Which statement regarding data privacy is the most accurate in the context of AML investigations?

Organizations are required to demonstrate that customers have opted into information sharing before submitting suspicious activity reports to relevant financial intelligence units (FIUs)

Any customer that is the subject of a suspicious report filing has the right to request redaction of their personal data

FIUs should document purposes for which personal data included on suspicious activity reports may be shared with other agencies

Data privacy laws prohibit information sharing between financial institutions for the purposes of AML investigations in all jurisdictions