As I noted in the full brief I submitted to the committee, Telus and Babylon Health have been in situations in which the Alberta privacy commissioner found that simply agreeing to a privacy policy is insufficient and does not constitute consent.
The Privacy Commissioner of Canada and the guidance on meaningful consent identify a range of activities that private industries such as Telus could undertake. To date, as far as I'm able to tell, none of those methods have been clearly undertaken. As such, information has been collected without meaningful consent or first being approved.