They do not specifically require a bank to snoop in the contents of a safety deposit box. What I believe they require is that the bank snoop on the customer in general as part of KYC. My understanding is that because of this, banks typically only offer a deposit box for established customers with a meaningful transaction history with the bank.