Each bank or other obliged entity determines itself the questions related to ascertaining due diligence information to be asked of its customers. The law specifies the minimum information that the obliged entity must retain about its customer. In addition to the minimum information, the obliged entity may request other information from the customer if it deems it necessary to obtain the information based on its risk assessment.