How Entity Management Software Supports New OBCA Amendments

By Steven Pulver
Last Updated
Dec 16, 2025
5 min read
Main image - How Entity Management Software Supports New OBCA Amendments

White collar crime is a very costly affair in Canada. According to Criminal Intelligence Service Canada, which shares and coordinates criminal intelligence shared between different police agencies, white collar crime costs the country up to $5 billion per year.

Naturally, governments across the country are eager to crack down on these crimes. One of the ways this was done was an amendment to the Canada Business Corporations Act in 2019. The amendments mandate that corporations must provide greater transparency over shareholder equity in their businesses, as well as assist authorities to prosecute financial crimes.

The federal law was adopted by several provinces over the past three years, including British Columbia, Manitoba, and Nova Scotia. As of January 1, 2023, Ontario, the largest province in Canada, will enact its own version of the law.

What the OBCA amendment means for business

The OBCA is the Ontario Business Corporations Act, which has a similar mandate to the CBCA at the federal level. The Ontario government updated the OBCA with rules that enforce similar priorities for corporations to follow as the federal law.

Under the new OBCA legislation, corporations headquartered in Ontario must create and maintain an ISC register with updates reported on an annual basis. An ISC register is a document that lists all of the individuals with significant control (ISC), ensuring all key stakeholders comply with the law. The purpose of the OBCA, and its federal counterpart, is to support a Canada-wide effort to crackdown on white collar crime, particularly tax evasion.

Other provinces have enacted similar legislation of their own, following the lead of the federal example. Quebec has created its own legislation in Bill 78 that’s similar to the CBCA laws, though it has slightly different guidelines for corporations to follow. You can learn more about Quebec’s Bill 78 here.

Who fits the profile of an ISC?

Who exactly is an individual with significant control in a corporate entity? In most situations, an ISC is a registered shareholder with shareholder rights who controls at least 25 percent of the voting rights attached to all outstanding corporate shares. The language in the law also applies the ISC label to any shareholder whose influence, if exercised, could in fact control the decisions made by the corporation.

There are some exemptions to how the ISC classification is applied. For example, if a shareholder is an investor for a purely commercial relationship, reflected in the form of a franchise, license, lease, or some other managerial agreement, their involvement in the corporation’s affairs is considered an “arm’s-length” affiliation. For that reason, that investor would not classify as an ISC.

What needs to be included in an ISC register

Under the OBCA laws, an ISC register must be maintained and updated by a corporation as part of its annual financial statements. However, what exactly needs to be included in an ISC register to comply with the law?

Most of the information in an ISC register is identical to information that most corporations maintain in a standard shareholder ledger. This includes personal information such as names, addresses, dates of birth, and jurisdictions.

There’s one key difference between an ISC register and a standard shareholder register. The difference is that corporations must include the date on which an ISC became an ISC shareholder, and a description of how that individual meets the criteria of an individual with significant control in the corporation.

How to use entity management software to file ISC registers

If your corporation is based in Ontario, you’ll need to create an ISC register to comply with the law. Now, you may be an established corporation with a detailed shareholder ledger, which you can modify with little hassle. But what if you’re a new corporate entity? How do you create a new shareholder ledger without sacrificing laborious hours of your paralegals’ time and energy?

The best approach is to use entity management software to streamline your corporate recordkeeping process. Platforms like MinuteBox have a built-in shareholder register template in our Entity Information Summary that you can use to build out your register, and you can include any required details to highlight investors that fit the ISC profile.

Under the Entity Information Summary is a subsection called the Capital Section. Here, you can input all authorized information about shareholders and corporate transactions in the available open fields.

You might be asking the question: how is this going to save your legal team precious time and manpower? MinuteBox utilizes document automation technology that requires no coding or coding experience to work the platform. It allows your team to work faster but still meet all of the legal criteria necessary to remain in full compliance with both federal and provincial laws. Simply open up the platform and the work can be complete within minutes!

