The furthest- and widest-reaching federal business entity law ever enacted, the Corporate Transparency Act (“CTA” or “Act”)[1] will impact an estimated 32.6 million current businesses, with its implementation going into effect on January 1, 2024. An estimated additional five million newly formed businesses will also be swept under the CTA’s purview each subsequent year.[2] However, many business owners, investors, and advisers are unaware of the CTA and its looming deadline, and when they learn of it, they are often taken aback by its scope (and even its mere existence). Now is the time to review the CTA’s requirements and get prepared before the law goes into effect at the beginning of next year.
CTA Overview
The CTA requires certain businesses (including privately held and nonprofit entities) to report direct and indirect, human, beneficial ownership, control, and service provider information to the Financial Crimes Enforcement Network (“FinCEN”) of the U.S. Department of Treasury.[3] This information will be used by federal, state, local, and tribal law enforcement authorities to streamline their investigations, bypassing the “shell game” historically posed by multiple levels of business entity ownership and affiliation.[4]
Covered Businesses
The CTA impacts “reporting companies,” which include corporations, limited liability companies, limited partnerships, business trusts, and other “similar entities”[5] that are created or registered by the filing of a document with a secretary of state or a similar Indian tribal office.[6] There is no “grandfathering” of previously formed entities: the CTA will sweep in all business entities in existence on January 1, 2024. Exempted from the CTA’s reporting regime are specified excluded entities, which generally include heavily regulated business entities or large operating companies. However, the vast majority of private businesses and many nonprofit businesses will be swept up in required compliance.
Reportable Information and Owners
The information to be reported to FinCEN (“beneficial owner information,” or “BOI”) is certain personal identifying information (“PII”), which includes (1) full legal name, (2) date of birth, (3) residential (or sometimes business) physical commercial street address, and (4) an image of an acceptable government-issued ID (e.g., a U.S. passport or state-issued driver’s license) that includes both an ID number and the person’s photograph.[7] This reported information must be kept current and accurate with FinCEN by the reporting company on an ongoing basis.
This information will need to be reported for persons who have “substantial control” over the business or who own, directly or indirectly, 25 percent or more of the equity in the business (each a beneficial owner). Every business will have at least one person to report, regardless of its ownership structure. In many instances, informed business decisions will need to be made as to who constitutes reportable beneficial owners.
For reporting companies formed on or after January 1, 2024, the same PII must also be reported for “company applicants” (i.e., incorporators and organizers), including those who directed the formation filing. This reported information is only reported as of the reporting company’s formation and is not required to be updated with FinCEN thereafter.
Mechanics and Timing of Filings
Filings will be made through an electronic interface with the online Beneficial Ownership Secure System (“BOSS”).
Businesses in existence on January 1, 2024, will have one year to file their initial report—but file an initial report they must do, even if they subsequently dissolve or otherwise alter their structure in a manner to become compliant with a CTA exemption. Businesses formed on or after January 1, 2024, will have thirty days from formation to file their initial report with FinCEN.
Any change to the status quo of a business in existence on January 1, 2024, will need to be reported as a separate amendment filing, delivered with the initial “as of January 1, 2024” report filing required to be made on or before December 31, 2024. Businesses formed on or after January 1, 2024, will have thirty days to file a correction or change to any information previously reported.
Penalties
There are steep, escalating fines ($500 per day up to $10,000 per violation) and possible jail time (up to two years) for those failing to timely and properly comply with the CTA’s requirements.[8]
It bears noting that failure to timely file a required initial report could result in up to a $10,000 fine but that subsequent events that would necessitate an amendment to such required but missing filing, had the initial report been made, would also cause penalties to accrue—meaning that a failure to file an initial report may result in aggregate fines accruing well in excess of $10,000 prior to an initial notification of violation from FinCEN to the reporting company. Also, the intent of the reporting company and its agent with regard to noncompliance will be a factor in FinCEN’s assessment of possible criminal penalties.
Bearing this in mind, the remainder of this article is an appeal to the better angels of our character—as well as a direct rebuttal of initial impulses expressed by many upon first learning of the CTA.
