Some things we leaned when we implemented this:
1. We tried to run this on all consumer accounts and it was a nightmare. No matter how much we tuned the parameters the volume was too much and the majority were false positives.
2. We settled on private banking customers, commercial accounts (Entities, signers, and beneficial owners), trusts and trustees, and those consumer accounts which alerted.
3. We were using a vendor which allowed us to exports results to a PDF and attached the results to our investigations. For Google searches we converted the results to a PDF and attached to our investigations.
4. I don't believe UDAAP applies here.
_________________________
"100 victories in 100 battles isnt the most skillful. Subduing the other's military w/o battle is the most skillful." Sun-Tzu