Deadlines, Updates, and Corrections

There are three kinds of BOI report, and keeping them distinct keeps you out of trouble. The initial report is your first filing for an entity. An updated report is what you file when previously reported information changes, a new beneficial owner, a moved address, a name change.

And a corrected report is what you file when information you already reported turns out to have been inaccurate when you submitted it. The difference between an update and a correction matters: an update reflects a real-world change after filing, while a correction fixes a mistake in what you originally reported. The data fields are the same across all three.

What differs is the trigger, and, as we'll see, the clock that starts running once that trigger occurs.

Initial-report deadlines were originally tiered by when the company came into existence, and this is an area where you must verify the current rule rather than memorize a single date, because the deadlines have been revised repeatedly. Under the original framework, companies that already existed before 2024 were given a longer one-time window to file their first report, while companies created during 2024 had a shorter window measured from their formation, and companies created in 2025 or later had a shorter window still. Then the litigation and the 2025 interim final rule moved these dates around, especially for the foreign companies that remain in scope.

So rather than commit a specific calendar date to memory, learn the structure, your initial deadline depends on when the entity was created or registered, and then confirm the exact current date with FinCEN before you rely on it.

Now the rule you should burn into memory, because it's the durable one: the thirty-day update window. When information previously reported about the company or its beneficial owners changes, the reporting company must file an updated report within thirty days of that change. The clock starts when the change happens, not when someone gets around to noticing it.

Importantly, there is no annual renewal under the CTA, you don't re-file every year just to confirm nothing changed. You file only when something actually changes. But thirty days is short, and changes are easy to miss when they happen quietly inside a business.

So the practical takeaway is to build a process that surfaces reportable changes promptly, because the obligation runs from the event itself, and the window closes fast.

What kinds of events trigger a thirty-day update? Plenty of ordinary business life. A new beneficial owner comes in, or an existing one exits, both require an update.

A beneficial owner changes their legal name, perhaps through marriage, or moves to a new home address, that's an update. The company starts using a new trade name, or changes its principal business address, update. And here's an easy one to overlook: if the company newly qualifies for an exemption, or newly loses an exemption it had been relying on, that change in status itself must be reported.

There's also a special case worth remembering, when a minor child who'd been excluded reaches the age of majority, the company files an update to report that now-adult individual as a beneficial owner. The thread is simple: if what's on file no longer matches reality, the clock is running.

Let's separate corrections from updates clearly. An update reflects a change that happened after you filed correctly. A correction fixes information that was inaccurate at the time you filed.

The rule's expectation is that once you become aware a report was inaccurate, you file a corrected report promptly, within thirty days of becoming aware of the inaccuracy. This matters for penalties, which we'll cover later, because the CTA's penalty regime focuses on willful violations, and a prompt, good-faith correction is exactly the opposite of willful concealment. The wrong move is to discover an error and quietly leave it, hoping nobody notices, that's the posture the law treats most harshly.

The right move is to fix it on becoming aware of it. So treat a discovered inaccuracy as a thirty-day clock, just like a change.

Let's recap the clock. Three report types: initial, updated, and corrected. Initial deadlines depend on when the entity was created or registered, and those dates have been revised so often that you should confirm the live deadline with FinCEN rather than trust a remembered number.

The durable rule is the thirty-day window: file updates within thirty days of a change, and corrections within thirty days of becoming aware of an inaccuracy, with no annual renewal in between. A wide range of ordinary events, new or departing owners, name and address changes, exemption status changes, all trigger updates. Now that you know what's collected and when it's filed, a fair question is who is actually allowed to look at all this sensitive ownership data.

That's the Access Rule, and it's where we go next.