CTA Denial
“I am a sophisticated business owner, and I have never heard of this.”
The enactment of the CTA in 2021 came as a shock to many (to some, a much later aftershock). However, the CTA’s intent—to end the position of the United States as a haven for “shell” companies used in the commission of money laundering, terrorist financing, financial and tax fraud, and other domestic and international illicit activity and corrupt practices—was present in proposed federal legislation for decades.
The CTA marks a seismic shift in the legal landscape for businesses operating in the United States. Prior to the CTA, entity beneficial owner disclosure was solely (if at all) the purview of state or tribal law. Now it is a focus and purview of federal law enforcement agencies.
The CTA has largely flown under the radar to date, but it is now time to become educated on the actions that may be taken prior to the CTA’s January 1, 2024, implementation date, and after. The Act’s impact on and implications for businesses, particularly small businesses, are complicated and difficult to succinctly communicate, and the CTA has not received widespread mass media attention. In fact, federal lawmakers and industry groups have decried the lack of CTA public education undertaken by FinCEN to date.
Many professional advisers and business professionals have been caught off guard by this fundamental change in business entity law, now taking on a federal facet for the first time. Those that are aware have, by and large, taken a wait-and-see approach to either advising their clients and business associates or evaluating their own compliance profile. This is because much of the mechanics of compliance remains elusive. The ability for businesses to begin directly interfacing with FinCEN on filing and compliance continues to be in the future, giving those persons “in the know” little to offer as current action items—causing many to defer sounding the alarm bell until more is known from FinCEN. However, the wait must end, as there is limited and dwindling time remaining to take action before the window of opportunity closes at the end of 2023.
“I have a small business. The Corporate Transparency Act only applies to large businesses.”
The CTA’s impact on small businesses is counterintuitive to many business owners, who erroneously believe that their business is “too small” to be within FinCEN’s sights and the CTA’s purview. Quite the opposite: A business’s small size is precisely why such a business must comply with the Act! The Act is designed to cast a broad net to “catch” a small niche of nefarious actors hiding behind the “corporate veil.”
Unfortunately, the vast majority of business entities that now must comply with the CTA, including most small businesses, are unwitting and innocent bycatch in the CTA’s net. This is because they will not be able to meet the criteria to be a large operating company that is expressly excluded from CTA compliance. The CTA’s “large operating company” exception is an exception to the CTA’s reporting requirements for businesses that meet all three of the following criteria:
- The business must have a commercial, physical street address in the United States.
- The business must have twenty-one or more full-time employees (excluding full-time equivalent employees, part-time employees, independent contractors, and leased employees).
- The business must have filed a prior year’s federal income tax return demonstrating more than $5 million in annual, U.S.-only, gross receipts or sales.
All home-based businesses, and those with only a virtual (online) presence, will not meet the physical street address part of this three-part test. In addition, by necessity, every business entity formed on or after January 1, 2024, will not initially qualify for this exclusion because such business entities will not have the prior year’s tax return necessary to establish the gross revenue part of the test. The same will be true of virtually all business entities formed between January 1, 2023, and December 31, 2023. Further, many large portfolios of business entities will likely not meet this exception because employees of the portfolio’s operations are typically consolidated into one, or a few, of the portfolio’s business entities, with the remaining business entities not having employees, thus failing the employee prong of the test. Under FinCEN’s BOI Final Rule,[9] employee head count may not be attributed across affiliated entities for purposes of meeting the employee count threshold—each business entity must stand alone in this respect.
“My industry’s lobbyists would never allow such a law to get passed.”
Lobbyists had staved off attempts to implement the CTA, and its predecessor bills, for decades. However, in December 2020, the U.S. Congress, majority-controlled by Republican lawmakers in both the House and the Senate, passed the CTA as part of the 2021 National Defense Authorization Act—which then-President Donald Trump vetoed[10] (his sole veto during his term of office). On January 1, 2021, Congress, by a two-thirds vote in both the House and Senate, overrode Trump’s veto and passed the CTA into law.
