Cyprus remains one of the most active M&A jurisdictions in Europe for cross-border transactions, driven by its EU membership, favourable corporate tax regime and extensive treaty network. Recent quarters have brought meaningful regulatory updates that affect deal structuring, foreign investment screening and competition clearance. This guide covers the key legal and regulatory developments shaping cyprus m&a 2026, their practical implications for buyers and sellers, and the compliance steps that international deal teams must now factor into their timelines.
The most significant shift in the current period is the continued implementation of the EU Foreign Subsidies Regulation (FSR), which applies directly in Cyprus as an EU member state. The FSR requires parties to notify the European Commission of certain concentrations where one party has received substantial financial contributions from non-EU governments. For Cyprus-based holding structures - which frequently serve as acquisition vehicles for groups with exposure to third-country state support - this adds a layer of pre-closing review that did not exist in prior cycles.
Separately, Cyprus has been refining its domestic framework under the Companies Law, Cap. 113, which governs mergers, divisions and cross-border restructurings. Recent amendments transposing EU Directive 2019/2121 on cross-border conversions, mergers and divisions have now fully entered into force. These changes introduce enhanced creditor and minority shareholder protections, mandatory independent expert reports for cross-border mergers, and a structured court approval process through the Nicosia District Court. Deal teams that previously relied on streamlined timelines for intra-group cross-border mergers should budget additional weeks for the new procedural steps.
The Commission for the Protection of Competition (CPC) - Cyprus';s national competition authority - has also updated its merger control thresholds guidance. While the statutory thresholds under the Protection of Competition Law (Law 13(I)/2022) remain the reference point, the CPC has clarified its approach to transactions that fall below the numeric thresholds but may nonetheless raise concerns under the "call-in" mechanism available to the authority. International acquirers should not assume that a sub-threshold deal is automatically clear of CPC scrutiny.
Cyprus does not yet operate a standalone foreign direct investment (FDI) screening regime equivalent to those in Germany, France or the United Kingdom. However, it applies the EU FDI Screening Regulation (EU 2019/452), which requires member states to cooperate on reviews of investments that may affect security or public order across the bloc. In practice, this means that a Cyprus-registered target operating in a sensitive sector - critical infrastructure, dual-use technology, financial market infrastructure - may trigger a multi-jurisdictional screening process even if Cyprus itself does not issue a formal blocking decision.
The practical implication for deal teams is that the absence of a domestic Cypriot screening law does not eliminate FDI risk. Buyers acquiring Cypriot holding companies with underlying assets in other EU member states must map the screening requirements of each relevant jurisdiction. A common mistake is to treat the Cyprus layer of the structure as the only relevant regulatory touchpoint, overlooking that the economic substance sits in subsidiaries governed by other national laws.
In practice, founders and acquirers should consider engaging local counsel early in the due diligence phase to map all applicable screening regimes. This is particularly relevant for transactions involving acquirers from jurisdictions that are currently subject to heightened EU-level scrutiny. If you are structuring an acquisition through a Cyprus vehicle and need clarity on the applicable screening obligations, contact info@vlolawfirm.com - we can help structure the setup correctly the first time.
Under Law 13(I)/2022, a concentration must be notified to the CPC if the combined aggregate turnover of all undertakings concerned exceeds a prescribed threshold in Cyprus and at least two of the parties each have turnover above a secondary threshold within Cyprus. The CPC operates a Phase I review of approximately 30 working days, with the possibility of a Phase II investigation for transactions raising serious competition concerns. Phase II can extend the review by several additional months.
The notification form requires detailed information on the parties'; market shares, competitive overlaps, supply relationships and the rationale for the transaction. A non-obvious requirement is the obligation to submit audited financial statements for the most recent financial year for each party - a step that can cause delays if the target';s accounts are not yet finalised or if the acquirer is a special purpose vehicle with limited standalone financials.
Filing fees are payable to the CPC and are calculated by reference to the combined turnover of the parties. These fees are moderate by EU standards but should be factored into deal costs alongside legal and advisory fees. Practical experience suggests that pre-notification discussions with the CPC - an informal process available before the formal filing - can significantly reduce the risk of information requests that pause the review clock.
