The Privacy Commissioner is working through some of these schemes right now.
As we mentioned, we're working with her office to develop a set of brief notification guidelines. But it's open to the commissioner to issue findings on a case-by-case basis as these things come up. I think we've recently seen that she initiated an investigation into T.J. Maxx.
These things will result in a finding that says in this kind of a case, when this much information goes forward, you have a duty to notify and this is what the notification looks like. I think those tools are already there.