corp controls over who receives declined payment notifications

I have staff receiving confidential declined parent payment notifications that have no business receiving this information. I also have NO control to change this. This puts our operation at risk for adversely sharing confidential client information.