In early 2023, the Act on security screening of investments, mergers and acquisitions (in Dutch: Wet Veiligheidstoets investeringen, fusies en overnames, “Vifo Act”) will enter into force. The Vifo Act aims to manage risks to national security arising from investments, mergers and acquisitions (“investment activities”).

Under the Vifo Act, investment activities in companies providing certain designated critical activities (“vital providers”), managers of business campuses and in companies that provide sensitive technology must be notified to the Bureau for Verification of Investments (in Dutch: Bureau Toetsing Investeringen, “BTI”), part of the Ministry of Economic Affairs and Climate, for a safety check of risks to national security and related interests. This new obligation to notify certain investment activities exists in addition to the obligation to notify concentration to the European Commission, the Netherlands Authority for Consumers and Markets, or other national competition authorities.

In this blog, we answer the twelve most important questions:

1. When should a notification be made?
2. What is meant by vital providers and managers of business campuses?
3. What is meant by sensitive technologies?
4. What does the BTI substantively test?
5. What can the BTI decide?
6. How does the Vifo Act relate to the (European) FDI screening regulation and to (national) sector-specific legal security tests?
7. Who does the reporting obligation apply to?
8. What are the deadlines for taking a decision?
9. What does a notification cost?
10. Does the Vifo Act contain a standstill obligation?
11. What happens if no notification is filed or if incorrect or incomplete information is provided?
12. Does the notification requirement and investment test also apply to acquisition activities that took place before the Vifo Act enters into force?

1. When should a notification be made?

There is an obligation to notify to the BTI in respect of investment activities in vital providers, managers of business campuses and in companies active in sensitive technologies.

Investment activities are defined as:

(i) acquiring control (within the meaning of merger control) in a target company;

(ii) a merger between companies;

(iii) establishing a full function joint venture; or

(iv) acquiring essential assets (these are assets that are essential to the operations of the vital provider).

In addition, the Vifo Act applies when acquiring or increasing significant influence over companies operating in the field of highly sensitive technology. On 19 July 2022, the (draft) Decree Scope of Application of Sensitive Technology (“Draft Decree”) designated certain technologies as highly sensitive. Significant influence already exists if the acquirer can cast 10% of the votes of  the general meeting in a target company.

The notification will be investigated by the BTI. In case of doubt about the applicability of the Vifo Act, parties may also informally consult with the BTI.

2. What is meant by vital providers and managers of business campuses?

Vital providers are:

• Heat suppliers;
• Nuclear power companies;
• Certain companies engaged in exploration, transportation and/or storage of natural gas;
• Ground handling service providers;
• Schiphol Airport;
• KLM;
• The Port of Rotterdam;
• Banks with a registered office in the Netherlands; and
• Certain financial market infrastructure providers such as trading platforms.

The minister can also designate other categories of vital providers by decree. The minister has not (yet) done so.

Managers of business campuses are enterprises that manage a site where a multiple companies operate that publicly-privately collaborate on technologies and applications that are of economic and strategic importance to the Netherlands.

3. What is meant by sensitive technologies?

Sensitive technologies are:

• Dual-use products. These are products suitable for both civilian and military purposes, such as certain software requiring an export authorisation under Regulation (EC) No 2021/821 controlling the export, transfer, brokering and transit of dual-use items; and/or
• Military goods included in the EU Common Military List.

The Minister may also designate other technologies as sensitive technologies by decree. The Draft Decree also designates quantum technology, photonics technology, semiconductor technology and High Assurance information security products as sensitive technologies.

4. What does the BTI substantively test?

The BTI assesses whether the investment activity poses a risk to national security in that:

• it disrupts the continuity of vital processes;
• it affects the integrity and exclusivity of knowledge and information containing critical or strategic information for the Netherlands; or
• it creates an unwanted strategic dependence of the Netherlands on other countries.

The Vifo Act aims, among other things, to prevent that, by acquiring (indirect) control/influence through business operations, the vital process is compromised, state-sensitive information gets into the hands of foreign/private parties or that the Netherlands is put in a blackmailing position. In addition, the Vifo Act should ensure that other countries or players (for the benefit of their own military, economic or geopolitical position) do not acquire high-quality Dutch knowledge or sensitive technology, which are of strategic significance for the Netherlands.

The BTI’s investigation focuses not only on the acquirer, but also on the ownership structure and relationships of other parties in the acquirer, such as large equity stakes, affiliated equity stakes of various friendly parties, special control rights, the composition of management and supervisory boards and related appointment rights. Importantly, relevant state or non-state actors who may exert undesirable influence on the acquirer are brought to the surface.

