What it means
Buying a company is usually a matter of price and agreement. When the buyer is foreign and the target touches sensitive American capabilities, a third party joins the negotiation: CFIUS, the committee that asks whether the deal is safe for the country.
The committee is an alliance of agencies, with Treasury chairing and defence, state, commerce, homeland security, energy and justice all at the table, because national security in the modern sense spans far beyond weapons. Its remit centres on control, since CFIUS reviews transactions where a foreign person could gain control of a US business, and certain non-controlling investments in critical technology, infrastructure and sensitive personal data.
The process runs from notice to conclusion: parties file jointly, the committee reviews and may investigate, and outcomes range from clearance, through mitigation agreements that attach conditions, to presidential prohibition. Filing was long voluntary, which created a strange incentive, because deals could close without review but CFIUS could unwind them afterward, and it did, so sophisticated parties filed anyway for the safe harbour a clearance brings.
Reforms in 2018 sharpened the teeth, as mandatory declarations now cover specified investments in critical technologies and infrastructure, and the committee's staffing and reach expanded to match a world of strategic rivalry. The concerns that drive scrutiny follow clear patterns: access to sensitive data, control of critical infrastructure or technology, proximity to sensitive facilities, and buyers tied to foreign governments each raise the temperature.
Mitigation is the middle path, since many deals clear with conditions such as data held domestically, certain board seats excluded and security agreements monitored for years, so the sale proceeds with the risk fenced. For any cross-border acquirer, CFIUS is now a workstream, not an afterthought, and deal timelines, break fees and even deal structure get designed around the review, so the answer to whether to file is a board-level question.
The concept has spread globally, as most major economies now run their own foreign investment screening regimes, from the EU framework to national regimes across Europe, Asia and the Gulf, which makes CFIUS-style review a standard feature of international deals. For sellers, the committee matters too, because a US business courting foreign buyers should map its own sensitivity early, since discovering it mid-negotiation rewrites price, timetable and sometimes the deal itself.
CFIUS is best understood as a gatekeeper with discretion rather than a rulebook with answers, so preparation, early engagement and credible mitigation are the currency that gets deals through the gate. Timing strategy is part of deal craft, since filing early, engaging staff informally and pre-agreeing the shape of mitigation can compress a review, while surprises discovered by the committee extend it.
The record shows the committee is rarely a deal-killer but frequently a deal-shaper, as most reviews clear, many with conditions, and the prohibition cases cluster around genuinely sensitive technology and data. Advisers matter here more than in most processes, because specialist counsel know the committee's current sensitivities, which shift with geopolitics faster than any statute.
Public opinion shadows the process, since high-profile deals attract congressional attention that can harden positions whatever the merits. Deal documents now price the risk directly, with reverse break fees and efforts clauses allocating who pays if the review kills the transaction.
In practice
Real-world examples.
Example
A chip acquisition is abandoned after the committee signals opposition. The buyer and seller had agreed a price, but the target's technology was too sensitive for any mitigation the parties could offer. The reverse break fee in the deal documents decides who bears the cost of walking away.
Example
A deal clears with domestic data hosting and board exclusions. The foreign buyer agrees that sensitive customer data stays on servers in the United States and that its nominees will not sit on the security committee. A monitor reports compliance for several years.
Example
A closed acquisition is ordered unwound two years later. The parties had skipped the filing, and the committee later reviewed the transaction on its own initiative. The buyer had to sell the business again, which cost far more than the filing would have.
Case study
Seen in the real world.
Fictional example: Nordvik Systems, a fictional Scandinavian industrial group, agreed to buy a fictional US sensor maker without a CFIUS workstream, assuming an allied-country buyer faced no real scrutiny. The target's minor defence subcontracts triggered a mandatory declaration and a full investigation mid-deal, and the timetable slipped five months while financing commitments wobbled. Nordvik closed with a mitigation agreement, but at a repriced deal. Its general counsel's rule afterward: map the target's security exposure before signing, not after.
Nordvik's lenders had also asked what would happen if the review failed. The lesson fed into its next deal, where it hired specialist counsel before the first bid, filed early and agreed the shape of mitigation in advance. The review ran far more smoothly, and the board treated the cost of preparation as a small price for certainty.
Watch out
Common mistakes.
- Assuming an allied-country or minority investment escapes review.
- Closing without filing and accepting unwind risk.
- Discovering the target's sensitive contracts or data mid-negotiation.
Questions
People also ask.
What transactions does CFIUS review?
Deals giving a foreign person control of a US business, plus certain non-controlling investments in critical technology, infrastructure and sensitive personal data.
Is filing mandatory?
For specified critical technology and infrastructure investments, yes. Otherwise voluntary, but unfiled deals can be reviewed and unwound later, so many parties file for safe harbor.
What outcomes are possible?
Clearance, clearance with mitigation conditions, or recommendation that the president block or unwind the deal.
From the founder's library

Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related
