I The EU established a framework for screening foreign direct investment in 2020. Regulation (EU) 2019/452 (‘the Regulation’) establishes a framework for the screening by member states of foreign direct investment and a cooperation mechanism among EU member states and the European Commission to assess and potentially restrict foreign direct investment that may pose a threat to security or public order in the EU or its member states.
II The Regulation aims to ensure a coordinated approach to the screening of foreign direct investment in strategic sectors that are vital for the security and functioning of the EU's economy. Foreign direct investment in the EU amounted to approximately €117 billion in 2021 in terms of inflows (8 % of the world level). It provides for a cooperation mechanism which takes account of the EU dimension of foreign direct investment cases handled at national level by identifying their cross-border impacts, and addresses security and public-order risks to EU projects and programmes. The Regulation also recognises that certain foreign investments may have implications for critical infrastructure, technologies, or sensitive information, and seeks to safeguard EU interests in these areas.
III The main objective of this audit was to assess whether the EU framework for screening foreign direct investment (including the cooperation mechanism) is efficient and effective at addressing security and public-order risks. We examined both its design and its implementation by the Commission, reviewed a representative sample of cases notified by member states and assessed by the Commission, and all opinions the Commission issued between 2020 and 2022. The audit scope did not include the member states’ screening laws and decisions.
IV Overall, we conclude that the Commission has taken appropriate steps to establish and implement a framework for screening foreign direct investments in the EU. However, there remain significant limitations across the EU that reduce the effectiveness and efficiency of the framework at preventing security and public-order risks. Six member states do not have a screening mechanism and there are differences in terms of scope, coverage in terms of defining critical sectors and understanding of key concepts. This creates multiple blind spots compromising the effective protection of the entire EU. Improvements are also necessary in the Commission’s assessments and recommendations.
V Specifically, in terms of preventing risks to security and public order at EU level, the current framework is partially appropriate. To a certain extent, cooperation provided member states with information on foreign direct investment being screened, and gave them an opportunity to share concerns and address them together when necessary. However, the enabling rather than harmonising nature of the Regulation’s design results in inherent limitations to the effectiveness of risk identification and uniform screening. The Regulation does not have sufficiently clear provisions to ensure that key concepts are always interpreted consistently and that comparable rules are applied to comparable situations with the ultimate goal of avoiding undue restrictions to the free movement of capital and rights of establishment (e.g. in terms of intra-EU investment by foreign investors, the inclusion of indirect foreign investment, and the exclusion of portfolio investments).
VI We also found that there are significant divergences across the screening mechanisms of member states, and that the Commission has not completed any formal assessment of its compliance with the minimum conditions set in the Regulation. Member states do not provide any preliminary eligibility and risk assessments of the cases they notify. This leads to a high volume of low-risk or ineligible cases, which overburden the cooperation mechanism.
VII We found that the cooperation mechanism, and in particular the Commission’s eligibility and risk assessment, together with the quality of its opinions and related recommendations, is partially effective at adequately mitigating the risks posed by foreign direct investment at EU level. Although the assessments identify risks, and contribute to forward-looking thinking on potential vulnerabilities, we identified issues in the Commission’s assessments and aspects of the recommendations which may raise challenges for enforceability, or be inconsistent with a market-economy environment.
VIII We found that the Commission has implemented appropriate operational tools, IT systems and resources to handle the current case load arising from the cooperation mechanism on a timely basis and within the tight deadlines stipulated in the Regulation. It has also produced its annual reports as required by the Regulation. Nevertheless, we identified some room for improvement across these functions with a view to focusing on systemic issues and approaches that are relevant at EU level. Specifically, the Regulation does not require feedback from member states on their screening decisions that would enable the Commission to monitor and report on the effectiveness of the screening framework.
IX In view of the above, we recommend that the Commission should:
01 Openness to foreign direct investments (FDI) has been and continues to be one of the key principles of the internal market. The EU Treaties1 define common commercial policy as contributing to the harmonious development of world trade, the progressive abolition of restrictions on international trade and on FDI, and the lowering of customs and other barriers. However, perceptions have changed as a result of concerns about lack of reciprocity and the new geopolitical environment, including an increasing awareness of the vulnerabilities stemming from the EU’s dependencies.
02 In line with global developments, EU member states and the EU have taken steps to better protect themselves against the potential dangers relating to FDI. Figure 1 provides an overview of the evolution of the number of member states with screening mechanisms in the EU (see also paragraph 06).
Figure 1 – Evolution of investment screening mechanisms in the EU member states (1990-2022)

© OECD, 2022: Framework for Screening Foreign Direct Investment into the EU – Assessing effectiveness and efficiency.
03 Foreign direct investment (FDI) is an investment of any kind by a foreign investor aiming to establish or to maintain lasting and direct links between the foreign investor and the entrepreneur to whom or the undertaking to which the capital is made available in order to carry on an economic activity in a member state, including investments which enable effective participation in the management or control of a company carrying out an economic activity2. A foreign investor is a natural person or an undertaking privately or publicly owned, of a third country (i.e. outside the European Union).
