If that scenario were accurate, could it cause problems that might fall under your jurisdiction or under the Privacy Act?
I'm drawing a parallel with what happened to Véronique Cloutier, who found out that 400 individuals had needlessly accessed her medical file.
It seems that military personnel don't know who or how many individuals have accessed their file. For example, it might be someone who is the subject of a complaint made by that military member. If that's the case, what problems could arise?