.

Client Alert

Greater Scrutiny on Foreign Inbound Investments: Update on the Foreign Investment Risk Review Modernization Act of 2018

August 15, 2018

by Lawrence Ward and T. Augustine Lo

Download as a PDF

Share this page

After months of deliberation, Congress has passed the Foreign Investment Risk Review Modernization Act of 2018 (“FIRRMA”) as Title XVII in the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (“2019 NDAA”).  President Trump signed the 2019 NDAA into law on Monday, August 13.

FIRRMA is compromise legislation between the Senate and the House that attempts to address perceived weaknesses in existing federal law regarding review and approval of foreign investments that may implicate U.S. national security.  FIRRMA will likely have broad effects on foreign investment in the United States generally and will especially impact Chinese investments.

Background of CFIUS

FIRRMA amends significantly Section 721 of the Defense Production Act of 19501 (“Section 721”) which authorizes the President to investigate, suspend or prohibit any transaction resulting in control of a U.S. business by a foreign person where the President determines such transaction threatens to impair U.S. national security and no other adequate means are available to address the identified threat.  Since 1988, Section 721 has governed the work of the Committee on Foreign Investments in the United States (“CFIUS”), a federal interagency committee.  CFIUS is comprised of cabinet-level executive officers from the Departments of the Treasury, Homeland Security, Commerce, Defense, State, Justice, and Energy.  The Secretary of Labor and Director of National Intelligence also have roles in CFIUS as nonvoting, ex officio members. 

Under Section 721 and the pre-FIRRMA regulations (“Regulations”),2  the President already has vast power to investigate and to prevent, amend or even dissolve and reverse a transaction covered by Section 721.  A “covered transaction” under the Regulations means “any merger, acquisition, or takeover … by or with any foreign person which could result in foreign control of any person engaged in interstate commerce in the United States.”  This broad definition effectively captures all foreign investments or acquisitions that could lead to a change in control of a U.S. company.  Importantly, “control” is defined as “the power, direct or indirect, whether or not exercised, through the ownership of a majority or a dominant minority of the total outstanding voting interest in an entity, board representation, proxy voting, a special share, contractual arrangements, formal or informal arrangements to act in concert, or other means, to determine, direct, or decide important matters affecting an entity.”3  The Regulations also provide an extensive list of factors that CFIUS may consider when determining if the transaction will result in foreign control of a U.S. company.

The majority of cases reviewed by CFIUS begin when the transaction parties submit a joint voluntary notice to CFIUS asking for such a review and clearance under the Regulations.  Under the pre-FIRRMA rules, once a voluntary notice was submitted, CFIUS had a 30-day “review” period to raise any questions from its member agencies.  At the end of that initial 30-day review period, CFIUS could have either allowed the transaction to proceed as the parties intended or moved the transaction into a further 45-day “investigation” period.  During that investigation period, CFIUS could have continued to request additional information from the parties and could have requested an actual meeting.  If, at the end of the 45-day investigation period, CFIUS had not reached a determination, then it would have recommended to the President whether to allow the transaction to proceed.  The President then had an additional 15 days to make a final determination.  While almost all notified transactions reached a final disposition within the 45-day investigation period, the whole process under the pre-FIRRMA rules could have potentially taken 90 days after the parties had filed their voluntary notice.

Significant Changes after FIRRMA

Filing Fees Authorization.  Since 1988, the Department of the Treasury has not charged any filing fee or processing charge to handle a CFIUS notice filing despite the many hours of government personnel time needed to manage such a filing and the obvious financial gain that the parties hope to achieve through the transaction.  In FIRRMA Section 1723, Congress did not mandate a filing fee but has now authorized CFIUS, at its discretion, to add to the Regulations the requirement for such a filing fee.  If CFIUS were to decide to require a filing fee, Congress has stipulated that such a fee may not exceed an amount equal to the lesser of (a) one percent of the value of the transaction or (b) $300,000, adjusted annually for inflation.  It is not clear whether the Administration will use this authority, but, since the number of such filings is expected to rise due to the increased jurisdiction of CFIUS over more transactions, the imposition of such fees might help to offset the costs of the likely additional staff that the Treasury Department and other agencies may now need to handle that higher volume of cases.

