If you have had a chance to read through the final rule for Section 326 of the USA Patriot Act you will undoubtedly note that it is not as burdensome as it had been in the proposal stage. Institutions are now left with a requirement to develop a risk-based approach to a Customer Identification Program (CIP).