The Treasury Department on October 22 proposed the next big expansion of Washington’s outbound-investment regime: biotechnology. In a Notice of Proposed Rulemaking to implement the Comprehensive Outbound Investment National Security Act, Treasury said some U.S. investments in covered foreign persons working on specified national-security technologies would have to be reported, while others would be prohibited if the rule is finalized.
That matters because biotech sits in a gray zone that semiconductors and missiles generally do not. Venture rounds, licensing deals, research partnerships, manufacturing arrangements, and corporate expansions can advance ordinary medical innovation and still raise national-security questions about data, know-how, scale-up, or dual-use capability. The practical question for companies is not whether all cross-border biotech activity is suddenly off limits. It is where the new screen begins, what diligence comes before a term sheet, and which parts of the answer Treasury still has not nailed down.
The proposal is not yet the law of the land. Treasury is taking comments through December 7, 2026, and says a later final rule will set the effective date. In the meantime, the existing Outbound Investment Security Program remains in force.
What changed — and what did not
The current program already has a history. A 2023 executive order launched the framework, and Treasury’s 2024 rules, effective January 2, 2025, cover semiconductors and microelectronics, quantum information technologies, and artificial intelligence. The COINS Act, enacted on December 18, 2025, as part of the fiscal 2026 National Defense Authorization Act, turned that framework into statute and gave Treasury room to build it out.
This week’s proposal would do that in several directions at once. Treasury’s announcement says the rule addresses covered foreign persons, transaction categories, exceptions, technology definitions, required notification information, non-binding feedback, confidential submissions, a knowledge standard, reasonable-and-diligent inquiry expectations, violations, and penalties. It also adds or defines controls for high-performance computing and supercomputing, hypersonic systems, and biotechnology alongside the technology areas written into the statute.
For biotech, the immediate significance is conceptual as much as legal. Washington is treating capital itself as a strategic channel. Export controls focus on goods, software, and technical assistance moving across borders. Outbound-investment rules ask whether U.S. money, governance rights, managerial input, reputational validation, or other intangible benefits help build sensitive capability abroad.
That distinction is why a biotech investor cannot read this as either a narrow paperwork rule or a blanket ban. It is neither. Treasury’s program page still ties the existing regime to the People’s Republic of China, Hong Kong, and Macau. AP reporting says the 2025 law expanded the program to additional countries including Cuba, Iran, North Korea, and Russia. AP also reported that the proposal would apply only to investments above $50,000 and would exclude many financial investments, including ordinary stock purchases. Those limits matter, but they are features of the proposed rule, not proof that every biotech relationship is safe or that the final version will look exactly the same.
The new diligence map for biotech deals
If the rule is finalized in roughly its proposed form, the real compliance burden will arrive before a transaction closes.
A venture fund looking at a synthetic-biology startup, a pharmaceutical company considering an overseas joint venture, or a university spinout negotiating a licensing structure would need to ask at least five questions early.
First: who exactly is on the other side? The proposal turns heavily on whether the target is a covered foreign person, which means ownership and control matter. That pushes deal teams beyond a simple cap-table review toward beneficial ownership, affiliates, parent entities, and controlled foreign subsidiaries.
Second: what capability is actually being financed? “Biotech” is too broad to be operational. Companies will need to map a target’s technical work, platform, end use, and customer base against whatever final technology definitions Treasury adopts. A therapeutic company with routine international research ties is not automatically the same thing as a business working on a strategically sensitive capability, but the line is not yet public in enough detail to make that call easy.
Third: what does the investment convey besides cash? A passive position may look very different from a deal that includes a board seat, observer rights, veto power, technical collaboration, access to data, recruiting help, or management expertise. Outbound-investment policy is built on the idea that those non-cash benefits can accelerate capability.
Fourth: where does the activity sit inside the investor’s own organization? Treasury’s announcement expressly includes U.S. persons and their controlled foreign entities. That means a U.S. parent cannot assume an offshore subsidiary’s deal escapes review just because the immediate investor is not based in the United States.
Fifth: does an exception apply? The proposal addresses exceptions, but the announcement does not resolve the operational edge cases companies care about most: licensing, contract research, joint ventures, acquisitions of foreign firms, corporate restructurings, limited-partner commitments, and technical support arrangements.
All of that makes the knowledge standard especially important. Treasury says the NPRM addresses reasonable-and-diligent inquiry expectations, but the public materials do not yet tell a company how much investigation will be enough in practice. That is the kind of question lawyers, investors, and operating executives are likely to press in comments before the December deadline.
A national-security tool with real innovation costs
Treasury’s argument is straightforward: sensitive capability can be advanced not only by exporting a product, but by financing the company building it. In biotech, that concern is plausible. International drug development and life-science infrastructure often combine software, sequencing, manufacturing, data, and technical collaboration in ways that do not fit neatly into older trade-control boxes.
The tradeoff is that biotech is also unusually collaborative and commercially entangled. Broad or unclear definitions could push firms to walk away from benign research relationships simply because the diligence cost becomes too high or the enforcement risk too murky. The Biotechnology Innovation Organization has backed the idea that biotech is strategic while warning that an overly broad rule could reduce investment, slow collaboration, and weaken U.S. competitiveness. That tension is not rhetorical. It affects where venture money goes, how licensing deals are structured, whether board rights are stripped from cross-border financings, and how willing large pharmaceutical companies are to pursue partnerships that might later invite review.
In that sense, the proposal is best understood as the capital-markets counterpart to export controls: a tool designed to block genuinely sensitive capability-building without freezing normal commerce. Whether it can do that will turn on definitions and exceptions more than on the statute’s broad national-security language.
What is settled today is narrower than the headlines may suggest. Existing outbound-investment rules remain in effect. Treasury has proposed adding biotech and other areas under the COINS Act. Comments are due December 7. The final compliance perimeter, the treatment of several common transaction structures, and the effective date all remain open.
For companies, the immediate task is not to stop every foreign biotech conversation. It is to inventory where capital, governance rights, technical collaboration, and foreign ownership intersect — and to decide, before the rule is final, which facts they would need in hand to tell a normal biotech deal from one Washington may soon treat as a national-security risk.
By
By
By
By
By
By
By
