All right. Obviously, I'm hung up because of what's recently happened on this whole issue of notification. There were individuals who found vast amounts of personal information, everything from names to social insurance numbers. Should people be notified?
The answer that seems to be coming out is that if there are signs of fraudulent activity, yes, we're going to talk. But other than that, there's no obligation and it does not even create an obligation. There's no obligation to tell the Privacy Commissioner, clients, or customers, whether you're a foreign company or a national company.