Industrial Policy & Trade Monitor· 2667 actions· ✨ 89 recent

FinCEN published the Beneficial Ownership Information Access and Safeguards Final Rule (FR Doc 2023-27973, 88 FR 88732, December 22, 2023; effective February 20, 2024), implementing the access and disclosure provisions of Section 6403(c) of the Corporate Transparency Act (CTA) enacted as part of the Anti-Money Laundering Act of 2020. The rule defines six categories of authorized recipients permitted to access the FinCEN BOI database — US federal agencies engaged in national security/intelligence/law enforcement, state/local/tribal law enforcement, foreign law enforcement and competent authorities (via intermediary federal agency), financial institutions using BOI for customer due diligence (CDD), federal functional regulators assessing financial-institution CDD compliance, and Treasury officers/employees. Access is to be phased in, beginning with a 2024 pilot for key federal agencies before extending to financial institutions and their supervisors. The rule establishes data-security standards, re-disclosure prohibitions, and oversight mechanisms governing each recipient category.

Ireland's Screening of Third Country Transactions Act 2023 (Act No. 28 of 2023), signed into law on 31 October 2023 and commenced on 6 January 2025 via S.I. No. 651 of 2024, establishes Ireland's first-ever mandatory inbound FDI screening regime. The Act empowers the Minister for Enterprise, Tourism and Employment to assess, condition, or prohibit transactions by third-country investors (non-EU/EEA/Switzerland) exceeding a EUR 2 million cumulative threshold in targets operating across critical infrastructure, critical technologies, dual-use items, supply of critical inputs, sensitive personal data, and media freedom. A 90-day standstill period applies during Ministerial determination, with criminal sanctions and transaction-voiding powers available for non-compliance.

Saudi Arabia's Personal Data Protection Law (PDPL), issued under Royal Decree M/19 (16 September 2021) and substantively amended by Royal Decree M/148 (27 March 2023), entered into force on 14 September 2023 with a one-year transition period that ended on 14 September 2024 — at which point the Saudi Data & Artificial Intelligence Authority (SDAIA) became the binding regulator with full enforcement powers. Alongside the Implementing Regulations and the Regulations on the Transfer of Personal Data Outside the Kingdom (both issued 7 September 2023), SDAIA published in 2024 a set of four pre-approved Standard Contractual Clauses templates (C2C, C2P, P2P, P2C) governing cross-border transfers. The regime establishes consent requirements, DPO appointment, a 72-hour breach notification duty, and prior-clearance / SCC-or-BCR-style conditions on personal-data exports out of Saudi Arabia.

Decree-Law No. 104 of 10 August 2023 ("Decreto Asset" / Omnibus Decree, GU n.186 of 10 Aug 2023, in force 11 Aug 2023) was converted with amendments into Law No. 136 of 9 October 2023 (GU n.236 of 9 Oct 2023). The conversion law materially expanded Italy's "Golden Power" foreign-direct-investment screening regime (DL 21/2012). Two key extensions: (i) intra-group transactions involving entities outside the EU are no longer exempt from the exercise of special powers — only the prior notification carve-out was preserved; (ii) acts, resolutions and operations concerning intellectual-property rights in artificial intelligence, semiconductor production, cybersecurity, aerospace, energy storage, quantum and nuclear technologies, and food production technologies fall within scope when one or more counter-parties sit outside the EU. The Prime Minister also obtained an explicit veto power over transactions creating "exceptional situations" not already covered by sectoral or EU prudential / merger rules, including those touching qualifying holdings in the financial sector.

President Biden signed Executive Order 14105 on 9 August 2023, "Addressing United States Investments in Certain National Security Technologies and Products in Countries of Concern", establishing the first dedicated US outbound-investment screening regime. The EO directs Treasury to prohibit or require notification of US investments in Chinese (and Hong Kong, Macau) entities engaged in three categories of technology: (1) semiconductors and microelectronics, (2) quantum information technologies, (3) artificial intelligence systems. After a public-comment process, Treasury issued the final rule (31 CFR Part 850) on 28 October 2024, effective 2 January 2025.

Luxembourg's Chambre des Députés adopted the first-ever national FDI-screening statute on 14 July 2023 (promulgated by the Grand Duke and published in Mémorial A n° 411 on 18 July 2023), entering into force 1 September 2023. The law requires non-EU investors to notify the Ministre de l'Économie before completing direct or indirect acquisitions of ≥25% voting rights / equity in Luxembourg entities engaged in "critical activities" across twelve sectors. The Minister can approve, conditionally approve, or prohibit transactions within a two-month initial screening window, with a further 60-day deep-review phase available; an inter-ministerial Comité de filtrage (Economy + Foreign Affairs + Finance + SREL intelligence service) advises on security and public-order grounds consistent with EU Regulation 2019/452.

The Foreign Investment Reliability Assessment Act (välismaise investori usaldusväärsuse hindamise seadus, VUHS), adopted by the Riigikogu on 25 January 2023 and in force from 1 September 2023, establishes Estonia's first horizontal ex-ante foreign direct-investment screening regime. The Act transposes EU Regulation 2019/452 into Estonian law and designates the Consumer Protection and Technical Regulatory Authority (Tarbijakaitse ja Tehnilise Järelevalve Amet — TTJA) as the screening authority. It covers acquisitions of qualifying holdings or material influence in target undertakings operating in defence, dual-use, vital services, energy and communications infrastructure, transport, financial services, media, critical raw materials extraction and other strategic sectors. TTJA can prohibit, condition or unwind non-compliant transactions and impose administrative non-compliance levies.