Where the clients of captive insurance firms are limited to related companies, captive insurers are exempted from the due diligence requirement for client records.