What Happens to the Beneficial Ownership Data?

On August 11, FinCEN issued a final rule permanently removing the requirement that U.S. companies and U.S. persons report beneficial ownership information under the Corporate Transparency Act. It took effect on publication in the Federal Register three days later.¹ For the overwhelming majority of American businesses, the reporting obligation that consumed so much attention in 2024 is now gone, and the information already submitted is scheduled for deletion.

The rule adopts the March 2025 interim final rule and goes somewhat further.² Entities formerly called domestic reporting companies are exempted from the definition of "reporting company" entirely, exercising the Secretary's authority to exempt any class of entities whose beneficial ownership information would not serve the public interest and would not be highly useful to law enforcement.³ Foreign entities registered to do business in the United States remain reporting companies, but they no longer report the information of U.S. person beneficial owners — and, new in the final rule, no longer report U.S. person company applicants either.⁴ Foreign pooled investment vehicles need not report a U.S. person who exercises substantial control.⁵ U.S. persons holding a FinCEN identifier are released from the perpetual obligation to update or correct what they submitted to obtain it, a fix that responded directly to comments describing an open-ended lifetime disclosure duty attached to an identifier the holder may never use again.⁶

The deletion commitment is the part most people have asked about, and its mechanics are worth reading closely. FinCEN expects to work with the National Archives to identify and remove information about individuals whose filings reflect an identifying document it reasonably believes belongs to a U.S. person — a U.S. passport or driver's license.⁷ Filers do not need to request removal, and FinCEN does not intend to acknowledge or confirm deletion for any particular company or individual; it will post a public notice when the sweep is finished.⁸ It will be a single sweep rather than a recurring one, and information about U.S. persons that arrives in a filing made more than 180 days after publication is not expected to be deleted.⁹ Commenters asked for deletion receipts, published purge methodologies, monthly reports to the Secretary, and an annual audit by the Comptroller General; FinCEN declined all of it as adding cost without advancing the privacy objective.¹⁰

What survives matters as much as what was removed. Foreign reporting companies still file within thirty days, still update within thirty days of a change, and FinCEN rejected requests to lengthen that window or align it with foreign regulatory calendars.¹¹ The penalty provisions are untouched, and FinCEN reaffirmed the willfulness standard as the line between an enforcement action and an inadvertent mistake.¹² Most importantly for anyone who reads this as the end of ownership disclosure: the 2016 Customer Due Diligence Rule is unchanged.¹³ Banks still collect beneficial ownership information from legal entity customers at account opening. Several commenters pressed FinCEN to dismantle the CDD Rule as the logical consequence of the exemptions, and FinCEN declined, explaining that the two rules serve different purposes under different authorities and that the narrowing of the Reporting Rule should not be read as a judgment that beneficial ownership information lacks value.¹⁴ FinCEN acknowledged it remains legally obligated to revise the CDD Rule and said it will turn to that next.

I have written twice before about this statute, and it is worth being candid about how those pieces have aged. In The Dangers of the Corporate Transparency Act & BOI Reporting Requirements I argued that the central problem was not the paperwork but the registry — a federal database of private ownership, indefinitely retained, with data breach and misuse risks that the transparency framing tended to elide.¹⁵ That concern is substantially answered here, and answered on privacy grounds specifically: FinCEN agreed that privacy, information security, and public trust all favor removing information that would not have been collected had this rule been in place from the start.¹⁶ In Corporate Transparency Act Updates I catalogued the dueling injunctions and told businesses to conduct an ownership audit, build the internal collection procedures, and wait.¹⁷ That advice was right for its moment and is now largely moot as to FinCEN — though the audit work retains value, because the ownership analysis you did for the CTA is the same analysis your lender's certification form requires.

The litigation that drove all of this has mostly resolved. The Eleventh Circuit reversed the district court's constitutional ruling and remanded.¹⁸ And in March a federal court in the Eastern District of Texas vacated the Residential Real Estate Reporting Rule, the companion regulation that had borrowed the Reporting Rule's beneficial owner definition to reach non-financed residential transfers; that decision is on appeal to the Fifth Circuit.¹⁹ Anyone who does closings should treat that one as genuinely unsettled rather than concluded.

Which brings me to the thing I would flag hardest. This is a rulemaking, not a repeal. The CTA remains on the books exactly as Congress wrote it, and the reporting obligations for domestic entities were removed by the Secretary's exercise of discretion — discretion this rule reads expansively, over dissent from four senators and others who argued the exemption of every domestic entity cannot be squared with a statute whose findings speak specifically to entities formed under the laws of the States.²⁰ FinCEN's answer is that the statutory command to minimize burden appears in the operative text of the Bank Secrecy Act, not merely in the sense-of-Congress section, and therefore carries real weight in the balance.²¹ That is a serious argument. It is also an argument about how to weigh competing statutory directives, which is precisely the kind of question that a differently disposed administration could weigh differently, and that a court reviewing the record under Loper Bright and ordinary arbitrary-and-capricious principles might not resolve the same way.²² Some supportive commenters saw this clearly and asked Congress to codify the exemptions so FinCEN could not later reinstate them.²³ It did not. FinCEN's decision to make the rule immediately effective without notice and comment, invoking good cause to bypass both the ordinary delay and the Congressional Review Act's sixty-day waiting period, along with the severability clause at the end, suggests an agency that anticipates being sued.²⁴

So the practical posture for a Tennessee business is straightforward but not quite "forget it happened." If your entity was formed here, you file nothing and do nothing; deletion is automatic. If you have registered a foreign entity to do business in any state, you still file, and you still report your non-U.S. beneficial owners on a thirty-day clock. Keep the ownership charts you built in 2024 — your bank still needs that information under the CDD Rule, and several states have enacted their own transparency regimes that do not move when the federal rule moves.²⁵ And understand what you actually received. The relief is real and it is large. But relief granted by regulation is held on different terms than relief granted by statute, and the distance between those two things is the whole of what is left to watch.