are transparent about what services you are providing and when,
make a clear separation with respect to the billing,
ensure the health record reflects what service is being provided, and
ensure that you are not in a conflict of interest if recommending additional services which you also provide.
Notify the HIC - Notify the Individual affected (HIC does this and they need to tell them they can make a complaint to the IPC) - Notify the privacy commissioner