**MEMORANDUM OF ADVICE**

**TO:** Serena Holt
**FROM:** Counsel
**DATE:** October 26, 2023
**RE:** Preservation, Disclosure, and Liability Regarding Avenor Services Files

Serena, thank you for your cooperation in reporting the wage falsification to the labor agency. You have engaged in protected activity under Rule 1, which shields you from retaliation regarding that report. However, the situation regarding the data on your encrypted drive is legally complex. The rules governing whistleblower protection (Rules 1–2) do not grant immunity for trade-secret misappropriation or privacy violations (Rules 3–4).

Per our instructions, we must segregate the files, manage the privileged material, and respond to Avenor without triggering a self-inflicted loss of your protections. Below is my advice on each category and the necessary next steps.

### 1. Category A: Payroll Spreadsheets & VP Emails
**Status:** **Preserve.**
*   **Analysis:** You had regular access to these files in the course of your job (Rule 2). They are reasonably necessary to substantiate your report of overtime falsification (Rule 2).
*   **Action:**
    *   These files form the core of your evidence.
    *   We may provide copies of these specific documents to the Labor Agency and me (your counsel).
    *   Do not alter or redact these files further, as that could raise questions about spoliation.

### 2. Category B: Customer Export (14,000 Records)
**Status:** **Sequester/Return under Protocol.**
*   **Analysis:** This is "mass collection" of data unrelated to the wage claim (Rule 3). Although you had technical access, you did not use it in your job duties, making this likely outside the scope of "reasonably necessary" retention (Rule 2). It contains sensitive PII (bank accounts, IDs) protected by confidentiality agreements and privacy law.
*   **Action:**
    *   **Do not** share these with the Labor Agency or the Journalist. Doing so converts a whistleblower report into a privacy breach, exposing you to civil liability.
    *   **Do not** use this data in any argument against Avenor.
    *   We must return or destroy this data, but **only** via a documented forensic protocol (Rule 8). Do not simply delete it, or Avenor will claim you destroyed evidence of the payroll fraud.

### 3. Category C: Privileged Outside Counsel Memorandum
**Status:** **Immediate Sequestration.**
*   **Analysis:** You recognized this document was privileged but copied the folder anyway. Under Rule 5, this material remains privileged despite your possession. However, as receiving counsel, I am legally prohibited from using the substance of this document if it contains attorney-client work product you accessed without authority.
*   **Action:**
    *   We must immediately sequester this file on our secure server.
    *   I cannot review the substantive contents for use in your case.
    *   I will notify Avenor’s counsel of the inadvertent receipt and propose a protocol (Rule 5) where they may choose to redact or retrieve it, without waiving privilege for them or penalizing you for its existence.

### 4. Category D: Pricing Models, Source Code, Sales Strategy
**Status:** **Return/Destroy under Protocol.**
*   **Analysis:** These are trade secrets and proprietary material unrelated to your wage claim (Rule 4). Sharing this with a competitor violates the confidentiality agreement and constitutes theft of trade secrets (Rule 3).
*   **Action:**
    *   Do not provide this to your prospective new employer. If you do, they become liable for knowing receipt of stolen trade secrets, and they will likely reject your employment to avoid liability.
    *   This material must be separated from Category A and returned/deleted under the forensic protocol discussed below.

### 5. Category E: Personal Notes & Screenshots
**Status:** **Preserve (with limitations).**
*   **Analysis:** Under Rule 6, these are your property. The personal notes of meetings and quotations do not constitute company records unless they reproduce trade secrets verbatim beyond necessity. The screenshots of the payroll screens you used daily are evidence of your own work environment.
*   **Action:** You may keep these. They support your retaliation narrative. However, ensure no confidential customer data (Category B) is inadvertently captured in those screenshots.

### 6. Requests to Disclose: Journalist & New Employer
**Status:** **Strictly Prohibited.**
*   **Journalist:** Rule 3 explicitly prohibits disclosure to the press. Public disclosure defeats the "confined disclosure" protection required for whistleblower status (Rule 2) and exposes you to defamation or trade-secret claims.
*   **Prospective Employer:** They are asking for information that violates Rule 3 ("use for competitive advantage") and Rule 4 (Confidentiality). Providing Category A (wage data) might be legally permissible for your defense, but providing "inside proof" generally implies sharing proprietary methods or internal strategies which is risky.
*   **Action:** Tell the prospective employer: *"I have reported violations to the appropriate labor authority. I am currently under attorney review regarding my separation. I will not share proprietary company data."* Do not forward the drive to them.

### 7. Avenor's Demand & The Return Protocol
**Status:** **Negotiate via Forensic Protocol.**
*   **Analysis:** Avenor is attempting to use Rule 9 ("existence of one improper category does not strip protection from every lawfully retained item") against you by demanding a "return everything" or face suit. They are threatening a trade-secret suit to bury the retaliation claim. However, Rule 8 states that once a dispute is anticipated (which it is), both sides must preserve evidence. Avenor offering no protocol and demanding immediate deletion risks spoliation claims against *them*.
*   **Action:**
    *   Do not simply return the laptop or wipe the drive yet.
    *   We will draft a "Forensic Return Protocol." This ensures that while we return/destroy the unlawful categories (B, C, D), we preserve a forensic image of Category A for your defense if they attempt to claim you destroyed evidence later.

### 8. Liability Exposure Summary
*   **Retaliation Claim:** Your claim remains viable based on Category A and the report itself (Rule 1 & 7). They cannot use an overbroad confidentiality theory as a pretext to punish the underlying report.
*   **Confidentiality/Trade Secrets:** You face exposure regarding Categories B, C, and D. However, under Rule 9, improper taking of B/D does not automatically strip immunity for A. The goal is to isolate the good from the bad.
*   **Criminal/Civil Risk:** If you share Category B (Customer PII) or Category D (Source Code), you risk criminal charges or significant civil judgments that could exceed any whistleblower award.

### 9. Concrete Next Steps & Handling Sequence
We will proceed immediately in this sequence:

1.  **Segregation:** Do not use the drive again. I will arrange for a forensic copy of the drive to be made in my office. We will separate Category A (Payroll) from Categories B, C, and D.
2.  **Privilege Protocol:** I will draft a letter to Avenor’s counsel regarding Category C. We assert we have sequestered the privileged memo per Rule 5 and will await their instruction on redaction or retrieval without using its substance.
3.  **Return Proposal:** I will send Avenor our Forensic Return Protocol. This document acknowledges that Categories B, C, and D will be returned/destroyed, but requires a court-supervised or mutually agreed witness for the destruction to ensure Category A is preserved for your legal defense.
4.  **Stop Disclosure:** You must not contact the journalist or send files to the prospective employer. I will communicate with the prospective employer on your behalf regarding their "inside proof" request.
5.  **Labor Agency Submission:** We will submit only Category A (and relevant portions of E) to the Labor Agency, explicitly redacting/removing Categories B and D from that submission.

**Conclusion:** You have taken a brave step by reporting the wage violations. To ensure this protects you rather than endangers you, we must be disciplined about the data we hold. We will fight for your retaliation claim using Category A, but we must return the rest to avoid a separate lawsuit that could derail your case.

Please sign the attached Authorization for File Segregation so I may initiate the forensic copy and protocol negotiations immediately.