no obvious connection to a training-room server closet — could be used to exempt the company from
that investigation altogether.

10. Post-Denial Escalation — The Privacy Breach and Weaponization of Leaked
Medical Information

The pattern documented in Sections 2-9, above, did not end with the March 23, 2026 denial letter. That
same date, BCRTC formally denied the worker's related short-term disability claim — supplying an
immediate strategic motive — and BCRTC Occupational Health then launched a medical data acquisition
campaign against a physician who had never been asked for, and never received, the worker's consent.

On March 24, 2026, Adebayo Adenekan (Occupational Health Specialist, BCRTC) sent a formal
Occupational Fitness Assessment request to Dr. Groeborode Ademiluyi. Adenekan’s cover letter told the
clinic. an authorization already existed:

“Please find included the completed Authorization form allowing disclosu
‘Occupational Health.?— A. Adenekan to Dr. G. Ademiluyi, March 24, 2026

The packet also instructed the clinic to fax its invoice directly to BCRTC under the BCMA fee schedule —
prioritizing fast corporate payment ahead of any check on patient consent.

On March 26, 2026, ForeMed Medical Clinic faxed the completed disclosure back to BCRTC {invoice “inv
315113”). Page 4 of that document, “PART 3: EMPLOYEE CONSENT,” is-entirely blank — no signature, no
date, no verification of any kind. BCRTC’s own file therefore proves that the medical information it went
on to collect, log, and circulate was disclosed without a signed consent, notwithstanding the
representation made two days earlier that a “completed Authorization form” existed.

Evidence: Exhibits Q & R — Ademiluyi_ Holand. pdf (OFA request, March 24, 2026; disclasure with blank consent field,
p.4, March 26, 2026).

Within twenty-four hours of receiving the unconsented file, Adenekan began an unprompted calling
campaign — a call the day of the breach itself (March 26, 2:23 P™M), followed by missed calls on March 27
at 8:53 AM and March 30 at 10:35 AM.

Evidence: Exhibit S — BCRTC Phone Log 2.jpq.

On April 2, 2026, Adenekan used the leaked file as the basis for an escalated Medical Questionnaire,
permanently logging clinical and psychological details — including lifting and walking restrictions, and
indicators of agitation, anxiety, insomnia, and Poor concentration — into the worker's HR file, again
without any signed consent underlying the original disclosure.

On April 24, 2026, Labour Relations Advisor Navi Gill — the same Gill who received the January 26, 2026
removal proposal described in Section 2, above — issued a formal Notice to Comply, cross-referencing the
unconsented March 24-26 disclosure and the April 2 Questionnaire, and designating the worker Absent
Without Leave for declining to cooperate with further extraction from the breached file.

Evidence: Exhibit T — 2026-04-24 Notice to Comply.pdf.
| “\uln serious jeopardy. of being terminated.” —'k. Payne to. M. Holand, May 41,2026:
Director of Labour Relations Kevin Payne — the same Payne copied on the January 26, 2026 removal

proposal — escalated on May 1, 2026, citing the exact prognosis harvested from the March 26 disclosure
and maintaining the AWOL designation.

Evidence: Exhibit U — 2026-05-01 LT fetter (3057683.1 pap.
Tracking attempts continued into late May (Exhibit V), before the worker filed formal complaints with the
Office of the information and Privacy Commissioner, ForeMed, and TransLink/BCRTC’s privacy office on

000292