Beneficial Ownership Information Reporting
What you need to know to prepare for FinCEN's beneficial ownership information (BOI) reporting requirements under the Corporate Transparency Act (CTA).
Last Updated: November 20th, 2024
As of January 1, 2024, many domestic entities created, or foreign entities first registered to do business in the U.S., on or after that date are required to report information to the Financial Crimes Enforcement Network (FinCEN) about the individuals who create and ultimately own and control them. Domestic entities created, or foreign entities registered, in the U.S. prior to January 1, 2024 have until January 1, 2025 to report such beneficial ownership information (BOI) to FinCEN.
Specifically, these entities (Reporting Companies) must file a report detailing certain identifying information about: (i) the Reporting Company; (ii) the individuals who directly or indirectly exercise “substantial control” of a Reporting Company, or own or control at least 25% of the ownership interests in the Reporting Company (Beneficial Owners); and (iii) for those entities so created or registered on or after January 1, 2024, the individual who directly files the creation or registration document with a secretary of state or similar state office, and, if more than one individual is involved in the filing, the individual who is primarily responsible for directing or controlling the filing (Company Applicants).
Many Reporting Companies may not be aware of their obligation to file these reports, known as BOI Reports (BOIRs), or they may have questions about the filing process or the information that must be included in a BOIR. Indeed, FinCEN has been publishing a stream of proposed rules and guidance to clarify and publicize the BOI reporting process and requirements.
On this resource page, Arnold & Porter will:
- Summarize the basic requirements of the BOI reporting rules;
- Track FinCEN’s continued guidance and rulemaking, and summarize the import for potential filers and entities—particularly financial institutions—who may be entitled to access BOI reported to FinCEN;
- Track FinCEN’s anticipated guidance and rulemaking regarding revisions to financial institutions’ customer due diligence (CDD) obligations;
- Offer our analysis on best practices for complying with the BOI reporting and other CTA requirements; and
- Track the various state laws, including in New York and California, that will require similar BOI reporting.
Should you have any questions about the applicability of the BOI reporting requirements, or other CTA provisions, please reach out to one of the Key Contacts listed here.
Basic Requirements of FinCEN's BOI Reporting Rule
-
Who Has to Report?
- There are two types of Reporting Companies:
- Domestic Reporting Companies: subject to the exemptions below, corporations, limited liability companies, and any other entities created by the filing of a document with a secretary of state, or any similar state or tribal office, in the U.S. or any U.S. territory
- Foreign Reporting Companies: subject to the exemptions below, entities formed under the law of a foreign country that have registered to do business in the U.S. by the filing of a document with a secretary of state, or any similar state or tribal office, in the U.S. or any U.S. territory
- Certain trusts and other entities not created by the filing of a document with a secretary of state, or similar state or tribal office, are excluded from the definition of Reporting Company.
- A “similar office” is any office (including a department, agency, or bureau) of a governmental authority under the law of a State or Indian Tribe where or through which a domestic entity files a document to be created or a foreign entity files a document to be registered to do business in the United States. Federal agencies are not “similar offices.”
- All non-exempt Domestic Reporting Companies in existence at any point on or after January 1, 2024 must report beneficial ownership information to FinCEN. This may result in situations where Domestic Reporting Companies that have ceased to exist must still report beneficial ownership information to FinCEN.
- All non-exempt Foreign Reporting Companies doing business in the U.S. at any point on or after January 1, 2024 must report beneficial ownership information to FinCEN. This may result in situations where Foreign Reporting Companies that have ceased doing business in the U.S. must still report beneficial ownership information to FinCEN.
-
Who May File a Report on Behalf of a Company?
- Anyone may file a report on behalf of a company as long as the company has authorized the individual to act on the company’s behalf.
-
Who Is Exempted From Reporting?
