UK National Security & Investment (NSI) Act Timeline Calculator

UK National Security and Investment (NSI) Act Statutory Mechanics

The UK National Security and Investment Act 2021 (the “NSI Act”) represents the most significant overhaul of the United Kingdom's corporate investment screening and merger control rules in decades. Entering into full force in January 2022, the NSI Act gives the UK Secretary of State and the specialized Investment Security Unit (ISU) sweeping authority to review, condition, restructure, or completely block corporate transactions, joint ventures, and asset purchases that may present risks to the national security of the United Kingdom.

1. Mandatory vs. Voluntary Regimes & Sectoral Scope

The NSI Act operates a dual-track structure based on the sensitivity of the target entity's activities:

• The Mandatory Notification Regime: Appliers when an acquirer proposes to gain specific levels of control (such as acquiring more than 25%, more than 50%, or 75% or more of shares or voting rights) over an entity active within one of the 17 highly sensitive sectors. These sectors are highly technical and include Artificial Intelligence, Quantum Technologies, Advanced Materials, Cryptography, Civil Nuclear, Defense, and Synthetic Biology. Transactions falling in this bucket must receive formal regulatory clearance before they can legally close.
• The Voluntary Notification Regime: For transactions outside the 17 mandatory sectors, or for qualifying asset acquisitions (such as land, intellectual property, software, or trade secrets), parties are not legally required to file before closing. However, the government retains a retroactive "Call-In" power for up to 5 years post-transaction (reduced to 6 months once the Secretary of State becomes aware). Parties often file a voluntary notice to secure legal certainty and avoid the risk of a post-closing unwinding order.

2. The Statutory Clock & Holiday Shifting

Deadlines under the NSI Act are strict and strictly defined in terms of working days rather than calendar days. Under Section 56 of the Act, a working day is any day that is not a Saturday, Sunday, Good Friday, Christmas Day, or an official bank holiday in any part of the United Kingdom under the Banking and Financial Dealings Act 1971.

Because of the UK's specific bank holiday schedules—including substitute holidays when major events like Christmas Day or Boxing Day fall on weekends—manually calculating these periods can be highly challenging. This calculator incorporates a pre-computed repository of official bank holidays for England & Wales covering 2025, 2026, and 2027 to ensure that timeline projections are aligned with UK government schedules.

3. Phase 1 vs. Phase 2 Regulatory Timelines

The assessment process follows a distinct, multi-phase timeline:

1. Validation and Acceptance: When a notification is uploaded, the ISU performs a preliminary check to ensure it meets technical requirements. The statutory clock does not begin until the ISU issues a formal notice of acceptance, which historically ranges between 5 to 15 working days.
2. Phase 1 Review (30 Working Days): Once accepted, the ISU has a statutory limit of 30 working days to decide whether to clear the transaction without conditions or call it in for an in-depth Phase 2 investigation.
3. Phase 2 Assessment (30 Working Days + 45-Day Extension): If called in, the ISU gets an initial 30 working days to conduct a comprehensive security review. The Secretary of State can unilaterally extend this by an additional 45 working days if they declare a potential national security risk remains. Further extensions are possible with the voluntary, written agreement of the acquiring party.

4. Information Notices & Toll-Stop Mechanisms

One of the most critical practical risks in UK regulatory planning is the Information Notice (Toll-Stop). Under the NSI Act, if the ISU issues a formal notice requesting corporate records, market share data, or security access lists, the statutory assessment clock is paused immediately. The clock remains paused until the parties submit all requested documents and the ISU formally confirms full compliance. The clock resumes the day after compliance is verified, which can add weeks or months of unforeseen delay to cross-border transaction completions.