# Provisions Pertaining to Certain Investments in the United States by Foreign Persons

> Briefs, arguments, decisions, and more.

URL: https://www.frixlaw.com/law-library/documents/fr%3A2019-20099

## Record

- **Collection:** Federal Register
- **Document type:** Proposed Rule
- **Published:** September 24, 2019
- **Citation:** 84 FR 50174

## Text

DEPARTMENT OF THE TREASURY
Office of Investment Security
31 CFR Part 800
RIN 1505-AC64
Provisions Pertaining to Certain Investments in the United States by Foreign Persons

AGENCY:

Office of Investment Security, Department of the Treasury

ACTION:

Proposed rule.

SUMMARY:

This proposed rule would replace the current regulations that implement section 721 of the Defense Production Act of 1950, as amended by the Foreign Investment Risk Review Modernization Act of 2018 (FIRRMA). While this proposed rule retains many provisions of the existing regulations, a number of substantive changes are proposed, primarily to implement FIRRMA.

DATES:

Written comments must be received by October 24, 2019.

The Department of the Treasury is considering holding during the comment period a teleconference regarding the proposed rule for members of the public. Information about any public teleconference, including the date, time, and how to attend, will be published on the Department of the Treasury website at
https://home.treasury.gov/policy-issues/international/the-committee-on-foreign-investment-in-the-united-states-cfius.

ADDRESSES:

Written comments on this proposed rule may be submitted through one of two methods:

•
Electronic Submission:
Comments may be submitted electronically through the Federal government eRulemaking portal at
https://www.regulations.gov.
Electronic submission of comments allows the commenter maximum time to prepare and submit a comment, ensures timely receipt, and enables the Department of the Treasury to make the comments available to the public. Please note that comments submitted through
https://www.regulations.gov
will be public, and can be viewed by members of the public.

•
Mail:
Send to U.S. Department of the Treasury, Attention: Thomas Feddo, Deputy Assistant Secretary for Investment Security, 1500 Pennsylvania Avenue NW, Washington, DC 20220.

In general, the Department of the Treasury will post all comments to
https://www.regulations.gov
without change, including any business or personal information provided, such as names, addresses, email addresses, or telephone numbers. All comments received, including attachments and other supporting material, will be part of the public record and subject to public disclosure. You should only submit information that you wish to make publicly available.

FOR FURTHER INFORMATION CONTACT:

For questions about this proposed rule, contact: Laura Black, Director of Investment Security Policy and International Relations; Meena R. Sharma, Deputy Director of Investment Security Policy and International Relations; David Shogren, Senior Policy Advisor; or Alexander Sevald, Senior Policy Advisor, at U.S. Department of the Treasury, 1500 Pennsylvania Avenue NW, Washington, DC 20220; telephone: (202) 622-3425; email:
CFIUS.FIRRMA@treasury.gov.

SUPPLEMENTARY INFORMATION:

I. Background

A. The Statute

The Foreign Investment Risk Review Modernization Act of 2018 (FIRRMA), Subtitle A of Title XVII of Public Law 115-232, 132 Stat. 2173, which amends section 721 (section 721) of the Defense Production Act of 1950, as amended (DPA), requires the issuance of regulations implementing its provisions. In Executive Order 13456, 73 FR 4677 (Jan. 23, 2008), the President directs the Secretary of the Treasury to issue regulations implementing section 721. This proposed rule is being issued pursuant to that authority.

FIRRMA was passed by Congress as H.R. 5515 and was enacted on August 13, 2018. Prior to the enactment of FIRRMA, section 721 authorized the President, acting through the Committee on Foreign Investment in the United States (CFIUS or the Committee), to review mergers, acquisitions, and takeovers by or with any foreign person which could result in foreign control of any person engaged in interstate commerce in the United States, to determine the effects of such transactions on the national security of the United States.

FIRRMA maintains the Committee's jurisdiction over any transaction which could result in foreign control of any U.S. business, and broadens the authorities of the President and CFIUS under section 721 to address national security concerns arising from certain investments and real estate transactions. Additionally, FIRRMA modernizes CFIUS's processes to better enable timely and effective reviews of transactions falling under its jurisdiction (which FIRRMA describes as “covered transactions”). In enacting FIRRMA, Congress acknowledged the important role of foreign investment in the U.S. economy and reiterated its support of the United States' open investment policy, consistent with the protection of national security. A brief summary of key provisions of FIRRMA, as relevant for this rulemaking, follows.

FIRRMA expands and clarifies the jurisdiction of the Committee by explicitly adding four types of transactions as covered transactions in the DPA: (1) The purchase or lease by, or concession to, a foreign person of certain real estate in the United States; (2) non-controlling “other investments” that afford a foreign person an equity interest in and specified access to information in the possession of, rights in, or involvement in the decisionmaking of certain U.S. businesses involved in certain critical technologies, critical infrastructure, or sensitive personal data; (3) any change in a foreign person's rights if such change could result in foreign control of a U.S. business or an other investment in certain U.S. businesses; and (4) any other transaction, transfer, agreement, or arrangement, the structure of which is designed or intended to evade or circumvent the application of section 721. With respect to the Committee's expanded jurisdiction over certain real estate transactions and other investments, FIRRMA instructs the Committee to specify criteria to limit the application of that expansion of jurisdiction to certain categories of foreign persons. The proposed rule addresses all of these types of covered transactions except for real estate transactions, which are the subject of a separate and concurrent rulemaking.

In addition to expanding the Committee's jurisdiction, FIRRMA prescribes certain process changes. FIRRMA allows parties to submit an abbreviated filing for any covered transaction through a declaration, as an alternative to CFIUS's traditional voluntary notice, both of which are discussed below. Declarations will allow parties to submit basic information regarding a transaction in an abbreviated form that should generally not exceed five pages in length. FIRRMA also sets forth an abbreviated timeframe for the Committee to respond to submitted declarations.

FIRRMA introduces a mandatory declaration requirement in certain circumstances. Specifically, FIRRMA creates a mandatory declaration requirement for certain covered transactions where a foreign government has a substantial interest. Additionally, FIRRMA authorizes CFIUS to mandate

through regulations the submitting of a declaration for covered transactions involving certain U.S. businesses that produce, design, test, manufacture, fabricate, or develop one or more critical technologies. In both cases, parties have the option of filing a notice rather than submitting a declaration if they so choose.

FIRRMA also codifies certain processes related to the Committee's authority to identify non-notified and non-declared transactions.

FIRRMA permits a party to a transaction to stipulate that a transaction is a covered transaction and, as relevant, a foreign government-controlled transaction. A party can make a stipulation in either a notice or a declaration. If a party makes a stipulation in a notice, CFIUS must provide comments on or accept the notice no later than 10 business days after the date of the filing.

Additionally, FIRRMA extends the timing of the review period for transactions filed as notices from 30 days to 45 days and allows the Secretary of the Treasury to grant one 15-day extension of the 45-day investigation period in “extraordinary circumstances.” These provisions were made effective in a rulemaking on October 11, 2018. 83 FR 51316. FIRRMA establishes a 30-day review period for transactions submitted as declarations. The notice and declarations processes are discussed in further detail below.

B. Effective Date of Certain Provisions

Congress divided FIRRMA's provisions into two categories: Those effective immediately and those that become effective no later than February 13, 2020.

Specifically, section 1727(a) of FIRRMA lists the provisions that became effective immediately upon enactment of the statute. A number of the immediately effective provisions required revisions to the CFIUS regulations existing at that time at part 800 of title 31 of the Code of Federal Regulations. On October 11, 2018, the Department of the Treasury published an interim rule implementing the immediately effective provisions of, and making updates consistent with, FIRRMA. 83 FR 51316. That interim rule was intended to provide clarity regarding the processes and procedures of the Committee pending the full implementation of FIRRMA. The interim rule provided for a public comment period of 30 days. One comment was received and is discussed below.

Section 1727(b) of FIRRMA delayed the effectiveness of any provision of FIRRMA not specified in section 1727(a) until the earlier of: (1) The date that is 18 months after the date of enactment of FIRRMA (
i.e.,
February 13, 2020); or (2) the date that is 30 days after publication in the
Federal Register
of a determination by the chairperson of the Committee that the regulations, organizational structure, personnel, and other resources necessary to administer the new provisions are in place. The proposed regulations in this notice are intended to fully implement the provisions of FIRRMA, with the exception of (1) CFIUS's new jurisdiction over certain real estate transactions, (2) CFIUS's new authority to impose filing fees, and (3) CFIUS's authority to mandate declarations for certain transactions involving critical technologies, each of which is the subject of a separate rulemaking, as discussed below.

Notwithstanding section 1727(b), section 1727(c) of FIRRMA authorizes CFIUS to conduct one or more pilot programs to implement any authority provided pursuant to any provision of, or amendment made by, FIRRMA that did not take effect immediately upon enactment. On October 11, 2018, the Department of the Treasury published an interim rule setting forth the scope of, and procedures for, a pilot program to review certain transactions involving foreign persons and critical technologies (Pilot Program Interim Rule). 83 FR 51322. That Pilot Program Interim Rule, which went into effect on November 10, 2018, established mandatory declarations for certain transactions involving investments by foreign persons in certain U.S. businesses that produce, design, test, manufacture, fabricate, or develop one or more critical technologies. The Pilot Program Interim Rule provided for a public comment period of 30 days, and a number of comments were received. As discussed below, the Committee is still considering those comments and the scope of mandatory declarations for covered transactions involving critical technologies. The Department of the Treasury expects to address in the final rule the comments previously received on the Pilot Program Interim Rule and any new comments provided in response to this proposed rule.

C. Structure of FIRRMA Rulemaking and This Proposed Rule

Consistent with CFIUS processes generally, the proposed rule reflects extensive consultation with CFIUS member agencies, as well as other relevant agencies. The proposed rule retains many of the basic features of the existing regulations, while implementing the changes that FIRRMA made to CFIUS's jurisdiction and process.

Given the number of revisions, the proposed rule amends and restates part 800 in its entirety. Although the new part 800 is being restated here in full, many of the provisions of the prior part 800 are not being materially modified. The Committee will consider all comments provided to the proposed rule, but is particularly interested in receiving comments relating to the new provisions and revisions being proposed here and outlined below, rather than comments relating to the text of part 800 that has not been changed.

In updating part 800 to incorporate CFIUS's new jurisdiction over non-controlling other investments (which this rule describes as “covered investments”), certain conforming edits were made to existing provisions. For example, the coverage section in subpart C of the proposed rule on “covered control transactions” is based on the “covered transactions” section in the existing part 800 regulations and provides examples of the different bases of jurisdiction over control transactions and covered investments. In that respect, there is also now a covered investment section within the coverage subpart for the new jurisdiction. Finally, the proposed rule incorporates the changes made to part 800 in the interim rule published in October 2018, and updates certain other provisions.

This proposed rule does not implement the authority FIRRMA provided to the Committee to review the purchase or lease by, or concession to, a foreign person of certain real estate in the United States. A concurrent proposed rule implements such authority under a separate part 802 within title 31 of the CFR. The Department of the Treasury determined that the technical and procedural aspects of CFIUS's review of transactions involving real estate are sufficiently distinct from those related to control transactions and covered investments to warrant separate rulemaking.

Parties should be aware that certain transactions that are not covered transactions under this proposed rule could potentially be covered real estate transactions under the proposed part 802 real estate regulations.

FIRRMA authorizes the Committee to assess and collect fees with respect to covered transactions for which a written notice is filed, and the Committee is considering how to implement this authority. The proposed rule also does not address filing fees. The Department of the Treasury will publish a separate

proposed rule regarding fees at a later date.

