**Privileged and Confidential | Attorney-Client Communication** Serena, before anything else: **do not send anything to the journalist, do not send the drive to the labor agency yet, do not answer the prospective employer, and do not delete, return, or further access the drive.** The next steps matter. One bad disclosure can turn a legitimate wage-report case into a trade-secret, computer-access, and retaliation nightmare. Here is my category-by-category advice. --- ## 1. Category A — Payroll Spreadsheets and VP Emails **What these are:** 23 payroll spreadsheets showing original and edited overtime entries, and three VP emails directing managers to “move excess hours into the next period.” **May Serena preserve them?** Yes. These are the core documents for your wage report. You lawfully accessed them in your job, they are directly relevant to the violation you reported, and they are the kind of limited retention the law protects when used only for counsel and an authorized regulator. **May they be provided to counsel or the labor agency?** Yes. You may give them to me now, and we may provide them to the labor agency. **Under what protections?** We should not send the entire drive. We should produce only the relevant payroll records through counsel, with a cover letter requesting confidential/investigative treatment. If possible, redact unrelated employee or customer personal information. Keep the native files and metadata intact. **Do not provide these to the press, your prospective employer, or anyone outside the agency/court process.** The protected channel is counsel and the regulator, not the public or a new employer. --- ## 2. Category B — Full Customer Export **What this is:** 14,000 customers’ names, home addresses, bank-account data, and identification numbers, unrelated to payroll. **May Serena preserve it for the wage report?** No. This is not reasonably necessary to substantiate the wage claim. It is unrelated confidential information and customer personal information. Copying and retaining it is the kind of “mass collection” and “retention of unrelated confidential information” that the law does **not** protect. **May it be provided to anyone?** No. Not to counsel for use, not to the agency, not to the journalist, not to a new employer. **What should happen to it?** It must be sequestered. We do not delete it unilaterally, because we now have a preservation obligation and it may be relevant to Avenor’s claims or your defense. But it should be returned or destroyed under a documented forensic protocol. **Exposure:** This category can support a claim for breach of confidentiality, violation of data-privacy obligations, possibly computer-access abuse, and a trade-secret claim if Avenor treats the customer list as proprietary. Having technical access to the reporting tool does not mean you were authorized to copy the full export for a personal purpose. --- ## 3. Category C — Outside-Counsel Memorandum Labeled “Privileged and Confidential” **What this is:** An outside-counsel memorandum analyzing wage exposure. You opened the first page, recognized the privilege label, stopped reading, and copied the folder. **May it be preserved or used?** No. The attorney-client privilege remains in place. Copying it without authority does not waive Avenor’s privilege, and you cannot use it as evidence. Even if it appears helpful, it is poisoned. **Receiving counsel’s duties:** Because I am now receiving counsel, I have a legal and ethical duty to: 1. **Stop any review** of the memo; 2. **Sequester it** so no one in our office uses it; 3. **Notify Avenor’s counsel** that we have come into possession of what appears to be privileged material; 4. **Seek an agreed or court-supervised protocol** for handling it — usually return, destruction, or sealing without use. If anyone in our office has already seen the substance, I need to know immediately so we can wall it off and address any disqualification issue. Do not send this memo to the labor agency. Do not describe its contents to anyone. Do not include it in any production. We also will not rely on a possible “crime-fraud exception” as a self-help license. If that exception is ever litigated, a court must decide it. Until then, the memo is off-limits. --- ## 4. Category D — Pricing Models, Product Source Code, and Sales Strategy **What this is:** Competitive proprietary information for a service your prospective employer competes against. **May Serena preserve or use it?** No. This is the clearest trade-secret category on the drive. It has nothing to do with payroll, and it is exactly the kind of material the law says you may not take, retain, or use. **May it be provided to the prospective employer?** Absolutely not. Doing so would be trade-secret misappropriation and could expose both you and the new employer to suit. Even telling the prospective employer that you have “inside proof” is dangerous, because it signals that you may use Avenor’s confidential information for competitive advantage. **What should happen?** Sequester it now. Do not open, read, copy, or use it. Return or destroy it under the forensic protocol. Avenor may have a legitimate trade-secret claim here; our goal is to make clear that you have not used or disclosed it. --- ## 5. Category E — Personal Notes and Screenshots **What this is:** Dated personal notes from meetings, with quotations from managers, and screenshots of two payroll screens you personally used. **Personal notes:** Your own notes are generally your property. They are not Avenor documents, unless they copy protected company material beyond what is reasonably necessary. These notes appear to be your own contemporaneous record of meetings and are relevant to your wage report. **Screenshots:** Screenshots are not “personal notes”; they are copies of company screens. But because they are limited to payroll screens you personally used and are directly relevant to the wage issue, they fall within the protected category of reasonably necessary retention. **May they be preserved and provided?** Yes. You may keep them and provide them to me and to the labor agency. Redact any unrelated third-party personal information, login credentials, or anything that looks privileged. Do not give them to the journalist or the prospective employer. --- ## 6. The Journalist **No.** Disclosure to the press is not protected. The governing law protects reports to counsel and authorized regulators, not leaks to journalists. If you send the entire drive or even selected documents to a journalist, you will likely: - lose the protective shield for the wage-report documents; - hand Avenor evidence of bad faith; - create trade-secret and privacy liability; - make the labor agency’s investigation harder, not easier; - give Avenor a strong argument that your real goal was not to report a violation but to pressure or harm the company. I understand the desire to make sure the company cannot bury the evidence. But the right way to preserve evidence is a forensic copy, a preservation demand, and a controlled production to the agency — not a press release. --- ## 7. The Prospective Employer **No.