Current as of: September 3, 2026. This article reflects a pending legislative proposal, statutory authorities, and administrative practice available as of the date above. The proposal remains subject to congressional debate, amendment, and secondary rulemaking, and the analysis may not apply the same way to every transaction.
Mexico Proposes National-Security Screening for Foreign Acquisitions: What Cross-Border Deal Teams Need to Know
On August 28, 2026, President Claudia Sheinbaum signed an initiative to amend Mexico's Foreign Investment Law (Ley de Inversión Extranjera). The Interior Ministry transmitted it to the Senate on August 30, and on September 2, 2026, the Senate referred it to the Joint Committees on Economy and Legislative Studies, First. The bill would replace the current one-sentence national-security provision with a dedicated review framework. For the first time, Mexico would have a defined trigger, a filing procedure, and statutory deadlines for reviewing inbound acquisitions on national-security grounds.
For US companies acquiring Mexican operating businesses, Mexican sellers and family offices, and the sponsors and lenders behind those deals, the practical questions are timing, closing conditions, and deal certainty. The proposal borrows the vocabulary of the Committee on Foreign Investment in the United States (CFIUS), but its jurisdictional test and procedure differ in ways that can change how a US-Mexico deal is structured and papered.
Key Points
Mandatory pre-closing clearance would turn on three cumulative conditions. A foreign investor acquires, directly or indirectly, more than 49% of a Mexican company's capital stock; the target's total assets exceed a threshold the National Foreign Investment Commission (Comisión Nacional de Inversiones Extranjeras, CNIE) has yet to set; and the target operates in a designated sensitive sector.
The sector list is broad and expandable. It covers strategic physical or virtual infrastructure, critical and dual-use technologies, fundamental inputs and food security, and access to sensitive personal data, plus any analogous activity CNIE designates by general resolution.
The clock is 60 business days, and silence means denial. CNIE may pause the clock once for an information request and extend it once for up to 30 business days. If no resolution issues in time, the application is deemed denied (negativa ficta), unlike the approval-by-silence rule that currently applies to ordinary CNIE applications.
The test is a bright-line equity percentage, not functional control. Unlike CFIUS after the Foreign Investment Risk Review Modernization Act of 2018 (FIRRMA), the bill does not reach minority investments with governance rights, does not expressly authorize review of non-notified or completed deals, and provides no post-closing divestiture mechanism.
Penalties are material. Transferring shares after a denial or without a required clearance, or breaching mitigation conditions, would carry fines of 5,000 to 200,000 times the daily Unit of Measure and Update (Unidad de Medida y Actualización, UMA), roughly MXN 0.6 million to MXN 23 million at 2026 values.
I. The Mandatory Filing Trigger
Proposed Article 30 Bis would require a favorable prior resolution from CNIE when three conditions coincide:
Equity above 49%. Foreign investment would participate, directly or indirectly, in more than 49% of the capital stock of a Mexican company.
Asset threshold. The target's total assets, measured when the request is filed, exceed an amount CNIE must set by general resolution and publish within 180 calendar days after the decree is published.
Sensitive sector. The target's economic activity falls in one of five categories: strategic physical or virtual infrastructure (energy, transportation, health, communications, mining, data processing and storage, digital systems, aerospace, defense, sensitive facilities, and land indispensable to them); critical and dual-use technologies (artificial intelligence, robotics, semiconductors, cybersecurity, aerospace and defense, energy storage, quantum, nuclear, nanotechnology, and biotechnology); fundamental inputs such as energy and raw materials, plus food security; access to or control of sensitive personal data; or any analogous activity CNIE designates by general resolution.
Where foreign participation exceeds 49% but the target's assets fall below the threshold, the parties could file voluntarily. The bill text creates no filing route for stakes at or below 49%. The asset threshold is the largest open variable: until CNIE publishes it, mid-market acquisitions in covered sectors cannot know whether they fall inside the mandatory regime. Commentators read the bill as reaching later stake increases and foreign-to-foreign transfers of a Mexican subsidiary, a point to confirm against the final text.
II. Procedure, Timelines, and the Silence Rule
Proposed Articles 30 Ter through 30 Sexties would introduce mechanics that reach directly into deal documentation:
Joint filing. The Mexican target and the foreign investor would file together with CNIE's Technical Secretariat.
60 business days. Within the first 20 business days CNIE may issue one information request, which suspends the clock for a response period of 5 to 30 business days. A failure to respond results in dismissal of the filing. CNIE may also grant itself one reasoned extension of up to 30 business days.
Deemed denial. If the deadline passes without a resolution, the request is deemed denied. Today, Article 28 of the Foreign Investment Law deems a CNIE application approved if the Commission does not act within 45 business days. The bill would keep that rule for ordinary Article 8 and Article 9 filings and reverse it for national-security filings, placing the cost of any backlog on the parties.
Three outcomes. CNIE could clear the transaction, clear it subject to mitigation measures with periodic reporting, or block it. The bill sets no closed list of permissible conditions.
