What The New Changes To Foreign Investment Laws Mean For Your Business

Australia’s foreign investment framework is evolving to keep pace with national security risks, global capital flows and a very active mergers and acquisitions market. If you’re planning a capital raise, selling part of your business, leasing land, or bringing on overseas investors, these changes can directly affect your timelines, approvals and deal terms.

The good news? With some planning, most businesses can still proceed smoothly. The key is understanding when the foreign investment rules apply, what’s changing, and how to structure your transaction so you stay compliant without losing momentum.

In this guide, we break down the essentials in plain English so you can move confidently - and know when it’s worth getting tailored advice before you sign.

What’s Changing In Australia’s Foreign Investment Laws?

Australia’s foreign investment review is administered under the Foreign Acquisitions and Takeovers Act 1975 (FATA) and the policy framework overseen by the Foreign Investment Review Board (FIRB). Recent updates and proposals signal three practical shifts that businesses should expect:

A More Risk‑Based, Faster Screening Approach

Authorities are moving towards prioritising higher‑risk applications (for example, deals affecting national security businesses or critical infrastructure) while streamlining lower‑risk approvals. For businesses, the intent is fewer delays for routine transactions - so long as your application is complete and the risk profile is clearly explained.

Practically, you’ll want to prepare a concise risk narrative with your submission (what you do, why the investor is suitable, and how you’ll mitigate any sensitive risks). Clear documentation reduces questions and rework.

Stronger Enforcement, Conditions And Monitoring

We’re seeing a stronger emphasis on compliance. Approvals increasingly come with conditions (reporting, information security measures, governance undertakings) and there’s greater willingness to monitor and enforce. Missing a reporting deadline or overlooking a condition can create unnecessary headaches, so it’s worth setting up a simple internal register of your FIRB obligations.

Focus Areas: National Security, Sensitive Data And Land

While most investment remains welcome, transactions touching national security businesses (for example, suppliers to defence, critical technology, data centres, or critical minerals) are under closer scrutiny. So too are deals involving sensitive personal data, certain types of land (residential and agricultural), and assets near defence or critical sites.

If your business handles large volumes of personal information or operates infrastructure that could be considered “critical,” expect deeper questions around ownership, cybersecurity and governance.

Do These Rules Apply To My Business?

The rules turn on whether a “foreign person” is acquiring a particular type of interest. In simple terms, a foreign person includes a foreign individual, foreign government investor, or an entity controlled by foreign persons. Control can be direct or indirect - which is why corporate charts and option arrangements matter.

Common Scenarios For Australian SMEs And Startups

• Raising capital from overseas investors: Issuing shares to foreign individuals or funds can trigger thresholds and notification requirements, especially if the company operates in a sensitive sector. If you’re formalising your structure ahead of a raise, it may be a good time to consider your company set up and governance foundations.
• Selling a business or asset to a foreign buyer: Asset sales, share sales, and even certain internal restructures involving foreign control can be notifiable. Having a clear, robust Business Sale Agreement will help manage deal risk alongside any approval conditions.
• Land deals (including leases): Foreign investment rules include special categories for residential land, agricultural land and certain commercial land - sometimes including long‑term leases.
• Complex ownership structures: If you operate through tiers of entities or special purpose vehicles, or you’re considering a parent entity for investment, read up on how holding companies work and map out ultimate control before you sign deal documents.

If multiple founders are involved, a clear, investor‑ready Shareholders Agreement helps define decision‑making and pre‑empt questions from foreign investors about governance and exit rights.

How The New Regime Affects Common Transactions

Most everyday business deals remain feasible, but the steps and sequencing may change. Here’s what to watch for.

Equity Rounds And Strategic Investments

New or additional share issues to foreign investors may require notice or approval depending on sector, investor type and percentage acquired. Expect to be asked about the business activity, data you hold, key customers, and cyber posture. Build approval time into your term sheet timeline so milestone dates are realistic.

Business Or Asset Sales

Share or asset acquisitions by foreign buyers can be subject to review, especially if the target operates in national security or handles sensitive data. Approvals can include conditions about data location, access controls, or post‑completion reporting. Align your completion mechanics in the Business Sale Agreement with any anticipated conditions to avoid last‑minute renegotiations.

Land Leases And Purchases

Land transactions are a key focus area. Agricultural land and certain commercial land (including long leases) can be caught, and proximity to sensitive sites can change the analysis. If your deal structure includes a property element, raise it early so it’s captured in your approval strategy.

