• About
  • Offices
  • Careers
  • News
  • Students
  • Alumni
  • Payments
  • EN | FR
Background Image
Bennett Jones Logo
  • People
  • Expertise
  • Knowledge
  • Search
  • FR Menu
  • Search Mobile
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
View all
Practices
Corporate Litigation Regulatory Tax View all
Industries
Energy Infrastructure Mining Private Equity & Investment Funds View all
Advisory
Crisis & Risk Management Public Policy
View Client Work
International Experience
Insights News Events Subscribe
Arbitration Angle Artificial Intelligence Insights Business Law Talks Podcast Class Actions: Looking Forward Class Action Quick Takes
Economic Outlook New Energy Economy Series Quarterly Fintech Insights Quarterly M&A Insights Sustainability & the CIO
People
Offices
About
Practices
Industries
Advisory Services
Client Work
Insights
News
Events
Careers
Law Students
Alumni
Payments
Search
Subscribe

Stay informed on the latest business and legal insights and events.

LinkedIn LinkedIn Twitter Twitter Vimeo Vimeo
 
Blog

Evidence of Harm Required To Advance Class Action Following Data Breach

February 24, 2021

Written By Ranjan Agarwal, Keely Cameron, Sébastien Gittens and Justin Lambert

The Court of Queen's Bench of Alberta, in Setoguchi v Uber B.V., 2021 ABQB 18, recently dismissed an application for certification of a proposed class action resulting from a data breach because there was no evidence of harm or loss.

This class action followed a hacking event, in which the hackers obtained Uber users’ names, phone numbers, and email addresses from the cloud. Uber did not initially reveal the data breach to class members, regulators, or police. In the three years following the incident, there was no evidence of fraud, identity theft, or any other economic loss. Rather, the evidence showed that the loss or harm was “wholly non-existent”. In considering the harm or loss issues, the Court had regard for the nature of the personal information, noting that the applicable duty and standard of care will vary with the sensitivity of that information. Here, Uber successfully argued that the information that had been released was already in the public domain. 

To succeed in certifying a privacy class action, the plaintiffs must provide some evidence of loss or damages. All that is required is some “basis in fact” before certification is granted. On the facts before the Court here, there was no evidence that any of the data had been released beyond the hackers. To the extent that the plaintiffs were arguing future harm as a result of future misuse, the Court noted that should the hacked data somehow be used in the future and real evidence of harm or damage could be shown, that could support a new cause of action. 

In reviewing other cases involving proposed class actions resulting from data breaches, the Court noted that certifications have been granted where breaches are directly linked to individual harm. On the other hand, certification has been denied when the breach simply required a password to be changed or embarrassment from spam emails sent to friends.

The Court also noted that any assessment of damages, if the case was certified, would have required individual trials given that any claim would be tied to whether the released information had been held as private by the individual and the harm associated with that relief. In that event, the Court found that a class action might not be the preferable procedure. The Court also perceived individual trials, given the nominal damages, would be a valuable gatekeeper function, in that the Court believed it would deter individual plaintiffs from pursuing inefficient claims.  
This decision follows other recent decisions highlighting the court's important gatekeeper function of ensuring judicial economy when considering class proceedings.

If you would like more information about the issues discussed here or other matters pertaining to Canadian class proceedings or privacy matters, please contact a member of our Class Action Litigation group or our Privacy & Data Protection group.

Please note that this publication presents an overview of notable legal trends and related updates. It is intended for informational purposes and not as a replacement for detailed legal advice. If you need guidance tailored to your specific circumstances, please contact one of the authors to explore how we can help you navigate your legal needs.

For permission to republish this or any other publication, contact Amrita Kochhar at kochhara@bennettjones.com.

Download PDF

Authors

  • Keely  Cameron Keely Cameron, Partner
  • J. Sébastien A. Gittens J. Sébastien A. Gittens, Partner, Trademark Agent
  • Justin R. Lambert Justin R. Lambert, Partner

Related Links

  • Insights
  • Media
  • Subscribe

Recent Posts

Blog

BBHIC 2025: Key Insights From Canada’s Leading Healthcare [...]

May 08, 2025
       

Blog

Upending the Ground Rules: Proposed Major Overhaul [...]

May 08, 2025
       

Blog

Government of Alberta Proposes Significant Changes [...]

May 06, 2025
       

Blog

What Does the SPAC IPO Rebound Mean for Cross-Border Deals?

May 05, 2025
       

Blog

Q&A on Protecting Family Enterprises Through Collaborative Family Law

April 29, 2025
       
Bennett Jones Centennial Footer
Bennett Jones Centennial Footer
About
  • Leadership
  • Diversity
  • Community
  • Innovation
  • Security
Offices
  • Calgary
  • Edmonton
  • Montréal
  • Ottawa
  • Toronto
  • Vancouver
  • New York
Connect
  • Insights
  • News
  • Events
  • Careers
  • Students
  • Alumni
Subscribe

Stay informed on the latest business and legal insights and events.

LinkedIn LinkedIn Twitter Twitter Vimeo Vimeo
© Bennett Jones LLP 2025. All rights reserved.
  • Privacy Policy
  • Disclaimer
  • Terms of Use
Logo Bennett Jones