CFIUS and foreign investment review for AI data center deals

In short

A foreign investment in a US AI data center can trigger review by the Committee on Foreign Investment in the United States, known as CFIUS, if it gives a foreign person control of a US business, or if it is a non controlling investment that provides access to material nonpublic technical information, membership or observer rights on the board or the right to nominate a director, or involvement in substantive decisionmaking in a business that deals with critical technology, covered investment critical infrastructure, or sensitive personal data. 50 U.S.C. § 4565(a)(4), 31 C.F.R. § 800.211 AI data centers routinely meet those criteria because AI is a controlled critical technology, AI data centers are increasingly viewed as critical infrastructure, and they often hold large volumes of sensitive personal information. The review process can take 45 days or more, and while most deals are cleared, some face mitigation agreements or, in rare cases, a presidential order to unwind the deal. The largest penalty to date, $60 million, and the first court enforcement of a divestment order were announced in August 2024 and filed in February 2026 respectively. CFIUS 2024 Annual Report, CFIUS 2023 Annual Report, CFIUS enforcement page, DOJ Complaint The 2025 America First Investment Policy and a proposed Known Investor Program are reshaping the process, making it faster for investors from allied countries while tightening scrutiny on adversary connected capital. America First Investment Policy, Known Investor Program RFI, Treasury press release

What is CFIUS and why does it matter for AI data center deals

CFIUS is an interagency committee chaired by the Treasury Secretary. Its nine voting members come from the major departments, including Treasury (chair), Defense, State, Justice, Commerce, Energy, Homeland Security, the US Trade Representative, and the Office of Science and Technology Policy. CRS In Focus IF10177 The committee’s authority comes from Section 721 of the Defense Production Act of 1950, codified at 50 U.S.C. § 4565. 50 U.S.C. § 4565

An AI data center deal matters to CFIUS for three reasons, all tied to a concept called an unaffiliated TID US business. A TID U.S. business is any U.S. business that produces, designs, tests, manufactures, fabricates, or develops one or more critical technologies, performs the functions as set forth in column 2 of appendix A to this part with respect to covered investment critical infrastructure, or maintains or collects, directly or indirectly, sensitive personal data of U.S. citizens. 31 C.F.R. § 800.248

First, the advanced semiconductors and AI software housed in these facilities are often subject to US export controls. That makes them critical technologies under the CFIUS rules. 31 C.F.R. § 800.215 Second, the AI data center itself can be critical infrastructure. 31 C.F.R. § 800.214, Appendix A to 31 C.F.R. Part 800 Third, an AI data center often maintains or collects sensitive personal data on more than one million individuals, including biometric and health data, and may thereby qualify as a TID U.S. business, bringing certain foreign investments within CFIUS jurisdiction. 31 C.F.R. § 800.241, 31 C.F.R. § 800.248, 31 C.F.R. § 800.211

So when a foreign investor puts money into a company that owns, operates, or develops AI data centers, the deal is likely to fall within CFIUS’s reach.

When does a foreign investment in an AI data center trigger review

A foreign investment can trigger CFIUS review in three main paths. First, if the foreign person gets control of a US business. Second, if the investment is a covered investment in a TID US business. Third, if the transaction involves real estate near a sensitive military site.

Path one, control of a US business

Control means the power, direct or indirect, whether or not exercised, through the ownership of a majority or a dominant minority of the total outstanding voting interest in an entity, board representation, proxy voting, a special share, contractual arrangements, formal or informal arrangements to act in concert, or other means, to determine, direct, or decide important matters affecting an entity. 31 C.F.R. § 800.208 It does not require a majority stake. A minority interest can give control if the foreign investor gets board seats and veto rights over the budget, senior hires, or major contracts. A sovereign wealth fund that buys a 30 percent stake and places two members on the board almost certainly has control, even if it does not own the company outright.

