CMG, §1A diff (2020 → 2021)

ITEM 1A. RISK FACTORS You should carefully consider the risks described below in addition to the other information set forth in this Annual Report on Form 10-K, including the Management’s Discussion and Analysis of Financial Conditions and Results of Operations section and the consolidated financial statements and related notes. If any of the risks and uncertainties described below actually occur or continue to occur, our business, financial condition and results of operations, and the trading price of our common stock could be materially and adversely affected. The risks and uncertainties described below are those that we have identified as material but are not the only risks and uncertainties we face. Our business is also subject to general risks and uncertainties that affect many other companies, including, but not limited to, overall economic and industry conditions and additional risks not currently known to us or that we presently deem immaterial may arise or become material and may negatively impact our business, reputation, financial condition, results of operations or the trading price of our common stock. Risks Related to the Nature of our Restaurant Business and Operating in the Restaurant Industry Food safety and food-borne illness concerns may have an adverse effect on our business by decreasing sales and increasing costs. Food safety is our top priority, and we dedicate appropriate resources to ensuring that our guests enjoy safe, high-quality food products. Even with strong preventative controls and interventions, food-borne illnesses continue to occur in the restaurant industry because food safety risks cannot be completely eliminated in any restaurant. Incidents may result from the failure of restaurant crew members or suppliers to follow our food safety policies and procedures, or from employees or guests entering our restaurant while ill and contaminating food ingredients or surfaces. Although we monitor and audit all of our programs, we cannot guarantee that each and every individual food item is safely and properly maintained during distribution throughout the supply chain. Regardless of the source or cause, any report of food-borne illness such as E. coli, hepatitis A, norovirus or salmonella, and other food safety issues, including food tampering or contamination, at one of our restaurants could adversely affect our reputation and have a negative impact on our sales. In addition, instances of food-borne illness, food tampering or food contamination that occur solely at competitors’ restaurants could result in negative publicity about the restaurant industry and adversely impact our sales. Social media has dramatically increased the rate at which negative publicity, including actual or perceived food safety incidents, can be disseminated before there is any meaningful opportunity to investigate, respond and address an issue. The occurrence of food-borne illnesses or food safety issues could also adversely affect the price and availability of affected ingredients, resulting in higher costs and lower margins. We may be more susceptible than our competitors to significant adverse consequences arising from food safety incidents due to several highly publicized food safety events in our restaurants and failure to adhere to our food safety standards. From 2015 to 2017, illnesses caused by E. coli bacteria and norovirus were connected to a number of our restaurants and, in 2018, illnesses believed to be caused by C. perfringens bacteria were connected to the food in one of our restaurants. As a result of these incidents and the related negative publicity, our sales and profitability were severely impacted throughout 2016 and from time to time through 2018. Because of consumer perceptions in the wake of these food safety incidents, any future food safety incidents associated with our restaurants-even incidents that would be considered minor at other restaurants-may have a more significant negative impact on our sales and our ability to regain guests. In addition, we may be at a higher risk for food safety incidents than some competitors due to our greater use of fresh, unprocessed produce, handling of raw chicken, our reliance on employees cooking with traditional methods rather than automation, and our avoidance of frozen ingredients. The risk of illnesses associated with our food also may increase due to the growth of our delivery or catering businesses, in which our food is transported and/or served in transportation conditions that are not under our control. All of these factors could have an adverse impact on our ability to attract and retain guests, which could in turn have a material adverse effect on our growth and profitability. The restaurant industry is highly competitive. If we are not able to compete successfully, our business, financial condition and results of operations would be adversely affected. The restaurant industry is highly competitive with respect to taste preferences, price, food quality and selection, customer service, brand reputation, digital engagement, advertising levels and promotional initiatives, and the location, attractiveness and maintenance of restaurants. We also compete with a number of non-traditional market participants, such as convenience stores, grocery stores, coffee shops, meal kit delivery services, and “ghost” or dark kitchens, where meals are prepared at separate takeaway premises rather than a restaurant. Competition from food delivery services has also increased in recent years, particularly during COVID-19, and is expected to continue to increase. Increased competition could have an adverse effect on our sales, profitability and development plans. If consumer or dietary preferences change, if our marketing efforts are unsuccessful, or if our restaurants are unable to compete successfully with other restaurant outlets, our business could be adversely affected. We continue to believe that our commitment to higher-quality and responsibly sourced ingredients gives us a competitive advantage; however, more competitors have made claims related to the quality of their ingredients and lack of artificial flavors, colors and preservatives. The increasing use of these claims by competitors, regardless of the accuracy of such claims, may lessen our differentiation and make it more difficult for us to compete. If we are unable to continue to maintain our distinctiveness and compete effectively, our business, financial condition and results of operations could be adversely affected. Our digital business, which accounted for almost half of revenues in 2020, is subject to risks. In 2020, 46.2% of our revenue was derived from digital orders, which includes delivery and customer pickup, compared to 18% of our revenues in 2019. The growth in digital orders is attributable to more guests dining at home due to COVID-19, our expanded partnerships with multiple third-party delivery services and our expansion of Chipotlanes, which is our drive through format for digital order pickups. Depending on which ordering platform a digital order is placed - our platform or the platform of a third-party delivery service - the delivery fee we collect from the guest may be less than the actual delivery cost, which has a negative impact on our profitability. In the fall of 2020, we