P2021-ND-147

On February 21, 2020, a copy of the Organization?s March 14 and 15, 2020 Board of Directors meeting agenda was inadvertently posted as a PDF file on its website. The file could be accessed by its membership, instead of the intended audience of the Board of Directors alone. The agenda included the application materials from individuals who wished to become committee members and was accessible on the website only if the PDF file was downloaded by a visitor to the site. On February 28, 2020, when the Organization was made aware of the issue, it removed the file from the members? portion of the website on the same day. The Organization was able to determine that access to the page on its website where the file appeared was only by authorized persons. However, it has not been able to rule out the potential the file was accessed by an unauthorized person.