The OIPC has not been conducting audits of individual clinics. Investigations are launched upon receipt of a complaint. If a patient, collaborating clinic, or employee feels compelled to report a mishandling of patient information, the OIPC will examine that clinic’s policies and procedures as well as the reported incident.The Health Information Act specifically states that:“An individual who makes a request to a custodian for access to or for correction or amendment of health information may ask the Commissioner to review any decision, act or failure to act of the custodian that relates to the request.”