This can be a result of recycling or reusing a former employee's email. Blissfully, HR and Finance tool maintains records of former employees. As a best practice, we recommend maintaining a unique email address for both current and former employees. Reusing or recycling an email is a possible security risk that may expose personal data to unintended users.
Many Saas tools will happily grant personal data to the wrong person if they have the relevant email address. In the world of the internet, your email address is your ID.
For example, when you request a new password through "Forgot your password?" process. New instructions are sent directly to the email associated with the account. In most cases, there is no verification process on the identity of the user. The tool assumes that the owner of the email is the rightful owner. When an email is reused, we run into a risk of exposing the former employee's email and personal data to the new employee.