What goes wrong when send confidential hr note is shared insecurely

• Email archives surface in litigation discovery. Microsoft Purview, Google Vault, and Mimecast retain HR drafts for the horizon Legal sets — typically seven years. A subpoena under FRCP Rule 34 forces production, and a hedged sentence from a 2023 PIP draft becomes Plaintiff's Exhibit 12.
• HRIS audit logs do not capture the why. Workday and BambooHR record that a salary changed from X to Y on a date; the rationale lives in Slack or email. When an employee files a pay-equity complaint, the bare HRIS row offers no defense — and the surrounding messages are what discovery requests.
• Manager screenshots of negative feedback. When a manager delivers a written warning or low rating, the recipient often screenshots it onto a personal phone before composure returns. That image lands in iCloud Photos, becomes EEOC intake evidence, and circulates within hours.
• Severance terms leaking before signature. Pre-signature drafts of separation agreements — dollar amount, non-disparagement language, ADEA OWBPA-required 21-day review references — shift negotiation if leaked. A leak can trigger NLRB Section 7 scrutiny on overbroad non-disclosure clauses, or invite competing demands from peers who hear the figure.