Don’t do SECURITY. Do business SECURELY.

National Security and Investment Act 2021 comes into force

New mandatory notification requirements apply to acquisitions in 17 sensitive sectors, including data infrastructure, AI and cryptographic authentication.

The National Security and Investment Act 2021 comes into force today, giving the UK Government wide powers to scrutinise and intervene in acquisitions that could harm national security.

Acquisitions of entities active in 17 sensitive sectors require mandatory notification and approval before completion. The sectors include:

  • Data infrastructure
  • Communications
  • Computing hardware
  • Artificial intelligence
  • Cryptographic authentication
  • Suppliers to the emergency services

Transactions completed without required approval are void. Technology and cyber security businesses considering investment, mergers or acquisitions should take advice early, and should be ready to evidence their security posture during due diligence.

Source: National Security and Investment Act 2021 (legislation.gov.uk)

This update is general information, not legal advice. If you would like help assessing the impact on your information security or privacy programme, contact us.

More insights