e@ Exhibit W — OIPC / ForeMed / TransLink privacy complaint correspondence, Jun 22, 2026.

TACO, 840 AR ‘Gmail- URGENT: Formal Notice af Privacy Breach and Unauthormed OadosurColecton of Medical Records

Mi Gmail Sear

URGENT: Formal Notice of Privacy Breach and Unauthorized Disclosure/Collection af Medical Records
1 message

‘Mon, fun 22.2026 at 4:56 PM

To the Privacy Officers of BC Rapid Transit Company (BCRTC) and ForeMed Medical Clinic:

This email serves as formal notification of a Severe breach of my personal health information under the Parsonal
Information Protection Act {(PIPA) and the Freedom of Information and Protection of Privacy Act (FOIPPA)

On March 26, 2026, ForeMed Medical Clinic transmitted my highly confidential Occupational Fitness Assessment
(OFA) to BCRTC Occupational Health,

As explicitly shown in the attached PDF evidence:

+ “Part 3: Employee Consent” on the transmitted document was completely blank, It lacks my signature and
date.

Despite the absence of legal consent, ForeMed Chnic disclosed my medical files.to my employer.

Despite viewing a blank consent signature line, BCRIC (specifically Adebayo Adenekanj collected,
logged, and processed this unauthorized medical document.

‘This.transfer of unconsented medical data was facilitated via a commercial billing arrangement {Invoice
#315113).

{am formally demanding an explanation as to why my medicat records were disclosed and collected without a
valid, executed statutory consent mechanism,

/ am currently escalating this matter to the Office of the Information and Privacy Commissioner {OIPC). lexpect a
Prompt response regarding your intemal investigation into this breach and the immediate quarantine of these
specific records from my employment and medical files

Sincerety,
Mark Holand Employee #£21987 236-994-3376

Q OIPC Holand_Foremed_BCRIC.pdt
2044K

000331