There are 23 types of entities that are exempt from the BOI reporting requirements. Generally, exempt entities are publicly traded, large companies, and/or subject to regulation; the idea being that the beneficial owners of such entities are already known to the government and, for some entity types, the public. An exempt entity does not need to report to FinCEN that it is exempt from the BOI reporting requirements if it has always been exempt. However, if a company filed a BOI Report and later qualifies for an exemption, that company should file an updated BOI Report to indicate that it is newly exempt.
Below is a short-title list of exempt categories. You should carefully review the qualifying criteria or seek legal advice before concluding an entity is exempt from the BOI reporting requirements.
Securities reporting issuer
Governmental authority
Bank
Credit union
Depository institution holding company
Money services business
Broker or dealer in securities
Securities exchange or clearing agency
Other Exchange Act registered entity
Investment company or investment adviser
Venture capital fund adviser
Insurance company
State-licensed insurance producer
Commodity Exchange Act registered entity
Accounting firm
Public utility
Financial market utility
Pooled investment vehicle
Tax-exempt entity
Entity assisting a tax-exempt entity
Large operating company
Subsidiary of certain
exempt entitiesInactive entity
-
What Do I Report?
Information about the Reporting Company
- Legal name
- Trade names, e.g., d/b/a names
- Current street address of principal place of business in the U.S. (or, if not in the U.S., the primary location in the U.S. where it conducts business). Reporting Companies must provide a street address; reporting a P.O. box address is not allowed.
- Jurisdiction of formation or registration
- Taxpayer Identification Number (TIN) (and, if issued by a foreign jurisdiction, the name of such jurisdiction).
- For an entity disregarded for U.S. tax purposes, different types of TINs may be reported depending on the circumstances:
- If the disregarded entity has its own Employee Identification Number (EIN), it may report that EIN as its TIN.
- If the disregarded entity is a single-member limited liability company (LLC) or otherwise has only one owner that is an individual with an SSN or an individual TIN (ITIN), the disregarded entity may report that individual’s SSN or ITIN as its TIN.
- If the disregarded entity is owned by a U.S. entity that has an EIN, the disregarded entity may report that other entity’s EIN as its TIN.
- If the disregarded entity is owned by another disregarded entity or a chain of disregarded entities, the disregarded entity may report the TIN of the first owner up the chain of disregarded entities that has a TIN as its TIN.
- For an entity disregarded for U.S. tax purposes, different types of TINs may be reported depending on the circumstances:
Information about Beneficial Owners
- For each individual Beneficial Owner
- Individual’s name
- Date of birth
- Current residential address (even if not a permanent residential residence)
- Identifying number from and image of an acceptable ID document, e.g., a passport or U.S. driver’s license, and name of issuing state or jurisdiction.
- A Reporting Company may report a parent company’s name in lieu of information about its Beneficial Owners if its Beneficial Owners only hold their ownership interest in the Reporting Company through the parent company and the parent company is an exempt entity.
Information about Company Applicant
- For each individual Company Applicant
- Individual’s name
- Date of birth
- Address
- If Company Applicant works in corporate formation (e.g., attorney), can be the business address. Otherwise, must be the residential address.
- Identifying number from and image of an acceptable ID document, e.g., a passport or U.S. driver’s license, and name of issuing state or jurisdiction.
It is the Reporting Company’s responsibility to report all of the above information to FinCEN.
The Reporting Company is responsible for verifying the information it receives from its Beneficial Owners and Company Applicants before reporting it to FinCEN.
-
Who is a Beneficial Owner?
- An individual who either directly or indirectly (1) exercises “substantial control” over the Reporting Company; or (2) owns or controls at least 25% of the Reporting Company’s ownership interests.
- “Substantial control”
- An individual in any of the 4 categories below exercises “substantial control” of the Reporting Company
- A senior officer, e.g., president, chief executive officer, chief financial officer, chief operating officer, general counsel, or person performing similar functions regardless of title
- Has authority to appoint or remove certain officers or a majority of directors
- Important decision-makers
- Individuals who direct, determine, or have substantial influence over decisions regarding:
- Nature, scope, product offerings, or geographies of the business
- Finances, including, e.g., sale of principal assets, major expenditures or investments, or compensation for senior officers
- Structure, e.g., reorganization and mergers, amendments of substantial governance documents
- Individuals with any other form of substantial control
- Per FinCEN: “Control exercised in new and unique ways can still be substantial. For example, flexible corporate structures may have different indicators of control than the indicators included” above.
