Foreign companies entering the United States through acquisition or investment must assess whether their transaction may be subject to review by the Committee on Foreign Investment in the United States (CFIUS). CFIUS is an interagency body chaired by the U.S. Department of the Treasury that evaluates whether foreign investments in U.S. businesses raise national security concerns. Its jurisdiction extends beyond traditional defense sectors and increasingly captures transactions involving technology, infrastructure, sensitive data and certain real estate assets. For foreign buyers or investors, the key question is not whether CFIUS exists, but whether it applies to the transaction early enough to avoid delays, additional costs or the need to restructure the deal.
When CFIUS Applies
CFIUS review is not limited to acquisitions of or investments in defense contractors or classified businesses. It may apply where the U.S. target is involved in:
- Critical technologies, including export-controlled or dual-use technologies
- Critical infrastructure, such as energy, telecommunications or transportation systems
- Sensitive personal data of U.S. individuals
- Real estate located near sensitive government or military sites
Importantly, CFIUS jurisdiction is not limited to majority acquisitions. Even minority investments can trigger review if they provide the foreign investor with:
- Board representation or observer rights
- Access to non-public technical information
- Influence over decision-making or governance
As a result, many middle-market transactions that appear commercially routine may still fall within CFIUS scope. This risk is often identified only after key deal terms have been negotiated, which can introduce avoidable timing pressure.
How to Determine Whether CFIUS Is Relevant
There is no formal advisory opinion process to confirm whether CFIUS applies to a transaction. Instead, applicability is determined through legal and factual analysis of three core elements: the nature of the U.S. business, the ownership and control profile of the foreign investor and the rights being acquired. This assessment is typically conducted by deal counsel during early-stage diligence and in parallel with transaction structuring, often in coordination with specialized national security counsel where appropriate. Where uncertainty exists, parties often proceed with a voluntary filing to obtain clarity and eliminate post-closing risk.
The absence of a filing does not prevent CFIUS from reviewing a transaction. The committee may initiate review independently, including after closing, which can result in operational disruption or divestment. For this reason, early coordination between deal counsel, regulatory advisors and business stakeholders is critical.
Illustrative Example
Consider a Canadian technology company acquiring a U.S. software business that develops data analytics tools used by logistics providers. The target does not perform government work and is not a defense contractor. However, it processes large volumes of location-based data relating to U.S. infrastructure and supply chains. Even if the Canadian buyer acquires less than 100% of the business, if the investment provides access to non-public technical information or governance rights, the transaction may fall within CFIUS jurisdiction due to the sensitivity of the data involved. Without early analysis, the parties may proceed to closing only to encounter regulatory scrutiny that delays integration, requires operational restrictions or necessitates restructuring of governance rights after the fact.
Filing Considerations and Process
Most CFIUS filings are voluntary, but certain transactions require mandatory filings, particularly where foreign government ownership is involved or the U.S. business qualifies as a “TID U.S. business” (Technology, Infrastructure, or Data). Parties often file voluntarily to obtain “safe harbor” protection, which limits the government’s ability to revisit the transaction after clearance.
Filings may take the form of a short-form declaration, typically reviewed within 30 days, or a full notice, which triggers a more detailed review that can extend timelines to 45–90 days or longer. Failure to make a mandatory filing can result in significant penalties and, in some cases, the unwinding of a completed transaction. A filing strategy is most effective when aligned with transaction timelines, financing conditions and closing mechanics from the outset, with input from specialized CFIUS counsel as needed.
Transaction Impact and Risk Management
CFIUS review introduces both timing risk and deal certainty risk. The committee has broad authority to:
- Impose conditions on a transaction, including governance or data access restrictions
- Require mitigation measures, such as U.S.-based oversight or security protocols
- Delay closing timelines
- Recommend that the President block or unwind a transaction
However, these risks are often manageable where CFIUS considerations are identified early and addressed through transaction structuring, filing strategy and mitigation planning. Transactions that incorporate these considerations at the outset are significantly less likely to experience late-stage disruption.
Practical Steps for Foreign Buyers
Foreign investors should address CFIUS risk as part of early transaction planning, not after key deal terms are set. In practice, this means:
- Screening early in diligence whether the target business involves sensitive technology, infrastructure or data
- Mapping the ownership structure, including any foreign government interests or layered ownership that may raise scrutiny
- Evaluating governance rights, particularly board access, information rights and decision-making authority that could trigger jurisdiction
- Determining filing strategy upfront, including whether a voluntary filing is advisable to obtain deal certainty
- Building CFIUS timing into the deal timeline, particularly where financing, exclusivity or closing conditions may be affected
- Preparing for mitigation, including potential restrictions on data access, governance or operational control
Early engagement with experienced cross-border deal counsel allows buyers to identify CFIUS risk, structure around it where possible and coordinate efficiently with specialized advisors where needed.
Bottom Line
CFIUS is not limited to high-profile or defense-related transactions. It increasingly applies to a broad range of industries, including technology, data-driven businesses and infrastructure-adjacent operations.
There is no formal mechanism to obtain a definitive answer in advance, making early diligence and informed judgment essential. For foreign buyers, the practical objective is not to avoid CFIUS, but to identify and address it early enough to prevent disruption, preserve deal certainty and maintain strategic flexibility in the U.S. market.
Warner’s International Business & Trade team helps foreign investors identify and assess CFIUS risk as part of broader transaction planning. Working alongside specialized national security counsel when appropriate, we help clients evaluate exposure, structure transactions strategically and navigate regulatory considerations that can affect deal certainty and timing.
