A typical investigation results in a Report of Findings. This report sets out whether or not there has been a violation of your privacy rights. If there has been a contravention, the Office tries to address your concerns and prevent a recurrence. Under the Privacy Act, however, the Commissioner cannot force an institution to take any specific action. The Office cannot levy fines, seek damages for an individual or initiate criminal or civil proceedings. March 2016