Define the business purpose before collecting information
Collect information that is relevant to opening and managing the commercial account. Explain the purpose, limit access, and establish retention practices that fit your obligations and internal policy. Obtain professional advice for your specific legal and regulatory requirements.