implemented a menu price increase to partially offset higher delivery costs; however, our higher menu prices may cause some guests to shift their purchases to other restaurants offered on the platform. As our digital business grows, we are increasingly reliant on third-party delivery companies, which maintain control over data regarding guests that use their platform and over the customer experience. If a third-party delivery company driver fails to make timely deliveries or fails to deliver the complete order, our guests may attribute the bad customer experience to Chipotle and could stop ordering from us. The ordering and payment platforms used by these third-parties, or our mobile app or online ordering system, could be interrupted by technological failures, user errors, cyber-attacks or other factors, which could adversely impact sales through these channels and negatively impact our overall sales and reputation. The third-party delivery business is intensely competitive, with a number of players competing for market share, online traffic capital, and delivery drivers. If the third-party delivery companies we utilize cease or curtail operations, increase their fees, or give greater priority or promotions on their platforms to our competitors, our delivery business and our sales may be negatively impacted. The delivery business has been consolidating and may continue to consolidate, and fewer third-party delivery companies may give them more leverage in negotiating the terms and pricing of contracts, which could negatively impact our profits from delivery orders. Our inability or failure to recognize, respond to and effectively manage the accelerated impact of social media could have a material adverse impact on our business. Social media and internet-based communications, including video-sharing, social networking and messaging platforms, give users immediate access to a broad audience. These platforms have dramatically increased the speed of dissemination and accessibility of information, including negative publicity related to food safety incidents and negative guest and employee experiences. Accurate and inaccurate or misleading information can be widely disseminated before there is any meaningful opportunity to respond or address an issue. As a result of our highly publicized food safety incidents in 2015 - 2018, negative social media posts about our business may generate a disproportionately negative response than would be the results at other companies without a similar history. It is impossible to for us to fully predict or control social media backlash to potential issues, which could harm our business, prospects, financial condition, and results of operations, regardless of the information’s accuracy. Use of social media platforms is an important element of our marketing efforts and became increasingly more important during the COVID-19 pandemic. New social media platforms are developing rapidly, and we need to continuously innovate and evolve our social media strategies in order to maintain broad appeal with guests and brand relevance. We also continue to invest in other digital marketing initiatives to reach our guests and build their awareness of, engagement with, and loyalty to us, including our national loyalty program called Chipotle Rewards. These initiatives may not be successful, resulting in expenses incurred without the benefit of higher revenues, increased employee engagement or brand recognition. Other risks associated with the use of social media include improper disclosure of proprietary information, negative comments about us, exposure of personally identifiable information, fraud, hoaxes or malicious dissemination of false information. The inappropriate use of social media by our guests or employees could increase our costs, lead to litigation or result in negative publicity that could damage our reputation. If we do not continue to persuade consumers of the benefits of paying higher prices for our higher-quality food, our sales and results of operations could be hurt. Our success depends in large part on our ability to persuade consumers that food made with ingredients that were raised or grown in accordance with our Food With Integrity principles is worth paying a higher price at our restaurants relative to prices of some of our competitors, particularly quick-service restaurant competitors. Under our Food With Integrity principles, for example, animals must be responsibly raised, and the milk in our sour cream, cheese and queso must come from cows that have not been treated with rBGH, which practices typically are more costly than conventional farming. If we are not able to successfully persuade consumers that consuming food made consistent with our Food With Integrity principles is better for them and the environment, or if consumers are not willing to pay the prices we charge, our sales could be adversely affected, which would negatively impact our results of operations. Risks Related to the COVID-19 Pandemic The novel coronavirus (COVID-19) pandemic has adversely affected and could continue to adversely affect our financial results, operations and outlook for an extended period of time. The novel coronavirus (COVID-19) pandemic, and restrictions imposed by federal, state and local governments in response to the outbreak, have disrupted and will continue to disrupt our business. During 2020, individuals in many areas where we operate our restaurants were required to practice social distancing, restricted from gathering in groups and/or mandated to “stay home” except for “essential” purposes. In response to the COVID-19 outbreak and government restrictions, we were required to close some of our restaurants, close many of our dining rooms and offer only takeout and delivery, and/or implement modified work hours. The mobility restrictions, fear of contracting the coronavirus and the sharp increase in unemployment caused by the closure of businesses in response to the COVID-19 outbreak, have adversely affected and will continue to adversely affect our guest traffic, which in turn adversely impacts our liquidity, financial condition or results of operations. Even as and when the mobility restrictions are loosened or lifted, guests may still be reluctant to return to in-restaurant dining and the impact of lost wages due to COVID-19 related unemployment may dampen consumer spending for the foreseeable future. Our restaurant operations have been and could continue to be disrupted by employees who are unable or unwilling to work, whether because of illness, quarantine, fear of contracting COVID-19 or caring for family members due to COVID-19 disruptions or illness. Restaurant closures, limited service options or modified hours of operation due to staffing shortages could materially adversely affect our liquidity, financial condition or results of operations. To protect the health and safety of our employees and guests, we provide face coverings for all restaurant employees, offer enhanced health and welfare benefits, provided temporary wage increases during the initial onset of the pandemic, provide 14 days of paid emergency leave for COVID-related concerns, paid discretionary bonuses to restaurant employees, purchased additional sanitation supplies and personal protective materials, implemented a tamper evident packaging