The BOI Rule Is Final, and FinCEN Says It Will Delete the Reports Small Businesses Already Filed

“FinCEN will provide notice to the public on its website when it has completed the deletion process” ^[1]. That sentence, tucked into the preamble of the final beneficial ownership rule published Aug. 14, answers the question small business owners have been asking since the spring of 2025: what happens to the reports we already sent in? FinCEN’s answer is that it plans to delete them, in one pass, without being asked, and without telling you individually when it’s done ^[1].

The rule that was “interim” is now final

Two weeks ago I wrote that the beneficial ownership rule was still waiting on a final version. It has one now.

FinCEN, the Treasury bureau that runs the program, announced the final rule on Aug. 11, and it took effect when the Federal Register published it on Aug. 14 ^{[1, 2]}. Beneficial ownership information, or BOI, is the identifying information about the people who own or control a company ^[1]. The Corporate Transparency Act, enacted January 1, 2021, required many corporations, LLCs and similar entities to report it ^[1].

The March 2025 interim rule had already exempted every company formed in the United States. The final rule keeps that exemption and makes it permanent ^{[1, 2]}. Here’s the short version of what changed beyond that ^{[1, 3]}:

• Company applicants. Foreign companies that still report no longer list U.S. persons who helped register them here. A company applicant is the person who files the registration paperwork, or who directs that filing.
• FinCEN IDs. A U.S. person who got a FinCEN ID, the identifying number some owners obtained from FinCEN, no longer has to update or correct that information.
• Foreign pooled investment vehicles. They still don’t report U.S. persons who exercise substantial control over them.

Treasury Secretary Scott Bessent called the action “a victory for common sense and American small businesses” ^[3]. He said Treasury is eliminating “a burdensome reporting requirement for millions of law-abiding business owners without compromising our national security” ^[3].

FinCEN didn’t bend on anything that would bring U.S. companies back in. It received 118 comment letters on the interim rule: 40 clearly supportive, 28 strongly opposed and 50 that took no clear side ^[1]. Opponents, including four U.S. senators, argued the exemption went beyond what Congress intended. FinCEN disagreed, pointing to the law’s directions to minimize burden and its authority to exempt classes of entities ^[1]. Commenters who suggested narrower carve-outs, such as for one- or two-person businesses or homeowners’ associations, were told the blanket exemption made those unnecessary ^[1].

What happens to the report you already filed?

This is where the news is. FinCEN estimates it received about 15 million reports from domestic companies before the interim rule stopped the filings ^[1]. Commenters asked, over and over, for that information to be deleted, citing privacy and the risk of a hack ^[1].

FinCEN agreed. Its plan, in its own terms ^[1]:

• It will use the reports already filed to identify domestic companies, their company applicants and their beneficial owners.
• Working with the National Archives and Records Administration, it will delete information about any individual who submitted an identifying document FinCEN “reasonably believes was provided by a U.S. person,” with a U.S. passport or U.S. driver’s license as the examples.
• It does not plan to ask anyone to request removal, and it will not acknowledge or confirm any company’s or person’s deletion.
• It will do this once, “not as a regular, periodic sweep.”

That last point has a date attached. If U.S. company or U.S. person information shows up in a filing made after Feb. 10, 2027, “inadvertently or intentionally,” FinCEN does not expect to delete it ^[1].

Commenters asked for more: individual deletion notices, monthly reports to the Secretary, an annual audit by the Comptroller General. FinCEN declined all of them as adding “time and expense” to the project ^[1]. I’d have liked a confirmation letter too. A bakery owner who handed over a scanned driver’s license deserves to know it’s gone. But FinCEN’s reasoning is stated plainly, and the public website notice is what we’ll get.

Does this apply to you? Three hypotheticals

Hypothetical one: an HVAC contractor’s LLC formed in Texas in 2023. Say a hypothetical single-owner heating and cooling company filed its BOI report in 2024, attaching the owner’s Texas driver’s license. The company has nothing to file or update, permanently ^[1]. Its owner’s information is the kind FinCEN says it will delete, because the identifying document is one FinCEN would reasonably believe came from a U.S. person ^{[1, 3]}. There’s no form to send. The owner watches for FinCEN’s website notice ^[1].

Hypothetical two: a bookkeeper with a FinCEN ID who moved. Say a hypothetical bookkeeper got a FinCEN ID in 2024 because she co-owned two small companies, then moved across town in 2025. Under the original rules, a change like that meant updating her information. Under the final rule, as a U.S. person she has no obligation to update or correct it ^{[1, 3]}. FinCEN’s deletion plan names FinCEN ID recipients among the people whose information it will remove ^[1].

Hypothetical three: a German parts supplier registering in North Carolina. Say a hypothetical German company registers to do business in North Carolina, with a U.S. attorney handling the filing. The company is still a reporting company and still reports its foreign owners ^{[1, 2]}. The U.S. attorney, as a company applicant, stays off the report, which is new in the final rule ^{[1, 3]}.

What to do now

For most readers, the honest answer is very little, and that’s the good news. Don’t call FinCEN, don’t file a deletion request, and don’t pay anyone who offers to file one for you; FinCEN says no request is needed ^[1].

What doesn’t change is the bank. The Customer Due Diligence Rule, which has banks collect a business customer’s beneficial owners at account opening, is unaffected ^{[1, 5]}. FinCEN said it still has to revise that rule and now “can refocus on” it ^[1]. ICBA, the community bank trade group, has long asked FinCEN to withdraw the bank collection requirement, and noted FinCEN already relaxed parts of that rule in February ^[4]. So keep your ownership records tidy for your next account.

FinCEN’s own math: about 27.5 million companies relieved of reporting since the interim rule, which it puts at roughly $18 billion in savings ^[1].

What I’m keeping an eye on

The deletion notice. FinCEN hasn’t set a date, only a method ^[1]. I’ll report when the notice appears on its website.

The bank-side rule. FinCEN says it intends to address commenters’ questions about the Customer Due Diligence Rule when it takes that rule up ^[1]. If you’re a business that opens accounts often, that’s the next change that would touch you.

— Sally