Lessons From a Toronto Cosmetic Surgery Privacy Dispute

Most people walk into a cosmetic surgery clinic thinking about one thing, and it is rarely the camera in the corner of the room. They are thinking about the procedure, the recovery, the cost, and whether the result will look like the photos they saw online. Privacy tends to feel like paperwork, something handled quietly in the background by people who know the rules.

A long-running Ontario case has made that assumption harder to hold. It began with a set of security cameras in a downtown Toronto clinic, moved through a regulator’s investigation and a disciplinary hearing, and ended up in the Superior Court as a certified class proceeding. The documented record is unusually detailed, which makes it useful for anyone trying to understand how notification and consent are supposed to work.

What follows sticks to the timeline and the findings on the public record, without guessing at motives. The point is not to relitigate anything. It is to look at what the case shows about the ordinary mechanics of a clinic visit, and about the small, boring steps that keep a patient informed before anything is recorded.

How the Dispute Started

The clinic at the center of the case finished installing a camera system in January 2017. Court materials describe 24 continuously operating cameras placed throughout the premises, everywhere except the washrooms. The cameras were not hidden, though they were not especially noticeable either, and for roughly two years a single sign inside one operating room was the only posted disclosure that recording was happening at all.

Staff did not tell patients that cameras ran through the waiting area, the consultation rooms, or the treatment spaces. That changed in December 2018, when a CBC Marketplace investigation made the system public, and the coverage was followed quickly by regulatory attention. The cameras were shut down and seized, and the surgeon has maintained throughout that they were installed for security rather than for care or any voyeuristic purpose.

The Regulatory Findings Came First

Two regulators looked at the clinic before the civil case reached trial. Ontario’s privacy commissioner concluded that operating the surveillance cameras breached patient privacy. The College of Physicians and Surgeons of Ontario then brought a discipline proceeding and found discreditable conduct, which included the operation of the cameras, and the surgeon’s certificate of registration was suspended for six months.

That sequence matters, because it shows notification being treated as a clinical obligation and not a nicety. A clinic can have perfectly lawful reasons for wanting cameras near a reception desk or a drug cabinet, and nobody disputes that security is real. The question regulators asked was narrower, and it came down to whether the people being recorded were told in a way they could act on.

The Class Action Took a Specific Shape

The civil claim was certified as a class proceeding in May 2021. Justice Perell certified a surveillance class covering patients who attended the clinic while the cameras were running, and declined to certify a second proposed class built around images posted publicly on the internet. The certified class period runs from January 1, 2017 to December 13, 2018.

Membership was defined broadly, and it reaches people who never had a procedure at all: anyone who attended the clinic during that window for any reason, including patients seen by other physicians there. The clinic has published its own summary of the matter, and readers who want that perspective can review the dr 6ix class action page alongside the court record.

The Trial Judgment and What It Turned On

Judgment on the common issues was released on May 26, 2026. The trial judge found that operating 24 cameras throughout the clinic breached the standard of care expected of a physician and surgeon, breached the fiduciary duty owed to patients, and amounted to the privacy tort known as intrusion upon seclusion. Cameras cannot run where patients reasonably expect privacy, including consultation rooms, treatment rooms, operating rooms and recovery areas.

Damages were set at $21.5 million for the privacy breach, calculated at roughly $5,000 for each patient attending for surgical treatment and $500 for those who attended the injectables clinic, with a further $1 million in punitive damages. Costs and interest were left to be determined, and the defendants served a notice of appeal in June 2026, so none of it is final yet.

Practical Takeaways for Anyone Booking a Procedure

None of this requires a patient to become an amateur privacy lawyer. It does suggest a few plain questions worth asking at a consultation: whether any part of the visit is recorded, where cameras are placed, what a consent form actually covers, and who is able to view or store the footage. A clinic that handles this well will answer without hesitating.

It is also a reminder that a polished social feed says very little about the systems running behind it. The same skepticism that serves people well when they evaluate health advice they find online applies to a clinic’s marketing, because the parts of a practice that protect patients are rarely the parts that photograph well.

Final Thoughts

The through line here is not a dramatic one. A clinic installed equipment, told almost nobody, and the gap between what patients understood and what was actually happening in the room became the whole case. Everything that followed flowed from that gap rather than from the technology itself.

For clinics, the operational lesson is unglamorous and cheap: post clear signage, explain recording during intake, keep consent specific to a stated purpose, and document the conversation. For patients, the lesson is that asking is normal, and a straight answer is a reasonable expectation rather than a confrontation.

The appeal will decide what the final legal outcome looks like, and it would be premature to treat the trial judgment as the last word. What already stands, though, is the practical picture the record paints of consent as a process people can see and question, not a signature collected on the way into a room.