Excuse me, but subsection 23(1) states that the commissioner cannot deal with a disclosure when it involves another federal act. The person is protected, agreed, but the role of the commissioner, of your organization, stops there.
On April 6th, 2017. See this statement in context.