accept an enforceable undertaking from an entity where they’ve cooperated either with a Commissioner initiated investigation (CII), enquiry into a data breach incident or privacy complaint investigation
issue a report of a CII
make determinations on privacy complaints where conciliation has not resolved a matter.
