It's challenging, for sure. I think the directive does a very good job of outlining the requirements from all parties about the person in question and the organizations that need to subsequently follow that. I can't really comment on the oversight of that, as I've never been involved on the other side. I can say it's incumbent upon all parties involved—the departing organization, the new organization and the person involved—to ensure continuous compliance with these requirements.