04 The EU had inward FDI totalling €117 billion in 2021, i.e. 8 % of the world total level3. FDI is widely considered as beneficial for host and home economies and for the enterprises that carry out the investments. It can, for example, enhance growth and innovation in host countries, contribute to creating quality jobs and developing human capital, raise living standards and help spread good practice in management and with regard to responsible business conduct.
05 However, risks associated with FDI have become more serious, especially in cases concerning strategic autonomy and assets (e.g. nuclear plants or ports), sensitive sectors (e.g. those involving critical defence inputs such as semi-conductors or microchips of a dual-use nature), or the transfer of sensitive technology to a third country whose strategic intents are not aligned with EU interests. Box 1 provides a summary of the main factors affecting security and public order, as listed in Article 4 of Regulation (EU) 2019/452. Box 2 provides an example of a potentially harmful FDI.
Main factors affecting security and public order, as listed in Article 4 of Regulation (EU) 2019/452
The Regulation does not define the terms ‘security’ or ‘public order’ but lists factors that member states or the Commission may take into account in determining if a FDI is likely to affect security and public order. These include:
Example of potentially harmful FDI
The acquisition of a research-driven industrial engineering EU company and design house specialising in radio technologies and microelectronics by a state-owned defence company from a third country.
06 Investment screening mechanisms (i.e. legal and administrative instruments that allow FDI to be assessed and investigated before authorisation with or without conditions or even prohibition) can be traced back to the 1960s in some countries. The introduction of such rules allows governments to scrutinise individual investment proposals for their potential impact on essential security interests. Until very recently however, many countries did not have investment screening mechanisms in place and were relying instead on single-sector authorisation requirements or similar mechanisms at most. For many years, few countries had legislated in this area – introducing new mechanisms or reforming existing ones – until policymaking activity surged in and after 2016.
07 The European Parliament launched a debate as early as 20124 in response to global trade developments and specific transactions in strategic sectors, mainly as an approach to security and defence matters. In February 2017, the governments of France, Germany and Italy voiced concern about third-country investments, particularly in cases where state-owned enterprises investing as part of a strategic industrial policy acquired critical assets and key technologies from EU companies, but did not offer reciprocal rights to invest in the country from which the FDI originated. The three member states recognised that EU law already allowed “member states to prohibit foreign investments which threaten public security and public order”, and 11 member states already had a screening mechanism in place. However, given the Commission’s expertise, they called for additional protection based on economic criteria. This debate was seen as a way to defend European interests in a hostile geopolitical environment.
08 In May 2017, the Commission proposed establishing a framework for member states and the Commission to screen FDI in the EU, while allowing member states to take their individual situations and national circumstances into account5. On 13 September 2017, the Commission published a proposal for a regulation establishing a legal framework for the screening of FDI inflows into the EU. In 2019, the European Parliament adopted the proposal, and the Council formally endorsed it in March 2019. Thus, Regulation (EU) 2019/4526 (‘the Regulation’) became applicable on 11 October 2020.
09 Major trading nations across the world have FDI screening mechanisms with differences in their respective scope and powers, governance structures, sectoral emphasis, or obligations and penalties for investors and targets. For example, the United States has a centrally managed framework, run by the Committee on Foreign Investment in the United States (CFIUS). For more details, see Annex I. However, while similar principles may apply, screening across the EU poses a number of challenges that do not exist in countries where screening is limited to one jurisdiction. The US framework is more comparable to member states’ screening mechanisms in terms of its scope and powers.
10 The Regulation establishes a cooperation mechanism among EU member states and the European Commission to assess and potentially restrict FDI that may pose a threat to security or public order in the EU or its member states. It aims to ensure a coordinated approach to the screening of FDI in strategic sectors that are vital for the security and functioning of the EU's economy. The Regulation recognises that certain foreign investments may have implications for critical infrastructure, technologies or sensitive information, and seeks to safeguard EU security and public order.
11 The Regulation was established using the EU’s exclusive competence for common commercial policy, in particular with regard to foreign direct investment pursuant to Article 207 (2) TFEU. However, national security and public order are an area that is the sole responsibility of member states. Therefore, member states are free to introduce a screening mechanism and define its scope as long as they comply with EU law (including free movement for capital) and member state’s authorities are the only ones that can take decisions on individual foreign direct investments.
12 The key elements or mechanisms envisaged in the Regulation are the following:
13 The aim of the Regulation is to ensure that the EU and the member states are better equipped to identify, assess and mitigate potential risks to security or public order deriving from FDI. For that purpose, the Regulation:
14 The Regulation does not operate in isolation, but is part of a larger toolkit that regulates FDI inflows into the EU single market and outflows to external markets. It works in conjunction and shares objectives with other EU policies that potentially apply to the same transactions from different perspectives and legal positions. For example, EU dual-use technologies can be transferred not only by buying EU undertakings by third countries, but also by exporting goods to third countries or when EU undertakings acquire subsidiaries outside the EU. For this reason, Regulation (EU) 2021/821 sets up an EU regime for the control of exports, brokering, technical assistance, transit and transfer of dual-use items. Other examples are EU antitrust and competition policy and its control systems and the new rules on distortive foreign subsidies (Regulation (EU) 2022/2560).