Expanded Jurisdictional Scope.  FIRRMA amends the threshold definition of “covered transactions.”  FIRRMA Section 1703(a)(4) specifically adds the following categories of transactions by foreign persons that are subject to review by CFIUS:

  • Section 1703(a)(4)(B)(ii) will cover real property transactions that relate to any real estate “located within, or [that] will function as part of, an airport or maritime port” in the United States;
  • Real property transactions (that is, both sales and leases) relating to property4 that either is “in close proximity” to any military or other national security installations or allows spying on such locations, although the definition of “close proximity” in this context will not be specified until CFIUS adopts new implementing regulations later this year5;
  • “Any other investments” in an unaffiliated U.S. enterprise that “owns, operates, manufactures, supplies, or services critical infrastructure”; “produces, designs, tests, manufactures, fabricates, or develops” critical technologies; or “maintains or collects sensitive personal data of U.S. citizens”; and
  • Any change in rights of a foreign person in a U.S. business that results in a change in control of the U.S. business or an unaffiliated business that relates to “critical infrastructure,” “critical technology,” or the storage of sensitive personal data listed above.

Evasion or Circumvention.  FIRRMA Section 1703(a)(4) also includes a catch-all clause that captures all other transactions that are “designed or intended to evade or circumvent” the CFIUS jurisdiction over “covered transactions.”

“Critical Technologies” Definition.  FIRRMA Section 1703(a)(6) amends the definition of “critical technologies” to specifically adopt the definitions in the current Regulations, which include items that are subject to export controls (e.g., the U.S. Munitions List under the International Traffic in Arms Regulations; the Commerce Control List under the Export Administration Regulations; nuclear materials regulated by the Department of Energy or the Nuclear Regulatory Commission, etc.).  In addition, Section 1703(a)(6) identifies “[e]merging foundational technologies” as a new and separate category of “critical technology” that could trigger a CFIUS review.  (This provision is a cross-reference to the new export control provisions that separately appear in the 2019 NDAA, which will cause new legal changes to the Export Administration Regulations (“EAR”) administered by the Bureau of Industry and Security (“BIS”) in the U.S. Department of Commerce.)

Mandatory “Declarations”.  Another major change to the CFIUS process is to reduce somewhat the reliance on voluntary notices by the transaction parties and, for the first time since CFIUS was put into operation in 1988, to require mandatory “declarations” for certain types of transactions.  Such “declarations” to CFIUS will now be required in any “investment that results in the acquisition, directly or indirectly, of a substantial interest in a United States business … by a foreign person in which a foreign government has, directly or indirectly, a substantial interest.”6  Such required declarations are intended to compel notifications to CFIUS of transactions where it is likely the foreign party is significantly influenced by a foreign government.

Declarations differ from the current system of notice filing in a number of ways.  First, as previously mentioned, the CFIUS notice filing process has historically been mostly a voluntary system, but now, under FIRRMA, certain covered transactions will require the parties to submit a “declaration.” Second, such declarations are intended to be significantly shorter than full standard notice filings (Congress has recommended that such a required “declaration” be no longer than five pages) and provide CFIUS with only the most basic information regarding the transaction, while, in contrast, a typical joint voluntary notice filing might exceed 40 pages of text with dozens or even hundreds of pages of exhibits.  The Congressional intent is that the declaration process might allow CFIUS to make an abbreviated (and faster) initial check of certain transactions that can be resolved within the initial “review” period.  However, CFIUS could also potentially respond to such a “declaration” filing by indicating to the parties that such a truncated declaration does not provide enough information to CFIUS to make a proper informed decision, and so CFIUS could just direct the parties to move on to a full notice filing.  Such a reaction would then require the parties to begin a new and additional initial “review” period (and, potentially, an additional “investigation” period as well, which could significantly lengthen the total process in some cases involving foreign government-related transactions).

Extended Timeline.  FIRRMA also extends the voluntary notice filing timeline with CFIUS, since a major concern about the pre-FIRRMA procedures was that the previously set Congressional deadlines within CFIUS were deemed to be too short and did not allow enough time for considered judgments to be made in complex international transactions.  Under FIRRMA, the initial 30-day CFIUS review period will now be extended to 45 days followed by, if necessary, a 45-day investigation period.  Notably, FIRRMA also permits CFIUS to tack on another additional 15 days to that investigation period under “extraordinary circumstances,” which has yet to be fully defined.  Following such a 15-day extension, if the matter is referred to the President, another 15-day period will commence to allow the President to make the final decision.  Thus, these changes will now collectively extend the entire CFIUS process from a maximum 90 days before FIRRMA to potentially 120 days after FIRRMA if CFIUS chooses to use all its statutorily granted days once a voluntary notice is filed.  Furthermore, FIRRMA also adds a new provision that allows for the tolling of these deadlines if there is a lapse in CFIUS appropriations by Congress (for example, due to a temporary government shutdown).

Judicial Review.  Whereas the pre-FIRRMA Section 721 did not provide for any judicial review of CFIUS decisions, FIRRMA Section 1715 now expressly allows the judicial review of CFIUS decisions through a civil action filed directly in the U.S. Court of Appeals for the Federal Circuit.  This FIRRMA provision specifically authorizes that court to review ex parte and in camera any classified information or privileged materials to resolve disputes over the disclosure of such material in such an action.

