New Diligence Opportunity for Financial Institutions

On Jan. 1, 2024, the Corporate Transparency Act (“CTA”) took effect. As a result, all business entities, unless expressly exempt by the CTA, must file Reports of Beneficial Ownership Information (“BOI”) with the Financial Crimes Enforcement Network (“FinCEN”), a unit of the U.S. Treasury. Under the CTA, “financial institutions,” i.e., banks and other entities that provide financings and are subject to the “Know Your Customer” and “Customer Due Diligence” regulations of FinCEN pursuant to the Bank Secrecy Act, the USA Patriot Act, and the Anti-Money Laundering Act of 2020, may access the BOI on reports filed with FinCEN.

To gain access to the BOI, the financial institution MUST:

  1. Obtain the written consent of the customer, i.e., the borrower, guarantor, or other loan party, in connection with the diligence process required before entering a business relationship with the customer, or as part of the continuing diligence required in an existing relationship. Accordingly, forms used by the financial institution to open or to continue an existing business relationship must include a clear and conspicuous provision in which the customer gives consent. This will probably require a complete review and revision of those forms;
  2. Determine that obtaining access to the BOI is reasonably necessary for the financial institution to meet its diligence obligations. That determination should be spelled out in the written request to FinCEN for access; and
  3. Acknowledge the scope of confidentiality obligations with respect to the BOI obtained, including the limited use permitted of the information, as well as safeguarding that accessed BOI from misuse.

Financial institutions should be prepared to request access to BOI as a matter of course. In any case where a customer engages in violative activity, and the BOI would have alerted the financial institution to possible risks, that institution could be exposed to sanctions by its principal prudential regulator and/or by other law enforcement agencies.

Beware of Corporate Transparency Act Scams and Fraud

The Corporate Transparency Act’s (CTA) Beneficial Ownership Information reporting requirements are set to take effect on January 1, and bad actors are already using the CTA’s requirements to solicit unauthorized access to Personally Identifiable Information. To that end, the U.S. Department of Treasury’s Financial Crimes Enforcement Network (FinCEN) recently issued a warning regarding such scams. FinCEN describes these efforts as follows:

“The fraudulent correspondence may be titled “Important Compliance Notice” and asks the recipient to click on a URL or to scan a QR code. Those e-mails or letters are fraudulent. FinCEN does not send unsolicited requests (emphasis added). Please do not respond to these fraudulent messages, or click on any links or scan any QR codes within them.”

Corporate Transparency Act: Implications for Business Startups

Congress passed the Corporate Transparency Act (CTA) in January 2021 to provide law enforcement agencies with further tools to combat financial crime and fraud. The CTA requires certain legal entities (each, a “reporting company”) to report, if no exemption is available, specific information about themselves, certain of their individual owners and managers, and certain individuals involved in their formation to the Financial Crimes Enforcement Network (FinCEN) of the U.S. Department of Treasury. The beneficial ownership information (BOI) reporting requirements of the CTA are set to take effect on January 1, 2024. Those who disregard the CTA may be subject to civil and criminal penalties.

A recent advisory explaining the CTA reporting requirements in further detail may be found here.

While the CTA includes 23 enumerated exemptions for reporting companies, newly formed businesses (Startups) may not qualify for an exemption before the date on which an initial BOI report is due to FinCEN. As a result, Startups (particularly those created on or after January 1, 2024) and their founders and investors, must be prepared to comply promptly with the CTA’s reporting requirements.

As an example, businesses may want to pursue the large operating company exemption under the CTA. However, among other conditions, a company must have filed a federal income tax or information return for the previous year demonstrating more than $5 million in gross receipts or sales. By definition, a newly formed business will not have filed a federal income tax or information return for the previous year. If no other exemption is readily available, such a Startup will need to file an initial BOI report, subject to ongoing monitoring as to whether it subsequently qualifies for an exemption or any reported BOI changes or needs to be corrected, in either case triggering an obligation to file an updated BOI report within 30 days of the applicable event.

Startups also should be mindful that the large operating company exemption requires the entity to (i) directly employ more than 20 full time employees in the U.S. and (ii) have an operating presence at a physical office within the U.S. that is distinct from the place of business of any other unaffiliated entity. Importantly, this means that a mere “holding company” (an entity that issues ownership interests and holds one or more operating subsidiaries but does not itself satisfy the other conditions of this exemption) will not qualify. Startups may want to consider these aspects of the large operating company exemption during the pre-formation phase of their business.

