Cross-Border M&A and Regulation

Ask the regulatory questions before the structure is fixed

At the outset

Which regimes apply turns not on where the parties are incorporated but on what the target does, who ultimately controls the acquirer, and what technology and data the business holds. Because a filing may carry a waiting period, and because the answer can point towards one structure rather than another, the exercise at the outset is to identify which regimes could be engaged rather than to reach a conclusion on each of them. A Japanese seller disposing of a business to a foreign buyer needs the same map: the buyer's identity and the target's activities may determine the steps and therefore the timetable.

Due diligence and negotiation

Due diligence looks at the target's own regulatory compliance, but it also raises a question about itself: whether the technical material and personal data being shown to the buyer may lawfully be disclosed, and viewed from the countries where the buyer's team and advisers sit. In negotiation, the question becomes which filings and approvals are made conditions to closing, how the parties cooperate on them, and who bears the consequences if an authority imposes conditions or the timetable slips.

After closing

Acquiring the shares does not end the analysis. Giving an overseas parent access to design information, source code or personal data, moving records onto a group platform, or changing who reports to whom in a research function, are each assessed on their own terms. Keeping the two questions apart — whether the transaction can be completed, and what the group may then do with the business — avoids the common assumption that ownership settles everything. What is involved in connecting a Japanese business to an overseas group after closing is dealt with in “Integrating a Japanese Business After M&A”.

Stage	Investment screening	Technology and security	Personal data	Merger control
Initial review	Identify whether the parties and the target's activities could bring the transaction within the regime.	Establish whether the products and technology may be controlled.	Establish what data the business holds, where it sits and where it would go.	Identify the jurisdictions in which a filing may be required.
Due diligence	Confirm the activities and the ownership chain in detail.	Confirm what technical material is disclosed, and from where it is viewed.	Confirm how personal data are made available for review.	Gather the information the thresholds turn on.
Negotiation	Reflect the required filings and approvals in the terms.	Settle what technology may be accessed before and after closing.	Settle what is needed for transfers and for integration.	Reflect the filings in the conditions and the timetable.
Closing	Confirm the position on each filing before completing.	Confirm when technology may begin to be provided, and how much.	Confirm when data may begin to move, and by what route.	Confirm the position on each filing before completing.
After closing	Comply with any conditions or continuing obligations.	Manage access to technology from outside Japan.	Address group sharing and system integration.	Continue with anything agreed with an authority.

Foreign investment screening under the Foreign Exchange and Foreign Trade Act

Prior notification, exemptions and reporting

Japan’s regime for inward investment sits in the Foreign Exchange and Foreign Trade Act. Where an investor within the statutory definition of a foreign investor makes an investment the Act treats as inward direct investment, the analysis can end in one of several places: prior notification with a waiting period; an exemption from prior notification, available where the eligibility requirements are met and the prescribed conditions are observed, and in some cases followed by a report after the investment; a report after the transaction without any prior notification; or no filing at all. Which of those applies depends on the investor, on the form the investment takes and on what the target does.

An exemption does not require a separate approval from the authorities. It is available where the applicable eligibility requirements are met and the prescribed conditions are observed, and those conditions may include restrictions on the investor or its closely related persons becoming officers of the company, on making certain shareholder proposals concerning a designated business, and on access to non-public technical information. A buyer whose plans for the business run against those conditions should not assume that the exemption route is open to it. Where prior notification is required, the waiting period and the possibility that it is extended belong in the timetable from the outset rather than being discovered during it.

Designated business sectors and core sectors

Certain activities are designated for the purposes of the regime, and a subset of them is classified as core sectors. Core-sector status does not invariably rule out an exemption, but the availability and the scope of an exemption may differ according to the category of investor, the level of ownership and the additional conditions attaching. The designation attaches to what the company actually does rather than to how it describes itself or to how its revenue is distributed, so a line of business that is small in financial terms can still bring a transaction within the regime. The activities of subsidiaries may matter as well, within the scope the legislation sets for the type of transaction concerned, which is why the question is best asked before the structure is settled.

Acquisitions between foreign investors, and reorganizations within a group

The regime is not confined to investment coming into Japan from outside for the first time. Where one foreign investor acquires unlisted shares in a Japanese company from another foreign investor, the acquisition may constitute a specified acquisition, a statutory category separate from inward direct investment; whether anything has to be filed is then assessed under the rules applying to that category, including the target’s activities and any exemption available. Internal reorganizations are worth checking for the same reason: a step that looks like housekeeping within a group may still be a transaction the regime reaches.