Special CFIUS Reports on Chinese Investment Activity.  FIRRMA Section 1719(b) also adds a new biannual CFIUS reporting requirement that is specifically directed at investments from China.  The new reporting requirement relates to all “foreign direct investment transactions made by entities of the People’s Republic of China,” regardless of whether those Chinese parties are purely private or are affiliated in any way to a state-owned enterprise or the Chinese government.  The requirement specifically asks for CFIUS to provide Congress with breakdowns by industrial sector, list of companies invested in by the Chinese government, information on affiliates in the United States, and an analysis of any relationship between investments and China’s “Made in China 2025” national industrial policy.7

Implications for Future Foreign Investments in the United States

FIRRMA will likely be a watershed development in the field of future foreign direct investments or acquisitions in the United States in several visible ways: 

  • The new law codifies the trend towards covering all foreign transactions that involve properties judged to be proximate to “sensitive” installations, going beyond just military bases or Department of Energy facilities to include, for instance, real estate that is within every U.S. airport and seaport, such as the commercial lease of a large container terminal to a foreign-owned shipping company.  More than ever before, foreign investors and U.S. companies will need to weigh the precise location of the U.S. real property that may be affected by or involved in such investment transactions and to take into careful consideration the proximity of such property to such military or other critical facilities;
  • FIRRMA significantly expands the scope of “covered transactions” to include other types of investments that would not necessarily confer actual legal control over a U.S. business but would nonetheless provide opportunities for the foreign person to access “critical infrastructure” or “critical technologies.”  This expanded definition reflects public concern that foreign investments and acquisitions in the United States are allowing potential adversaries to conduct economic espionage or other adversarial activities by other covert means.  The pre-FIRRMA law exempted investments that were below a de minimis 10% ownership threshold (Regulations Section 800.302), being mainly concerned with actual foreign control or influence over a U.S. company.  The new changes in scope made through FIRRMA will likely now affect many more equity investments that potentially confer access to “critical technologies” but that involve no issues as to foreign “control” of the U.S. business at all;
  • Under the pre-FIRRMA Section 721, Congress had denied the federal courts any statutory jurisdiction to hear cases that challenged the President’s “action” to “suspend or prohibit any covered transaction” or the President’s findings that supported such action.  The statute was silent, however, regarding other aspects of the CFIUS process.  The 2014 Ralls8 case in the D.C. Circuit determined that federal courts could entertain a very limited challenge under the Administrative Procedure Act and the Constitution’s Due Process Clause and required CFIUS to disclose to the parties any non-privileged, unclassified evidence that it had considered in its decision to allow some potential rebuttal.  However, since the bulk of evidence considered by CFIUS is likely privileged or classified (or both), that 2014 decision offered little practical value to most dissatisfied parties.  FIRRMA Section 1715 now affirmatively grants the power of judicial review through a civil action filed in a single federal court, the U.S. Court of Appeals for the D.C. Circuit.  The FIRRMA changes also allow this court to accept and consider classified or otherwise confidential evidence on an ex parte basis and in camera.9   
  • The reporting requirement on future Chinese investment in the United States under Section 1719(b) is what remains in the FIRRMA compromises of the main motivation that had propelled FIRRMA’s passage in the first instance, which was growing concern about the role and effect of Chinese investments in virtually all sectors of the American economy, especially in advanced technologies such as telecommunications and artificial intelligence.  Although FIRRMA does not target Chinese investments specifically for any more stringent CFIUS reviews and investigations, the required reports by CFIUS to Congress every two years may yet provide fuel for future legislative action against further Chinese investments.  From the perspective of Chinese investors who might still wish to pursue opportunities in the U.S. market and for American enterprises yet eager to attract such Chinese investments, however, this reporting requirement may seem preferable to the alternative that President Trump had previously suggested in some of his earlier public statements (i.e., unilateral executive action simply to block most Chinese investments outright, especially those by Chinese state-owned enterprises).

The Department of the Treasury should be announcing its new CFIUS regulations to implement FIRRMA within 180 days, and it is likely the Administration will not wait that long to issue its new proposed rules.  Both U.S. companies and foreign investors should be on alert for those new proposed rules to be published in the Federal Register in the coming months and should file comments and suggestions about those proposals if they appear to unduly burden international investments without commensurate benefit to enhance U.S. national security.


