(CIP) requirements govern financial institutions’ “reasonable” procedures to gather and maintain customers’ identity information and run watchlist checks on them.