The amendment promulgated in 2026

An amending Act (Act No. 30 of 2026), promulgated on June 5, 2026, extends the regime in several respects. Under the current law, indirect acquisitions through acquisitions of voting rights in foreign-incorporated entities are not among the acts specified as inward direct investment in Article 26, paragraph (2) of the Act and the relevant Cabinet Order. Article 26, paragraph (2), item (ix) of the Act as amended will cover a foreign investor’s acquisition of voting rights in a foreign-incorporated entity where, as a result, the investor and certain related persons newly hold at least 50% of the voting rights in a foreign-incorporated entity holding shares or equity interests in a Japanese company, or shares or voting rights in a listed Japanese company or a company treated as equivalent under Cabinet Order (a “direct holding entity”).

Article 26, paragraph (2), item (x) of the Act as amended will also cover the exercise of voting rights on officer appointments at a direct holding entity or foreign-incorporated entities prescribed by Cabinet Order, including those directly holding at least 50% of its voting rights, where this results in the investor and related persons newly constituting a majority of the officers, or of the officers with representative authority, of the entity concerned. Where the Japanese holdings are shares or voting rights in a listed or equivalent company, these rules apply only if the combined holding percentage on the acquirer’s side and the foreign-incorporated entity’s side meets or exceeds the rate prescribed by Cabinet Order. The amendment also puts risk-mitigation commitments on a clearer statutory footing and provides for intervention in relation to investments outside the designated business sectors in defined circumstances.

Except for certain provisions that took effect on promulgation, the amendment is set to come into force on January 4, 2027. As of the last update of this page, the indirect acquisition provisions are not yet in force. Article 3 of the supplementary provisions of the amending Act provides that these rules and the amended notification, review and order provisions apply to relevant investments made on or after the day on which 30 days have elapsed from the effective date (the application date). With January 4, 2027 as the effective date, the application date would therefore be February 3, 2027. Investments made before the application date remain subject to the previous rules. The Ministry of Finance has stated that the related regulations and notices promulgated on September 16, 2026 are scheduled to take effect on January 4, 2027 and apply in full from February 3, 2027.

An acquisition of a foreign group holding shares, equity interests or voting rights in Japanese companies may therefore call for Japanese legal analysis even where the transaction does not, on its face, involve Japan. We check whether the relevant acquisition or exercise of voting rights will occur on or after the application date and consider the Japanese companies’ businesses, including whether they fall within the designated business sectors, when assessing notification requirements and the effect on the transaction timetable. The applicable scope and percentage thresholds are set by the implementing regulations and notices, so we check the position against the law in force and applicable at the time of the transaction and the latest published materials.

Where a filing was not made

The Act does not provide that a transaction becomes void merely because a required prior notification or report was omitted. That is not to say that the omission is cured or without consequence. Depending on the provision engaged and on the circumstances, recommendations, orders — including measures affecting the holding or disposal of the shares — and penalties may follow, and the contractual consequences as between the parties are a separate question again. The first step is therefore to establish what was done, which provision applied, and how the position is put right with the authorities.

Screening in the other jurisdictions involved

A Japanese transaction rarely engages only Japanese screening

Where a group buys or sells a business that spans several countries, the Japanese analysis is one of several. Many jurisdictions operate national security or foreign investment review mechanisms, although their scope and their legal effect differ substantially, as does the extent to which they reach transactions completed abroad. The United States and the United Kingdom have their own regimes; many member states of the European Union operate national screening mechanisms alongside the European framework for co-operation and the exchange of information; and China and a number of other Asian jurisdictions maintain separate arrangements. Sectoral restrictions on foreign ownership may apply in addition to any national security review.

We advise on Japanese law. Where another jurisdiction is engaged, the advice on that jurisdiction comes from counsel there, and our role is to keep the analyses aligned with one another and with the transaction. What is useful to establish early, in each jurisdiction concerned, is a short list of points.

• The activities in question — whether what the target and its subsidiaries do falls within the scope of a review or of a restriction on foreign ownership.
• The chain above the acquirer — whether the ultimate controller, or any state-linked interest, affects the analysis.
• The form of the acquisition — whether indirect acquisitions, internal reorganizations and step acquisitions are caught as well as a direct purchase of shares.
• What must happen before closing — whether a filing, a clearance or a waiting period stands between signing and completion.
• What may be required as a condition — whether the outcome may include undertakings about how the business is run afterwards.

The scope and the procedure differ by country and change over time, so each is confirmed against the position at the time of the transaction. For the timetable, these processes are usually planned and, where it is practicable, conducted in parallel. The latest of the requirements that actually suspend completion may then determine when the transaction can close — subject to any dependencies between the filings, to the structure of the transaction, and to any local-closing arrangements that are permissible.

Technology, export control and economic security

Export control is not only about goods leaving Japan

Japan controls the movement of certain goods and technology under the same Act that governs inward investment. Control operates in two ways. Under the list-based regime, specified items and technologies are controlled by reference to what they are. Under the catch-all regime, items and technologies outside the lists may nevertheless require permission, depending on the destination, the intended end use, the end user, and whether the Ministry of Economy, Trade and Industry has given notice that an application is required. In a transaction the point most often missed is that the provision of technology — design information, manufacturing know-how, software — is regulated in its own right. Having completed the steps required for the share acquisition says nothing about whether technology may then be provided.