Path two, covered investment in a TID US business

Even when there is no control, a minority investment can be covered if the US business is a TID US business and the foreign investor gains one of three things. The three things are access to material nonpublic technical information, a board seat, observer right, or director nomination right, or involvement, other than through voting of shares, in substantive decisionmaking about critical technologies, covered investment critical infrastructure, or sensitive personal data. 31 C.F.R. § 800.211

For an AI data center operator, all three prongs of TID are often met. The chips and AI software are export controlled, so they count as critical technology. The facility is part of the nation’s computing backbone, so it can be critical infrastructure. And the operator almost certainly holds huge volumes of customer data. So if a foreign investor takes a 10 percent stake and gets a board observer right, or even a detailed technical briefing, that deal may be a covered investment and must be reported to CFIUS if a mandatory filing rule applies.

Path three, real estate near a military installation

A foreign person buying or leasing land near a sensitive US military site can trigger a separate CFIUS review, even if no US business is acquired. 31 C.F.R. Part 802 The rules apply to real estate within one mile of many listed military installations, and for some installations the radius extends to 99 miles. 31 C.F.R. § 802.211, 31 C.F.R. § 802.203, 31 C.F.R. § 802.217 In November 2024, Treasury added 59 military installations to the list and expanded the radius for eight more. Treasury A greenfield AI data center campus planned on land within one of these zones faces CFIUS review solely because of where the land sits.

Mandatory filings and the 25 percent rule

Most CFIUS filings are voluntary, but two situations require a mandatory declaration. A mandatory declaration is required when a foreign person in which the national or subnational governments of a single foreign state (other than an excepted foreign state) have a substantial interest acquires a substantial interest (25 percent or greater voting interest), directly or indirectly, in a TID US business. 31 C.F.R. § 800.401, 31 C.F.R. § 800.244, 31 C.F.R. § 800.221 The voting interests of all agencies and instrumentalities of a single foreign government are added together for this test. 31 C.F.R. § 800.244 So if a sovereign wealth fund from one country and a state owned bank from the same country each acquire a 15 percent stake in the same TID US business, they cross the 25 percent line together and must file. A mandatory declaration is also required when a covered transaction involves a TID US business that produces, designs, tests, manufactures, fabricates, or develops one or more critical technologies for which a U.S. regulatory authorization would be required for the export, reexport, transfer (in-country), or retransfer of such critical technology to certain foreign persons involved in the transaction. 31 C.F.R. § 800.401

What happens without a filing

Parties can choose not to file a voluntary notice, but CFIUS can discover the transaction later. In 2024, CFIUS formally opened inquiries into 76 non notified transactions, up from 60 in 2023, and requested filings for 12 of them. CFIUS 2024 Annual Report There is no statute of limitations. A deal closed years ago without a filing can be reopened, penalized, and ultimately unwound, as the Jupiter Systems case shows.

How the CFIUS review process works

A party can start the process by submitting either a short declaration or a full joint voluntary notice. A declaration is about five pages long. CFIUS must act on it within 30 days. It can clear the deal, ask for a full notice, inform the parties it cannot conclude action and invite a full notice, or initiate a unilateral review. Treasury CFIUS FAQ, 31 C.F.R. § 800.407 In 2024, 116 declarations were filed. CFIUS 2024 Annual Report

A full notice starts a 45 day national security review. If CFIUS still has concerns after that review, it can extend the process with a 45 day investigation. In extraordinary circumstances, the investigation can be extended by another 15 days. 50 U.S.C. § 4565(b) In 2024, a notice review took an average of 46.5 days to close, and an investigation took an average of 87.5 days. CFIUS 2024 Annual Report

Four possible outcomes

At the end of the review and investigation, CFIUS can clear the transaction without conditions. It can clear the transaction after the parties agree to mitigation measures. It can refer the transaction to the President with a recommendation to block it. Or it can ask the parties to abandon the deal voluntarily.

If the case reaches the President, the President has 15 days to decide whether to suspend or prohibit the transaction. The President may exercise this authority only if the President finds credible evidence that the foreign person might take action that threatens to impair national security and that provisions of law other than this section and the International Emergency Economic Powers Act do not, in the judgment of the President, provide adequate and appropriate authority. 50 U.S.C. § 4565(d)(4) The President’s decision is final and cannot be reviewed by any court. 50 U.S.C. § 4565(e)(1)

Confidentiality and the black box

By law, information filed with CFIUS is exempt from public disclosure under the Freedom of Information Act, and CFIUS does not publicly confirm or deny that a transaction has been notified to CFIUS. 50 U.S.C. § 4565(c), Treasury CFIUS Overview, CFIUS Overview, CFIUS Overview, Treasury CFIUS Overview That means a deal can be under review without the parties or the public knowing, unless someone leaks the information. It also means that dealmakers cannot easily predict how CFIUS will treat a similar transaction because past unreported outcomes are invisible.

