A law enforcement official calls a bank inquiring about a customer who is currently under...

The bank should request a formal letter be submitted to verify the validity of the request, as this is the best practice to ensure compliance with the law and protect customer privacy. The bank should not confirm or deny the existence of a customer relationship, nor provide any information without proper authorization. The bank should also not inform the board of directors before responding to the request, as this could compromise the confidentiality of the investigation or alert the customer.

ACAMS CAMS Certification Video Training Course, Module 2: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), Section 2.3: Data Protection and Privacy, Slide 10

ACAMS CAMS Certification Study Guide, 6th Edition, Chapter 2: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), Page 51