On our website, there is a decision in relation to a breach as it related to the code, which we subsequently conveyed in a bulletin of expectations for code participants. Essentially, it requires payment card network operators to be proactive in ensuring compliance with the code and to report to us on a timely basis any issues in relation to potential non-compliance. It also requires them to document and maintain evidence to demonstrate actions taken to ensure compliance with the code.
That would be an example where our supervision translated into an enforcement action, which we call a notice of decision, on the part of the commissioner, and then translated into requirements to ensure that non-compliance does not occur again.