seal for all digital orders, and created a new steward role to sanitize high-traffic restaurant areas. These measures have increased our operating costs and adversely affected our liquidity. The COVID-19 outbreak also has affected and may continue to adversely affect the ability of certain of our suppliers to fulfill their obligations to us, which may negatively affect our restaurant operations. These suppliers include third parties that supply and/or prepare our ingredients, packaging, paper and cleaning products and other necessary operating materials, distribution centers, and logistics and transportation services providers. If our suppliers are unable to fulfill their obligations to us, we could face shortages of food items or other supplies at our restaurants, and our operations and sales could be adversely impacted. We also modified our plans for opening new restaurants and remodeling existing restaurants due to the COVID-19 outbreak. To preserve liquidity, we delayed new restaurant construction and restaurant remodels that were scheduled to begin during the first half of the year, and we limited restaurant remodels to restaurants that do not have a digital make line or Chipotlane. These changes may materially adversely affect our ability to grow our business, particularly if these construction projects are delayed for a significant amount of time. We cannot predict how long the COVID-19 outbreak will last or if it will reoccur even after the vaccines are widely administered, when government restrictions and mandates will be imposed or lifted, or how quickly, if at all, guests will return to their pre-COVID-19 purchasing behaviors, so we cannot predict how long our results of operations and financial performance will be adversely impacted. Risks Related to Labor and Supply Chain Increase in ingredient and other operating costs, including those caused by climate and/or other sustainability risks, could adversely affect our results of operations. Our profitability depends in part on our ability to anticipate and react to changes in commodity costs, including ingredients, paper, supplies, fuel, utilities and distribution, and other operating costs, including leasing costs and labor. Any volatility in key commodity prices or fluctuation in labor costs could adversely affect our operating results by impacting restaurant profitability. The markets for some of the ingredients we use, such as beef, avocado and chicken, are particularly volatile due to factors such as limited sources, seasonal shifts, climate conditions, industry demand, including as a result of animal disease outbreaks in other parts of the world, international commodity markets, food safety concerns, product recalls and government regulation. Increasing weather volatility or other long-term changes in global weather patterns, including related to global climate change, could have a significant impact on the price or availability of some of our ingredients. These factors are beyond our control and, in many instances, unpredictable. Volatility in prices or disruptions in supply also may result from governmental actions, such as changes in trade-related tariffs or controls, sanctions and counter sanctions, government-mandated closure of our suppliers’ operations, and asset seizures. The cost and disruption of responding to governmental investigations or inquiries, whether or not they have merit, or the impact of these other measures, may impact our results and could cause reputational or other harm. In addition, our supply chain is subject to increased costs arising from the effects of climate change, greenhouse gases and diminishing energy and water resources. The ongoing and long-term costs of these impacts related to climate change and other sustainability related issues could have a material adverse effect on our business and financial condition if not properly mitigated. We also could be adversely impacted by price increases specific to meats raised in accordance with our sustainability and animal welfare criteria, and ingredients grown in accordance with our Food With Integrity specifications, the markets for which are generally smaller and more concentrated than the markets for conventionally raised or grown ingredients. Any increase in the prices of the ingredients most critical to our menu, such as chicken, beef, dairy (for cheese and sour cream), avocados, beans, rice, tomatoes and pork, would have a particularly adverse effect on our operating results. If the cost of one or more ingredients significantly increases, we may choose to temporarily suspend serving the menu items that use those ingredients, such as guacamole or one of our proteins, rather than pay the increased cost. Any such changes to our available menu may negatively impact our restaurant traffic and could adversely impact our sales and brand. We can only partially address future price risk through forward contracts, careful planning and other activities, and therefore increases in commodity costs could have an adverse impact on our profitability. Shortages or interruptions in the supply of ingredients could adversely affect our operating results. Our business is dependent on frequent and consistent deliveries of ingredients that comply with our Food With Integrity specifications. We may experience shortages, delays or interruptions in the supply of ingredients and other supplies to our restaurants due to inclement weather, natural disasters, labor issues or other operational disruptions at our suppliers, distributors or transportation providers, or other conditions beyond our control. In addition, we have a single or a limited number of suppliers for some of our ingredients, including certain cuts of beef, tomatoes, tortillas and adobo. Although we believe we have potential alternative suppliers and sufficient reserves of ingredients, shortages or interruptions in our supply of ingredients could adversely affect our financial results. If we fail to comply with various applicable federal and state employment and labor laws and regulations, it could have a material, adverse impact on our business. Various federal and state employment and labor laws and regulations govern our relationships with our employees, and similar laws and regulations apply to our operations outside of the U.S. These laws and regulations relate to matters such as employment discrimination, wage and hour laws, predictive scheduling (“fair workweek”) and “just cause” termination laws, requirements to provide meal and rest periods or other benefits, family leave mandates, requirements regarding working conditions and accommodations to certain employees, citizenship or work authorization and related requirements, insurance and workers’ compensation rules, healthcare laws and anti-discrimination and anti-harassment laws. Complying with these laws and regulations subjects us to substantial expense and non-compliance could expose us to significant liabilities. For example, previously a number of lawsuits have been filed against us alleging violations of federal and state laws regarding employee wages and payment of overtime, meal and rest breaks, employee classification, employee record-keeping and related practices with respect to our employees. We incur legal costs to defend, and we could suffer losses from, these and similar cases, and the