How Are Geopolitical Risk and National Security Reviews Reshaping Cross-Border AI M&A?

Capital now moves across borders under tighter political scrutiny than at any point in the past two decades. Artificial intelligence has intensified that scrutiny. Governments classify advanced semiconductors, data platforms, cloud infrastructure, and defence-linked software as strategic assets. As a result, cross-border M&A in AI and deep technology operates within a dense framework of national security reviews, export controls, sanctions, and industrial policy. 

Boards and deal teams have responded by embedding geopolitical risk modelling directly into transaction strategy. Approval probability, regulatory sequencing, and supply chain exposure now influence valuation, financing structures, and even target selection. 

National Security Screening as a Quantifiable Deal Factor

 

Foreign investment review has scaled materially across major economies. 

In the United States, the Committee on Foreign Investment in the United States reported in its 2022 annual report to Congress that it reviewed 286 covered notices and 154 declarations in that year. The Committee has authority under the Foreign Investment Risk Review Modernisation Act of 2018 to review certain non-controlling investments involving critical technologies, critical infrastructure, and sensitive personal data. 

In the European Union, the European Commission’s 2023 annual report on the screening of foreign direct investments states that Member States screened 423 transactions in 2022. Information and communication technologies represented a significant share of cases. The EU FDI Screening Regulation provides a cooperation framework among Member States and the Commission for transactions that may affect security or public order. 

In the United Kingdom, the government’s 2022-23 annual report under the National Security and Investment Act recorded 866 notifications in the first year of operation. AI, advanced materials, and data infrastructure fall within the Act’s mandatory notification sectors. 

These official figures demonstrate that regulatory review volume has increased across key jurisdictions. Cross-border deal teams now incorporate formal screening timelines and sector classifications into transaction planning. 

Semiconductor Transactions and Multijurisdictional Review 

Semiconductor and AI chip transactions have faced extensive cross-border scrutiny. 

In 2020, US-based Nvidia announced an agreement to acquire UK-based Arm Holdings from Japan’s SoftBank Group for US$40 billion. Regulatory authorities in the United Kingdom, the European Union, and the United States raised competition and national security concerns. In February 2022, Nvidia and SoftBank announced the termination of the transaction following these regulatory challenges. 

In May 2022, US-based Broadcom announced its agreement to acquire US-based VMware for approximately US$61 billion in equity value, or US$69 billion including debt. The transaction required approvals from multiple jurisdictions, including the European Commission and China’s State Administration for Market Regulation. Broadcom completed the acquisition in November 2023 after securing the necessary approvals. 

These cases show that large technology transactions require coordinated regulatory engagement across several jurisdictions. Public filings and regulatory decisions confirm that review processes can extend over many months and involve negotiated remedies. 

Export Controls and AI Supply Chains 

Export controls now shape the strategic context for AI-related M&A. 

In October 2022, the US Department of Commerce’s Bureau of Industry and Security introduced new export controls restricting China’s access to advanced logic and memory chips and specific semiconductor manufacturing equipment.

In October 2023, the Department expanded and updated those controls. These measures affect companies involved in advanced chip design and manufacturing, including US-based Intel and Advanced Micro Devices, which operate in global semiconductor markets. Public disclosures from these companies state that compliance with US export regulations is a material operational consideration. 

Cross-border acquisitions involving advanced computing chips, AI accelerators, or semiconductor manufacturing technologies, therefore, require formal analysis of export classification and licensing obligations under the US Export Administration Regulations. 

Data Governance and Cross-Border Technology Platforms

 

Data protection and cybersecurity frameworks add another regulatory layer to AI-related transactions. 

The European Union’s General Data Protection Regulation imposes requirements on the processing and cross-border transfer of personal data. Multinational technology companies structure regional operations to comply with these rules. US-based Microsoft and US-based Oracle Corporation have publicly announced sovereign cloud and regional cloud infrastructure initiatives in Europe to address regulatory requirements. 

Cross-border acquisitions in AI-enabled analytics, cloud computing, and enterprise software must account for jurisdiction-specific data transfer and cybersecurity rules. Regulatory approvals may involve competition authorities, foreign investment screening bodies, and data protection regulators, depending on transaction structure and business scope. 

Cross-Border Review Beyond Headline Deals 

Regulatory scrutiny also affects transactions below the mega-cap scale. 

In 2023, US-based Qualcomm completed its acquisition of Israel-based Autotalks after obtaining regulatory clearance, including approval from China’s State Administration for Market Regulation. Public reporting confirmed that the transaction required Chinese antitrust approval due to market overlap and revenue exposure. 

This example demonstrates that cross-border semiconductor transactions can trigger review in jurisdictions where the parties generate material revenue, even if neither party is headquartered in that country. 

Contractual Allocation of Regulatory Risk 

Public merger agreements in the foremost technology transactions show how parties allocate regulatory risk. 

The merger agreement between Nvidia and Arm included a reverse termination fee of up to US$1.25 billion payable by Nvidia under certain circumstances, as disclosed in public filings. Such provisions reflect quantified assessments of regulatory risk and approval uncertainty. 

Disclosure practices in large public transactions indicate that buyers and sellers negotiate terms for regulatory approvals, divestiture obligations, and termination rights. These contractual mechanisms form part of disciplined geopolitical risk management in cross-border M&A. 

Conclusion: Structured Execution in a Regulated Environment

 

Cross-border M&A in the AI era operates within a clearly defined regulatory architecture. Official data from the United States, the European Union, and the United Kingdom confirm sustained volumes of foreign investment screening in technology sectors. High-profile semiconductor and software transactions demonstrate the practical impact of multi-jurisdictional review, export controls, and competition law. 

Companies that integrate formal regulatory analysis into valuation, structuring, and approval sequencing enhance execution certainty. In a global technology landscape shaped by national security priorities, effective cross-border M&A depends on precise regulatory mapping. It also requires transparent engagement with authorities and disciplined contract structures anchored in publicly defined legal frameworks.