15 The main players are the member state authorities tasked with screening FDI, and the Commission (mainly through DG TRADE). The ECA has already pointed out in a specific case (see ECA review 03/2020: The EU’s response to China’s state-driven investment strategy) that in policy areas where the EU and member states both exercise competences, a concerted EU approach could be an advantage. However, the fact that both the EU and member states exercise competences means that there are possible diverging opinions and approaches. This could make it difficult to address the challenges faced by the EU as a whole in a timely and coordinated manner.
16 Member states are free to decide whether or not they want to introduce FDI screening mechanisms. However, once a member state establishes a screening mechanism, it is also responsible for reporting FDI cases undergoing screening to the Commission and other member states through the cooperation mechanisms stipulated in the Regulation. The timelines for the screening process in member states vary from two months in Malta to six months in Germany9. Member states are required to submit annual reports to the Commission that include information on the FDI that took place on their territory in the preceding year, and any requests received from other member states as part of the cooperation mechanism and the operation of their national screening mechanism.
17 The Commission has the following responsibilities10:
18 Figure 2 summarises the framework for screening FDI in the EU.

Source: European Commission.
19 The main objective of this audit was to assess whether the EU framework for FDI screening (including the cooperation mechanism) is efficient and effective at addressing security and public-order risks. The audit covered the period from the adoption/enactment of the FDI regulation until September 2023. The audit should also serve as an input for the Commission’s review of the framework and the accompanying legislative proposal.
20 We examined the design and implementation of the EU framework for FDI screening (including the cooperation mechanism) that was set up under Regulation (EU) 2019/452. We assessed whether:
The observations presented in the subsequent sections follow the order of the points set out above.
21 The audit criteria were derived from applicable legislation, including the EU Treaties, World Trade Organization agreements12, case law of the Court of Justice of the EU (CJEU), principles of sound financial management as well as from relevant documents issued by the Commission, the Council and the European Parliament, and from international best practices, including those of international organisations.
22 Specifically, we:
23 The audit scope did not include the assessment of member state screening laws, procedures and decisions. As the cases and other underlying documents we analysed are classified as “EU-restricted” and cannot be disclosed publicly, we provide only summary information that highlights specific problems, but without further details or specific examples.
24 To have an effective system, it is important to cover all relevant types and forms of investment and investors, and security and public order risks. The EU framework for FDI screening should be able to prevent circumvention and avoid security and public order criteria being used to apply protectionist measures. A balance should be struck between FDI screening detection and the mitigation of risks to security and public order on the one hand, and the openness of the EU to FDI on the other.
25 When determining and interpreting the definitions of key concepts in the Regulation, the Commission should take account of the principles enshrined in the EU treaties, in particular with regard to free movement of capital and commercial policy, and the competences of the EU and its member states on FDI, security and public order. There should therefore be clear definitions of the main elements and concepts relating to FDI and FDI screening in the Regulation, and these should be compatible with existing jurisprudence.
26 We found that the cooperation mechanism established for the first time by the Regulation enables member states and the Commission to share screening information and risk assessments on FDI. This provides the member state that screens and authorises FDI with information on potential risks for other member states, or on risks posed to EU projects or programmes. The framework is thus a positive step, making it possible to detect risks that may otherwise go undetected given the complexity of ownership structures, state influence, criminal intent, or cross-border vulnerabilities and critical dependencies. Our survey confirmed that it also helps to develop a better understanding of investment trends in Europe and promote closer cooperation and peer learning among member state authorities in this area.
27 However, the framework also faces inherent limitations due to its design and to EU competences that limit its effectiveness at preventing security and public-order risks by allowing for blind spots that compromise the effective protection of the EU as a whole. The following are issues pointing at such limitations:
28 Figure 3 shows the situation in September 2023, when 21 member states had a screening mechanism in place. The Commission considers it important for all member states to have a national screening mechanism, especially in the context of the Single Market13.

Source: ECA, based on the Commission’s 2022 annual report and updated information up to September 2023.
29 The Regulation does not have sufficiently clear provisions and definitions of key concepts. We found that this negatively affects the efficiency and effectiveness of EU-wide screening and exposes member states to unnecessary legal risks. The following are examples of these shortcomings:
30 In order to ensure the effectiveness of the framework, screening mechanisms should comply with the minimum criteria set out in Articles 3, 4 and 6 of the Regulation, and the Commission needs to assess compliance with these criteria in order to assess the functioning and effectiveness of the Regulation. Among other things, member states setting up FDI screening mechanisms are required to:
31 The Regulation aims to establish a set of uniform principles for FDI, and prohibits screening from being used as a barrier to free trade under the pretext of security or public order. Moreover, member states should report cases which reflect potential risks, and should provide sufficient and relevant information for other member states and the Commission so that they can assess risks to their security and public order.
