In the context of the act and regulations, ‘business relationship’ must be understood to mean a ‘high-risk relationship.’ It refers to the risk-mitigation strategy a DPMS reporting entity applies to a supplier or customer for whom the DPMS has submitted two reports (e.g. one large cash transaction report and one suspicious transaction report) during the previous five years.