Two practical scenarios illustrate the range of outcomes. In a straightforward horizontal acquisition where the parties have limited overlap in Cypriot markets and combined turnover is modest, Phase I clearance within the standard window is realistic. In a transaction involving a target with a strong position in a concentrated Cypriot market - for example, financial services or telecommunications - the CPC may request remedies or open a Phase II review, extending the timeline by three to six months beyond the initial Phase I period.
Due diligence on Cyprus-incorporated targets has evolved in response to both domestic regulatory changes and international compliance expectations. Several areas now receive heightened attention from sophisticated buyers.
Corporate governance and beneficial ownership records are a primary focus. Cyprus has implemented the EU';s Anti-Money Laundering Directives through the Prevention and Suppression of Money Laundering Activities Law. The Registrar of Companies maintains a beneficial ownership register, and targets must have accurate, up-to-date entries. Gaps or inconsistencies in the register are a red flag that can delay closing and, in some cases, expose the acquirer to regulatory liability post-completion.
Tax structuring review has become more granular. Cyprus';s participation exemption, the 12.5% corporate tax rate and the extensive double tax treaty network remain attractive, but buyers must now assess whether existing structures comply with the OECD';s Pillar Two global minimum tax rules, which apply to groups with consolidated revenue above the relevant threshold. Many Cyprus holding structures were designed before Pillar Two entered into force, and their efficiency assumptions may need to be revisited as part of the acquisition analysis.
Substance requirements are another area of focus. The Cyprus tax authority and EU-level guidance require that entities claiming treaty benefits or participation exemption treatment demonstrate genuine economic substance in Cyprus - real management and control, local directors with decision-making authority, and adequate operational infrastructure. A common mistake by foreign buyers is to assume that a Cyprus company with a nominee director arrangement automatically qualifies for treaty benefits. Post-acquisition restructuring to establish genuine substance can add cost and complexity.
Employment law due diligence has also grown in importance. Cyprus';s Termination of Employment Law and the relevant EU directives on employee information and consultation rights mean that transactions structured as asset deals or involving a transfer of undertaking (TUPE equivalent) require careful planning around employee notification obligations and potential liability for historic employment claims.
The dominant deal structures in Cyprus M&A continue to be share acquisitions of Cyprus-incorporated holding companies, often sitting above operating subsidiaries in other jurisdictions. This structure allows buyers to access the Cyprus tax benefits while acquiring the underlying business. However, recent trends show increased use of asset deals and business transfers in sectors where the target';s regulatory licences or contracts are not transferable to a new entity, making a share deal impractical.
Earn-out provisions have become more common in transactions where valuation gaps exist between buyers and sellers. Cyprus law does not have a specific statutory framework for earn-outs, so the parties rely on contract law under the Cyprus Contract Law, Cap. 149, which is based on English common law principles. This gives considerable flexibility in drafting but also means that disputes over earn-out calculations are resolved through litigation or arbitration rather than a regulatory process. Buyers should ensure that earn-out mechanics are drafted with precision, including clear accounting definitions and audit rights.
Warranty and indemnity (W&I) insurance has become a standard feature of mid-market and larger Cyprus M&A transactions. The product is available from international insurers and is typically placed through London or continental European brokers. The underwriting process requires a thorough due diligence report, and insurers will exclude known risks identified during due diligence. Sellers in Cyprus increasingly expect a clean exit with W&I insurance replacing the traditional seller indemnity, which shifts the risk allocation dynamic in negotiations.
Escrow arrangements governed by Cyprus law or English law are commonly used to secure post-closing price adjustments and indemnity claims. The choice of governing law for the escrow agreement is a practical decision that affects enforcement options. Many international parties choose English law for the main transaction documents even where the target is Cyprus-incorporated, given the familiarity of English law to international deal teams and its recognition in Cyprus courts.
For international buyers navigating these structural choices, early engagement with advisers who understand both the Cyprus legal framework and the cross-border dimensions is essential. To discuss structuring options for a specific transaction, contact info@vlolawfirm.com - we can assist with documents and filings across the full deal lifecycle.