Are you part of an Ontario-based corporation and in need of an efficient solution to complete your transparency register? Join the MinuteBox revolution so that you can comply with updated corporate governance in a fast and efficient manner while maintaining your commitment to accountability and transparency.

What you should do now

Blog

Related Articles
Discover insights and tips for legal professionals
Feb 2, 2026
12 min read
How Legal Teams Can Maintain Regulatory Compliance with Centralized Entity Management

Legal teams know compliance inside and out, but the constantly growing number of regulations and laws makes maintaining regulatory compliance feel like an uphill battle.

Law firms, in-house counsel and compliance professionals responsible for managing entities across multiple jurisdictions face an even steeper climb. Different regulations frequently overlap or conflict with each other, raising the stakes for non-compliance and increasing penalty risks.

But as tough as it is, regulatory compliance is necessary for maintaining ethical business practices and protecting corporate integrity. It ensures organizations operate responsibly while safeguarding their reputation and legal standing.

So what’s the solution for effective regulatory compliance?

The answer lies in adopting a consistent and coordinated approach through a unified system. With centralized entity management, legal teams can automate much of their compliance work and dramatically reduce liability exposure.

6 Ways to Meet Regulatory Compliance and Standards

Here are six core strategies that legal teams can use to stay compliant:

Keeping Minute Books up to Date

Minute books function as the official record of a company’s corporate history, making accurate and current documentation absolutely essential for legal protection.

Everything from board resolutions and shareholder decisions to annual filings and corporate changes must be clearly documented. This documentation serves multiple purposes beyond regulatory compliance, including maintaining audit readiness and supporting due diligence processes.

Digital Minute Books for Modern Legal Teams

Centralizing Data Access

Spreadsheets and other disconnected data systems cannot provide the consistency and transparency required to maintain compliance nowadays. 

The lack of complete oversight makes it hard for legal teams to get a proper view of how information is collected, stored and used, which means issues and errors get overlooked.

This fragmented approach can also result in some areas of the organization failing to meet regulatory standards. Additionally, implementing regulatory changes becomes nearly impossible when data lives in multiple locations with different formats and access controls.

A centralized platform provides a single source of truth where all data is contained and accessible to those who require it, removing these issues entirely.

Automating Compliance Calendars

With multiple regulatory bodies, each with its own deadlines and reporting requirements, staying on top of what’s required and when is not simple. Especially since the requirements change frequently.

Manual tracking is risky since it’s so easy to miss critical deadlines or confuse requirements between different jurisdictions.

Automated compliance calendars notify teams of upcoming deadlines for things like tax filings or license renewals and can generate reports automatically. This reduces manual work, ensures timely submissions and keeps legal teams ahead of regulatory demands.

Securing Document Workflows

Sensitive legal and corporate documentation requires careful handling with complete visibility into who accessed it and when, and tracking all changes.

Modern secure document workflows use encryption to protect data during transmission and storage. They also implement role-based access controls and version tracking to maintain data integrity and meet regulatory expectations for confidentiality and record-keeping.

These security measures become particularly important when dealing with beneficial ownership information, board communications and other confidential corporate data that regulatory bodies may request during investigations or audits.

Tracking Ownership and Control Structures

Many jurisdictions now mandate disclosure of beneficial ownership and control structures as part of broader efforts to combat money laundering, tax evasion and fraud schemes. 

Therefore, legal teams must maintain up-to-date records of all control structures and keep track of all entity ownership within the organization.

For example, Canada’s federal and provincial governments require organizations to disclose any individuals who have ownership or control of 25% or more of the company.

When faced with an audit, it’s necessary to confirm the accuracy of beneficial ownership, and tracking ownership and control structures is key to making this happen.

Maintaining Audit Trails

Many organizations dread audits because it means a scramble to gather all the information together and present it in an audit-ready format, including timestamps and responsible parties.

Using a centralized system that tracks everything on your behalf removes the headaches and maintains a state of audit readiness at any time.

When everything is tracked transparently, legal teams can quickly demonstrate that the organization followed the proper procedures and acted in good faith.

Key Regulatory Frameworks in Canada and the U.S.