The proposed rule does not modify the regulations currently at 31 CFR part 801, which sets forth the Pilot Program Interim Rule. CFIUS continues to evaluate the Pilot Program Interim Rule, and the Department of the Treasury welcomes comments on the retention of the mandatory declaration aspect of the Pilot Program Interim Rule for certain transactions involving critical technologies. The Department of the Treasury received comments regarding the Pilot Program Interim Rule from a variety of commenters and expects to address these comments in the final rule associated with this proposed rule.

The proposed rule seeks to provide clarity to the business and investment communities with respect to the types of U.S. businesses that are covered under FIRRMA's other investment authority. Given the level of specificity provided in certain provisions of the proposed rule, the pace of technological development, the evolving use of data, and the evolving national security landscape more generally, the Department of the Treasury anticipates that it will periodically review, and as necessary, make changes to the regulations, consistent with applicable law.

II. Discussion of Proposed Rule

A. Subpart A—General

The following discussion describes several key changes to subpart A.

Section 800.102—Risk-based analysis.
FIRRMA requires that any determination of the Committee to suspend a covered transaction, to refer a covered transaction to the President, or to negotiate, enter into or impose, or enforce any agreement or condition with respect to a covered transaction, be based on a risk-based analysis, conducted by the Committee, of the effects on the national security of the United States of the covered transaction, which must include an assessment of the threat, vulnerabilities, and consequences to national security related to the transaction. The proposed rule includes definitions of the terms “threat,” “vulnerabilities,” and “consequences to national security” used in risk-based analyses undertaken by the Committee.

Section 800.104—Applicability rule.
The proposed rule clarifies the existing applicability rule. The proposed rule also removes the provision previously found at § 800.103(b)(4) that established applicability to a transaction based upon a Committee determination that a commitment had been made.

B. Subpart B—Definitions

Several key changes to the existing part 800 definitions and several key new definitions that are broadly applicable to both control transactions and covered investments are discussed immediately below. Certain new definitions that are applicable to specific substantive areas regarding covered investments are discussed in the applicable subsections below.

Section 800.203—Business day.
The proposed rule modifies the definition for “business day” to exclude days where there U.S. Office of Personnel Management has announced the closure of Federal offices in the Washington, DC area. The proposed rule also addresses the impact on certain timing requirements where a submission is received after 5 p.m. (Eastern Time).

Section 800.206—Completion date.
The proposed rule includes a definition for “completion date.” The proposed rule clarifies that, in the event that a covered transaction will be effectuated through multiple or staged closings, the completion date is the earliest date on which any transfer of interest or change in rights that constitutes a covered transaction occurs.

Section 800.207—Contingent equity interest.
FIRRMA uses the term “contingent equity interest” in the definition of investment. The proposed rule eliminates the term “convertible voting instrument” in the existing part 800 in light of the new definition of “contingent equity interest.” The proposed rule also updates the references in the timing rule at § 800.308.

Section 800.214—Critical infrastructure.
The proposed rule revises the definition for “critical infrastructure” to conform to the language in FIRRMA. As discussed further below, however, for the purposes of an other investment, FIRRMA requires CFIUS to specify a subset of critical infrastructure.

Section 800.252—U.S. business.
The proposed rule revises the definition for “U.S. business” to conform to the definition in FIRRMA.

C. Covered Investments

The proposed rule implements CFIUS's authority, provided under FIRRMA, to review an investment by a foreign person in certain types of U.S. businesses that affords the foreign person certain access to information in the possession of, rights in, or involvement in the decisionmaking of certain U.S. businesses but that does not afford the foreign person control over the U.S. business. The proposed rule uses the term “covered investments” for these investments, as defined in § 800.211.

The types of access, rights, or involvement that could give rise to a covered investment are set forth in § 800.211(b). That section implements the definitions in FIRRMA describing transactions that afford the foreign person (1) access to material non-public technical information in the possession of the U.S. business, (2) membership or observer rights on the board of directors (or equivalent body) of the U.S. business, or (3) any involvement in substantive decisionmaking of the U.S. business regarding certain actions related to critical technologies, critical infrastructure, or sensitive personal data. The proposed rule further defines “material non-public technical information” (see § 800.233) and “substantive decisionmaking” (see § 800.245).

The types of businesses in which an investment may constitute a covered investment are those that have certain involvement in critical technologies, critical infrastructure, and sensitive personal data, as further described below and in the proposed rule. These businesses are referred to as “TID U.S. businesses” in the proposed rule (see § 800.248). “TID” is an acronym for Technology, Infrastructure, and Data. FIRRMA, moreover, limits such covered investments to those made in an unaffiliated business. Thus, the proposed rule adds a definition for “unaffiliated TID U.S. business,” which excludes entities in which the foreign person already holds a majority of the voting interest or the right to appoint the majority of the entity's board or equivalent governing body.

Notably, CFIUS retains jurisdiction over any transaction through which any foreign person could acquire control of any U.S. business, regardless of whether the transaction involves critical technology, critical infrastructure, or sensitive personal data.

In connection with the new jurisdiction over covered investments, FIRRMA requires that the Committee prescribe regulations to limit its application to the investments of certain categories of foreign persons. This proposed rule implements this requirement by “excepting” certain foreign persons from the provisions relating to covered investments if the foreign persons meet specified criteria. It also includes clarifications contained in FIRRMA regarding the treatment of certain investments through investment funds and an exception specified in FIRRMA for investments involving air carriers.

1. Covered Investments Involving Critical Technology

FIRRMA expands CFIUS's jurisdiction to include covered investments by a foreign person in an unaffiliated U.S. business that produces, designs, tests, manufactures, fabricates, or develops one or more critical technologies.

Section 800.215—Critical technologies.
The proposed rule defines “critical technologies” consistent with the language in FIRRMA. Subpart (f) of FIRRMA's definition of critical technology, as set out in this proposed rule, captures emerging and foundational technologies controlled pursuant to section 1758 of the Export Control Reform Act of 2018 (ECRA), Subtitle B of Title XVII of Public Law 115-232. Pursuant to ECRA, the Bureau of Industry and Security within the Department of Commerce identifies and places export controls on specified emerging and foundational technologies. As technologies become controlled pursuant to rulemaking under ECRA, they will automatically be covered under the definition of “critical technologies” under part 800.

As noted above, CFIUS will continue to have authority to review any transaction that could result in control by a foreign person of any U.S. business, including a U.S. business with technology, critical or otherwise, and export controlled or otherwise.

2. Covered Investments Involving Critical Infrastructure

FIRRMA expands CFIUS's jurisdiction to include covered investments by a foreign person in an unaffiliated U.S. business that “owns, operates, manufactures, supplies, or services critical infrastructure.” FIRRMA requires that the regulations implementing this provision limit the application of covered investment jurisdiction to a subset of critical infrastructure that must be specified in the regulations. Moreover, FIRRMA specifically provides that any definition of “critical infrastructure” established under any provision of law other than section 721 is not determinative for the purposes of section 721, including this proposed rule. Similarly, the subset of critical infrastructure identified in appendix A is not intended to alter the definition of “critical infrastructure” as used in any other regulatory regime or context.

Section 800.212—Covered investment critical infrastructure.
The proposed rule identifies the subset of critical infrastructure that is relevant for the Committee's jurisdiction over covered investments through a list of specific types of infrastructure in appendix A. As noted above, the Department of the Treasury anticipates periodically revising the regulations, potentially including revisions to this list. To distinguish this subset of critical infrastructure from critical infrastructure more broadly, this proposed rule creates a new term, “covered investment critical infrastructure” (see § 800.212).

As noted above, FIRRMA describes, subject to the regulations implementing this provision, a U.S. business that falls under other investment jurisdiction with respect to critical infrastructure as one that “owns, operates, manufactures, supplies, or services” the subset of critical infrastructure. This proposed rule refers to these activities as “functions.” In furtherance of FIRRMA's requirement to limit the application of other investment jurisdiction regarding critical infrastructure, the proposed rule sets forth which functions apply to each enumerated specific type of covered investment critical infrastructure. The proposed rule therefore links the relevant functions with the enumerated specific types of covered investment critical infrastructure in appendix A. Column 1 of appendix A lists the covered investment critical infrastructure and Column 2 lists the relevant functions that apply to enumerated specific types of covered investment critical infrastructure.

Appendix A is integral to the proposed rule and key to determining whether a U.S. business is a TID U.S. business for purposes of critical infrastructure covered investment jurisdiction. Only a U.S. business that performs one of the specified functions listed in Column 2 of appendix A with respect to the enumerated specific type of covered investment infrastructure listed in Column 1 is a TID U.S. business for purposes of critical infrastructure covered investments. The proposed rule also clarifies the meaning of certain of the functions listed in FIRRMA.

Section 800.235—Own.
The proposed rule defines “own” solely for the purpose of Column 2 of appendix A, which in turn determines which owners of covered investment critical infrastructure are TID U.S. businesses for purposes of covered investment jurisdiction. The term limits owners to only those of U.S. businesses that directly possess the systems or assets constituting the applicable covered investment critical infrastructure.

Sections 800.232—Manufacture; 800.242—Service; and 800.246—Supply.
The proposed rule also defines “manufacture,” “service,” and “supply.” It does not define “operate” given the commonly understood meaning of that term.

Importantly, appendix A only applies to the subset of critical infrastructure subject to covered investment jurisdiction, and is not applicable in any other context. Appendix A implements FIRRMA's direction to identify a subset of critical infrastructure for purposes of covered investments and therefore does not modify the definition of critical infrastructure as it applies to CFIUS's jurisdiction more broadly over control transactions.

As noted above, CFIUS will continue to have authority to review any transaction that could result in control by a foreign person of any U.S. business, regardless of whether the U.S. business involves critical infrastructure as broadly defined by FIRRMA or the narrower subset of covered investment critical infrastructure introduced in this proposed rule.

3. Covered Investments Involving Sensitive Personal Data

FIRRMA expands CFIUS's jurisdiction to include covered investments by a foreign person in an unaffiliated U.S. business that maintains or collects sensitive personal data of U.S. citizens that “may be exploited in a manner that threatens to harm national security.”

Section 800.241—Sensitive personal data.
To implement this provision, the proposed rule sets forth a detailed definition for “sensitive personal data.” The Committee anticipates periodically revising the regulations, potentially including revisions to this definition.

Given that most companies collect some type of data on individuals, the proposed rule protects national security while attempting to minimize any chilling effect on beneficial foreign investment by focusing on the sensitivity of the data itself, as well as the sensitivity of the population about whom the data is maintained or collected. In particular, the proposed rule identifies specific categories of data that constitute sensitive personal data only if the U.S. business (a) targets or tailors its products or services to sensitive U.S. Government personnel or contractors, (b) maintains or collects such data on greater than one million individuals, or (c) has a demonstrated business objective to maintain or collect such data on greater than one million individuals and such data is an integrated part of the U.S. business's primary products or services. The proposed definition also includes all genetic information and generally carves

out data pertaining to a U.S. business's own employees.

The proposed rule defines “targets or tailors” (see § 800.247) and provides examples of businesses that meet the definition. By focusing on U.S. businesses that target or tailor their products or services to these potentially sensitive populations, the Committee expects to review transactions involving U.S. businesses that are more likely to have sensitive personal data concerning such individuals. Even if a U.S. business does not target or tailor its products or services to such individuals, however, if the U.S. business maintains or collects data on a large number of individuals, it is more likely to capture data on sensitive populations. The proposed threshold of one million accounts for this possibility. Similarly, if a U.S. business is a data-driven company that plans to maintain or collect sensitive personal data on a large number of individuals in the future, as demonstrated by the U.S. business's statements or actions, it may capture data on sensitive populations.

