employee sent database ( I assume Access DB ) through email , but left in patient personal information the receiver had no authorization to see . Receiver noticed error , deleted the data immediately and notified the sender of the security incident . ;