The OPC would be able to do certain things based on authorities that it are given under the act. I would start with the act to ensure that, if it is to require organizations to do such things, and if it is to allow the OPC to be auditing it, that would be the place to start.
On June 13th, 2022. See this statement in context.