There would still a case to be made against Harvard for not changing to be in compliance with new directives.
DB2