A Norwich Order allows an Ontario business to legally force third parties, like Google or local internet providers (ISPs), to reveal the IP address and identity of an anonymous person posting defamatory content. Securing this pre-trial order generally involves over $15,000 CAD in legal and court fees.
In the digital age, a malicious anonymous review or a fake social media campaign can severely damage your corporate reputation overnight. When someone hides behind a fake username to attack your business, standard litigation hits a wall because you do not know who to sue.
Fortunately, Ontario law provides a powerful tool known as a “Norwich Order.” This is a specialized court order that compels a third party-who is not necessarily involved in the wrongdoing-to disclose information that will help you identify the anonymous defamer. 🔍
Whether your restaurant in Toronto is being targeted by fake Google reviews, or your Ottawa tech firm is facing anonymous corporate sabotage on forums, a Norwich Order can strip away the attacker’s anonymity. By forcing internet service providers (ISPs) like Bell, Rogers, or platforms like Meta to hand over login data, your law firm can uncover the culprit and commence a proper defamation lawsuit.
Step-by-Step Process in Ontario
Obtaining a Norwich Order is an extraordinary remedy. The Superior Court of Justice takes privacy rights seriously and will not hand out someone’s personal data without compelling evidence.
Step 1: Preserve All Digital Evidence
Before doing anything else, you must secure the evidence. Take comprehensive screenshots of every defamatory post, fake review, or malicious email. 📸
Ensure that timestamps, URLs, and the exact usernames are clearly visible. In online defamation cases, attackers often delete their posts once they realize legal action is brewing. Your lawyer will need these preserved records to build the foundation of your court application.
Step 2: Attempt Voluntary Disclosure First
Courts expect you to try the easiest route first. Your law firm will typically send a formal demand letter to the platform hosting the content (such as Google, Facebook, or a local web host), asking them to voluntarily provide the user’s data or remove the post.
Because of Canadian privacy laws like PIPEDA, most platforms will refuse to hand over user data without a judge’s order. However, showing the court that you tried and failed is a mandatory step in proving that a Norwich Order is “necessary.”
Step 3: Draft the Application and Affidavits
Your lawyer will prepare an application to the Superior Court of Justice. The core of this application is a sworn affidavit detailing the exact harm your business is suffering. 📝
You must prove that you have a “bona fide” (legitimate) legal claim against the unknown person. You cannot use a Norwich Order for a “fishing expedition” just because someone left a mild, honest negative review. It must be clear, actionable defamation or corporate sabotage.
Step 4: Prove the Legal Test for a Norwich Order
During the hearing, your lawyer must satisfy several strict legal criteria. They must show that the third party (the ISP or platform) is the only practical source of this information.
Furthermore, they must argue that the public interest in delivering justice outweighs the anonymous user’s right to privacy. Your legal team will also promise that the revealed information will only be used to pursue the specific lawsuit, and not for public shaming.
Step 5: Serve the Order and Pay Third-Party Costs
If the judge grants the Norwich Order, your lawyer will serve it upon the third party. Canadian law dictates that the innocent third party (like Rogers or Bell) should not lose money complying with your request. 💳
Therefore, you are generally required to pay the ISP’s reasonable administrative costs for searching their servers and producing the IP logs and subscriber information. Once the identity is revealed, you can proceed with serving a Statement of Claim upon the actual defamer.
How Much Does it Cost in Ontario?
Because Norwich Orders require comprehensive legal drafting and specialized court hearings, they represent a significant upfront investment for your business. 💵
- Court Filing Fees: Approx. $345 CAD (Superior Court motion fees).
- Lawyer Fees: $15,000 to $25,000+ CAD (Drafting materials, researching IP law, and arguing the motion in front of a judge).
- Third-Party (ISP) Costs: $500 to $2,500 CAD (You must reimburse the tech company for the labour required to pull the data logs).
| Norwich Order Requirement | What It Means for Your Business | Proof Difficulty |
|---|---|---|
| Bona Fide Claim | You must show actual defamation or fraud, not just a petty disagreement. | High |
| Third-Party Involvement | The ISP or platform must actually possess the data you need. | Low (Tech logs everything) |
| Absolute Necessity | You cannot identify the attacker through any other reasonable means. | Medium |
How Long Does the Process Take?
Time is of the essence, as internet providers often overwrite or delete IP logs every 30 to 90 days. ⏱️
Preparing the legal application usually takes 2 to 4 weeks. Securing a court date in Ontario can take an additional 1 to 3 months depending on the jurisdiction. Because digital logs delete quickly, your lawyer may ask the court for an emergency interim order just to force the ISP to “preserve” the data until the full Norwich hearing can occur.
Frequently Asked Questions (FAQ)
Will the ISP tip off the anonymous defamer?
Often, yes. PIPEDA and telecom policies usually require the ISP to notify their subscriber that a court order has been filed. The subscriber then has a brief window to hire their own lawyer and fight the disclosure in court.
What if the attacker used a VPN?
If the user masked their IP address with a strict no-log VPN, the ISP logs may only point to a generic server in another country. In these cases, uncovering the identity becomes significantly more difficult and expensive.
Can I sue Google directly instead?
In Canada, holding a platform directly liable for user-generated content is incredibly difficult. It is almost always better strategy to use a Norwich Order to find the actual author rather than suing the search engine.
Can this order be used for trademark or copyright theft?
Yes. Norwich Orders are frequently used by businesses to uncover the identities of anonymous individuals selling counterfeit goods online or distributing stolen intellectual property.
Do I get my legal fees back?
You do not get fees back from the innocent third party (the ISP). However, once you identify the defamer and win your subsequent defamation lawsuit, you can ask the judge to make the defamer pay for the costs of the Norwich Order.
Leave a Reply