Accessing a leavers mailbox

Soldato
Joined
11 Feb 2004
Posts
4,532
Location
Surrey, UK
Is there any guidance or regulatory obligation an employer should be aware of? In this instance, an employee has left an organisation but deleted all their mailbox contents on the last day, because of the large amount of personal email included. Now managers are asking for access because the mailbox would have contained important emails. But I don't think it's that straight forward. Is it?

Does GDPR come into play? What rights does an employer have? It is possible to retrieve the deleted emails, but should they?
 
Soldato
Joined
22 Aug 2005
Posts
8,840
Location
Clydebank
Presumably its the companies mailbox, so they can do as they wish.

if employee was using it for personal things then that was dumb of them . Unless that was allowed (which i doubt). But in any case company resources
 
Permabanned
Joined
9 Aug 2008
Posts
35,707
You are not supposed to use a work email for personal things. It belongs to the company not the person so they can put a request (as long as it comes from a higher up than the member of staff). I get requests like this all the time. I know who is higher than who in companies I deal with so I know when to grant a mailbox delegation.
 
Soldato
OP
Joined
11 Feb 2004
Posts
4,532
Location
Surrey, UK
I'm curious about the legal aspects with regards to users deleting their emails before leaving an organisation.
The emails are retrievable, but does that mean an employer can act on it without consent from the ex staff member? Particularly in the absence of any such policy?
 
Soldato
Joined
18 Oct 2002
Posts
3,506
Location
UK
Depends how goods your employment contract is. A decent one will outline that all work conducted using company provided assets (such as an email account) remain the property of the employer and shouldn't be used for personal use. That gives you enough of a basis to do what you want. In the absence of it being in the contract or a policy on it then IAMNAL but I'd argue the fact you have and always had admin capability to get to them if you wanted is enough of a binding agreement that use of the email system is the employer's right to do so as they wish. GDPR may say otherwise though so if you think it's going to come back to bite you then seek professional advice.
 
Soldato
Joined
12 Dec 2006
Posts
5,129
I'm curious about the legal aspects with regards to users deleting their emails before leaving an organisation.
The emails are retrievable, but does that mean an employer can act on it without consent from the ex staff member? Particularly in the absence of any such policy?

Act on it how. Your question is very vague.

I can only assume that someone did something dubious via company email, then thought deleting the emails would cover their tracks or prevent it from being discovered. Which it won't. Probably did it as they were leaving our quitting. Thought they were untouchable. Well they aren't.
 
Soldato
Joined
19 Dec 2010
Posts
12,019
Is there any guidance or regulatory obligation an employer should be aware of? In this instance, an employee has left an organisation but deleted all their mailbox contents on the last day, because of the large amount of personal email included. Now managers are asking for access because the mailbox would have contained important emails. But I don't think it's that straight forward. Is it?

Does GDPR come into play? What rights does an employer have? It is possible to retrieve the deleted emails, but should they?

Does the company have any policy regarding emails? Since GDPR, Employers need a valid reason for accessing an employees work email.

I wouldn't be too sure what happens if an employee leaves the company. I am pretty sure the same rules apply.

So, it all depends on what email policy they have.
 
Soldato
Joined
18 Oct 2002
Posts
15,177
Location
The land of milk & beans
The issues become less clear cut if you are trying to retrieve non-business related emails
Not really. If it's a mailbox provided by the company for use by the employee, held on a server/service provided by that company, then the content of the mailbox is owned by the company and they are free to access it at any point, regardless of the person's employment status. There's no distinction between the content of the emails the company is/is not allowed to access in that mailbox.

As @BigT pointed out above, this should all be covered in the employee contract, specifically stating that the company-provided mailbox should not be used for personal business and that it can be accessed by authorised personnel at any time.
 
Last edited:
Soldato
Joined
12 Dec 2006
Posts
5,129
People really should have more cop on.

If you are working on a a cloud based system. Even if you work on a personal doc on your desktop then delete it, it will be often still be recoverable in the could for 3 months or so, depending on the policies in the organization.

if people are WFH, they might mistake of treating the work computer/laptop as ok for personal use if its at home. It isn't. People should be careful.

Email is the same. keep work and personal stuff seperate. You could end up leaving work tomorrow and never have access to those systems again.
 
Permabanned
Joined
9 Aug 2008
Posts
35,707
I'm curious about the legal aspects with regards to users deleting their emails before leaving an organisation.
The emails are retrievable, but does that mean an employer can act on it without consent from the ex staff member? Particularly in the absence of any such policy?

Don't think there is a legal aspect. Basically if the person leaving deletes them there's not a thing the company can do apart from restore the mailbox from backup. They have backups right?

You are restoring the mailbox for business emails right? or are you wanting to restore them to go snooping through their personal ones?
 
Soldato
Joined
5 Mar 2010
Posts
12,305
I'm curious about the legal aspects with regards to users deleting their emails before leaving an organisation.
The emails are retrievable, but does that mean an employer can act on it without consent from the ex staff member? Particularly in the absence of any such policy?

Why would a company need permission from an ex-employee to read their work emails? They're not the property of the ex-employee in the first place.
 
Associate
Joined
28 May 2021
Posts
1,305
Location
St Albans
Some good responses here... let's ask a related question.. if someone WAS leaving and wanted to make life difficult w.r.t email what would make it hardest to retrieve emails? :) Asking for a friend :D
 
Soldato
Joined
12 Dec 2006
Posts
5,129
Some good responses here... let's ask a related question.. if someone WAS leaving and wanted to make life difficult w.r.t email what would make it hardest to retrieve emails? :) Asking for a friend :D

If they have a backup system nothing. They have a copy for ever, and you can't access it. Same with the cloud.
if you move it to local storage PST etc, they won't have a copy. But you probably can't do that, and it would likely be against the rules and could get you fired in some places.
 
Associate
Joined
28 May 2021
Posts
1,305
Location
St Albans
Thanks... TBH I think most firms like to use electronic filing so by merely not filing stuff for future drones you are doing your "bit" to be a disruptive influence... having said that, why file stuff cos if its important someone else will have ? :D
 
Back
Top Bottom