32 Article 3 of the Regulation provides a set of common standards for screening mechanisms in the EU, and requires the Commission to maintain an updated list of the mechanisms in place. We found that the Commission maintains and publishes a list of screening mechanisms on its website, and provides a summary in its annual report17. It also co-financed a study carried out by the OECD, which resulted in an extensive overview of the different aspects of national screening mechanisms without having to provide an assessment of their compliance with the requirements of the Regulation. The Commission itself has not produced its own assessment of whether national screening mechanisms comply with the requirements of Article 3 of the Regulation to be able to assess the functioning and effectiveness of the Regulation. Therefore, there is no verified information available on to what extent member states comply with these requirements and how this affects the effectiveness and efficiency of the framework.
33 The OECD study which received financial support from the Commission in 2022, highlights a number of significant differences between national screening mechanisms. These differences18 have an impact on how effective and efficient the system is at mitigating threats to security and public order as they create blind spots and in some cases seem not to be fully in line with the Regulation. These include:
34 Our audit (interviews, survey and analysis of the sample of cases) confirmed the differences highlighted by the OECD. In addition, we found that the following issues had a negative impact on the efficiency and effectiveness of FDI screening at national and EU level:
35 The differences cited above also contribute to an uneven distribution of notifications between member states and limit the effectiveness of the framework. Figure 4 shows the aggregate number of notifications submitted by groups of member states in 2020 to 2022, and their respective FDI stock, based on 2019-2021 data. We would expect a level of correlation which did not actually materialise, between the size of economies, the level of inward FDI and the number of notifications. Six member states together submit 92 % of all cases, whereas a second group of nine member states with screening mechanisms submit the remaining 8 %. A third group of 12 member states did not screen or provide notification of any cases in the same period; these member states account for approximately 42 % of the EU’s average FDI stock. In our view, this has a significant impact on the effectiveness of the framework and limits the overview that the Commission and other member states could have.
Figure 4 – Notifications (2020-2022) compared to average FDI stocks (2019-2021)

Source: ECA, based on cases reported to the cooperation mechanism - Commission Annual Reports; Average inward investment stock - Eurostat - EU direct investment positions by country, ultimate and immediate counterpart and economic activity (BPM6), Inward FDI 2019-2021.
36 Article 9 of the Regulation outlines the type of information for any cases of FDI undergoing screening. Given its limited scope, the Commission and the member states agreed on a voluntary basis, in the FDI Screening Expert Group, to provide more extensive information in a “notification form”. These forms are submitted through a secure network by duly appointed authorities in the member states, and generally provide the information required. Whenever important information was missing, the Commission made additional requests, to which member states replied by providing further information. The system would be more efficient if notification forms included all essential information by default.
37 When assessing whether an FDI is likely to impact public order or security, the Commission and the member states may take into account the factors listed in Article 4 of the Regulation. These factors relate to the nature of the investment (e.g. when it involves critical infrastructure or technologies) and to the nature of the investor (e.g. past involvement in criminal activities, or controlled by third-country governments or armed forces). However, these factors are neither exhaustive nor mandatory.
38 We found that the cooperation mechanism is overburdened with ineligible, (i.e. out of scope) and with low-risk cases (i.e. not warranting an opinion) Figure 5 shows that 30 % of the 886 cases member states notified by the end of 2022 were either ineligible, or their eligibility was unclear. According to the Commission, 68 % were eligible, but of low risk. Only in 2 % of cases did the Commission identify likely risks or shared relevant information by issuing opinions.
Figure 5 – Share of total cases reported by eligibility and risk profile from 2020 to 2022

Source: ECA, based on Commission data.
39 We found that member states are informed of screening activities in other member states through the cooperation mechanism, as our survey and interviews with member states also showed. The information obtained as a result of their requests or submitted comments helps to make better informed decisions before specific FDI transactions are authorised. However, in our view, the notification forms and the information they contain have the following weaknesses:
40 These weaknesses resulted in additional work for the Commission, including having to gather further information from member states, thereby significantly reducing the efficiency of the framework.
41 As set out in the Regulation, the Commission is responsible for carrying out its own risk assessments and providing opinions when it believes that FDI poses a high risk to more than one member state or to EU projects and programmes. For this purpose, the Commission developed internal guidance that we took into account for our assessment. To carry out its risk assessments, the Commission needs to make sufficient resources available in order to assess the sensitivity of EU targets in relation to any of the factors mentioned in Article 4 of the Regulation that may represent a serious threat to security and public order from FDI, to identify the ultimate beneficiary owners and their risk profiles, and to take account of sanctions imposed by the EU and member states in relation to investment. As per the Commission’s internal procedures, DG TRADE should consult all other relevant DGs to ensure robust due diligence.
