Thank you, Minister.
As I think I mentioned in one of the earlier answers, if there's an instance of non-compliance found by either the Privacy Commissioner or us, there can be inquiries done, questions asked and requirements for a department or agency to report further on mitigating factors in their annual report to follow up on that. In extreme cases, there can be a revocation of delegated authority, but I'm not aware of ever getting to that point.