Alex D. Cameron

Following the dismissal of a proposed $240 billion class action regarding a data breach, the successful defendants sought costs.

The plaintiffs argued costs should be limited to a partial indemnity scale for a pleadings motion.

The court found that the plaintiffs' unsubstantiated allegations of professional misconduct against defence counsel, combined with their egregious violations of pleading rules and massive expansion of the claim, justified costs on a substantial indemnity basis.

The court awarded $725,000 to Capital One and $500,000 to Amazon Web.

The plaintiffs brought a motion to certify a $240 billion class action against a financial institution and a cloud storage provider following a massive data breach perpetrated by a former employee of the storage provider.

The plaintiffs alleged numerous causes of action, including intrusion upon seclusion, misappropriation of personality, conversion, breach of confidence, and negligence, arguing that the defendants misappropriated and misused the class members' personal information by retaining and aggregating it beyond its initial purpose.

The court dismissed the certification motion, finding that the plaintiffs' Fresh as Amended Statement of Claim egregiously contravened the rules of pleading and failed to disclose any legally viable causes of action against the corporate defendants.

The pleading was struck in its entirety without leave to amend.

The plaintiff brought a motion to certify a class action against Equifax arising from a massive data breach where hackers accessed the personal information of Canadian consumers.

Equifax opposed certification of several claims, arguing that it was plain and obvious they would fail because Equifax was a victim of the hack, not the perpetrator.

The court rejected Equifax's objections, finding that the law on intrusion upon seclusion, breach of provincial privacy statutes, breach of contract, and consumer protection was not settled in the context of a database defendant allegedly recklessly enabling a hacker attack.

The court certified the proceeding as a class action.

A joint venture partner sought disclosure of detailed payroll and employment records of the other partner’s employees working on a diamond mine project in order to audit joint venture expenditures.

The respondent refused, arguing disclosure would contravene the Personal Information Protection and Electronic Documents Act (PIPEDA) without employee consent.

The court held that while the applicant had a contractual right to audit and the information sought constituted personal information under PIPEDA, disclosure without employee consent would violate the statute absent a statutory exception.

Section 7(3)(c) of PIPEDA does not create a free‑standing jurisdiction for courts to order disclosure; rather, it applies only after an independent court order requiring production exists.

Because no such jurisdictional basis had been invoked, the application was dismissed without prejudice to renewal.