The issue of whether the recipient of services can be penalised for non-compliance by the vendor remains open and unanswered