Federal law requires all U.S. financial institutions to secure and maintain all records and supporting documentation used m suspicious activity reporting for how many years?

A 2-year retention period falls short of the federal minimum - the BSA explicitly requires a 5-year retention period for all SAR-related records and documentation.

The Bank Secrecy Act and its implementing regulations at 31 CFR 1020.320 require U.S. financial institutions to retain suspicious activity reports and all supporting documentation for a minimum of 5 years from the date the SAR was filed, ensuring records remain available for law enforcement review and examination.

A 10-year requirement is not mandated specifically for SAR records - while some other BSA-related records may carry different retention timelines, the SAR retention standard is 5 years under 31 CFR 1020.320.

A federal retention requirement does exist and is explicitly codified - 31 CFR 1020.320 mandates that financial institutions maintain SAR records for a minimum of 5 years, making 'no requirement' factually incorrect.