Fundraising often requires Startups to satisfy competing demands among groups of investors, which can lead to relatively complex capitalization tables and unique arrangements regarding management and control. These features may cause BOI reporting for Startups to be more complicated than reporting for other small and closely held businesses. Founders, investors, and potential investors should familiarize themselves with the CTA’s reporting requirements and formulate a plan to facilitate compliance, including with respect to the collection, storage and updating of BOI.

By ensuring all stakeholders understand the BOI reporting requirements and are prepared to comply, your Startup can avoid conflicts with current and potential investors and ensure that it collects the information that it needs to provide a complete and timely BOI report.

Yezi (Amy) Yan and Jordan R. Holzgen contributed to this article.

Businesses Beware: Penalties for Failure to Comply with Reporting Requirements of the Corporate Transparency Act

Businesses, especially small and privately-owned businesses, should be aware of federal reporting requirements becoming effective Jan. 1, 2024. Congress enacted the Corporate Transparency Act (“CTA”) in 2021 to combat money laundering, terrorism financing, securities fraud, and other illicit financial activities by requiring businesses to be transparent about their ownership. With significant exceptions, the CTA generally requires businesses to report certain information—known as Beneficial Ownership Information (“BOI”)—to the federal government. BOI must be reported to the Financial Crimes Enforcement Network (“FinCEN”)—a Bureau of the U.S. Department of Treasury—where the information will be stored in a secured database. Last year, FinCEN published final regulations implementing the CTA’s reporting requirements. These regulations become effective Jan. 1, 2024.

Businesses should begin preparing for compliance with the CTA, as initial reports for existing businesses must be submitted prior to Jan. 1, 2025, and the penalties for non-compliance are severe.

What is BOI?
The CTA generally requires most domestic and foreign business entities doing business in the United States to report BOI concerning:

persons who directly or indirectly hold a 25% or greater interest in the business;
persons who directly or indirectly “exercise substantial control over” the business; and
for businesses formed after Jan. 1, 2024, persons who assisted in the preparation of the business’s organic documents.
To Whom and When Must BOI be Reported?
For existing businesses, BOI must be reported prior to January 01, 2025.
Businesses formed after Jan. 1, 2024, will have 30 days from confirmation of their formation, incorporation, or registration to report BOI.
If a business’s beneficial ownership changes following the submission of a BOI report, the business must report updated BOI to FinCEN within 30 days after such change.
Penalties for Failure to Comply with the CTA
The penalties for willfully failing to comply with the CTA’s reporting requirements are quite severe. Any person who willfully fails to report BOI or reports it inaccurately may be subject to civil and criminal penalties, including fines up to a maximum of $10,000 and imprisonment up to 2 years. Businesses should be aware that, although they may have been required to supply information regarding the entity to the secretary of state or other similar office upon formation or registration, BOI reports concern the business’ owners or controllers and must be submitted to FinCEN in addition to any information supplied to a state during the entity’s formation or registration.

An Evolving Landscape: Interplay between State Law and the Impact of the CTA on Businesses
It is yet to be seen whether states will adopt similar or identical BOI reporting requirements. As of the date of this post, legislation is pending in New York that would require LLCs to submit BOI to the New York Department of State upon organization or registration with the state. This same legislation also requires existing LLCs to amend their organic documents to include BOI.

Pennsylvania amended its Business Corporation Law effective Jan. 1, 2023, and now requires businesses conducting business in the state to file annual reports containing information regarding the entity itself. Pennsylvania does not currently require reporting of BOI. However, it is likely that Pennsylvania and many other states will soon follow the lead of the federal government and New York in requiring businesses to report BOI on a state level.

Conclusion
The CTA’s adoption is a watershed moment in the regulation of business entities. For the first time, businesses will be required to internally track and monitor their BOI to ensure compliance with the CTA. Moreover, compliance with the CTA will require businesses to evaluate their control structures and contractual relationships. For example, while it may be simple to determine whether a person owns 25% or more of a business, the determination of whether someone “exercises substantial control over” the business may not be so straightforward.

It is strongly recommended that businesses consult an experienced and qualified attorney to determine whether they are subject to the CTA’s reporting requirements, as well as any similar requirements imposed by states in the future.

©2023 Norris McLaughlin P.A., All Rights Reserved

By Rocco L. Beltrami , John F. Lushis, Jr. of Norris McLaughlin P.A.

For more on the Corporate Transparency Act, visit the NLR Corporate & Business Organizations section.