- Individuals who direct, determine, or have substantial influence over decisions regarding:
- "Employee" Exception:
- If the individual:
- is an employee as defined by 26 CFR 54.4980H-1(a)(15);
- exercises substantial control over or receives economic benefits from the Reporting Company solely from his or her employment status; and
- is not a senior officer,
- Then such individual does not have to be reported as a Beneficial Owner.
- If the individual:
- An individual in any of the 4 categories below exercises “substantial control” of the Reporting Company
- Owns or controls at least 25% of the Reporting Company's ownership interests
- Shares of equity, stock, voting rights, or any other mechanism used to establish ownership.
- Subject to limited exceptions, if a corporate entity owns 25% or more of the ownership interests of the Reporting Company, the Reporting Company must report the individuals who own or control at least 25% of the ownership interests through the corporate entity. The Reporting Company should not report the corporate entity that acts as an intermediate for the individuals.
- FinCEN expects that every reporting company will be substantially controlled by one or more individuals, and therefore that every reporting company will be able to identify and report at least one beneficial owner to FinCEN, even if a reporting company does not have any individuals who own or control at least 25%.
- Exceptions: There are five exceptions to the definition of Beneficial Owner: (1) minor children; (2) nominees, intermediaries, custodians, and agents; (3) employees (discussed above); (4) inheritors; and (5) creditors.
Reporting Companies should consult FinCEN regulations and guidance, or an attorney, to determine if individuals fall within these Beneficial Owner exceptions.
-
Who is a Company Applicant?
- Only Reporting Companies created or registered on or after January 1, 2024 will need to report their Company Applicants.
- Each Reporting Company required to report Company Applicant information will have at least one Company Applicant, and at most two Company Applicants:
- The individual who directly files the document that creates or registers the company; and
- If more than one person is involved in the filing, the individual who is primarily responsible for directing or controlling the filing.
- Company Applicants must be individuals, not companies or legal entities.
- Are accountants and lawyers "Company Applicants"?
- They may be if:
- They directly filed the document that created or registered the Reporting Company (this would include, e.g., a paralegal who directly files the document); or
- They are primarily responsible for directing or controlling the filing of the creation or registration document.
- They may be if:
- To determine who is primarily responsible for directing or controlling the filing of the document, consider who is responsible for making the decisions about the filing of the document, such as how the filing is managed, what content the document includes, and when and where the filing occurs.
-
How Do I Report?
- The form to report BOI is available on FinCEN’s BOI webpage.
- BOI Reports will be filed through a secure filing system on FinCEN’s website.
- Anyone authorized to act on behalf of a Reporting Company may file a BOI Report. When submitting the BOI Report, individual filers should be prepared to provide basic contact information about themselves, including their name and email address or phone number.
- Reporting Companies will be able to use third-party service providers to submit BOI Reports.
- There will be no fee for submitting BOI Reports.
-
When Do I Report?
- Reporting Companies created or registered to do business before January 1, 2024 will have until January 1, 2025 to file its initial BOI Report.
- Reporting Companies created or registered to do business on or after January 1, 2024 and before January 1, 2025 will have 90 days from receiving notice that its creation or registration is effective to file its initial BOI Report.
- Reporting Companies created or registered to do business on or after January 1, 2025 will have 30 days from receiving notice that its creation or registration is effective to file its initial BOI Report.
- The date of creation or registration for a Reporting Company is the earlier of the date on which: (1) the Reporting Company receives actual notice that its creation (or registration) has become effective; or (2) a secretary of state or similar office first provides public notice, such as through a publicly accessible registry, that the domestic Reporting Company has been created or the foreign Reporting Company has been registered.