Section 800.241(a)(1)(ii)(A)
—This section describes certain financial data that could be used to determine if an individual is experiencing financial hardship. The types of data the proposed rule seeks to capture include bank account statements or detailed financial information included in an application for a home mortgage or credit card. Information regarding ordinary consumer transactions, such as a record of a credit card purchase at a retail establishment, would not generally fall into this category.

Section 800.241(a)(1)(ii)(B)
—This section describes information that is collected by consumer reporting agencies, such as an individual's credit score, or summaries of debts and payment histories. Many companies periodically receive information about an individual's credit from a consumer reporting agency, and § 800.241(a)(1)(ii)(B) generally excludes these companies from its scope if they receive a limited set of the information, such as a credit score, for the legitimate purposes described in the Fair Credit Reporting Act.

Section 800.241(a)(1)(ii)(C)
—This section describes data contained in certain types of personal insurance applications, many of which contain detailed personal information related to financial status and health.

Section 800.241(a)(1)(ii)(D)
—This section describes health-related data.

Section 800.241(a)(1)(ii)(E)
—This section describes non-public electronic communications, including email, which may include all manner of sensitive information, but only if the U.S. business is providing communications platforms used by third parties. For example, email communications between a U.S. business and its own customers would not be covered. Rather, this section describes the situation where a U.S. business offers email, chat, or messaging services, a primary purpose of which is to allow third parties to communicate with each other.

Section 800.241(a)(1)(ii)(F)
—This section describes geolocation data that is often collected by mobile mapping applications, GPS services, or wireless communications providers.

Section 800.241(a)(1)(ii)(G)
—This section describes data that is generated by companies that provide biometric identification services.

Section 800.241(a)(1)(ii)(H)-(J)
—These sections describes certain data that is held by companies, typically government contractors, that issue official government identification cards or process personnel security clearances.

Section 800.227—Identifiable data; § 800.239—Personal identifier.
The proposed rule also includes a definition of “identifiable data.” In some cases, a U.S. business may maintain or collect the data described in § 800.241(a)(1)(ii)(A)-(J), but it is not possible to attribute such data to any specific individual. For example, a U.S. business may store health records on its servers, but those records are encrypted such that only a third party in possession of the encryption key can read the data. The U.S. business in these circumstances would not be maintaining or collecting sensitive personal data. The proposed rule makes clear, however, that identifiable data is not limited to data that includes an individual's name or other obvious identifier, but rather includes any personal identifier, as defined in § 800.239.

Finally, § 800.241(a)(2) describes genetic information, as defined pursuant to the regulations implementing HIPAA. Unlike the categories described in sections 800.241(a)(1)(ii)(A)-(J), the requirement that the U.S. business target or tailor to certain U.S. Government personnel or contractors, maintain or collect data on greater than one million individuals, or have a demonstrated business objective to maintain or collect such data on greater than one million individuals if such data is an integrated part of the U.S. business's primary products or services as well as the requirement that the data be identifiable, does not apply to genetic information.

As noted above, CFIUS will continue to have authority to review any transaction that could result in control by a foreign person of any U.S. business, regardless of whether the U.S. business maintains or collects sensitive personal data.

4. Country Specification for Covered Investments

FIRRMA requires CFIUS to specify criteria to limit the application of FIRRMA's expanded jurisdiction over other investments to certain categories of foreign persons. The proposed rule addresses FIRRMA's requirement through three new defined terms, “excepted investor,” “excepted foreign state,” and “minimum excepted ownership,” which operate together to exclude from CFIUS's jurisdiction covered investments by certain foreign persons who meet certain criteria establishing sufficiently close ties to certain foreign states. Sections 800.220, 800.219, and 800.234 define excepted investor, excepted foreign state, and minimum excepted ownership, respectively.

Section 800.220—Excepted investor.
The proposed rule sets forth a narrow definition of excepted investor in the interest of protecting national security, in light of increasingly complex ownership structures, and to prevent foreign persons from circumventing CFIUS's jurisdiction. Thus, the criteria specified in § 800.220 require that a foreign person have a substantial connection (
e.g.,
nationality of ultimate beneficial owners and place of incorporation) to one or more particular foreign states in order to be deemed an excepted investor. Note that foreign persons who have violated, or whose parents or subsidiaries have violated, certain U.S. laws, executive orders, regulations, orders, directives, or licenses, or who have submitted a material misstatement or omission in a CFIUS notice or declaration or violated a material provision of a mitigation agreement, among other things, will not be considered excepted investors. Additionally, note that a foreign person who is an excepted investor at the time of the transaction, but, who, for up to three years after the completion date, fails to meet to certain criteria, is deemed not to be an excepted investor and the transaction is thus subject to CFIUS jurisdiction as a covered investment. Any member of the Committee may file an agency notice of the transaction for up to one year (and the Chairperson of the Committee for up to three years in extraordinary circumstances).

Section 800.219—Excepted foreign state.
The rule proposes that the excepted foreign state definition operate as a two-factor conjunctive test. First, the foreign state must be included in a defined group of eligible foreign states, which will be separately published on the Department of the Treasury website. As this is a new concept with potentially significant implications for the national security of the United States, CFIUS initially intends to designate a limited number of eligible foreign states. CFIUS plans to review this group in the future and potentially expand the number of eligible foreign states.

Second, in furtherance of CFIUS's efforts to encourage partner countries to implement robust processes to review foreign investment in their countries and to increase cooperation with the United States, the Secretary of the Treasury, with the agreement of a super-majority of Committee member agencies, will also make a determination, as described in subpart J, for each eligible foreign state as to whether such foreign state has established and is effectively utilizing a robust process to assess foreign investments for national security risks and to facilitate coordination with the United States on matters relating to investment security. In making these determinations, CFIUS will consider factors that will be made available on the Department of the Treasury website. The Committee is considering delaying the effectiveness of this requirement in order to provide the eligible foreign states time to enhance their foreign investment review processes and bilateral cooperation. Any such determinations identifying a foreign state as an excepted foreign state will be published in the
Federal Register
and incorporated into the Committee's list of excepted foreign states, which will be made available on the Department of the Treasury website.

D. Subpart C—Coverage

Subpart C of the proposed rule includes provisions that describe with particularity transactions that are, or are not, covered control transactions (§ 800.301-302). Similar provisions address covered investments (§ 800.303-304). The proposed rule contains numerous examples in this subpart to clarify the coverage of certain transactions.

Section 800.305—Incremental acquisitions.
Under the existing § 800.204(e), “[a]ny transaction in which a foreign person acquires an additional interest in a U.S. business that was previously the subject of a covered transaction for which the Committee concluded all action under section 721 shall not be deemed to be a transaction that could result in foreign control over that U.S. business (
i.e.,
it is not a covered transaction).” This provision was introduced when the scope of CFIUS's jurisdiction included only transactions that could result in foreign control of a U.S. business and when the only means to file was by filing a written notice. This proposed rule moves the provision to Subpart C and clarifies that a transaction shall not be deemed to be a covered transaction if a foreign person acquires an additional interest in a U.S. business over which the same foreign person or any of its direct or indirect wholly-owned subsidiaries previously acquired direct control in the U.S. business in a covered control transaction for which the Committee concluded all action under Section 721 on the basis of a notice. It further clarifies that this provision does not apply to incremental acquisitions in a U.S. business by a foreign person that had not previously acquired control of the U.S. business nor to a transaction for which the Committee had concluded all action under section 721 on the basis of a declaration. In other words, the incremental acquisition rule does not apply where the initial transaction was submitted only as declaration or was a covered investment.

Section 800.307—Specific clarifications for investment funds.
The proposed rule implements provisions in FIRRMA relating to investment funds. Specifically, it clarifies that, in the context of an indirect investment by a foreign person in an unaffiliated TID U.S. business through an investment fund that affords the foreign person (or a designee of the foreign person) membership as a limited partner or equivalent on an advisory board or committee of the fund, where all of the criteria in § 800.307 are satisfied, a limited partner's membership on the investment fund's advisory board or committee does not in and of itself render the foreign person's indirect investment in an unaffiliated TID U.S. business a covered investment.

E. Subpart D—Declarations

FIRRMA introduces an abbreviated filing process through the submission of a declaration, which allows parties to submit basic information regarding a transaction to the Committee. A declaration may be submitted for any covered transaction and, in certain cases, is mandated. Parties may choose to file a notice in lieu of declaration to satisfy a mandatory declaration requirement.

Declarations differ from notices in three key ways. First, declarations are shorter in length, generally not exceeding five pages. As part of the Pilot Program Interim Rule, CFIUS developed a standard fillable declaration form for parties to use when submitting a transaction for review. To facilitate the submission of declarations under the proposed rule, CFIUS intends to maintain a standard fillable form, making certain modifications to the form for use with respect to different types of transactions. Parties will be able to use the form to submit voluntary and mandatory declarations to the Committee.

Second, the timeline for the Committee to take action on declarations is shorter than for notices. FIRRMA provides CFIUS up to 30 days to respond to a declaration. This differs from the timeline for notices, which is 45 days for a review and an additional 45 days for an investigation, with a possibility of a 15-day extension in “extraordinary circumstances.”

Third, FIRRMA provides CFIUS with several potential responses to a declaration, and CFIUS need not make a final determination with respect to action under section 721 on the basis of a declaration.

1. Mandatory Declarations

Section 800.401—Mandatory declarations.
The proposed rule implements FIRRMA's requirement for mandatory declarations for certain transactions in which a foreign person obtains a “substantial interest” in a U.S. business where a foreign government in turn holds a “substantial interest” in the foreign person. The proposed rule defines the term substantial interest with respect to a person's ability to influence the actions of another person in a manner that has the potential, directly or indirectly, to impair the national security of the United States. In most cases, the foreign person best placed to influence a U.S. business—and therefore exploit any vulnerability in a U.S. business—is the foreign person with the closest relationship to the U.S. business. With respect to an investment involving multiple tiers of investing entities, this foreign person is very frequently the one that sits closest to the U.S. business on the post-closing organizational chart. This entity, when compared to other entities higher in the organizational chart, often has a greater ability to interact directly with—and therefore influence—the U.S. business, both from a corporate governance perspective as well as an operational

perspective. The proposed rule therefore establishes in § 800.244(a) the voting interest threshold for substantial interest between a foreign person and U.S. business at a 25 percent voting interest, direct or indirect, and between a foreign government and a foreign person at a 49 percent or greater voting interest, direct or indirect. For purposes of determining the percentage of voting interest held indirectly by one entity in another, the rule establishes that any voting interest of a parent entity in a subsidiary entity will be deemed to be a 100 percent voting interest. The proposed rule also clarifies in § 800.244(b) how the voting interest in a limited partnership is to be calculated. The proposed rule does not provide for a waiver of this requirement.

As discussed above, CFIUS is considering whether to continue the mandatory declaration requirement under the Pilot Program Interim Rule, which requires declarations for covered control transactions and covered investments in certain U.S. businesses with critical technologies involved in one or more of 27 specified industries.

Section 800.401(e)(2).
FIRRMA also provides that, for mandatory declarations, the Committee can require that a declaration be submitted up to 45 days prior to the completion of the transaction. Under the proposed rule, mandatory declarations would need to be submitted to CFIUS at least 30 days in advance of the completion date.

Section 800.401(d).
Where there is a mandatory declaration requirement, parties may choose to submit a written notice at least 30 days prior to the completion date of the transaction instead of a declaration.

2. Voluntary Declarations

Section 800.402—Voluntary declarations.
The proposed rule implements FIRRMA's provision enabling parties to choose to file a declaration with CFIUS instead of a written notice.

