Businesses Urge Treasury to Destroy BOI Data and Finalize Exemption

Why It Matters

Eliminating unnecessary BOI records reduces privacy risks and clarifies regulatory obligations for millions of U.S. businesses, influencing compliance costs and data‑security policies.

Key Takeaways

• 100+ associations demand BOI data destruction
• FinCEN filed 6.5M BOI reports
• Interim rule limits reporting to foreign entities
• Legal challenges threaten CTA’s future
• Data breach risk drives urgency for deletion

Pulse Analysis

The Corporate Transparency Act, enacted in 2021, introduced a nationwide beneficial ownership reporting regime aimed at curbing money‑laundering and illicit finance. Under the CTA, corporations and limited‑liability companies were required to disclose owners' names, addresses, and identification numbers to FinCEN, creating a centralized database of sensitive personal information. While the policy was praised for enhancing transparency, critics warned that aggregating such data could become a lucrative target for cyber‑attackers, especially if the information is retained beyond its statutory purpose.

In March 2025, FinCEN issued an interim final rule that effectively narrowed the reporting scope to foreign entities, acknowledging that domestic firms no longer need to submit BOI. This regulatory shift prompted a coalition of small‑business groups, led by the Main Street Employers Coalition, to petition Treasury Secretary Scott Bessent to both destroy the existing domestic BOI records and issue a permanent exemption. The coalition highlights that roughly 16 million domestic entities previously complied, generating about 6.5 million reports, and argues that continued storage poses unnecessary cybersecurity and privacy risks. Their appeal gains urgency amid a wave of litigation—12 federal cases, including a pending Supreme Court review—questioning the CTA’s constitutionality and the executive branch’s authority to modify its requirements.

If Treasury acts swiftly to purge the data and codify the exemption, the move could set a precedent for balancing transparency objectives with data‑privacy safeguards. Companies would benefit from reduced compliance overhead and lower exposure to data‑breach liabilities, while regulators would need to rely on alternative tools to monitor illicit activity. Conversely, a delay could fuel further legal challenges and erode confidence among Main Street businesses, potentially prompting additional legislative revisions. The outcome will shape the future of corporate disclosure policy and signal how the U.S. government reconciles anti‑money‑laundering goals with evolving privacy expectations.