FinCEN’s CTA Exemption: When an Exemption Becomes a Repeal

As of August 14, 2026, FinCEN has removed CTA beneficial ownership reporting requirements for U.S. companies and U.S. persons. That is good news for business owners who were worried about compliance. But the way FinCEN did it raises a larger legal question: can an agency effectively cancel the main part of a law Congress passed by calling the cancellation an exemption?

Why Congress Created the CTA

The Corporate Transparency Act, or CTA, was Congress’s answer to a simple problem: it has long been easy to form a company in the United States without telling the government who really owns or controls it. That anonymity can help honest entrepreneurs protect privacy. It can also help criminals hide money, move funds, and avoid law enforcement.

Congress treated that gap as a national-security and law-enforcement issue, not just a paperwork issue. The CTA was enacted as part of the National Defense Authorization Act for Fiscal Year 2021. The broader defense bill became law on January 1, 2021, after Congress overrode President Trump’s veto. The House vote was 322-87, and the Senate vote was 81-13.

The CTA required many companies to report basic information about their “beneficial owners,” meaning the real people who own or control the company. The information was not meant to be public. It was to be kept in a secure FinCEN database available to authorized law enforcement and national security users.

The CTA also responded to international pressure. The Financial Action Task Force, or FATF, has long called for countries to give law enforcement timely access to accurate company ownership information. Congress understood that the United States was behind many other developed countries on this issue. The CTA was designed to bring the United States closer to those international anti-money-laundering standards.

FinCEN first implemented the CTA through a 2022 reporting rule. FinCEN estimated that about 32.6 million existing reporting companies would have to report in the first year, with about 5 million new companies added each year. For many business owners, that meant one more federal compliance obligation. For law enforcement, it meant a new tool to identify who stood behind companies used to move money.

Why FinCEN’s Exemption Raises Constitutional Concerns

FinCEN’s 2026 final rule changed the picture. Treasury announced that FinCEN had permanently removed beneficial ownership reporting requirements for U.S. companies and U.S. persons. Treasury also announced that FinCEN would delete previously reported information by U.S. persons who are now exempt.

For business owners, the immediate result is simple: U.S. companies no longer have to file CTA beneficial ownership reports under FinCEN’s current rule. But the legal issue is not simple.

Earlier lawsuits asked whether Congress had the power to pass the CTA. The new issue is different. It asks whether FinCEN has the power to remove the law’s main reporting requirement after Congress created it.

FinCEN relies on language in the CTA allowing Treasury, with required approvals from the Attorney General and the Secretary of Homeland Security, to exempt “any entity or class of entities” if collecting beneficial ownership information from that group would not serve the public interest and would not be highly useful to law enforcement or national security.

That language gives FinCEN real discretion. But discretion has limits. An agency can adjust how a law works. It should not be able to cancel the main part of the law. If FinCEN can exempt nearly every U.S. company the CTA was designed to cover, then the exemption becomes the law.Congress passes laws. Agencies carry them out. If a law is too burdensome, Congress can amend it. If a law is unconstitutional, courts can say so. But an agency should not be able to erase the center of a statute simply because a new administration disagrees with the policy.

The deletion issue creates another concern. The CTA required FinCEN to keep reported beneficial ownership information for at least five years after a reporting company terminates. FinCEN now says it will delete certain U.S.-person information from the database. Even if FinCEN can reduce future reporting, deleting information Congress required to be collected and retained is harder to defend as mere burden relief.

None of this means the CTA was perfect. It was confusing. It worried small businesses. It created real compliance costs. But the proper fix for an overbroad law is legislative revision, not administrative repeal by exemption.

The Stakes: Money Laundering, Epstein, and Illicit Finance

This debate matters because hidden ownership is not just a technical legal issue. Illicit finance moves through ordinary systems: bank accounts, wire transfers, cash withdrawals, law firms, shell companies, and trusted professionals. When law enforcement cannot quickly identify the real people behind a company, investigations slow down or miss the target.

The Jeffrey Epstein matter is a stark example of why “follow the money” matters. Epstein’s 2007 non-prosecution agreement ended the Southern District of Florida’s 2006-2008 federal investigation. DOJ’s Office of Professional Responsibility later reported that the agreement required Epstein to plead guilty in Florida state court to felony solicitation of prostitution and procurement of minors to engage in prostitution. He received an 18-month county jail sentence and served less than 13 months.

Years later, Senate Finance Committee materials asserted that Treasury records contained information on thousands of wire transfers and more than $1 billion flowing in and out of Epstein’s accounts. The same materials alleged that major financial institutions often flagged suspicious activity only after Epstein’s 2019 arrest or death.

Regulators found serious bank compliance failures. In 2020, the New York Department of Financial Services (“DFS”) imposed a $150 million penalty on Deutsche Bank for compliance failures involving Epstein and other high-risk relationships. DFS stated that Deutsche Bank processed hundreds of Epstein-related transactions totaling millions of dollars that should have prompted scrutiny, including more than $800,000 in suspicious cash withdrawals over about four years.

J.P. Morgan Chase later agreed to a $75 million settlement with the U.S. Virgin Islands over allegations that the bank facilitated Epstein’s sex-trafficking operations, after separately agreeing to a $290 million class-action settlement with Epstein victims. These settlements show that financial institutions can fail to identify, escalate, or act promptly on red flags involving high-risk customers, even when the customer’s criminal history is public and should trigger enhanced scrutiny.

The same problem extends beyond Epstein. Treasury’s 2024 National Money Laundering Risk Assessment identifies fraud, drug trafficking, cybercrime, corruption, human trafficking, and human smuggling as leading money-laundering threats in or through the United States. Treasury also identifies shell companies and lack of timely access to beneficial ownership information as distinct vulnerabilities in the U.S. anti-money-laundering system.

The CTA was not designed to replace banks’ anti-money-laundering programs. It was designed to add a missing layer of transparency: a secure database that could help authorized users identify the real people behind legal entities. FinCEN’s exemption removes that layer for the very U.S. companies Congress identified as the key transparency gap.

What Comes Next for Business Owners and Beneficial Ownership Reporting

FinCEN’s final rule may not be the end of the CTA story. The rule could be challenged in court, reviewed by Congress, or changed by a future administration.

A court challenge would likely focus on the Administrative Procedure Act. A challenger could argue that FinCEN exceeded its authority by using a limited exemption power to remove the domestic reporting requirement, acted arbitrarily by reversing its prior view that ownership information was useful to law enforcement, or acted unlawfully by authorizing deletion of historical data.

Standing will be the hard part. A private citizen who simply objects to FinCEN’s action probably cannot sue. Federal courts require a concrete, personal injury. A general interest in better government or stronger anti-money-laundering enforcement is not enough. The more likely challengers would be states or government bodies that can show the rule harms their law-enforcement, tax-enforcement, or investigative work.

Congress also has options. It could use oversight hearings, appropriations restrictions, or new legislation. It could also amend the CTA to say more clearly whether FinCEN may exempt all or nearly all domestic reporting companies.

For business owners, the practical takeaway is this: current FinCEN rules have removed CTA reporting duties for U.S. companies, but the legal landscape may still change. Owners should watch for future court or congressional action and avoid assuming that beneficial ownership reporting is permanently gone forever.

David McCarville is a Director in Fennemore’s Business & Finance practice, where he advises clients on corporate governance, regulatory compliance, and commercial contracting. He represents businesses in structuring and negotiating strategic transactions and complex agreements, with a focus on practical risk management and long-term growth. He can be reached at dmcarville@fennemorelaw.com.