** The prospective employer is not an authorized channel. If it is asking whether you have “inside proof that Avenor cuts corners,” it is asking you to bring or use Avenor’s confidential information. That is precisely the kind of competitive use the law prohibits. If asked again, say something like: > “I reported my concerns to the labor agency and I’m cooperating with that process. I can’t discuss Avenor’s confidential information, and I don’t want to create a risk of improper use for either of us.” Do not say you have “inside proof.” Do not show documents. Do not describe documents. If the employer keeps pressing, end the conversation and involve me. --- ## 8. Avenor’s Demand for Immediate Return and Deletion Avenor’s demand is overbroad. We cannot simply delete everything, because: - we have a preservation obligation once litigation or agency action is anticipated; - the drive contains relevant evidence for the wage report; - deletion could be spoliation; - Avenor has offered no protocol to protect forensic integrity. But we also cannot simply refuse to deal with the unauthorized categories. The correct response is: **We will sequester the drive. We will preserve relevant payroll evidence. We will return or destroy the unrelated, privileged, and trade-secret categories under a documented forensic protocol. We will not allow Avenor to dictate destruction of evidence simply because it wants the problem to disappear.** Avenor also cannot legally say that **any** possession of any company file automatically defeats your retaliation claim. That is false. But Avenor can legitimately pursue claims based on the customer export, the privileged memo, and the trade-secret materials. So the strategy is: **separate the protected from the unprotected, and deal with each category separately.** The existence of bad categories does not destroy the good categories, and the good categories do not immunize the bad categories. --- ## 9. Confidentiality, Trade-Secret, Access, and Retaliation Exposure Here is the honest risk picture: - **Category A and E:** You have a strong argument that retention is protected because they are necessary for the wage report and were limited in scope. - **Category B:** Likely independent misconduct. Customer PII and a full export; not necessary. Potential confidentiality breach, data-privacy exposure, and computer-access exposure. - **Category C:** Privilege violation. We must handle it carefully; it cannot be used. - **Category D:** Trade-secret misappropriation risk if you use or disclose it. Even retention after Avenor demands return can be treated as continuing misappropriation. - **Avenor’s retaliation claim argument:** Avenor may discipline or sue for the independent misconduct. The law says it may do that if it is consistent with comparator practice and not a pretext for punishing the report. But Avenor may not use an overbroad confidentiality theory to punish you for the protected wage complaint. - **Your protected activity:** Reporting suspected wage falsification to the labor agency is protected. You may also provide relevant documents to counsel and the agency. That does not mean you can keep or use everything else. Our goal is to preserve your retaliation claim while eliminating the exposure created by B, C, and D. --- ## 10. Concrete Next Communication and Handling Sequence Use this sequence. Do not jump ahead. ### Step 1: Secure the drive immediately - Do not connect the drive to any computer with cloud backup, email sync, or file-sharing software. - Do not open files. - Tell me immediately if you made any other copies, sent anything to anyone, or stored anything in cloud storage. - I will arrange for a forensic expert to take custody of the drive, create a bit-for-bit forensic image, and confirm hashes. That preserves the evidence and gives us a clean chain of custody. ### Step 2: Segregate categories The forensic expert will inventory the drive without opening substantive contents where possible. The expert will segregate: - **A and E** — potentially relevant/protected; - **B, C, and D** — sequestered, not to be reviewed or used. I will instruct the expert not to open anything that appears privileged, customer-related, pricing-related, source-code-related, or sales-strategy-related. ### Step 3: I will notify Avenor’s counsel in writing The letter will say, in substance: 1. We represent Serena Holt. 2. The drive is sequestered and preserved. 3. We have identified documents relevant to her wage complaint; those will be preserved and provided to the labor agency as appropriate. 4. We have also identified materials that appear unrelated, privileged, or proprietary; those are sequestered and will not be reviewed, used, or disclosed. 5. We request a written protocol for return or destruction of the unauthorized categories while preserving forensic integrity. 6. We ask Avenor to confirm that it is preserving the original payroll records, emails, and metadata. 7. We do not waive any privilege, and we do not agree to any unilateral deletion demand. This is also how we satisfy the duty to notify regarding the privileged memorandum. ### Step 4: Produce only A and E to the labor agency I will prepare a narrow, Bates-labeled production of the payroll spreadsheets, VP emails, personal notes, and payroll screenshots. I will ask the agency to treat the materials as confidential and to use them only for investigation/enforcement purposes. I will not send the entire drive. I will not send B, C, or D. ### Step 5: Resolve B, C, and D through a protocol If Avenor agrees to a reasonable protocol, we return or destroy the sequestered categories promptly. If Avenor does not agree, we seek court or agency guidance before returning or deleting anything. We do not act unilaterally. ### Step 6: Keep A and E under seal through the matter We keep the protected documents until the agency investigation, any administrative proceeding, and any related litigation are complete. Then we return or destroy them under a documented protocol. --- **Bottom line:** You may keep and use the payroll evidence. You may not use the customer data, the privileged memo, or the trade-secret materials. You may not go to the press or the new employer. Avenor’s demand for immediate deletion is premature, but we need to move quickly to sequester, segregate, and return what should never have been taken. Please do not communicate further with Avenor, the journalist, or the prospective employer. Send me the drive and confirm you have not sent anything to anyone. I will start the forensic protocol and prepare the Avenor letter.