Verification of identity must be done on—
(a) the basis of documents, data, or information issued by a reliable and independent source; or
(b) any other basis applying to a specified situation, customer, product, service, business relationship, or transaction prescribed by regulations.