Key frameworks in Canada include:

Framework Focus
Cabinet Directive on Regulation Main policy framework for regulatory cooperation and transparency.
Personal Information Protection and Electronic Documents Act (PIPEDA) How personal data is handled in commercial activities.
Canada Labor Code Standards for workplaces.
Regulatory Compliance Management Guideline Requires financial institutions to develop compliance frameworks.
Canada Business Corporations Act (CBCA) Corporate governance rules for federally incorporated businesses.
Ontario Business Corporations Act (OBCA) Similar to CBCA but includes Ontario-specific provisions.
Corporations Information Act (Ontario) Corporations operating in Ontario must file annual returns and keep information updated.
Proposed Federal Beneficial Ownership Registry (2024+) Currently being rolled out. A public registry requiring corporations to disclose beneficial owners. Full implementation is expected by late 2025.

Key frameworks in the USA include:

Framework Focus
Sarbanes-Oxley Act (SOX) Governance and accountability for publicly traded companies.
Health Insurance Portability and Accountability Act (HIPAA) Health information and data privacy standards.
Gramm-Leach-Biley Act (GLBA) Requires financial institutions to explain data-sharing and safeguarding practices.
Payment Card Industry Data Security Standard (PCI DSS) Security compliance for companies handling credit card information.
California Consumer Privacy Act (CCPA) Protects data privacy for California residents.
Foreign Corrupt Practices Act (FCPA) Mandates accurate business records for companies operating abroad.
FinCEN Corporate Transparency Act Requires companies to disclose beneficial owners.

Besides the national frameworks noted above, there are many state and provincial-level regulations that companies must also abide by.

As you can imagine, these regional complexities are extremely difficult to manage without using a centralized data platform

Minutebox helps legal teams manage these multi-jurisdictional entities and successfully navigate regulatory complexity by centralizing data and automating compliance tasks. 

Primary Compliance and Regulatory Agencies

Within the USA and Canada, several primary agencies enforce compliance and regulations:

Agency Location Focus
FinCEN USA Enforces the CTA.
Securities and Exchange Commission (SEC)  USA Regulates publicly traded companies.
Internal Revenue Service (IRS) USA Enforces federal tax laws.
Secretaries of State USA Responsible for corporate registrations and entity compliance.
Corporations Canada Canada Administers the CBCA and OBCA.
Canada Revenue Agency Canada Oversees tax compliance.
Office of Privacy Commissioner of Canada (OPC) Canada Enforces PIPEDA.
Financial Transactions and Reports Analysis Centre (FINTRAC) Canada Financial intelligence agency to prevent fraud and money laundering.
Provincial Corporate Registers Canada Each Canadian province has its own securities regulator.

The Consequences of Non-Compliance

Although regulatory bodies have the power to impose significant fines for non-compliance, the implications run far deeper.

For instance, a failure to file annual returns or keep up-to-date records runs the risk of being struck off the registry or losing legal status. This can halt business operations immediately and may result in frozen assets until compliance is restored.

Non-compliance also damages an organization’s reputation, which can be difficult to recover. A damaged reputation erodes customer trust and may deter potential business partners or investors.

The risk of litigation also rises. In cases involving misleading disclosures or bad governance, individuals within the organization may be held accountable.

Take Wells Fargo, for example. In 2016, the company faced extensive litigation and regulatory consequences after its employees were found to have created millions of fake bank accounts to fulfill their aggressive sales targets.

The event resulted in major financial penalties and multiple lawsuits, forcing the bank to completely overhaul its corporate governance structure.

It’s worth noting that any fines issued by regulatory bodies are not just limited to the corporation itself. They can also be issued to directors. Some jurisdictions also extend fines to management and other individuals.

In the case of Wells Fargo, three executives were fined a total of $18.5 million

The Benefits of Ensuring Compliance

Compliance offers advantages that extend well beyond avoiding penalties and maintaining good standing with regulatory bodies. 