42 FDI may lead to a capital movement under Article 63 TFEU. This Article prohibits any restriction on capital movements between member states and between member states and third countries. Pursuant to Article 65 TFEU, restrictions on the free movement of capital may be justified when necessary and proportionate for the achievement of the objectives defined in the Treaty, including on public security and public policy grounds, as defined by the CJEU. FDI may also lead to the establishment of a third-country investor in the EU, e.g. when such an investment acquires a controlling stake in an EU-based undertaking.
43 As the explanatory memorandum accompanying its proposal for the Regulation states, with respect to movement of capital, such public interests must be interpreted strictly. They may be relied upon only if there is a genuine and sufficiently serious threat to a fundamental interest of society. Restrictions on fundamental freedoms must not be misapplied in order to serve purely economic ends. Furthermore, investment screening mechanisms should comply with the general principles of EU law, in particular the principles of proportionality and legal certainty. These principles require the procedure and criteria for an investment screening to be defined in a non-discriminatory and sufficiently precise manner, and should be reflected in the Commission’s risk assessment and recommendations.
44 Article 4 of the Regulation provides a non-exhaustive list of risk factors relating either to the critical nature of the target company, its products or activity in the EU, or to the risk profile of the foreign investors. Our review of cases showed that the Commission described potential risks comprehensively including identifying spillover risks or critical dependencies. Our survey and our interviews with member state authorities corroborated their appreciation of the Commission’s role in assessing risks.
45 The Commission is uniquely positioned not only to assess whether FDI is likely to affect security or public order in more than one member state, or whether FDI may affect projects and programmes of EU interest, but also to estimate their impact at EU level, thus adding additional value to the cooperation mechanism. We found that DG TRADE collaborates with other Directorates-General and asks member states to provide more information where required. It also identifies those targets that participate in certain EU projects and programmes, as listed in the Annex to the Regulation.
46 Europol and Eurojust databases may shed light on certain risks relating to past engagement in illegal or criminal activity by individual investors. However, the Regulation does not contain any provisions enabling such cooperation and information-sharing that would help in better assessing security risks of individual investors.
47 Our examination of the Commission’s opinions found the following issues in the quality of its assessments. To satisfy auditee confidentiality requirements, we have grouped our findings by type of issue (specific examples cannot be given due to the highly sensitive nature of the cases reviewed):
48 We assessed the quality of the recommendations made by the Commission in its opinions. The key factors which led the Commission to issue an opinion include risks and measures relating to sensitive EU targets (such as security of supply of critical goods and technology, or dual-use products), and risks related to investors (such as foreign-state influence or control). We found that when the Commission identified what it regarded as a likely impact on security or public order, it recommended mitigating measures to the member state hosting the FDI.
49 In terms of the quality and relevance of the mitigating measures proposed, we found that in some cases the Commission:
50 Our evidence showed that where certain transactions involved individuals on a sanctions list, the member states concerned did not block the investment. Our view is that if investors are on a sanctions list which prohibits them from investing, no further assessment by the Commission is necessary to issue an opinion, because any such investment would be illegal if the member state permitted it.
51 The Commission should adhere to sound financial management principles and to its Internal Control Framework. Thus, it should make the necessary resources available so that cases can be managed in a timely manner. It should also ensure that it has adequate information-management tools to carry out its own assessments, as well as secure communication tools to manage information exchanges with member states. The annual reports and the five-year evaluation of the functioning and effectiveness of the Regulation should explain the extent to which the Regulation has been implemented across the EU, and address any important systemic issues that emerge. Based on relevant and reliable data, the Commission’s reports should focus on key risks and how to address them.
52 We found that the Commission has adequate resources in place to handle the current case load in a timely manner, and that it provided assessments to tight deadlines. However, streamlining opportunities exist to improve the management of future caseload increases, including ensuring that Commission staff always use existing templates and checklists.
53 The Commission has set up an appropriate database to manage and document its work, with sufficient indicators relevant for assessing the effectiveness of the Regulation. It also set up appropriate IT tools to exchange information securely for the purposes of the cooperation mechanism.
54 The Commission established well-designed internal guidelines and processes. One procedure which we found very useful was the development of a dedicated checklist that requires Commission staff to identify, justify and provide evidence for determining a likely risk. Despite the importance of this checklist for facilitating consistent and comprehensive assessments, the other DGs involved in providing input to DG TRADE do not systematically use it.
55 In accordance with Article 12 of the Regulation, the Commission has convened a group of experts from all member state authorities, with the aim of providing it with advice and expertise, sharing examples of good practice and lessons learned, and exchanging views on trends and issues of common concern relating to foreign direct investments. We note that the Commission has set up the necessary platform for the experts’ forum, and that all member states – with or without a national screening mechanism – are participating.
