Cross-Border Deals: Three Risks That Kill Transactions

CFIUS is an interagency committee authorized under 50 U.S.C. § 4565 that reviews foreign acquisitions of U.S. .usinesses for national security implications and can recommend that the President block or require divestiture of a completed transaction.

A mandatory filing is required when a foreign government-affiliated investor acquires any interest in a TID U.S. .usiness, meaning one that produces, designs, or develops critical technology, operates critical infrastructure, or maintains sensitive personal data of U.S. .itizens. Mandatory filings must be submitted at least 30 days before closing. A transaction that closes without a required filing faces civil penalties up to the full value of the transaction and a potential divestiture order regardless of how much time has passed since closing.

Voluntary filings are available for other transactions that implicate national security and provide safe harbor from retroactive CFIUS review. An attorney who handles CFIUS compliance and FDI compliance matters can determine whether a specific transaction triggers mandatory filing or whether a voluntary notice provides the most efficient path to regulatory certainty.

OFAC sanctions violations that are discovered after closing do not disappear because the deal is done. The acquirer inherits the exposure and must disclose it, remediate it, and in some cases obtain a specific license authorizing the continuation of the activity.

Civil penalties for OFAC sanctions violations reach the greater of $1 million or twice the value of the transaction per violation. Criminal penalties for willful violations reach $1 million and 20 years in federal prison per count. A post-closing discovery that the target had been maintaining a banking relationship with a sanctioned institution, or that a supplier in the target's supply chain was on the SDN list, requires immediate voluntary self-disclosure to OFAC to qualify for reduced penalties under the agency's enforcement guidelines.

Sanctions screening must cover not only the direct counterparties to the transaction but also the target's material suppliers, distributors, banking relationships, and any beneficial owners holding 50 percent or more of any entity in the target's ownership structure, because OFAC's 50 percent rule aggregates ownership to determine sanctions exposure. An attorney who handles OFAC sanctions compliance and export control law matters can conduct the layered screening that standard commercial due diligence does not include.

Export control and sanctions compliance failures inherited through a cross-border acquisition cannot be resolved by returning the target to the seller. The acquirer owns the violation from the date of closing, the disclosure clock starts running from the date of discovery, and the penalty calculation compounds for every day the violation continues unreported. Pre-closing compliance review is far less costly than post-closing remediation, and post-closing remediation is far less costly than an OFAC enforcement action.

International joint ventures fail most often not because the business underperforms but because the governance agreement did not specify how deadlocked decisions get resolved.

When two parties hold equal interests and disagree on a fundamental business decision, a joint venture agreement without a deadlock resolution mechanism produces paralysis. Mechanisms including casting votes for one partner on specified categories of decisions, independent arbitration of specific disputes, and buy-sell provisions that allow one partner to force a transaction at a fixed price each address deadlock differently and carry different control and valuation implications that the parties must evaluate before the agreement is signed.

Exit provisions must also address the regulatory consequences of ownership changes. A change in the foreign partner's identity triggers a new CFIUS analysis in U.S. .oint ventures. A transfer of an interest in an ITAR-controlled venture to a new foreign partner may require a new ITAR license. An attorney who handles international joint venture and foreign direct investment matters can structure governance and exit provisions that account for both the commercial and regulatory implications of ownership changes.

Transfer pricing documentation under BEPS Action 13 must be in place at the time the tax return is filed, not assembled after a tax authority requests it. A cross-border acquisition that integrates the target without updating the group's transfer pricing documentation framework creates an audit signal that tax authorities in multiple jurisdictions identify as a priority review target. The documentation gap is visible from the country-by-country report before the authority even begins examining the substance of the pricing.

A cross-border transaction involves parties, assets, operations, or technology in more than one country and triggers regulatory frameworks that domestic transactions do not. These include CFIUS review for U.S. .ational security implications, export control analysis under the EAR and ITAR for controlled technology transfers, OFAC sanctions screening for counterparty and supply chain exposure, and transfer pricing compliance for post-closing intercompany transactions. Each framework has its own agency, its own filing requirements, and its own penalties, and none of them is part of standard domestic M&A due diligence unless specifically added.

CFIUS is the Committee on Foreign Investment in the United States, authorized under 50 U.S.C. § 4565 to review foreign acquisitions of U.S. businesses for national security implications. A mandatory filing is required when a foreign government-affiliated investor acquires any interest in a TID U.S. business or when a transaction involves critical technology, critical infrastructure, or sensitive personal data. Mandatory filings must be submitted at least 30 days before closing. Transactions that close without a required filing face civil penalties up to the full deal value and potential divestiture orders with no time limit on when CFIUS can initiate review.

Export controls are U.S. .egulations that restrict the transfer of specified goods, software, and technology to foreign countries, foreign nationals, and certain end users. The EAR covers dual-use items and the ITAR covers defense articles. When a foreign acquirer gains access to controlled technology through an acquisition, or when foreign employees of the acquired company access controlled technology after closing, those accesses may constitute deemed exports requiring prior government authorization. Violations carry criminal penalties up to $1 million per violation under the EAR and mandatory debarment from government contracting under the ITAR.

OFAC's 50 percent rule provides that any entity owned 50 percent or more in the aggregate by one or more sanctioned persons is itself considered sanctioned, regardless of whether that entity appears on the SDN list by name. Sanctions screening must therefore trace the ownership structure of all material counterparties, suppliers, and investors through each layer of ownership to identify whether any sanctioned person holds the requisite aggregate interest. A target company with a complex ownership structure that includes passive investors in sanctioned jurisdictions requires multi-layer ownership screening before the sanctions risk can be accurately assessed.

Transfer pricing refers to the prices charged in transactions between related companies in different countries, including sales of goods, services, royalties, and loans. IRC § 482 requires these prices to reflect what unrelated parties would charge. When a tax authority determines the prices were not arm's length, it reallocates income between entities, generating additional tax without a corresponding deduction. Transfer pricing documentation must be maintained contemporaneously, meaning the acquirer must integrate the target into its transfer pricing framework at closing, not years later when a tax authority begins an audit.

A change in the identity of a foreign partner in a U.S. .oint venture may trigger a new CFIUS filing if the incoming partner's nationality, government affiliation, or ownership structure creates a national security concern that was not present with the original partner. A transfer of an interest in a joint venture that holds ITAR-controlled technology to a new foreign person or entity requires a new ITAR license or license exemption determination. An attorney who handles ITAR and EAR advisory and cross-border transaction matters can assess whether a specific ownership change triggers new regulatory filings before the transfer is completed.