KYC updates: what to revisit when client information changes

Draft date: 8 November 2026. Author: Kyclara Editorial Team.

When relevant client information changes, a KYC update should examine the effect on the file rather than simply replace a document. Identify what changed, verify the affected information and record the assessment under the applicable procedure. A new identity document and a new ownership structure do not necessarily require the same work.

This guide offers a method for organising updates at an intermediary. It does not establish a frequency suitable for everyone or specify consequences for an incomplete case. These depend on risk, legislation and the obliged entity's procedures. Scheduled reviews and event-triggered updates should be coordinated without treating them as identical.

Identify the event and its meaning

Record where the information came from: a client communication, a document obtained or an issue identified during a check. Note when it was received and, where known, when the change occurred. A change made months earlier but reported today should not appear to have occurred at the client's latest portal login.

Describe the change precisely. “Personal information update” might cover a simple contact correction or relocation to another country. The owner should understand which parts of the file are affected. If its significance is unclear, open a focused enquiry, keeping the information received separate from its interpretation. This distinction helps another reviewer understand whether an assessment is based on a confirmed event or a question still being investigated.

Compare the new version with its predecessor

Before replacing an attachment, identify the current document and the reason for updating it. Verify that the new file is readable and concerns the right person. Check whether the client has also changed related information. Merely having a more recent document does not demonstrate that every previous answer remains current.

Maintain a chronology consistent with retention rules. An earlier version may explain a past decision, but should not be presented as current. Use references distinguishing the periods and showing which text informed the new assessment. Duplicate copies without an identifiable purpose are unnecessary. Current documents should be easy to locate without making earlier evidence impossible to reconstruct where it must be retained.

Determine the necessary scope of review

A change may need only a limited check or may affect the client's structure and assessment of the relationship. The competent function must determine the scope under applicable rules. Do not assume that every update requires complete onboarding again, but equally do not assume an automated confirmation of existing answers is enough.

If the company's representative changes, check the connection with relevant powers and documents. If ownership changes, assess the affected reconstruction rather than editing only the final name. The method should follow the substance of the change while keeping the dependencies described in the initial questionnaire visible. A review should explain which parts remain supported and which depend on new information.

Request additional information for a defined purpose

The client request should explain what needs updating and through which channel. Avoid instructions encouraging indiscriminate emailing of personal documents. A recognisable process also reduces the risk of confusing a genuine request with a deceptive message. The specific arrangements must be those prescribed by the intermediary.

Before requesting an attachment, check what is already held and whether it can be used in context. If a document is insufficient, identify the point requiring clarification. A precise request assists the client without suggesting a predetermined statement. If the additional information remains incomplete, the file should show what is missing and who owns follow-up.

An entirely invented example

The fictional intermediary “Ghiaia Investimenti” starts a scheduled review. The client uploads an updated identity document and confirms contact details, but also reports a new company entering the ownership structure. The operator cannot treat the whole exercise as simple replacement of the identity card.

They therefore open a review of the ownership reconstruction, link the necessary documents and refer the information to the competent function. The case distinguishes verification of the new document from the corporate change assessment still in progress. The example does not establish sufficient documents or a mandatory outcome: it shows how to prevent an updated document from concealing a more significant change.

Record the assessment and next review point

Once review is complete, retain a note explaining the information assessed and outcome. If the client's assigned profile changes, make the reasons understandable. If it remains unchanged, explain that confirmation follows examination of the change rather than an unchanged system score. The indicator supports the work; it does not describe the complete assessment.

Set follow-up under the procedure, including the next review where relevant. A significant future event may still require assessment before the scheduled date. Assign responsibility for identifying relevant information; a calendar date without an owner does not ensure ongoing monitoring. The handover should make open enquiries visible alongside the next planned review.

Do not turn delay into a retrospective correction

If information arrives late, record actual dates and assess the applicable consequences. Do not rewrite the old review as if it had already considered the new structure. If a previous decision requires correction, make clear that this is a later reassessment. The chronology should explain what was known at each point in time.

The Bank of Italy's customer due diligence provisions are the primary sector source for their addressees, including ongoing monitoring. The UIF describes the Italian framework. The practical criteria above introduce no additional intervals or deadlines and do not replace examination of the current text.

To compare this method with a workflow distinguishing initial review, updating and additional information, you can view Kyclara.