Foreign Investment Screening: CFIUS vs EU FDI Framework

The foreign investment screening CFIUS vs EU comparison reveals two fundamentally different approaches to policing cross-border deals: the US relies on a single, deal-by-deal national-security veto backed by executive discretion, while the EU has built a coordinated framework that flags transactions without requiring approval, leaving the final block to individual member states.

The US CFIUS Framework

The Committee on Foreign Investment in the United States has operated since 1975, but its teeth sharpened dramatically after 9/11 and again with the 2018 Foreign Investment Risk Review Modernization Act (CFIRMA). CFIUS is chaired by the Secretary of the Treasury and includes the Secretaries of State, Defense, Commerce, and Homeland Security, plus the Director of National Intelligence.

Any foreign investor buying control of a US business, or acquiring sensitive assets, must either file voluntarily or be stopped by CFIUS if the transaction triggers concern. The committee has 30 days to decide: approve, condition the deal, or open a 45-day “investigation.” If the President takes umbrage after the investigation closes, he can unwind the deal entirely within 15 days. In practice, few deals reach unwinding; most are negotiated to include a standstill agreement, technology compartmentalization, or sale of a sensitive subsidiary.

Trigger thresholds. CFIUS jurisdiction is wide. It applies to:

• Foreign acquisition of 10% or more of a US company’s voting rights (or 25% in certain cases).
• Acquisition of any interest in land near a military installation or critical infrastructure.
• Deals in critical infrastructure (power, water, telecom, transportation).
• Acquisition of intellectual property or trade secrets in sensitive technologies (AI, quantum, biotech, advanced semiconductors, hypersonics).

Once a filing hits CFIUS, the process is confidential and bilateral: the foreign buyer, the target, and CFIUS staff negotiate in private. CFIUS rarely discloses its reasoning or conditions publicly, which frustrates deal-watchers and foreign investors equally.

The EU Foreign Direct Investment Screening Regulation

The EU framework is newer and less centralized. The 2020 Foreign Direct Investment Screening Regulation (FDIR) created a coordination mechanism, not a pan-EU approval authority. The European Commission can flag a deal and recommend that member states investigate, but only the member state where the target is located can formally block an acquisition.

The FDIR applies to acquisitions by non-EU investors of:

• 25% or more of voting rights.
• Board or management-control rights, even below 25%.
• Access to critical infrastructure, sensitive technology, or personal data.

Triggering sectors. Member states are encouraged to screen investments in critical infrastructure (energy, transport, water, health), media and communications, cryptography, space and defense, AI, semiconductors, and biotechnology. Each member state can set its own list of sensitive activities.

When a deal crosses FDIR thresholds, the target member state has 15 days to open a formal screening. If it does, it has up to 75 days to decide. If a deal affects multiple member states or EU-wide infrastructure, the Commission can ask for a one-month extension. But here’s the friction: there is no EU-wide approval. Only a member state can block. If Germany reviews a deal and approves it, France cannot unilaterally block it afterward.

This decentralization reflects the EU’s political reality—member states guard their autonomy fiercely. But it also creates gaps: a foreign buyer can close a deal in one country and then argue it should be grandfathered elsewhere.

Head-to-Head Comparison

How a CFIUS Review Unfolds

In practice, a foreign buyer (or the target company on the buyer’s behalf) voluntarily files a notice with CFIUS 30–45 days before closing. CFIUS staff review the filing in parallel with legal and intelligence agency assessments. Within 30 days, CFIUS either:

1. Approves the deal (or deems it approved if no decision is made).
2. Issues a written decision approving with conditions (e.g., no access to certain US facilities, mandatory US board seat, technology firewall).
3. Opens an investigation (second phase), extending review to 45 days.

If CFIUS wants to block the deal entirely, it sends its recommendation to the President, who has 15 days to make a final call. Presidential blocks are rare—about one per year—because by that stage, the buyer and target have already been negotiating conditions for weeks.

How an EU Member State Review Unfolds

When a non-EU buyer notifies a member state (or the state learns through public sources), the state has 15 days to decide whether to formally “call in” the transaction for screening. If it does, it has up to 75 days to investigate and rule. Member states often approve with conditions: foreign investors may be forced to place sensitive equipment in local hands, commit to local R&D spending, or carve out critical subsidiaries.

Unlike CFIUS, an EU member state cannot unwind a deal post-closing; it must block before closing, which creates a timing asymmetry. Buyers who close before a member state finishes its review may find the deal is now irreversible.

National Security Redefined

Both frameworks stretch “national security” far beyond traditional definitions. CFIUS now scrutinizes AI training datasets, rare-earth processing capacity, and genetic research databases. The EU similarly flags acquisitions of digital infrastructure, 5G suppliers, and cloud-computing providers. Neither system publishes detailed decisionmaking criteria, so foreign buyers often cannot know in advance whether they will be blocked—they must consult advisors, file, and negotiate.

The result is that foreign investment in advanced economies is now routinely screened, negotiated, and conditioned. A buyer cannot simply announce a deal; it must architect it with CFIUS and member state concerns in mind from inception.

Regulatory Creep and Political Risk

Both regimes have steadily broadened their reach. CFIUS gained explicit statutory authority over sensitive technologies in 2018 (CFIRMA). The EU has expanded FDIR thresholds twice, lowering sector-specific deal values and adding AI to sensitive activities. Meanwhile, informal signals shape behavior: a foreign buyer might withdraw from a deal before filing if early conversations with CFIUS suggest headwinds.

This creates a hidden tax on foreign M&A in advanced economies—not a dollar cost, but a time-to-close cost and a deal-certainty cost that domestic acquirers do not face.

See also