- Mednick, Mordy
- Industry Alerts
Click “Subscribe Now” to get attorney insights on the latest developments in a range of services and industries.
In this day and age, data breaches are common. Digital extortionists will use sophisticated techniques to obtain confidential and private information of millions of individuals from well-known platforms like Yahoo and Shopify. If you are a victim of such an attack, the question becomes: what damages are you entitled to?
Unfortunately, a recent decision by Justice Perell (a well-respected Judge in Ontario) demonstrates that, absent tangible, quantifiable harm, victims will not receive much relief. Specifically, in order to obtain meaningful relief, a victim must show that:
- he/she suffered actual harm, not merely a risk of harm. In other words, the victim must show that because of the data breach, he/she suffered financially; and,
- the harm suffered was caused by the data breach itself. In other words, the victim must prove that the harm was a consequence of the breach and did not result from some other explainable factor.
Given this test, many victims who have commenced claims for having their personal information stolen, but have not suffered quantifiable damages, were unsuccessful. In contrast, victims who can prove that his/her banking information was stolen and the money was withdrawn as a result of the data breach, have fared much better.
Spending time and money on a lawsuit in relation to a data breach only makes sense if you can prove that you have actually suffered. Personal and mental anguish, i.e., frustration and anxiety that a fraudster may have your personal information, does not, in and of itself, matter, when damages are awarded.
- Industry Alerts Litigation Law Newsletter, Volume 2, Number 1: Security for Costs
- Industry Alerts Litigation Law Newsletter, Volume 2, Number 2: Future of Litigation in Ontario
- Industry Alerts Litigation Law Newsletter, Volume 1, Number 8: Limitation Periods
- November 2021 Industry Alerts Litigation Law Newsletter, Volume 2, Number 5: Bad Reviews - Defamation or Not?
- June 2021 Industry Alerts Litigation Law Newsletter, Volume 2, Number 3: Can Your Employer Spy on You?
- March 23, 2018 Seminars ACG NY and Toronto Joint Event on March 23, 2018