During a recent OIG investigation, we found that the National Indian Gaming Commission (NIGC) has an internal policy that permits authorized senior staff to obtain access to employee emails to ensure “efficient and proper operation of the workplace,” or to search for “suspected misconduct.” We found, however, that the NIGC has no systems, processes, or procedures in place to approve, track, or account for internal email queries of employees’ emails.
While we found no U.S.