It depends on the context.
If a public body or enterprise disclosed personal information, the commission would deal with it through an investigation. People can file complaints with the commission, but the commission can also investigate on its own initiative to determine whether the disclosure was in compliance with the act or not. If it wasn't, the commission has the authority to order that the disclosure cease if it is ongoing. The commission also has the authority to order that the enterprise or public body put practices or mechanisms in place to prevent similar situations in the future.
If I understood your question correctly, that's how we would deal with the situation you described.