The $55 billion acquisition of Electronic Arts by a consortium led by Saudi Arabia's Public Investment Fund missed its June 30, 2026 closing date and has been extended to September 28, while the Committee on Foreign Investment in the United States completes its national security review [3].

The paper's July 6 coverage of the EA buyout's regulatory clearing process named both the EU and CFIUS as open reviews. Today one of those questions is answered. The EU cleared the deal under its foreign subsidy regulation, with the EU's Foreign Subsidies Regulation decision expected by July 30 [1]. The CFIUS review has not concluded; it is now the single material approval standing between the deal and close, and it carries the full quarter of additional runway the September 28 extension provides.

Antitrust regulators cleared the transaction without conditions under the Hart-Scott-Rodino process earlier this year [1]. CFIUS operates on a different legal standard. Its review does not ask whether the merger reduces competition. It asks whether a foreign government acquiring control of, or meaningful access to, a US business poses a national security risk. For the EA transaction, the central question CFIUS is evaluating is whether Saudi Arabia's Public Investment Fund — a sovereign wealth fund controlled by the Saudi government — acquiring a controlling interest in a company that operates one of the world's largest real-time social networks for gaming carries national security implications.

The data at issue is not the kind typically associated with defense-sector CFIUS reviews. EA's gaming platforms hold behavioral data, device identifiers, payment information, location data, and social-graph connections for approximately 700 million global player accounts [1]. A significant portion of those accounts belong to active-duty US military personnel and their families — Madden, Battlefield, and EA Sports titles are among the most played games on US military bases. US senators formally raised that concern in correspondence to CFIUS, describing the data as enabling "surveillance of Americans, covert Saudi propaganda, and selective retaliation" [2].

The transaction carries a second layer that the senators' letter named but that MSM coverage has mostly left unexamined. EA laid off its trust-and-safety workforce in June 2026 [2]. The asset being transferred to Saudi government-adjacent ownership includes not only the behavioral and social-graph data of 700 million players, but also the content-moderation and safety infrastructure for one of the world's most widely used real-time social platforms — without the people who operated it. CFIUS is reviewing the transfer of an active social network that no longer employs the team responsible for managing it.

The transaction structure does not simplify the analysis. The deal was structured to give PIF, Silver Lake, and Affinity Partners combined control of EA as a private company, with EA ceasing to be a publicly traded company on close [1]. The shift from public to private removes the SEC-mandated disclosure requirements and the shareholder accountability mechanisms that currently apply to EA's data practices. What replaces them — if anything — depends on CFIUS mitigation measures, which are negotiated privately between the parties and the committee.

CFIUS mitigation agreements for data-rich foreign acquisitions have in past cases included requirements for US-citizen data governance committees, data localization mandates requiring player data to be stored on US-soil servers, audit rights for US government inspectors, and prohibitions on transferring data to foreign government entities. Whether any such measures are sufficient to satisfy CFIUS's security assessment for 700 million player accounts under Saudi government ownership is the question that the September 28 outside date buys time to resolve.

The deal remains the largest leveraged buyout in gaming history, and arguably the largest transfer of social-media behavioral data to a foreign sovereign wealth fund in US corporate history. Antitrust reviewed the transaction through a competition lens and found no concern. National security is reviewing it through a different lens. The review has not concluded.

-- THEO KAPLAN, San Francisco