The applicant, Tamara James, claimed that she created an account with Amazon.com.ca$,$ Inc., but forgot her password. She requested access to account receipts and audio recordings of her interactions with Amazon customer support, among other customer account data. Amazon tried to assist James in resetting the password, but James declined to accept that assistance.

James filed a complaint to the Privacy Commissioner and corresponded with the Amazon Privacy Officer, Amazon Executive Customer Relations employees, and Amazon counsel to try to resolve the issue. Amazon determined that it could not verify James as the requestor because James refused to follow the instructions provided to reset her password, and the information James gave did not match the information on Amazon's server.

The Commissioner's Report determined that "Amazon provided James with a fair and reasonable response to her access request when it could not verify her identity." James then filed the case in Federal Court under Section $14$ of the PIPEDA

what will you suggest to Human resource to this?