5. What can the BTI decide?

The BTI conducts a risk analysis and may conclude the following:

• No risk to national security: If there are no risks to national security, the BTI decides that no review decision is required;
• Risk to national security: If the analysis shows that an activity may lead to risks to national security, a review decision is required. For this purpose, an application should be submitted to the BTI. If the review decision shows that there are risks to national security, the BTI (on behalf of the Minister) is authorised to take “mitigating measures” or an acquisition activity may be prohibited in extreme cases. Thus, unlike remedies in merger control, mitigating measures are not offered by the undertakings concerned;
• Mitigating measures: The Vifo Act contains an exhaustive list of requirements and regulations that can be attached to the transaction. For example, there may be requirements regarding sensitive information and the appointment of a security officer. The BTI may also stipulate that vital processes must be placed in a Dutch subsidiary. With regard to sensitive technologies, for example, it may stipulate that certain technology or codes must be deposited with the Dutch State or a third party in the Netherlands;
• General prohibition of the acquisition activity: the general prohibition of an acquisition activity is a measure of last resort, according to the Explanatory Memorandum to the Vifo Act. Only if mitigating measures are not deemed sufficient, a prohibition is considered in the extreme.

Interested parties may object or appeal against the decision to impose requirements or regulations on an acquisition activity or impose a ban. The review decision will not be made public.

6. How does the Vifo Act relate to the (European) FDI screening regulation and to (national) sector-specific legal security tests?

The Vifo Act stems from the European Regulation establishing a framework for the screening of foreign investments into the Union concerning foreign subsidies that distort the internal market (“FDI Screening Regulation”). The FDI Screening Regulation contains procedural rules included for screening of direct investment of companies from non-European countries in the European Union. Among other things, the FDI screening regulation imposes obligations regarding information exchange between Member States and allows the European Commission to issue non-binding opinions to Member States. The FDI Screening Regulation is implemented in the Netherlands by the Act on implementation of Foreign Direct Investment Screening Regulation Implementation (“Implementation Act”). Following the FDI Screening Regulation, the Dutch government decided to legislate the protection of national security in the case of foreign investments with the Vifo Act. In addition to non-European investments, the Vifo Act also covers European investments made in the Netherlands. Under the FDI screening regulation, the BTI is obliged to inform the regulators of other EU member states if it has been notified of a non-European investment. This is subject to national regulations. So there is no one-stop shop arrangement as is the case with merger control, for instance.

The Vifo Act does not apply if the transaction falls under a national sector-specific security test, such as those under the Telecommunications Act, the Electricity Act and the Gas Act.

7. Who does the reporting obligation apply to?

As they both have relevant information for the assessment of the notifiable activity, the notification obligation applies to both the target company and to the acquirer. The Vifo Act assumes that the target company and the acquirer of the activity make the notification jointly or in mutual consultation. The acquirer is exempted from the duty to notify if it cannot know that the intended activity is subject to a duty to notify because of a confidentiality obligation on the part of the target company. In that case, the target company must still make a notification.

8. What are the deadlines for taking a decision?

If a review decision is required, an application must first be made. The BTI then has eight weeks to issue a decision. This period can be extended by up to six months, reduced by the time used for the earlier part of the investigation. Thus, the total extension can never exceed six months.

The above deadlines may be suspended if the BTI requests for additional information. The BTI may extend the deadline by another three months if the cooperation framework of the FDI Screening Regulation applies.

9. What does a notification cost?

There is no charge for the notification.

10. Does the Vifo Act contain a standstill obligation?

The Vifo Act has a standstill obligation. This means that an investment activity may only be carried out after a review decision has been taken or the BTI has decided a review decision is not necessary. The investment activity must therefore in any case be suspended until an initial risk analysis has been made or an assessment decision has been taken.

11. What happens if there is no notification submitted or if incorrect or incomplete information is provided?

If the investment activity is wrongfully not notified, the target company and/or acquirer can be fined € 900,000 or 10% of the turnover of the relevant company. In addition, the Vifo Act offers the possibility of imposing an order under penalty to induce the offender to report nevertheless.

If the BTI finds that incorrect or incomplete information has been provided in the notification, it may, within three months of this coming to light, order the reporting company to make another notification within a reasonable time. An administrative fine of 10% of the turnover of the company concerned may also be imposed. Under certain circumstances, providing false information may also qualify as the criminal offence of forgery.

12. Does the notification requirement and investment test also apply to investment activities that took place before the Vifo Act enters into force?

Yes, the Vifo Act has, subject to some (minimal) exceptions, retroactive effect. This means that for high-risk acquisition activities carried out after 8 September 2020, but before the Vifo Act came into force, the BTI can decide up to eight months after its entry into force that the acquisition activity must still be notified. This does not apply to investment activities with respect to managers of business campuses.

For questions about the Vifo Act, please contact Bas Braeken and Lara Elzas