The New US Capital Reality: A Guide to the Outbound Investment Security Program, the Statutory Framework, and the Future of Global Tech Flow

The era of borderless American capital is officially over. For decades, U.S. investors deployed trillions of dollars globally with minimal state interference, operating on the premise that capital flow was a purely economic exercise.[1]

That paradigm shifted permanently on January 2, 2025, when the U.S. Department of the Treasury's Outbound Investment Security Program (OISP) went into effect.[1]

Often dubbed "reverse CFIUS," the OISP represents a structural inversion of how the U.S. government handles economic statecraft. While the traditional Committee on Foreign Investment in the United States (CFIUS) reviews foreign money coming into the country, the new regime polices American money going out.[3][7]

The core premise of the OISP is that American investment delivers more than just money. Treasury's framework explicitly targets the "intangible benefits" that accompany U.S. venture capital and private equity, such as managerial assistance, talent networks, and enhanced market access.[1]

The initial regime, born from Executive Order 14105, narrowly targeted three sectors: semiconductors and microelectronics, quantum information technologies, and artificial intelligence systems.[1][3]

The geographic scope was equally targeted, applying exclusively to "countries of concern"—defined at launch as the People's Republic of China, including the special administrative regions of Hong Kong and Macau.[1]

But the regulatory perimeter did not stay static for long. On December 18, 2025, the passage of the Comprehensive Outbound Investment National Security (COINS) Act codified the OISP into statute and mandated a massive expansion of the program.[2][4]

The COINS Act broadens the geographic dragnet far beyond Beijing. Under the new statutory mandate, the list of countries of concern expands to include Russia, Iran, North Korea, Cuba, and Venezuela.[6]

The technological perimeter is also expanding. The COINS Act directs Treasury to add high-performance computing, supercomputing, and hypersonic systems to the restricted list, recognizing that these technologies pose acute national security risks.[5][6]

The most radical shift, however, lies in the compliance mechanics. Unlike the inbound CFIUS process—where parties submit a transaction for government review and receive a "safe harbor" clearance—the outbound regime is entirely self-executing.[3][7]

There is no committee to petition, no application to file, and no government blessing to obtain before closing a deal. U.S. persons must independently determine whether their transaction is prohibited, requires post-closing notification, or is permissible.[3][7]

This places an unprecedented due diligence burden on U.S. persons. The rules apply not just to direct equity investments, but to joint ventures, greenfield developments, and certain debt financing arrangements.[3]

Even indirect investments are caught in the net. U.S. limited partners (LPs) investing in non-U.S. funds must ensure their capital is not deployed into prohibited foreign entities, forcing a rewrite of side letters and fund agreements globally.[6]

The financial muscle behind this new regime signals severe enforcement intent. The COINS Act authorizes $150 million annually for Treasury to administer and enforce the outbound program.[4][5]

To put that figure in perspective, the established CFIUS apparatus operated on a budget of approximately $45 million in fiscal year 2025. The tripling of resources indicates a massive upcoming enforcement wave.[4]

Until Treasury issues its final implementing regulations for the COINS Act—mandated by March 2027—the original January 2025 OISP rules remain the law of the land.[2][5]

For U.S. fund managers, corporate venture arms, and institutional investors, the mandate is clear: national security is no longer just the government's job. It is a daily, unshiftable liability written into the cap table.[2][6]