Tariq is investigating Janine, an employee suspected of stealing funds.

Bank records are generally private, nonpublic records. A fraud examiner normally cannot obtain a suspect’s personal bank records directly from a financial institution merely because fraud is suspected. The preferred method is to obtain the subject’s written consent, but if Janine refuses, Tariq might need legal process, such as a subpoena, court order, or other procedure recognized in the relevant jurisdiction. Option A is wrong because banks are not automatically required to release customer records to private investigators. Option B is not generally required. Option D is incomplete because oral consent is usually inadequate for sensitive financial records and would not reliably protect the bank or examiner. Therefore, option C is the most accurate statement.