Closing a Cyprus M&A transaction triggers a series of post-closing compliance steps that are sometimes underestimated by international deal teams focused on the pre-closing process.
The Registrar of Companies must be notified of changes in shareholding, directors and registered address within prescribed timeframes. Failure to update the register promptly can result in administrative penalties and, more practically, can create difficulties in subsequent transactions or regulatory interactions where accurate corporate records are required.
If the transaction involved a cross-border merger under the amended Companies Law, the court approval process must be completed and the merger registered before it becomes effective. The Nicosia District Court plays a central role in approving the merger plan, and the timeline from filing to court order typically runs to several weeks, depending on court scheduling and whether any creditors or shareholders raise objections.
Tax notifications to the Cyprus Tax Department are required where the transaction results in a change of control of a Cyprus-resident entity. Transfer pricing documentation obligations apply where the transaction involves related-party elements, and the Cyprus tax authority has increased its focus on transfer pricing compliance in recent periods.
Regulatory licences held by the target - for example, licences issued by the Cyprus Securities and Exchange Commission (CySEC) for investment firms, or licences from the Central Bank of Cyprus for payment institutions - may require prior approval of the change of control from the relevant regulator. CySEC';s change of control approval process involves a fit and proper assessment of the incoming shareholder and can take several months. Acquirers who fail to obtain regulatory approval before closing risk enforcement action and potential licence suspension.
---
Does Cyprus have a mandatory FDI screening law that could block an acquisition?
Cyprus does not currently operate a standalone national FDI screening mechanism with blocking powers equivalent to those in Germany or France. It participates in the EU cooperation framework under the FDI Screening Regulation, which means that investments in sensitive sectors may be flagged to other member states and the European Commission. In practice, the absence of a domestic blocking mechanism does not eliminate regulatory risk for transactions involving critical infrastructure, dual-use technology or financial market infrastructure, because the underlying assets may be subject to screening in other EU jurisdictions where subsidiaries are located. Buyers should conduct a full multi-jurisdictional screening analysis rather than relying solely on the Cyprus-level position.
How long does a Cyprus merger control review typically take, and what drives the timeline?
A standard Phase I review by the Commission for the Protection of Competition runs approximately 30 working days from the date the filing is deemed complete. The most common cause of delay is an incomplete notification - missing financial statements, insufficient market share data or inadequate description of competitive overlaps - which triggers an information request that pauses the review clock. Pre-notification discussions with the CPC, while informal, can significantly reduce this risk by allowing the authority to flag gaps before the formal clock starts. Transactions raising serious competition concerns may enter Phase II, which can add several months to the timeline and may result in remedies being required as a condition of clearance.
What are the main risks of acquiring a Cyprus holding company with nominee director arrangements?
The primary risk is that the company may not satisfy the substance requirements needed to claim Cyprus tax treaty benefits or the participation exemption on dividends and capital gains. Cyprus tax law and EU-level guidance require genuine management and control to be exercised in Cyprus, which means that nominee directors who do not actually make decisions create a substance gap. Post-acquisition, the buyer may need to restructure the board, appoint resident directors with real authority and establish operational infrastructure in Cyprus to cure the deficiency. This process takes time and adds cost. A secondary risk is that the beneficial ownership register may not accurately reflect the pre-acquisition ownership chain, which can create AML compliance issues and complicate the regulatory approval process for regulated entities.
---
Cyprus M&A activity continues to be shaped by a combination of EU-level regulatory developments and domestic legal reforms that add procedural steps and compliance obligations to transactions that were previously more straightforward. Buyers and sellers who map these requirements early - covering merger control, FDI screening, substance, beneficial ownership and post-closing regulatory notifications - are better positioned to close on schedule and avoid costly surprises.
VLO Law Firms advises international clients on M&A matters in Cyprus. We can assist with transaction structuring, due diligence, merger control filings, regulatory approvals and post-closing compliance. To request a consultation, contact: info@vlolawfirm.com