Mr. William Prasifka:

That is what we have to look at. The code sets out a protocol and if the financial institution is properly resourced and staff are properly trained, they should be able to follow the protocol. If, at the end of the day, it is deemed to be insufficient protection, the code of conduct must be amended.