3. Procedures and Contents for Declarations

Section 800.403—Procedures for declarations.
The proposed rule outlines the process under which parties submit a declaration. The contents and procedures for submitting mandatory and voluntary declarations are identical. In order to submit a declaration, the parties need to provide the information required by § 800.404, including certifications. The rule does not permit parties to submit a declaration regarding a transaction that is also the subject of a notice without written approval from the Staff Chairperson. Conversely, parties may not file a notice regarding a transaction that is the subject of a declaration until such time as the Committee's assessment of the declaration has been completed (see § 800.501(j)).

Section 800.404—Contents of declarations.
The proposed rule sets forth the information that is required in a declaration, consistent with FIRRMA's requirement that CFIUS establish declarations as “abbreviated notices that would not generally exceed five pages in length.” As part of a declaration, parties may voluntarily stipulate that the transaction is a covered transaction and, if so, whether the transaction is a foreign-government controlled transaction.

Section 800.405—Beginning of 30-day assessment period.
The proposed rule requires that the Committee take action on a declaration within 30 days of the Committee's receipt of the declaration from the Staff Chairperson. One distinction from the provisions regarding declarations in the Pilot Program Interim Rule is that the proposed rule explicitly provides that the Staff Chairperson may invite parties to a declaration to attend a meeting with Committee Staff to discuss and clarify issues pertaining to the transaction that is the subject of the declaration.

Section 800.406—Rejection, disposition, or withdrawal of declarations.
The proposed rule provides that the Committee may reject a declaration if it is incomplete, there is a material change in the transaction that has been notified, information comes to light that contradicts material information provided by the parties in the declaration, or parties to a submitted declaration fail to provide information requested by the Committee within two business days of the request (unless such timeframe is extended by the Staff Chairperson). The proposed rule also establishes procedures for parties to withdraw a declaration, and makes clear that parties may not submit more than one declaration for the same or substantially similar transaction without approval from the Staff Chairperson.

Section 800.407—Committee actions.
The proposed rule implements FIRRMA's mandate that the Committee take one of four actions in response to a declaration: (1) Request that the parties file a notice; (2) inform the parties that CFIUS cannot complete action under section 721 on the basis of the declaration, and that they may file a notice to seek written notification from the Committee that the Committee has concluded all action under section 721 with respect to the transaction; (3) initiate a unilateral review of the transaction through an agency notice; or (4) notify the parties that CFIUS has concluded all action under section 721.

F. Subpart E—Notices

The proposed rule does not make significant changes to the procedures and requirements for notices.

Section 800.502(o)—Contents of voluntary notices.
FIRRMA allows parties to “stipulate” that the transaction is a covered transaction and, as relevant, a foreign government-controlled transaction. FIRRMA directs the Committee to provide comments or accept the notice within 10 business days from the submission date of the draft or formal written notice in cases where the transaction parties have stipulated that the transaction is a covered transaction. In addition, stipulating control reduces certain information requirements, and will allow the Committee to more quickly turn to reviewing the substance of the transaction. (See § 800.502(j)(2).) In making a stipulation, parties acknowledge that the Committee and the President are entitled to rely on such stipulation in determining whether the transaction is a covered transaction and/or a foreign government-controlled transaction, and parties making a stipulation waive the right to challenge any such determination. Neither the Committee nor the President is bound by any such stipulation, nor does any such stipulation limit the ability of the Committee or the President to act on any authority provided under section 721, with respect to any covered transaction.

Section 800.502(c)(1)(xi) and (c)(3)(ix)-(xi)—Contents of voluntary notices.
The rule proposes additions to the information requirements to require submission of information necessary to analyze covered investments. A few additional changes to the information requirements have been introduced for clarity and to include information that CFIUS determined was necessary based on experience.

Section 800.503—Beginning of 45-day review period.
FIRRMA changes the timeframe for CFIUS's review of a transaction filed as a notice, extending it from 30 days to 45 days. This change was one of the immediately effective provisions of FIRRMA that was implemented through the interim rule published at 83 FR 51316. The proposed rule, consistent with the interim rule, incorporates that timing change.

G. Subpart G—Finality of Action

FIRRMA maintains that a covered transaction that has been notified to CFIUS as a notice and on which CFIUS has concluded action under section 721

after determining that there are no unresolved national security concerns, qualifies for a “safe harbor,” and extends the same treatment to transactions submitted as a declaration. This means that, unless a party to a transaction submitted false or misleading material information or omitted material information, and subject to compliance with the terms of any mitigation agreement entered into with or conditions imposed by CFIUS, the transaction can proceed without the possibility of subsequent suspension or prohibition under section 721. A covered transaction on which CFIUS has not concluded action does not qualify for the safe harbor, and CFIUS has the authority to initiate review of the transaction on its own, even after the transaction has been completed, which CFIUS may choose to do if it believes the transaction presents national security considerations.

H. Subpart I—Penalties and Damages

The Department of the Treasury amended the penalty provisions of its regulations in the interim rule published at 83 FR 51316, which updated CFIUS's penalties provision consistent with revisions made to section 721 by FIRRMA. The proposed rule adopts the revisions from the interim rule and makes certain other updates to subpart I.

Section 800.901—Penalties and damages.
The proposed rule, consistent with the interim rule, removes the qualifier “intentionally or through gross negligence” with respect to a material misstatement or omission in the context of the imposition of civil penalties. These revisions did not, and do not, apply to material misstatements, omissions, or certifications made prior to the interim rule's effective date (October 11, 2018), or to violations occurring after the implementation of the interim rule of a material provision of a mitigation agreements or material conditions of an order entered into or imposed prior to the implementation of the interim rule.

Section 800.902—Effect of lack of compliance.
The proposed rule, consistent with the interim rule, includes a provision authorizing the Committee to negotiate a remediation plan for lack of compliance with a mitigation agreement or condition entered into or imposed under section 721(l), require filings for future covered transactions for five years, or seek injunctive relief, in addition to other available remedies.

The proposed rule includes certain other modifications to subpart I, including with respect to how penalties are calculated, imposed, and enforced.

III. Public Comments

The Department of the Treasury received one comment to the interim rule. The commenter sought additional information about what circumstances the Committee believes would warrant a 15-day extension of an investigation in order “to protect the national security of the United States.”

Response:
The interim rule provides that where a Committee member requests to extend an investigation, that request must include a description, “with particularity, [of] the extraordinary circumstances that warrant the Chairperson extending the investigation.” 31 CFR 800.506. Accordingly, whether “extraordinary circumstances” exist depends on the specific facts of a particular investigation, and are difficult to generalize. While we understand the commenter's interest in additional information from the Committee, at this time we are not considering altering or expanding on the extraordinary circumstances provisions relating to a 15-day extension of an investigation in part 800.

IV. Rulemaking Requirements

Executive Order 12866

These regulations are not subject to the general requirements of Executive Order 12866, which covers review of regulations by the Office of Information and Regulatory Affairs in the Office of Management and Budget, because they relate to a foreign affairs function of the United States, pursuant to section 3(d)(2) of that order.

Paperwork Reduction Act

The collections of information contained in this notice of proposed rulemaking have been submitted to the Office of Management and Budget for review in accordance with the Paperwork Reduction Act of 1995 (44 U.S.C. 3507(d)) (PRA).

Comments on the collection of information should be sent to the Office of Management and Budget, Attn: Desk Officer for the Department of the Treasury, Office of Information and Regulatory Affairs, Washington, DC 20503, or via email to
OIRA_Submission@omb.eop.gov,
with copies to Thomas Feddo, Deputy Assistant Secretary for Investment Security, U.S. Department of the Treasury, 1500 Pennsylvania Avenue NW, Washington, DC 20220. Comments on the collection of information should be received by November 25, 2019.

In accordance with 5 CFR 1320.8(d)(1), the Department of the Treasury is soliciting comments from members of the public concerning this collection of information to:

(1) Evaluate whether the proposed collection of information is necessary for the proper performance of the functions of the agency, including whether the information will have practical utility;

(2) Evaluate the accuracy of the agency's estimate of the burden of the proposed collection of information;

(3) Enhance the quality, utility, and clarity of the information to be collected; and

(4) Minimize the burden of the collection of information on those who are to respond; including through the use of appropriate automated collection techniques or other forms of information technology.

The burden of the information collections in this proposed rule is estimated as follows:

For Notices

Estimated total annual reporting and/or recordkeeping burden:
26,000 hours.

Estimated average annual burden per respondent:
130 hours.

Estimated number of respondents:
200 per year.

Estimated annual frequency of responses:
Not applicable.

For Declarations

Estimated total annual reporting and/or recordkeeping burden:
11,000 hours.

Estimated average annual burden per respondent:
20 hours.

Estimated number of respondents:
550 per year.

Estimated annual frequency of responses:
Not applicable.

Under the PRA, an agency may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it displays a valid control number assigned by the Office of Management and Budget.

Initial Regulatory Flexibility Analysis

The Regulatory Flexibility Act (5 U.S.C. 601
et seq.
) (RFA) generally requires an agency to prepare a regulatory flexibility analysis unless the agency certifies that the rule will not, once implemented, have a significant economic impact on a substantial number of small entities. The RFA applies whenever an agency is required to publish a general notice of proposed rulemaking under section 553(b) of the Administrative Procedure Act (5 U.S.C. 553) (APA), or any other law. As set forth below, because regulations issued pursuant to the DPA, such as these

regulations, are not subject to the APA, or another law requiring the publication of a general notice of proposed rulemaking, the RFA does not apply.

The proposed rule implements section 721 of the DPA. Section 709(a) of the DPA provides that the regulations issued under it are not subject to the rulemaking requirements of the APA. Section 709(b)(1) instead provides that any regulation issued under the DPA be published in the
Federal Register
and opportunity for public comment be provided for not less than 30 days. Section 709(b)(3) of the DPA also provides that all comments received during the public comment period be considered and the publication of the final regulation contain written responses to such comments. Consistent with the plain text of the DPA, legislative history confirms that Congress intended that regulations under the DPA be exempt from the notice and comment provisions of the APA and instead provided that the agency include a statement that interested parties were consulted in the formulation of the final regulation. See H.R. Conf. Rep. No. 102-1028, at 42 (1992) and H.R. Rep. No. 102-208 pt. 1, at 28 (1991). The limited public participation procedures described in the DPA do not require a general notice of proposed rulemaking as set forth in the RFA. Further, the mechanisms for publication and public participation are sufficiently different to distinguish the DPA procedures from a rule that requires a general notice of proposed rulemaking. In providing the President with expanded authority to suspend or prohibit the acquisition, merger, or takeover of, or certain other investments in, a U.S. business by a foreign person if such a transaction would threaten to impair the national security of the United States, Congress could not have contemplated that regulations implementing such authority would be subject to RFA analysis. For these reasons, the RFA does not apply to these regulations.

Notwithstanding the inapplicability of the RFA, the Department of the Treasury has undertaken an analysis of the proposed rule's potential impact on small businesses in the United States. While the Department of the Treasury believes that the proposed rule likely would not have a “significant economic impact on a substantial number of small entities” (5 U.S.C. 605(b)), the Department of the Treasury does not have complete data at this time to make this determination, and therefore invites the public to comment on its analysis.

As discussed above, the proposed rule expands the jurisdiction of the Committee to include additional types of transactions not previously subject to CFIUS review. Additionally, the Committee will retain its existing jurisdiction over any transaction through which any foreign person could acquire control of any U.S. business. Accordingly, the proposed rule may impact any U.S. business, including a small U.S. business that engages in a covered transaction.