amount of such losses or costs could be significant. In addition, several states and localities in which we operate, and the federal government have from time to time enacted minimum wage increases, changes to eligibility for overtime pay, paid sick leave and mandatory vacation accruals, and similar requirements. These changes have increased our labor costs and may have a further negative impact on our labor costs in the future. In addition, several jurisdictions, including New York City, Philadelphia, Chicago, Seattle, Oregon, San Francisco and San Jose, have implemented fair workweek legislation, which impose complex requirements related to scheduling for certain restaurant and retail employees. Other jurisdictions where we operate are considering enacting similar legislation. Several jurisdictions also have implemented sick pay/paid time off legislation, which requires employers to provide paid time off to employees, and “just cause” termination legislation, which restricts companies’ ability to terminate employees unless they can prove “just cause” or a “bona fide economic reason” for the termination. All of these regulations impose additional obligations on us and could increase our costs of doing business. Our failure to comply with any of these laws and regulations could lead to higher employee turnover and negative publicity, and subject us to penalties and other legal liabilities, which could adversely affect our business and results of operations and potentially cause us to close some restaurants in these jurisdictions. In addition, a significant number of our restaurant crew are paid at rates impacted by the applicable minimum wage. To the extent implemented, federal, state and local proposals that increase minimum wage requirements or mandate other employee matters could, to the extent implemented, materially increase our labor and other costs. Several states in which we operate have approved minimum wage increases that are above the federal minimum. As more jurisdictions implement minimum wage increases, we expect our labor costs will continue to increase. Our ability to respond to minimum wage increases by increasing menu prices depends on willingness of our guests to pay the higher prices and our perceived value relative to competitors. Our distributors and suppliers could also be affected by higher minimum wage, benefit standards and compliance costs, which could result in higher costs for goods and services supplied to us. Additionally, while our employees are not currently covered by any collective bargaining agreements, union organizers have engaged in efforts to organize our employees and those of other restaurant companies. If a significant portion of our employees were to become covered by collective bargaining agreements, our labor costs could increase, and it could negatively impact our culture and reduce our flexibility to attract and retain top performing employees. Labor unions have attempted, and likely will continue to attempt, to attract media attention to their organizing efforts in our restaurants, and their organizing efforts include claims that Chipotle mistreats or undervalues its employees. Despite our efforts to provide more accurate information about our policies and practices, these messages may dissuade guests from patronizing our restaurants. If we are not able to hire, train, reward and retain qualified restaurant crew and/or if we are not able to appropriately plan our workforce, our growth plan and profitability could be adversely affected. We rely on our restaurant-level employees to consistently provide high-quality food and positive experiences to our guests. In addition, our ability to continue to open new restaurants depends on our ability to recruit, train and retain high-quality crew members to manage and work in our restaurants. Maintaining appropriate staffing in our existing restaurants and hiring and training staff for our new restaurants requires precise workforce planning, which has become more complex due to predictive scheduling (“fair workweek”) laws and “just cause” termination legislation. If we fail to appropriately plan our workforce, it could adversely impact guest satisfaction, operational efficiency and restaurant profitability. In addition, if we fail to adequately monitor and proactively respond to employee dissatisfaction, it could lead to poor guest satisfaction, higher turnover, litigation and unionization efforts. The COVID-19 pandemic has exacerbated staffing complexities for us and other restaurant operators, and during 2020 we were forced to temporarily close some restaurants or limit operating hours due to employee illnesses, fear of contracting COVID or caregiving responsibilities among our restaurant crew. COVID-19 has also resulted in aggressive competition for talent, wage inflation and pressure to improve benefits and workplace conditions to remain competitive. Our failure to recruit and retain new restaurant crew members in a timely manner or higher employee turnover levels all could affect our ability to open new restaurants and grow sales at existing restaurants, and we may experience higher than projected labor costs. Risks Related to IT Systems, Cybersecurity and Data Privacy Cybersecurity breaches or other privacy or data security incidents could result in unauthorized access, theft, modification or destruction of confidential guest, personal employee and other material, confidential information that is stored in our systems or by third parties on our behalf, which may adversely affect our business. A cyber incident generally refers to any intentional attack or an unintentional event that results in unauthorized access to systems to disrupt operations, corrupt data or steal or expose confidential information or intellectual property. A cyber incident that compromises the information of our guests or employees could result in widespread negative publicity, damage to our reputation, a loss of guests, disruption of our business and legal liabilities. As our reliance on technology has grown, the scope and severity of risks posed to our systems from cyber threats has increased. In addition, as more business activities have shifted online and more people are working remotely, including as a result of COVID-19, we have experienced an increase in cybersecurity threats and attempts to breach our security networks. The techniques and sophistication used to conduct cyber-attacks and breaches of information technology systems, as well as the sources and targets of these attacks, change frequently and are often not recognized until attacks are launched or have been in place for a period of time. We continuously monitor and develop our information technology networks and infrastructure to prevent, detect, address and mitigate the risk of unauthorized access, misuse, malware and other events that could have a security impact; however there can be no assurance that these measures will be effective. The majority of our restaurant sales are made by credit or debit cards, and we also maintain personal information regarding our employees and confidential information about our guests and suppliers. We segment our card data environment and employ a cyber security protection program that is based on proven industry frameworks. This program includes but is not limited to cyber