Since the CTA’s adoption, the political landscape has changed. President Joe Biden and a Democratic-controlled Senate now hold office through at least 2024. A change of party control, if any, of the presidency or the Senate will not take effect until mid-January 2025—and control of the House may then also be uncertain. By that time, all existing business entities will have been required to file their initial CTA report into the BOSS, and a full year of newly formed entities will also have been required to comply with the CTA. In short, hopes of a conservative government sea change, with an overturning of the CTA, doesn’t account for the Act’s conservative lawmaker origins or the political cycle timing between now and the Act’s January 1, 2024, implementation.
Hope for a legislative repeal or delay in the implementation of the CTA likely ended with the recent passage of the bipartisan Fiscal Responsibility Act of 2023 ( “debt ceiling bill”),[11] which lacked provisions pertaining to the CTA. In mid-June 2023, subsequent to the passage of the debt ceiling bill, the Accountability Through Confirmation Act and the Protecting Small Business Information Act were each introduced in the House Financial Services Committee by Committee Chairman Patrick McHenry (R-NC). These bills are intended to effectively delay the date that the BOI reporting requirements go into effect and to “reform” FinCEN with requirements intended to increase transparency and accountability within the agency, while protecting individuals’ privacy and businesses’ sensitive information in the BOSS reporting regime. It bears noting that Representative McHenry was also the sponsor of the debt ceiling bill. With the current gridlock in Congress, these new bills seem unlikely to move beyond the House or to become laws.
Further, the Biden administration has shown no indication of delaying the CTA’s implementation, with the U.S. Department of Treasury and FinCEN expressing publicly, and repeatedly, that implementation of the CTA by the end of 2023 is a top priority. The stated goals of the CTA—combating the use of “shell” companies in the commission of money laundering, terrorist financing, financial and tax fraud, and other domestic and international illicit activity and corrupt practices—appear to align with the administration’s agenda. In other matters, the administration has shown a proclivity to support initiatives to reign in business rather than favor it.
The CTA mandated that FinCEN promulgate regulations under the CTA prior to January 1, 2022. On December 7, 2021, FinCEN published a proposed rule related to BOI under the CTA, with a public comment period extending through February 7, 2022. In response to this notice of proposed rulemaking (NPRM), FinCEN received over 240 formal comments, with submissions coming from a broad array of individuals and organizations, including members of Congress, government officials, groups representing small-business interests, corporate transparency advocacy groups, the financial industry and trade associations representing their members, law enforcement representatives, and other interested groups and individuals. In addition to these formal responses to the NPRM, FinCEN also received, accepted, and considered many additional comments and inquiries from the public. The extensive, thorough, detailed, and pointed feedback, often in direct opposition to the proposed implementation of the Act and to specific components of the Act, was considered, weighed, and utilized by FinCEN in its adoption of the CTA BOI Final Rule, issued on September 30, 2022. FinCEN went to great length in the Final Rule to describe, with specificity, the extreme vetting on each point in the Final Rule. That Final Rule, with limited exceptions, stayed true to the CTA and the proposed rule initially proposed. FinCEN did not exercise its discretion to expand the list or scope of the enumerated reporting company exceptions (in spite of numerous pleas to do so), nor did it show any reluctance to, or anticipate delay in, implementing the CTA. Based on this process, the implementation of compliance and enforcement of the CTA’s reporting obligations will most certainly begin January 1, 2024. Hopes that a “white knight” will ride in to thwart the CTA, or that a delay or elimination of this reporting obligation implementation would occur, were vanquished last year (in 2022) and confirmed by the CTA’s omission from the bipartisan debt ceiling bill.
“That can’t be constitutional.”
A lone small business advocacy group, National Small Business United (affiliated with the National Small Business Association), has filed suit against the U.S. Department of Treasury and FinCEN contesting the constitutionality of Congress’s actions in passing the CTA into law, as well as the CTA’s implementation by FinCEN. Three other advocacy groups (Transparency International U.S., Financial Accountability & Corporate Transparency Coalition, and Main Street Alliance) jointly authored an amicus brief in support of the government’s position and the CTA. This case remains in an early stage of pleadings.[12] Pending the outcome of this case, the constitutionality of the CTA will be affirmed or better defined.