There is no single source for information on the number of small U.S. businesses that receive foreign investment (direct or indirect), including those involved with critical technologies, critical infrastructure, or sensitive personal data, such that they would be directly impacted by this rule. However, the Bureau of Economic Analysis (BEA) within the Department of Commerce collects, on an annual basis, data on new foreign direct investment in the United States through its Survey of New Foreign Direct Investment in the United States (Form BE‐13). While these data are self-reported, and include only direct investments in U.S. businesses in which the foreign person acquires at least 10 percent of the voting shares (and consequently, do not capture investments below 10 percent, which may nevertheless be covered transactions), they nonetheless provide relevant information on a category of U.S. businesses that receive foreign investment, some of which may be covered by the proposed rule.

According to the BEA, in 2018, the most current year for which data is available, foreign persons obtained at least a 10 percent voting share in 832 U.S. businesses. U.S. Bureau of Economic Analysis, “Number of Investments Initiated in 2018, Distribution of Planned Total Expenditures, Size by Type of Investment,”
https://apps.bea.gov/international/xls/Table15-14-15-16-17-18.xls
(last visited September 11, 2019). The BEA only reports the general size of the investment transaction, not the type of the U.S. business involved, nor whether the U.S. business is considered a “small business” by the Small Business Administration (SBA), which defines small businesses based on annual revenue or number of employees. The smallest foreign investment transactions that the BEA reports are those with a dollar value below $50 million. While not all U.S. businesses receiving a foreign investment of less than $50 million are considered “small” for the purposes of the RFA, many might be, and the number of U.S. businesses receiving foreign investments of less than $50 million can serve as a proxy for the number of transactions involving small U.S. businesses that might be subject to CFIUS's jurisdiction.

Of the above mentioned 832 U.S. businesses receiving foreign investment in 2018, 576 were involved in transactions valued at less than $50 million. Although this figure is under inclusive because it does not capture all transactions that could potentially fall under the proposed rule, it also is over inclusive because it is not limited to any particular type of U.S. business. We believe the figure of 576 is the best estimate based on the available data of the number of small U.S. businesses that may be impacted by this rule.

According to the SBA, there are 30.2 million small businesses (defined as “firms employing fewer than 500 employees”) in the United States.
https://www.sba.gov/sites/default/files/advocacy/2018-Small-Business-Profiles-US.pdf.
If approximately 600 small U.S. businesses will be potentially impacted by this rule, then the rule may potentially impact less than one percent of all small U.S. businesses. Accordingly, the Department of the Treasury does not believe the rule will impact a “substantial number of small entities.”

Nonetheless, the proposed rule includes provisions that would reduce the costs to all businesses, including small businesses. For example, the availability of a shorter declaration for covered transactions may result in smaller cost to entities than having to prepare a lengthier notice. Additionally, having a fillable form for declarations may reduce some of the cost for parties.

The Department of the Treasury seeks information and comment on the types and number of small entities potentially impacted by this proposed rule. If necessary, the Department of the Treasury will undertake a final regulatory flexibility analysis in the final rule.

List of Subjects in 31 CFR Part 800

Foreign investments in the United States, Investigations, Investments, Investment companies, National defense, Reporting and Recordkeeping requirements.

For the reasons set forth in the preamble, the Department of the Treasury proposes to revise part 800 of title 31 of the Code of Federal Regulations, to read as follows:

PART 800—REGULATIONS PERTAINING TO CERTAIN INVESTMENTS IN THE UNITED STATES BY FOREIGN PERSONS

Subpart A—General

Sec.
800.101
Scope.
800.102
Risk-based analysis.
800.103
Effect on other law.
800.104
Applicability rule.

Subpart B—Definitions

800.201
Aggregated data.
800.202
Anonymized data.
800.203
Business day.
800.204
Certification.
800.205
Committee; Chairperson of the Committee; Staff Chairperson.
800.206
Completion date.
800.207
Contingent equity interest.
800.208
Control.
800.209
Conversion.
800.210
Covered control transaction.
800.211
Covered investment.
800.212
Covered investment critical infrastructure.
800.213
Covered transaction.
800.214
Critical infrastructure.
800.215
Critical technologies.
800.216
Effective date.
800.217
Encrypted data.
800.218
Entity.
800.219
Excepted foreign state.
800.220
Excepted investor.
800.221
Foreign entity.
800.222
Foreign government.
800.223
Foreign government-controlled transaction.
800.224
Foreign national.
800.225
Foreign person.
800.226
Hold.
800.227
Identifiable data.
800.228
Investment.
800.229
Investment fund.
800.230
Involvement.
800.231
Lead agency.
800.232
Manufacture.
800.233
Material nonpublic technical information.
800.234
Minimum excepted ownership.
800.235
Own.
800.236
Parent. 800.237 Party to a transaction.
800.238
Person. 800.239 Personal identifier.
800.240
Section 721.
800.241
Sensitive personal data.
800.242
Service.
800.243
Solely for the purpose of passive investment.
800.244
Substantial interest.
800.245
Substantive decisionmaking.
800.246
Supply.
800.247
Targets or tailors.
800.248
TID U.S. business.
800.249
Transaction.
800.250
Unaffiliated TID U.S. business.
800.251
United States.
800.252
U.S. business.
800.253
U.S. national.
800.254
Voting interest.

Subpart C—Coverage

800.301
Transactions that are covered control transactions.
800.302
Transactions that are not covered control transactions.
800.303
Transactions that are covered investments.
800.304
Transactions that are not covered investments.
800.305
Incremental acquisitions.
800.306
Lending transactions.
800.307
Specific clarifications for investment funds.
800.308
Timing rule for a contingent equity interest.

Subpart D—Declarations

800.401
Mandatory declarations.
800.402
Voluntary declarations.
800.403
Procedures for declarations.
800.404
Contents of declarations.
800.405
Beginning of 30-day assessment period.
800.406
Rejection, disposition, or withdrawal of declarations.
800.407
Committee actions.

Subpart E—Notices

800.501
Procedures for notices.
800.502
Contents of voluntary notices.
800.503
Beginning of a 45-day review period.
800.504
Deferral, rejection, or disposition of certain voluntary notices.
800.505
Determination of whether to undertake an investigation.
800.506
Determination not to undertake an investigation.
800.507
Commencement of investigation.
800.508
Completion or termination of investigation and report to the President.
800.509
Withdrawal of notices.

Subpart F—Committee Procedures

800.601
General.
800.602
Role of the Secretary of Labor.
800.603
Materiality.
800.604
Tolling of deadlines during lapse in appropriations.

Subpart G—Finality of Action

800.701
Finality of actions under section 721.

Subpart H—Provision and Handling of Information

800.801
Obligation of parties to provide information.
800.802
Confidentiality.

Subpart I—Penalties and Damages

800.901
Penalties and damages.
800.902
Effect of lack of compliance.

Subpart J—Foreign National Security Investment Review Regimes

800.1001
Determinations.
800.1002
Effect of determinations.

Appendix A to Part 800—Covered investment critical infrastructure and functions related to covered investment critical infrastructure

Authority:

50 U.S.C. 4565; E.O. 11858, as amended, 73 FR 4677.

Subpart A—General

§ 800.101
Scope.
(a) Section 721 of title VII of the Defense Production Act of 1950 (50 U.S.C. 4565), as amended, authorizes the President to suspend or prohibit any covered transaction, when, in the President's judgment, there is credible evidence that leads the President to believe that the foreign person engaging in a covered transaction might take action that threatens to impair the national security of the United States, and when provisions of law other than section 721 and the International Emergency Economic Powers Act (50 U.S.C. 1701-1706), do not, in the judgment of the President, provide adequate and appropriate authority for the President to protect the national security in the matter before the President. Section 721 also authorizes the Committee to review covered transactions and to mitigate any risk to the national security of the United States that arises as a result of such transactions.

(b) This part implements regulations pertaining to covered transactions as defined in § 800.213 of this part. Regulations pertaining to covered real estate transactions are addressed in part 802 of this title.

§ 800.102
Risk-based analysis.
Any determination of the Committee with respect to a covered transaction to suspend, refer to the President, or to negotiate, enter into or impose, or enforce any agreement or condition under section 721 shall be based on a risk-based analysis, conducted by the Committee, of the effects on the national security of the United States of the covered transaction. Any such risk-based analysis shall include credible evidence demonstrating the risk and an assessment of the threat, vulnerabilities, and consequences to national security related to the transaction. For purposes of this part, any such analysis of risk shall include and be informed by consideration of the following elements:

(a) The
threat,
which is a function of the intent and capability of a foreign person to take action to impair the national security of the United States;

(b) The
vulnerabilities,
which are the extent to which the nature of the U.S. business presents susceptibility to impairment of national security; and

(c) The
consequences to national security,
which are the potential effects on national security that could reasonably result from the exploitation of the vulnerabilities by the threat actor.

§ 800.103
Effect on other law.

Nothing in this part shall be construed as altering or affecting any other authority, process, regulation, investigation, enforcement measure, or review provided by or established under

any other provision of federal law, including without limitation the International Emergency Economic Powers Act, or any other authority of the President or the Congress under the Constitution of the United States.

§ 800.104
Applicability rule.
(a) Except as provided in paragraphs (b) and (c) of this section and otherwise in this part, the regulations in this part apply from [EFFECTIVE DATE OF FINAL RULE].

(b) For any transaction for which the following has occurred before [EFFECTIVE DATE OF FINAL RULE], the corresponding provisions of the regulations in this part that were in effect the day before [EFFECTIVE DATE OF FINAL RULE] will apply:

(1) The completion date;

(2) The parties to the transaction have executed a binding written agreement, or other binding document, establishing the material terms of the transaction;

(3) A party has made a public offer to shareholders to buy shares of a U.S. business; or

(4) A shareholder has solicited proxies in connection with an election of the board of directors of a U.S. business or an owner or holder of a contingent equity interest has requested the conversion of the contingent equity interest.

(c) For any transaction that, between November 10, 2018 and [EFFECTIVE DATE], fell within the scope of part 801 of this title, the regulations in part 801 will continue to apply.

Note 1 to § 800.104:

See subpart I (Penalties and Damages) of this part for specific applicability rules pertaining to that subpart.

Subpart B—Definitions

§ 800.201
Aggregated data.

The term
aggregated data
means data that have been combined or collected together in summary or other form such that the data cannot be identified with any individual.

§ 800.202
Anonymized data.

The term
anonymized data
means data from which all personal identifiers have been completely removed.

§ 800.203
Business day.

The term
business day
means Monday through Friday, except the legal public holidays specified in 5 U.S.C. 6103, any day declared to be a holiday by federal statute or executive order, or any day with respect to which the U.S. Office of Personnel Management has announced that Federal agencies in the Washington, DC, area are closed to the public. For purposes of calculating any deadline imposed by this part triggered by the submission of a party to a transaction under § 800.401(e)(2) or § 800.501(i), any submissions received after 5 p.m. Eastern Time are deemed to be submitted on the next business day.

Note 1 to § 800.203:

See § 800.604 regarding the tolling of deadlines during a lapse in appropriations.

§ 800.204
Certification.

(a) The term
certification
means a written statement signed by the chief executive officer or other duly authorized designee of a party filing a notice, declaration, or information, certifying under the penalties provided in the False Statements Accountability Act of 1996, as amended (18 U.S.C. 1001) that the notice, declaration, or information filed:

(1) Fully complies with the requirements of section 721, the regulations in this part, and any agreement or condition entered into with the Committee or any member of the Committee, and

(2) Is accurate and complete in all material respects, as it relates to:

(i) The transaction, and

(ii) The party providing the certification, including its parents, subsidiaries, and any other related entities described in the notice, declaration, or information.

(b) For purposes of this section, a
duly authorized designee
is:

(1) In the case of a partnership, any general partner thereof;

(2) In the case of a corporation, any officer or director thereof;

(3) In the case of any entity lacking partners, officers, or directors, any individual within the organization exercising executive functions similar to those of a general partner of a partnership or an officer or director of a corporation; and

(4) In the case of an individual, such individual or his or her legal representative.

