Mr. Cyril Roux:

It depends on .... of the case, really. Some breaches are inadvertent and some breaches are willful. Some breaches are ... come as a result of insufficient or defective processes and procedures, some not. Some firms will self-disclose and they will come to us and say "We have had this breach and we are corrected them". Some will actually try to hide, so you know, suppose you have a firm which has normally good controls and has an inadvertent breach and they come straight to us, it will treat them differently than a bank that is actually, you know, willingly breaching things and not telling us and I think we need to always move on two fronts. So, we have to decide whether we go to ... we refer this to enforcement but that's ... referring to enforcement doesn't solve the issue in itself. So, you have to solve it on a supervisory front as well.