Dr. Alan Wall:

As the Deputy knows, we have difficulty getting data for institutions because GDPR has confused that, so regarding the capacity to get data or the capacity to apply penalties at some level where there is non-compliance, we do not have any of that. What we have, effectively, is a number of agreements which do not have underpinning. Therefore, it will underpin things like an annual governance statement and financial declarations. In fairness, if the Deputy does not mind, I will defer to Mr. Beausang on the detail.