(c) In each case described in paragraphs (b)(1) through (4) of this section, such designee must possess actual authority to make the certification on behalf of the party filing a notice, declaration, or information.

Note 1 to § 800.204:

A sample certification may be found at the Committee's section of the Department of the Treasury website, currently available at
https://home.treasury.gov/policy-issues/international/the-committee-on-foreign-investment-in-the-united-states-cfius.

§ 800.205
Committee; Chairperson of the Committee; Staff Chairperson.

The term
Committee
means the Committee on Foreign Investment in the United States. The
Chairperson of the Committee
is the Secretary of the Treasury. The
Staff Chairperson
of the Committee is the Department of the Treasury official so designated by the Secretary of the Treasury or by the Secretary's designee.

§ 800.206
Completion date.

The term
completion date
means, with respect to a transaction, the earliest date upon which any ownership interest, including a contingent equity interest, is conveyed, assigned, delivered, or otherwise transferred to a person, or a change in rights that could result in a covered control transaction or covered investment occurs.

Note 1 to § 800.206:

See § 800.308 regarding the timing rule for a contingent equity interest.

§ 800.207
Contingent equity interest.

The term
contingent equity interest
means a financial instrument that currently does not constitute an equity interest but is convertible into, or provides the right to acquire, an equity interest upon the occurrence of a contingency or defined event.

§ 800.208
Control.

(a) The term
control
means the power, direct or indirect, whether or not exercised, through the ownership of a majority or a dominant minority of the total outstanding voting interest in an entity, board representation, proxy voting, a special share, contractual arrangements, formal or informal arrangements to act in concert, or other means, to determine, direct, or decide important matters affecting an entity; in particular, but without limitation, to determine, direct, take, reach, or cause decisions regarding the following matters, or any other similarly important matters affecting an entity:

(1) The sale, lease, mortgage, pledge, or other transfer of any of the tangible or intangible principal assets of the entity, whether or not in the ordinary course of business;

(2) The reorganization, merger, or dissolution of the entity;

(3) The closing, relocation, or substantial alteration of the production, operational, or research and development facilities of the entity;

(4) Major expenditures or investments, issuances of equity or debt, or dividend payments by the entity, or approval of the operating budget of the entity;

(5) The selection of new business lines or ventures that the entity will pursue;

(6) The entry into, termination, or non-fulfillment by the entity of significant contracts;

(7) The policies or procedures of the entity governing the treatment of non-public technical, financial, or other proprietary information of the entity;

(8) The appointment or dismissal of officers or senior managers or in the case of a partnership, the general partner;

(9) The appointment or dismissal of employees with access to critical technology or other sensitive technology or classified U.S. Government information; or

(10) The amendment of the Articles of Incorporation, constituent agreement, or other organizational documents of the entity with respect to the matters described in paragraphs (a)(1) through (9) of this section.

(b) In examining questions of control in situations where more than one foreign person has an ownership interest in an entity, consideration will be given to factors such as whether the foreign persons are related or have formal or informal arrangements to act in concert, whether they are agencies or instrumentalities of the national or subnational governments of a single foreign state, and whether a given foreign person and another person that has an ownership interest in the entity are both controlled by any of the national or subnational governments of a single foreign state.

(c) The following minority shareholder protections shall not in themselves be deemed to confer control over an entity:

(1) The power to prevent the sale or pledge of all or substantially all of the assets of an entity or a voluntary filing for bankruptcy or liquidation;

(2) The power to prevent an entity from entering into contracts with majority investors or their affiliates;

(3) The power to prevent an entity from guaranteeing the obligations of majority investors or their affiliates;

(4) The power to purchase an additional interest in an entity to prevent the dilution of an investor's pro rata interest in that entity in the event that the entity issues additional instruments conveying interests in the entity;

(5) The power to prevent the change of existing legal rights or preferences of the particular class of stock held by minority investors, as provided in the relevant corporate documents governing such shares; and

(6) The power to prevent the amendment of the Articles of Incorporation, constituent agreement, or other organizational documents of an entity with respect to the matters described in paragraphs (c)(1) through (5) of this section.

(d) The Committee will consider, on a case-by-case basis, whether minority shareholder protections other than those listed in paragraph (c) of this section do not confer control over an entity.

(e) Examples:

(1)
Example 1.
Corporation A is a U.S. business. A U.S. investor owns 50 percent of the voting interest in Corporation A, and the remaining voting interest is owned in equal shares by five unrelated foreign investors. The foreign investors jointly financed their investment in Corporation A and vote as a single block on matters affecting Corporation A. The foreign investors have an informal arrangement to act in concert with regard to Corporation A, and, as a result, the foreign investors control Corporation A.

(2)
Example 2.
Same facts as in Example 1 of this section with regard to the composition of Corporation A's shareholders. The foreign investors in Corporation A have no contractual or other commitments to act in concert, and have no informal arrangements to do so. Assuming no other relevant facts, the foreign investors do not control Corporation A.

(3)
Example 3.
Corporation A, a foreign person, is a private equity fund that routinely acquires equity interests in companies and manages them for a period of time. Corporation B is a U.S. business. In addition to its acquisition of seven percent of Corporation B's voting shares, Corporation A acquires the right to terminate significant contracts of Corporation B. Corporation A controls Corporation B.

(4)
Example 4.
Corporation A, a foreign person, acquires a nine percent interest in the shares of Corporation B, a U.S. business. As part of the transaction, Corporation A also acquires certain veto rights that determine important matters affecting Corporation B, including the right to veto the dismissal of senior executives of Corporation B. Corporation A controls Corporation B.

(5)
Example 5.
Corporation A, a foreign person, acquires a thirteen percent interest in the shares of Corporation B, a U.S. business, and the right to appoint one member of Corporation B's seven-member Board of Directors. Corporation A receives minority shareholder protections listed in § 800.208(c) but receives no other positive or negative rights with respect to Corporation B. Assuming no other relevant facts, Corporation A does not control Corporation B.

(6)
Example 6.
Corporation A, a foreign person, acquires a twenty percent interest in the shares of Corporation B, a U.S. business. Corporation A has negotiated an irrevocable passivity agreement that completely precludes it from controlling Corporation B. Corporation A does, however, receive the right to prevent Corporation B from entering into contracts with majority investors or their affiliates and to prevent Corporation B from guaranteeing the obligations of majority investors or their affiliates. Assuming no other relevant facts, Corporation A does not control Corporation B.

(7)
Example 7.
Limited Partnership A comprises two limited partners, each of which holds 49 percent of the interest in the partnership, and a general partner, which holds two percent of the interest. The general partner has sole authority to determine, direct, and decide all important matters affecting the partnership and a fund operated by the partnership. The general partner alone controls Limited Partnership A and the fund.

(8)
Example 8.
Same facts as in Example 7 of this section, except that each of the limited partners has the authority to veto major investments proposed by the general partner and to choose the fund's representatives on the boards of the fund's portfolio companies. The general partner and the limited partners each have control over Limited Partnership A and the fund.

Note 1 to § 800.208:

See § 800.302(b) regarding the Committee's treatment of transactions in which a foreign person holds or acquires ten percent or less of the outstanding voting interest in a U.S. business solely for the purpose of passive investment. See § 800.303 regarding the Committee's treatment of transactions that do not result in control over a U.S. business by a foreign person, but may be covered investments. See § 800.305 regarding the Committee's treatment of a subsequent transaction involving a foreign person that previously acquired control of the U.S. business.

§ 800.209
Conversion.

The term
conversion
means the exercise of a right inherent in the ownership or holding of a particular financial instrument to exchange any such instrument for an equity interest.

§ 800.210
Covered control transaction.

The term
covered control transaction
means any transaction that is proposed or pending after August 23, 1988, by or with any foreign person that could result in foreign control of any U.S. business, including without limitation such a transaction carried out through a joint venture.

§ 800.211
Covered investment.

The term
covered investment
means an investment, direct or indirect, by a foreign person other than an excepted investor in an unaffiliated TID U.S. business that is proposed or pending after [EFFECTIVE DATE OF FINAL RULE], and that:

(a) Is not a covered control transaction; and

(b) Affords the foreign person:

(1) Access to any material nonpublic technical information in the possession of the TID U.S. business;

(2) Membership or observer rights on the board of directors or equivalent

governing body of the TID U.S. business or the right to nominate an individual to a position on the board of directors or equivalent governing body of the TID U.S. business; or

(3) Any involvement, other than through voting of shares, in substantive decisionmaking of the TID U.S. business regarding:

(i) The use, development, acquisition, safekeeping, or release of sensitive personal data of U.S. citizens maintained or collected by the TID U.S. business;

(ii) The use, development, acquisition, or release of critical technologies; or

(iii) The management, operation, manufacture, or supply of covered investment critical infrastructure.

(c) Notwithstanding paragraphs (a) and (b) of this section, no investment involving an air carrier, as defined in 49 U.S.C. 40102(a)(2), that holds a certificate issued under 49 U.S.C. 41102 shall be a covered investment.

§ 800.212
Covered investment critical infrastructure.

The term
covered investment critical infrastructure
means, in the context of a particular covered investment, the systems and assets, whether physical or virtual, set forth in Column 1 of appendix A to part 800.

§ 800.213
Covered transaction.

The term
covered transaction
means any of the following:

(a) A covered control transaction;

(b) A covered investment;

(c) A change in the rights that a foreign person has with respect to a U.S. business in which the foreign person has an investment, if that change could result in a covered control transaction or a covered investment; or

(d) Any other transaction, transfer, agreement, or arrangement, the structure of which is designed or intended to evade or circumvent the application of section 721.

Note 1 to § 800.213:

Any transaction described in (a) through (d) of this section that arises pursuant to a bankruptcy proceeding or other form of default on debt is a covered transaction. See also § 800.306 for the treatment of certain lending transactions.

§ 800.214
Critical infrastructure.

The term
critical infrastructure
means, in the context of a particular covered control transaction, systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems or assets would have a debilitating impact on national security.

§ 800.215
Critical technologies.

The term
critical technologies
means the following:

(a) Defense articles or defense services included on the United States Munitions List (USML) set forth in the International Traffic in Arms Regulations (ITAR) (22 CFR parts 120-130);

(b) Items included on the Commerce Control List set forth in Supplement No. 1 to part 774 of the Export Administration Regulations (EAR) (15 CFR parts 730-774), and controlled—

(1) Pursuant to multilateral regimes, including for reasons relating to national security, chemical and biological weapons proliferation, nuclear nonproliferation, or missile technology; or

(2) For reasons relating to regional stability or surreptitious listening;

(c) Specially designed and prepared nuclear equipment, parts and components, materials, software, and technology covered by 10 CFR part 810 (relating to assistance to foreign atomic energy activities);

(d) Nuclear facilities, equipment, and material covered by 10 CFR part 110 (relating to export and import of nuclear equipment and material);

(e) Select agents and toxins covered by 7 CFR part 331, 9 CFR part 121, or 42 CFR part 73; and

(f) Emerging and foundational technologies controlled pursuant to section 1758 of the Export Control Reform Act of 2018 (50 U.S.C. 4817).

§ 800.216
Effective date.

The term
effective date
means [EFFECTIVE DATE OF FINAL RULE].

§ 800.217
Encrypted data.

The term
encrypted data
means data to which National Institute of Standards and Technology (NIST)-allowed cryptographic techniques, as identified in the most current NIST special publication 800-175B, or superseding publication, have been applied.

§ 800.218
Entity.

