CDD is required when a business that is covered by AML regulations starts a business relationship with a customer or potential customer. It’s also required if their relationship with an existing customer ‘materially changes’ and  they need to re-verify a customer identity and risk profile.