A deal can look commercially sound on paper and still go wrong because of one missed legal issue. A key contract may be non-transferable. A regulator may need to be notified earlier than expected. A China-facing supplier relationship may rely more on local practice than the written terms suggest. That is why a mergers and acquisitions legal checklist matters – not as a box-ticking exercise, but as a way to surface risk early enough to make better decisions.
For buyers, sellers and founders, the legal work in an M&A transaction should do two things at once. It should protect your position and keep the deal moving. Those goals are not always in perfect alignment. The right approach is usually practical rather than exhaustive, with deeper review focused on the issues most likely to affect value, timing and post-completion integration.
What a mergers and acquisitions legal checklist should actually do
A useful checklist is not just a list of documents to collect. It should help you test the core assumptions behind the transaction. Are you buying the right entity or assets? Can the business legally operate as represented? Are there hidden liabilities that should change price, deal structure or warranty protection? If the transaction is cross-border, are there language, enforcement or regulatory issues that make a familiar approach less reliable?
This is where many deals become more complex than expected. An Australian buyer acquiring a business with Hong Kong operations or Mainland China counterparties may find that the legal position is only part of the picture. Commercial arrangements can be influenced by local market practice, internal approvals, foreign exchange controls, licensing rules and the practical enforceability of rights across jurisdictions.
Start with deal structure
Before due diligence gets too far, the legal structure of the transaction needs to be settled at a high level. The difference between a share sale and an asset sale affects liability, tax, employee arrangements, contract transfer and regulatory steps.
In a share sale, the buyer usually acquires the company with all of its assets and liabilities, including some that may not be obvious at first review. That can make completion simpler from an operational point of view, but it increases the importance of due diligence and contractual protection.
In an asset sale, the buyer can often select which assets and liabilities it wants to assume. That can reduce risk, but it may create more work in transferring contracts, licences, employees, intellectual property and customer arrangements. In regulated sectors, asset transfers can be less straightforward than they first appear.
If the transaction involves Australia, Hong Kong or Mainland China, structure should also be tested against local regulatory requirements, stamp duty implications, foreign investment considerations and any restrictions on transferring ownership or operating rights.
The core mergers and acquisitions legal checklist for due diligence
The legal due diligence phase should focus on the matters that affect ownership, compliance, exposure and continuity of the business.
Corporate records and ownership
Start with the basics. Confirm the target’s legal existence, corporate structure, constitutional documents, shareholder arrangements, share capital and records of prior issuances or transfers. If there are options, convertible instruments, nominee holdings or informal side arrangements, those need to be identified early.
This is especially important in founder-led businesses and cross-border groups, where the practical ownership story can be more complicated than the register suggests. If a subsidiary sits in Hong Kong or business is conducted through Mainland China entities or partnerships, group structure should be mapped carefully.
Material contracts
Review key customer, supplier, distribution, finance, lease and service agreements. The question is not just whether the contracts exist, but whether they continue after the deal on the same terms.
Change of control clauses, assignment restrictions, exclusivity commitments, unusual termination rights and non-compete obligations can all affect value. In cross-border deals, check whether the contract language, governing law and dispute resolution mechanism are commercially workable. A strong clause on paper may be less useful if enforcement is slow, expensive or uncertain in practice.
Regulatory compliance and licences
A target may have a healthy revenue profile and still carry serious compliance risk. Check the licences, permits, registrations and approvals needed to operate. Confirm whether they are current, transferable and sufficient for the business as conducted.
This area often depends on sector. Financial services, health, education, import-export, consumer products and technology businesses may all carry different regulatory exposures. If the business touches personal data, marketing rules, customs obligations or sector-specific approvals across multiple jurisdictions, the review needs to reflect that reality.
Employment and contractor arrangements
People risk is often underestimated. Review employment agreements, contractor arrangements, bonus schemes, commission plans, restraint clauses, workplace policies and any disputes or complaints. Identify key personnel and check whether their incentives align with staying after completion.
The legal treatment of employees and contractors can differ materially between jurisdictions. So can consultation obligations, accrued entitlements, mandatory benefits and termination exposure. Where the business depends on a small number of managers, engineers or sales staff, retention planning should start well before signing.
Intellectual property and technology
For many businesses, especially startups and scale-ups, intellectual property is central to enterprise value. Confirm ownership of trade marks, software, domain names, content, designs and confidential information. Check whether IP created by founders, staff or contractors has been properly assigned.
Software and SaaS businesses need additional scrutiny. Open-source usage, third-party code dependencies, source code access, data hosting arrangements and customer service commitments can all affect risk. If development work has been done offshore, make sure ownership and assignment chains are clear.
Disputes, claims and legacy issues
Litigation is not the only concern. Threatened claims, unresolved complaints, warranty disputes, regulator correspondence and historical tax or employment issues may all matter. What matters is not just the formal legal status, but the likely commercial cost of dealing with the issue after completion.
A practical review asks whether a known issue can be ring-fenced, priced in, insured against or covered by indemnity. Some matters justify walking away. Others simply require disciplined allocation of risk in the transaction documents.
Transaction documents and risk allocation
Once the facts are clearer, the sale documents should reflect them. This is where due diligence turns into bargaining power.
Warranties, indemnities, conditions precedent, completion accounts, earn-out mechanics, escrow arrangements and restraint provisions all need to match the real risks of the deal. There is no standard position that suits every transaction. A buyer acquiring a stable local business will often negotiate differently from a buyer entering a new market through a founder-led cross-border acquisition.
Disclosure also matters. Sellers often want disclosures to qualify warranties broadly. Buyers usually want disclosures to be specific and supported by documents. The right balance depends on deal size, bargaining strength, known risk areas and whether the parties need an ongoing relationship after completion.
Cross-border issues that change the checklist
Cross-border M&A is rarely just domestic M&A with extra paperwork. The checklist needs to account for legal systems, languages, corporate practices and enforcement realities across jurisdictions.
If a business operates between Australia, Hong Kong and Mainland China, document review should test not only legal validity but practical control. Who actually signs contracts? Which entity invoices customers? Where is data stored? Are chops, seals or local registrations relevant? Are there restrictions on payments, technology transfer or movement of funds?
Cultural context also matters. Some risks appear only when legal review is combined with an understanding of how the business relationships function on the ground. A commercially important arrangement may depend on a local relationship holder rather than a carefully negotiated long-form agreement. That does not make the business unworkable, but it should affect how you assess continuity risk.
Timing, cost and deciding how far to go
Not every deal justifies the same level of legal investigation. A smaller acquisition may need a tightly scoped review focused on contracts, employment, IP and regulatory essentials. A larger or higher-risk transaction may require specialist input across multiple jurisdictions and workstreams.
The key is to match diligence to materiality. Over-lawyering can slow a deal and create cost without changing the decision. Under-lawyering can be far more expensive later. The better question is not whether every issue can be found, but which issues could materially affect price, completion or integration.
For businesses without a full in-house legal team, this is where experienced external counsel can add real value. The best support is not just technical. It helps management prioritise, negotiate with confidence and keep legal analysis tied to commercial outcomes.
A good checklist does not make a transaction risk-free. It gives you a clearer view of where the real risk sits, what can be fixed, and what should change the deal. In M&A, that clarity is often the difference between a transaction that looks good at signing and one that still looks good a year later.