The term
entity
means any branch, partnership, group or sub-group, association, estate, trust, corporation or division of a corporation, or organization (whether or not organized under the laws of any State or foreign state); assets (whether or not organized as a separate legal entity) operated by any one of the foregoing as a business undertaking in a particular location or for particular products or services; and any government (including a foreign national or subnational government, the U.S. Government, a subnational government within the United States, and any of their respective departments, agencies, or instrumentalities). (See examples in § 800.301(g)(5) through (14) and § 800.302(g)(5) through (10).)

§ 800.219
Excepted foreign state.

The term
excepted foreign state
means each foreign state from time to time identified by the Chairperson of the Committee, with the agreement of two-thirds of the voting members of the Committee, and, beginning on [TWO YEARS AFTER EFFECTIVE DATE OF FINAL RULE] with respect to which the Chairperson of the Committee has made a determination pursuant to § 800.1001(a).

Note 1 to § 800.219:

The name of each foreign state identified by the Chairperson of the Committee as an excepted foreign state will be published in a notice in the
Federal Register
and incorporated into the Committee's list of excepted foreign states.

§ 800.220
Excepted investor.

(a) The term
excepted investor
means a foreign person who is, as of the completion date and subject to paragraphs (c) and (d) of this section:

(1) A foreign national who is a national of one or more excepted foreign states and is not also a national of any foreign state that is not an excepted foreign state;

(2) A foreign government of an excepted foreign state; or

(3) A foreign entity that meets each of the following conditions with respect to itself and each of its parents (if any):

(i) Such entity is organized under the laws of an excepted foreign state or in the United States;

(ii) Such entity has its principal place of business in an excepted foreign state or the United States;

(iii) Each member or observer of the board of directors or similar body of such entity is a U.S. national or, if a foreign national, is a national of one or more excepted foreign states and is not also a national of any foreign state that is not an excepted foreign state;

(iv) Any foreign person that individually holds, or each foreign person that is part of a group of foreign persons that, in the aggregate, holds, five percent or more of the outstanding voting interest of such entity; holds the right to five percent or more of the profits of such entity; holds the right in the event of dissolution to five percent or more of the assets of such entity; or could exercise control over such entity, is:

(A) A foreign national who is a national of one or more excepted foreign states and is not also a national of any foreign state that is not an excepted foreign state;

(B) A foreign government of an excepted foreign state; or

(C) A foreign entity that is organized under the laws of an excepted foreign state and has its principal place of business in an excepted foreign state or in the United States; and

(v) The minimum excepted ownership of such entity is held, individually or in the aggregate, by one or more persons each of whom is:

(A) Not a foreign person;

(B) A foreign national who is a national of one or more excepted foreign states and is not also a national of any foreign state that is not an excepted foreign state;

(C) A foreign government of an excepted foreign state; or

(D) A foreign entity that is organized under the laws of an excepted foreign state and has its principal place of business in an excepted foreign state or in the United States.

(b) When more than one person holds an ownership interest in an entity, in determining whether the ownership interests of such persons should be aggregated for purposes of paragraph (a)(3)(iv) of this section, consideration will be given to factors such as whether the persons holding the ownership interests are related or have formal or informal arrangements to act in concert, whether they are agencies or instrumentalities of the national or subnational governments of a single foreign state, and whether a given foreign person and another foreign person that has an ownership interest in the entity are both controlled by any of the national or subnational governments of a single foreign state.

(c) Notwithstanding paragraph (a) of this section, a foreign person is not an excepted investor with respect to a transaction if:

(1) In the five years prior to the completion date of the transaction the foreign person or any of its parents or subsidiaries:

(i) Has received written notice from the Committee that it has submitted a material misstatement or omission in a notice or declaration or made a false certification under this part or parts 801 or 802 of this title;

(ii) Has received written notice from the Committee that it has violated a material provision of a mitigation agreement entered into with, material condition imposed by, or an order issued by, the Committee or a lead agency under section 721(l);

(iii) Has been subject to action by the President under section 721(d);

(iv) Has:

(A) Received a written Finding of Violation or Penalty Notice imposing a civil monetary penalty from the Department of the Treasury Office of Foreign Assets Control (OFAC); or

(B) Entered into a settlement agreement with OFAC with respect to apparent violations of U.S. sanctions laws administered by OFAC, including without limitation the International Emergency Economic Powers Act, the Trading With the Enemy Act, the Foreign Narcotics Kingpin Designation Act, each as amended, or of any executive order, regulation, order, directive, or license issued pursuant thereto;

(v) Has received a written notice of debarment from the Department of State Directorate of Defense Trade Controls, as described in 22 CFR parts 127 and 128;

(vi) Has been a respondent or party in a final order, including a settlement order, issued by the Department of Commerce Bureau of Industry and Security (BIS) regarding violations of U.S. export control laws administered by BIS, including without limitation the Export Control Reform Act of 2018 (Title XVII, Subtitle B of Pub. L. 115-232, 132 Stat. 2208, 50 U.S.C. 4801,
et seq.
), the EAR, or of any executive order, regulation, order, directive, or license issued pursuant thereto;

(vii) Has received a final decision from the Department of Energy National Nuclear Security Administration imposing a civil penalty with respect to a violation of section 57 b. of the Atomic Energy Act of 1954, as implemented under 10 CFR part 810; or

(viii) Has been convicted of a crime under, or has entered into a deferred prosecution agreement or non-prosecution agreement with the Department of Justice with respect to a violation of, any felony crime in any jurisdiction within the United States; or

(2) The foreign person or any of its parents or subsidiaries is, on the date on which the parties to the transaction first execute a binding written agreement, or other binding document, establishing the material terms of the transaction, listed on either the BIS Unverified List or Entity List in 15 CFR part 744.

(d) Irrespective of whether the foreign person satisfies the criteria in paragraphs (a)(1), (2), or (3)(i) through (iii) of this section as of the completion date, if at any time during the three-year period following the completion date, the foreign person no longer meets all the criteria set forth in paragraphs (a)(1), (2), or (3)(i) through (iii) of this section, the foreign person is not an excepted investor with respect to the transaction from the completion date onward. This paragraph does not apply when an excepted investor no longer meets any of the criteria solely due to a rescission of a determination under § 800.1001(b) or if a particular foreign state otherwise ceases to be an excepted foreign state.

(e) A foreign person may waive its status as an excepted investor with respect to a transaction at any time by submitting a declaration pursuant to § 800.403 or filing a notice pursuant to § 800.501 regarding the transaction in which it explicitly waives such status. In such case, the foreign person will be deemed not to be an excepted investor and the provisions of Subpart D or E, as applicable, will apply.

Note 1 to § 800.220:

See § 800.501(c)(2) regarding an agency notice where a foreign person is not an excepted investor solely due to § 800.220(d).

§ 800.221
Foreign entity.

(a) The term
foreign entity
means any branch, partnership, group or sub-group, association, estate, trust, corporation or division of a corporation, or organization organized under the laws of a foreign state if either its principal place of business is outside the United States or its equity securities are primarily traded on one or more foreign exchanges.

(b) Notwithstanding paragraph (a) of this section, any branch, partnership, group or sub-group, association, estate, trust, corporation or division of a corporation, or organization that demonstrates that a majority of the equity interest in such entity is ultimately owned by U.S. nationals is not a foreign entity.

§ 800.222
Foreign government.

The term
foreign government
means any government or body exercising governmental functions, other than the U.S. Government or a subnational government of the United States. The term includes, but is not limited to, national and subnational governments, including their respective departments, agencies, and instrumentalities.

§ 800.223
Foreign government-controlled transaction.

The term
foreign government-controlled transaction
means any covered control transaction that could result in control of a U.S. business by a foreign government or a person controlled by or acting on behalf of a foreign government.

§ 800.224
Foreign national.

The term
foreign national
means any individual other than a U.S. national.

§ 800.225
Foreign person.

(a) The term
foreign person
means:

(1) Any foreign national, foreign government, or foreign entity; or

(2) Any entity over which control is exercised or exercisable by a foreign national, foreign government, or foreign entity.

(b) Examples:

(1)
Example 1.
Corporation A is organized under the laws of a foreign state and is engaged in business only outside the United States. All of its shares are held by Corporation X, which solely controls Corporation A. Corporation X is organized in the United States and is wholly owned and controlled by U.S. nationals. Assuming no other relevant facts, Corporation A, although organized and only operating outside the United States, is not a foreign person.

(2)
Example 2.
Same facts as in the first sentence of Example 1 of this section. The government of the foreign state under whose laws Corporation A is organized exercises control over Corporation A because a law establishing Corporation A gives the foreign state the right to appoint Corporation A's board members. Corporation A is a foreign person.

(3)
Example 3.
Corporation A is organized in the United States, is engaged in interstate commerce in the United States, and is controlled by Corporation X. Corporation X is organized under the laws of a foreign state, its principal place of business is located outside the United States, and 50 percent of its shares are held by foreign nationals and 50 percent of its shares are held by U.S. nationals. Both Corporation A and Corporation X are foreign persons. Corporation A is also a U.S. business.

(4)
Example 4.
Corporation A is organized under the laws of a foreign state and is owned and controlled by a foreign national. A branch of Corporation A engages in interstate commerce in the United States. Corporation A (including its branch) is a foreign person. The branch is also a U.S. business.

(5)
Example 5.
Corporation A is a corporation organized under the laws of a foreign state and its principal place of business is located outside the United States. Forty-five percent of the voting interest in Corporation A is owned in equal shares by numerous unrelated foreign investors, none of whom has control. The foreign investors have no formal or informal arrangement to act in concert with regard to Corporation A with any other holder of voting interest in Corporation A. Corporation A demonstrates that the remainder of the voting interest in Corporation A is held by U.S. nationals. Assuming no other relevant facts, Corporation A is not a foreign person.

(6)
Example 6.
Same facts as Example 5 of this section, except that one of the foreign investors controls Corporation A. Assuming no other relevant facts, Corporation A is not a foreign entity pursuant to § 800.221(b), but it is a foreign person because it is controlled by a foreign person.

§ 800.226
Hold.

The terms
hold(s)
and
holding
mean legal or beneficial ownership, whether direct or indirect, whether through fiduciaries, agents, or other means.

§ 800.227
Identifiable data.

The term
identifiable data
means data that can be used to distinguish or trace an individual's identity, including without limitation through the use of any personal identifier. For the avoidance of doubt, aggregated data or anonymized data is identifiable data if any party to the transaction has, or as a result of the transaction will have, the ability to disaggregate or de-anonymize the data, or if the data is otherwise capable of being used to distinguish or trace an individual's identity. Identifiable data does not include encrypted data, unless the U.S. business that maintains or collects the encrypted data has the means to de-encrypt the data so as to distinguish or trace an individual's identity.

§ 800.228
Investment.

The term
investment
means the acquisition of equity interest, including contingent equity interest.

§ 800.229
Investment fund.

The term
investment fund
means any entity that is an “investment company,” as defined in section 3(a) of the Investment Company Act of 1940 (15 U.S.C. 80a-1
et seq.
), or would be an “investment company” but for one or more of the exemptions provided in section 3(b) or 3(c) thereunder.

§ 800.230
Involvement.

The term
involvement
means the right or ability to participate, whether or not exercised, including without limitation by doing any of the following:

(a) Providing input into a final decision;

(b) Consulting with or providing advice to a decisionmaker;

(c) Exercising special approval or veto rights;

(d) Participating on a committee with decisionmaking authority; or

(e) Advising on the appointment officers or selecting employees who are engaged in substantive decisionmaking.

§ 800.231
Lead agency.

The term
lead agency
means the Department of the Treasury and any other agency designated by the Chairperson of the Committee to have primary responsibility, on behalf of the Committee, for the specific activity for which the Chairperson designates it as a lead agency, including without limitation all or a portion of an assessment, a review, an investigation, or the negotiation or monitoring of a mitigation agreement or condition.

§ 800.232
Manufacture.

