The Federal Deposit Insurance Corporation, the Office of the Comptroller of the Currency and the National Credit Union Administration, with the concurrence of the Financial Crimes Enforcement Network, issued an order exempting supervised banks and credit unions from the Customer Identification Program (CIP) rule requirement to obtain a customer’s taxpayer identification number (TIN) directly from the customer before opening an account. The exemption allows institutions to use an alternative method to obtain TIN information from a third party. The order applies to accounts at all entities supervised by the three agencies and is optional. It does not change the underlying CIP rule requirement, which implements Section 326 of the USA PATRIOT Act, for banks and credit unions to maintain risk-based CIP procedures that support a reasonable belief they know the true identity of each customer; the exemption is framed as providing flexibility amid changes in how consumers access financial services and increased customer reluctance to provide full TINs due in part to data breaches and identity theft concerns.