 The Privacy Commissioner can investigate potential breaches of the IPPs, PRPPs, or other Privacy Act provisions, on his or her own initiative or on receipt of a complaint.The onus is on the complainant to establish that an agency's action both breached a privacy principle and caused harm.Harm can include financial loss, adverse effect on rights or interests, or a significant injury to feelings.