  • Operational efficiency develops naturally when organizations build compliance frameworks around best practices and standardized processes. Automated compliance tasks reduce manual input requirements and improve accuracy and consistency across all business operations.
  • Stakeholder trust grows when business leaders see concrete evidence of corporate responsibility and ethical practices. Demonstrating consistent compliance builds confidence among investors, partners and other stakeholders.
  • Enhanced reputation extends beyond stakeholder relationships to include customer perceptions and market positioning. Companies with strong compliance records find it easier to attract and retain customers who value ethical business practices and responsible corporate behavior.
  • Improved data handling practices protect sensitive information according to regulatory standards and industry best practices. This careful approach to data management builds trust with customers and business partners while helping organizations avoid costly data-related penalties and breaches.
  • Audit readiness becomes a continuous state rather than a periodic scramble when compliance systems are properly implemented. Organizations with strong compliance frameworks can respond quickly to audit requests and regulatory inquiries without disrupting normal business operations.
  • Better governance structures emerge naturally when organizations implement the processes and controls required by compliance frameworks. These structures promote ethical decision-making and responsible business practices throughout the organization.

How to Monitor Regulations for Compliance

With multiple regulatory frameworks in play, organizations must continuously monitor for changes and adjust their compliance programs accordingly.

The best approach is to make use of the available technology while also fully engaging your staff in the processes.

Start by creating a monitoring framework that documents individual responsibilities, establishes check frequencies and outlines specific monitoring procedures for each regulatory requirement. It’s also wise to establish a schedule for risk assessments and compliance reviews.

Train your staff on what’s expected of them so each employee is clear about what they must do to stay on top of compliance.

Again, using a centralized data platform simplifies these compliance tasks. Look for features such as built-in reminders, automated compliance alerts and version-controlled registers to automate all the important compliance requirements.

It’s also best practice to conduct regular internal audits to test your compliance processes. Doing so will help you identify any gaps or inadequacies and allow you to swiftly make adjustments before they become a problem.

How MinuteBox Helps Ensure Regulatory Compliance

MinuteBox is a cloud-based legal entity management and compliance platform designed to simplify regulatory compliance for legal professionals and corporate teams.

Through its proactive tools, you can support compliance objectives and create a single source of truth for all your corporate entity data.

Here are some of its standout features that enable full compliance, no matter which regulatory frameworks you must adhere to:

  • Automated deadline tracking with compliance calendars and customizable reminders for critical compliance tasks, including annual filings, name registrations and regulatory reporting requirements.
  • Audit-ready digital minute books with complete version control, detailed timestamps and comprehensive tracking of all changes and user actions
  • Up-to-date share ledgers and registers that update in real-time across the whole platform.
  • Configurable ownership charts that automatically generate visual diagrams showing beneficial ownership structures and entity relationships, updating in real-time
  • Secure document management with role-based access controls, end-to-end encryption and comprehensive audit trails that meet regulatory expectations for confidentiality and data protection.
  • Advanced collaboration tools allow clerks, law firm partners and other team members to work together within the platform. Stakeholders are notified when their input is required, allowing records to be updated quickly.
  • Real-time impact assessments help compliance managers instantly identify which entities are affected by changing regulations, allowing for rapid response to new requirements.
  • Pre-built compliance templates provide standardized formats that include all required compliance data within documentation. This reduces errors and maintains consistency across all regulatory filings.

To learn more about MinuteBox and how it supports and automates compliance, we welcome you to schedule a free demo.

See how Minutebox Helps Ensure Regulatory Compliance

FAQs – How Legal Teams Can Maintain Regulatory Compliance with Centralized Entity Management

What happens if a regulation changes? How can we stay ahead?

When regulations change, using a centralized entity management system can help you stay ahead. 

Automated alerts and task reminders will automatically alert stakeholders about new or upcoming compliance tasks, while dynamic templates allow for fast data collection adaptations.

One-click report generation will instantly reveal which entities are missing required data or are impacted by a new rule, allowing you to make the necessary changes before they become a risk.

How does MinuteBox help track jurisdictional requirements?

