The year 2022 continued to be positive for institutional clients involved in privacy breach class actions, with the Ontario Court of Appeal refusing to the expand the tort of intrusion upon seclusion to impose liability on institutions whose databases were hacked by unauthorized third parties.