diff --git a/api/src/ProposalSystem.Api/Controllers/AuthController.cs b/api/src/ProposalSystem.Api/Controllers/AuthController.cs
index afdd9b8..3cfff2a 100644
--- a/api/src/ProposalSystem.Api/Controllers/AuthController.cs
+++ b/api/src/ProposalSystem.Api/Controllers/AuthController.cs
@@ -120,8 +120,8 @@ public class AuthController : ControllerBase
             if (user.Role != role)
             {
                 // Fix: API-M13 — log previous role on Cognito-synced role changes
-                _logger.LogInformation("User {Email} role changed from {OldRole} to {NewRole} via Cognito sync",
-                    user.Email, user.Role, role);
+                _logger.LogInformation("User {UserId} role changed from {OldRole} to {NewRole} via Cognito sync",
+                    user.Id, user.Role, role);
                 user.Role = role;
                 changed = true;
             }