Let's go right back to what I was saying earlier. When there is a breach or an incident--let's call it an incident, you don't know if it's a breach yet--you don't know what the “it” is, and when you notify the police and the Privacy Commissioner, you have to do a fair amount of work to really get to the bottom of it before you know what has to be done. That involves a lot of back and forth. We rely upon the Privacy Commissioner. We have a very high regard for that office and for the Privacy Commissioner herself. We take not just their input, their guidance, but we also take their direction.
In the particular case you're talking about, there is an investigation going on, so until the investigation is done, it's hard to say either way. But I can tell you that generally you have to go through that process, because the facts of the case, every case, are going to be different. There are different ways you can notify. You can notify individuals directly through.... You can issue a press release, take out an ad in the paper. What's the appropriate way? There is no one template. There is an investigation going on in that particular case, but I can tell you one of the values of having the current system that we have—and we think it works—is it gives you the flexibility to determine the right course of action, quite frankly, in dialogue with the Privacy Commissioner. You can tailor it and you go from there.