I might add something to what my colleague has said.
We have taken issue—and I realize you're talking about reporting now rather than recording—with the way the reporting requirement is framed and do believe there should be a materiality test there. We could envisage circumstances in which there would be a breach, and the matter could be resolved informally between the retailer in their setting and the customer in place. Although technically there's been a breach, the customer has determined that it doesn't bring risk of significant harm. I'm thinking particularly in the areas that are a bit more subjective, like humiliation, or what have you.
We could imagine a world in which it wouldn't seem necessary, then, to conclude that although we have an informal discussion with the customer, that is something that requires a formal notice both to the individual and to the commission. We can see a space in between, if you like, for informal resolution in situ between the merchant and the individual customer.