Under section 36 of the Ordinance, the Commissioner may carry out an inspection of any personal data system by a data user or a class of data users for the purposes of ascertaining information to assist him in making recommendations.