BOI Reports and SEC Filings: Deadlines, Penalties, and EDGAR

Compliance transparency in the United States now runs on two very different tracks. Beneficial ownership information (BOI) reports under the Corporate Transparency Act apply only to foreign-formed entities registered to do business here; every U.S.-formed company was exempted in March 2025. SEC filing rules, by contrast, still apply in full force to every public company, with fixed deadlines for annual, quarterly, and event-driven disclosures and significant penalties for missing them. This article walks through both sets of rules so you know which apply to your company and what you owe.

Who Still Has to File a BOI Report

On March 26, 2025, FinCEN published an interim final rule that exempts every entity created in the United States from beneficial ownership reporting. FinCEN also said it would not enforce BOI penalties or fines against U.S. citizens, domestic companies, or their beneficial owners.1Financial Crimes Enforcement Network. Beneficial Ownership Information Reporting If your business was formed under U.S. law, you currently have no BOI filing obligation.

The rule redefined “reporting company” to mean only entities formed under the law of a foreign country that have registered to do business in a U.S. state or tribal jurisdiction. Those foreign reporting companies still must identify their beneficial owners to FinCEN.2Financial Crimes Enforcement Network. FinCEN Removes Beneficial Ownership Reporting Requirements for US Companies and US Persons

Deadlines for foreign reporting companies:

A foreign entity can still avoid filing if it qualifies for the large operating company exemption. That requires more than 20 full-time U.S. employees, more than $5 million in gross receipts on the prior-year federal tax return, and a physical U.S. office that is not shared with unrelated entities. You cannot combine the employee count across affiliated companies to reach the 20-person threshold.

Because FinCEN labeled the March 2025 rule “interim,” a final rule with different terms could follow a comment period. If you handle compliance for a foreign entity, keep watching for updates.

What Public Companies File With the SEC

Public companies operate under a much heavier regime built on the Securities Exchange Act of 1934. Section 13 requires every company with securities registered on a national exchange to file annual and quarterly reports with the SEC, along with any other information the commission prescribes.3Office of the Law Revision Counsel. 15 USC 78m – Periodical and Other Reports Companies with securities registered under Section 12 and those required to report under Section 15(d) must also keep books and records that accurately reflect their transactions and asset dispositions.

Three filings do most of the work:

  • Form 10-K, the annual report, with audited financial statements and a full picture of the company’s business, risks, and legal proceedings.
  • Form 10-Q, the quarterly report, with unaudited results and updates on material changes since the last annual report.
  • Form 8-K, the current report, triggered by specific corporate events.

Sarbanes-Oxley added an internal-controls layer. Under Section 404, each annual report must include management’s assessment of whether the company’s internal controls over financial reporting are effective, together with an independent auditor’s attestation of that assessment.4U.S. Securities and Exchange Commission. Sarbanes-Oxley Disclosure Requirements The CEO and CFO also personally certify in each 10-Q and 10-K that they have evaluated disclosure controls and that the financials fairly present the company’s condition. Those certifications carry personal liability.

SEC Filing Deadlines

Deadlines depend on filer size, measured by public float.

Form 10-K, after fiscal year-end:

  • Large accelerated filers (public float of $700 million or more): 60 days.5U.S. Securities and Exchange Commission. Form 10-K – Annual Report
  • Accelerated filers (public float of $75 million to under $700 million): 75 days.
  • All other filers: 90 days.

Form 10-Q, after the end of each fiscal quarter:

Form 8-K must be filed within four business days of the triggering event. Triggers include entering into or terminating a material agreement, completing a significant acquisition or disposition, a change in auditors, leadership changes, and material cybersecurity incidents.7U.S. Securities and Exchange Commission. Form 8-K – Current Report If the event falls on a weekend or federal holiday, the four-day clock starts on the next business day. For a material cybersecurity breach, the clock starts on the date the company determines the incident is material.