56 Article 13 of the Regulation opens up the possibility for international cooperation between member states and the Commission on the one hand, and third-country authorities on the other. The Commission has participated in and organised various initiatives, such as talks with third countries, cooperation with the OECD and the US, and stakeholder conferences and events attended by third-country authorities.
57 As required by the Regulation, the Commission has published its first and second annual implementation reports. The Regulation does not specify the information to be included in the annual reports, but they do provide more information than member states included in comparable reports. However, even taking account of the need to balance transparency and security considerations due to the sensitive nature of data, we believe that the reports contain insufficient information and data for reporting purposes and, more importantly, for assessing the efficiency and effectiveness of FDI screening and EU-level cooperation. The reasons for this are as follows:
58 Overall, the Commission has taken appropriate steps to establish and implement a framework for screening foreign direct investment in the EU. However, significant limitations persist across the EU, reducing the effectiveness and efficiency of the framework at identifying, assessing and mitigating security and public-order risks.
59 The cooperation mechanism facilitated the sharing of screening information and risk assessments on FDI. However, some features in the design of the Regulation mean that the cooperation mechanism is less effective at protecting the EU’s public order and security. Firstly, as the Regulation does not require member states to set up an FDI screening mechanism, there were still six member states that did not have an FDI screening mechanism in place as of September 2023. Secondly, as the Regulation is silent on the scope of national screening mechanisms when they exist, there are significant differences in scope and approach between screening systems in the member states. Thirdly, member states are under no obligation to inform the Commission or other member states of their final decisions in cases where the Commission or other member states respectively issue opinions or send comments identifying likely risks to security or public order. Lastly, the Commission’s recommendations are not binding on member states carrying out screening, even when overall EU interests are at stake (see paragraphs 26-28).
60 The Regulation leaves room for interpretation with regard to the notion of “likely impact” on security or public order. Moreover, as a result of the Regulation’s design, comparable rules are not consistently applied to comparable situations (particularly in the treatment of intra-EU trade from entities that are foreign-owned and controlled, or of portfolio investments). Furthermore, member states can determine the scope of security and public order for themselves. All of these elements, together with the fact that member states do not have to report the outcome of their screening decisions to the Commission, make it very challenging for the Commission to monitor the implementation of the framework and to ensure that investors are not discriminated against, or that the free movement of capital is not unduly restricted (see paragraph 29). It also creates multiple blind spots, compromising the legitimate need for the EU to safeguard its security and public order interests. Improvements are also necessary in the Commission’s risk assessments and recommendations.
Recommendation 1 – Seek the necessary amendments in the Regulation to strengthen the EU FDI screening framework
Without prejudice to the decisions of the co-legislators, we recommend that the Commission should in its revision of the framework:
Target implementation date: 2024
61 We found significant differences between the FDI screening mechanisms of member states, and the Commission has not completed any formal assessment of their compliance with the minimum conditions stipulated in the Regulation. As things stand, several member states pre-screen transactions and only notify the cooperation mechanism of those transactions that are likely to affect their own public order or security, thereby depriving the other member states and the Commission of a chance to assess whether a transaction can have an impact on them. All of this results in a large share of FDI that is not subject to screening, and a substantial number of low-risk or ineligible cases which overburden the system (see paragraphs 32-39).
Recommendation 2 – Assess whether national screening mechanisms comply with regulatory standards, and streamline concepts across EU screening mechanisms
The Commission should:
Target implementation date: (a) 2026; (b) and (c) 2025.
62 The Commission’s risk assessment provides EU added value not only by identifying risks to security and public order relating to factors under Article 4 of the Regulation, but also by contributing to forward-looking thinking on potential vulnerabilities and critical dependencies as they arise at EU level. However, this approach has limitations in covering all types of risk, such as assessing past criminal or security-related risks presented by individual investors at EU level (see paragraphs 44-46).
63 The Commission provided assessments to tight deadlines. However, we found issues with the quality of the Commission’s assessments that we reviewed (see paragraph 47) regarding:
64 The Commission’s opinions to member states may recommend mitigating measures or prohibition of FDI. In our view, recommendations are only partially effective at addressing the risks identified, as justification for the mitigation measures being recommended can be improved, notably by specifying how the proposed measures would reduce exposure to the risks if implemented. Furthermore, when recommending mitigating measures, the Commission proposes conditions which may raise issues of enforceability or be inconsistent with a market-economy environment (see paragraph 49).
Recommendation 3 – Improve the cooperation mechanism and the Commission’s assessments in order to provide better justification of mitigating actions relating to high-risk cases
The Commission should:
Target implementation date: June 2024
65 The Commission has put appropriate operational tools, IT systems and resources in place to handle the current case load arising from the cooperation mechanism. It has reported in a timely manner in its annual reports, and has fulfilled its “reporting” role in implementing the Regulation. Nevertheless, given the need to balance transparency and security considerations due to the sensitive nature of the data, we believe that the information and data that the Commission and member states have provided are not sufficient to assess the efficiency and effectiveness of FDI screening and EU-level cooperation. The fact is that they do not sufficiently focus on the types of risk being identified for the related sectors, or the types of risk relating to investors or deal structures (see paragraphs 52-57).
