The RIFA Act amends the Higher Education Act to force certain non-public institutions of higher education to disclose annually specific investments tied to foreign countries or entities the government deems ‘‘of concern.’’ A newly inserted Section 117A requires covered institutions to report holdings, sales, and capital gains tied to those investments, designates a required compliance officer to certify accuracy, and directs the Department of Education to publish submissions in a searchable public database.
The bill creates a compliance-and-enforcement regime: the Education Department investigates, the Attorney General may bring civil actions to compel compliance, and institutions face steep fines based on the fair market value of undisclosed investments and potential program ineligibility for repeat offenders. For endowment managers, legal teams, and university leaders, the measure imposes new reporting mechanics, valuation rules for complex instruments, and reputational risk from public disclosure.
At a Glance
What It Does
Requires non-public colleges and universities that meet large-asset or investment thresholds to file an annual Investment Disclosure Report listing ‘‘investments of concern’’ (equity, debt, or derivatives tied to defined foreign countries/entities). It treats certain pooled investments as reportable unless the Secretary certifies otherwise and requires the Department to host a searchable public database of filings.
Who It Affects
Private, non-public institutions of higher education with very large endowments (see thresholds), their endowment managers and outside pooled-fund providers, federal agencies (Education, Treasury, SEC), donors with restricted gifts, and institutions’ legal/compliance staffs.
Why It Matters
The bill federalizes transparency over endowment exposure to countries and entities labeled as national-security risks, shifting compliance costs onto universities and potentially altering investment strategy and donor relations while creating a precedent for national-security-driven disclosure obligations in the nonprofit higher-education sector.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The core of the bill adds a new Section 117A to the Higher Education Act that triggers reporting when a ‘‘specified institution’’—a non-public college with very large assets or large holdings in investments of concern—purchases, sells, or holds one or more investments of concern during a calendar year. Reports are due July 31 following the year in which activity occurred and must enumerate the specific instruments, state aggregate fair market value at year-end, give the combined sales value during the year, and report capital gains from those sales.
The bill defines investments of concern broadly to include equity, debt, and contracts or derivatives tied to either a ‘‘foreign country of concern’’ (which starts with the statutory covered-nation list in 10 U.S.C. 4872 and can be expanded by the Secretary after interagency consultation) or a ‘‘foreign entity of concern’’ as defined in recent R&D-security statutes. The bill also treats a specified institution’s interest in certain pooled investments—like mutual funds or ETFs that hold an investment of concern—as itself an investment of concern unless the pooled fund is certified by the Secretary (after consultation with Treasury and the SEC) not to hold such investments.Practical mechanics receive particular attention.
The statute treats assets held by related organizations as assets of the reporting institution in most cases, prescribes that debt be valued at principal, and authorizes the Secretary (with Treasury and SEC input) to issue implementing regulations and pooled-fund certification procedures. Each reporting institution must designate a compliance officer—an employee or authorized agent—who must personally certify the report’s accuracy.
The Department must establish a publicly searchable, downloadable database by the May 31 following enactment and post any received report within 30 days of receipt.Enforcement pairs administrative investigation with civil litigation: the Department’s General Counsel investigates potential violations and can request that the Attorney General sue to compel compliance. Institutions forced into compliance must reimburse costs to the Treasury, and the statute sets fines as percentages of the relevant investments’ fair market value—50–100% for a first knowing or willful violation and 100–200% for subsequent violations.
Additionally, the bill adds Section 487(a)(30) to program-participation agreements: an institution that violates reporting requirements for three consecutive institutional fiscal years becomes ineligible for federal student-aid programs for at least two fiscal years and must demonstrate two years of compliance to regain eligibility.
The Five Things You Need to Know
Specified institutions are non-public colleges whose total non-exempt assets exceed $6,000,000,000 or whose investments of concern exceed $250,000,000 at year-end.
Reports are due July 31 following any calendar year in which the institution purchases, sells, or holds investments of concern; the Department must create a public searchable database by the May 31 after enactment and post reports within 30 days of receipt.
A specified interest in a pooled vehicle (mutual fund, ETF, etc.) is treated as an investment of concern and reportable unless the Secretary certifies the pooled investment is not holding an investment of concern under procedures developed with Treasury and the SEC.
Fines for knowingly or willfully failing to comply are calculated as a percentage of the sum of (A) aggregate fair market value of investments of concern held at year-end and (B) combined sales value during the year—50–100% for first violations and 100–200% for subsequent violations—plus costs of enforcement paid to the Treasury.
Three consecutive institutional fiscal-year violations render an institution ineligible for federal higher-education programs for at least two institutional fiscal years and require two years of demonstrated compliance before reenrollment.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Short title
Designates the act as the ‘‘Reporting on Investments in Foreign Adversaries Act’’ or ‘‘RIFA Act.’
Annual Investment Disclosure Report and required contents
Subsection (a) obligates a ‘‘specified institution’’ to file an Investment Disclosure Report with the Secretary on each July 31 after any calendar year in which it purchases, sells, or holds one or more ‘‘investments of concern.’’ Subsection (b) prescribes the required contents: an itemized list of investments of concern transacted or held, aggregate fair market value at year-end, combined sales value during the year, and combined capital gains from those sales. Practically, this creates a recurring, date-driven reporting cadence tied to calendar-year activity rather than to institution fiscal years.
Treatment and certification of pooled funds
The bill treats a specified institution’s interest in pooled vehicles (regulated investment companies, ETFs, or other pooled investments) that hold investments of concern as themselves reportable investments of concern. It also requires the Secretary, after consulting Treasury and the SEC, to set procedures: pooled funds must generally be reported, but the Secretary may certify a pooled fund as not holding an investment of concern under established procedures. This shifts significant burden onto federal regulators to design certification steps and on institutions to seek certification when they rely on pooled vehicles.