Solely for the purposes of Column 2 of appendix A to part 800, the term
manufacture
means to produce or reproduce, whether physically or virtually.

§ 800.233
Material nonpublic technical information.

(a) The term
material nonpublic technical information
means information that:

(1) Provides knowledge, know-how, or understanding not available in the public domain, of the design, location, or operation of critical infrastructure, including without limitation vulnerability information such as that related to physical security or cybersecurity; or

(2) Is not available in the public domain and is necessary to design, fabricate, develop, test, produce, or manufacture a critical technology, including without limitation processes, techniques, or methods;

(b) The term
material nonpublic technical information
does not include financial information regarding the performance of an entity.

(c) Example: Corporation A, a foreign person that is not an excepted investor, proposes to acquire a four percent, non-controlling equity interest in Corporation B. Corporation B is a U.S. business that services an industrial control system utilized by an interstate oil pipeline that has the capacity to transport 600,000 barrels per day of crude oil (ICS B). ICS B is covered investment critical infrastructure as set forth in Column 1 of appendix A to part 800. The source code for ICS B is not available in the public domain. Pursuant to the terms of the investment, Corporation A will have access to the source code for ICS B. The proposed investment therefore affords Corporation A access to material nonpublic technical information in the possession Corporation B regarding the design and operation of covered investment critical infrastructure.

§ 800.234
Minimum excepted ownership.

The term
minimum excepted ownership
means:

(a) With respect to an entity whose equity securities are primarily traded on an exchange in an excepted foreign state or the United States, a majority of its voting interest, the right to a majority of its profits, and the right in the event of dissolution to a majority of its assets; and

(b) With respect to an entity whose equity securities are not primarily traded on an exchange in an excepted foreign state or the United States, 90 percent or more of its voting interest, the right to 90 percent or more of its profits, and the right in the event of

dissolution to 90 percent or more of its assets.

§ 800.235
Own.

Solely for the purposes of Column 2 of appendix A to part 800, the term
own
means to directly possess the applicable covered investment critical infrastructure.

§ 800.236
Parent.

(a) The term
parent
means a person who or which directly or indirectly:

(1) Holds or will hold at least 50 percent of the outstanding voting interest in an entity; or

(2) Holds or will hold the right to at least 50 percent of the profits of an entity, or has or will have the right in the event of the dissolution to at least 50 percent of the assets of that entity.

(b) Any entity that meets the conditions of paragraph (a)(1) or (2) of this section with respect to another entity (
i.e.,
the intermediate parent) is also a parent of any other entity of which the intermediate parent is a parent.

(c) Examples:

(1)
Example 1.
Corporation P holds 50 percent of the voting interest in Corporations R and S. Corporation R holds 40 percent of the voting interest in Corporation X; Corporation S holds 50 percent of the voting interest in Corporation Y, which in turn holds 50 percent of the voting interest in Corporation Z. Corporation P is a parent of Corporations R, S, Y, and Z, but not of Corporation X. Corporation S is a parent of Corporation Y and Z, and Corporation Y is a parent of Corporation Z.

(2)
Example 2.
Corporation A holds warrants which when exercised will entitle it to vote 50 percent of the outstanding shares of Corporation B. Corporation A is a parent of Corporation B.

§ 800.237
Party to a transaction.

(a) The term
party to a transaction
means:

(1) In the case of an acquisition of an ownership interest in an entity, the person acquiring the ownership interest, the person from which such ownership interest is acquired, and the entity whose ownership interest is being acquired, without regard to any person providing brokerage or underwriting services for the transaction;

(2) In the case of a merger, the surviving entity, and the entity or entities that are merged into that entity as a result of the transaction;

(3) In the case of a consolidation, the entities being consolidated, and the new consolidated entity;

(4) In the case of a proxy solicitation, the person soliciting proxies, and the person who issued the voting interest;

(5) In the case of the acquisition or conversion of contingent equity interests, the issuer and the person holding the contingent equity interests;

(6) In the case of a change in rights that a person has with respect to an entity in which that person has an investment, the person whose rights change as a result of the transaction and the entity to which those rights apply;

(7) In the case of a transfer, agreement, arrangement, or any other type of transaction, the structure of which is designed or intended to evade or circumvent the application of section 721, any person that participates in such transfer, agreement, arrangement, or other type of transaction;

(8) In the case of any other type of transaction, any person who is in a role comparable to that of a person described in paragraphs (a)(1) through (7) of this section; and

(9) In all cases, each party that submitted a declaration or notice to the Committee regarding a transaction.

(b) For purposes of section 721(l), the term
party to a transaction
includes any affiliate of any party described in paragraphs (a)(1) through (9) of this section that the Committee, or a lead agency acting on behalf of the Committee, determines is relevant to mitigating a risk to the national security of the United States.

§ 800.238
Person.

The term
person
means any individual or entity.

§ 800.239
Personal identifier.

The term
personal identifier
means name, physical address, email address, social security number, phone number, or other information that identifies a specific individual.

§ 800.240
Section 721.

The term
section 721
means section 721 of title VII of the Defense Production Act of 1950 (50 U.S.C. 4565), as amended.

§ 800.241
Sensitive personal data.

(a) The term
sensitive personal data
means, except as provided in paragraph (b) of this section:

(1) Identifiable data that is:

(i) Maintained or collected by a U.S. business that:

(A) Targets or tailors products or services to any U.S. executive branch agency or military department with intelligence, national security, or homeland security responsibilities, or to personnel and contractors thereof;

(B) Has maintained or collected such data on greater than one million individuals at any point over the preceding twelve (12) months; or

(C) Has a demonstrated business objective to maintain or collect such data on greater than one million individuals and such data is an integrated part of the U.S. business's primary products or services; and

(ii) Within any of the following categories:

(A) Data that could be used to analyze or determine an individual's financial distress or hardship;

(B) The set of data in a consumer report, as defined pursuant to 15 U.S.C. 1681a, unless such data is obtained from a consumer reporting agency for one or more purposes identified in 15 U.S.C. 1681b(a) and such data is not substantially similar to the full contents of a consumer file as defined pursuant to 15 U.S.C. 1681a.;

(C) The set of data in an application for health insurance, long-term care insurance, professional liability insurance, mortgage insurance, or life insurance;

(D) Data relating to the physical, mental, or psychological health condition of an individual;

(E) Non-public electronic communications, including without limitation email, messaging, or chat communications, between or among users of a U.S. business's products or services if a primary purpose of such product or service is to facilitate third-party user communications;

(F) Geolocation data collected using positioning systems, cell phone towers, or WiFi access points such as via a mobile application, vehicle GPS, other onboard mapping tool, or wearable electronic device;

(G) Biometric enrollment data including without limitation facial, voice, retina/iris, and palm/fingerprint templates;

(H) Data stored and processed for generating a state or federal government identification card;

(I) Data concerning U.S. Government personnel security clearance status; or

(J) The set of data in an application for a U.S. Government personnel security clearance or an application for employment in a position of public trust; and

(2) Genetic information, as defined pursuant to 45 CFR 160.103.

(b) The term
sensitive personal data
shall not include, regardless of the applicability of the criteria described in paragraph (a) of this section:

(1) Data maintained or collected by a U.S. business concerning the employees of that U.S. business, unless the data pertains to employees of U.S. Government contractors who hold U.S. Government personnel security clearances; or

(2) Data that is a matter of public record, such as court records or other

government records that are generally available to the public.

§ 800.242
Service.

Solely for the purposes of Column 2 of appendix A to part 800, the term
service
means to repair, maintain, refurbish, replace, overhaul, or update.

§ 800.243
Solely for the purpose of passive investment.

(a) Ownership interests are held or acquired
solely for the purpose of passive investment
if the person holding or acquiring such interests does not plan or intend to exercise control and—

(1) Is not afforded any rights that if exercised would constitute control;

(2) Does not acquire any access, rights, or involvement specified § 800.211(b);

(3) Does not possess or develop any purpose other than passive investment; and

(4) Does not take any action inconsistent with holding or acquiring such interests solely for the purpose of passive investment. (See § 800.302(b).)

(b) Example: Corporation A, a foreign person, acquires a voting interest in Corporation B, a U.S. business. In addition to the voting interest, Corporation A negotiates the right to appoint a member of Corporation B's Board of Directors. The acquisition by Corporation A of a voting interest in Corporation B is not solely for the purpose of passive investment.

§ 800.244
Substantial interest.

(a) The term
substantial interest
means a voting interest, direct or indirect, of 25 percent or more by a foreign person in a U.S. business and a voting interest, direct or indirect, of 49 percent or more by a foreign government in a foreign person.

(b) In the case of entity organized as a limited partnership, a foreign government will be considered to have a
substantial interest
in such partnership if either:

(1) It holds 49 percent or more of the voting interest in the general partner; or

(2) It is a limited partner and holds 49 percent or more of the voting interest of the limited partners.

(c) For purposes of determining the percentage of voting interest held indirectly by one entity in another entity, any voting interest of a parent will be deemed to be a 100 percent voting interest in any entity of which it is a parent.

§ 800.245
Substantive decisionmaking.

(a) The term
substantive decisionmaking
means the process through which decisions regarding significant matters affecting an entity are undertaken, including without limitation, as applicable:

(1) Pricing, sales, and specific contracts, including without limitation the license, sale, or transfer of sensitive personal data to any third party, including without limitation pursuant to a customer, vendor, or joint venture agreement;

(2) Supply arrangements;

(3) Corporate strategy and business development;

(4) Research and development, including without limitation location and budget allocation;

(5) Manufacturing locations;

(6) Access to critical technologies, covered investment critical infrastructure, material nonpublic technical information, or sensitive personal data, including without limitation pursuant to a customer, vendor, or joint venture agreement;

(7) Physical and cyber security protocols, including without limitation the storage and protection of critical technologies, covered investment critical infrastructure, or sensitive personal data;

(8) Practices, policies, and procedures governing the collection, use, or storage of sensitive personal data, including without limitation:

(i) The establishment or maintenance of, or changes to, the architecture of information technology systems and networks used in collecting or maintaining sensitive personal data; or

(ii) Privacy policies and agreements for individuals from whom sensitive personal data is collected setting forth parameters regarding whether and how sensitive personal data may be collected, maintained, accessed, or disseminated; or

(9) Strategic partnerships.

(b) The term
substantive decisionmaking
does not include strictly administrative decisions.

(c) Examples:

(1)
Example 1.
Corporation A, a foreign person that is not an excepted investor, proposes to acquire a four percent, non-controlling equity interest in Corporation B. Corporation B is an unaffiliated TID U.S. business that operates a container terminal at a strategic seaport within the National Port Readiness Network (Terminal B). Pursuant to the terms of the investment, Corporation A will have approval rights over which customers may utilize Terminal B. The proposed investment therefore affords Corporation A involvement in substantive decisionmaking of Corporation B regarding the management, operation, manufacture, or supply of covered investment critical infrastructure.

(2)
Example 2.
Same facts as Example 1 of this section, except that instead of customer approval rights, Corporation A has the right to decide whether to claim certain tax credits with respect to Terminal B on its own income tax filing, which prevents Corporation B from claiming such credits. Assuming no other relevant facts, the proposed investment does not afford Corporation A involvement in substantive decisionmaking of Corporation B regarding the management, operation, manufacture, or supply of covered investment critical infrastructure.

§ 800.246
Supply.

Solely for the purposes of Column 2 of appendix A to part 800, the term
supply
means to provide third-party physical or cyber security.

§ 800.247
Targets or tailors.

(a) The term
targets or tailors
means customizing products or services for use

[Text truncated at 120,000 characters. The full text is on the page linked above.]

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/documents/fr%3A2019-20099. Public record. Not legal advice.