Legislation is placing an increasing burden on the financial services industry both to know its customers and to minimise personal data held. How do providers resolve that apparent contradiction and ensure that their accounts are safe, both for consumers and businesses? What are the key approaches and how can financial service providers keep up with the rate of technological progress and criminals?