1 50 U.S.C. § 4565.
2 Regulations Pertaining to Mergers, Acquisitions and Takeovers by Foreign Persons, 31 C.F.R. Part 800.
3 1 C.F.R. § 800.204. 
4 The purchase, lease or concession of real estate are all treated equally and could be considered under FIRRMA Section 1703(a)(4)(B)(ii) to be a “covered transaction,” but there is an ostensible exclusion in Section 1703(a)(4)(C) for a “single ‘housing unit’” or “real estate in ‘urbanized areas.’”  It will remain to be seen under the new CFIUS regulations how that exclusion would or would not affect a foreign person’s (or even a foreign government official’s) purchase of, say, a large house that may be within a mile or even within a few blocks from the front gate of a major military facility if the motivating concern in FIRRMA is whether such a private property could be used to conceal electronic surveillance equipment that could seek to spy on the military activities of such a facility.
5 Notably, for nearly a decade, CFIUS has used a 50-mile (approximately 80.5 km) radius rule in measuring the proximity of a target company’s office, factory or other facility location in relation to any U.S. military or Department of Energy facility.  Whether that current metric will remain the legal standard under the new regulations will be a key factor in assessing the increased scope of CFIUS jurisdiction under FIRRMA.
6 50 U.S.C. 4565(b)(1)(C)(v)((IV)(bb)(AA).
7 This new CFIUS reporting requirement to Congress mirrors to a certain extent a similar requirement that the U.S. Secretary of Defense must submit an annual report to Congress (in both classified and unclassified forms) on military and security developments involving the People’s Republic of China.  Section 1246 of the National Defense Authorization Act for FY 2010, P.L. 111-84, amending Section 1202 of the National Defense Authorization Act for FY 2000, P.L. 106-65.  Each such report by the Secretary must address numerous subjects about the path of military and security developments in China, military organizations and operational concepts supporting such developments, U.S.-China security engagement and cooperation, and military-to-military contacts.
8 Ralls Corp. v. CFIUS, 758 F.3d 296, 317-21 (D.C. Cir. 2014).

9
 Interestingly, the D.C. Circuit includes some judges who already are equipped and experienced to handle cases involving national security information under the Foreign Intelligence Surveillance Act (“FISA”), but Section 1715(4) expressly provides that the “use of information” provisions in FISA will not apply to any civil action brought to challenge a CFIUS ruling under Section 1715.

