M&A Update in Cyprus: Q1 2026

Cyprus m&a 2026 is evolving rapidly, with recent legislative amendments, updated competition thresholds, and a more active enforcement posture from the Commission for the Protection of Competition reshaping how cross-border deals are structured and executed. For international investors and founders using Cyprus as a holding or acquisition vehicle, understanding these shifts is no longer optional - it is a prerequisite for deal certainty. This guide covers the most significant regulatory and legal developments of the current quarter, their practical implications for deal structuring, the key compliance obligations that have come into focus, and the common mistakes foreign acquirers are making in the current environment.

The foundational framework for mergers and acquisitions in Cyprus rests on the Companies Law, Cap. 113, the Control of Concentrations between Undertakings Law of 1999 (as amended), and the Investment Services and Activities and Regulated Markets Law. Recent amendments have tightened the procedural requirements under the concentration control regime, most notably by clarifying the notification thresholds and the information that must be submitted at the pre-notification stage.

The Commission for the Protection of Competition (CPC) has issued updated guidance on the calculation of combined turnover for the purposes of determining whether a concentration is notifiable. The guidance clarifies that turnover generated through Cyprus-registered holding structures must be attributed to the ultimate beneficial owner';s group for threshold purposes, not merely to the Cyprus entity itself. This is a non-obvious requirement that catches many foreign acquirers off guard, particularly those using Cyprus as an intermediate holding layer in a larger group.

The Cyprus Securities and Exchange Commission (CySEC) has also updated its disclosure requirements for public company acquisitions. Acquirers crossing the 5%, 10%, 15%, 20%, 25%, 30%, 50%, and 75% thresholds in a listed company must now file notifications within a shorter window than previously required. The practical effect is that deal teams must build tighter timelines into their transaction schedules for any deal touching a CySEC-regulated entity.

A further development concerns the Registrar of Companies and Official Receiver, which has streamlined the electronic filing process for merger-related documents under Cap. 113. Schemes of arrangement and cross-border mergers under the Cross-Border Mergers of Limited Liability Companies Law now benefit from a more predictable processing timeline, though the substantive requirements remain unchanged.

The current quarter has seen continued activity in the financial services, real estate, and technology sectors, consistent with Cyprus';s established role as a gateway jurisdiction for investment into Central and Eastern Europe, the Middle East, and Africa. Several notable patterns have emerged that practitioners and investors should factor into their planning.

Financial services consolidation remains a dominant theme. Smaller licensed entities - particularly investment firms and payment institutions regulated by CySEC - are attracting acquisition interest from larger European groups seeking to expand their regulatory footprint. The key driver is the CySEC licence itself, which provides passporting rights across the European Economic Area. Acquirers in this space must account for the change-of-control approval process under the Investment Services Law, which requires prior written consent from CySEC before completion. The process typically takes between 60 and 90 working days from the submission of a complete application, and incomplete submissions are a frequent source of delay.

Real estate transactions involving Cyprus-registered special purpose vehicles continue to be structured through share deals rather than asset deals, primarily for stamp duty and transfer fee efficiency. Recent guidance from the Tax Department has clarified the conditions under which a share deal in a property-owning company may be recharacterised for immovable property transfer fee purposes. Acquirers relying on the share deal structure should obtain a specific tax opinion before signing.

Technology sector deals, particularly those involving intellectual property held in Cyprus under the island';s qualifying IP box regime, have attracted increased scrutiny from both the CPC and the Tax Department. The IP box regime, governed by the Income Tax Law as amended, provides a notional deduction on qualifying IP income, but the conditions for qualifying assets are interpreted strictly. In an M&A context, the acquirer must confirm that the target';s IP qualifies under the modified nexus approach before attributing value to the regime in its financial model.

