Victoria's Information Commissioner is investigating whether VicForests breached the state's Privacy and Data Protection Act when it allegedly hired a private investigator to spy on activist Sarah Rees about 10 years ago.