R v Maurer, 2014 SKPC 118
1. Can the “data” be the object of theft under the Criminal Code?
[18] The Crown is required to prove the offence particularized in the charge.[2] In the present case, the Crown alleges in both count one and count two that the accused stole data belonging to Christine Lee, and posted it online without her permission. It is the alleged theft of the data that gives rise to the charge of unauthorized use of a computer with intent to commit mischief in count one, and the charge of mischief in relation to data in count two.
[19] The “data”, in this case, is the nude images quarantined onto the accused’s computer when he transferred the data from the complainant’s broken computer and completed the virus scan.
[20] Section 2 of the Criminal Code defines the word “steal” as “to commit theft.” The offence of theft is set out in s. 322 (1) of the Criminal Code as follows:
322 (1) Every one commits theft who fraudulently and without colour of right takes, or fraudulently and without colour of right converts to his use or to the use of another person, anything whether animate or inanimate, with intent,
(a) to deprive, temporarily or absolutely, the owner of it, or a person who has a special property or interest in it of the thing or of his property or interest in it;
…
(d) to deal with it in such a manner that it cannot be restored in the condition in which it was at the time it was taken or converted.
[21] In Stewart, the Supreme Court of Canada considered whether personal information of employees could be the object of theft under the Criminal Code. It was agreed that no physical object would have been taken and that the information was confidential information per se, a pure intangible. Upon reviewing the wording of the theft provision in the Criminal Code, Lamer J., as he then was, concluded that the meaning of “anything” is restricted in two ways. First, whether tangible or intangible, “anything” must be of such a nature that it can be the subject of a proprietary right. Second, the property must be capable of being taken or converted in a manner that results in the deprivation of the victim. He determined that confidential information is not property for the purposes of theft under the Criminal Code and stated further that:
To the extent that protection is warranted for confidential information it should be granted through legislative enactment and not through judicial extension of the concept of property or of the scope of the theft provision under the Criminal Code.
[22] The case of R. v. Alexander[3], involved a charge similar to the wording in count one of this case, alleging that the accused did:
fraudulently and without colour of right obtain, directly or indirectly a computer service to wit: the Royal Bank Financial Group computer system with intent to commit the offence of mischief contrary to s. 430 of the Criminal Code by willfully stealing client data from the band data base, contrary to the Criminal Code.
[23] The “data” in Alexander involved information about credit cards that were not received by the cardholder and were fraudulently activated or used. The accused was committed to stand trial on a charge of unauthorized use of a computer with the intent to commit mischief, contrary to s. 342.1 of the Criminal Code, resulting in an application for certiorari to quash her committal.
[24] The hearing judge noted that, although stealing is not an essential element of the offence created by s. 342.1 (c) or by s. 430 (1.1), the Crown is required to prove the charge as alleged. Since the Crown alleged theft, the Court found that the Crown is required to prove it. Granting the application for certiorari, the judge concluded that: “the mere accessing and sharing of such data cannot constitute “stealing” given that s.2 of the Criminal Code defines the word steal as “to commit theft” and R. v. Stewart (1988), 41 C.C.C (3d0 481 (S.C.C.) makes it clear that accessing confidential information does not constitute theft.”
[25] Following the Supreme Court of Canada’s decision in Stewart, and considering its application in Alexander, I find that the “data” in this case does not fall within the meaning of “anything” as that word is used in s. 322(1) of the Criminal Code. The data is not capable of being taken or converted in a manner that results in the deprivation of the victim.
[26] If, for the sake of argument, the data was considered property capable of theft, section 322(1) dictates that a theft is committed when a person “converts to his use or to the use of another person, anything whether animate or inanimate, with intent” (a) to deprive temporarily or absolutely, the owner of it, or a person who has a special property or interest in it or (d) to deal with it in such a manner that it cannot be restored in the condition in which it was at the time it was taken or converted”. The accused did not intend to deprive the complainant of her property interest in the data, nor did he intend to deal with the data in a manner that it could not be restored to the condition it was in at the time it was taken or converted. By posting the data on the Internet, the accused intended to put the data in the public realm, and thereby humiliate and embarrass the complainant and punish her for perceived bad behaviour.
[27] As the particulars in both counts stipulate that it is the act of theft that gives rise to the substantive charge, I must find the accused not guilty of both counts.
[28] In Stewart , the Court observed that there should be specific legislative enactment to deal with the sharing of confidential information, rather than a judicial overextension of the Criminal Code’s definition of theft.
[29] Bill C-13 has been drafted by Parliament to address a gap in the legislation concerning the non-consensual distribution of intimate images. Bill C-13 proposes to amend the Criminal Code by creating the following new offence:
162.1 (1) Everyone who knowingly publishes, distributes, transmits, sells, makes available or advertises an intimate image of a person knowing that the person depicted in the image did not give their consent to that conduct, or being reckless as to whether or not that person gave their consent to that conduct, is guilty:
(a) of an indictable offence and liable to imprisonment for a term of not more than five years; or
(b) of an offence punishable on summary conviction.
[30] However, this provision has not yet been enacted and the charge as drafted is an inappropriate substitute based on the above jurisprudence.
[31] The accused’s conduct in this case is despicable; however, for the reasons stated above, it does not establish the charges set out in the Information.