I'm structuring this as a formal counsel memo to Serena, organized by category with clear directives and practical next steps. I need to cover immediate actions like halting all access, securing the drive with proper chain of custody, and placing it under my control as privileged material. I'll also address the sensitive categories—sequestering privileged information, quarantining the problematic Category B and D materials—and lay out a firm protocol that refuses blanket deletion while proposing a neutral vendor to handle the review process. The memo should also include a litigation hold letter to Avenor and establish clear boundaries around disclosure to journalists and new employers.

The 9 GB mass collection itself is a liability—she grabbed an entire folder rather than targeted files, which undermines any "reasonably necessary" defense. I'm framing this as a mitigation opportunity: the fact that she acted promptly, kept it unopened, and is now cooperating with sequestration and protocol shows remediation. On the Category B side, the customer data breach creates notification obligations and potential liability, so unilateral deletion could look like spoliation. The answer is neutral escrow with hash-verified deletion under protocol—no review, no risk. For the retaliation claim, I'm analyzing pretext and comparators; her Category A retention is likely protected speech, while any discipline for B and D misconduct won't defeat the underlying report. The prospective employer question gets a clean, unambiguous no.

Now I need to address the new employer angle carefully—she cannot hint at inside information or use retained materials to gain competitive advantage, or she'll face trade-secret misappropriation and inevitable disclosure claims that will tank her retaliation case. On the journalist route, that's off the table entirely; disclosure breaches confidentiality, destroys privilege, and exposes customer data, handing Avenor its best defense. The real path is through the agency's subpoena power and litigation hold to prevent document burial, with counsel escalating if needed. I'm also noting that her screenshots of payroll screens and personal notes are defensible, though manager quotes are her observations.

For