KYC information should be updated periodically, especially when there are significant changes in a customer's profile or risk profile.