Internal Reorganisations

Even where there’s no new third‑party investor, intra‑group transfers that change foreign control can be notifiable. Map out your pre‑ and post‑restructure ownership and check whether any step requires approval or a post‑transaction notification.

Debt Financing With Security

Some financing arrangements involving foreign lenders can be within scope if they confer certain rights or control on enforcement. If a foreign lender or funder is taking security, factor that into your timeline and confirm whether any notification is required before drawdown.

What Compliance Obligations Should You Expect?

When approval is required, it often comes with conditions. The shift towards stronger enforcement means it’s important to operationalise those conditions, not just file them away.

Typical Approval Conditions

• Reporting: Periodic reports on ownership, compliance, or progress of any mitigation plan.
• Information security: Measures to protect sensitive data and systems, and sometimes audit obligations. Many businesses formalise this through an Information Security Policy.
• Governance and access: Restrictions on foreign access to certain datasets or facilities, ring‑fencing requirements, and Australian‑resident points of contact.

Privacy And Data Handling

If your business collects personal information, you must comply with the Privacy Act and the Australian Privacy Principles. In practice, that means having a clear, accurate Privacy Policy, handling data securely, and being transparent about overseas disclosures.

Some approvals will also ask about where data is stored and who can access it. It’s a good idea to review your systems against current data retention laws and your contractual commitments to customers.

Records And Notifications

Keep a simple register with your approval number, conditions, due dates and who’s responsible. Set calendar reminders for reporting milestones and internal audits. If a material change occurs (ownership, business activity, or control), confirm whether you need to notify or seek a variation of your conditions.

Practical Steps To Prepare And De‑Risk Your Deal

Whether you’re raising capital or selling assets, a little groundwork goes a long way. Here’s a practical playbook you can adapt.

1) Map Ownership And Control Early

Prepare a clean corporate chart showing all shareholders, option holders and any convertible instruments. Highlight foreign persons and calculate post‑deal percentages. This helps determine thresholds and which approval pathway applies. If you’re updating your governance at the same time, make sure your constitution and founder terms align with your transaction.

2) Classify Your Business Activities

Write a short description of what your business actually does, your key customers, the data you hold, and any government or critical infrastructure links. This becomes the backbone of your risk narrative and reduces follow‑up questions. If you sell consumer‑facing products or services, keep your customer commitments consistent with the Australian Consumer Law - your team may find this overview of Section 18 helpful when reviewing marketing claims.

3) Build Realistic Timelines Into Your Term Sheet

Factor approval time into your long‑stop date and condition precedent list. Agree on information responsibilities up‑front - who will draft the application, who will provide IT and data details, and who will handle correspondence. This avoids friction as you approach completion.

4) Tighten Your Documents

Align your transaction contracts with the approval pathway. For sales, ensure completion mechanics allow for conditions and reporting obligations in the Business Sale Agreement. For raises, make sure founder rights and investor protections are clearly captured in your Shareholders Agreement and term sheet, and that your cap table reflects any staged investments.

If you’re sharing sensitive information during due diligence, put a fit‑for‑purpose Non‑Disclosure Agreement in place and consider a clean data room with access controls tied to need‑to‑know.

5) Get Your Compliance House In Order

Many conditions focus on information security, governance and transparency. Updating or implementing an Information Security Policy and ensuring your public‑facing Privacy Policy matches your actual practices can reduce approval friction and future compliance risk.

6) Consider Due Diligence Support

If your transaction is complex, structured across multiple entities, or touches sensitive assets, specialist due diligence can save time and rework. A targeted legal review (for example, a Legal Due Diligence Package) can identify issues early, suggest deal‑friendly fixes, and help you present a stronger application.

Key Takeaways

• Australia continues to welcome foreign investment, but recent changes emphasise a risk‑based approach, faster screening for lower‑risk deals, and stronger enforcement of conditions.
• If a foreign person is investing in your business, buying assets or leasing certain land, check whether the transaction is notifiable and plan for approval time in your deal timeline.
• Expect conditions around governance, reporting and information security; set up simple internal systems to track obligations and avoid breaches.
• Tight documentation - from your Shareholders Agreement and term sheet to your Business Sale Agreement and NDA - reduces follow‑up questions and protects your position.
• Privacy and data practices are front and centre; align what you say in your Privacy Policy with how you actually handle and secure information.
• Getting legal input early on structure, thresholds and application strategy can streamline approvals and keep your transaction on track.

If you’d like a consultation on how the foreign investment changes apply to your business or upcoming deal, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.