Penalties for Missing SEC Filings

Criminal penalties for willful violations under Section 32 of the Securities Exchange Act reach $5 million and 20 years in prison for individuals, and up to $25 million for entities.8Office of the Law Revision Counsel. 15 US Code 78ff – Penalties Those are the ceilings for intentional misconduct, not routine late filings.

Civil penalties follow a three-tier structure that scales with severity. After the January 2025 inflation adjustment, the per-violation maximums are:

  • Tier 1, technical violations: up to $11,823 for individuals, $118,225 for entities.
  • Tier 2, fraud or deceit involved: up to $118,225 for individuals, $591,127 for entities.
  • Tier 3, fraud causing substantial losses: up to $236,451 for individuals, $1,182,251 for entities.9U.S. Securities and Exchange Commission. Inflation Adjustments to the Civil Monetary Penalties

The SEC can also seek disgorgement of ill-gotten gains, bar individuals from serving as officers or directors of public companies, and revoke a company’s registration so its stock can no longer trade on an exchange. Companies that self-report and cooperate sometimes receive reduced penalties or none at all, which is worth remembering if you discover a filing error internally.

How to Submit BOI Reports and SEC Filings

BOI Reports for Foreign Entities

Foreign reporting companies file through the FinCEN BOI E-Filing system. You can complete the report directly online or upload a completed PDF.10Financial Crimes Enforcement Network. BOI E-Filing For each beneficial owner, the report needs a full legal name, date of birth, current residential address, and a unique identifying number from a valid government-issued document such as a passport or driver’s license. The entity’s legal name, any trade names, its principal U.S. address, and its taxpayer identification number also go on the report.

After submission, the system provides a confirmation with a tracking number and receipt date. Download that confirmation as a PDF right away. It is your proof of compliance, and you cannot retrieve it later through the portal.

SEC Filings Through EDGAR

Public companies file through the SEC’s Electronic Data Gathering, Analysis, and Retrieval (EDGAR) system. The 10-K is not a fill-in-the-blank form but a structured guide for preparing a narrative report covering business operations, risk factors, financial statements, and management discussion. Financial statements must be audited by an independent public accounting firm before filing.

Once a filing is transmitted through EDGAR, the system issues an acceptance or rejection message. A filing is not official until you receive an acceptance message with a filing date.11U.S. Securities and Exchange Commission. Determine the Status of My Filing Save that acceptance the same way you would the FinCEN receipt.

Keeping Up After the First Filing

An initial filing is the beginning of the obligation, not the end. Public companies carry a continuous disclosure duty. Any time a material event occurs, an 8-K is due within four business days. Common categories include:

  • Material agreements, entered or terminated outside the ordinary course of business.
  • Financial triggers such as a major acquisition or disposition, a material new financial obligation, or earnings results.
  • Leadership and governance changes, including departures of directors or principal officers and amendments to articles of incorporation or bylaws.
  • Cybersecurity incidents the company determines to be material.7U.S. Securities and Exchange Commission. Form 8-K – Current Report

Quarterly disclosure control evaluations under Sarbanes-Oxley continue on the 10-Q and 10-K cycle, each one signed by the CEO and CFO under personal liability.

For foreign entities that file BOI reports, FinCEN requires an updated report within 30 days when beneficial ownership information changes. That covers changes to a beneficial owner’s name, address, or identification document, and any new person acquiring a 25 percent or greater ownership stake. Updates go through the same BOI E-Filing system.

Public Access to Filings

Anyone can look up what a public company has filed with the SEC. EDGAR offers free access to millions of filings, including registration statements, annual and quarterly reports, ownership disclosures, proxy materials, and correspondence with issuers.12U.S. Securities and Exchange Commission. Search Filings You can search by company name, ticker symbol, or Central Index Key (CIK) number. A full-text search covers more than 20 years of filings, with filters for date range, company, person, filing category, and location.13U.S. Securities and Exchange Commission. EDGAR Full Text Search

BOI data works differently. FinCEN restricts access to BOI reports primarily to law enforcement, national security agencies, and financial institutions with appropriate authorization. Members of the public cannot search or view individual BOI filings.