A former boss of mine said that you can always delegate responsibility but not accountability. It seems to me that there's a bit of murkiness around decision and veto rights, who makes a recommendation and who, ultimately, decides. On one hand, if it's the department deciding on, as an example, bare trusts.... The testimony is that the CRA can decide on its own to not implement a decision by the government or the finance department. It seems to me that there's a bit of unclarity, or it's unclear about who actually is the final authority on some of these questions. We're going to poke a bit more on that later, I hope.
With respect to these privacy breaches, the CRA says that these are a result of external breaches. There was no compromise to the CRA's systems as a result of these 31,000 cases. Is that...?