UK to Refine NSI Act Triggers for AI Deals - What Government Teams Should Do Now
The UK government has announced plans to adjust what counts as a mandatory notification for artificial intelligence deals under the National Security and Investment (NSI) Act. It also signalled that steps to exempt certain internal restructurings from filing will be set out in due course.
For officials managing investments, restructures, or disposals that touch AI assets, this matters. It will influence timelines, documentation, and how you triage risk across portfolios and public bodies.
What this likely means
The intent is to better target AI activities that create national security risk and reduce filings that don't. Expect tighter definitions around what AI capabilities, data, or compute fall in scope, plus clarity on corporate reorganisations that don't change ultimate control.
Nothing changes until the government publishes final rules. Keep using the current guidance and filing where required.
Immediate actions for departments, agencies and ALBs
- Create a live register of AI-related transactions: equity stakes, JVs, asset sales, data access arrangements, and compute leases tied to sensitive workloads.
- Run an NSI triage early. Add an AI-specific checkpoint to procurement and investment gateways so potential filings are flagged before terms are set.
- Tighten contract playbooks. Include NSI clauses in heads of terms and SPAs: cooperation on filings, long-stop dates, and risk allocation if a call-in occurs.
- Identify AI assets that can be in scope: models, safety tooling, training datasets, fine-tuned weights, model IP, and specialised compute tied to sensitive use cases.
- Plan around timelines. The initial assessment period can add weeks; build this into delivery plans and ministerial expectations.
- Protect sensitive data during due diligence. Gate access, log downloads, and segment restricted datasets to avoid unnecessary exposure.
- Coordinate across borders where relevant. Parallel FDI reviews (for example, EU or US) can influence sequencing and disclosures.
Preparing for the internal restructuring exemption
The government intends to exempt some internal reorganisations from filing. Until details land, proceed as usual under current rules.
- Map planned intra-group transfers for the next 12 months. Flag those involving AI units, key datasets, critical compute, or security-sensitive contracts.
- Keep clear evidence of unchanged ultimate control: ownership charts, governance documents, and decision rights before/after the move.
- Standardise board minutes and approvals so the paper trail shows why the move is internal and security position is unaffected.
- Pre-brief the relevant investment security contacts if timing is tight, and avoid irreversible steps before you have certainty.
Policy considerations
- Expect requests for input on scope. Collect evidence on where filings helped, where they over-captured, and which AI sub-domains pose real risk.
- Focus on clear, technology-neutral definitions tied to capability and access (model weights, data sensitivity, and control over deployment).
- Align with procurement and data policy so definitions don't clash with existing security classifications or cloud/computing strategies.
Practical checklist
- Owner: appoint an NSI lead and a deputy; set a single inbox for queries.
- Process: embed an NSI screen at the opportunity, heads of terms, and contract approval stages.
- Templates: update NDAs, DD questionnaires, and SPA clauses to cover NSI cooperation and long-stop mechanics.
- Records: maintain a central log of filings, outcomes, and conditions to speed up future assessments.
- Training: brief commercial, legal, and data teams on upcoming AI scope refinement and the potential intra-group exemption.
FAQs (what we can say now)
- Does this apply to completed deals? Unknown. Assume changes will apply prospectively and continue to comply with current rules.
- What counts as "AI" today? Use the current notifiable acquisition guidance until replaced. When in doubt, seek advice early.
Where to follow official updates
Government guidance and announcements will be posted here:
- National Security and Investment Act: official guidance (GOV.UK)
- Notifiable acquisitions: sectors and definitions (GOV.UK)
Helpful resource for policy teams
For context on AI policy choices and governance trade-offs, see the AI Learning Path for Policy Makers.
Bottom line: keep filing under the current NSI regime, get your AI deal inventory in shape, and prepare documentation so you can act quickly once the refined scope and internal restructuring exemption are published.
Your membership also unlocks:
