BC Supreme Court awards damages in ICBC privacy breach class action

Court stressed the need to hold large organizations accountable for protecting personal information

BC Supreme Court awards damages in ICBC privacy breach class action

The BC Supreme Court has awarded $15,000 in damages to each class member in a class action lawsuit against the Insurance Corporation of British Columbia (ICBC).

The case arose when an ICBC employee, Candy Elaine Rheaume, improperly accessed and sold the personal information of ICBC customers. This breach resulted in the information being used for criminal activities, including arson and shooting attacks on the properties of 13 individuals.

In 2022, the court found that ICBC was vicariously liable for the actions of its employee, a decision upheld on appeal in 2023. The recent judgment focused on the assessment of class-wide damages.

Between April 2011 and January 2012, Rheaume accessed the personal information of 79 ICBC customers, selling some of it to Aldorino Moretti, who then provided it to individuals involved in the attacks.

ICBC admitted that Rheaume sold information for $25 or more per license plate number. The corporation later terminated Rheaume's employment and notified 78 customers of the breach. The court highlighted that while ICBC admitted to selling the information of 45 customers, the extent of the breach remained uncertain due to a lack of records.

The class action, initiated in June 2012, saw multiple appeals and extensive legal battles over 12 years. The court previously determined that ICBC's liability for the privacy breach was established once Rheaume accessed the information, regardless of whether it was passed on. This conclusion was endorsed by the Court of Appeal, emphasizing the serious nature of the privacy breach.

In assessing damages, the Supreme Court rejected ICBC's proposal of $500 per class member as "trivial," instead awarding $15,000 to each. The court noted the severity of the breach, which was motivated by personal financial gain and resulted in the distribution of information to criminals. The court stressed the importance of holding large organizations accountable for protecting personal information, particularly when individuals have no choice but to provide it.

The ruling also approved class counsel fees of 35 percent of the aggregate class-wide damages and a $10,000 honorarium for the representative plaintiff, recognizing the significant efforts and risks undertaken over the 12-year litigation.

Recent articles & video

Register for November’s 2024 Lexpert Rising Star Awards

Billion-dollar deals, including Couche-Tard’s new higher buyout offer, top this week’s roundup

SCC takes flexible approach to corporate attribution doctrine in bankruptcy and insolvency cases

Understanding sustainable finance key for attracting global capital to Canada: Dentons partner

Supreme Court of Canada to hear three first degree murder cases next week

Ontario Court of Appeal dismisses motion to appeal interim vaccination order in child custody case

Most Read Articles

Ontario Superior Court refuses to remove estate trustees despite breach of fiduciary duties

Ontario Superior Court voids financial transfers for failing to rebut presumption of resulting trust

Legal industry managers expect pay for lawyers, other industry professionals to rise: report

Alberta Court of King’s Bench dismisses habeas corpus application in child custody dispute