United States: Shaking Up Terra FIRRMA: Implications Of CFIUS Reform For Tech And Life Sciences Companies

The shadow cast over the technology industry by the Committee on Foreign Investment in the U.S. has been growing in recent years, resulting in the blocking of various high-profile technology deals—including Broadcom's proposed acquisition of Qualcomm and China Venture Capital Fund Limited's proposed acquisition of Lattice Semiconductor. It is perhaps not surprising then that one of the clear priorities of the newly-enacted Foreign Investment Risk Review Modernization Act—known as FIRRMA— is the protection of critical technologies and specifically cybersecurity technology, personally identifiable information, genetic information, and other sensitive technology and data that has been targeted for development or may be exploited by certain foreign governments in a manner that threatens national security. For many companies in the technology and life sciences sectors, the process of identifying and selecting strategic partners and planning for a transaction will be altered in a meaningful way, with CFIUS analysis and considerations taking on a more central role. The following is a summary of what technology and life sciences companies should anticipate and account for in this new state-of-play under the revised law.

Expanded Jurisdiction Will Cover More Types of Transactions

FIRRMA became law on August 13, 2018, and while its most impactful provisions will not go into effect until implementing regulations are established, the legislation significantly expands CFIUS jurisdiction both in the types of transactions covered and the areas of potential concern for review. CFIUS—the inter-agency committee responsible for reviewing acquisitions by foreign persons of U.S. businesses for possible national security concerns—has jurisdiction to review mergers, acquisitions, and takeovers by or with any foreign person which could result in foreign control of any U.S. business.

Under the revised law, in addition to these types of acquisitions, CFIUS's jurisdiction will expand to cover certain other non-control investments in sensitive U.S. businesses, as well as acquisitions of real estate involving or near sensitive U.S. facilities. The addition of the "other investments" category codifies and further expands the recent CFIUS practice of deeming within its jurisdiction transactions that provide the foreign investor access to sensitive information or the right to be involved in the decision-making of the U.S. business, even if the voting interest being acquired is very small. Moreover, the specific inclusion of observer rights will require many companies and investors to reassess their approach to investor involvement at the board level. Also, while the business models of most technology and life companies do not involve the sale or lease of real estate and therefore the impact of the inclusion of these transactions within CFIUS's jurisdiction is likely minimal for them, CFIUS may be a factor when, for example, subleasing office space or selling assets that include real estate.

"Other Investments" – Following the implementation of new regulations, CFIUS jurisdiction will apply to direct or indirect minority investments by a foreign person in any U.S. business that owns, operates, manufactures, supplies or services critical infrastructure; produces, designs, tests, manufactures, fabricates or develops one or more critical technologies; or maintains or collects sensitive personal data of U.S. citizens that may be exploited in a manner that threatens national security, if the investment results in the foreign person having:

  1. Access to any "material nonpublic technical information"1 of the U.S. business
  2. The right to nominate or appoint a member of the board of directors or equivalent governing body of the U.S. business or observer rights to the same, or
  3. Any involvement, other than through voting of shares, in substantive decision-making of the U.S. business regarding the use, development, acquisition, safekeeping, or release of sensitive personal data of U.S. citizens, the use, development acquisition, or release of critical technologies, or the management, operation, manufacture, or supply of critical infrastructure

Of particular significance to technology and life sciences companies, the definition of "critical technologies"—which has historically referred to defense articles, items controlled for national security purposes, nuclear equipment and certain agents and toxins—has been expanded in the new law to include certain "emerging and foundational technologies" that are to be defined pursuant to procedures established under the new Export Control Reform Act also enacted on August 13.

Exception for Certain Investment Funds – Exempted from the definition of "other investments" are investments by investment funds having a limited partner who is a foreign person and who participates on the fund's advisory board or committee, provided the fund is managed exclusively by a general partner who is not a foreign person and:

  1. Neither the advisory board nor the foreign limited partner controls investment decisions or controls decisions regarding portfolio companies
  2. The foreign limited partner does not control the dismissal, selection or compensation of the general partner, and
  3. The foreign limited partner does not have access to material nonpublic technical information in such capacity

Real Estate Transactions – With the exception of a "single housing unit" and real estate transactions in urbanized areas, the purchase or lease by, or a concession to, a foreign person of private or public real estate that is located in the U.S. and satisfies one or more of the following criteria will be subject to CFIUS jurisdiction:

  1. It is, is located in, or is part of an air or maritime port
  2. It is in close proximity to a U.S. military installation or another sensitive U.S. Government facility or property
  3. It could reasonably provide the foreign person the ability to collect intelligence on activities being conducted at such an installation, facility, or property
  4. Or it could otherwise expose national security activities at such an installation, facility, or property to the risk of foreign surveillance

Not all Investors and/or Countries Covered – The revised law requires CFIUS to develop regulations that further define "foreign person" for the purposes of these two additional types of transactions to limit their applicability to only certain foreign persons. Such regulations must take into account "how a foreign person is connected to a foreign country or foreign government, and whether the connection may affect the national security of the United States," and so these additional categories may ultimately only be applicable to foreign persons connected to certain foreign governments. Unfortunately for companies in most technology industries, though, transactions involving most China-based investors will almost certainly be covered.

New Process Improvements, New Burdens and New Costs

FIRRMA establishes a number of changes to the CFIUS process aimed at encouraging more filings while potentially reducing the burdens and delays associated with the current process, albeit coupled with a new filing fee requirement. These changes will need to be factored into parties' analyses of whether and how to file, as well as the estimated cost and time associated with each filing.

