If disputed, isn't the CRA supposed to verify with the OC?

Should I handwrite the HIPPAA letter & send CMRRR?

Still very new to this "clean-up" process.

Thanks