The Defense Department opened a 60-day public comment period on a proposed rule published in the Federal Register that would require defense contractors to disclose beneficial ownership information as part of the department's efforts to identify and mitigate Foreign Ownership, Control, or Influence risks embedded in the defense industrial base. The proposed DFARS rule would establish new pre-award and ongoing disclosure requirements for contractors holding or seeking facility security clearances and for certain contracts involving sensitive technologies, with compliance obligations that extend down the supply chain to key subcontractors performing on classified or controlled unclassified information programs. The rule represents the Pentagon's most direct regulatory intervention in contractor ownership structure since the National Industrial Security Program was established.
FOCI — Foreign Ownership, Control, or Influence — refers to any situation in which a foreign interest possesses the ability to direct, decide, or significantly influence matters affecting the management or operations of a U.S. defense contractor in ways that could result in unauthorized access to classified information or undue influence over business decisions with national security implications. The Defense Counterintelligence and Security Agency evaluates FOCI conditions as part of the facility security clearance process, and companies found to have unacceptable FOCI must implement mitigation measures that range from board resolutions and technology control plans to full Special Security Agreements requiring government-approved outside directors before they can access classified information. The mitigation process can take months and, in complex cases involving state-owned enterprise investors, may require structural changes to ownership and governance that are not always feasible on the timeline of an imminent contract award.
The beneficial ownership disclosure requirement in the proposed rule is designed to give DCSA and contracting officers earlier and more systematic visibility into potential FOCI conditions. Currently, foreign ownership concerns frequently surface only after a clearance application is submitted — sometimes only after a contract has been awarded and the awardee begins the clearance process in earnest. The proposed rule would move disclosure upstream to the proposal stage, requiring contractors to identify all beneficial owners holding more than five percent of any class of equity, along with their citizenship and any affiliations with foreign governments or state-owned enterprises, as part of the standard pre-award representations and certifications package.
Contract Scope and Background
Beneficial ownership disclosure is already a feature of several other regulatory frameworks. The Financial Crimes Enforcement Network's Customer Due Diligence rule requires banks and other covered financial institutions to collect beneficial ownership information for their business customers at account opening. The Corporate Transparency Act, which took effect in 2024, established a national beneficial ownership registry administered by FinCEN requiring most companies formed in the United States to report their beneficial owners with identifying information. The proposed DFARS rule draws on the conceptual framework developed in those contexts but imposes a lower disclosure threshold — five percent versus the twenty-five percent threshold under the Corporate Transparency Act — and adds requirements to disclose known affiliations with foreign governments or state-owned enterprises even for ownership interests below the percentage threshold, reflecting the specific national security concerns that distinguish defense contracting from general financial regulation.
The rule's scope extends well beyond publicly traded prime contractors and familiar names in the defense industrial base. Any contractor seeking DoD contracts above the simplified acquisition threshold that involve sensitive technologies, classified work, or access to controlled unclassified information categories including export-controlled technical data, naval nuclear propulsion information, or controlled technical information under DFARS 252.204-7012 would be subject to the new disclosure requirements. This brings technology startups, academic research spinouts, and commercial product vendors entering the defense market for the first time into a compliance framework that most have never encountered. Venture-backed companies with foreign co-investors — a common and commercially unremarkable ownership structure in the technology and life sciences sectors — may find that investment arrangements that raise no concerns in commercial financing contexts require careful analysis and possibly pre-award disclosure planning before they can compete effectively for defense contracts.
The 60-day comment period runs from the Federal Register publication date. The Department has specifically requested comment on the compliance burden for small businesses, the appropriate percentage threshold for triggering subcontractor disclosure, the treatment of publicly traded companies where beneficial ownership continuously changes with market trading, and the interaction between the proposed DFARS requirement and existing FinCEN disclosure obligations that some contractors already satisfy. Industry associations and individual companies can submit comments through the Federal eRulemaking Portal at regulations.gov using the docket number associated with the proposed rule.
What It Means for Contractors
Defense contractors that have not previously undergone FOCI review should treat this proposed rule as an urgent prompt to conduct an internal beneficial ownership assessment now, while the rule is in the comment period and well before any compliance deadline applies. Identifying foreign ownership interests and analyzing whether they meet the definition of FOCI under the National Industrial Security Program Operating Manual is a complex legal and factual undertaking that requires specialized counsel familiar with both corporate law and national security regulations. Companies that wait until a contract award is imminent to begin this analysis routinely encounter delays that cost them awards, require expensive and time-consuming mitigation structuring under deadline pressure, or force disclosure of ownership information to contracting officers without the context that a well-prepared FOCI mitigation package would provide. Beginning the analysis during the comment period gives companies the runway to restructure problematic arrangements, negotiate FOCI mitigation agreements with DCSA proactively, or make informed decisions about which contracts to pursue given their ownership structure.
Small defense contractors face a disproportionate compliance burden because the legal and administrative costs of beneficial ownership tracking, FOCI legal analysis, and potential mitigation agreements fall on firms with limited compliance staff and administrative capacity. The comment period is an important opportunity for small business advocates and individual firms to document these costs quantitatively and propose relief mechanisms tailored to their circumstances — including a higher disclosure threshold for small businesses below specified revenue levels, a DCSA-developed small business compliance guide with plain-language explanations of FOCI analysis, streamlined mitigation pathways for small firms with straightforward ownership structures, and extended compliance timelines that give smaller companies the runway to build the necessary tracking and disclosure systems without disrupting their ongoing contracting operations.
