NSFAS Employee Fired for Forwarding Emails Fights Dismissal in Court

A well-paid public employee earning a gross basic salary of R52,250 per month was fired in September 2023 after forwarding work emails to her personal Gmail account. Zenobia Abrahams lost her position at the National Student Financial Aid Scheme following disciplinary proceedings, sparking a protracted legal battle over data security policies and employee rights.

NSFAS Suspends Employee for Forwarding Work Emails Privately

Between 17 March and 11 October, Abrahams forwarded and blind-copied nine work emails containing information from the National Student Financial Aid Scheme network to her private email address. MyBroadband reported that the public entity placed her on precautionary suspension immediately upon discovering the incident, convening a disciplinary hearing before an external chairperson.

The National Student Financial Aid Scheme argued during the proceedings that the transmission exposed the organization to reputational, financial, and organizational risks. According to internal guidelines, employees are strictly prohibited from routing work-related correspondence to personal accounts to prevent information leakage and the spread of computer viruses. The scheme’s security management and acceptable use policies mandate dismissal on the first occurrence of such a breach, leading to her termination on 14 September 2023.

Labour Court Reverses Reinstatement Order for Dismissed Employee

Following her dismissal, Abrahams challenged the decision at the Commission for Conciliation, Mediation and Arbitration. Commissioner CM Bennet ruled in her favor, finding the dismissal unfair and ordering the student payment scheme to reinstate her alongside 20 months of back pay totaling R1.05 million.

The legal victory proved short-lived as the National Student Financial Aid Scheme escalated the matter to the Labour Court of South Africa. The Labour Court determined that Commissioner Bennet based his reinstatement award on an incomplete analysis, misconstruing the nature of the inquiry by requiring the employer to prove actual disclosure of confidential data rather than focusing on the policy breach itself.

Operating as a public entity holding the personal records of tens of thousands of students, the scheme maintains a legal obligation to safeguard sensitive data. The Labour Court ruled that organizations handling vast quantities of personal information possess the right to implement rational policies determining acceptable risk thresholds. Consequently, the court set aside the commissioner’s decision and referred the matter back for consideration by a different commissioner.