
Marios Tannousis - The National FDI Control Mechanism Is a Very Important plus Positive Step
Recommendation: Begin with a transparent, risk-based screening checklist for inbound FDI deals to cut delays and build trust. The 091024 briefing supports setting clear timelines, such as a 15-day initial review for standard cases and a 30-day final decision for detailed assessments.
In this view, Marios Tannousis shows how the National FDI Control Mechanism can function as a practical, decentralised tool with accountable procedures. Create a public dashboard that lists weekly deal counts, sector distribution, and average clearance times, along with a brief justification for deferred cases.
Implement a three-tier review: standard, expedited, and exceptional cases, each with explicit service-level targets. Assign an independent monitor to publish quarterly reports on performance and user feedback, and ensure there is an accessible appeals pathway for applicants. This structure keeps decisions traceable and fair.
For SMEs and strategic industries, set targeted support: pre-application consultations within 10 business days, a minimum of two options for deal structure review, and a commitment to publish anonymised deal data by sector and country of origin. The aim is to attract credible investors while maintaining safeguards.
In closing, Marios Tannousis champions a pragmatic path forward. A clear framework, measurable targets, and open reporting create a constructive environment for investment flows in the country. The unit can become a reliable reference point for businesses seeking to understand how approvals work and what factors influence timing.
Scope plus Thresholds: Which FDI triggers the mechanism and how thresholds are determined
See also: Cyprus Levy Reform.
See also: FDI Screening.
Adopt a two-tier trigger framework: Tier I prompts immediate notification and provisional screening for any 10% equity stake, board seats, or veto rights in a company active in a sensitive domain; Tier II requires full scrutiny for transactions valued at 100 million EUR or more, particularly when they create cross-border control. In sensitive sectors, lower thresholds to 20% equity or 20 million EUR to catch rising influence early. This approach ensures timely oversight without delaying routine investments.
Expand the scope to cover direct acquisitions, greenfield investments, and strategic joint ventures that affect national interests, including arrangements via special purpose vehicles. Require pre-completion notification for Tier II cases and for Tier I deals carrying risk indicators such as related-party links or opaque funding.
Trigger structure
Key triggers are: 10% or more equity; any board seat; veto rights or governance concessions; related-party or layered structures that enable influence; transactions valued at or above 100 million EUR (Tier II) or 20 million EUR in sensitive sectors (Tier I); creation of cross-border joint ventures or new entities. Screen these cases promptly and move to a formal risk assessment within a 30-day window, with a possible 60-day extension if risk signals persist.
Determination framework
Thresholds derive from sector sensitivity, asset value, buyer profile, and enforcement capacity. Use a risk scoring model from 0 to 100, incorporating sector criticality, asset nature, ownership origin, and deal structure. Apply bands such as low risk up to 30, medium 31–60, high above 60, and adjust thresholds annually based on market activity, incident trends, and resource availability. The policy note dated 091024 records baseline thresholds and the review cadence. Data fields include transaction value, sector code, share, buyer type, and asset location to support consistent decisions.
Submission Process: Required documents, formats, plus submission channels for notification
Submit the complete package electronically through the official portal using PDF attachments and ensure each file is named according to the standard guidance. Use 091024 as the prefix for the main file set and keep total size under 50 MB with no more than 12 documents.
Required documents and formats
Include: corporate registration certificate or proof of incorporation; beneficial ownership details; a board resolution or officer authorization letter; financial statements for the last two fiscal years (audited or management-reviewed); tax clearance certificate or equivalent; a list of related parties and any ongoing exposure; proof of the submitting officer’s identity and authority; a non-disclosure agreement if required; a short market entry plan or impact assessment; and proof of no overdue obligations with related authorities. Save all documents as PDFs; ensure scanned copies are legible; avoid password protection; name each file using the prefix 091024 and a concise document label (for example: 091024_BoardResolution.pdf). For data sheets, use XLSX or CSV; for images, JPEG or PNG at 300 dpi or lower; ensure text is searchable where possible.
Submission channels for notification
See also: Hong Kong Company Formation and Bank Account Setup –....
Once submitted, enable portal alerts, and provide a valid email address and mobile number to receive notifications. The portal sends status updates within 1 business day after submission, then at key milestones: receipt confirmed, requests for additional information, and final decision. If a deficiency is noted, upload the requested documents within 5 business days and reference the original file prefix in your reply. Keep response times tight by using the same account for all communications and check the portal inbox weekly for new messages.
