The Supreme Court of Canada has released its much anticipated decision in R. v. Cole, a criminal law case with potential implications for the privacy rights of employees in the workplace. That being said, it is important to keep in mind that this was a criminal case primarily concerned with an accused child pornographer’s right to be secure against unreasonable search and seizure by the police under section 8 of the Canadian Charter of Rights and Freedoms as opposed to an employee’s right to privacy within the context of a workplace investigation.
The accused in this case was a high-school teacher charged with possession of child pornography and unauthorized use of a computer contrary to the Criminal Code.
Mr. Cole was provided with a laptop by the school board as part of his employment. He was permitted to use and did use his work-issued laptop computer for non-work related purposes. While performing maintenance activities, a school board computer technician found a hidden folder containing nude and partially nude photographs of a female student on Mr. Cole’s laptop. The technician notified the principal, and in accordance with the principal’s instructions, copied the photographs to a CD. The principal seized the laptop, and school board technicians copied the temporary internet files onto a second CD. The laptop and both CDs were handed over to the police, who without warrant reviewed their contents and then created a mirror image of the hard drive for forensic purposes.
Lower Court Decisions
The trial judge excluded all of the computer material found on Mr. Cole’s work-issued laptop computer on the basis that Mr. Cole’s Charter right to be secure against unreasonable search or seizure had been violated and because, in the trial judge’s view, the admission of the improperly obtained evidence would bring the administration of justice into disrepute as per section 24(2) of the Charter.
The appeal court reversed the decision of the trial judge, finding that there was no breach of the Charter. The Ontario Court of Appeal set aside the appeal court’s decision and excluded the disc containing the temporary internet files, the laptop, and the mirror image of its hard drive.
Supreme Court of Canada Decision
The Supreme Court of Canada (“SCC”) agreed with the Ontario Court of Appeal that Mr. Cole’s section 8 Charter right was violated, but disagreed with the Court of Appeal and found that the material found on Mr. Cole’s work-issued laptop computer should not be excluded from the evidentiary record on the basis of the test set out in section 24(2) of the Charter. In doing so, the SCC made a number of significant pronouncements on the subject of privacy and held that whether Mr. Cole had a reasonable expectation of privacy depended upon the totality of the circumstances.
The SCC stated that computers that are reasonably used for personal purposes - whether found in the workplace or the home - contain information that is meaningful, intimate, and touching on the user’s biographical core. This is because internet-connected devices reveal our specific interests, likes, and propensities, recording in the browsing history and cache files the information we seek out and read, watch, or listen to on the internet. As such, Canadians may reasonably expect privacy in the information contained on their own personal computers as well as to information on work computers where personal use is permitted or reasonably expected.
The SCC explained that privacy is a matter of reasonable expectations. An expectation of privacy will attract Charter protection if reasonable and informed people in the position of the accused would expect privacy. The more personal and confidential the information, the more willing reasonable and informed Canadians will be to recognize the existence of a constitutionally protected privacy interest. Conversely, the ownership of the laptop by the school board, the workplace policies and procedures and the technology in place in the school argued against this. These considerations, the SCC found, diminished but did not remove Mr. Cole’s privacy interest in his work-issued laptop, which was distinct from a personal computer. In the result, the SCC held that the nature of the information in issue in this case heavily favoured recognition of a constitutionally protected privacy interest.
As far as the school board’s conduct was concerned, the SCC found that the principal and, by implication, the school board had a statutory duty to maintain a safe school environment pursuant to the Education Act, and by necessary application, a reasonable power to seize and search a school-board-issued laptop if the principal believed on reasonable grounds that the hard drive contained compromising photographs of a student.
However, the fact that the school board had acquired lawful possession of the laptop for its own administrative purposes did not vest in the police lawful authority to conduct a warrantless search and seizure of the computer for the purposes of a criminal investigation.
Despite this, the SCC held that the truth-seeking function of the criminal trial process would be better served by admission of the evidence, as opposed to its exclusion, and noted that had the police complied with the applicable constitutional requirements, the evidence would have been discovered in any event.
While it may be tempting for some to overstate the impact of the SCC’s statements in this case, it is important to keep in mind that this was a criminal case primarily concerned with an accused child pornographer’s right to be secure against unreasonable search and seizure by the police under section 8 of the Charteras opposed to an employee’s right to privacy within the context of a workplace investigation. As far as the school board’s conduct was concerned, the SCC held that it was within its rights to seize and search his work-issued laptop.
Therefore, while an employer’s ownership of computers and written policies may not be determinative, they are factors in determining whether an employee has a reasonable expectation of privacy in a particular situation for the purposes of a disciplinary or criminal investigation.
Since privacy is a matter of reasonable expectations, it is critical that employers have workplace policies in place that clearly set out the ground rules for employees’ use of company-supplied computers or other electronic devices and which clearly state that the employer will monitor their use to ensure compliance with all employer policies and laws. As such, we recommend that all employers regularly review and update their existing policies or, if they haven’t already done so, implement policies regarding the use of workplace computers and/or other electronic devices.