Answer:
Follow the "tip" statute in the RFPA. Initially, only reveal the name, address, account number of the customer and a description of the suspected illegal activity. They can get a subpoena or search warrant from there. Do not turn over actual records or more information until then.
-----------------------------
Learn more about Mary Beth Guard’s webinar So you got a subpoena!