Assessment Criteria: How security, economic impact, plus public interest are weighed
Set a three-criterion scoring grid with explicit weights: security 40%, economic impact 40%, public interest 20%. Document the data sources, thresholds, and decision rules in a policy memo and publish the methodology alongside each decision.
Security: quantify risk exposure by tallying veto rates on proposed FDI, time-to-decision, and remediation success. Use a 0–5 scale for each indicator, then compute a composite security score. Maintain a real-time log of incidents and remediation actions to support auditability.
Economic impact: capture direct capital flow, job effects, supplier activity, and tax revenue, then translate results into a 0–5 impact score per project. Apply scenario analysis to reflect market shocks and regional spillovers. Compare projected gains against a baseline and report net effects in local currency and relevant benchmarks.
Public interest: evaluate consumer protection, data privacy, competition, and equity outcomes. Incorporate stakeholder feedback and public consultation results, and check for disproportionate effects on vulnerable groups. Use independent review to confirm transparency and explain any trade-offs in plain language.
Data integrity: tag each assessment with code 091024 and store it in a secure log that links to the supporting documents, risk notes, and economic impact models. Set periodic reviews every six months or after major investment rounds to refresh weights and indicators.
| Criterion | Sub-criteria | Data sources | Measurement method | Decision rule |
|---|---|---|---|---|
| Security | Risk exposure; time-to-decision; remediation success | Internal audit, external reports, incident logs | 0–5 scale per sub-criterion; weighted average | Composite score ≥3.5 triggers permission; <3.5 requires mitigation plan |
| Economic impact | Capital flow; local job impact; supplier activity; tax revenue | Financial models, regional stats, tax data | Quantified estimates; scenario ranges | Net positive score required; adjust terms if below threshold |
| Public interest | Consumer protection, privacy, competition, equity | Stakeholder feedback, surveys, regulatory guidance | Qualitative rating 0–5; ranking for transparency | Scores ≥3.2 approve with disclosure; else require mitigations |
Timelines plus Decision Points: Typical schedules, possible extensions, plus appeal options
Submit the initial notification within 14 days of the trigger and map the milestones to prevent back-and-forth.
- Typical schedules:
- Screening and eligibility check: 5–10 business days after submission.
- In-depth assessment: 15–25 business days following screening.
- Final decision: 10–15 business days after the assessment completes.
Extensions
- Requests for extensions should be made before the deadline; extensions are commonly granted in 5–15 day blocks.
- Aggregate extensions usually cap at 30 days unless a formal re-scheduling is approved.
- Approval depends on submission completeness and current workload.
Appeal options
- Internal reconsideration: file within 15–30 days of the decision; provide any new or clarified material.
- Review process: the authority reviews the appeal over 20–40 days and may request additional data.
- Possible outcomes: uphold the decision, remand for a new review, or adjust the ruling based on new information.
- Alternate paths: if available, consider external dispute resolution or court review in parallel with the internal process.
Document reference: 091024.
Post-Approval Obligations: Reporting, monitoring, plus enforcement measures for compliance

Implement a centralized quarterly reporting template for all approved FDI projects, submit via the national portal within 15 days after quarter-end, and use portal version 091024 with built-in validations to flag missing fields.
Reporting framework
Capture core data: project name, investor nationality, committed and realized investment, sector, job creation, subsidy usage, milestones, and any changes in scope. Attach supporting documents and provide a concise risk note if timelines slip or milestones shift. Use consistent currency and date formats (USD/EUR; ISO dates) and enable exports in CSV and PDF. The portal should generate a readable dashboard for ministries, auditors, and the public-interest office, with an official officer signature and an approval timestamp.
Monitoring and enforcement
Apply risk-based monitoring with automated anomaly detection on indicators such as investment shortfall, milestone deviations, and non-submission events. Schedule annual compliance reviews and targeted spot checks. When gaps are found, issue a remediation plan within 20 days and require progress updates every two weeks. Non-submission or material non-compliance triggers predefined penalties, including delayed disbursements, phased reduction of incentives, or temporary suspension of approvals until corrective actions prove effective. Escalate persistent failures to the national compliance committee and publish anonymized aggregated results in the yearly public report to support accountability.
Ready to set up your Cyprus company?
Our specialists guide you through the entire process — registration, tax setup, and bank account opening.
Request a consultation →