CyberEyeQ
Actionable Regulatory Intelligence
Today's Focus: Financial Regulation | Friday, 14 August 2026
TODAY'S TOP STORY
FinCEN Permanently Ends BOI Reporting for U.S. Companies
On 11 August, FinCEN issued a final rule eliminating all beneficial ownership information (BOI) reporting obligations for U.S. companies and U.S. persons under the Corporate Transparency Act. The rule is effective on publication in the Federal Register.
FinCEN will also delete previously filed U.S. person data from the BOI database. Foreign entities registered to do business in the U.S. must still report BOI for their foreign individual beneficial owners. For the roughly 32 million U.S. entities that were on the hook, this is a permanent, unconditional reprieve — no filing, no updating, no correcting FinCEN identifiers.
ALSO TODAY
SEC Stands Up Dedicated Accounting-Fraud Unit
On 5 August the Division of Enforcement launched the Financial Reporting and Accounting Unit (FRAU) — the first formal specialized unit in the Division's modern structure dedicated solely to accounting and financial reporting fraud. Led by Timothy Zimmerman (formerly Deputy General Counsel at RSM US), the unit is staffed by attorneys and accountants and will work across SEC divisions. Expect proactive case generation rather than waiting for restatements or tips. Review revenue-recognition and related-party controls now.
CalPrivacy Fines Data Broker Cybba $52,400
Boston-based Cybba, Inc. sells geolocation, browsing, and purchase-inference data for targeted advertising but failed to register as a data broker by the 2025 deadline under California's Delete Act. The order also requires Cybba to connect to the state's DELETE Request and Opt-Out Platform (DROP) and process consumer deletion requests through it. This is CalPrivacy's second data broker enforcement in a single week. Verify your data broker registration is current if you sell third-party personal information in California.
GENIUS Act Implementation Clock Is Ticking
The OCC and FDIC are finalising implementing regulations for the GENIUS Act (signed July 2025). The prohibition on issuing payment stablecoins without authorisation takes effect 18 January 2027 (or 120 days after final rules, if earlier). OCC's comprehensive proposed rule — covering licensing, reserves, prudential standards, and AML/CFT — closed its comment period on 1 May. Crypto-asset issuers should track final rulemaking publications from OCC, FDIC, and state regulators.
DEADLINE ALERT
EU ESG Ratings: ESMA notification deadline for existing providers passed 2 Aug; authorisation applications due by 2 November 2026. Providers that miss this window must cease EU operations. GENIUS Act: Final implementing regulations due from OCC/FDIC — watch for publication of final rules.
ONE THING TO DO TODAY
If your company previously filed BOI reports with FinCEN, confirm internally that your compliance team has stood down the BOI update and correction process — the obligation no longer exists. Then redirect those resources toward your next regulatory priority.
Tomorrow's Focus
Saturday — no newsletter. See you Monday with Cybersecurity, Data Security & Cloud Security.
CyberEyeQ — Actionable Regulatory Intelligence
Questions or feedback: [email protected]