Agents must verify customer identity before sharing any account or personal information.