-
What if There is a Change to my BOI?
Updated Reports
- If there is any change to the required information about the Reporting Company or Beneficial Owners in a filed BOI Report, an updated report must be filed no later than 30 days after the date of change.
- Changes to previously reported Company Applicant information are not required to be reported.
- Changes requiring an updated BOI Report include: change to the information previously reported; change in beneficial owners; change to a beneficial owner’s name, address, or unique identifying number previously provided to FinCEN; or the Reporting Company newly becoming exempt from filing a BOI Report. (If such newly exempt entity subsequently loses its exempt status, it must file an updated BOI Report.)
Corrected Reports
- If a BOI Report is inaccurate, it must be corrected no later than 30 days after the date your company becomes aware of the inaccuracy or has reason to know of it.
-
How Can I use a FinCEN Identifier in Place of Beneficial Owner, Company Applicant or Reporting Company Required Information?
What is a FinCEN Identifier?
- A unique identifying number that FinCEN will issue to an individual or Reporting Company upon request after the individual or Reporting Company provides certain information, described below, to FinCEN.
How can I use a FinCEN Identifier?
- If a Beneficial Owner or Company Applicant obtains a FinCEN Identifier, the Reporting Company may report the FinCEN Identifier of that individual in place of the required personal information.
- If a related entity has obtained a FinCEN Identifier, a Reporting Company may report the other entity’s FinCEN Identifier and full legal name in place of required beneficial ownership information if:
- The other entity has obtained a FinCEN Identifier and provided that FinCEN Identifier to the Reporting Company;
- An individual is or may be a beneficial owner of the Reporting Company by virtue of an interest in the Reporting Company that he or she holds through an ownership interest in the other entity; and
- The beneficial owners of the other entity and of the Reporting Company are the same individuals
How do individuals request a FinCEN Identifier?
- Individuals may request a FinCEN Identifier by completing an electronic web form.
- Individuals will need to provide:
- Full legal name
- Date of birth
- Address
- Unique identifying number and issuing jurisdiction from an acceptable ID document, and an image of the ID document.
How does a Reporting Company Request a FinCEN Identifier?
- Reporting Companies may request a FinCEN Identifier by checking a box on the BOI Report when it is submitted.
- If a Reporting Company wishes to receive a FinCEN Identifier after submitting its initial BOI Report, it may submit an updated BOI Report requesting the identifier.
-
What are the Penalties for Not Complying with the BOI Reporting Requirements?
- Potential violations include:
- Willfully failing to file a BOI Report;
- Willfully filing false BOI; or
- Willfully failing to correct or update previously reported BOI.
- A person who willfully violated the BOI reporting requirements may be subject to:
- Civil penalties up to $500 (adjusted for inflation) for each day the violation continues; or
- Criminal penalties of up to two years imprisonment and a fine of up to $10,000.
- Who can be held liable for violating BOI reporting requirements?
- Corporate entities (Reporting Company or other entity).
- Individuals
- Person who actually files (or attempts to file) false information with FinCEN.
- Person (including a Beneficial Owner or a Company Applicant) who willfully provides the filer with false information to report to FinCEN.
- For willful failure to report complete or updated BOI, individuals (including Beneficial Owners and Company Applicants) can be liable if they either cause the failure or are a “senior officer” at the Reporting Company at the time of the failure.
- Potential violations include:
-
Who Can Access BOI Reported to FinCEN?
- On December 22, 2023, FinCEN issued its final rule governing access and safeguarding BOI filed with FinCEN. It goes into effect on February 20, 2024
- FinCEN is authorized to disclose BOI under specific circumstances to:
- U.S. federal agencies engaged in national security, intelligence, or law enforcement activity
- U.S. state, local and tribal law enforcement agencies
- Foreign law enforcement agencies, judges, prosecutors, central authorities and competent authorities
- Financial institutions using BOI to facilitate compliance with BSA/AML and sanctions requirements under applicable law
- FinCEN has indicated it will stage access to its database based on the category of authorized recipients, and that financial institutions (and financial institution regulators) will be in the last stage, which FinCEN currently expects to begin in spring 2025.
