Managing M&A uncertainty in the EU’s evolving regulatory landscape

Why EU deals feel different today

Deal appetite for European assets remains strong, particularly in energy transition, critical infrastructure, healthcare, life sciences and technology. The challenge has shifted from spotting opportunities to managing execution risk once agreements are signed.

Merger control is no longer the only gate in cross-border EU deals. Transactions increasingly face multiple regulatory regimes, which often apply in parallel and, although most deals are ultimately cleared, they can shape timing, control and integration. Foreign direct investment (FDI) screening can delay effective control and restrict governance influence after signing due to interim safeguards and information sharing limits. Foreign Subsidies Regulation (FSR) review can add a separate, data-intensive process that runs in parallel to merger control and can extend closing timelines. Digital and AI rules determine how quickly data, systems and platforms can be integrated. ESG obligations can trigger reporting and remediation duties soon after closing. As a result, where these regulatory regimes are triggered, buyers may commit capital while control, integration and value capture could remain constrained for months.

EU policy is moving on two tracks. Omnibus I and the merger guidelines review signal simplification and a clearer framework to assess how deals affect innovation and investment. At the same time, digital and AI regulation continues to raise execution expectations around data governance, cybersecurity and AI compliance. For global investors, deal certainty now hinges on realistic time-to-control assumptions and integration plans that still work under conditions.

Avoiding landmines: rethinking deal assumptions at signing

Where a transaction triggers one of the relevant regulatory regimes, the resulting regulatory scrutiny puts deal assumptions fixed at signing at the centre of execution risk. Several assumptions that once felt safe now need to be tested explicitly in the deal design.

• Signing does not guarantee early control: In many cross-border transactions, FDI and merger control approval may still be pending after signing. During this period, interim safeguards can restrict influence over strategic decisions and limit access to sensitive information. This can leave capital committed while control can remain limited for months. Further complexity is added as timelines and outcomes vary by Member State.
• Regulatory clearance does not always ensure full integration: Under EU merger control, deal approval may (exceptionally) be granted subject to conditions that affect how and when integration occurs. These may require temporary business separation, delay integration of systems and operations, or mandate divestments. Similarly, FDI and FSR clearances can subject approval to conditions affecting full integration.
• Data and IT integration face growing regulatory friction: EU digital regulations now materially affect post-closing integration of data, platforms and IT systems. The EU Data Act reshapes data access and cloud switching. NIS2 may require cybersecurity alignment before systems are combined. These constraints can delay operational integration and affect value assumptions in technology-driven transactions.
• ESG gaps can disrupt deal execution: Sustainability and governance obligations now directly affect transaction execution. Under CSRD, expanded reporting and data obligations often arise after closing. CSDDD introduces supply-chain due diligence duties, potentially requiring remediation. The EU Taxonomy may influence access to financing and investment classification. In practice, ESG weaknesses can therefore translate into remediation costs and reporting commitments.

Where EU M&A policy is heading

Simplification and competitiveness at the top of the EU agenda

The regulatory environment shaping European M&A is evolving alongside the EU’s broader economic and strategic objectives. Competitiveness and simplification are now explicit priorities of the European Commission’s (EC) policy agenda.

Omnibus I, targeting sustainability reporting and due diligence under the CSRD and CSDDD directives, is expected to be adopted in early 2026. The package narrows scope thresholds, delays certain reporting timelines and reduces overlapping requirements. For M&A, this may ease post-closing remediation, reporting exposure and ongoing compliance costs in certain transactions.

The 2026 EC Work Programme confirms further targeted simplification initiatives, focused on implementation frictions rather than new frameworks. In merger control, the EC’s ongoing review of its merger guidelines aims to incorporate relevant case law and enforcement practice on innovation, dynamic competition, efficiencies, resilience and investment, to clarify how these factors should be assessed alongside more traditional competition concerns.

Digital and AI risks are reshaping deal execution

Simplification in some areas is offset by tighter oversight of digital and AI-related risks. The Digital Omnibus package, unveiled in November 2025, proposes targeted changes to data use, AI governance and cybersecurity rules.

In parallel, the EC is advancing initiatives under the Data Union Strategy. The envisaged measures cover data access, cloud contracting and digital business infrastructure. The AI Act is also entering its execution phase, with core obligations applicable from August 2026. Together, these rules will shape how data-driven businesses operate, contract and integrate across the EU.

Digital due diligence is now a direct input into integration planning. Post-closing integration of data, platforms, AI models and IT systems is becoming central to execution. Transaction success will increasingly depend on how well buyers anticipate post-signing constraints, extended timelines and staged or conditional integration.

The missing piece: predictability

What buyers still struggle to price is how long reviews take, and what they imply for integration and operational control, in particular in certain sectors which face greater regulatory scrutiny. Parallel reviews can be managed, but execution risk arises when timetables and constraints diverge. This matters most for data-rich and innovation-led targets, where prolonged interim phases can dilute value and delay synergies.

Digital regulation adds another dimension: overlapping obligations across the EU’s digital rulebook create legal complexity and operational drag. A coherent clean-up of overlaps with clear enforcement guidance, aligned definitions and consistent interpretation, would make integration planning easier to manage. That would reduce execution uncertainty and make time-to-integration easier to model and finance. Until then, European M&A will continue to reward disciplined execution and resilient deal design.