66 Moreover, the Regulation does not provide for adequate feedback by the member state recipient of the Commission’s opinion, or for member state comments that would allow the Commission or the member state making those comments to monitor and report on the effectiveness of the system (see paragraph 29 (c)).
Recommendation 4 – Improve the quality of reporting
The Commission should improve the quality of its annual reports by focusing on critical risks and approaches to mitigating them. In cooperation with member states, it should also improve the scope and quality of the underlying data.
Target implementation date: 2024
This report was adopted by Chamber IV, headed by Mr Mihails Kozlovs, Member of the Court of Auditors, in Luxembourg at its meeting of 24 October 2023.
For the Court of Auditors
Tony Murphy
President
Elements of FDI screening framework | EU FDI screening framework and cooperation mechanism | The Committee on Foreign Investment |
|---|---|---|
Governance | DG TRADE manages the cooperation mechanism in conjunction with all member states, and manages overall policy discussions within the expert group composed of experts nominated by all member states. | CFIUS is an inter-agency committee authorised to review the national security implications of foreign direct investment in the United States. |
Powers | The FDI screening framework is an empowering framework, not a harmonising one. It does not bind member states on whether to screen, or what to screen. The final decision to block or authorise FDI lies with the member states. The Commission may issue opinions when it identifies that a given FDI has a likely impact on the public order or security of more than one member state, or of projects or programmes of EU interest. These opinions may include non-binding mitigation, or a recommendation to prohibit investments. Screening member states have the power to adopt binding mitigation measures and, if needed, prohibition decisions. Member states cannot block FDI in another member state. | CFIUS is authorised to block transactions that fall within its jurisdiction. It may also impose measures to mitigate any threats to US national security. Authorisation to block or the imposition of mitigation measures are binding. |
Scope | Any case being screened by a member state must be reported to and shared with other member states and the Commission through the cooperation mechanism. For FDI not undergoing screening, the Commission has ex officio powers to request information from a member state. Includes direct investment by foreign nationals. Indirect investment is not included in the scope of the Regulation beyond cases of circumvention, but some member states screen intra-EU investments in practice. | Any transaction that could result in control of a US business by a foreign national. Control is defined broadly as direct or indirect power – whether or not it is exercised – to determine, direct or decide on important matters affecting a business, and can include minority investments. |
Mandatory Filings | Mandatory filings are determined at national level by different member state screening mechanisms. The EU Regulation does not make any specific sector or transaction type mandatory. The EU Regulation only requires that all FDI being screened should be reported to and shared with other member states. | Critical Technologies: Foreign investments involving a US business with critical technologies, for which a US regulatory authorisation would be required for its use by a foreign national. Foreign-Government Ownership: Certain transactions in which a foreign-government owned entity acquires a substantial interest in a US business. |
Legal Penalties | No legal penalties envisaged at EU level. Different penalties applicable across member states. | Three types of violation: failure to file; non-compliance with CFIUS mitigation; material misstatement, omission, or false certification Potential civil penalties for failure to comply, or violations of a material provision of a mitigation requirement. |
CFIUS: Committee on Foreign Investment in the United States
CJEU: Court of Justice of the European Union
DG TRADE: The European Commission’s Directorate-General for Trade
EEA: European Economic Area
EFTA: European Free Trade Association
EIF: European Investment Fund
Eurojust: European Union Agency for Criminal Justice Cooperation
Europol: European Union Agency for Law Enforcement Cooperation
FDI: Foreign Direct Investment
NATO: North Atlantic Treaty Organization
OECD: Organisation for Economic Co-operation and Development
RRF: Recovery and Resilience Fund
TFEU: Treaty on the Functioning of the European Union
TTC: Trade and Technology Council
Foreign direct investment (FDI) – an investment of any kind by a foreign investor that aims to establish or to maintain lasting and direct links between the foreign investor and the target company to carry on an economic activity in a member state, including other arrangements that enable effective control or participation in the management of a company carrying out an economic activity. This definition excludes portfolio investments.
Foreign investor – a natural person of a third country or an undertaking of a third country making a foreign direct investment.
Screening – a procedure allowing to assess, investigate, authorise, condition, prohibit or unwind foreign direct investments.
Screening mechanism – an instrument of general application, such as a law or regulation, and accompanying administrative requirements, implementing rules or guidelines, setting out the terms, conditions and procedures to assess, investigate, authorise, condition, prohibit or unwind FDI on grounds of security or public order.
The ECA’s special reports set out the results of its audits of EU policies and programmes, or of management-related topics from specific budgetary areas. The ECA selects and designs these audit tasks to be of maximum impact by considering the risks to performance or compliance, the level of income or spending involved, forthcoming developments and political and public interest.