Related-organization aggregation and valuation rules; rulemaking authority
Assets held by related organizations (per IRC section 4968(d)(2)) are generally counted as assets of the institution, but the bill prevents double-counting and carves out assets not intended or available for the institution’s benefit. The statute sets the fair market value of debt equal to principal for reporting purposes and authorizes the Secretary, with Treasury and SEC consultation, to issue regulations or guidance implementing valuation, pooled-fund application, and other technical rules—placing several key interpretive choices in executive-branch rulemaking rather than in the statute.
Certification by a designated compliance officer and public database requirement
Each reporting institution must name and maintain a compliance officer (an employee or legally authorized agent) who must personally certify accurate compliance. The Secretary must establish and maintain a searchable, downloadable public database on the Department’s website by the May 31 following enactment; reports received must be posted within 30 days. That makes the reports both a regulatory filing and a public disclosure with reputational consequences for institutions and potential confidentiality implications for donors and managers.
Investigation, civil enforcement, and monetary penalties
The Department’s General Counsel conducts investigations into possible violations; on findings of knowing or willful noncompliance, the Secretary requests that the Attorney General file civil actions to compel compliance. Institutions compelled to comply must reimburse investigative and enforcement costs to the Treasury. The statute sets fines as percentage ranges of the sum of year-end aggregate fair market value plus combined sales value: first-time knowing/willful violations are fined 50–100% of that sum; subsequent violations 100–200%. The structure ties penalties directly to the monetary exposure the institution had in investments of concern.
Definitions of foreign country/entity of concern, investment of concern, and specified institution thresholds
Key definitions specify that ‘‘foreign country of concern’’ includes covered nations under 10 U.S.C. 4872 and any country the Secretary, after consulting Defense, State, and the DNI, finds detrimental to U.S. national security or foreign policy. ‘‘Foreign entity of concern’’ borrows statutory definitions from recent R&D-security law and cross-references the FY2019 NDAA list. ‘‘Investment of concern’’ includes equity, debt, and related contracts/derivatives. ‘‘Specified institution’’ is limited to non-public institutions whose non-exempt assets exceed $6 billion or whose investments of concern exceed $250 million at year-end, tying coverage to concrete size thresholds used in nonprofit tax law contexts.
Federal aid eligibility conditioned on compliance
Adds a program-participation requirement: institutions must comply with Section 117A. If an institution violates Section 117A for three consecutive institutional fiscal years, it becomes ineligible for HEA-authorized programs for at least two institutional fiscal years and must show two years of compliance before regaining eligibility—creating a separate, programmatic enforcement pathway that can cut off federal student-aid participation.
This bill is one of many.
Codify tracks hundreds of bills on Education across all five countries.
Explore Education in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Federal national-security and oversight entities (DOD, State, DNI, Congress): gain structured, recurring visibility into exposure of major private-college endowments to countries and entities identified as national-security risks.
- Journalists, watchdog groups, and researchers: receive standardized, downloadable, searchable institutional-level data to analyze trends, track relationships between endowments and foreign actors, and inform public accountability.
- Domestic asset managers and fund providers offering non-foreign-adversary alternatives: may see increased demand for vehicles certified as not holding investments of concern and for bespoke compliant strategies for large endowments.
Who Bears the Cost
- Large private universities that meet the thresholds: face direct compliance costs (staffing a compliance officer, reporting systems), reputational risk from public disclosures, and exposure to substantial fines or loss of federal program eligibility.
- Endowment managers and pooled-fund providers: must support institution reporting, pursue pooled-fund certifications, and potentially change portfolio construction or disclosures to avoid labeling; smaller managers may face lost business if excluded by certification needs.
- Department of Education, Treasury, and the SEC: must design certification procedures, issue guidance, host and maintain the public database, and allocate enforcement resources—an administrative burden that will likely require new staffing or reallocation of existing resources.
- Donors and grantors with privacy or donor-restriction expectations: may see confidential donor relationships become public through reporting, complicating gift agreements and possibly chilling certain gifts tied to investment strategy.
Key Issues
The Core Tension
The central dilemma is between national-security-driven transparency and the traditional autonomy and confidentiality of private university endowment management: the statute advances government oversight to manage perceived security risk, but in doing so it forces disclosure of investment strategies and donor ties that universities treat as proprietary, creating a real risk that the cure—broad public reporting and heavy penalties—will meaningfully alter investment behavior and academic institutions’ financial independence.
The bill delegates several critical, technical determinations to federal agencies—most notably which countries or entities are ‘‘of concern’’ and whether pooled investments hold reportable assets. That interagency delegation creates implementation risk: institutions will need clear, timely lists and certification processes to operationalize compliance, yet the statute does not set deadlines or standards for how the Secretary, Treasury, and SEC must act.
Without detailed procedural rules, institutions may face inconsistent treatment or long certification backlogs.
Public disclosure also creates strong tensions between transparency and proprietary confidentiality. The searchable, downloadable database will make endowment exposures visible to competitors, donors, and foreign actors.
Pooled-fund treatment is particularly tricky: broadly held mutual funds could trigger reporting even when an institution owns only a fractional share of a fund that itself has marginal exposure, potentially forcing institutions to reveal portfolio strategy or to divest from widely used vehicles. The fines—tied to the fair market value of holdings and sales—are severe and could prompt preemptive divestment or litigation over valuation methodologies, especially for complex derivatives or structured debt where the bill’s valuation rule (debt = principal) may not reflect market reality.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.