All reported breaches or potential breaches will be investigated by the Privacy Officer and the investigative agents the Officer assigns, who will take such actions as they deem appropriate in the investigation, and if necessary, remediate the situation.