Or that it be sent to the commissioner, as you said. A notice should be sent immediately to the commissioner, who could decide whether that information should be sent to the victims of the theft, for example, or whether there should be a public announcement that someone has lost the information. The commissioner could decide, rather than the organization. What do you think?
On February 1st, 2007. See this statement in context.