Estée Lauder has proposed a settlement totaling CAD $1.515 million to resolve a Canadian class action lawsuit stemming from two data breaches in 2023. The incidents, occurring in May and July of that year, potentially compromised customer personal and financial information across Canada.
While Estée Lauder denies any wrongdoing, the company agreed to the settlement to avoid protracted legal proceedings. Affected individuals may be eligible for compensation of up to CAD $5,000 if they can document losses. Alternatively, those impacted may receive fixed payments ranging from CAD $150 to $300, depending on how many breaches affected them. A court will consider approving the settlement on June 3, 2026. Claim, opt-out, and objection deadlines are now in place.
This development highlights the increasing financial and reputational risks associated with data security in the beauty industry. For salon and barbershop owners, the case serves as a clear signal that robust data protection measures are not merely a compliance issue. They are fundamental to maintaining customer trust and operational stability. The potential for significant financial penalties and reputational damage underscores the importance of investing in secure data handling practices now.
