All of the bank regulatory agencies have similar language in their SAR filing regulations, but here's the relevant excerpt from the FDIC's:
(c) Reports to state and local authorities. A bank is encouraged to file a copy of the suspicious activity report with state and local law enforcement agencies where appropriate.
Note the word, "encouraged." That's pretty unusual language in a federal regulation, but it's clearly left up to you.
It's worth noting that state and local law enforcement agencies have access to SAR information through the
Gateway program. In short, there is no practical need to give them a paper copy of the SAR. If you tell them the SAR was filed they have access to the system and can search for SARs filed by your bank. However, if you file on paper this particular SAR may not be in the system for several weeks.
Also, several states have statutes of their own that directly deal with a bank's reporting of suspected violations of law. It's important to determine whether your state has such a statute and allows or encourages such disclosures to state or local LEAs.
A critical point regarding the existence of the federal safe harbor for reporting suspicious activity: You have to file the SAR before your disclosures are protected. If you provide information to state or local law enforcement before you file a SAR, any protections you may have are under state, not federal, law.
In candor, your SAR filing policy should indicate whether your institution will file copies with state and local law enforcement agencies so these decisions are not made in "one off" situations.