An anonymous hacker stole personal information from Casino Rama's computer system, affecting customers, employees, and suppliers.
The plaintiffs sought to certify a class action for negligence, breach of contract, intrusion upon seclusion, and other privacy torts.
The motion for certification was dismissed.
The court found that claims for breach of confidence and publicity given to private life were bound to fail.
While negligence, breach of contract, and intrusion upon seclusion were deemed viable causes of action, the common issues requirement under s. 5(1)(c) of the Class Proceedings Act, 1992 was not satisfied.
The court determined that the proposed common issues required too much individual inquiry, particularly regarding the duty and standard of care, and the varying sensitivity of stolen information.
The class definition was also found to be overbroad, specifically including unionized employees whose claims fell under exclusive labour arbitration jurisdiction.