- Federal functional regulators and other appropriate regulatory agencies acting in a supervisory capacity assessing financial institutions’ compliance with BSA/AML and sanctions requirements
- Treasury officers and employees
- Considerations for financial institutions seeking BOI from FinCEN:
- Consent of the Reporting Company/customer is required
- Must have security and information handling procedures that comply with Section 501 of the Gramm-Leach-Bliley Act and its implementing regulations
- BOI may be obtained only to discharge a legal requirement or prohibition designed to counter money laundering or the financing of terrorism, or to safeguard the national security of the United States (e.g., current the CDD Rule, Customer Identification Program (CIP) requirements, suspicious activity reporting obligations and enhanced due diligence requirements)
- Financial institutions may not obtain BOI from FinCEN for other ordinary business reasons
- Financial institutions may not make blanket requests for BOI; they must be Reporting Company-specific
- A financial institution will be ultimately responsible for the non-compliance of a third-party service provider that requests, obtains, or uses BOI from FinCEN on the financial institution’s behalf
- Financial institution personnel may re-disclose BOI obtained from FinCEN to personnel of the same financial institution (not to include affiliates) if the re-disclosure is for the same purpose or activity for which it was originally requested, and re-disclosure is consistent with the security and confidentiality requirements of the Access Rule.
- BOI may not be sent to Russia, China, any jurisdiction designated as a state sponsor of terrorism, or any jurisdiction that is subject to comprehensive sanctions under U.S. law.
- Financial institutions may re-disclose BOI obtained from FinCEN to:
- Federal functional regulators,
- Certain self-regulatory organizations, and
- Other appropriate regulatory agencies (including state regulators) that (i) are authorized by law to determine the financial institution’s compliance with CDD requirements under applicable law; (ii) will use the information solely for making such determination; and (iii) has entered into an agreement with FinCEN providing for appropriate protocols governing the safekeeping of information.
- Beneficial ownership information reported to FinCEN is exempt from disclosure under the Freedom of Information Act (FOIA).
-
What are the Penalties for Unauthorized Use or Disclosure of BOI Obtained from FinCEN?
- It is unlawful for a person to knowingly disclose or knowingly use BOI—regardless if the BOI was obtained directly or indirectly from FinCEN– except as authorized by the CTA and the Access Rule.
- Civil Penalties: up to $500 each day a violation of continues or is not remedied
- Criminal Penalties:
- Up to a $250,000 fine or up to five years imprisonment, or both
- Up to a $500,000 fine or up to ten years imprisonment, or both, if committed while violating another US law or as part of a pattern of any illegal activity involving more than $100,000 in a 12-month period.
-
How do the BOI Reporting Requirements Apply to Trusts?
- Trusts themselves are not generally reporting companies (other than certain trusts that are registered with a state, such as a Delaware “statutory trust” or a Massachusetts “business trust”).
- Nonetheless, individuals with certain powers, rights, or responsibilities under a trust (such as a trust’s settlor, its trustees, or its beneficiaries) may be required to be reported as beneficial owners of reporting companies held in such trust, if such individuals meet either the “ownership” or “control” tests described in the “Who is a Beneficial Owner” section above.
Ownership
- The following individuals may be deemed to hold ownership interests in a reporting company through a trust or similar arrangement:
- A trustee or another individual with the authority to dispose of trust assets;
- A beneficiary who is the sole permissible recipient of trust income and principal or who has the right to demand a distribution of, or to withdraw substantially all of, the trust assets; and
- A trust settlor who has the right to revoke or otherwise withdraw the trust assets.
- As discussed in the “Who is a Beneficial Owner” section above, application of the ownership test will treat an individual (in this case, a settlor, beneficiary, trustee, or other fiduciary) as a beneficial owner where the individual directly or indirectly owns or controls 25% of the reporting company’s ownership interests.
