The Commissioner can hear from or get information from anyone they think might know something relevant before deciding whether to issue a notice or change an existing one. You might be one of the people the Commissioner wants to hear from if you have information about a privacy breach. The Commissioner follows rules outlined in sections 86 to 90 when getting this information, as if they were investigating something under Part 5.

The Commissioner can decide how to go about getting this information, except in cases where sections 86 to 90 say otherwise. This means the Commissioner has some flexibility in how they get the information they need. You can find more information about this in the relevant sections of the law.