Tools / Regulatory tracker / National Security and Investment Act 2021
Regulatory tracker · United Kingdom · Investment screening
National Security and Investment Act 2021
Mandatory approval before acquiring control of a UK entity in 17 sectors, including data infrastructure and computing hardware.
In force In force since 4 January 2022. Government guidance last updated 15 July 2026.
What it does
The rule in brief
Acquisitions of control of a qualifying entity active in one of 17 sensitive areas must be notified and approved before completion; a notifiable acquisition completed without approval is void and may lead to civil or criminal penalties. The areas include Data Infrastructure, Computing Hardware and Artificial Intelligence. The government can also call in other acquisitions, including of assets such as land.
Timeline
Key dates
| Date | What happens |
|---|---|
| 4 January 2022 | Act comes into force |
| 15 July 2026 | Acquisitions guidance updated |
Found automatically
Recent official documents
Found on GOV.UK; the summary above was last reviewed on 27 October 2026.
- Notices of final orders under the National Security and Investment Act 2021 GOV.UK
- National Security and Investment notification service: mandatory, voluntary and retrospective forms GOV.UK
- National Security and Investment Act 2021 GOV.UK
- National Security and Investment Act 2021: Annual Report 2025-26 GOV.UK
Primary sources
Read it at source
- National Security and Investment Act 2021 Statute
- Notifiable Acquisition Regulations (SI 2021/1264) Statute
- Check if you need to tell the government about an acquisition (guidance) Government
Cite as: InfraCompute regulatory tracker, “National Security and Investment Act 2021”, checked 27 October 2026, https://www.infracompute.co.uk/tools/regulatory-tracker/uk-nsi-act.
Related
Also on the tracker
US outbound investment rules (31 CFR part 850)
Notification or prohibition of US investment in AI and semiconductor businesses in countries of concern; new rules proposed.
United Kingdom · Cyber and resilienceCyber Security and Resilience Bill
Brings data centres of 1 MW or more (10 MW for enterprise sites) under the NIS rules, with Ofcom as regulator.
United Kingdom · Cyber and resilienceData centres designated critical national infrastructure
UK data centres were designated CNI in September 2024, alongside energy and water.
United Kingdom · Planning and permittingAI Growth Zones
Designated zones with grid connection priority, planning support and a proposed electricity cost discount.
Method
Each entry is written from the official text and the government, regulator or legislature pages listed above, never from secondary commentary. New documents on GOV.UK are picked up automatically and listed here. Status and dates can change after the review date, so check the source before relying on it. General information drawn from public filings. It is not legal advice on any transaction, and using this page does not create a lawyer-client relationship. Views are personal.
