The National Security and Investment Act 2021 (NSIA) became operational on January 4, 2022, and has since become a regular feature of transactions. Certain transactions in 17 sectors require notification, but the regime can apply to any transaction, so voluntary filings are also made if an acquirer would like absolute certainty that a transaction will not be retrospectively reviewed. The regime is administered by the Investment Security Unit, which has been recently relocated to sit within the responsibility of the Cabinet Office, with the Chancellor of the Duchy of Lancaster and Secretary of State for the Cabinet Office (the Secretary of State) exercising final decision-making powers.

Recent updates

Qualifying transactions require notification if the target carries on specified activities in any one of 17 "sensitive sectors."

Unusually, the NSIA is not a true "foreign" direct investment screening mechanism, as it applies equally to UK and foreign investors alike. Indeed, the first conditional decision issued under the NSIA in July 2022, Epiris/Sepura, imposed conditions on UK-based investor Epiris in the context of its acquisition of the digital communications provider that supplies radio solutions to UK emergency services.

Who files

Mandatory notifications are filed by the investor. Voluntary notifications, however, can be filed by any party, i.e., the investor, the seller or the target itself.

Types of deals reviewed

Very little information about NSIA notifications is published. The very fact that a filing has been made is typically not made public, and only if a transaction is blocked, or subject to conditions will a final order (with minimal detail) be published. Transactions that are cleared are not publicized, and the total number of notifications will only be made public in the annual report covering the NSIA.

During 2022, 14 transactions were the subject of "final orders" either imposing conditions on the transactions or prohibiting the transaction outright.

Prohibitions were issued in five instances. Notably, of the five, four of these prohibitions concerned investors from China/Hong Kong. Two of these prohibitions ordered the unwinding of transactions that had already been concluded before the mandatory filing requirements under the NSIA came into force. This power is a feature of the NSIA, which allows the UK government to "call in" any transaction concluded from Novemeber 12, 2020. This retroactive power to call in a transaction for review ordinarily applies for up to five years from the date of the transaction, although this can be reduced to six months if the Secretary of State becomes aware of the transaction (e.g., as a result of a voluntary notification).

Conditions were imposed on nine transactions. In terms of the sensitive sectors that have been subject to conditional decisions—energy; defense/military and dual-use; satellite and space technology; quantum technology and communications—all feature.

Conditions vary by sector and have included, for example:

• Requirements to implement enhanced security controls to protect sensitive information and technology from unauthorized access
• Requirements that certain key personnel or board members are pre-approved by UK government authorities and
• Restrictions on the sharing of certain target information, including with the investor

Again, Chinese investors feature prominently, with at least four of the conditional decisions imposed on Chinese investors. However, conditions have also been imposed in transactions with UAE, UK and US investors.

Scope of the review

The scope of the review under the NSIA is three-pronged, with the ISU assessing:

• Control risk: i.e., the level of control that will be asserted by the prospective investor. Less control merits less concern from a national security perspective, particularly where an investor is seeking to take a non-controlling stake. A mandatory filing can be triggered with a 25 percent equity or voting stake, so the level of the investment will affect the determination of the control risk
• Target risk: This refers to the extent to which the target is being used, or could be used, in a way that raises a risk to UK national security. This may involve, for example, considerations such as proximity to sensitive sites as well as the specific nature of the target's activities. Ultimately, however, any target falling within the defined sensitive sectors will raise target risk considerations. Where targets fall within multiple sensitive sectors, this risk may be considered enhanced
• Acquirer risk: This entails a review of the acquirer including the ultimate controller. Specifically, the acquirer risk assessment will consider whether the acquirer "has characteristics that suggest there is, or may be, a risk to national security from the acquirer having control of the target." These characteristics include associations with states or organizations that may be considered hostile to the UK, although this concept is undefined. Helpfully, however, previous guidance has made clear that a history of passive or long-term investments may indicate low or no acquirer risk.

Review process timeline

The timeline under the NSIA runs from the date that the notifying party receives confirmation that the notification is accepted as complete. Typically this takes three to four working days (WD) from the submission of the notification.

Once this confirmation is received, the review process is divided into two parts:

• A 30-WD "review period" that applies to all notified transactions and
• A 30-WD "assessment period," which applies to any transactions that are subject to a "call-in notice" indicating that they will be subject to more detailed scrutiny. This can be extended by another 45 WD if required. Any further extensions beyond this time period require the investor's written consent

These timelines are illustrated below. In graphic below, should read: Call-in notice, Review period, Assessment period, Additional period, Mandatory notification, Voluntary notification

How foreign investors can protect themselves

It is, of course, crucial to understand whether or not a transaction requires a mandatory notification. As this analysis is all target-focused, engaging due diligence of prospective targets early on for these purposes is very important.

Thus far, the focus in terms of probing transactions, and imposing conditions, has been on information ring-fencing and securing continuity of supply to critical services in the UK. Therefore, it is important to have a clear narrative in place around the control, information-sharing and intentions that an investor has for a sensitive target in the UK.

In terms of transaction certainty, investors may want to consider judicious use of the voluntary notification option. For example, while mandatory notifications are only required with respect to share sales—asset deals that would otherwise trigger if structured as a share deal—would be a good candidate for voluntary pre-clearance. This also eliminates the prospect of a retrospective call-in after the transaction has closed.

For transactions that are subject to call-in review, it is notable that often there will be limited, if any, engagement with the ISU. The ISU has the power to issue information notices (and attendance notices) but will not necessarily do so. Nonetheless, an investor always has the option to submit further information for the Secretary of State's attention that must be taken into account in his/her decision under the provisions of the NSIA, and selective use of this option can help to allay potential concerns.

It is also important to keep in mind, however, that the vast majority of transactions will be cleared without a "call-in" review.

_{White & Case means the international legal practice comprising White & Case LLP, a New York State registered limited liability partnership, White & Case LLP, a limited liability partnership incorporated under English law and all other affiliated partnerships, companies and entities.}

_{This article is prepared for the general information of interested persons. It is not, and does not attempt to be, comprehensive in nature. Due to the general nature of its content, it should not be regarded as legal advice.}

_{© 2023 White & Case LLP}