Sorry to post anon, I'm not at work and cannot remember my password, and I don't post very often.
If you haven't gotten this far in reading the guidelines, here's a preview.....Page 34 of the FFIEC BSA/AML Examination Manual released on June 30, 2005, Footnote 40 in the Recordkeeping Requirements and Retention section specifically state that “Banks are not required to make and retain photocopies of any documents used in the verification process. However, if a bank does choose to do so, it should ensure that these photocopies are physically secured to adequately protect against possible identity theft.
In addition, such photocopies should not be maintained with files and documentation relating to credit decisions to avoid any potential problems with consumer compliance regulations .” (emphasis added)