Enforcement has sharpened over the last two years

The pace and severity of CFIUS enforcement have increased markedly. As of year end 2024, CFIUS was actively monitoring 242 mitigation agreements and conditions. CFIUS 2024 Annual Report Site visits to check compliance jumped to 79 in 2024 from 43 the year before. CFIUS 2024 Annual Report Four civil penalties were assessed for mitigation breaches, including a record $60 million penalty. CFIUS 2024 Annual Report Under § 800.901, maximum penalties depend on the violation type. For material misstatements or omissions the maximum is $5,000,000 per violation. For failure to file the maximum is the greater of $5,000,000 or the transaction value. For mitigation agreement violations the maximum is the greater of $250,000 or the transaction value per violation (for violations of agreements entered into on or after December 26, 2024, the greatest of $5,000,000, the value of the person’s interest in the U.S. business or its parent at the time of the transaction, the value of that interest at the time of the violation or the most proximate practicable time, or the value of the transaction filed with the Committee). 31 C.F.R. § 800.901 A final rule effective December 26, 2024 also expanded CFIUS’s subpoena power and gave it the ability to set deadlines for responding to mitigation proposals. Federal Register

Two landmark enforcement cases

Two recent cases illustrate the reach and the risks better than any summary.

MineOne, Cheyenne, Wyoming. In May 2024, President Biden ordered MineOne Partners Limited, a company ultimately majority owned by Chinese nationals, to divest a 12-acre property it had bought in 2022. The land sat within one mile of Francis E. Warren Air Force Base, home to Minuteman III intercontinental ballistic missiles. MineOne had built a cryptocurrency mining facility there and installed foreign made specialized equipment. CFIUS learned of the deal through a public tip. The President’s order required the land to be sold within 120 days and the equipment removed within 90 days. This was the first presidential prohibition under CFIUS real estate rules. Law firm analysis, MineOne Executive Order, Law firm analysis

The lesson for AI data center developers is clear. A piece of land near a sensitive base can be caught even if the facility does no classified work. The ultimate beneficial owner matters, not just the immediate shell company. And CFIUS can act on a tip from a private party.

Jupiter Systems / Suirui Group. In July 2025, President Trump ordered Suirui Group, a Chinese company, and its Hong Kong subsidiary to divest all interest in Jupiter Systems, a California company whose video communications hardware and software is used by the CIA, NSA, and NASA. The acquisition happened in 2020 and was never filed with CFIUS. CFIUS determined that Chinese ownership could let an adversary access or compromise products deployed in sensitive environments. After two extensions, Suirui failed to meet the February 2026 divestment deadline. In February 2026, the Department of Justice filed the first federal court complaint to enforce a CFIUS divestment order. The lawsuit asked the court to appoint a third party to take control of Jupiter’s assets and sell them. DOJ Complaint, DOJ Press Release, Jupiter Systems, Law firm analysis

This case shows that a non notified deal can be unwound years later, and the US government is willing to litigate to force a sale when an owner refuses.

Large AI data center fundings under CFIUS review

Several high profile AI data center investments in 2025 illustrate how CFIUS affects real deals. The $40 billion acquisition of Aligned Data Centers by a consortium that includes BlackRock’s GIP, MGX of Abu Dhabi, Microsoft, Nvidia, and the Artificial Intelligence Infrastructure Partnership is under CFIUS review because of the Abu Dhabi involvement, with closing expected in the first half of 2026. Aligned Data Centers press release, The Open Record, Industry analysis The Vantage Data Centers $9.2 billion equity raise was led by DigitalBridge and Silver Lake and closed in June 2024. LinkedIn report These cases show that foreign sovereign capital, especially from the Middle East, is a central part of the AI data center buildout, and CFIUS review is an expected step for such deals.

