Can an institution tell a customer that an STR has been submitted?