CFIUS Formalizes Its Enforcement and Penalty Process
Client Alert | 2 min read | 10.27.22
On October 20, 2022, the Committee on Foreign Investment in the U.S. (CFIUS) adopted long-awaited CFIUS Enforcement and Penalty Guidelines (the “Guidelines”) identifying how it will review and consider three categories of non-compliances that may be subject to penalties:
- Failure to file a mandatory declaration or notice, when applicable;
- Non-compliance with a CFIUS mitigation agreement, condition, or order; or
- Material misstatements, omissions, or false certifications in connection with CFIUS filings.
Depending on the category of the violation and the circumstances, the underlying statute affords CFIUS a range of remedies such as imposing civil penalties of up to $250,000 or the value of the transaction (whichever is greater), directing the parties to file a declaration or notice, negotiating additional mitigation, or ordering the divestment of some or all of the U.S. business involved. In addition, CFIUS may refer conduct to other government enforcement authorities where appropriate.
The Guidelines identify the sources of information from which CFIUS may learn and investigate potential violations, including, significantly, a “tips line” on its website for anyone to report apparent violations. The Guidelines also set forth a process under which CFIUS will provide the person subject to penalties (“Subject Person”) 15 business days to respond to a notice detailing the reason for the proposed penalty and penalty amount, before the final penalty is assessed. Of particular importance in such a response will be the list of aggravating and mitigating factors that CFIUS will consider in determining whether to impose a penalty and the appropriate amount, such as the extent of the harm to national security, the willfulness of the non-compliance, and whether the Subject Person submitted a timely self-disclosure and cooperated with CFIUS’s review.
To date, CFIUS has only publicly disclosed two penalties it has imposed: (1) a $1,000,000 penalty in 2018 for breach of a 2016 mitigation agreement and (2) a $750,000 penalty in 2019 for violating a 2018 interim order. Although it remains to be seen whether publication of the Guidelines foretells an increased willingness by CFIUS to impose penalties, it certainly underscores the mitigating value of voluntary self-disclosures and working closely with the CFIUS Monitoring & Enforcement office if compliance issues do arise.
The publication of the Guidelines follows a September 15, 2022 executive order issued by the Biden Administration that specifically identified certain additional national security factors for CFIUS to consider when evaluating transactions involving foreign investors.
Contacts
Insights
Client Alert | 5 min read | 07.20.26
On July 6, 2026, the U.S. Department of Justice (DOJ) and the U.S. Department of Homeland Security (DHS) published an Interim Final Rule (IFR) setting up a new federal framework that allows state, local, Tribal, and territorial (SLTT) law enforcement and correctional agencies to detect, track, and, in some cases, disable or seize drones. The rule directly affects SLTT agencies looking to stand up counter-drone programs, as well as drone and counter-drone technology companies whose products will be subject to federal review and approval. Although the IFR bypassed the Administrative Procedure Act’s standard notice-and-comment process on good cause grounds — citing the statutory 180-day deadline and urgent public safety needs — the rule is already legally binding and effective as of July 1, 2026. The Departments are nonetheless accepting post-promulgation comments through September 4, 2026.
Client Alert | 3 min read | 07.20.26
QFMA Introduces International Licensing Regime for Financial Services Firms
Client Alert | 3 min read | 07.17.26
Client Alert | 2 min read | 07.15.26
CMMC Phase II Suspension Requires Reconsideration of Such Requirements in Solicitations



