Governments review acquisitions that could affect national security. The three regimes a global candidate should name:
- US — CFIUS (Committee on Foreign Investment in the United States): reviews foreign investments in US businesses. Filing is mostly voluntary, but mandatory for certain deals involving critical technologies or where a foreign government gains a substantial interest; it covers control deals and some non-controlling stakes in sensitive (critical technology, critical infrastructure, sensitive personal data) businesses. CFIUS can impose mitigation or refer a deal to the President to block or unwind it.
- UK — National Security and Investment Act 2021 (NSIA): mandatory notification for acquisitions of more than 25%, 50% or 75% (or of voting control) in 17 sensitive sectors — for any acquirer, including UK ones; completing without approval makes the deal void. The government can also call in non-notified deals for up to 5 years.
- EU — FDI Screening Regulation (2019/452): a cooperation framework; the screening itself is done by member states (e.g. Germany reviews stakes from 10% or 20% in sensitive sectors and 25% elsewhere). The EU has been revising the Regulation to require every member state to run a screening mechanism.
When does it trigger? Defense, critical infrastructure (energy, telecom, water, health), sensitive technologies (semiconductors, AI, quantum) and data-rich businesses — with foreign sponsors, and foreign or sovereign LPs, in the ownership chain.