Skip to content
RegTech CodexGlobal Financial Compliance, AML/KYC Frameworks & Prudential Rulebooks

Thematic Pillar Hub · 1 Published Briefings

Cross-Border Sanctions, Outbound Investment & Digital Asset Compliance

Cross-Border Sanctions, Outbound Investment & Digital Asset Compliance institutional intelligence, quantitative benchmarks, primary regulatory filings, and market structure analysis from RegTech Codex. An institutional RegTech dossier examining the October 2026 US Treasury COINS Act (31 CFR Part 850) Outbound Investment NPRM expanding restrictions into biotechnology, AI compute, and quantum systems alongside post-Clarity Act SEC/CFTC and EU MiCA compliance.

Curated by Victoria Ashworth, LL.M, CAMS (LL.M in Financial Regulation (UCL), Certified Anti-Money Laundering Specialist) · Fact-checked by RegTech Codex Institutional Review Board

Key Institutional Takeaways — Cross-Border Sanctions, Outbound Investment & Digital Asset Compliance

  • The October 2026 U.S. Treasury Notice of Proposed Rulemaking (NPRM) under the COINS Act expands 31 CFR Part 850 beyond semiconductors, quantum computing, and AI to introduce a fourth national security vertical covering dual-use biotechnology, unscreened gene synthesis (> 1,500 base pairs), bio-AI models (> 10^24 FLOPs), and human genomic databanks exceeding 100,000 individuals.
  • Under 31 CFR § 850.209(a)(2) and the October 2026 NPRM attribution updates, any third-country venture holding company or SPV is classified as a 'covered foreign person' if it derives more than 50.0% of its consolidated revenue, net income, capital expenditure (CapEx), or operating expense (including R&D compute and sequencing OpEx) from entities in a country of concern engaged in covered activities.
  • U.S. institutional Limited Partners (LPs) investing in non-U.S. venture or private equity funds qualify for the 31 CFR § 850.501(a)(1)(iii) Safe Harbor only if their aggregate commitment is capped at $2,000,000 with strictly passive rights, or if they execute a binding pre-investment Side Letter/LPA covenant that completely excuses their capital and segregates their NAV waterfall from covered portfolio transactions.
  • Violations of 31 CFR Part 850 trigger strict civil penalties under IEEPA and the COINS Act equal to the greater of $368,136 (adjusted for inflation) or 200% (2x) of the total value of the prohibited transaction, alongside mandatory Treasury divestment orders within 180 days and criminal fines up to $1,000,000 / 20 years imprisonment for wilful evasion.
  • Following the U.S. Senate's October 2026 failure to advance the crypto Clarity Act, compliance teams must manage parallel SEC enforcement under Exchange Act Rule 3b-16 (DeFi interfaces) and Section 15(a) (algorithmic liquidity dealers above $50M) alongside CFTC CEA Section 2(c)(2)(D) 28-day actual delivery and FCM rules—contrasting sharply with the unified EU MiCA CASP passport supervised by ESMA and the EBA.

All Cross-Border Sanctions, Outbound Investment & Digital Asset Compliance Research Briefings (1)

2026-10-23Victoria Ashworth, LL.M, CAMS

Cross-Border RegTech & National Security Screening in October 2026: US Treasury COINS Act Outbound Investment NPRM (AI, Quantum & Biotech) and Post-Clarity Act SEC/CFTC Rulemaking

An institutional RegTech dossier examining the October 2026 US Treasury COINS Act (31 CFR Part 850) Outbound Investment NPRM expanding restrictions into biotechnology, AI compute, and quantum systems alongside post-Clarity Act SEC/CFTC and EU MiCA compliance.

Institutional Directories & Regulatory Registers

Frequently Asked Questions — Cross-Border Sanctions, Outbound Investment & Digital Asset Compliance

How does the October 2026 US Treasury COINS Act NPRM expand 31 CFR Part 850 into biotechnology and AI compute?

The October 2026 Notice of Proposed Rulemaking under the Comprehensive Outbound Investment Security (COINS) Act adds dual-use biotechnology as a fourth covered sector alongside semiconductors, quantum technologies, and AI. Specifically, it proposes prohibiting U.S. outbound investments into covered foreign persons engaged in unscreened gene synthesis exceeding 1,500 base pairs, biological sequence AI models trained above 10^24 FLOPs, and human genomic databases exceeding 100,000 individuals, while requiring 30-day notifications for high-throughput sequencing (> 20 terabases/run) and dual-use AI models between 10^23 and 10^25 FLOPs.

What are the exact requirements for a US Limited Partner (LP) to qualify for the 31 CFR § 850.501(a)(1)(iii) Safe Harbor?

To qualify as an Excepted Transaction under 31 CFR § 850.501(a)(1)(iii), a U.S. LP's investment into a pooled fund must be strictly passive (no LPAC approval votes over specific portfolio companies and no GP control rights) and satisfy one of two conditions: (1) the LP's aggregate committed capital does not exceed $2,000,000; or (2) the LP secures a legally binding contractual covenant (via Side Letter or LPA prior to capital deployment) ensuring its capital cannot be used for prohibited or notifiable transactions and segregating its profit/loss waterfall from covered assets.

How does the 50% financial attribution rule under 31 CFR § 850.209(a)(2) apply to Cayman or Singapore holding companies?

Under 31 CFR § 850.209(a)(2), an entity domiciled outside a country of concern (such as a Cayman Islands, Singapore, or European parent company) is legally designated as a 'covered foreign person' if it holds any equity, voting interest, board seat, or management direction power in a country-of-concern entity engaged in covered national security activities AND derives more than 50.0% of its consolidated revenue, net income, capital expenditure, or operating expense (including R&D compute and laboratory OpEx) from one or more such entities.

How does the October 2026 Senate Clarity Act stalemate impact SEC, CFTC, and EU MiCA compliance for DeFi and stablecoins?

Because the U.S. Senate rejected the procedural motion on the Clarity Act in October 2026, U.S. market participants remain subject to overlapping SEC and CFTC jurisdiction rather than a statutory digital commodity safe harbor. The SEC enforces Exchange Act Rule 3b-16 against DeFi order-routing interfaces, Section 15(a) against algorithmic liquidity dealers (> $50M), and Section 5 against yield-bearing stablecoin wrappers, while the CFTC enforces CEA Section 2(c)(2)(D) (28-day actual delivery for retail leverage below the $10M ECP floor) and Section 4d FCM rules—whereas EU CASPs operate under a single MiCA Title V passport and EBA 30%/60% EMT bank reserve framework.

Explore Related Thematic Research Hubs on RegTech Codex

Cross-Border Sanctions, Outbound Investment & Digital Asset Compliance — Institutional Research & Regulatory Hub | RegTech Codex | RegTech Codex