E-mail necessarily generates multiple copies in multiple locations and a number of people have access to e-mail systems. Preferred mechanisms would allow controlled access to the personal data and the possibility of deletion when the purpose of processing has expired. 

• The use of e-mail for communicating personal data is to be avoided wherever possible.
• If e-mail is justified, attachments containing personal data should always be encrypted.
• Secure collaboration workspaces are the preferred mechanism.