security techniques, tactics and procedures, including the deployment of a robust set of security controls, continuous monitoring and detection programs, network protections, vendor selection criteria, secure software development programs and ongoing employee training, awareness and incident response preparedness. In addition, we continuously scan our environment for any vulnerabilities, perform penetration testing, engage third parties to assess effectiveness of our security measures and collaborate with members of the cyber security community. However, there are no assurances that such programs will prevent or detect cyber security breaches. From time to time we have been, and likely will continue to be, the target of cyber and other security threats. For example, some of our guests have experienced account takeover fraud, in which guests use the same log in credentials on multiple websites and, when a third party fraudulently obtains those credentials, they can gain unauthorized access to their accounts and charge food orders to the credit card linked to the account (without accessing credit card data). We may in the future become subject to other legal proceedings or governmental investigations for purportedly fraudulent transactions arising out of the actual or alleged theft of our consumers’ credit or debit card information or if consumer or employee information is obtained by unauthorized persons or used inappropriately. Any such claim or proceeding, or any adverse publicity resulting from such an event, may have a material adverse effect on our business and we may incur significant remediation costs. Cybersecurity breaches also could result in a violation of applicable U.S. and international privacy and other laws, and subject us to private consumer, business partner, or securities litigation and governmental investigations and proceedings, any of which could result in our exposure to material civil or criminal liability. For example, the European Union’s General Data Protection Regulation (“GDPR”) requires companies to meet certain requirements regarding the handling of personal data, including its use, protection and transfer and the ability of persons whose data is stored to correct or delete such data about themselves. Failure to meet the GDPR requirements could result in penalties of up to 4% of annual worldwide revenue. Additionally, the California Privacy Act of 2018 (“CCPA”), which became effective on January 1, 2020, provides a private right of action for data breaches and requires companies that process information on California residents to make new disclosures to consumers about their data collection, use and sharing practices, allow consumers to opt out of certain data sharing with third parties and the right for consumers to request deletion of personal information (subject to certain exceptions). If we fail, or are perceived to have failed, to properly respond to security breaches of our or third party’s information technology systems or fail to properly respond to consumer requests under the CCPA, we could experience reputational damage, adverse publicity, loss of consumer confidence, reduced sales and profits, complications in executing our growth initiatives and regulatory and legal risk, including criminal penalties or civil liabilities. Compliance with the GDPR, the CCPA and other current and future applicable international and U.S. privacy, cybersecurity and related laws can be costly and time-consuming. We make significant investments in technology, third-party services and internal personnel to develop and implement systems and processes that are designed to anticipate cyber-attacks and to prevent or minimize breaches of our information technology systems or data loss, but these security measures cannot provide assurance that we will be successful in preventing such breaches or data loss. In addition, media or other reports of existing or perceived security vulnerabilities in our systems or those of our third-party business partners or service providers can also adversely impact our brand and reputation and materially impact our business, even if no breach has been attempted or has occurred. We may incur increased costs to comply with privacy and data protection laws and, if we fail to comply, we could be subject to government enforcement actions, private litigation and adverse publicity. The regulatory environment related to data privacy and cybersecurity is changing at an ever-increasing pace, with new and increasingly rigorous requirements applicable to our business. Complying with newly developed laws and regulations, which are subject to change and uncertain interpretations and may be inconsistent from state to state or country to country, may lead to a decline in guest engagement or cause us to incur substantial costs or modifications to our operations or business practices to comply. We are subject to the European Union’s GDPR, which requires companies to meet certain requirements regarding the handling of personal data, including its use, protection and transfer and the ability of persons whose data is stored to correct or delete such data about themselves. Failure to meet the GDPR requirements could result in penalties of up to 4% of annual worldwide revenue. Additionally, in July 2020, the European Court of Justice’s invalidation of cross-border data transfer mechanisms such as the U.S.-E.U. Privacy Shield and the Standard Contractual Clauses has imposed new uncertainty in privacy compliance and an adverse impact on operational efficiency with our third-party vendors. The Federal Trade Commission and many State Attorneys General are also interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination and security of data. Maintaining our compliance with those requirements may limit our ability to obtain data used to provide a more personalized guest experience. The CCPA provides a private right of action for data breaches and requires companies that process information on California residents to make new disclosures to consumers about their data collection, use and sharing practices, allows consumers to opt-out of certain data sharing with third parties and gives consumers the right to request deletion of personal information (subject to certain exceptions). If we fail, or are perceived to have failed, to properly respond to security breaches of our or third party’s information technology systems or fail to properly respond to consumer requests under the CCPA, we could experience regulatory fines, reputational damage, adverse publicity, loss of consumer confidence, reduced sales and profits, complications in executing our growth initiatives and regulatory and legal risk, including criminal penalties or civil liabilities. We rely heavily on information technology systems and failures or interruptions in our IT systems could harm our ability to effectively operate our business and/or result in the loss of guests or employees. We rely heavily on information technology systems, including the point-of-sale and payment processing system in our restaurants, technologies supporting our online ordering, digital and delivery business, technologies that traceback ingredients to suppliers and growers and manage our supply chain, our rewards program, technologies that facilitate marketing initiatives, employee engagement