P2015-ND-05

A Human Resources manager emailed a letter to an employee at the employee?s request. The letter contained the results of an internal investigation of the employee and advised of the decision to terminate the employee. The email was sent to the wrong email address. The email was not encrypted. The Organization became aware of the privacy breach shortly after transmission but efforts to recall the message failed and the Organization was unable to confirm that the email had been destroyed.