Indigo is not the only high-profile company recently facing a breach possibly affecting employee data.data was leaked and posted on the “dark web,”
There isn’t a lot of case law to draw on for incidents where employee data is compromised, he adds, but a recent ruling at the Ontario Court of Appeal puts a damper on the prospect of a class-action lawsuit in such cases.late last year, including cases involving data breaches at Equifax Canada and Marriott International, “firmly shuts the door” on being able to launch class-action lawsuits against companies hit by data breaches.Quebec court approves $200.
The federal Personal Information Protection and Electronic Documents Act does provide some safeguards for employee information. But Sookman notes this only applies to federally regulated industries such as banking or transportation, not to private industry.When a data breach happens that falls under PIPEDA, complaints can be made to the Office of the Privacy Commissioner.
The landscape is different south of the border, Tereposky says, where companies are more often opened up to lawsuits when they compromise someone’s data.