Spain screens inbound foreign investment. The framework sits in Act 19/2003 on capital movements and its implementing Royal Decree 571/2023, in force since September 2023, and it requires prior authorisation for certain acquisitions by foreign investors in sectors regarded as affecting public order, public security or public health.
For most of the founders and companies we work with this is not relevant — incorporating a new Spanish subsidiary to trade is a different act from acquiring a stake in an existing Spanish company. But for anyone buying into an established business, taking a minority position in a Spanish startup, or restructuring ownership of an existing holding, it is a gating item that belongs at the start of the process, not in the closing checklist.
Three questions decide whether you are in scope.
01
Are you a foreign investor?Residents outside the EU and EFTA are caught. So are EU or EFTA entities where non-EU or non-EFTA persons ultimately own or control more than 25% of the capital or voting rights, or otherwise exercise control. 02
Does the stake reach the threshold?Acquiring 10% or more of the share capital, or otherwise acquiring control of the Spanish company, brings the transaction within the regime. 03
Is the target in a listed sector?Critical infrastructure, defence and dual-use, critical technologies including artificial intelligence, semiconductors and cybersecurity, energy, telecommunications, life sciences, media, food security, and companies handling large volumes of personal data. The point that catches structured groups
An EU holding company does not automatically put you outside the regime.
The look-through to ultimate ownership means a Luxembourg, Dutch or Irish acquisition vehicle owned more than 25% by non-EU persons is treated as a foreign investor. Groups that assume their EU structure resolves the question are frequently wrong, and the analysis has to run to the ultimate beneficial owners.
The de minimis exemption, and why it is narrower than it sounds.
Investments by non-EU and non-EFTA investors in companies with annual turnover below €5 million are broadly exempt from screening. That sounds generous, and for ordinary small-company acquisitions it is. But the exceptions to the exemption are drawn so that, in practice, the relief is materially reduced for targets in certain areas — notably those active in food security, those with access to sensitive information, and the media sector.
| Situation | Likely position |
| Incorporating a new Spanish subsidiary to trade | Outside the authorisation regime — but foreign investment reporting still applies |
| Non-EU buyer acquiring 15% of a Spanish software company with €20m turnover | Likely in scope if the technology is within the listed categories |
| Non-EU buyer acquiring 30% of a Spanish retailer with €3m turnover | Likely exempt on turnover, subject to the exceptions |
| EU vehicle owned 60% by a non-EU group acquiring control of an energy asset | In scope — the look-through applies |
| Acquiring 8% with no control rights | Below the stake threshold, but check for control conferred by other means |
| Internal group reorganisation changing the Spanish holding chain | Assess — the analysis is not always intuitive |
Note the first row. Setting up a new company and acquiring an existing one are treated very differently. A founder incorporating a Spanish SL to run a business is not seeking authorisation — though foreign investment declaration obligations, a separate and much lighter reporting requirement, do apply to non-resident shareholders.
The procedure and what it costs in time.
Step 01
Assess before you signDetermine investor nationality through to ultimate ownership, the stake and control position, and the target's sector. This belongs in early diligence, because it shapes the deal timetable and the conditions. Step 02
Build it into the agreementWhere authorisation is required, the transaction is conditioned on it. The share purchase agreement needs the condition precedent, an allocation of who runs the process, and a long-stop date that reflects reality. Step 03
File with the MinistryThe application goes to the Directorate General for International Trade and Investments within the Ministry for Economy, Trade and Enterprise, with input from other ministries depending on the sector — Defence, for instance, where relevant. Step 04
Await the decisionThe authorities review and, for the main procedure, a proposal goes to the Council of Ministers. There is also a simplified procedure for defined cases. Build months, not weeks, into the timetable. Step 05
Close only after authorisationClosing before authorisation, where it was required, exposes the transaction to being treated as ineffective and to sanctions. This is a genuine standstill obligation, not a formality. A moving target worth watching
The regime is being tightened, not relaxed.