A security-heavy Commission. Article 23 would add the heads of National Defense (SEDENA), the Navy (SEMAR), and Security and Citizen Protection (SSPC) as voting members alongside the ten current secretaries. The Attorney General's Office (FGR), the National Intelligence Center (CNI), the Tax Administration Service (SAT), and the Financial Intelligence Unit (UIF) would attend national-security sessions with voice but no vote. Members could not abstain on those votes.
US-Mexico overlay. For a US buyer, joint filing makes the Mexican seller a necessary party to the regulatory workstream. For a Mexican seller, negativa ficta turns a slow Commission into a seller-side closing risk as much as a buyer-side one.
III. How the Proposal Compares to CFIUS
The bill is narrower than post-FIRRMA CFIUS on nearly every jurisdictional axis:
Control versus percentage. CFIUS jurisdiction turns on foreign control of a US business, assessed functionally through board seats, veto rights, and contractual levers. The Mexican bill turns only on equity above 49%.
Minority investments. Under 31 C.F.R. Part 800, CFIUS reviews certain non-controlling investments in US businesses involved in critical technologies, covered investment critical infrastructure, or sensitive personal data (TID businesses) when the investor obtains material nonpublic technical information, board or observer rights, or a role in substantive decision-making. The Mexican bill has no equivalent.
Non-notified and completed deals. CFIUS may call in transactions the parties did not file, backed by a Treasury monitoring and enforcement office and the President's authority under 50 U.S.C. § 4565(d) to suspend, prohibit, or seek divestment. The Mexican bill relies on fines and has no express call-in or unwind mechanism.
Standalone real estate. 31 C.F.R. Part 802 covers purchases, leases, and concessions of real estate at or near covered airports and maritime ports and near listed military installations, with no operating business required. The Mexican bill reaches real estate only as part of covered infrastructure in an acquisition above 49%.
Analytical standard. CFIUS decisions rest on a risk-based analysis of threat, vulnerability, and consequence under 31 C.F.R. § 800.102, as elaborated by Executive Order 14083. The Mexican bill refers to national-security risk in general terms and leaves the standard to CNIE.
IV. Practical Considerations for Cross-Border M&A and Nearshoring
The following points are illustrative. Not every point applies to every deal, and the bill may change before enactment.
a) Timetables and antitrust coordination
A clean review may take about three months. A filing that absorbs the full 60 business days plus a 30-day suspension and a 30-day extension can run roughly 120 business days, close to six months with Mexican holidays. Parties may want to run the CNIE process in parallel with any merger control filing before the Federal Economic Competition Commission (COFECE).
b) Purchase agreement drafting
Because regulatory silence would produce a statutory denial, a stock purchase agreement cannot rely on deemed-clearance language for this filing. Provisions likely to need attention include efforts covenants that bind both buyer and seller to the joint filing; outside dates that accommodate the full timeline, including suspension and extension; and express allocation of the risk that CNIE conditions clearance on mitigation measures, including whether burdensome conditions permit a walk-away.
c) Governance and minority structures
Joint ventures and minority growth investments would fall outside the mandatory trigger even in sensitive sectors. The bill has no express anti-circumvention rule, but CNIE's power to designate additional activities, the expanded sanctions, and Mexico's general doctrines on simulated acts leave room for scrutiny of structures that split equity to avoid the threshold while conferring control. Lenders may also want to confirm whether a share pledge enforcement or debt-to-equity conversion could itself cross the 49% line.
V. What to Watch
Three milestones will determine the commercial effect of the proposal: committee markups and floor amendments in the Senate, including whether lawmakers add a functional-control definition, a minority-investment prong, or anti-circumvention language; passage by the Chamber of Deputies, promulgation, and publication in the Official Gazette (Diario Oficial de la Federación); and CNIE's general resolution setting the asset threshold, due within 180 calendar days after publication of the decree.
We will continue to monitor the initiative and report on developments that affect cross-border transaction structuring.
Related Insights and Capabilities
For related cross-border transaction context, see Asset vs. Stock: Structuring the Deal for Mexican Acquirers, Seller Financing in Cross-Border M&A, and Structuring Your Mexican Subsidiary. For broader transaction context, see M&A and Strategic Transactions. Readers evaluating a transaction should consult a lawyer licensed in the relevant jurisdiction.
This post is for informational purposes only and is not legal or tax advice. This Insight is provided by Hiro Law for general informational and educational purposes only. It does not constitute investment or other professional advice and should not be relied upon as such. No attorney-client relationship is created by your receipt of or access to this material. The information contained herein may not reflect the most current legal developments and is not guaranteed to be complete, correct, or up to date. You should not act or refrain from acting based on any information in this Insight without first seeking qualified counsel licensed in the relevant jurisdiction(s). Each cross-border transaction, investment, and compliance matter involves unique facts and circumstances that require individualized analysis. Prior results do not guarantee a similar outcome.