Provision to people in Japan can also be controlled

Providing controlled technology to a non-resident is treated as an export even where the provision takes place within Japan. A release of controlled technology to a resident individual may also be treated as provision to a non-resident, where that person falls within a prescribed category by reason of specified economic dependence on, or substantial influence by, a foreign entity or a foreign government. Nationality alone does not determine the answer: what matters is the relationship in question and the technology concerned, and the outcome is a judgement about whether permission is required rather than a prohibition. This becomes relevant in a transaction when reporting lines in a research function are changed after closing, or when access rights to technical systems are reorganized on group lines.

Due diligence disclosure and access after closing

Where technical material is to be disclosed to an overseas buyer or to its advisers, what is disclosed, who may see it, where they are and how they reach it are all part of the analysis, and the data room can be configured accordingly — by limiting the material, the viewers or the permissions. After closing the same questions return in a different form: moving technical data to an overseas parent, storing it on a shared platform, or allowing an overseas site to reach it, may each amount to provision of technology.

Economic security

Japan’s economic security legislation is sometimes described as though it were a further foreign investment screen. It is not. It provides, among other things, for arrangements supporting the stable supply of critical materials, and it requires an operator that has been designated as a specified critical infrastructure operator to file in advance a plan for the introduction of specified critical facilities, and for entrusting their important maintenance and management to others. The obligation therefore attaches to designated operators and to specified facilities, not to every business in the sector. A share acquisition is not, as such, reviewed under this mechanism, but where the target is a designated operator, compliance with plans already filed and the effect of changes made after closing are matters to confirm. The screening under the Foreign Exchange and Foreign Trade Act remains a separate exercise.

Personal data in due diligence and after closing

Disclosure of personal data during due diligence

Due diligence usually involves showing the buyer information about employees, customers and counterparties. Japan’s Act on the Protection of Personal Information contains a provision dealing with personal data provided in connection with a business succession, and disclosure during negotiations towards such a succession may fall within it, subject to the purpose for which the data may be used, the way they are handled and what happens if the negotiations do not proceed.

Two limits on that matter to a foreign buyer. First, it does not follow that everything disclosed in a due diligence exercise is covered, so the purpose and the scope of each disclosure are considered individually. Second, and more importantly, that provision does not by itself disapply the separate rules governing provision of personal data to a recipient outside Japan: where the prospective buyer or its advisers are outside Japan, a basis for the cross-border provision still has to be identified. In practice this is why masking, limits on who may view material and limits on permissions are settled before the data room opens rather than after.

Transfers from Japan to the group

As a general rule, provision of personal data to a third party outside Japan requires the consent of the individual, with prescribed information given when that consent is obtained. Those additional requirements for foreign transfers do not apply where the recipient is in a country designated by rules of the Personal Information Protection Commission, or where the recipient has a system meeting the standards for continuously taking measures equivalent to those required in Japan. What falls away in those cases is the additional layer; the ordinary rules on provision to a third party still have to be satisfied on their own terms. The equivalent-measures route is also not a one-off exercise: the business making the transfer has to take prescribed steps to ensure that the measures continue to be implemented, and to provide prescribed information on request. The distinction that matters in practice is between the transfer that accompanies the transaction and the ongoing sharing that follows it; the second is assessed on its own footing.

Rules in the other jurisdictions

Where the group’s data reach other regimes, those regimes apply on their own terms. Under the General Data Protection Regulation, transfers out of the European Economic Area require a basis such as an adequacy decision or standard contractual clauses; Japan is the subject of an adequacy decision, but that does not dispose of every question about a particular transfer or processing arrangement. China operates its own framework for outbound transfers, including a security assessment, a standard contract and a certification route, together with requirements relating to important data. The United States restricts, under a separate program, certain transactions that give access to government-related data and to bulk sensitive personal data of United States persons; that program is not a data localisation rule and is analysed separately, including in relation to group access and the contracts supporting it. Blanket propositions — that data cannot leave a territory, or that a group may freely consolidate everything — are rarely accurate.

Security monitoring and employee data

Where the business runs a security operations centre or endpoint detection and response tooling, the configuration often results in device logs, connection records, addresses and location information being handled in association with named employees. Where that information identifies individuals it is personal information, and where it is organized as a database it is personal data. The Japanese questions are then the ordinary ones — the purpose for which it is used and how that purpose is notified, the scope of the monitoring, what the internal rules say and what employees have been told.

