Updated customer identification rules are long overdue