The US Treasury’s October 22 proposal would tighten scrutiny of investment in advanced technologies across five countries, expanding controls beyond chips to AI, biotechnology and other dual-use sectors.
A proposed barrier between US capital and sensitive technology
Washington has moved to tighten the boundary between American investment and overseas capabilities that could support military power. On 22 October, the US Treasury proposed expanded outbound-investment rules under the Comprehensive Outbound Investment National Security Act of 2025, or COINS Act. The measure does not amount to a blanket prohibition on business with the countries concerned. It is a plan to restrict particular transactions that could help develop strategically sensitive technology, while requiring notification of other covered deals. Under the proposed timetable, notification would generally be due no later than 30 days after completion, not as an automatic pre-closing approval.
Treasury’s 22 October announcement and accompanying materials identify China, including Hong Kong and Macau, Cuba, Iran, North Korea and Russia as the countries currently concerned. Public comments are due by 7 December. This is a proposal, not a newly effective final rule; the existing outbound-investment regime remains distinct. Investors evaluating a transaction must therefore separate current requirements from potential future changes rather than assume the announcement either immediately bans a deal or suspends rules already in force.
Why this is different from an export licence
Traditional export controls examine whether equipment, software, know-how or other controlled items may be transferred to a foreign recipient. An outbound-investment programme addresses a different pathway. Equity financing, board involvement, access to professional networks and managerial advice can contribute to a company’s progress even without a shipment of advanced chips. Treasury officials have argued that the resources accompanying a capital commitment are part of the national-security equation.
The distinction matters for venture-capital funds and technology companies with international subsidiaries. An investor may not be exporting a controlled device at all, yet a transaction could give a foreign enterprise the funding or expertise to scale a capability in a restricted field. Conversely, a commercial link to a designated country is not automatically prohibited. The proposal distinguishes transactions and technical activities rather than treating every dollar invested across a national border as identical.
The Treasury outbound-investment programme provides the official regulatory context, including existing rules and agency guidance. The October proposal builds on a policy lineage dating to the previous US administration, now shaped by legislation passed in 2025. The political continuity reflects a view shared across party lines: financial relationships can enable sensitive capabilities that controls on physical exports alone may not capture.
Six sectors and a particularly hard line on artificial intelligence
The proposed regulation addresses semiconductor technology and microelectronics, AI systems, quantum-information technologies, high-performance computing and supercomputing, hypersonic systems, and biotechnology. Treasury added biotechnology to the five areas specified in the legislation. The text uses the term “super intelligence systems”, following a September executive order changing official terminology; that label should not be mistaken for a finding that every covered system has reached some exceptional level of capability.
For AI, Treasury proposes prohibiting covered investments involving the development of systems within its specified definition, replacing the existing distinction between prohibited and merely notifiable AI activity. The agency’s regulatory explanation links this expansion to rapidly advancing capabilities and national-security concerns. It is not a ban on all AI research, nor does it make every commercial relationship with a technology firm a covered investment. The investor, recipient, transaction structure, technical activity and any applicable exception must all be considered together.
An important question for industry is how regulators will identify the activities of a target company, particularly when a firm develops tools that have both civilian and military applications. A machine-learning business may supply manufacturing, medical or consumer services while also possessing capabilities relevant to intelligence analysis or autonomous systems. Definitions, due diligence and evidentiary standards will therefore matter at least as much as the headline list of sectors.
Exemptions reduce the reach, but not the diligence burden
Treasury’s fact sheet describes exceptions for certain publicly traded securities, investment funds and other transactions, subject to conditions. The $50,000 threshold is narrower than a general small-deal exemption: it concerns transactions aggregated across the preceding 12 months and applies only to notification, not to prohibitions. A separate process would allow requests for a national-interest exemption from a prohibition. Investors therefore need to identify which obligation and exception actually apply, rather than rely on a single transaction value.
None of those features should be misunderstood as universal permission for transactions just below a numerical threshold or for all activities associated with a listed business. Whether a specific deal is covered depends on the rule’s definitions and factual circumstances. Private funds will need to trace relevant ownership, technology activity and participation rights rather than assume that an intermediary structure eliminates substantive risk. Corporate compliance teams should likewise avoid equating a non-prohibited transaction with one that requires no assessment.
Venezuela illustrates why statutory wording and present application must be distinguished. Treasury’s FAQs explain that the law names Venezuela under the Maduro regime, but that Venezuela is not currently treated as a country of concern under the proposal because that regime no longer exists. A transaction elsewhere can nevertheless be covered through relevant ownership or other connections to a covered foreign person. Geography alone is therefore an unreliable substitute for examining the actual recipient and structure of an investment.
The challenge for companies, funds and security teams
Compliance will be an intelligence problem as well as a legal one. Investors must understand who ultimately owns a prospective recipient, which products are in development, what computing infrastructure is available and whether technical work has a possible dual-use application. Those facts may change as startups pivot, investors gain board seats or subsidiaries enter a new line of research. A review performed when a term sheet is signed may not answer every question raised by later operational developments.
Technology-security teams can help by building verifiable descriptions of systems, compute resources and data flows, but classification should not be reduced to scanning a company website for phrases such as ‘AI’ or ‘quantum’. They also need to document uncertainty. A credible control process distinguishes facts supplied by a target, publicly verifiable information and assumptions requiring specialist legal review. Overconfident categorisation could either miss a prohibited investment or needlessly block ordinary commerce.
There are commercial costs to every restriction. US-backed capital, particularly when paired with operating expertise, can accelerate firms in competitive global markets. Removing that pathway may lead businesses to seek alternative backers or relocate activities. The policy bet is that limiting certain relationships can slow the acquisition of sensitive capabilities enough to justify those economic trade-offs. The proposal does not by itself demonstrate how large those effects will be.
What happens after the comment period
The immediate milestone is 7 December, the closing date for public feedback. Industry organisations, technology companies, legal specialists and security officials can be expected to focus on technical definitions, the treatment of indirect investments and the practical demands of notifications and exemptions. A final rule could clarify or modify those elements. Investors should distinguish a published proposal from a completed regulatory obligation, while preparing their internal processes for potential changes.
The larger development is clear without predicting a final outcome. US national-security policy is moving beyond controlling what technology crosses a border and towards examining what capital, expertise and business connections help create abroad. Its effectiveness will depend on precise rules that identify genuinely dangerous transfers without describing normal scientific and commercial activity as a security threat by default.
Sources and reporting basis
Primary sources: US Treasury announcement, 22 October 2026; proposed regulatory text; Treasury fact sheet and frequently asked questions; and the official programme regulations page. The October measures remain proposals. Existing obligations continue to require separate assessment, and commercial implications discussed here are analysis rather than announced outcomes.