MinuteBox allows you to add key jurisdictional information onto each entity profile, including jurisdiction of incorporation, any applicable registrations and corresponding compliance dates. 

This enables users to search for and filter entities according to their jurisdictions and the related compliance obligations. These obligations will also enter into the compliance calendar and trigger automated alerts when jurisdictional deadlines approach.

What’s the difference between reactive and proactive compliance?

Reactive compliance refers to the act of responding to issues only after a breach or incident takes place. In other words, the fix is only applied once non-compliance has been detected.

In contrast, proactive compliance means anticipating issues and implementing compliance into business operations and processes before those issues even occur. Continuous monitoring is also built into this practice, allowing organizations to adapt their policies and stay ahead of changing regulations.

Oct 17, 2025
3 min read
New requirements for corporate record keeping under Bill C-86 – Amendments to the CBCA

On December 13, 2018, Bill C-86 received Royal Assent, thereby amending certain provisions of the Canada Business Corporations Act (“CBCA”).

The updated provisions include new record keeping requirements for private companies incorporated under the CBCA. As of June 13, 2019. The updates affect those with “significant control” of a company defined as:

Section 2.1(1)

  • (a) an individual who has any of the following interests or rights, or any combination of them, in respect of a significant number of shares of the corporation:
    • (i) the individual is the registered holder of them,
    • (ii) the individual is the beneficial owner of them, or
    • (iii) the individual has direct or indirect control or direction over them;
  • (b) an individual who has any direct or indirect influence that, if exercised, would result in control in fact of the corporation; or
  • (c) an individual to whom prescribed circumstances apply.

A “significant number of shares” is further defined as:

Section 2.1(3)

  • (a) any number of shares that carry 25% or more of the voting rights attached to all of the corporation’s outstanding voting shares; or
  • (b) any number of shares that is equal to 25% or more of all of the corporation’s outstanding shares measured by fair market value.

Summary

Private CBCA corporations must now maintain a register of all individuals who fit the above description, and include in the register the names, birth dates, residence (for tax purposes) and other required data.

Shareholders are now obligated to provide true and accurate information when requested by the corporation.

At least once per financial year, the corporation must review and update this information. Once the corporation is aware of any changes, it has 15 days in order to amend the register accordingly. Failure to properly update the information can result in fines of up to $5,000. However, directors or shareholders knowingly providing false information can result in fines of up to $200,000 and/or six months of imprisonment.

The CBCA requirements ensure that corporations (or the law firms that manage the records for those corporations) must undertake a greater number of tasks each year to ensure the corporate records’ compliance.

The process of updating minute book records will be daunting and tedious, especially if the information is stored in physical minute books binders. Document generation tools and clearly organized cloud-based data and databases can make compliance with the new requirements more manageable.

While the new requirements apply only to privately held CBCA corporations, it is certainly possible that the provincial legislatures will debate and perhaps adopt similar requirements.

At MinuteBox, we have already begun internally testing some new features (to be released in 2019) built specifically to support lawyers and clerks through this process.

Oct 17, 2025
5 min read
Judge Rules Corporate Transparency Act Unconstitutional, For Now

The Corporate Transparency Act (CTA) was enacted on January 1, 2024. The authors of the CTA decreed a mandate that requires all qualifying business entities to submit beneficial ownership information (BOI) reports to the Department of Treasury’s Financial Crimes Enforcement Network (FinCEN).

Two months later, on March 1, 2024, a US District Judge in Alabama ruled on a case brought before the court by the National Small Business Association (NSBA), an organization representing over 65,000 small business entities across the United States. The judge ruled that the CTA is “unconstitutional” and that lawmakers overstepped their bounds.

What is the purpose of the Corporate Transparency Act?


The CTA is part of a broader government effort to crack down on white-collar crime. US federal agencies and financial institutions annually identify unlawful transferrences of capital through money laundering or corporate sponsorship of international terrorism — actions that, in the government’s opinion, undermine national security.

As a result, the CTA gives FinCEN greater authority and oversight of suspected culprits of these crimes. Qualifying business entities must provide detailed BOI reports to FinCEN, which will store those records in secure databases and use them to monitor suspicious financial activities.