Firm Highlights

Event/Resource

Corporate Counsel Symposium 2026 Materials Hub

Materials Symposium Agenda CLE & CPD Information Sessions 8:30 am - 9:30 am CT Session A: The Corporate Compass: Finding True North When Ethical Duties Conflict Philip Kaplan, Senior Legal Counsel, Howden Re Lucia Suljic, Vice President, Corporate Legal, Canon USA Nicole Stanton, Partner & Deputy General Counsel, Dorsey & Whitney LLP This panel addresses ethical obligations of in-house counsel, including balancing obligations and duties that may conflict with each other. How should a responsible in-house lawyer deal with those challenging situations? Rather than stick to an academic discussion, this panel will revolve around a series of practical scenarios that are designed to be realistic and timely, including situations where counsel is asked to represent both the company and an individual, how and when to disclose uncomfortable facts and inconvenient documents, issues involving changing firms and companies, and multijurisdictional practice. The panel will feature discussion from two experienced in-house lawyers and Dorsey’s Deputy General Counsel. Session B: Managing Rapid Regulatory Change in International Trade and Cross-Border Investment Nathan Brower, Executive Vice President, General Counsel, Nature’s Sunshine Greg Ogunsanya, Senior Vice President, General Counsel and Corporate Secretary, H.B. Fuller Kathryn Wood, Senior Vice President & General Counsel, DecoPac, Inc. Dave Townsend and Lawrence Ward, Dorsey & Whitney LLP This program is designed for attorneys advising on cross-border transactions, international trade, regulatory compliance, and corporate governance matters. Panelists will examine recent developments in U.S. trade and investment law and policy, as well as their impact on international collaborations, corporate compliance, and mergers and acquisitions. The discussion will explore how general counsel and in-house legal teams assess and manage evolving trade-related risks within their organizations. Particular focus will be given to developments during the first two years of the second Trump Administration, including changes in tariff policy, tariff refunds, export controls, economic sanctions, and national security reviews of foreign investment. Through a discussion of regulatory trends and practical case studies, attendees will gain a deeper understanding of the legal risks and compliance obligations associated with cross-border business activities, and hear about practical strategies for advising clients and managing compliance obligations in a rapidly changing trade and investment environment. 9:45 am - 10:45 am CT Session A: The Elon Musk Cases: What Tesla and Twitter Can Teach Your Board of Directors Loren Unterseher, Managing Partner, Oxbow Industries, LLC Shulamite White, Chief Legal Officer and Head of People, Motive Technologies Kirsten Schubert, Tom Swigert, and Jonathan Van Horn, Dorsey & Whitney LLP Recent cases involving Elon Musk and his businesses have had significant impact on principles governing board of directors’ fiduciary duties and corporate processes. This panel will examine recent litigation involving Elon Musk, Tesla, and Twitter, and its effects on the law governing the duties of directors and executives, including the executive compensation and director compensation processes, conflicts that may arise when a single executive has control over multiple businesses, and the ramifications of tweets or other public statements by an executive. Session B: All Eyes on DEI: Managing Diversity Efforts Amid Regulatory Scrutiny and Potential Litigation Maggie Dalton, Senior Commercial Attorney, Cargill; Board Co-Chair, Twin Cities Diversity in Practice Laura A. Vannelli, Legal Counsel, Mayo Clinic Susan Lorenc and Jack Sullivan, Dorsey & Whitney LLP The legal and regulatory landscape surrounding diversity, equity, and inclusion (DEI) initiatives has changed dramatically over the past two years. Law firms and legal departments are continuing to grapple with how to recruit, retain, and develop talent from a wide range of personal backgrounds, in a world where previously accepted recruiting and employment practices are facing increased scrutiny and litigation. This program will provide a practical overview of the current legal regime, including recent federal enforcement actions and litigation trends associated with DEI initiatives. Panelists will discuss practical ways in which organizations can pursue and retain legal talent and increase inclusion while minimizing legal, business, and reputational risk. 11:00 am - 12:00 pm CT Session A: Governance in an Age of Increasing Unpredictability James Chosy, Senior Executive Vice President and General Counsel, U.S. Bancorp Todd Hartman, Executive Vice President and Chief Legal and Risk Officer, Best Buy Co., Inc. Alan Rosselot, Associate General Counsel & Assistant Secretary, Delta Air Lines, Inc. Cam Hoang and Robert Rosenbaum, Dorsey & Whitney LLP More than ever, ensuring that boards are well-informed and forward-thinking is critical to a company’s success. Join our panel of corporate governance experts as they share their experiences advising boards through crisis and unpredictable events; capitalizing on, but also checking, disruptive technologies; and positioning the company to succeed in an environment of shifting government priorities. Session B: A Day in the Life of a Trademark, Copyright & Advertising Attorney: A Hypothetical Case Study Alexander Kim, Vice President and General Counsel, Binks Nate Whitaker, Chief Legal Officer and General Counsel, Crumbl Cathy Dahl and Tiffany Shimada, Dorsey & Whitney LLP What issues are companies facing daily while developing rights in intellectual property, protecting those rights, and staying in compliance with myriad potential issues related to advertising, social media, relationships with influencers, and environmental or governmental claims? This panel will feature two in-house counsel who are navigating these issues, utilizing a hypothetical case study, with the support of two Dorsey attorneys helping to develop a roadmap for meeting business objectives and minimizing the risk of claims. 12:00 pm - 1:15 pm CT Keynote Address Dr. Rebecca Heiss, Stress Physiologist Dr. Rebecca Heiss is a stress physiologist, author, and sought-after speaker who helps audiences transform fear and stress into fuel for greater performance and resilience. Her research has been recognized as “transformative” by the National Science Foundation, and she is the author of two books, Springboard and Instinct. Through her Fear(less) message, Rebecca inspires audiences with practical, science-based strategies to train our brains to work for us – not against us – and navigate change and uncertainty with greater confidence.

News

Dorsey & Whitney Advises Beijing Xunzhong on Two Consecutive H Share Placings Raising HK$418.5 Million

