I just joined an organization and became an event manager. My mind was boggled by the access that I was granted. To be able to access all personal information (name, address, phone number) for all members is just not acceptable. It flouts every information security rule in the book. In order to get around this deficiency, we now have to have a tight group of event admins that respond to emails from event conveners because we can't grant them admin access without opening ourselves up to breaches of personal information. How do you get away with this?
I just joined an organization and became an event manager. My mind was boggled by the access that I was granted. To be able to access all personal information (name, address, phone number) for all members is just not acceptable. It flouts every information security rule in the book. In order to get around this deficiency, we now have to have a tight group of event admins that respond to emails from event conveners because we can't grant them admin access without opening ourselves up to breaches of personal information. How do you get away with this?