Foreign importer of record CTPAT rules hit Jan 5, 2027

Starting January 5, 2027, a foreign importer of record (IOR) can enter goods for consumption on its own behalf only if it is CTPAT validated. If it is not, it has to designate a CTPAT validated licensed customs broker to make entry or to act as the IOR. That is the core of CBP's interim final rule "Heightened Requirements for Foreign Importers of Record," published at 91 FR 69977 on November 6, 2026 (on public inspection November 5) and effective January 5, 2027.

CBP also added three fields to CBP Form 3461 and CBP Form 7501 and their electronic equivalents, announced in CSMS #70381183. Every entry and entry summary will now declare whether the IOR — or the principal on the power of attorney, where a broker files as IOR — meets CBP's new U.S. IOR criteria. CBP says it has built additional validations and may reject entries and entry summaries that fail them as of January 5, 2027.

If you import through a non-U.S. entity — an overseas parent, a Hong Kong trading company, a supplier acting as IOR on DDP terms, or an agent structure — the practical work is short: confirm whether your entity meets the U.S. IOR test, confirm in writing whether your broker is CTPAT validated, and fix your power of attorney before the deadline.

The rule implements Section 2 of Executive Order 14411, Strengthening Customs Enforcement, signed June 3, 2026. CBP issued it as an interim final rule rather than a proposed rule, so it becomes operative on January 5, 2027 even while the comment window runs to the same date.

The rule (CBP Dec. 26-19) creates a new 19 CFR part 110 and amends parts 111, 141, 142 and 171, according to the Federal Register document. Section 110.1 defines "beneficial owner" and "physical domestic assets," § 110.2 sets the U.S. IOR test, and § 110.3 covers the foreign IOR — defined simply as any IOR that does not qualify as a U.S. IOR.

This sits on top of an older requirement most non-resident importers already know: 19 CFR 141.18 bars a nonresident corporation from entering merchandise for consumption unless it has a resident agent authorized to accept service of process and files a CBP Form 301 bond with a resident corporate surety. The new rule adds a CTPAT layer; it does not replace that one.

Under the criteria practitioners have summarized from the rule, an entity qualifies as a U.S. IOR only if it is both located in and organized under the laws of the United States, and then meets one of two further tests: it maintains at least 51% of beneficial owners who are U.S. citizens or lawful permanent residents with control of the entity, or it directly owns a significant amount of unencumbered real property in the United States (Thompson Hine, Kelley Drye). The sources we reviewed do not quantify what "significant amount" means, so read the Federal Register text before relying on the property route.

A "beneficial owner" is generally a natural person who exercises substantial control or who owns or controls at least 25% of ownership interests, directly or indirectly — and CBP looks through layers of entity ownership to the natural persons behind them, per EY's summary. An individual qualifies as a U.S. IOR if they are a U.S. citizen or lawful permanent resident.

The surprise cases are the ones to check first: a Delaware LLC wholly owned by a foreign parent, a founder-owned brand whose majority cap table sits offshore, and any DDP arrangement where the supplier or its agent is named IOR on the entry. Being incorporated in the U.S. is not enough on its own.

CSMS #70381183 describes three additions to the entry and entry summary. They are declarations, which means getting them wrong is a statement to CBP, not a typo.

CBP says it may reject entries and entry summaries from January 5, 2027 where a foreign IOR files without CTPAT validation or a CTPAT validated broker, or where a non-CTPAT validated broker acting as IOR fails to report the principal. A rejected entry is not a paperwork problem you fix next week — it is cargo sitting at the terminal accruing demurrage and detention.

An inaccurate U.S. IOR declaration carries a separate consequence. CBP can place the importer on live entry, meaning full duty deposit before release, and discontinue immediate delivery privileges (International Trade Insights). The rule also heightens broker enforcement, including potential penalties under 19 U.S.C. 1592.

Expect your broker to ask for documentation before it will check "Y." Brokers must request and review supporting records before declaring a client to be a U.S. IOR and keep them for five years — organizational charts, shareholder records, stock certificates, corporate resolutions and tax returns are the kinds of records practitioners expect to be requested.

The obvious response — "we'll just join CTPAT" — usually doesn't work for a foreign entity. Under current CTPAT eligibility rules, importer membership runs to active U.S. importers and non-resident Canadian importers with an active IOR number, a valid continuous bond, and a business office staffed in the U.S. or Canada. Commentators reading the rule note that a foreign IOR established outside Canada cannot presently satisfy the requirement by applying for CTPAT as an importer and must use a CTPAT validated broker instead (National Law Review).

CBP could expand eligibility later; nothing in the sources we checked says it has. Plan on one of two routes: a CTPAT validated broker making entry, or moving the IOR to a qualifying U.S. entity.

CBP opened a narrow delayed-compliance path, and it belongs to brokers. A broker must complete the Broker Delayed Compliance Request Form and email it no later than January 5, 2027 to DelayedCompliance@cbp.dhs.gov with the subject line "Broker Delayed Compliance Request - License Number: XXXXX," per CBP's delayed compliance page.

It applies to the changes in 19 CFR 111.29, the request must explain the need, approved brokers must keep making good-faith progress, and full compliance with U.S. IOR verification and recordkeeping is required by May 6, 2027. It does not give a foreign IOR extra time on the CTPAT requirement itself.

Pull a 12-month entry list and confirm the IOR number on every line. Many brands find entries filed under a supplier's or forwarder's IOR that nobody internally approved — common on DDP terms, which also affects who can claim duty refunds later (see DDP and duty drawback eligibility).

Ask every broker you use, in writing, whether it is CTPAT validated today. Then review your powers of attorney: if a broker will act as IOR on your behalf, the principal has to be identified and that principal's IOR number has to match an active CBP Form 5106 record.

Start gathering ownership documentation now, because your broker will need it before it files a "Y." And if you are considering moving the IOR to a U.S. entity, map the downstream work — continuous bond, Form 5106, ISF filer instructions, and your duty refund and drawback records all key off the IOR.

CBP has posted a Foreign Importer of Record Interim Final Rule Reference Guide and an Overview in its documents library, and directs questions to ForeignIOR@cbp.dhs.gov.

The IOR named on the entry is the anchor for duty liability and for the entry records that support refund and drawback claims later. The interim final rule does not change drawback law — 19 CFR part 190 still allows a party other than the importer to claim where drawback rights are transferred, and payment goes to the claimant, who may be the manufacturer, producer, intermediate party, importer or exporter.

The practical risk is discontinuity. If you switch IOR entities mid-year to satisfy the new test, keep both entity histories mapped — entry summaries, bonds and transfer documents — so older entries stay claimable when you file. Evana's duty drawback service works off entry-level records, and a clean IOR history is what keeps those claims supportable.

First, identify the legal entity named as IOR on your last 12 months of entries and test it against the U.S. IOR criteria. Second, get written confirmation of CTPAT validation from each broker you use. Third, assemble ownership documentation so your broker can support the declaration it is about to make for you. Fourth, decide whether to restructure the IOR and, if so, sequence the bond, 5106 and POA changes before the deadline rather than during peak season.

If restructuring changes who holds the entry records, it also changes who can document a future refund claim. Evana's refund estimator is a quick way to see what your current entries are worth before you move anything.