The UK NSIA: When to File a Voluntary Notification to Block the 5-Year Retrospective Call-In

The direct answer: the UK’s National Security and Investment Act 2021 (NSIA, in force from 4 January 2022) splits transactions into two buckets: MANDATORY notification for 17 sensitive sectors, and VOLUNTARY notification for everything else. The biggest trap is not mandatory notification — everyone knows when that applies — but this: for deals outside the mandatory net that still raise security questions, the UK government can “call in” (order a review of) the transaction RETROSPECTIVELY for up to 5 years after completion. Voluntary notification is the only tool that “locks” this retrospective power: once the government clears the deal, it cannot be called in later. For Vietnamese investors buying UK companies, technology or assets, the question is not “must I notify” but “should I voluntarily notify to buy certainty”.

Mandatory notification: the 17 sectors and the price of missing it

Mandatory notification applies when a deal results in holding more than 25%, more than 50% or 75% or more of shares/voting rights (or equivalent control) in a business active in 17 sensitive sectors: artificial intelligence, quantum, defence, energy, telecoms, digital infrastructure, synthetic biology and others on the list. The penalty for skipping a mandatory filing is severe: the transaction is VOID as a matter of law, criminal liability (up to 5 years’ imprisonment) and civil penalties (up to £10 million or 5% of global turnover, whichever is higher). Crucially, this applies to all acquirers, including domestic UK ones — no nationality distinction. A Vietnamese investor buying a UK AI startup, energy or telecoms company will almost certainly fall inside this net.

Voluntary notification: when to file — a decision matrix

Voluntary notification is for deals OUTSIDE the mandatory net that could still raise security concerns: acquisitions below 25% but conferring “material influence” (e.g. strategic veto rights, a board seat), purchases of sensitive assets (intellectual property, databases, land near defence sites), or deals in “grey” areas where it is unclear whether one of the 17 sectors is touched. The decision matrix has three questions: (1) does the deal touch anything in the 17 sectors — even one line of the target’s business; (2) does the buyer have features governments care about (state ownership, links to foreign governments); (3) is the asset sensitive enough in scale and nature. If the answer to any is “yes/unsure”, voluntary notification is usually the wise choice — the filing cost is far lower than the risk of a call-in after capital is committed.

The 5-year retrospective call-in: where the real risk sits

The UK government (through the Secretary of State) can call in any transaction raising security concerns — including completed ones — within 5 years of the deal (shortened to 6 months if the government already knew about it). After a call-in, the government can impose conditions, require partial divestment, or in extreme cases order a full unwind. For investors this is a risk “hanging” over the balance sheet for five years: lending banks, joint-venture partners and auditors may all probe it. A voluntary filing that secures clearance “locks” this risk — the government cannot call in an already-cleared deal. That is the value of a notification: legal certainty bought at relatively small administrative cost.

In practice: put NSIA on the UK acquisition checklist

First, screen for NSIA at the due-diligence stage — alongside competition review, not discovered on the eve of signing. Second, where the 17-sector boundary is unclear, take early UK counsel instead of self-concluding “probably not caught” — advice costs far less than a void transaction. Third, make “NSIA clearance” a condition precedent in the purchase agreement, just like merger clearance. Fourth, keep a full NSIA analysis file — if later challenged on why no filing was made, documented responsible assessment is an important shield.