United Kingdom — Startups · corporate

Completed Funding Round Without NSI Act Approval: What to Do (UK Startups)

If your UK startup completed an equity financing round in a sensitive sector without prior clearance, the transaction is legally void under Section 13(1) of the National Security and Investment Act 2021. That means your investor does not legally own their shares, past corporate decisions are exposed to challenge, and the company faces steep statutory penalties. You must identify the trigger breach immediately and submit an application for retrospective validation under Section 16 to cure your cap table.

The National Security and Investment Act in the United Kingdom: Void by Law

In the United Kingdom, the National Security and Investment Act 2021 (NSI Act) establishes a mandatory notification regime for acquisitions of control over qualifying entities operating within 17 sensitive economic sectors, including Artificial Intelligence, Cryptographic Authentication, Quantum Technologies, Advanced Materials, Synthetic Biology, and Autonomous Robotics. If an investor acquires equity or voting rights crossing 25%, 50%, or 75%, or acquires voting rights that allow them to secure or prevent the passage of any class of resolution, the transaction is a notifiable acquisition.

Under Section 13(1) of the NSI Act, any notifiable acquisition completed without prior approval from the Secretary of State (administered by the Investment Security Unit) is void as a matter of law. There is no de minimis financial threshold: a £250,000 seed round triggers the same mandatory pre-closing clearance requirement as a £50 million Series B if the sector definition and equity thresholds are met.

The statutory penalties for completing without clearance are severe. Under Section 34 and Section 41, the acquirer faces civil fines of up to £10 million or 5% of worldwide turnover (whichever is higher), and directors who consented to or neglected the breach risk criminal liability under Section 39, carrying prison sentences of up to five years. Even where enforcement focuses on the buyer, the target startup suffers immediate structural damage: your share register is invalid, and your cap table is broken.

The Operational and Governance Fallout on Your Startup

Founders routinely find themselves trapped in this position because of aggressive deal momentum, pressure from lead investors to close before fiscal deadlines, or corporate solicitors who treated national security filings as an afterthought. Regardless of how the oversight occurred, pretending the problem does not exist will derail your business.

Because Section 13(1) renders the unapproved allotment void from the outset, the shares were never legally issued. Any investor rights derived from those shares—such as appointing an investor director, exercising vetoes under an investor rights agreement, or voting on subsequent shareholder resolutions—are legally compromised. If your board approved subsequent equity grants, option pools, or commercial transactions that relied on those investor votes, those decisions can be challenged by existing or former shareholders.

Crucially, you cannot sweep this under the rug. Incoming lead investors, bank lenders, grant bodies (such as Innovate UK), and potential acquirers conduct rigorous legal due diligence. The moment institutional counsel asks for your NSI Act clearance notice and discovers an unapproved crossing of the 25% threshold, your next funding round or exit will freeze until the breach is regularised.

Remedying the Breach: Section 16 Retrospective Validation

The NSI Act anticipates deal oversights and provides a statutory remedy. Under Section 16 of the Act, either party to a completed notifiable acquisition—including the target company itself—can submit an application for retrospective validation to the Investment Security Unit (ISU) via the UK government's online notification portal.

Once the ISU formally accepts your retrospective validation application, a statutory review period of 30 working days begins. During this window, the government evaluates whether the transaction poses a national security risk. If cleared, the Secretary of State issues a validation notice under Section 15(3), which operates retroactively to treat the transaction as if it had been validly approved before completion, fully restoring the legal validity of the shares.

If the ISU determines that the investor or technology raises potential concerns, it may call in the transaction for a further 45 working days and either impose targeted remedies or, in extreme cases, order the investment unwound. You can use Caunsel to research the 17 mandatory UK sectors, securely store your investment documentation in a private case file, or connect directly with an independent corporate lawyer experienced in handling ISU filings.

Steps

• Perform an urgent scope audit by reviewing your articles of association, cap table, and current technical operations against the 17 mandatory sectors defined in the NSI Act 2021 (Notifiable Acquisition) Regulations to confirm whether a mandatory trigger occurred.
• Place a temporary hold on major corporate actions, share reallocations, and critical board votes that depend on the unapproved investor's voting rights while the transaction remains legally void.
• Convene a confidential board and investor discussion to inform your lead backer of the Section 13 void status, emphasizing that early proactive disclosure drastically reduces the risk of civil penalties.
• Draft and file an online application for retrospective validation under Section 16 of the NSI Act, providing full disclosure of the target entity's UK activities, ownership structures, and ultimate beneficial ownership of the investor.

Common mistakes

• Assuming early-stage startups, small cheque sizes, or UK-domiciled angel investors are exempt from mandatory NSI Act screening (the regime applies to qualifying sectors regardless of investor nationality or investment value).
• Attempting an informal 'paperwork fix' by cancelling and re-issuing shares or backdating board minutes without filing a formal retrospective validation with the Investment Security Unit.
• Hiding the unapproved closing during your next fundraising round, which breaches disclosure warranties and exposes founders to personal claims for misrepresentation.
• Waiting for the government to discover the deal through market monitoring or a competitor's tip-off, which forfeits the leniency typically granted to voluntary self-reporters.

Questions people ask

Does the NSI Act apply if our investor is a British citizen or UK-based venture capital fund?

Yes. Mandatory notification requirements apply whenever an acquirer crosses a statutory control threshold in one of the 17 sensitive sectors, regardless of whether the investor is British, European, or non-UK. Investor nationality is considered during the substantive national security risk assessment, but it does not exempt the deal from notification.

What happens to board resolutions passed with the investor's votes while the deal is void?

Because Section 13(1) of the NSI Act renders the share acquisition void at law, rights attached to those shares are legally ineffective during the void period. Once a validation notice is granted under Section 15(3), the deal is treated as valid from completion. However, prudent startups should execute retrospective board and shareholder ratification resolutions immediately after receiving ISU validation.

How long does it take the Investment Security Unit to grant retrospective validation?

Once the ISU formally accepts your Section 16 notification as complete, the government has 30 working days to either grant validation or issue a call-in notice. If called in, the assessment period can be extended by a further 45 working days, meaning the total timeline typically spans between two and four months.

General information only, last updated 2026-11-05. Caunsel is not a law firm and does not practise law. AI answers and this guide are not legal advice. Verify filings, deadlines, and statutes with a licensed lawyer in United Kingdom — Startups.