International law firm Dorsey & Whitney LLP acted as Hong Kong legal advisors to Beijing Xunzhong Communication Technology Co., Ltd. (“Xunzhong”) as to Hong Kong law in connection with two consecutive placings of new H shares under general mandate (the “First Placing” and the “Second Placing”, respectively, and together, the “Placings”). Xunzhong’s H shares are listed on the Main Board of the Hong Kong Stock Exchange (Stock Code: 2597). Winbull Securities International (Hong Kong) Limited acted as sole overall coordinator and placing agent on both Placings. The First Placing of 11,190,000 new H shares at HK$28.20 each was completed on September 17, 2026, followed by the Second Placing of 3,550,000 new H shares at HK$29.00 each on October 30, 2026. The Placings raised approximately HK$315.56 million and HK$102.95 million in gross proceeds, respectively, or approximately HK$418.51 million in aggregate (approximately HK$415.96 million in aggregate net proceeds). Both Placings were conducted under the same general mandate granted by shareholders at Xunzhong’s 2025 annual general meeting, and each was completed within one week of the signing of its placing agreement. Completing placings in consecutive months is relatively uncommon in the Hong Kong market, and doing so called on the technical depth of Dorsey’s Hong Kong Capital Markets team. Working closely with Xunzhong to understand its business needs and prepare the transaction documents, the team addressed in quick succession the remaining capacity under the general mandate, disclosure of the use of proceeds and the maintenance of Xunzhong’s public float, enabling both Placings to be completed seamlessly. “We are pleased to have advised Xunzhong on both Placings,” said Rachel Han, Partner and Co-Head of Dorsey’s Asia Capital Markets practice. “We appreciate the trust placed in our team and the close collaboration among all parties involved. We look forward to supporting Xunzhong as it continues to execute its growth strategy and pursue future capital markets opportunities.” Xunzhong is principally engaged in cloud-based communications services and enterprise digitalization services in the PRC. As disclosed in its announcements, the net proceeds of the First Placing are allocated to developing Xunzhong’s new computing power operation services business, while those of the Second Placing will be used to integrate model-as-a-service (MaaS) and AI agent capabilities into its existing cloud communications platform-as-a-service (PaaS) platform and software-as-a-service (SaaS) products. Approximately 55% of the net proceeds of the Second Placing will be used for computing power equipment upgrades for the MaaS system, approximately 35% for MaaS, PaaS and SaaS platform upgrades, and approximately 10% for working capital and general corporate purposes. With a single MaaS platform and shared computing power supporting its PaaS and SaaS offerings, Xunzhong intends for its MaaS, PaaS and SaaS capabilities to complement and reinforce one another, and to address customer needs from multiple angles, from embedding AI in customer communications and business workflows to maintaining stable performance at scale and keeping customer data within controlled environments. Partner and Co-Head of Dorsey’s Asia Capital Markets practice Rachel Han and Of Counsel in the Capital Markets and Corporate Compliance group Carlton Ng, along with Associate Kristy Ting, led the Dorsey Hong Kong Capital Markets & Corporate Compliance group in advising Xunzhong on both Placings.

Insights

Observations on the SEC’s 2027 Examination Priorities

The SEC’s Division of Examinations (the “Division”) recently announced its examination priorities (“Exam Priorities”) for fiscal year 2027.1 Although many of the Division’s core areas of focus remain consistent with fiscal year 2026, the 2027 Exam Priorities include notable changes and refinements, which we discuss below, along with other key 2027 examination priorities. Dorsey Observations Renewed focus on economic conflicts of interest. After certain economic-incentive topics received less emphasis in the 2026 Exam Priorities2, the Division has again expressly identified economic conflicts as an examination focus. The 2027 Exam Priorities indicate that the Division will prioritize reviewing advisers’ fiduciary obligations relating to economic conflicts of interest raised by fee rebates, fee and expense calculations, cash management, quid pro quo arrangements, and deposits and withdrawals. Greater emphasis on private-fund practices. Building on the private-fund items in the 2026 Exam Priorities, the 2027 Exam Priorities indicate that the Division will assess private-fund disclosures and controls relating to investment allocations, leverage, affiliated service providers, and fees and expenses. The Division also identified investments in private companies through special purpose vehicles (“SPVs”) and loans provided by private funds and business development companies (“BDCs”) as products the Division will scrutinize. Advisers, particularly private-fund advisers, should evaluate whether their disclosures and compliance programs address these areas. Expanded focus on AI-related cybersecurity risks. While the 2026 Exam Priorities focused on advisers’ use of and representations regarding artificial intelligence (“AI”), the 2027 Exam Priorities specifically highlight AI-enabled cybersecurity threats, including AI-generated phishing and synthetic or “deepfake” voice and video used for social engineering. The shift signals that registrants should consider whether their cybersecurity policies and controls adequately address these evolving threats. New focus on proxy advisory firms. The 2027 Exam Priorities state that the Division will examine advisers that rely on proxy advisory firms, including how those advisers evaluate the firms’ recommendations, assess the bases for those recommendations, identify potential conflicts of interest, and determine whether that reliance satisfies applicable legal obligations. Advisers that rely on proxy advisory firms may wish to consider whether their compliance programs address these areas. Updated focus on Regulation S-P and Regulation S-ID. The 2026 Exam Priorities stated that the Division would engage firms during examinations regarding their progress in preparing incident response programs ahead of the compliance dates for the amendments to Regulation S-P and would examine compliance with the amended rule after those dates. The 2027 Exam Priorities indicate that examinations will focus on whether firms have developed, implemented, and maintained reasonably designed policies and procedures addressing administrative, technical, and physical safeguards to protect customer information and that, in accordance with the amended rule, staff will evaluate response program policies and procedures for unauthorized access to or use of customer information, including customer notification procedures and oversight of service providers. With respect to Regulation S-ID, the 2027 Exam Priorities indicate that examiners will assess whether firms are updating their Identity Theft Prevention Program to address emerging risks, such as those related to AI and stolen credentials. Advisers may wish to consider whether their compliance programs address these areas, as applicable. Summary of Other 2027 Examination Priorities Beyond the developments discussed above, many of the Division’s core examination priorities remain consistent with fiscal year 2026. These include investment adviser fiduciary obligations and compliance programs, examinations of never-examined and recently registered advisers, and cybersecurity and operational resiliency. The Exam Priorities are not exhaustive, and examinations will vary based on each registrant’s business, activities and risks. Advisers should consider the 2027 Exam Priorities in reviewing their compliance programs and preparing for potential examinations, including by: Reviewing risk disclosures and controls. The Division states that, when examining advisers to private funds, it will assess whether investment-related risk disclosures are consistent with fiduciary standards and whether compliance policies, procedures, and controls are designed to address both fund-level and investment-level risks. Reviewing disclosures on allocations, leverage, and affiliated service providers. The 2027 Exam Priorities identify disclosures related to certain investments and allocations, the use of debt and fund-level lines of credit, and the use of affiliated service providers as examples. Confirming the accuracy of fee and expense calculations. The Division states that it will assess the accuracy of fee and expense calculations at both the fund and investment levels, and it identifies fee rebates, cash management, quid pro quo arrangements, deposits, and withdrawals as areas in which economic conflicts of interest may affect the impartiality of advice. Reviewing recommendations of illiquid or hard-to-trade products. The Division states that it will prioritize advisers that recommend products that are difficult to trade, have unusual features, or are illiquid, including loans provided by private funds or BDCs and investments in private companies through SPVs. Confirming that the compliance program is implemented and reviewed. The Division states that it will review compliance program components such as marketing, valuation, and custody, as appropriate, and will typically analyze the annual compliance review. It will also focus on compliance practices when advisers have started advising new asset classes or clients or grown through mergers or acquisitions. 1 SEC Division of Examinations 2027 Examination Priorities. 2 See Dorsey’s Client Alert on the SEC’s fiscal year 2026 exam priorities.

Insights

Minnesota Consumer-Fraud Enforcement: Disclaimers Won’t Cure Deception, and Penalties Can Add Up

Misleading advertising claims can lead to costly consequences. In State of Minnesota ex rel. Ellison v. Wall & Associates, Inc., No. A25-2064, 2026 WL 3118291 (Minn. App. Oct. 19, 2026), the Minnesota Court of Appeals recently affirmed a bench trial verdict against a tax-relief company and two executives for violations of the Minnesota Consumer Fraud Act (“MCFA”) and the Minnesota Deceptive Trade Practices Act (“MDTPA”). The decision, which affirmed a substantial restitution and civil penalty judgment, underscores the broad power of the Minnesota Attorney General to act against deceptive sales practices. The decision also offers practical lessons for businesses seeking to reduce liability risks in consumer-facing communications. Background Wall & Associates (“W&A”), a Virginia-based tax-relief company, marketed assistance to taxpayers seeking relief from outstanding federal and state tax liabilities, often with offers in compromise—agreements to settle tax liabilities for less than the amount owed. In its extensive advertising campaigns, W&A represented that its average client received a 90% reduction in their tax debt, that it was a local company with Minnesota offices, that it provided legal services, and that it would “Solve ALL Tax Problems.” In reality, W&A’s promises bore little resemblance to what many clients received. Most of W&A’s clients saw just a 9.5% reduction in federal tax debt and 1.2% in state tax debt. W&A had no permanent Minnesota offices. And W&A provided neither legal representation nor assistance with filing tax returns—those services required referrals to separate firms for an additional fee. All the while, W&A clients paid upfront and recurring fees, including during periods when W&A did no work on their cases. Minnesota Attorney General Keith Ellison sued W&A, its founder and owner Ernest Kenneth Wall, and its president and CEO Patrick Mark Yates, alleging violations of, among other laws, the MCFA and the MDTPA. Following a 12-day bench trial, the district court determined that W&A violated the MCFA and MDTPA through its false and embellished advertising. The district court also held Wall and Yates individually liable for those violations because they directed, participated in, and acquiesced in the violations. The district court ordered injunctive relief, $2.7 million in restitution (with Wall and Yates jointly and severally liable for $1.3 million), and civil penalties of $786,517 against W&A, $415,500 against Wall, and $207,750 against Yates. The district court also awarded over $2.5 million in attorneys’ fees and costs to the state. W&A, Wall, and Yates appealed to the Minnesota Court of Appeals, which affirmed the district court’s decision on October 19, 2026. Although W&A, Wall, and Yates challenged the judgment on numerous grounds, several highlights of the decision provide important takeaways for consumer-facing businesses. Individual Reliance Is Not Required for Statutory Liability W&A argued that Attorney General Ellison had to prove a causal nexus between each violation of the MCFA and MDTPA and the injury to a particular consumer to establish liability. In W&A’s view, this required proof that each injured consumer had personally relied on W&A’s false representation. The Court of Appeals rejected this argument based on the MCFA’s and MDTPA’s plain language, which requires no proof of actual deception or confusion by consumers. The Court of Appeals finally pointed to the Minnesota Supreme Court’s decision in State v. Minnesota School of Business, Inc., which held that when a defendant’s misrepresentations are directed at and affected “a broad group of consumers, proof of direct individual reliance is not required to establish a causal nexus between MCFA violations and the harm suffered by consumers.” 935 N.W.2d 124, 135 (Minn. 2019). The Court of Appeals affirmed, however, that a causal nexus is necessary to support an award of damages under the MCFA and MDTPA. In making that determination, district courts look to various factors, including whether the misrepresentations were “longstanding, pervasive, and widespread in communications directed to consumers,” whether the seller intended and understood that consumers would rely on the misrepresentations, and whether the information was of a kind on which consumers would typically rely. The Court of Appeals’ decision continues Minnesota School of Business’s broad interpretation of liability under the MCFA and the MDTPA. Coordinated marketing campaigns to a “broad group of consumers” may expose businesses to MCFA and MDTPA liability without customer-by-customer proof of injury. That said, a causal nexus remains an element of an MCFA and MDTPA claim, and businesses involved in litigation should build a clear record at trial and on appeal showing how each of the relevant factors bears on the causal-nexus inquiry. Contractual Disclaimers Are Not an Automatic Defense to a Misleading Pitch W&A next argued that disclaimers in its client contracts prevented consumers from claiming they had been misled by its advertising. Reiterating that individual reliance is not required under the MCFA and MDTPA, the Court of Appeals held that a contractual disclaimer does not necessarily defeat a claim based on a conflicting oral representation. And on the facts of this case, the Court of Appeals agreed with the district court that W&A’s contractual disclaimers were insufficient given the extensive misrepresentations by W&A and the unequal bargaining power between it and its customers. This holding confirms that contractual disclaimers are not a cure-all for misleading advertising or sales practices. Businesses should review the entire customer journey, including pre-contract representations, as those representations may survive a contractual disclaimer to the contrary. And if faced with litigation, businesses should build a strong record, both at trial and on appeal, showing why any disclaimer is effective in context. The State Has Broad Authority to Seek Restitution W&A also challenged Attorney General Ellison’s authority to seek restitution under the state’s parens patriae authority to protect residents’ collective interests, arguing that injury to only 228 Minnesotans did not affect a sufficiently substantial segment of the population. The Court of Appeals rejected a simple headcount approach, instead explaining that the state had a legitimate interest in protecting residents’ economic well-being as a whole. In any event, the Court of Appeals held that if restitution was not appropriate under the state’s parens patriae authority, then it would still be appropriate under the Attorney General’s enforcement powers under Minn. Stat. § 8.31. The decision reinforces that the broader and more sustained the deceptive advertising, the stronger the case for restitution to protect Minnesotans’ economic interests. Civil Penalties Accrue Per Violation, Not Per Defendant The Court of Appeals finally rejected W&A’s claim that the Attorney General’s enforcement powers under Minn. Stat. § 8.31 permit only civil penalties of up to $25,000 for each defendant. Rather, the Court of Appeals explained that penalties are limited to $25,000 per violation. Multiple violations can therefore produce substantially greater penalties. The Court of Appeals also rejected the argument that restitution made penalties unnecessary: repaying consumers does not eliminate the need to address gains from deceptive conduct and deter future violations. Final Takeaways Align every consumer-facing communication. Broad and extensive marketing campaigns can expose businesses to stronger enforcement standards under the MCFA and MDTPA, making it critical that consumer communications remain accurate and consistent from the first advertisement through the final sale. Plan for layered enforcement exposure. Penalties under the MCFA and MDTPA can add up quickly: W&A, Wall, and Yates ultimately faced more than $6 million in civil penalties, restitution, and attorneys’ fees. The decision continues a line of Minnesota cases recognizing the Attorney General’s broad consumer-protection authority. Details matter. Although the Attorney General’s enforcement power is broad, it is not boundless. As the Court of Appeals explained, issues of causation, the effectiveness of contractual disclaimers, and the availability of restitution and civil penalties all turn on the specific facts of the case. Effective advocacy at trial and on appeal is critical to developing the facts relevant to liability and damages.