (or "NOW") accounts paying less than 0.5% annual interest, and Interest on Lawyers Trust Accounts, regardless of the amount. The Bank has not issued any senior unsecured debt to take advantage of the debt guarantee program, however, this program remains available to the Bank. The Bank is presently participating in the transaction account guarantee program and, as such, all funds in covered accounts held through December 31, 2009 will be covered with a full guarantee. In connection with this guarantee, a 10 basis point annual rate surcharge will be assessed on amounts in covered accounts exceeding $250,000.

In the event of the liquidation or insolvency of an insured depository institution, the claims of depositors and the FDIC, where the FDIC succeeds to the claims of depositors or has been appointed as a receiver, will be afforded priority over other general unsecured claims against such an institution.

For 2008, the Bank's FDIC insurance assessment was approximately $1.5 million. For 2009, we expect that the Bank's FDIC insurance assessment will be approximately $10.0 million. The increase in our expected FDIC assessment in 2009 is the result of us exhausting our FDIRA credit, higher assessment rates, along with our participation in new programs.

Table of Contents

In order to restore reserves and ensure that the DIF will be able to adequately cover losses from future bank failures, the FDIC, in October 2008, proposed amendments to its deposit insurance rules to alter the way the assessment system differentiates risks among insured institutions and to change assessment rates, including base assessment rates, in order to increase assessment revenue. A uniform assessment increase for the first quarter of 2009 was adopted as a final rule in December 2008. The FDIC has also proposed further base rate assessment adjustments effective April 1, 2009. We cannot currently provide any assurance as to the amount of any proposed increase in the Bank's deposit insurance premium rate, should there be an increase, because any increase would be dependent upon a number of factors, some of which are beyond the Bank's control.

Other Safety and Soundness Regulations

Under the Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA") the federal banking agencies possess broad powers to take prompt corrective action to resolve problems of insured depository institutions. FDICIA identifies five capital categories for insured depository institutions: "well capitalized," "adequately capitalized," "undercapitalized," "significantly undercapitalized," or "critically undercapitalized." Under regulations established by the federal banking agencies, a "well capitalized" institution must have a Tier 1 Capital Ratio of at least 6%, a Total Capital Ratio of at least 10%, a Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2008, the Bank was classified as "well capitalized." The classification of a depository institution under FDICIA is primarily for the purpose of applying the federal banking agencies' prompt corrective action provisions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of any financial institution.

The federal banking agencies' prompt corrective action powers impose progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. These actions can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution's parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distributions without prior regulatory approval; and, ultimately, appointing a receiver for the institution.

As required by FDICIA, the federal banking agencies also have adopted guidelines prescribing safety and soundness standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, and compensation and benefits. The federal regulatory agencies may take action against a financial institution that does not meet such standards.

Community Reinvestment and Consumer Protection Laws

In connection with its lending activities, the Bank is subject to a number of federal laws designed to protect borrowers and promote lending to various sectors of the economy and population. These include the Equal Credit Opportunity Act, the Truth-in-Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, and the CRA. In addition, federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated parties.

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank's record in meeting the credit needs of the communities served by the bank, including low and moderate income neighborhoods. Under the CRA, institutions are assigned a rating of "outstanding," "satisfactory," "needs to improve," or "substantial non-compliance." The Bank received an "outstanding" rating in its most recent CRA evaluation.

Table of Contents

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act substantially broadened the scope of U.S. anti-money laundering laws and regulations by creating new laws, regulations, and penalties, imposing significant new compliance and due diligence obligations, and expanding the extra-territorial jurisdiction of the U.S. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing and to verify the identity of their customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Employees

As of January 31, 2009, we had approximately 2,600 employees.