Message Queue: “To” field preserve the recipient email address used at send time (audit) / Point in time email address in the Message Queue
In the Message Queue, the “To” field currently displays the user’s current profile email, not the email address that was actually used when the message was sent. When a user updates their email address, historical messages appear as though they were sent to the new address, even when they were not. This makes it impossible to reliably determine which email address received a message at the time it was issued.
This is an issue for auditability, Freedom of Information (FOI) requests, privacy breach investigations, and resolving disputes about notification, delivery, or non‑receipt. A message log must be able to stand on its own as an authoritative record of what the system did at a specific point in time.
We believe this represents a gap in system compliance and traceability. The system should retain and display an immutable snapshot of the recipient email address used at send time (while still associating the message to the user ID).
Jessica Kirkwood
shared this idea