A Labor Relations Specialist, based in Washington, D.C., violated policies when she shared access to folders and files on her company OneDrive account with her personal Gmail account. Many of the folders and files contained information of a sensitive nature. While our investigation found that the employee did not distribute these files beyond her Gmail account and she was taking these actions for a legitimate business purpose, she also did not obtain prior approval nor an exception from company policy, as is required.