You are required to inform the affected users, however.