Updated on Sept. 15, 2022
Courts typically give school boards wide latitude to conduct school safety searches. Nonetheless, in Elementary Teachers Federation of Ontario v. York Region District School Board, the Ontario Court of Appeal issued a decision in which it held that a school board breached two teachers’ right to privacy under the Canadian Charter of Rights and Freedoms by searching a classroom computer. Although the facts render the case extraordinary, the court’s reasoning is cautionary and warrants the attention of school boards across Canada.
Background
In this case, the Elementary Teachers’ Federation of Ontario filed a discipline grievance on behalf of two elementary school teachers who had received a written reprimand for misusing board technology. They had created a “log” to record concerns about another teacher in their work group, who they believed was receiving preferential treatment. The possible existence of the log caused other teachers to complain about their work environment, which led the principal of the school to investigate.
The principal found the log, which the grievors had created and saved in the cloud by using an online application that could be accessed only through their password-protected Google accounts. However, while in a classroom in which a laptop used by one of the grievors had been left open, the principal touched the trackpad on the laptop. It is not clear whether this touching was intentional or accidental. The computer displayed the log, which the principal examined and took pictures of with his phone.
The arbitrator held that the grievors had a reasonable expectation of privacy, albeit a diminished one, given that they had left the log unsecured on a computer used by both students and teachers. In light of the diminished expectation of privacy and the principal’s legitimate concern about a “toxic” workplace culture, the arbitrator held that each step in the principal’s process of investigation was reasonable and did not violate teachers’ privacy rights or the Charter’s “reasonable search” requirement.
Court of Appeal decision
The Court of Appeal held that the arbitrator’s decision was erroneous, stating that she erred in her analysis of the grievors’ expectation of privacy, particularly in finding that the grievors had a diminished expectation of privacy because they were using the school’s computer and failed to secure the log. According to the court, the subject matter of the search was the grievors’ private correspondence stored and secured in the cloud, and little significance came out of their having used a school computer to access it. The court was also forgiving of the failure of one of the grievors to secure the log: the grievors were not “indifferent to their privacy” and “did all they could to protect their privacy.” It characterized the grievors’ leaving the laptop open in the classroom as mere inadvertence.
The court also held that the arbitrator erred in finding the principal’s search was reasonable. Although the principal had the authority to conduct a search given his duty under the Education Act to “maintain proper order and discipline in the school,” the court said this particular search could not be justified:
Once the principal realized he was looking at the grievors’ log, it was as though he had found their diary. He had no legitimate purpose in reading it, let alone taking screenshots of it and submitting it to the Board. The principal failed to respect the grievors’ reasonable expectation of privacy.
The court also minimized the principal’s concern that motivated the search in this case because it related employees and not students:
School authorities such as principals are not responsible for the welfare of teachers and staff in the same way as students, and the need to act quickly concerning teachers and staff is less likely to arise. In my view, concerns arising out of employment relationships in the workplace are unlikely to justify a similarly broad and flexible search and seizure authority. Branding workplace relationships “toxic” does not alter this.
The Court of Appeal declared a violation of the Charter right to be free from unreasonable search and quashed the arbitration award.
Commentary
School boards should beware that searches of board-owned computers must be conducted in a manner that is “reasonable” — that is, based on sound justification and in a manner that minimizes their impact on privacy. This has been the law since the Supreme Court of Canada’s decision in R. v. Cole, which established that privacy expectations of employees will normally be diminished. Although the Court of Appeal did not recognize this diminishment in this case, the facts are unique in that the principal had accessed a cloud-based account. School boards should be very cautious in gaining access to content stored in teachers’ and students’ private (cloud-based) accounts, even if they are left unsecured on school computers.
Nonetheless, as a matter of law, the Court of Appeal’s decision deserves critique. First, the forgiveness the court showed to the grievors’ treatment of the log poses a data security problem. The law recognizes that one can abandon their expectation of privacy. For example, the Supreme Court of Canada has held that police may search garbage bags left out for pickup without prior judicial authorization because any expectation of privacy for the contents of the bag has been abandoned (see R. v. Patrick). The concept of abandonment is important because its application encourages individuals to take steps to secure their private information. The failure to apply the abandonment principle (or equivalent analysis) in this case encourages computer users to rely on law for protection of their privacy rather than good data security practices. In plainer terms, the law should encourage people to log out of their cloud accounts when they access them on work computers as much as it encourages them to shred their receipts before they throw them in the trash.
Second, the court’s minimizing of the workplace concern that motivated the principal’s search is not consistent with employers’ duties under occupational health and safety legislation and the seriousness with which employers ought to treat workplace disharmony and harassment. Indeed, in the Robichaud case the Supreme Court of Canada imposed strict liability on employers for workplace harassment because they “control [the workplace] and are in a position to take effective remedial action to remove undesirable conditions.”
Toxicity amongst a group of elementary school teachers would be of serious concern to any school board, particularly given the role of a teacher in respect of elementary school pupils; hence the principal’s obligation in the Education Act to “maintain proper order and discipline in the school” and, even more salient, the teacher’s duties under the Act to be an exemplar for students (s. 264(1)(c)) and to “assist in developing co-operation and co-ordination of effort among the members of the staff of the school” (s. 264(1)(d)). It is hard to understand why the possible flouting of such statutory duties by at least some teachers in this case, creating the toxic work environment said to exist among the staff at the school, would not be significant enough to warrant the court’s application of a relaxed standard of reasonableness. The arbitrator was alive to the seriousness of this concern, but the Court of Appeal was not.
We would be pleased to discuss how to address school and computer search risks as part of your school board data and privacy governance program.
