On a semi-side topic: Canadian dev here, I always immediately hard delete e-mail correspondence (both inbox and sent) with HR on anything that I feel private about, as I don't want the guys in IT reading it. I know they don't, but I also know they can.
For example, I might trust the head of IT but I might not trust that new intern or "new guy" they just hired.
What do you guys do when it comes to HR correspondence at your places of work?