A transitional extension of prior-authorisation obligations to EU and EFTA investors — originally an emergency measure — has been renewed repeatedly and currently runs to the end of 2026. Separately, a new EU-level screening framework is reshaping national regimes across the Union. Anyone planning a Spanish acquisition should confirm the position at the time of the deal rather than relying on a summary written earlier.
Who this affects most.
The regime bears most directly on investors from the jurisdictions that make up a large share of inbound interest in Spain — and it interacts with the structuring choices those investors typically make.
Typical situations we see
US and UK
Non-EU after BrexitUK investors have been outside the EU perimeter since Brexit — a change some structures never accounted for. Gulf states
Sovereign and family capitalSector sensitivity and state-linked ownership both draw attention. Early assessment is essential. Asia
Technology and infrastructureCritical technology categories are widely drawn and include AI, semiconductors and cybersecurity. Latin America
Frequent inbound acquirersLong-standing investment ties, but non-EU status means the regime applies on the same terms. EU vehicles
Look-through appliesAn EU acquisition company does not neutralise non-EU ultimate ownership above 25%. Startup investors
Minority stakes countA 10% stake in a Spanish AI or health-tech company can be in scope even where the cheque is modest. Where this belongs in the process
Screening is a structuring question, not a closing formality.
We assess investor status, stake and sector before the structure is fixed, so the transaction timetable and the holding chain are built around the answer rather than interrupted by it.
Structure and holding advisory ↗ Terminology
- Ley 19/2003
- The act on capital movements and cross-border economic transactions that establishes the framework.
- RD 571/2023
- Royal Decree on foreign investments, in force since 1 September 2023, setting out scope, thresholds and procedure.
- Autorizacion previa
- Prior authorisation — the consent that must be obtained before closing a covered transaction.
- Inversion extranjera directa
- Foreign direct investment, as defined for screening purposes.
- Titular real
- Ultimate beneficial owner — the reference point for the look-through test.
- Procedimiento simplificado
- A simplified procedure available for certain defined categories of transaction.
- Modelo D-1A / D-1B
- Foreign investment declaration forms — the separate, lighter reporting obligation that applies broadly.
Frequently asked
Do I need authorisation to set up a new company in Spain?
Generally no. The authorisation regime targets the acquisition of stakes in existing Spanish companies in listed sectors, not the incorporation of a new entity to carry on business. A separate and much lighter foreign investment declaration obligation does apply to non-resident shareholders, and that is a reporting formality rather than a consent.
Our acquisition vehicle is an EU company. Are we exempt?
Not necessarily. If non-EU or non-EFTA persons ultimately own or control more than 25% of that vehicle, or otherwise control it, the investor is treated as foreign for these purposes. The test looks through to ultimate ownership, so the analysis must run to the beneficial owners rather than stopping at the immediate acquirer.
What happens if we close without authorisation?
The consequences are serious: a transaction requiring authorisation and completed without it can be treated as ineffective, with sanctions available in addition. Because the obligation is a genuine standstill, the practical answer is to identify the requirement in diligence and to condition closing on the consent.
How long does authorisation take?
Plan in months rather than weeks for the ordinary procedure, with a simplified route available in defined cases. Because a proposal goes to the Council of Ministers in the main procedure, the timetable is not fully within the parties' control, and long-stop dates in the purchase agreement should be set with that in mind.
Does the regime apply to EU investors?
It was extended to EU and EFTA investors as a transitional emergency measure, and that extension has been renewed repeatedly, currently running to the end of 2026. Separately, EU-level screening rules are evolving. Anyone relying on EU status as an exemption should confirm the position at the time of the transaction.
Is a 10% stake in a startup really caught?
It can be. The stake threshold does not scale with cheque size, and critical technology categories including artificial intelligence, semiconductors and cybersecurity are broadly drawn. The turnover exemption relieves many early-stage targets, but its exceptions and the sector definitions mean an assessment is worth doing rather than assuming.
General information as at August 2026 on the Spanish foreign investment screening regime under Act 19/2003 and Royal Decree 571/2023, including the transitional extension to EU and EFTA investors. Scope, thresholds, sector definitions and procedure are technical and change; EU-level screening rules are also evolving. This is not legal advice — any transaction potentially in scope requires specific professional assessment before signing.