Section 37 — Privacy Act: Investigation in respect of sections 4 to 8

The Privacy Commissioner may, from time to time at the discretion of the Commissioner, carry out investigations in respect of personal information under the control of government institutions to ensure compliance with sections 4 to 8. Sections 31 to 34 apply, where appropriate and with such modifications as the circumstances require, in respect of investigations carried out under subsection (1). If, following an investigation under subsection (1), the Privacy Commissioner considers that a government institution has not complied with sections 4 to 8, the Commissioner shall provide the head of the institution with a report containing the findings of the investigation and any recommendations that the Commissioner considers appropriate. Any report made by the Privacy Commissioner under subsection (3) may be included in a report made pursuant to section 38 or 39. The Privacy Commissioner may coordinate his or her activities under subsection (1) with those of the National Security and Intelligence Review Agency under any of paragraphs 8(1)(a) to (c) of the National Security and Intelligence Review Agency Act to avoid any unnecessary duplication of work.