Which guidelines provide the framework for responding to law enforcement requests?

• A. Policies and Procedures
• B. Risk Assessment
• C. Transaction Records
• D. Grand Jury Subpoena

Answer: (A)

Internal policies and procedures define how a bank handles law enforcement requests. They lay out who is authorized to respond, what information can be disclosed, and the exact steps to take—such as verifying the requester’s authority, logging the request, preserving records, and coordinating with counsel. This framework ensures consistent, compliant, and auditable responses while protecting customer privacy and meeting legal obligations.

Risk assessment guides overall risk management and does not establish the specific response process. Transaction records are data kept for compliance and audit purposes, not the governing framework for responding to requests. A grand jury subpoena is a legal instrument that may trigger a response, but the procedure for handling it comes from the bank’s policies and procedures, not from the subpoena itself.