What is FDOC in business?
In business, FDOC means foreign countries of concern: nations the U.S. treats as security risks, led by China, Russia, Iran, North Korea, Cuba and Venezuela. Federal rules apply in every state, and at least 28 states add their own. If you handle Americans’ personal data, take foreign investment, sell to government or buy land, you may have to prove you have no ties to them.
Answer from Mary's digital twin. Checkmark turns Green once she confirms it.
Background
Foreign countries of concern, written FDOC or FCOC, are countries the U.S. government treats as national security risks. The term grew out of worries about foreign governments getting Americans’ personal data, sensitive technology, farmland and land near military bases. It is not one law: federal agencies, including the Department of Justice, the Treasury and the Commerce Department, keep their own lists, and these apply to businesses in every state. Since 2023, at least 28 states have added laws of their own, mostly on who can buy land, and some on who can win state contracts.
Which countries
The federal lists overlap closely:
| Country | DOJ data rule | Commerce list | Treasury investment rule |
|---|---|---|---|
| China (including Hong Kong and Macau) | Yes | Yes | Yes |
| Russia | Yes | Yes | No |
| Iran | Yes | Yes | No |
| North Korea | Yes | Yes | No |
| Cuba | Yes | Yes | No |
| Venezuela (the Maduro government, as the rules are written) | Yes | Yes | No |
States use their own lists, which often add Syria. Lists change, so check the current one before you sign anything.
Federal rules: every state
| If you… | What applies | What you have to do |
|---|---|---|
| Share Americans’ sensitive personal data (health, financial, location, genetic or biometric data) | DOJ Data Security Program (28 CFR Part 202), in force since April 8, 2025 | Data brokering to people or companies tied to these countries is banned; vendor, employment and investor deals that touch the data need security controls. |
| Invest in Chinese tech companies in AI, chips or quantum computing | Treasury outbound investment rule, in force since January 2, 2025 | Some deals are banned, others must be reported. |
| Take investment from a foreign investor | CFIUS, the Committee on Foreign Investment in the United States | Some deals need a review, especially in tech, data and land near military bases. |
| Use or sell tech, apps or equipment from companies tied to these countries | Commerce Department rules on technology from foreign adversaries | Some products and suppliers are restricted. |
| Own or lease U.S. farmland with any foreign owner | AFIDA, the Agricultural Foreign Investment Disclosure Act | Report the foreign ownership to the U.S. Department of Agriculture. |
State rules: where you do business
| State | What it restricts |
|---|---|
| Florida | Land near military bases and farmland; state contracts that give access to personal information need a sworn affidavit (form PUR 1355); economic incentives; university partners. Its list adds Syria. |
| Texas | Since September 1, 2025, governments, companies and many people from countries named in U.S. intelligence threat assessments, such as China, Russia, Iran and North Korea, can’t buy most land, including leases of 1 year or more. |
| Other states | About 2 dozen more limit foreign ownership of farmland or land near bases, including Alabama, Arkansas, Georgia, Idaho, Indiana, Louisiana, Montana, Oklahoma, Tennessee, Utah, Virginia and West Virginia. Rules and lists differ from state to state. |
Follow-ups
Build something people are still figuring out
CEEK is where creators share what they're working on and learning every day, in a community that's moving forward together.
Join me on CEEK
Comments
Comments are public. Links are removed.