A suspected theft.
A disputed transaction.
A reported security threat.
Now some alerts were created before staff had observed any actual misconduct.
Certain customers were labeled high risk based on information that had little connection to specific unlawful behavior.
The company called the method predictive retail protection.
Its sales representatives praised the system as innovative.
The compliance officer was less impressed.
She had asked how the risk scores were calculated.
The technical department provided vague explanations.
She requested examples.
Several involved customers whose purchases were legitimate.
She asked why those encounters were recorded as successful interventions.
A senior manager told her the company was measuring deterrence.
She looked at the figures.
“What was deterred?”
The manager smiled.
“Potential loss.”
She frowned.
“How do we know loss would have occurred?”
The manager became irritated.
“That's what the algorithm is designed to predict.”
She nodded slowly.
Then asked whether the system had been evaluated for unfair demographic impacts.
The manager sighed.
“Don't turn everything into a civil-rights seminar.”
She had stopped asking questions in meetings after that.
But she continued keeping accurate records of the concerns she raised through the company's formal channels.
Now, overhearing the executive order deletion of the judge's alert, she understood that the problem might be far more serious than misleading performance statistics.
She opened the company's records-management policy.
It required preservation of relevant information when litigation or official investigations were reasonably anticipated.
The federal proceeding concerning the retail-security partnership had already generated preservation obligations.
The supermarket confrontation created additional reasons to protect the records.
Deleting an alert under those circumstances was not an ordinary administrative correction.
She contacted the company's general counsel through the designated reporting process.
Then she contacted her own attorney for independent advice.
She did not secretly break into restricted databases.
She did not send confidential customer information to strangers.
Instead, she documented what she personally witnessed, identified the systems involved, and requested that relevant records be preserved.
Her attorney advised her about lawful whistleblower channels and her own responsibilities.
Several days later, she agreed to provide a formal statement to the appropriate investigators.
Her decision frightened her.
The company had paid her salary for eight years.
She had friends there.
She knew employees who had nothing to do with the suspected scheme.
If the company collapsed, ordinary workers could lose their jobs.
She worried about that.
But she also knew what happened when organizations treated accurate records as disposable.