In the U.S., while companies not identified by the BSA or the USA PATRIOT Act need not create an AML program to ensure compliance, their activity may still trigger the submission of a SAR by their bank.