and payroll processing, and various other processes and transactions. Our ability to effectively manage our business and coordinate the procurement, production, distribution, safety and sale of our products depends significantly on the availability, reliability and security of these systems. Many of these critical systems are provided and managed by third parties, and we are reliant on these third-party providers to implement protective measures that ensure the security and availability of their systems. Although we have operational safeguards in place, these safeguards may not be effective in preventing the failure of these third-party systems or platforms to operate effectively and be available. Failures may be caused by various factors, including power outages, catastrophic events, physical theft, computer and network failures, inadequate or ineffective redundancy, problems with transitioning to upgraded or replacement systems or platforms, flaws in third-party software or services, errors or improper use by our employees or the third-party service providers. If any of our critical IT systems were to become unreliable, unavailable, compromised or otherwise fail, and we were unable to recover in a timely manner, we could experience an interruption in our operations that could have a material adverse impact on our profitability. Our inability or failure to execute on a comprehensive business continuity plan at our restaurant support centers following a disaster or force majeure event could have a material adverse impact on our business. Many of our corporate systems and processes and corporate support for our restaurant operations are centralized at one location. We have disaster recovery procedures and business continuity plans in place to address crisis-level events, including hurricanes and other natural disasters, and back up and off-site locations for recovery of electronic and other forms of data and information, and the COVID-19 pandemic has provided a limited test of our ability to manage our business remotely. However, if we are unable to fully implement our disaster recovery plans, we may experience delays in recovery of data, inability to perform vital corporate functions, tardiness in required reporting and compliance, failures to adequately support field operations and other breakdowns in normal communication and operating procedures that could have a material adverse effect on our financial condition, results of operation and exposure to administrative and other legal claims. In addition, these threats are constantly evolving, which increases the difficulty of accurately and timely predicting, planning for and protecting against the threat. As a result, our disaster recovery procedures and business continuity plans security may not adequately address all threats we face or protect us from loss. Legal and Regulatory Risks A violation of Chipotle’s Deferred Prosecution Agreement could have an adverse effect on our business and reputation. In April 2020, Chipotle signed a Deferred Prosecution Agreement (the “DPA”), which was filed in the U.S. District Court for the Central District of California, to settle an official criminal investigation conducted by the U.S. Attorney’s Office for the Central District of California, in conjunction with the U.S. Food and Drug Administration’s Office of Criminal Investigations (collectively, the “DOJ”), into company-wide food safety matters that occurred in our restaurants dating back to January 1, 2013. Pursuant to the DPA, the DOJ filed a two-count Class A Misdemeanor Information in the United States District Court for the Central District of California charging Chipotle with adulterating and causing food to be adulterated within the meaning of the Federal Food, Drug and Cosmetic Act (“FDCA”) while such food was held for sale. Under the DPA, Chipotle paid a $25 million fine and is required to enhance and maintain a comprehensive compliance program that is designed to ensure Chipotle complies with all applicable federal and state food safety laws. The DOJ agreed that if Chipotle is in full compliance with all of its obligations under the DPA at the conclusion of the three-year deferred prosecution term, the DOJ will move to dismiss the two-count information filed against Chipotle. Full compliance with the DPA requires, among other things, Chipotle to conduct a root cause analysis of the historic food safety matters, maintain and annually update a comprehensive food safety plan and comply with applicable provisions of the FDCA. Chipotle owns and operates over 2,700 restaurants and we dedicate substantial resources to our food safety program; however, even with strong preventative controls and interventions, food safety risks cannot be completely eliminated in any restaurant. Food safety risks may arise due to possible failures by restaurant crew or suppliers to follow food safety policies and procedures, employees or guests coming to the restaurant while ill or serving contaminated food ingredients. If Chipotle is found to have breached the terms of the DPA, the DOJ may elect to prosecute, or bring a civil action against the company for conduct alleged in the DPA’s Statement of Facts, which could result in additional fines, penalties, and have material adverse impacts on our results of operations. In addition, further action by the DOJ may significantly and adversely affect our brand and reputation, especially in light of our highly publicized food safety incidents in 2015 - 2017. We could be party to litigation or other legal proceedings that could adversely affect our business, results of operations and reputation. We have been and, in the future, we likely will be subject to litigation and other legal proceedings that may adversely affect our business. These legal proceedings may involve claims brought by employees, guests, government agencies, suppliers, shareholders or others through private actions, class actions, administrative proceedings, regulatory actions or other litigation. These legal proceedings may involve allegations of illegal, unfair or inconsistent employment practices, including wage and hour, employment of minors, discrimination, wrongful termination, and vacation and family leave laws; food safety issues including food-borne illness, food contamination and adverse health effects from consumption of our food products; data security or privacy breaches; guest discrimination; personal injury in our restaurants; trademark infringement; violation of the federal securities laws or other concerns. For example, a number of lawsuits have been filed against us alleging violations of federal and state employment laws, including wage and hour claims; and in 2020 we settled an official criminal investigation by the U.S. Attorney’s Office for the Central District of California, in conjunction with the U.S. Food and Drug Administration’s Office of Criminal Investigations, related to company-wide food safety matters dating back to 2013. We could be involved in similar or even more significant litigation and legal proceedings in the future. Even if the allegations against us in current or future legal matters are unfounded or we ultimately are not held liable, the costs to defend ourselves may be significant and the litigation may subject us to substantial settlements, fines, penalties or