Information, Data Security & Privacy

Our Information, Data Security & Privacy Practice Group helps clients in the public and private sectors with a range of information and data-related matters involving security and privacy incident response as well as security and privacy policy and compliance. Additionally, the group assists with matters involving the defence of information and data-related complaints and claims.

With increased concerns about potential liabilities, organizations find it critical to have legal representation and advice from lawyers who understand typical enterprise IT requirements and who specialize in “the law of information.” We are experienced in helping organizations secure their data and in coaching organizations on security incident response and personal information loss and theft. In acting for our clients, we have been successful in recovering stolen information and in providing expert representation in defence of regulatory charges, complaints and class action claims.

We have a long history of helping our clients develop policies for the effective governance of data and information and of representing our clients in freedom of information and privacy matters. Our background as labour and employment lawyers for management means we know business operations, IT systems, and IT security, and we have a lengthy record of helping organizations with information and privacy matters.

We acted for the Canadian Association of Counsel to Employers as intervenors in Supreme Court of Canada proceedings in R v. Cole—the leading case on employee privacy and employer access to business system information.


When data security, privacy and other information-related issues arise, we take a business-minded approach to help our clients with solutions that are both effective and operationally feasible. We provide assistance with the following:

  • management and response of data security and privacy incidents
  • security and privacy policy and compliance
  • information management and governance
  • freedom of information requests and appeals
  • CASL (anti-spam) compliance
  • records retention policy
  • Internet-related harms

We provide forceful and effective advocacy of client positions in privacy and access to information matters before privacy tribunals and the courts.

The Hicks Morley Advantage

We are expert advocates for management and we represent their interests in all that we do. This sole focus has allowed us to gain intimate and extensive knowledge of management issues and concerns and we take a practical, business-minded approach to our advice and representation.