Summary
Quantz v. Ontario is a key decision, arising from an accidental disclosure of Ontario Disability Support Program client information, that will have an influence on future privacy class actions. The Ontario Superior Court of Justice dismissed this certification motion and described important limitations on the tort of intrusion upon seclusion. The court emphasized that the tort requires a deliberate invasion of privacy and clear evidence of wrongdoing, rather than an accidental leak. This decision is consistent with recent Court of Appeal cases, such as Owsianik v. Equifax Canada and Del Giudice v. Thompson, by which the court restricted the scope of liability for privacy breaches.
Background
On December 20, 2018, an ODSP case worker emailed a spreadsheet containing approximately 45,000 ODSP client names, emails addresses, and ODSP identification numbers to all Ministry case workers. That email was not an improper disclosure of confidential data, as the recipient case workers would already have had access to this information. However, one of the case workers then forwarded the email with the spreadsheet to 103 ODSP clients.
The plaintiff, who was one of the individuals listed on the spreadsheet, claimed that the disclosure of the spreadsheet to the 103 clients identified those ODSP clients thereby stigmatizing them, and impaired their privacy rights as the files contained confidential medical and financial information. The plaintiff asserted several causes of action including intrusion upon seclusion, negligence, breach of confidence, and publication of private facts. The defendant argued that no actionable tort occurred, that the email was sent without willful intent, and that there was no harm or loss. The plaintiff did not allege harm other than anxiety caused by learning of the email.