judgments against us and may divert management's attention away from operating our business, all of which could negatively impact our financial condition and results of operations. Litigation also may generate negative publicity, regardless of whether the allegations are valid, or we ultimately are liable, which could damage our reputation, and adversely impact our sales and our relationship with our employees and guests. We are subject to extensive laws, government regulation, and other legal requirements and our failure to comply with existing or new laws and regulations could adversely affect our operational efficiencies, ability to attract and retain talent and results of operations. Our business is subject to extensive federal, state, local and international laws and regulations, including those relating to: preparation, sale and labeling of food, including regulations of the Food and Drug Administration, which oversees the safety of the entire food system, including inspections and mandatory food recalls, menu labeling and nutritional content; employment practices and working conditions, including minimum wage rates, wage and hour practices, Fair Workweek legislation, employment of minors, discrimination, harassment, classification of employees, paid and family leave, workplace safety, immigration and overtime among others; health, sanitation, safety and fire standards and the sale of alcoholic beverages; building and zoning requirements, including state and local licensing and regulation governing the design and operation of facilities and land use; public accommodations and safety conditions, including the Americans with Disabilities Act and similar state laws that give civil rights protections to individuals with disabilities in the context of employment, public accommodations, and other areas; data privacy laws and standards for the protection of personal information, including social security numbers, financial information (including credit card numbers), and health information, and payment card industry standards and requirements; environmental matters, such as emissions and air quality, water consumption, the discharge, storage, handling, release, and disposal of hazardous or toxic substances, and local ordinances restricting the types of packaging we can use in our restaurants; and public company compliance, disclosure and governance matters, including accounting and tax regulations, SEC and NYSE disclosure requirements. Compliance with these laws and regulations, and future new laws or changes in these laws or regulations that impose additional requirements, can be costly. Any failure or perceived failure to comply with these laws or regulations could result in, among other things, revocation of required licenses, administrative enforcement actions, fines and civil and criminal liability. Risks Related to Our Growth and Business Strategy If we are unable to meet our projections for new restaurant openings, or efficiently maintain the attractiveness of our existing restaurants, our profitability could suffer. Our growth strategy depends on our ability to continue to open new restaurants and operate them profitably. Historically, it can take up to 24 months to ramp up the sales and profitability of a new restaurant. During the ramp-up phase, the restaurant’s sales and income are below the levels at which we expect them to normalize and costs may be higher as we train new employees and adjust our food deliveries and preparation to sales trends. If we are unable to build the customer base that we expect or overcome the initial higher costs associated with new restaurants, our new restaurants may not be as profitable as our existing restaurants. Our ability to open and profitably operate new restaurants also is subject to various risks, such as the identification and availability of economically viable locations, the negotiation of acceptable lease terms, the ability to operate with a Chipotlane, the need to obtain all required governmental permits (including zoning approvals and liquor licenses) and to comply with other regulatory requirements, the availability of capable contractors and subcontractors, the ability to meet construction schedules and budgets, the ability to manage labor activities that could delay construction, increases in labor and building material costs, changes in weather or other acts of God that could result in construction delays and adversely affect the results of one or more restaurants for an indeterminate amount of time, our ability to hire and train qualified management personnel and general economic and business conditions. At each potential location, we compete with other restaurants and retail businesses for desirable development sites, construction contractors, management personnel, hourly employees and other resources. If we are unable to successfully manage these risks, we could face increased costs and lower than anticipated sales and earnings in future periods. In addition, in an effort to increase same-restaurant sales and improve our operating performance, we continue to improve our existing restaurants through remodels, upgrades and regular upkeep. If the costs associated with remodels, upgrades or regular upkeep are higher than anticipated, restaurants are closed for remodeling for longer periods than planned or remodeled restaurants do not perform as expected, we may not realize our projected desired return on investment, which could have a negative effect on our operating results. Substantially all of our restaurants operate in leased properties subject to long-term leases. If we are unable to secure new leases on favorable terms, terminate unfavorable leases or renew or extend favorable leases, our profitability may suffer. We operate substantially all of our restaurants in leased facilities. It is becoming increasing challenging to locate and secure favorable lease facilities for new restaurants as competition for restaurant sites in our target markets is intense. Development and leasing costs are increasing, particularly for urban locations. These factors could negatively impact our ability to manage our occupancy costs, which may adversely impact our profitability. In addition, any of these factors may be exacerbated by economic factors, which may result in an increased demand for developers and contractors that could drive up our construction and leasing costs. Also, as we open and operate more restaurants, our rate of expansion relative to the size of our existing restaurant base will decline, making it increasingly difficult to achieve levels of sales and profitability growth that we achieved in prior years. From time to time we may close or relocate a restaurant if a current location becomes less profitable as a result of adverse economic conditions or local regulatory compliance in the area. We also have closed some restaurants where the impact of COVID-19 was severe. If the closures continue for a long period of time we may not be able to recover our investment due to the high rental rates. Because substantially all of our restaurants operate in leased facilities, we may incur significant lease termination expenses when we close or relocate a restaurant and are often obligated to continue rent and other lease related payments after restaurant closure. We also may incur significant