When OSI investigations disclose potential violations of law, the information is referred to the appropriate law enforcement agency, such as the Office of Inspector General or the Department of Justice.