KYC form: Client Onboarding Regulatory Requirements
The Client Onboarding Regulatory Requirements carries 4 published figures read from 3 sources' own pages, from 30 to 100 day, read 17 October 2026.
Retainvo sells its own paid plan in this category (our pricing). It is not counted here: every figure in this index is another provider's own published price, read from its own page.
3 of the 16 named sources read in full publish a figure; 13 publish none, read 17 October 2026.
By duty
| Breakdown | Median | Range | Sources |
|---|---|---|---|
| dutySafeguards notification delay extension | 60day | 60 to 60day | 1 |
| dutySafeguards Rule breach notification | 30day | 30 to 30day | 1 |
| dutyRegulation S-P annual notice exception | 100day | 100 to 100day | 1 |
| dutyRegulation S-P opt-out period | 30day | 30 to 30day | 1 |
Every figure, with its source
One row per source: the figure the source's own page publishes, the page, and the day it was read. A figure that is not on a page we read is not on this one.
| Source | Figure | Breakdown | Read |
|---|---|---|---|
| eCFR 17 CFR part 248, Regulation S-P | 100day | Regulation S-P annual notice exception | 2026-10-17 |
| eCFR 16 CFR part 314, FTC Safeguards Rule | 60day | Safeguards notification delay extension | 2026-10-17 |
| FTC, Safeguards Rule: what your business needs to know | 30day | Safeguards Rule breach notification | 2026-10-17 |
| eCFR 17 CFR part 248, Regulation S-P | 30day | Regulation S-P opt-out period | 2026-10-17 |
The sentence each figure was read from (4)
- eCFR 17 CFR part 248, Regulation S-P, read 2026-10-17:
If you no longer meet the requirements of paragraph (e)(1) of this section because you change your policies or practices in such a way that § 248.8 does not require you to provide a revised privacy notice, you must provide an annual privacy notice within 100 days of the change in your policies or practices that causes you to no longer meet the requirement of paragraph (e)(1) of this section.
- eCFR 16 CFR part 314, FTC Safeguards Rule, read 2026-10-17:
The delay may be extended for an additional period of up to 60 days if the law enforcement official seeks such an extension in writing.
- FTC, Safeguards Rule: what your business needs to know, read 2026-10-17:
Section 314.4(j) of the Safeguards Rule requires financial institutions to notify the FTC as soon as possible – and no later than 30 days after discovery – of a “notification event.” For purposes of the Rule, a “notification event” is a security breach involving the unauthorized acquisition of at least 500 consumers’ unencrypted information.
- eCFR 17 CFR part 248, Regulation S-P, read 2026-10-17:
The consumer is given 30 days from the date the notice is mailed to elect to opt out by any reasonable means.
Read in full, publishes no figure
13 named sources were read in full on the dates shown and print no usable figure. They are counted, never filled in.
- eCFR 31 CFR 1020.220, customer identification program requirements for banks, read 2026-10-17: read in full and no accepted figure on the page
- eCFR 31 CFR 1010.230, beneficial ownership requirements for legal entity customers, read 2026-10-17: read in full and no accepted figure on the page
- FinCEN beneficial ownership information, read 2026-09-11: read in full and no accepted figure on the page
- IRS, protect your clients, protect yourself, read 2026-09-18: read in full and no accepted figure on the page
- IRS Security Summit, read 2026-09-25: read in full and no accepted figure on the page
- FINRA Rule 2090, know your customer, read 2026-10-02: read in full and no accepted figure on the page
- FINRA Rule 4512, customer account information, read 2026-10-17: read in full and no accepted figure on the page
- FTC, fighting identity theft with the Red Flags Rule, read 2026-10-17: read in full and no accepted figure on the page
- CFPB Regulation P, privacy of consumer financial information, read 2026-10-09: read in full and no accepted figure on the page
- FinCEN Federal Register notices, read 2026-10-09: read in full and no accepted figure on the page
- FCA Handbook SYSC 6.3, financial crime, read 2026-10-17: read in full and no accepted figure on the page
- IRS Publication 4557, safeguarding taxpayer data, read 2026-09-20: read in full and no accepted figure on the page
- IRS Publication 1345, handbook for authorized e-file providers, read 2026-09-20: every candidate on the page was refused
Methodology
Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2).
