CDD is a legal requirement under AML regulations involving verifying the identity of clients using reliable documentation, assessing money laundering risks, and ensuring clients are not involved in illicit activities. This verification process helps protect businesses from unknowingly facilitating financial crime.