The CPC';s updated guidance on concentration notifications has direct structural implications. Deals that previously fell below the notification threshold may now require filing once the revised turnover attribution rules are applied. This is particularly relevant for serial acquirers building platforms through multiple smaller transactions, where the CPC may aggregate prior acquisitions when assessing market position.

The pre-notification process with the CPC has become more formalised. Parties are now expected to engage with the CPC at an early stage to discuss the proposed transaction, the relevant market definition, and the likely competitive effects. In practice, this means that deal teams should allocate at least four to six weeks for pre-notification engagement before submitting a formal notification. The formal review period following a complete notification is 30 working days for Phase I, with the possibility of a Phase II investigation if the CPC identifies serious doubts about compatibility with the internal market.

A common mistake among foreign acquirers is to treat the CPC process as a formality. The CPC has demonstrated a willingness to impose conditions on clearance decisions and, in a small number of cases, to prohibit transactions outright. Acquirers should conduct a substantive competition analysis early in the process and engage experienced local counsel before the pre-notification stage.

For transactions with an EU dimension, the European Commission retains jurisdiction under the EU Merger Regulation, and the CPC';s role is limited. However, many deals involving Cyprus entities fall below the EU thresholds and are subject exclusively to CPC review. Parties should map jurisdiction carefully at the outset to avoid parallel filing obligations or missed deadlines.

If you are structuring a transaction that may trigger CPC notification requirements or involves a CySEC-regulated entity, early legal advice is essential. Contact info@vlolawfirm.com - we can help structure the setup correctly the first time.

Due diligence in Cyprus M&A transactions has always required attention to the specific features of Cap. 113 companies, but recent developments have added several new layers of complexity that acquirers must address systematically.

The Ultimate Beneficial Owner (UBO) register, maintained by the Registrar of Companies under the Prevention and Suppression of Money Laundering and Terrorist Financing Law, is now a standard starting point for any due diligence exercise. Acquirers must verify that the target';s UBO register entries are accurate and up to date, and that any discrepancies between the register and the actual ownership structure are resolved before completion. Inaccurate UBO filings expose the target and its officers to administrative penalties, and an acquirer that completes a deal without addressing known discrepancies may inherit that liability.

Employment law due diligence has become more significant following recent amendments to the Termination of Employment Law and the Employees'; Rights on Transfer of Undertakings Law (TUPE equivalent). In share deals, employment contracts transfer automatically with the company, but in asset deals or business transfers, the TUPE-equivalent protections apply and require specific information and consultation obligations. A common mistake is to treat a share deal as entirely insulated from employment law risk - in practice, the target';s employment practices, outstanding claims, and collective agreements all transfer with the shares.

Intellectual property ownership verification has become a critical diligence item, particularly in technology deals. Cyprus does not maintain a central IP register for all categories of IP, and ownership of software, databases, and trade secrets must be established through contractual documentation rather than registration. Acquirers should request full IP assignment chains and confirm that all employee and contractor IP creation agreements are in place.

Tax due diligence must address the interaction between Cyprus';s corporate tax regime, the IP box, the notional interest deduction (NID) under the Income Tax Law, and any applicable double tax treaties. The NID, which provides a deduction for equity financing, is a significant feature of Cyprus-structured deals, but its availability post-acquisition depends on the acquirer';s own financing structure. Many underestimate the complexity of preserving NID benefits through a change of ownership.

Completion of a Cyprus M&A transaction involves several steps that differ from common law jurisdictions and from continental European practice, and foreign acquirers frequently encounter delays at this stage.

For private company share deals, completion requires the execution of a share transfer form, payment of stamp duty on the transfer instrument, and registration of the new shareholder in the company';s register of members. The stamp duty on share transfers is calculated on the higher of the consideration or the market value of the shares, and the rate depends on the nature of the underlying assets. Stamp duty must be paid within 30 days of execution to avoid penalties, and in practice many transactions are delayed because the parties have not prepared the stamp duty assessment in advance.