“I just won’t report.”
Statements similar to the foregoing are uttered by a shocking number of business owners with whom I speak about the CTA and its reach, application, and exposure. However, there are a number of factors uniquely associated with the CTA, its origins, and its implementation that make its enforcement and your possible noncompliance exceptionally problematic. Chief among these, at least for individuals,[13] is that their refusal will be conspicuously noted on a reporting company’s filing with FinCEN. A checkbox is included on the BOI reporting questionnaire: “(check if you are unable to obtain any required information on one or more Beneficial Owners).” Once checked, this conspicuous omission will be a red flag to FinCEN, and other law enforcement agencies, for initial or further investigation.
Further, the Internal Revenue Service (“IRS”) recently announced its taxpayer enforcement initiatives, which include plans to hire nearly 87,000 new employees and invest $80 billion over the coming years[14] to improve tax enforcement and customer service, with more than one-third of the new hires being enforcement staff. The agency also plans to hire more data scientists to complement traditional tax attorneys and revenue agents in using new data analytics technology to identify audit targets. FinCEN’s BOSS database, created under the CTA, will likely be a key component to such data analytics technology and will provide an inexpensive, efficient investigative tool and corroborating (or “red flag”) source of taxpayer information for the IRS. The IRS initiatives’ stated aims are to close the “tax gap” between taxes owed and those paid, and to rebuild the IRS’s audit capabilities and computer technology. The IRS’s stated goals also include expanding enforcement for taxpayers with complex tax filings and high-dollar noncompliance, including high-income and high-wealth individuals, complex partnerships, and large corporations.[15]
Hopes that the CTA is nothing more than another pro forma survey data collection initiative by the government are naïve and misguided. FinCEN’s BOSS database will be a critical point of diligence for investigation by federal government agencies. Your business entity’s conspicuous absence from the BOSS database, or your personal omission from a reporting company’s CTA filing, will most certainly be discovered—and will spearhead other federal investigations into you and your business practices.
“If I get caught, I’ll just pay the fine.”
The CTA provides for civil fines of $500 per day, up to $10,000, per violation of the Act. The Act also provides for a criminal penalty of up to two years’ imprisonment for CTA violations. It is important to note that the fine is per violation—not simply for violating the Act. The Act has requirements for filing report corrections and amendments based on changing circumstances, and CTA violations will likely involve multiple instances of noncompliance before FinCEN comes knocking on your door. Each reporting obligation also has a very short window (thirty calendar days) within which to make the required filing, making inadvertent violations of the CTA highly likely. Further, with only twenty days needed to reach the maximum fine of $10,000 per violation, many violations will likely come with the maximum $10,000 price tag.
These factors, in combination, could cause a simple act of not reporting to turn into the accrual of tens of thousands of dollars, or even hundreds of thousands of dollars, in fines by the time FinCEN identifies the violation and pursues collection. This will be particularly true in the first year of implementation, when 32.6 million reporting companies are projected to require reporting, with five million additional reporting companies being added each year thereafter.
Also, did I mention prison time? Noncompliance could be a costly proposition—far in excess of an initial $10,000 price tag.
“CTA responsibilities do not implicate fiduciary duties.”
Persons with “substantial control” over a reporting company under the CTA not only will be required to disclose their own PII as “beneficial owners” of the reporting company but will also, in many instances, owe fiduciary duties to the reporting company as well as to the (other) owners of the reporting company to properly comply with the CTA. Any decision by a reporting company’s management not to report under the CTA, or to partially report or to inaccurately report, will directly implicate actionable duties owed to the reporting company, its owners, and possibly third parties. Further, such actions may constitute “for cause” termination events with respect to such “substantial control” person, as the act or omission may constitute gross negligence, willful misconduct, fraud, material misrepresentation, or an illegal act with respect to the reporting company. A “substantial control” person’s evasion of the law could also implicate denial or cancellation of the reporting company’s directors and officers (D&O) insurance coverage for the event in question, and expose the individual to uncovered personal liability for the action in question. Further, grievous failure to comply with the CTA could result in imposition of a criminal sentence of up to two years in federal prison for the offending individual.