Voluntary Declarations – The parties to a transaction within CFIUS's jurisdiction will soon have the option to submit a short-form "declaration" in lieu of the traditional full notice. The specific contents of the declaration are yet to be determined, but it will be no longer than five pages. CFIUS will have 30 days to respond to a filed declaration by:

  1. Closing the review
  2. Initiating a unilateral review
  3. Requesting that the parties file a full notice or
  4. Informing the parties that it is not able to complete its review on the basis of the declaration and that the parties may file a full notice to seek written notification that CFIUS has completed its review

For covered transactions that are not likely to raise any national security issues, the declaration process may provide a quicker and lower-cost path for parties to resolve potential CFIUS-related risks.

Mandatory Declarations – For some transactions, though, the new declaration process transforms what is currently a voluntary filing regime into a mandatory one. Specifically, a declaratory filing will be required for transactions that result in the acquisition of a "substantial interest" in certain U.S. businesses—those described in the "other investment" provision—by a foreign person in which a foreign government has, directly or indirectly, a substantial interest. What will constitute a "substantial interest" is yet to be defined, but it will exclude interests that do not meet the "other investment" criteria or that result in holdings of less than a 10 percent voting interest, or that fall within the investment fund exception mentioned above. CFIUS may in the future, however, expand the mandatory declaration requirement to other types of transactions that involve critical technologies. While CFIUS may waive the mandatory declaration for a foreign person that demonstrates its investments are not directed by a foreign government and that has a history of cooperation with CFIUS, it is not clear whether the waiver process will benefit any investors other than frequent filers.

Changes to Review Process Timeline – For the standard full notice that is filed instead of or after the new declaration-style notice, the revised law provides the following:

  • Once a draft notice is submitted, CFIUS must provide comments within 10 business days, provided that the parties stipulate that CFIUS has jurisdiction. Previously, there was no such limitation.
  • CFIUS has an initial 45-day period to conduct a review of a covered transaction; this is up from 30 days under the previous law.
  • If CFIUS decides to commence an investigation, the investigation must be completed before the end of the 45-day period beginning on the date the investigation commences.
  • CFIUS also has the authority to extend an investigation for one additional 15-day period in "extraordinary circumstances," which term will be defined in regulations.

The introduction of a time limit for CFIUS's response to the draft notice is an important change for companies (but only those willing to accept CFIUS jurisdiction over their transaction), as there was previously no limitation to the duration of this period, and in practice it could be months before the parties received a response; however, CFIUS has increased the cumulative length of the review/investigation period "after the clock starts" and provided for an additional extension in extraordinary circumstances, so companies should anticipate a three- to five-month process for preparation of the filing, review and possible investigation.

Introduction of Filing Fee – Finally, the revised law authorizes CFIUS to impose a filing fee for notified transactions, not to exceed the lesser of one percent of the value of the transaction and $300,000; the applicability and amounts of such fees are yet to be determined.

Effective Date

The revised timeline for CFIUS review and investigation described above is effective immediately, but many of the most significant changes, including the expansion of CFIUS's jurisdiction to "other investments" and real estate transactions, and the voluntary and mandatory declaration filing process, will not go into effect until 30 days after publication of the related regulations in the Federal Register (but not later than February 2020). While the drafting and the implementation of the necessary regulations are expected to take some time, the revised law authorizes CFIUS to establish pilot programs to implement portions of the law on 30 days' advance notice of the contents and requirements of such programs.


The CFIUS review process, and the analysis conducted and the strategies adopted related thereto, have been rendered both more critical to the successful completion of a transaction subject to CFIUS jurisdiction and more complex for the parties involved as a result of the enactment of FIRRMA, particularly for technology and life sciences companies. Although certain key defined terms were briefly described above, much of the analysis will turn on the application of these and other defined terms to the facts and circumstances of specific transactions and the parties thereto, and many of the details of the law remain to be spelled out in regulations. Please contact a member of your Fenwick team, or Fenwick lawyers Mark Ostrau or Ashley Walter, to discuss the applicability and implications of FIRRMA for particular transactions or if you have questions regarding FIRRMA not addressed in the brief summary above. Fenwick will also provide additional updates as pilot programs or regulations are proposed.


1 "Material nonpublic technical information" means information that provides knowledge, know-how, or understanding, not available in the public domain, of the design, location, or operation of critical infrastructure; or is not available in the public domain, and is necessary to design, fabricate, develop, test, produce, or manufacture critical technologies, including processes, techniques, or methods. It does not, however, include financial information regarding a company's performance.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Events from this Firm
25 Sep 2018, Conference, California, United States

We're excited to introduce Women's IP Strategy, a 2-day conference that tackles both the IP, legal as well as broader career development obstacles, risks and rewards for women lawyers working in male-dominant industries.

2 Oct 2018, Webinar, California, United States

This CLE webinar will offer suggestions to litigators to help them comply with the new GDPR during e-discovery.

10 Oct 2018, Webinar, California, United States

For the past years, 3D printing has significantly revolutionized the business industry as it provides innovations and improvement to pre-existing processes.

Similar Articles
Relevancy Powered by MondaqAI
Sheppard Mullin Richter & Hampton
In association with
Related Topics
Similar Articles
Relevancy Powered by MondaqAI
Sheppard Mullin Richter & Hampton
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Register for Access and our Free Biweekly Alert for
This service is completely free. Access 250,000 archived articles from 100+ countries and get a personalised email twice a week covering developments (and yes, our lawyers like to think you’ve read our Disclaimer).
Email Address
Company Name
Confirm Password
Mondaq Topics -- Select your Interests
 Law Performance
 Law Practice
 Media & IT
 Real Estate
 Wealth Mgt
Asia Pacific
European Union
Latin America
Middle East
United States
Worldwide Updates
Registration (you must scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions