If it’s only 5 that’s true. That said those 5 can file. And additionally, the state could potentially file because there was no timely disclosure, although I’m not 100% sure about that one, bexause I know my GDPR better than my US privacy laws.