Under most states’ business statutes, the concept of fiduciary duties is prevalent and applies to the behavior of officers, managers, directors, and other governing and management parties to the business entity itself and, in some instances, to the owners of the business entity directly. Principal among the fiduciary duties is the “duty of care.” The duty of care requires that a person act with the prudence that a reasonable person in similar circumstances would use. If a person’s actions do not meet this standard of care, then the acts are considered negligent and may result in actionable damages enforceable against the individual. However, a fiduciary may discharge the duty of care by exerting appropriate diligence and informed consideration with respect to the action in question. Further, in most instances, a fiduciary may discharge its duty of care on a subject by hiring a professional adviser that the fiduciary reasonably believes has the necessary experience and expertise to advise on the subject and by relying on such advice in making the business decision. Thus, “substantial control” persons may insulate themselves against duty-of-care claims by retaining legal counsel to evaluate and advise on the reporting business decisions in question. Further, to the extent that a waiver of fiduciary duties is permitted by the applicable state and included in the applicable business entity’s charter documents, such waiver will not extend to the fiduciary duty of good faith, which could be implicated by a failure to file a CTA report.
Conclusion
The Corporate Transparency Act is a seismic shift in the beneficial owner reporting regimes in the United States, disturbing long-established norms. Beginning January 1, 2024, tens of millions of unwitting and innocent U.S. business entities, and their beneficial owners, will become bycatch in FinCEN’s dragnet designed to catch nefarious actors hiding behind the “corporate veil.” Whether you like it, hate it, or are indifferent, the CTA has been thoroughly vetted and is here to stay. Compliance is both mandatory and advisable. Just as anonymity in the business entity structure has been pierced by the CTA, so has anonymity in the Act’s compliance, with various touch points and red flags aiding in FinCEN’s ultimate enforcement regime, including FinCEN’s discovery of those choosing not to comply.
National Defense Authorization Act for Fiscal Year 2021, tit. LXIV, §§ 6401–6403. ↑
See 31 C.F.R. § 1010.380 (2022). ↑
National Defense Authorization Act for Fiscal Year 2021, tit. LXIV, § 6403. ↑
See 31 C.F.R. § 1010.380. ↑
For example, limited liability partnerships, limited liability limited partnerships, decentralized autonomous organizations (“DAOs”), and other entities created through filings with a secretary of state or tribal authority. ↑
31 U.S.C. § 5336 (a)(11)(A) (2021). ↑
31 C.F.R. § 1010.380(g) (“Reporting violations. It shall be unlawful for any person to willfully provide, or attempt to provide, false or fraudulent beneficial ownership information, including a false or fraudulent identifying photograph or document, to FinCEN in accordance with this section.” (emphasis added)). ↑
31 U.S.C. §§ 5336(h)(1), 5336(h)(3)(A). ↑
Beneficial Ownership Information Reporting Requirements, 87 Fed. Reg. 59,498 (Sept. 30, 2022). ↑
Searches across case law databases for litigation containing the phrase Corporate Transparency Act resulted in only one case found: Trump v. Deutsche Bank AG, 943 F.3d 627, n.55 (2019). ↑
H.R. 3746, 118th Cong. (2023) became Pub. L. No. 118-5 (2023). ↑
Nat’l Small Bus. United v. Yellen, No. 5:22-cv-01448-LCB (N.D. Ala. 2022). ↑
It bears noting that the person responsible for a reporting company’s CTA filing, in some instances, may not be a “beneficial owner” of the business entity, or only one of several “beneficial owners,” and will likely make the filing (even over potential objections) to avoid personal culpability. The willingness of one person to violate the law, problematic on its face, also implicates the rights and risk profile of other persons associated with the reporting company. The other implicated individuals in the business organization may not share this risk tolerance. ↑
Note that section 251 of the debt ceiling bill, Pub. L. No. 118-5 (2023), rescinded $1,389,525,000 of IRS earmarked funding. ↑
See Beware, the IRS Is Coming: More IRS Audits to Focus on High-Net Worth Individuals and Passthrough Entities, Polsinelli (Apr. 18, 2023). ↑