Substantial control
- An individual trustee or other fiduciary of a trust may be deemed to exercise “substantial control” over a reporting company under certain circumstances.
- For example, if a trust is the sole member of a limited liability company that is a reporting company, and the LLC’s operating agreement provides that the member has the power to dissolve the LLC, the individual trustee is likely to be deemed to exercise “substantial control” over the LLC.
- As another example, if an individual fiduciary other than a trustee holds the power to make all investment decisions for the trust, that fiduciary is likely to be deemed to exercise “substantial control” over the assets of the trust, including the LLC.
The determination of whether any individual associated with a trust is required to be reported as a beneficial owner is a trust-by-trust analysis which requires a detailed analysis of the specific terms of the trust instrument. A similar analysis would apply for any state-level reporting laws.
-
New York LLC Transparency Act
- On March 1, 2024, New York Governor Kathy Hochul signed the amended New York LLC Transparency Act (NYLTA).
- The effective date of the amended NYLTA is January 1, 2026.
- Reporting Companies will have to disclose to the New York Department of State “beneficial owner” and “applicant” information.
- The NYLTA’s definitions of “beneficial owner” and “applicant” incorporate the definitions of these terms from applicable federal laws and regulations, including FinCEN’s BOI Reporting Rule.
- Information to file under the NYLTA is generally the same as the information required under FinCEN’s BOI Reporting Rule, with certain exceptions identified below.
- Reporting Companies: only limited liability companies (LLCs) formed or authorized to do business in the New York state.
- Exempt Companies: same exempt company categories as the 23 exempt company categories under FinCEN’s BOI Reporting Rule.
- What to Report (Beneficial Owners)
- Full legal name
- Date of birth
- Current home or business street address
- A unique identifying number from:
- An unexpired passport
- An unexpired state driver’s license, or
- An unexpired state or local government ID
- Reporting Dates
- For entities formed on or after January 1, 2026: 30 days from formation or authorization to do business in New York.
- For entities formed before January 1, 2026: by January 1, 2027.
- Key Differences from FinCEN’s BOI Reporting Rule
- Reporting Companies will have to file an attestation of exemption, including the specific exemption claimed and facts supporting the exemption (under FinCEN’s BOI Reporting Rule, no filing is necessary for exempt reporting companies).
- Reporting Companies existing prior to January 1, 2026 will have to file Applicant information.
- Reporting Companies must file an annual statement confirming or updating existing beneficial ownership disclosure information; exemption statements also must be filed annually.
- The NYLTA does not include an analogue to a FinCEN ID.
- There is no requirement to produce image of ID document – only the relevant ID number is necessary.
- BOI reported to the New York Department of State will not be accessible to the public, as originally proposed in the legislation.
-
California SB-1201
- The California State Senate passed SB-1201 on May 23, 2024. If enacted, SB-1201 would create state-level BOI reporting requirements for California businesses and out-of-state businesses registered with the California Secretary of State.
- The bill has yet to pass the California State Assembly, let alone be presented to the Governor. Proposed requirements may be amended by the time (if) the bill reaches the Governor, who may encourage further amendments, or decline to enact it entirely. A similar bill was held last year.
- SB-1201 would require companies to disclose to the California Secretary of State “beneficial owner” information.
- SB-1201’s definition of “beneficial owner” is identical to the definition under FinCEN’s BOI Reporting Rule.
- What to Report (Beneficial Owners)
- Full name
- Complete business or residence address
- Key Differences from FinCEN’s BOI Reporting Rule
- BOI information reported to the State would be publicly available.
- There would be no exempt reporting companies.
- No requirement for photocopies of beneficial owner ID documents; no required disclosure of dates of birth.
- No analogue to a FinCEN ID.
- Unlike the NYLTA, SB-1201 has no enforcement mechanism specified.
FinCEN Resources
FinCEN Guidance / Banking Agency Guidance
Final Rules
Proposed Rules