3.90If Biometric activities are outsourced, Institutions should ensure that:
a.They obtain the necessary Data concerning Biometric identification/verification from the Outsourcing Service Providers and take adequate steps to satisfy themselves that copies of identification Data and other relevant documentation will be made available from the Outsourcing Service Providers upon request and without delay; and
b.The Outsourcing Service Provider complies with the Institution’s Customer due diligence and record-keeping requirements.