321 (1) After conducting a review under section 317 or 318, the Commissioner may, (a) if the review relates to a complaint into a request by an individual under subsection 313 (1) for access to a record of personal information, make an order directing the service provider about whom the complaint was made to grant the individual access to the requested record; (b) if the review relates to a complaint into a request by an individual under subsection 315 (2) for correction of a record of personal information, make an order directing the service provider about whom a complaint was made to make the requested correction; (c) make an order directing any person whose activities the Commissioner reviewed to perform a duty imposed by this Part or the regulations; (d) make an order directing any person whose activities the Commissioner reviewed to cease collecting, using or disclosing personal information if the Commissioner determines that the person is collecting, using or disclosing the information, as the case may be, or is about to do so in contravention of this Part or the regulations or an agreement entered into under this Part; (e) make an order directing any person whose activities the Commissioner reviewed to dispose of records of personal information that the Commissioner determines the person collected, used or disclosed in contravention of this Part or the regulations or an agreement entered into under this Part but only if the disposal of the records is not reasonably expected to adversely affect the provision of services to an individual; (f) make an order directing any service provider whose activities the Commissioner reviewed to change, cease or not implement any information practices specified by the Commissioner, if the Commissioner determines that the information practices contravene this Part or the regulations; (g) make an order directing any service provider whose activities the Commissioner reviewed to implement information practices specified by the Commissioner, if the Commissioner determines that the information practices are reasonably necessary in order to achieve compliance with this Part and the regulations; (h) make an order directing any person who is an agent or employee of a service provider, whose activities the Commissioner reviewed and that an order made under any of clauses (a) to (g) directs to take any action or to refrain from taking any action, to take the action or to refrain from taking the action if the Commissioner considers that it is necessary to make the order against the agent or employee to ensure that the service provider will comply with the order made against the service provider; or (i) make comments and recommendations on the privacy implications of any matter that is the subject of the review. Terms of order (2) An order that the Commissioner makes under subsection (1) may contain the terms that the Commissioner considers appropriate. Copy of order, etc. (3) Upon making comments, recommendations or an order under subsection (1), the Commissioner shall provide a copy of them, including reasons for any order made, to, (a) the complainant and the person about whom the complaint was made, if the Commissioner made the comments, recommendations or order after conducting a review under section 317 of a complaint; (b) the person whose activities the Commissioner reviewed, if the Commissioner made the comments, recommendations or order after conducting a review under section 318; (c) all other persons to whom the order is directed; (d) the body or bodies that are legally entitled to regulate or review the activities of a service provider directed in the order or to whom the comments or recommendations relate; and (e) any other person whom the Commissioner considers appropriate. No order (4) If, after conducting a review under section 317 or 318, the Commissioner does not make an order under subsection (1), the Commissioner shall give the complainant, if any, and the person whose activities the Commissioner reviewed a notice that sets out the Commissioner’s reasons for not making an order.