The 2025 America First Investment Policy and the Known Investor Program

In February 2025, President Trump issued the America First Investment Policy, a national security memorandum that directs CFIUS to change how it screens foreign investment. America First Investment Policy The policy has four main effects.

Allies and adversaries are treated differently. The policy defines foreign adversaries as China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, and the regime of Nicolás Maduro in Venezuela. America First Investment Policy Investors from close allies and partners get a smoother path. Any connection to an adversary country draws heightened scrutiny and makes mitigation or prohibition more likely.

Mitigation agreements must be time limited. CFIUS is directed to prefer concrete steps that an investor can complete within a set period, rather than open ended compliance obligations that last forever. America First Investment Policy

The list of critical technologies will grow. The policy calls for expanding the scope of emerging and foundational technologies addressable by CFIUS. America First Investment Policy

A fast track for frequent clean filers. The policy directs CFIUS to create a fast track process for investors from allied countries who can demonstrate they are insulated from foreign adversaries. The Known Investor Program, described below, is the vehicle for that fast track.

The Known Investor Program

To implement the fast track, Treasury announced a pilot in May 2025 and published a formal request for information in February 2026. Comments are open through March 18, 2026. Known Investor Program RFI The program would pre qualify frequent foreign investors who meet a detailed set of criteria. An eligible investor must have submitted at least three distinct covered transactions or covered real estate transactions to CFIUS in the past three years with at least one where CFIUS concluded all action or was unable to conclude action based on a declaration, expect another within 12 months, have no headquarters or principal place of business in an adversary country, have no material misstatements or mitigation violations in the past five years, not be on any of the Entity List, SDN List, NS-CMIC List, SSI List, Military End User List, or 1260H List, limit adversary country ownership to 10 percent (by listed parties or adversary governments) or 25 percent (by adversary country entities or nationals), have no board members or officers who are principally located in or nationals of an adversary country, and employ no more than 50 percent of its employees in adversary countries. Known Investor Program RFI

Investors who qualify would presumably face a shorter review or lighter information requests. However, the February 2026 RFI does not promise to change the statutory review periods. Law firm analysis About 70 percent of covered transactions reviewed over the past five years were approved in the initial phase, and more than 90 percent were ultimately approved. Known Investor Program RFI The goal is to make that fast approval routine for the right investors.

The Known Investor Program is a concept at the comment step. No application process is live, and the final eligibility rules could change. But for a sovereign wealth fund or a large foreign infrastructure investor that does many deals, preparing to meet the criteria is a sensible step now.

Outbound investment restrictions, the reverse CFIUS

While CFIUS screens money coming into the US, a separate program under Executive Order 14105 restricts US persons from investing in certain technology sectors in China, Hong Kong, and Macau. Effective January 2, 2025, the program prohibits or requires notification of US investments in semiconductors and microelectronics, quantum information technologies, and artificial intelligence in those regions. EO 14105, Final rule For an AI data center developer, this means that a deal with a Chinese tech firm or a joint development project that sends capital or technology to China may need a separate analysis.

State level restrictions add another layer

Several states have moved to restrict foreign involvement in AI data centers beyond what CFIUS requires. Florida has proposed legislation that would bar foreign controlled data centers entirely. Illinois and Indiana have also proposed or enacted restrictions on construction by entities tied to foreign adversaries. IL SB0094, IN SB0431 The current status of these bills varies, with Indiana’s restriction effective July 1, 2025 and the Illinois and Florida measures still moving through their legislatures, but the direction is clear. Even if CFIUS clears a deal, a state law could block the project.

Key numbers from the 2024 CFIUS Annual Report

CFIUS 2024 Annual Report, CRS Report

Practical steps for deal counsel and developers

Given the reach of CFIUS and its enforcement climate, anyone structuring a foreign investment in a US AI data center should take these concrete steps.

Screen early for the three triggers. Before a term sheet is signed, map whether the deal gives the foreign investor control, whether a minority stake crosses the covered investment line because the target is a TID US business and the investor gets board access, and whether the land sits inside a military radius. If the answer is yes to any of those, assume CFIUS will care.

