We told them that they would have to carry out and submit their risk assessment, and that we did not expect them to be able to find absolutely everyone identified, and that if they were missing a few people when they did their assessment, there would not be any negative repercussions. We said that it was up to them to perform the assessment on the basis of the information they were receiving and on information they might be able to find using their own software.
