7/17/26, 7:34 PM Gmail - NOTICE OF ESCALATION: Overdue PIPA Disclosure & Evidentiary Audit — Case Ref: Prohibited Action To ensure this disclosure is complete and compliant under PIPA, please confirm that the secure digital package includes: 1. The complete, unredacted clinical file and chart notes. 2. The digital transmission logs (including fax/metadata confirmations) for the Occupational Fitness Assessment sent to BCRTC on March 26, 2026. 3. All internal and external records of disclosure and authorization verifications associated with my file. 4. The complete billing ledger and the explicit digital records/invoice details for Invoice 315113 (which was omitted from the physical package previously provided). Please send the secure download link as soon as the package is finalized. Sincerely, Mark Holand marktholand@gmail.com [Quoted text hidden] ForeMed Medical Clinic <registration@secure.foremedclinic.com> Fri, Jul 17, 2026 at 7:27 PM To: mark holand <marktholand@gmail.com> Dear Mark, Thank you again for your patience while we completed our internal investigation regarding your privacy concern. Following a thorough review, we gathered and examined all of the relevant information related to your request. During our investigation, we confirmed that signed consent forms were on file for previous disclosures to third parties, including Canada Life Insurance and WorkSafeBC. Our investigation determined that the BCRTC Occupational Fitness Assessment (OFA) Form was faxed to BCRTC in error. The OFA Form had been completed by Dr. Ade and was in the staff member's pending work queue for transmission. During our investigation, the staff member explained that she believed the OFA Form had been completed with your consent based on previous requests involving WorkSafeBC and insurance-related documentation, for which we had your signed consent on file. In addition, the third page of the OFA Form provided to us by BCRTC states, "Please find included the completed Authorization form allowing disclosure of this information to BCRTC Occupational Health." Normally, the employer obtains the employee's signed authorization before forwarding the form to the clinic; however, that did not occur in this instance.Unfortunately, because of the unfortunate alignment of all these facts, the staff member made the assumption you had given consent for this latest disclosure, and the OFA Form was sent without your authorization | am sending the documents responsive to your request via our Cortico secured email directly from your chart. It will need your PHN number and date of birth to open the documents. Certain information has been redacted to protect the personal information of third parties, as required under the Personal Information Protection Act (PIPA). The enclosed records include the information relevant to our investigation and the disclosure of your personal information. https://mail.google.com/mail/u/0/?ik=7 1cd554d90&view=pt&search=all&permthid=thread-a:r61020039387912499 11 &simpl=msg-a:r499483969828157... 5/6