Mr. Dale Sunderland:

The people were identified through the different investigative measures we undertake. However, there is a requirement in data protection law that if something is not compliant it must be put into compliance. Being able to see what went wrong after the fact is absolutely essential to ensuring the preventative measures are in place to ensure it does not happen again in the future.