Introduction

The Ontario Court of Appeal (ONCA) has released a decision that reiterates a key guiding principle in proceedings brought to enforce an insurer's duty to defend: the court must carefully review the underlying pleading and focus on the true nature of the claim, not simply the words used by the plaintiff in the underlying claim, to determine whether any of the claims could potentially be covered by the policy. In Family and Children's Services of Lanark, Leeds and Grenville v Cooperators,(1) the ONCA overturned a lower court judge who the court stated had failed to properly conduct this analysis.

Facts

A website owned by Family and Children's Services of Lanark, Leeds and Grenville (FCS) was breached when an unauthorised party downloaded and published documents stored in a secured section of the website (for further details please see "Novel case on data exclusion interpreted in favour of insureds"). A broadly worded class action was subsequently brought against FCS, alleging damages resulting from defamation, breach of privacy and other causes of action. Laridae Communications Inc had provided advice to FCS on the design and security of its website. FCS issued a third-party claim against Laridae.

FCS and Laridae both sought to enforce the insurer's defence obligations under a commercial general liability (CGL) policy. Laridae also sought defence coverage under an errors and omissions (E&O) policy. The CGL policy excluded:

'Personal Injury' [which included injuries arising out of defamation and violations of privacy] arising out of the distribution or display of 'data' by means of an Internet Website, the Internet… or similar device or system designed or intended for electronic communication of 'data'.

The E&O policy contained a similar exclusion.

The application judge found that there was at least a possibility that some of the damages would not be captured by the data exclusions. The application judge found that the claims alleged damages resulting from electronic and non-electronic (ie, physical) distribution of information. The court held that the exclusion applied only to the electronic distribution of information, so there was potential coverage for claims alleging physical distribution of information.

All claims captured by data exclusions

The ONCA identified several errors in the application judge's analysis. The most critical was failing to properly appreciate the nature of the claims against FCS and Laridae. The application judge found that the following claim in the pleading alleged damages resulting from physical distribution of information:

the personal information of the class members can be accessed by any unauthorized third party who accessed the information, bought the information, or found the information posted on the internet.

Since the last phrase specifically refers to posting on the Internet, the judge must have instead focused on the references to accessing and purchasing the information. However, it is unclear whether the pleading is that the access and purchase of information took place online and offline or solely online.

The ONCA referred to other parts of the pleadings not discussed by the application judge, including the following, which indicated that the litigation concerned the electronic distribution of information, not physical distribution:

  1. The personal information… was contained in an electronic file… held electronically in a portal;
  2. The portal was "illegally hacked", the personal information was posted on "Smith's Falls Swapshop Facebook page and/or other public websites; and
  3. It was "made readily available" to an unauthorized person who "accessed, bought or found the information on the internet" resulting in damages to the Class.

Although the insureds argued that there were two concurrent, discrete claims (ie, the online display of the report (excluded from coverage) and the physical display of the report (arguably covered)), the ONCA disagreed. First, the court found that the claim did not allege physical display or distribution of the report. Second, the court stated that even if there was an allegation of physical distribution of the report, the substance and true nature of the claim arose from the wrongful appropriation of the report and posting it on the Internet, and any injury flowing from the display or distribution of physical copies flowed from that initial wrongful act. Overall, the true nature of all claims fell within the data exclusions, so the insurer owed no duty to defend FCS or Laridae.

The insureds also argued that the data exclusions would nullify coverage. Again, the ONCA disagreed. As the court noted, pursuant to the doctrine of nullification, a clause that clearly excludes coverage will not be applied if doing so would:

  • be inconsistent with the main purpose of the policy;
  • virtually nullify the coverage provided by the policy; and
  • be contrary to the reasonable expectations of an ordinary insured.

On these points, the court found that:

  • the exclusion was consistent with the main purpose of the policy, which was to provide coverage for personal injury arising from the conduct of business, subject to specific exclusions;
  • the policies covered losses resulting from the performance of a range of professional services provided by Laridae. Only one aspect of these services (ie, Laridae updating and securing the website) was excluded. Thus, the exclusion did not virtually nullify coverage; and
  • a reasonable policyholder would have expected that the data exclusions would apply to the dissemination of a sensitive report over social media.

Insurers' right to participate in defence

After finding a duty to defend, the application judge agreed with FCS that given the conflict between FCS and Laridae created by FCS's third-party claim, FCS's defence counsel would not have to report to the insurer on the underlying litigation.

Interestingly, before the ONCA, all parties (including FCS) agreed that if the insurer owed a duty to defend, it would be entitled to receive reports on the underlying litigation from all defence counsel. The ONCA confirmed that if it had ordered the insurer to defend FCS or Laridae, it would have required defence counsel to report to the insurer, as long as protocols set out in Markham v AIG were followed (for further details please see "Concurrent duty to defend – a team sport").

Briefly, those protocols would have required that the insurer representatives involved in FCS's defence differ from those involved in Laridae's defence. Any representatives involved in coverage issues could not also be involved in the defence of either insured and vice versa. Separate files would be required for coverage and for each insured's defence. Defence counsel would have to provide identical reports to each insured and the insurer and defence counsel could not discuss the defence with coverage counsel.

Thus, this case also shows that where an insurer must defend multiple adverse parties, the Canadian courts will take all reasonable steps to permit the insurer to remain involved in the defences, despite the adversity.

Endnotes

(1) 2021 ONCA 159.