Similar point to above; leaving the handling to the dao implementation because the business rules may vary at different institutions.  General expectation is doing nothing and returning a message to the user (via a specific run-time exception that I need to document).