Where monitoring is performed by an overseas provider or an overseas group company, the position on provision outside Japan is examined. Servers located outside Japan do not by themselves make the arrangement a provision to a third party outside Japan if no one outside Japan is able to reach or handle the data; where an overseas provider or group company can reach or process it, the cross-border rules are considered even though the arrangement is characterised as an outsourcing. Where the target is itself established outside Japan, the monitoring may also have to be justified under the law of that country — the basis for the processing, transparency, the scope of what is monitored, any assessment required, and consultation with or notice to employees. For the transaction, the exercise is to map where the data are held, who processes them and who can reach them, and then to ask whether the arrangement can continue as it is after closing or whether moving to a group platform requires something further.

What integration actually changes

Integration often changes access before it changes location. Consolidating systems may leave the servers where they are while making the data reachable from an overseas parent, and it is the reachability that the rules are concerned with. The useful exercise is therefore to describe the data flows — which data, from which country, by whom — rather than to inventory server locations. Requirements applying to particular countries or sectors, in Asia and elsewhere, are checked against that description.

Reflecting the regulatory position in the documents and the timetable

Conditions, cooperation and who bears the risk

Where filings, clearances or waiting periods are required, the parties decide which of them are conditions to closing, how each party cooperates on the filings and on dealings with the authorities, and what happens if a clearance is refused or granted on terms neither party expected. A long-stop date, the circumstances in which the agreement may be terminated, and the allocation of the cost and of any commitments given to an authority all follow from that. The object is not to predict the outcome of a review but to write the agreement so that both the expected process and its uncertainty are provided for.

Merger control

Merger control is a separate question from investment screening and is assessed on its own thresholds. In Japan, certain share acquisitions, mergers, company splits, and acquisitions of businesses or of material business assets are notified to the Japan Fair Trade Commission in advance, where the domestic turnover, voting rights and other requirements prescribed for the type of transaction are met. A transaction notified in Japan generally may not be completed until the applicable waiting period has expired or been shortened; the mechanism is a waiting period rather than an approval to be obtained. Where filings are required in other countries, their waiting periods, clearances and review timetables are coordinated with the Japanese one, and the latest of the suspensory requirements may determine when completion can take place — subject to the structure of the transaction and to any local-closing arrangements that are permissible.

If a problem emerges after signing

Where a regulatory issue comes to light after signing or after closing — a filing that should have been made, technology that has been provided more widely than the analysis assumed, data that have moved further than intended — what is required depends on the issue. Several things usually have to happen at once rather than in sequence: preserving the records and establishing what occurred, identifying the legal and contractual obligations engaged and any deadline for reporting, limiting the position from developing further, and deciding when and how the authorities are approached. Treating the matter first as a question of who bears the cost tends to produce the wrong answer to that question as well as to the others.

Working with other advisers

A transaction of this kind usually involves more than one set of lawyers. We advise on Japanese law — whether the investment screening, export control and data regimes are engaged, what due diligence should establish, how the position is reflected in the structure, the terms and the timetable, and what the filings require — and we address the arrangements for sharing data and technology within the group after closing. For the law of the other jurisdictions involved we work with counsel there, according to the countries and the transaction. Where the target carries on a regulated financial business, the registration and notification questions specific to that sector are dealt with in “Acquiring a Regulated Financial Business in Japan”.

Frequently Asked Questions

This page sets out general legal issues arising on cross-border transactions involving Japan and is not legal advice on any particular matter. The applicable legislation, subordinate regulations, notices, guidelines and administrative practice are subject to change, and several of the provisions described are not yet in force. In any transaction, the law and the administrative practice applying at each stage of the work must be confirmed for the parties and the structure concerned.

Contact

Discuss a Cross-Border Transaction Involving Japan

Tell us what the target does, where the business and its technology and data sit, and the structure and timetable you have in mind. We advise on Japanese law — inward investment screening, export and technology transfer controls and the rules on transfers of personal data — and work with counsel in the other jurisdictions involved so that what each regime requires is reflected in the terms and the timetable.

Discuss a cross-border transaction involving Japan

Whether we are able to act, and the scope of our work, are confirmed individually after a conflict check.

Related Pages

Related Pages

M&A in Japan for Foreign Acquirers and Investors

Transaction structures, foreign investment screening, merger control, due diligence, employees, the transaction documents and closing.

Acquiring a Regulated Financial Business in Japan

Registrations and notifications under the payment services and money lending legislation, and how each transaction structure affects them.

M&A and Investment in Hospitals and Clinics in Japan

How the medical corporation framework, the transaction structure and the administrative procedures affect an investment in a hospital or clinic.

Practice Areas

Crisis management, litigation, corporate and M&A, intellectual property, finance and international practice.

This article is provided for general informational purposes only and does not constitute legal advice on any specific matter. Please consult us regarding your specific situation. The content is based on the laws and regulations in effect as of the date of the last update.