This performance audit was carried out by Audit Chamber IV Regulation of markets and competitive economy, headed by ECA Member Mihails Kozlovs. The audit was led by ECA Member Mihails Kozlovs, supported by Edite Dzalbe, Head of Private Office and Laura Graudina, Private Office Attaché; Juan Ignacio Gonzalez Bastero, Principal Manager; Georgios Karakatsanis, Head of Task; Jacques Sciberras, Joerg Genner and Joaquin Hernandez Fernandez, Auditors; Mari-Liis Pelmas-Gardin, secretarial support.

From left to right: Joerg Genner, Georgios Karakatsanis, Edite Dzalbe, Mihails Kozlovs, Laura Graudina; Juan Ignacio Gonzalez Bastero; Mari-Liis Pelmas-Gardin, Jacques Sciberras.
COPYRIGHT
© European Union, 2023
The reuse policy of the European Court of Auditors (ECA) is set out in ECA Decision No 6-2019 on the open data policy and the reuse of documents.
Unless otherwise indicated (e.g. in individual copyright notices), ECA content owned by the EU is licensed under the Creative Commons Attribution 4.0 International (CC BY 4.0) licence. As a general rule, therefore, reuse is authorised provided appropriate credit is given and any changes are indicated. Those reusing ECA content must not distort the original meaning or message. The ECA shall not be liable for any consequences of reuse.
Additional permission must be obtained if specific content depicts identifiable private individuals, e.g. in pictures of ECA staff, or includes third-party works.
Where such permission is obtained, it shall cancel and replace the above-mentioned general permission and shall clearly state any restrictions on use.
To use or reproduce content that is not owned by the EU, it may be necessary to seek permission directly from the copyright holders:
Figure 1: © OECD, 2022: Framework for Screening Foreign Direct Investment into the EU – Assessing effectiveness and efficiency. This translation was not created by the OECD and should not be considered an official OECD translation. The OECD shall not be liable for any content or error in this translation.
Software or documents covered by industrial property rights, such as patents, trademarks, registered designs, logos and names, are excluded from the ECA’s reuse policy.
The European Union’s family of institutional websites, within the europa.eu domain, provides links to third-party sites. Since the ECA has no control over these, you are encouraged to review their privacy and copyright policies.
Use of the ECA logo
The ECA logo must not be used without the ECA’s prior consent.
| ISBN 978-92-849-1299-5 | ISSN 1977-5679 | doi: 10.2865/885487 | QJ-AB-23-028-EN-N | |
| HTML | ISBN 978-92-849-1285-8 | ISSN 1977-5679 | doi: 10.2865/356789 | QJ-AB-23-028-EN-Q |
1 Article 206 TFEU.
2 Article 2(1) of Regulation (EU) 2019/452.
3 Second Annual Report on the screening of foreign direct investments into the Union, SWD(2022) 219 final, COM(2022) 433 final, p. 2.
4 European Parliament resolution of 23 May 2012 on EU and China: Unbalanced Trade.
5 Commission reflection paper on “Harnessing Globalisation” issued on 10 May 2017.
6 Regulation (EU) 2019/452 of the European Parliament and of the Council of 19 March 2019, establishing a framework for the screening of foreign direct investments into the Union, OJ L 79 l, 21.3.2019, pp. 1-14.
7 See Articles 6(3) and 7(2) of the Regulation.
8 See Article 13 of the Regulation.
9 OECD report, Figures 4 and 5.
10 Articles 6 to 8 of Regulation (EU) 2019/452.
11 The Commission has so far published two annual reports COM(2021) 714 final of 23 November 2021 and COM(2022) 433 final of 1 September 2022.
12 The General Agreement on Tariffs and Trade (GATT 1947), and the General Agreement on Trade in Services.
13 Trade Policy review - An Open, Sustainable and Assertive Trade Policy, COM(2021) 66 final – 18 February 2021.
14 Commission’s explanatory memorandum COM(2017) 487 final, 2017/0224(COD), , SWD(2017) 297 final, p. 4. See also: Case C-463/00 Commission vs Spain, paragraph 34; Case C-212/09 Commission v Portugal, paragraph 83; Case C-244/11 Commission v Greece, paragraph 67; C-446/04 - Test Claimants in the FII Group Litigation, paragraph 171, Case Judgment of 14 March 2000, Case C-54/99 Église de scientologie v The Prime Minister, paragraph 17.
15 Regulation (EU) 2019/452, Recital 9.
16 See Judgment of 28 September 2006, Commission v. Kingdom of the Netherlands Joined cases C-282/04 and C-283/04, ECLI:EU: C:2006:608, paragraph 19.
18 OECD report, paragraphs 104-118, 161 and Table 5.
19 OECD report on “Acquisition and ownership-related policies to safeguard essential security interests”, May 2020, pp. 44-63.
20 OECD report on “Framework for screening Foreign Direct Investment into the EU – Assessing effectiveness and efficiency”, 2022, paragraphs 139-156.