asset impairment and other charges in connection with closures and relocations. If the lease termination cost is significant, we may decide to keep underperforming restaurants open. Ongoing lease obligations at closed or underperforming restaurant locations could decrease our results of operations. In addition, we may be unable to renew a lease without substantial additional cost at the end of the lease term and expiration of all renewal periods. As a result, we may be required to close or relocate a restaurant, which could subject us to construction and other costs and risks that may have an adverse effect on our operating performance. Our failure to effectively manage our growth could have a negative adverse effect on our business and financial results. As of December 31, 2020, we owned and operated 2,764 Chipotle restaurants and we plan to open a significant number of new restaurants in the next several years. Our existing restaurant management systems, back office technology systems and processes, financial and management controls, information systems and personnel may not be adequate to support our continued growth. To effectively manage a larger number of restaurants, we may need to upgrade and expand our infrastructure and information systems, automate more processes that currently are manual or require manual intervention and hire, train and retain restaurant crew and corporate support staff, all of which may result in increased costs and at least temporary inefficiencies. We also place a lot of importance on our culture, which we believe has been an important contributor to our success, and as we continue to grow, it may be increasingly difficult to maintain our culture. Our failure to sufficiently invest in our infrastructure and information systems and maintain our strong staffing and culture could harm our brand and operating results. A failure to recruit, develop and retain effective leaders or the loss or shortage of personnel with key capacities and skills could impact our strategic growth plans and jeopardize our ability to meet our business performance expectations and growth targets. Our ability to continue to grow our business depends substantially on the contributions and abilities of our executive leadership team and other key management personnel. Changes in senior management could expose us to significant changes in strategic direction and initiatives. A failure to maintain appropriate organizational capacity and capability to support our strategic initiatives or to build adequate bench strength with key skillsets required for seamless succession of leadership, could jeopardize our ability to meet our business performance expectations and growth targets. If we are unable to attract, develop, retain and incentivize sufficiently experienced and capable management personnel, our business and financial results may suffer. The market price of our common stock may be more volatile than the market price of our peers. We believe the market price of our common stock generally has traded at a higher price-earnings ratio than stocks of most of our peer companies as well as the overall market, which typically has reflected market expectations for higher future operating results. At any given point in time, our price-earnings ratio may trade at more than twice the price-earnings ratio of the S&P 500. Also, the trading market for our common stock has been volatile at times, including as a result of adverse publicity events. As a result, if we fail to meet market expectations for our operating results in the future, any resulting decline in the price of our common stock could be significant. General Risk Factors Economic and business factors that are largely beyond our control may adversely affect consumer behavior and the results of our operations. Restaurant dining generally is dependent upon consumer discretionary spending, which may be affected by general economic conditions that are beyond our control. For example, international, domestic and regional economic conditions, consumer income levels, financial market volatility, a slow or stagnant pace of economic growth, rising energy costs, rising interest rates, social unrest, and governmental, political and budget concerns or divisions may have a negative effect on consumer confidence and discretionary spending. In addition, a new presidential and legislative administration recently took office, and it is not yet known what changes the new administration will make to economic or tax policies and how those policies will impact the economy or consumer discretionary spending. Any significant decrease in our guest traffic or average transactions would negatively impact our financial performance. Any actual or perceived threat of a pandemic or communicable disease, terrorist attack, mass shooting, heightened security requirements, including cybersecurity, or a failure to protect information systems for critical infrastructure, such as the electrical grid and telecommunications systems, could harm our operations, the economy or consumer confidence generally. Any of the above factors or other unfavorable changes in business and economic conditions affecting our guests could increase our costs, reduce traffic in some or all of our restaurants or limit our ability to increase pricing, any of which could lower our profit margins and have a material adverse effect on our sales, financial condition and results of operations. These factors also could cause us to, among other things, reduce the number and frequency of new restaurant openings, close restaurants or delay remodeling of our existing restaurant locations. Further, poor economic conditions may force nearby businesses to shut down, which could reduce traffic to our restaurants or cause our restaurant locations to be less attractive. Our quarterly financial results may fluctuate significantly, including due to factors that are not in our control. Our quarterly financial results may fluctuate significantly and could fail to meet investors’ expectations for various reasons, including: negative publicity about the safety of our food, employment-related issues, litigation or other issues involving our restaurants; fluctuations in supply costs, particularly for our most significant ingredients, and our inability to offset the higher cost with price increases without adversely impacting guest traffic; labor availability and wages of restaurant management and crew; increases in marketing or promotional expenses; the timing of new restaurant openings and related revenues and expenses, and the operating costs at newly opened restaurants; the impact of inclement weather and natural disasters, such as freezes and droughts, which could decrease guest traffic and increase the costs of ingredients; the amount and timing of stock-based compensation; litigation, settlement costs and related legal expenses; tax expenses, asset impairment charges and non-operating costs; and variations in general economic conditions, including the impact of declining interest rates on our interest income. As a result of any of these factors, results for any one quarter are not necessarily indicative of results to be expected for any other quarter or for any year. Average restaurant sales or comparable restaurant sales in any particular future period may decrease. ITEM 1B.