The Challenge
On September 30, 2022, FinCEN published regulations under the Corporate Transparency Act requiring about 32 million domestic and foreign companies to file beneficial ownership information (BOI) reports. The regulation took effect on January 1, 2024, marking a significant compliance effort in US corporate history.
By late 2024, the framework collapsed. Nationwide injunctions halted enforcement, and the Treasury suspended the rule for US entities on March 2, 2025. An interim final rule on March 26, 2025, exempted domestic companies and US person beneficial owners, leaving around 20,000 foreign companies in scope. On August 14, 2026, FinCEN published a final rule making these exemptions permanent and announced the deletion of previously collected US person data from the BOI IT System.
For compliance teams, this was more than regulatory relief. It became a case study in managing a compliance program through rapid reversal, data deletion, and reallocating resources initially committed to a now-defunct mandate.
The Environment and Constraints
The Corporate Transparency Act granted the Secretary of the Treasury broad authority under 31 C.F.R. § 1010.380 to exempt any class of entities from BOI collection if it "would not serve the public interest" or "would not be highly useful" in law enforcement efforts against financial crimes.
Treasury used this authority, determining that domestic entity reporting imposed an administrative burden without sufficient investigative value. The final rule permanently adopted the interim exemptions, resolving three key ambiguities:
US person company applicants. The final rule eliminated the requirement for foreign reporting companies to report US person company applicants who filed registration documents.
FinCEN ID maintenance. The final rule removed the 30-day update requirement for US persons with FinCEN identifiers. Non-US persons remain subject to this requirement.
Data deletion. FinCEN committed to deleting information about domestic reporting companies and US individuals it reasonably believes are US persons. Any US person BOI filed after February 10, 2027, will not be deleted.
These constraints required compliance teams to reassess ongoing obligations, data retention, and filing requirements for foreign affiliates.
The Approach Taken
Organizations that effectively navigated this regulatory reversal took these steps:
Segmented their entity population. Domestic entities required no further action. Foreign entities registered in any US state or tribal jurisdiction remained reporting companies. The key distinction was formation jurisdiction and US registration status.
Clarified beneficial owner scope. Foreign reporting companies reviewed their submissions to ensure they hadn't over-reported. Under the final rule, they must report only non-US person beneficial owners. If no individual with substantial control is a non-US person, no beneficial owners are reported.
Addressed company applicant obligations. Foreign entities registered before March 26, 2025, had until April 25, 2025, to file initial reports. Newly registered entities must file within 30 days of registration. The final rule's elimination of US person company applicant reporting allowed foreign entities to exclude these individuals from filings.
Managed data deletion expectations. FinCEN's deletion process didn't require entities or individuals to request deletions. Compliance teams updated their data inventories to reflect that FinCEN would no longer retain US person information.
Results and Metrics
The final rule removed BOI reporting obligations for millions of US small businesses. The remaining 20,000 foreign reporting companies represent a 99.9% reduction from the original 32 million entities.
For compliance teams, this meant reallocating resources. Programs that had built workflows, vendor relationships, and training on beneficial ownership could redirect resources to other priorities. The penalty provisions under 31 U.S.C. § 5336 remain unchanged for foreign entities, but the compliance population has significantly contracted.
FinCEN's data deletion commitment addressed concerns about previously filed information. The agency's decision to delete US person data without requiring requests eliminated the need for mass correction filings.
What They Would Do Differently
Organizations that filed early and then saw the framework unravel might adopt a different risk posture in future rulemakings. The CTA's litigation history and rapid reversal suggest waiting for enforcement clarity before committing significant resources may be prudent when a rule faces constitutional challenges or administrative opposition.
The interim rule left questions unresolved: US person company applicants, FinCEN ID maintenance, and data deletion. Compliance teams that built processes around the interim rule had to revise them when the final rule provided different answers. A more cautious approach would have been to maintain minimal compliance posture for foreign entities while monitoring for final guidance.
Takeaways for Your Team
Exemptive authority is broader than you think. The Secretary of the Treasury's authority under 31 C.F.R. § 1010.380 extends to entire classes of entities when reporting "would not serve the public interest." When evaluating new mandates, assess whether the regulator has similar discretion to exempt categories of filers.
Data deletion commitments require verification. FinCEN's deletion process relies on identifying US persons based on document types. If your organization filed BOI that included US persons but used foreign identifying documents, confirm with counsel whether that data falls within FinCEN's deletion scope.
Foreign entity obligations persist. The final rule narrows CTA reporting to foreign entities registered in the US. Ensure your foreign subsidiaries or affiliates registered with US authorities have filed initial reports and established processes for 30-day updates when beneficial ownership changes.
Customer Due Diligence obligations remain unchanged. FinCEN reaffirmed that the CDD Rule requiring financial institutions to collect beneficial ownership information at account opening remains in effect. The final rule doesn't alter these obligations, and FinCEN will issue separate guidance on CDD Rule modifications. If you're a covered financial institution, don't conflate CTA rollback with CDD relief.
The CTA's reversal shows that even fully effective regulations can be permanently exempted when administrative priorities shift. For compliance teams, the lesson isn't that reporting mandates are optional. It's that regulatory frameworks built on broad exemptive authority can change faster than the programs designed to comply with them.