3 of the 16 named sources that could be read published a usable figure; 13 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere.
The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source for each breakdown it prices, in day (a source's median where its page yielded several accepted sentences for one breakdown), so a page that gives figures for several breakdowns gives one for each and N counts 4 figures, never sentences; 20 candidate sentence(s) were refused by a reviewer with the reason recorded.
The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per regime per duty - the identifying items that must be obtained, the verification method and its deadline, the beneficial-ownership threshold, the notices that must be given, the records that must be kept and for how long, and the security programme the holder of those records must run - each quoted from the rule or the regulator's own page with its citation and effective date; the derivation is the cross-regime comparison nobody publishes: what a bank, a broker, a tax preparer, a law firm and an unregulated agency each actually owe at onboarding, side by side, and which of the software products in the index carry the step
20 candidate sentences on these pages were refused by a reviewer; each refusal and its reason is recorded in the review ledger.
Sources (16)
- eCFR 31 CFR 1020.220, customer identification program requirements for banks(the publisher's own terms; quoted for reporting and comment)
- eCFR 31 CFR 1010.230, beneficial ownership requirements for legal entity customers(the publisher's own terms; quoted for reporting and comment)
- FinCEN beneficial ownership information(the publisher's own terms; quoted for reporting and comment)
- eCFR 16 CFR part 314, FTC Safeguards Rule(the publisher's own terms; quoted for reporting and comment)
- FTC, Safeguards Rule: what your business needs to know(the publisher's own terms; quoted for reporting and comment)
- IRS, protect your clients, protect yourself(the publisher's own terms; quoted for reporting and comment)
- IRS Security Summit(the publisher's own terms; quoted for reporting and comment)
- FINRA Rule 2090, know your customer(the publisher's own terms; quoted for reporting and comment)
- FINRA Rule 4512, customer account information(the publisher's own terms; quoted for reporting and comment)
- eCFR 17 CFR part 248, Regulation S-P(the publisher's own terms; quoted for reporting and comment)
- FTC, fighting identity theft with the Red Flags Rule(the publisher's own terms; quoted for reporting and comment)
- CFPB Regulation P, privacy of consumer financial information(the publisher's own terms; quoted for reporting and comment)
- FinCEN Federal Register notices(the publisher's own terms; quoted for reporting and comment)
- FCA Handbook SYSC 6.3, financial crime(the publisher's own terms; quoted for reporting and comment)
- IRS Publication 4557, safeguarding taxpayer data(the publisher's own terms; quoted for reporting and comment)
- IRS Publication 1345, handbook for authorized e-file providers(the publisher's own terms; quoted for reporting and comment)
Cite or embed this figure
Cite or embed this figure
The Client Onboarding Regulatory Requirements carries 4 published figures read from 3 sources' own pages, from 30 to 100 day, read 17 October 2026.
3 of the 16 named sources read in full publish a figure; 13 publish none, read 17 October 2026.
Client Onboarding Regulatory Requirements, duty Safeguards notification delay extension: median 60 day across 1 source, read 17 October 2026.
Client Onboarding Regulatory Requirements, duty Safeguards Rule breach notification: median 30 day across 1 source, read 17 October 2026.
Client Onboarding Regulatory Requirements, duty Regulation S-P annual notice exception: median 100 day across 1 source, read 17 October 2026.
Client Onboarding Regulatory Requirements, duty Regulation S-P opt-out period: median 30 day across 1 source, read 17 October 2026.
Cite as: "Retainvo Client Onboarding Regulatory Requirements", updated 2026-10-18, https://retainvo.com/datasets/client-onboarding-regulatory-requirements/.
Download the CSV (4 rows, computed 2026-10-18)