http://www.nytimes.com/2016/05/26/us/politics/state-department-hillary-clinton-emails.html?_r=0 Hillary Clinton should have asked for approval to use a private email address and server for official business. Had she done so, the State Department would have said no.
She should have surrendered all of her emails before leaving the administration. Not doing so violated department policies that comply with the Federal Records Act.
When her deputy suggested putting her on a State Department account, she expressed concern about her personal emails being exposed.
In January 2011, the Clintons' IT consultant temporarily shut down its private server because, he wrote, he believed "someone was trying to hack us."
The State Department began disciplinary proceedings against Scott Gration, then the American ambassador to Kenya, for refusing to stop using his personal email for official business.
http://www.cbsnews.com/news/state-dept-audit-finds-hillary-clinton-didnt-comply-with-email-policies/A State Department audit has faulted Hillary Clinton and previous secretaries of state for poorly managing email and other computer information and slowly responding to new cybersecurity risks.
The Associated Press, which obtained the report, says that the audit cites "longstanding, systemic weaknesses" related to communications. These started before Clinton's appointment as secretary of state, but her failures were singled out as more serious.
CBS News has also obtained a copy of the report, which singles out Clinton among her predecessors.