What were the details of the Alabama case?


The NSBA challenged the legal authority of the CTA and took the government to court seeking a summary judgment. Federal District Judge Liles C. Burke in Alabama issued a 53-page opinion about the case, which a Forbes contributing writer dissects in detail.

At the heart of the lawsuit is the fact that legal entities in the United States register with individual states where they choose to operate. The incorporation of those entities is a matter for the states to decide, along with the ability to prosecute those businesses for suspected financial crimes.

The NSBA argued that the CTA gives the federal government’s national security and foreign affairs matters the right to interfere with how individual states regulate businesses. Additionally, they argued that limited liability corporations (LLCs) may engage in interstate commerce, but not all entities pursue these opportunities.

The CTA requires all entities — even those that never cross state jurisdictions — to abide by the federal government’s mandate. Judge Burke ruled these grounds warranted an unconstitutional ruling of the CTA, though the federal government launched an appeal to the Eleventh Circuit.

Who is a beneficial owner under the CTA?


Within the CTA is specific language that defines a beneficial owner. According to the CTA, a beneficial owner is anyone who — directly or indirectly — maintains a 25% ownership interest in a corporate entity. Additionally, a beneficial owner is anyone who — again, directly or indirectly — maintains substantial control over business operations through voting rights.

Shareholders who fit the profile of a beneficial owner must provide their personal information — name, address, and a government-issued identification number — to the entity management department. That data is then processed and submitted to FinCEN as a BOI report.

Are some entities exempt from BOI reporting requirements?


The CTA allows authorities to gather beneficial ownership information from thousands of legal entities. However, FinCEN has detailed 23 types of legal entities that are exempt from the BOI reporting requirements.

Most exemptions revolve around the financial sector in the form of banks, credit unions, venture capital firms, depository institutions, or money services businesses. Government authorities, public utilities, and securities exchanges are also exempt from reporting BOI data to FinCEN.

What does the Alabama case ruling mean for BOI reporting?


So, what does the NSBA case against the Treasury Department mean for the future of BOI reporting requirements? There are two key takeaways from the case.

Firstly, Judge Burke clearly stated in his ruling that the injunction against the CTA only applies to businesses enrolled in the NSBA before March 1, 2024. Businesses that are registered members of the NSBA have a temporary pause on compliance with the CTA while the case is under appeal at the Eleventh Circuit.

For most businesses, the ruling has no impact whatsoever. FinCEN requires BOI reports from entities registered on or after January 1, 2024, within 90 days of receiving their articles of incorporation. Any entities registered before January 1, 2024, have until January 1, 2025, to submit their BOI reports to FinCEN.

How to prepare your BOI reports for FinCEN


While many entities still have several months to submit their BOI reports to remain in compliance with the CTA, it’s best to start gathering that information now. It’s much more effective for your entity management team to have all the information they need well in advance of the deadline to avoid last-minute scrambles and gaps in required data.

Intuitive entity management software can assist your legal and compliance departments with these tasks. Platforms like MinuteBox include pre-built templates and guided widgets that help your teams build detailed reports. The technology saves valuable working time and makes the process of gathering, filing, and securing entity management data quick and painless.

Additionally, you can use the platform’s Corporate Transparency Register to comply with all obligations under the CTA. Here, you can build detailed shareholder ledgers and create a comprehensive list of all beneficial owners with significant controlling interest in the company.

Once the data is in the platform, you can easily create detailed minute book records of all beneficial owners. Since the information is stored in your platform, filing and submitting the BOI reports to FinCEN is a breeze.

Prepare your legal entity for the next step of beneficial ownership reporting. Join the MinuteBox revolution today, and stay ahead of the game while maintaining compliance.

You're subscribed!
Stay tuned for updates delivered to your inbox.
We couldn’t

process your request
Please double-check your email and try again.
Subscribe
to our newsletter
Stay updated with the latest news and insights from MinuteBox delivered straight to your inbox.