I see.
All the witnesses said they got the message and would conduct privacy impact assessments.
Do you think it was negligence on their part, or an oversight? Why didn't they do the privacy impact assessments, in your opinion? I am not trying to criticize anyone. I am just trying to understand what happened. They all said they didn't do an assessment but would going forward. That tells me they recognize it's the right thing to do.