The Federal Deposit Insurance Corporation, the Office of the Comptroller of the Currency, and the National Credit Union Administration, with the concurrence of the Financial Crimes Enforcement Network, issued an order granting an exemption from a requirement in the Customer Identification Program (CIP) Rule implementing Section 326 of the USA PATRIOT Act. The exemption permits banks and credit unions to use an alternative method to obtain a customer’s taxpayer identification number (TIN) from a third party, rather than collecting it directly from the customer before opening an account. The order applies to accounts at all entities supervised by the three agencies and is optional. The agencies pointed to changes in how consumers access financial services and increased reluctance to provide full TINs, including due to data breaches and identity theft concerns, while noting that institutions must still maintain risk-based CIP procedures that enable them to form a reasonable belief they know the true identity of each customer.