Data breaches don’t just compromise your privacy—they can lead to serious crimes like identity theft. When your personal information is leaked, scammers may use it to open credit cards, apply for loans, or even impersonate you online. If you’ve been the victim of identity theft in Canada, you may have legal rights to claim compensation.
This article explains what to do after your identity is stolen and how to pursue justice under Canadian law.
1. What Is Identity Theft?
Identity theft occurs when someone uses your personal information—such as your name, Social Insurance Number (SIN), or banking credentials—without permission to commit fraud or other crimes.
Common signs your identity has been stolen:
- Unauthorized transactions on your credit card or bank account
- Collection notices for debts you didn’t incur
- Credit reports showing new accounts you never opened
- Government benefits or tax refunds issued in your name
If any of these happen after a data breach, you may be entitled to both civil and criminal protections.
2. What Laws Protect You in Canada?
Several federal and provincial laws protect Canadians from identity theft and allow for compensation in certain cases:
Federal Laws:
- Criminal Code of Canada: Makes identity theft and fraud a criminal offence
- PIPEDA (Personal Information Protection and Electronic Documents Act): Mandates data protection by organizations
- Privacy Act (for government-related breaches)
Provincial Remedies:
- Tort law: Victims can sue for negligence, breach of privacy, or emotional distress
- Consumer protection acts: Provide additional safeguards and remedies in certain provinces
3. Can You Get Compensation for Identity Theft in Canada?
Yes. You may be able to recover:
- Direct financial losses (e.g., money stolen, fraudulent loans)
- Credit repair costs (e.g., monitoring services, identity theft protection)
- Emotional distress damages
- Legal fees, if suing under civil law
In class action lawsuits following large data breaches, victims have received cash payouts or service credits for identity-related harm.
4. What to Do Immediately After Identity Theft
Step 1: Report to Authorities
- Call your local police and file a report
- Report the incident to the Canadian Anti-Fraud Centre (CAFC)
CAFC Identity Theft Reporting
Step 2: Notify Financial Institutions
- Contact your bank, credit card companies, and any lenders
- Freeze or close compromised accounts
Step 3: Place a Fraud Alert or Credit Freeze
- Contact major credit bureaus:
- Equifax Canada
- TransUnion Canada
Step 4: Monitor Your Credit and Identity
- Use identity theft monitoring services
- Review credit reports regularly for suspicious activity
5. Can You Sue After Identity Theft?
You may be able to file:
- A personal lawsuit if an organization was negligent in protecting your data
- A class action claim if part of a larger breach (e.g., a bank, hospital, or telecom company)
- A privacy complaint with the Office of the Privacy Commissioner of Canada (OPC)
If a data leak directly led to identity theft, courts have awarded financial compensation under negligence and breach of privacy claims.
6. Notable Identity Theft Compensation Cases in Canada
Desjardins Group Data Breach
- Millions of customers exposed in 2019
- Victims eligible for credit monitoring and compensation
- Ongoing class action seeks financial damages for identity theft
LifeLabs Data Breach
- Over 15 million affected
- Proposed class action settlement includes compensation for identity protection services
7. Tips to Prevent Future Identity Theft
- Never share SIN or banking info unless necessary
- Use strong, unique passwords
- Enable two-factor authentication
- Shred old bills and documents
- Regularly check your credit reports