Not complying to POPIA Act

I am not happy with how Medicross easily shares our information with third party without communicating with me their client. I consulted a Dr in Sept/Oct 2021 and the medical aid paid part of the bill, as a long time Medicross client who has been in the same situation before, I waited for my statement (with reference number) to be sent to me so I can do my transfer. However, to my surprise I've been receiving calls from a debt collector to recover their money. First of all it hasn't been even 6 months, secondly Medicross has all my details (which the opted to share with third party disregarding the POPI Act), they failed to even send an email or call me but shared my details. This is so disappointing, and frustrating to be called by third parties for collection even after the debt has been settled.