Map the ultimate beneficial owners. CFIUS looks through corporate layers. A fund based in the Cayman Islands but controlled by investors from a listed adversary country is adversary connected. Even a small passive investor from China can raise flags.

Think about structuring to reduce TID status. While not always possible, parties can sometimes separate a business unit that handles classified government work from the rest of the company before a foreign investment, or use clean teams to shield sensitive technical information from foreign investors who do not need it. These measures can sometimes keep a non controlling investment outside CFIUS jurisdiction.

Build CFIUS timing into the deal calendar. A full notice review takes 45 days, an investigation adds up to 45 days more, and a possible 15 day extension plus presidential review can push the total past 100 days. For a target that serves the Department of Defense, expect the investigation phase. Do not schedule a closing 60 days out and assume clearance.

Prepare for mitigation. If the deal involves a sovereign wealth fund or an investor from a non allied state, expect CFIUS to ask for mitigation. That could mean limiting the investor’s access to certain technical data, appointing an independent security officer, or separating the investor from board decisions that touch sensitive US government contracts. The 2025 policy says mitigation should be time limited and concrete, which may reduce the burden but also demands clear, measurable steps.

Do not skip filing and hope CFIUS never learns. As Jupiter and MineOne show, a deal closed without filing remains open to review forever. The cost of a forced divestment years later, plus penalties, far exceeds the cost of a thorough upfront review.

Check state law for the build location. For a greenfield build, confirm whether the state imposes any foreign ownership restriction on AI data centers, particularly if the investor is from an adversary country. Local counsel in each proposed build state is necessary.

Remember the outbound side. If the deal also involves investing in or providing technology to a Chinese AI company, the Outbound Investment Security Program may require notification or may block the US person’s involvement altogether.

Key takeaways

• A foreign investment in a US AI data center can trigger CFIUS review not only through control but also through many minority stakes that give board seats or access to sensitive technical information.
• AI data centers are routinely TID US businesses because of export controlled technology, critical infrastructure status, and the huge volumes of personal data they handle.
• A land purchase for a new AI data center campus within one mile of a listed military installation, and up to 99 miles for some installations, is subject to separate CFIUS real estate review.
• Government connected foreign investors and sovereign wealth funds face mandatory filing requirements when they acquire 25 percent or more of a TID business, and their deals often go to full investigation.
• CFIUS enforcement has escalated, with 242 active mitigation agreements, record penalties up to $60 million, and the first court action to enforce a divestment order.
• The America First Investment Policy in 2025 creates a two tier system. Faster treatment for allied investors, heightened scrutiny for adversary linked capital.
• The Known Investor Program, while not yet operational, offers a path for frequent clean filers to receive expedited review. Its eligibility criteria are a useful benchmark for deal structuring.
• Non notified deals remain reviewable indefinitely. CFIUS actively hunts for them, opening 76 formal inquiries in 2024 alone.
• State level foreign investment restrictions on AI data centers are emerging and can add a second prohibition even if CFIUS clears a deal.

Frequently asked questions

Q:Does a minority investment in an AI data center always trigger CFIUS review?

A:No. CFIUS review is not automatic unless a filing is mandatory. But a minority investment can be a covered transaction if the US target is a TID US business and the foreign investor gets board rights, observer rights, or access to material nonpublic technical information. A purely passive investment with no governance rights and no access to sensitive information may fall outside CFIUS jurisdiction. The facts must be checked carefully.

Q:What is a TID US business and why does it matter?

A:TID stands for technology, infrastructure, and data. A US business qualifies as a TID US business if it produces, designs, tests, manufactures, fabricates, or develops critical technologies, if it performs the functions set forth in column 2 of appendix A with respect to covered investment critical infrastructure, or if it maintains or collects, directly or indirectly, sensitive personal data of U.S. citizens. Once a business is a TID US business, even a non controlling investment can trigger CFIUS if the foreign investor gains certain access rights. 31 C.F.R. § 800.248, 31 C.F.R. § 800.211

Q:Are investments from Canada the UK and Australia treated differently?