Schemes of arrangement under Cap. 113 require court approval and are used primarily for larger or more complex transactions, including cross-border mergers. The court process involves a creditors'; meeting, a shareholders'; meeting, and a hearing before the Cyprus courts. The timeline for a scheme is typically four to six months from initiation to court sanction, and parties should not plan for a faster process without specific legal advice.

Post-merger integration in Cyprus frequently involves restructuring the target';s corporate governance to align with the acquirer';s group standards. This includes updating the memorandum and articles of association, appointing new directors and officers, and ensuring that the company';s registered office and local substance requirements are maintained. CySEC-regulated entities have additional post-completion notification obligations and must maintain minimum capital and operational requirements throughout the integration period.

A non-obvious requirement is that changes to the directors and secretary of a Cyprus company must be filed with the Registrar of Companies within 14 days of the change. Failure to file within this period is a technical breach of Cap. 113 and can create complications in subsequent transactions or regulatory interactions. Many acquirers focus on the commercial completion and overlook the administrative filings until weeks later.

For transactions involving a transfer of a regulated business, the acquirer must also notify CySEC of any post-completion changes to the management body within a specified period. The specific timeline depends on the category of licence held by the target, and acquirers should confirm the applicable requirements with local counsel before completion.

What are the current notification thresholds for merger control in Cyprus?

The Control of Concentrations between Undertakings Law sets out combined turnover thresholds that trigger mandatory notification to the CPC. The thresholds apply to the combined turnover of all undertakings concerned, calculated on a Cyprus and worldwide basis. Recent CPC guidance has clarified that turnover must be attributed to the ultimate beneficial owner';s group, not merely to the Cyprus entity involved in the transaction. Parties should conduct a threshold analysis at the outset of any transaction, taking into account prior acquisitions by the same group. Failure to notify a notifiable concentration is a serious infringement and can result in significant administrative fines.

How long does a typical Cyprus M&A transaction take from signing to completion?

A straightforward private company share deal with no regulatory approvals can close in as little as two to four weeks from signing, assuming due diligence is complete and the transaction documents are agreed. Transactions requiring CySEC change-of-control approval typically take three to five months from signing to completion, depending on the completeness of the application and the CPC';s workload. Cross-border mergers under the relevant law and schemes of arrangement under Cap. 113 require court involvement and should be planned over a four to six month timeline. Professional fees for a mid-market transaction typically start from the low thousands of EUR for straightforward deals and increase significantly for regulated or complex structures.

Should a Cyprus holding company be used as the acquisition vehicle, or is a direct acquisition preferable?

The answer depends on the acquirer';s tax position, the nature of the target, and the intended holding period. A Cyprus holding company can offer advantages under Cyprus';s extensive double tax treaty network, the participation exemption on dividend income, and the absence of withholding tax on dividends paid to non-resident shareholders. However, using a Cyprus intermediate holding company adds a layer of corporate administration, UBO registration obligations, and substance requirements that must be maintained on an ongoing basis. For acquirers with an existing Cyprus structure, adding the target below the existing holding company is often efficient. For acquirers without a Cyprus presence, the cost-benefit analysis should be conducted carefully before establishing a new vehicle solely for the acquisition.

Cyprus m&a 2026 presents both opportunity and complexity. The regulatory environment is more demanding than it was even a few quarters ago, with tighter competition clearance procedures, updated CySEC disclosure timelines, and increased scrutiny of UBO compliance and tax structuring. Foreign acquirers who treat Cyprus as a simple, low-friction jurisdiction risk encountering delays, penalties, and deal uncertainty. Those who engage experienced local counsel early and build compliance into their deal timelines will find Cyprus remains a highly effective jurisdiction for cross-border investment.

VLO Law Firms advises international clients on M&A matters in Cyprus. We can assist with transaction structuring, competition clearance, CySEC change-of-control applications, due diligence, and completion mechanics. To request a consultation, contact: info@vlolawfirm.com