P2017-ND-097

The Organization reported that, between mid-November and December 17, 2014, an employee responsible for recruitment, with authorized access to the Organization?s scheduling software database, accessed and ran a number of human resource reports without a legitimate business purpose. These reports contained personal employee information of the Organization?s employees. Shortly thereafter, the Organization received complaints from approximately five to ten employees who claimed that individuals identifying themselves as union representatives had arrived at their homes and knew details of the information at issue. Some employees reported receiving repeated telephone calls from union representatives. At the time, the workplace was not yet unionized. The Organization concluded that the employee had disclosed the information at issue to the union. The information in the human resource reports has not been recovered.