P2017-ND-006

On February 10, 2015, a Registration Assistant with the Organization emailed copies of a member?s driver?s license, passport, and communication thread to the wrong individual. The unintended recipient contacted the Organization on February 17, 2016, one year later, and reported the error. The unintended recipient confirmed she destroyed copies of the original email and attached documents. The email was sent without a password or encryption.