Where there are signs of breaching disciplines or laws among staff, the institution may, within its terms of reference, appoint people to conduct investigations. The appointed investigators may review the surveillance data. However, to ensure the exercise of rights to information by the data subject, the PDPB recommends that institutions make it clear in their personal data collection statement, when there are signs of breaching law or disciplines, the institution or its appointees may access and review the surveillance data.