A:Yes. These three countries, plus New Zealand under the Five Eyes framework, are excepted foreign states under the CFIUS regulations. That means transactions by their investors are exempt from the expanded jurisdiction over non controlling TID investments and real estate only transactions. However, the exception also includes covered transactions under 31 C.F.R. part 800 that involve covered real estate. A separate prong of the exception covers transactions by an excepted real estate investor, who must meet the criteria in 31 C.F.R. § 802.215. 31 C.F.R. § 800.218, 31 C.F.R. § 800.219, 31 C.F.R. § 800.211, 31 C.F.R. § 802.216, 31 C.F.R. § 802.216, Treasury CFIUS FAQ, 31 C.F.R. § 800.304

Q:What happens if CFIUS asks for mitigation?

A:The parties negotiate a set of measures. These may include limiting the foreign investor’s access to certain technical information, requiring a US government approved security officer at the company, restricting the location of certain work, or giving the US government a right to review certain business decisions. Under the 2025 America First Investment Policy, CFIUS is directed to prefer concrete measures that can be completed within a set time, rather than open ended obligations that last forever. America First Investment Policy If the parties cannot agree, CFIUS may recommend that the President block the deal.

Q:Can a deal that closed years ago be reviewed by CFIUS?

A:Yes. There is no statute of limitations on CFIUS jurisdiction over non notified transactions. The Jupiter Systems acquisition closed in 2020 and was ordered unwound in 2025. DOJ Complaint CFIUS regularly screens closed transactions and can open an inquiry at any time. If a deal was not filed and CFIUS later determines it threatens national security, it can compel a filing and seek divestment.

Q:What is the difference between a declaration and a notice?

A:A declaration is a short filing, about five pages, that CFIUS must act on in 30 days. It is used for simpler transactions or as a test of whether CFIUS will have concerns. A notice is a longer, more detailed filing that starts the 45-day review clock. Most parties use a declaration when possible because it is faster and cheaper. But if CFIUS does not clear the deal within 30 days, the parties must submit a full notice.

Q:Does CFIUS disclose whether a specific deal is being reviewed?

A:No. By law, information filed with CFIUS is exempt from public disclosure under FOIA, and CFIUS does not confirm or deny the existence of any review. 50 U.S.C. § 4565(c) The process remains confidential unless a party or a journalist reveals it. However, the mere fact of a pending review can surface in commercial negotiations.

Q:How does the Known Investor Program work?

A:The program is not yet operational, it is in the public comment phase through March 18, 2026. The proposed design would allow frequent foreign investors who meet strict eligibility criteria to receive faster or streamlined CFIUS review. The criteria require a clean CFIUS history, strict limits on adversary country ties, and a certain volume of past filings. Known Investor Program RFI Actual timeline reductions are not guaranteed.

Q:Are there state laws that could block a foreign AI data center even if CFIUS approves?

A:Yes. Florida has proposed legislation to bar foreign controlled data centers. Illinois and Indiana have proposed or enacted similar restrictions. News report Indiana’s restriction took effect July 1, 2025, while the Illinois and Florida bills are still in process, so the exact status of these laws should be checked. Local counsel in each proposed build state is necessary.

Q:Is a sovereign wealth fund from the Middle East considered a foreign government for CFIUS?

A:Yes. A sovereign wealth fund is an instrumentality of a foreign government. If the fund acquires 25 percent or more voting interest in a TID US business, the deal triggers a mandatory declaration. Even below 25 percent, an SWF investment can still be a covered control transaction or a covered investment if it gets board seats or access to sensitive information. CFIUS reviews SWF deals closely, and the number of active CFIUS mitigation agreements has roughly quadrupled in the last decade. CFIUS practice note, GAO report on CFIUS mitigation

Subscribe to The Compute Law Brief

The Compute Law Brief is a free weekday newsletter on the law of AI infrastructure across tax, real estate, construction, power, and deals. The big US build markets and federal law. Three minutes a morning. No paywall, and no email gate to read the blog. Subscribe if you want it in your inbox.

Junde Liu, JD, LL.M. (Taxation) candidate at UF Law. Originally published on Compute Law Blog. This article is general information and does not constitute legal advice. Reading it does not create an attorney client relationship. The reader should not act on the basis of any content here without first consulting a licensed attorney in the relevant state. Last reviewed for accuracy May 23, 2026.