A GP receives a formal request from an insurance company for a full medical report on a 40-year-old patient. The request is accompanied by a consent form signed by the patient authorising release of their full medical record. While reviewing the notes, the GP finds documentation of a past episode of severe depression treated 5 years ago, which the patient had previously specifically requested not be mentioned in any insurance reports. What is the GP's most appropriate initial action?