Editorial Team The global spread of FDI screening has completely changed the game. Governments now treat foreign investment as a matter of national security, not just a simple economic transaction. For any business doing cross-border M&A, this means you either learn to work within these incredibly complex new rules, or you risk your deal getting blocked and losing a fortune. I have to wonder, are companies actually ready for this, or are they still working off an old playbook that’s going to get them burned?
Key Takeaways
- The number of countries with FDI screening has exploded, from under 30 in 2000 to over 90 now. The entire investment field is different.
- What counts as “national security” in these reviews is way bigger than it used to be, covering critical infrastructure, key technologies, and even how you handle personal data.
- You have to get in front of regulators early and figure out the risks yourself. Waiting for them to find a problem is the surest way to get your deal delayed or killed.
- Your due diligence can’t just be financial and legal anymore. If you’re not doing a serious geopolitical risk assessment on every deal, you’re flying blind.
The Expanding Scope of National Security Reviews
We used to think of foreign direct investment (FDI) as a simple good, it brings in money, it creates jobs. That idea is dead, killed by rising geopolitical tension and tech competition. Where FDI screening used to be a sleepy corner of regulation focused on defense contractors and maybe an energy grid, it’s now everywhere. We’re seeing deals get flagged for investment in areas like artificial intelligence, quantum computing, biotechnology, and even software companies that just happen to hold a lot of personal data. Look at the Committee on Foreign Investment in the United States (CFIUS), its reach has grown massively. A Reuters report from July 2024 showed that CFIUS reviews hit an all-time high in 2023, which tells you everything you need to know about how intense the scrutiny has become.
The goal here is safeguarding a country’s strategic autonomy and economic resilience. Think about it: a foreign entity from a rival nation buys a popular software company. That software is used everywhere, including in government offices and on the computers running the power grid. Suddenly, the potential for data theft or even sabotage becomes a very real national security problem, and that’s exactly what these new screening rules are built to stop. In my work with multinationals, I see executives get this wrong all the time. They consistently underestimate these kinds of non-traditional security risks, still thinking that only direct defense deals get this kind of attention. It’s a dangerous and outdated way to think.
Sure, you can argue this much screening stifles innovation and throws up pointless barriers to investment. I get it, the bureaucracy can be a nightmare and we do want capital to flow. But we have to be pragmatic about the world we live in now. You have to weigh the upside of free-flowing capital against the real-world risk of leaving your country strategically vulnerable. At the end of the day, governments are protecting their future, not just specific industries. You can see this happening at a huge scale, the European Union’s FDI Screening Regulation from 2019 was created for member states to coordinate on these reviews, because they understood that one country acting alone can’t possibly manage these cross-border threats.
The Imperative of Proactive Risk Assessment
To get deals done now, you have to flip your entire approach from reactive compliance to proactive risk hunting. You absolutely cannot wait for a regulator to call you with a problem. You have to find the potential problems yourself, long before they do. That means building a real geopolitical and national security due diligence process for every single cross-border deal. This goes way beyond having your lawyers just read the rules. It means you need people who actually understand the political dynamics at play, what the governments involved are trying to achieve strategically, and what makes a particular industry sensitive.
Take semiconductors. Anyone trying to invest in a chip plant today, no matter where they’re from, is going to be under a microscope in most developed countries. The review is about supply chain resilience and national self-sufficiency, with the technology itself almost being a secondary concern. If you’re planning a deal like this, you’d better know the host country’s specific security anxieties inside and out, who the regulators are, like Germany’s investment review process at the Ministry for Economic Affairs and Climate Action, and have a story for why your deal helps them. If you don’t, you’re looking at months of delays, being forced to make painful concessions, or just having the deal blocked entirely. It’s a huge financial and reputational hit.
I’ve seen it happen again and again: a company is totally confident in the deal’s economics, completely ignores the national security angle, and then is shocked when the whole thing is stalled for months or gets blocked. A classic mistake is thinking minority stakes or JVs are safe. That’s not true anymore. Many of the new rulebooks, like the UK’s National Security and Investment Act 2021, will trigger a review for a non-controlling stake if it gives the investor influence or access to sensitive data. In fact, I saw a 2025 analysis from a major law firm showing that almost 30% of their clients’ FDI screening headaches came from deals with less than a 25% equity stake. That shows you just how far the net has been cast.
Best Practices for Successful Navigation
So how do you actually get a deal through this mess? First, you need early engagement with regulatory authorities. Go talk to them. A lot of regulators have informal channels you can use before you even file anything, which is an incredible opportunity to get a feel for their concerns, figure out what they’re sensitive about, and maybe even restructure the deal to avoid problems. Be transparent and open about what you’re doing. Trying to hide the real ownership structure or the purpose of the deal is just asking for trouble, these regulators have gotten very, very good at digging.
Second, your complete due diligence has to go way past the financials and legal docs. You need a separate, dedicated national security review. That means digging into the target’s products, its tech, who its customers are (especially any government contracts), what data it holds, and where its supply chain is weak. It also means you need to know, without a doubt, who the ultimate beneficial owners of the investing entity are and what their connections to foreign governments or state-owned enterprises look like. Yes, it’s a ton of work, but this is how you find the red flags early enough to do something about them. For instance, if you discover the target holds critical IP, you can go into the negotiation prepared to offer commitments about keeping R&D in-country or restricting its transfer.
Finally, you need a strong communication strategy. You have to tell a convincing story. Part of that story is about the economic upside of your investment, but the most important part is how you’re going to manage the national security risks you’ve identified. You can’t just walk in and say “there are no risks.” You have to show up with solutions already worked out. That might mean offering specific governance controls, promising to keep data localized, or agreeing to third-party security audits. You’re trying to build trust and show the regulators that your deal actually supports their national interests. It’s a lot more work upfront than just reacting to their questions, but it’s the difference between getting a yes and a no.
This new world of FDI screening isn’t going away. It’s a permanent part of doing business globally. Any company that doesn’t adapt its investment strategy is taking a massive gamble. The era of M&A driven only by economics is finished, because geopolitics is now baked into every calculation. If you ignore this, you’re exposing your deals to crippling delays and outright rejection. The task is big, but the answer is simple: national security risk has to be at the heart of your investment process from day one.
What is FDI screening?
FDI screening is the process where governments check foreign direct investments (FDI) to see if they pose a risk to national security, public order, or critical infrastructure. These reviews can result in the government imposing conditions on a deal or just blocking it.
Which sectors are most commonly subject to FDI screening?
The list keeps growing, but the usual suspects are defense, critical infrastructure like energy and telecom, sensitive technologies including AI, semiconductors, and biotechnology, and any company that processes large volumes of personal data.
Can minority investments trigger FDI screening?
Absolutely. Many modern regulations, like the UK’s National Security and Investment Act 2021, don’t care if you don’t have control. If a minority stake gives you significant influence over the company or access to sensitive information, it can trigger a full review.
What are the potential consequences of failing an FDI screening review?
The consequences can be severe. Regulators can force you to accept tough conditions, sell off parts of the business, or just kill the deal entirely. It’s a quick way to lose a lot of money, waste months of work, and damage your reputation.
How can companies proactively address FDI screening concerns?
You need to do your own national security due diligence, talk to regulators early and honestly, structure your deal to manage the risks you find, and have a communication plan that shows how your deal helps, not hurts, their national interests.
