The USA Patriot Act requires banks, investment firms, insurance companies, and stock and commodities exchanges to put in place procedures to collect information on customers when they open accounts.