The new mandate requires banks to maintain two separate digital databases for sensitive information, forcing them to navigate a maze of high costs and technological hurdles. But they face a more fundamental problem – how to reconcile this with age-old bank secrecy obligations.