Section 326 of the USA PATRIOT Act mandates that financial institutions implement a Customer Identification Program (CIP). A key component of this program is recordkeeping. The rule requires that identifying information collected from the customer at account opening must be retained for a period of five years after the date the account is closed. This ensures that law enforcement has access to critical information for a reasonable period during investigations.

A. This misrepresents the information-sharing provisions of the PATRIOT Act; it's not about FinCEN providing information to the institution for recordkeeping purposes.

B. This relates to voluntary information sharing between financial institutions under Section 314(b) of the PATRIOT Act, not record retention requirements.

C. This states a ten-year retention period, which is incorrect. The mandated period under Section 326 for CIP records is five years.

1. ACAMS. (2023). Certified AML FinTech Compliance Associate (CAFCA) Study Guide. Chapter 3: The US PATRIOT Act and its Implications, Section: Customer Identification Program (CIP), p. 45. "Records must be retained for five years after the account is closed."

2. Financial Crimes Enforcement Network. (2003). Final Rule: Customer Identification Programs for Banks, Savings Associations, Credit Unions and Non-Federally Regulated Private Banks. 31 CFR § 103.121(b)(3)(ii). "The bank must retain the information...for five years after the date the account is closed."