Rachel displayed a flow diagram on the wall. Under the words EXECUTIVE SECURITY REQUEST appeared a single arrow leading directly to investigation, with no independent review between the two. The design had been introduced following a genuine security concern at headquarters, then expanded because senior management complained that additional approvals caused delays. Over time the exception had become a routine pathway; almost no one had checked whether the private information collected was necessary.
"How could this have gone on without the board's knowledge?" George asked.
Thomas opened the program history. "Oversight was delegated to the security director. The board was told requests remained subject to policy. It appears we relied on assurances instead of examining the records."
Clare gestured toward the screen. "The program protects our executives. There have been threats. My request wasn't completely unreasonable."
"Real threats require real investigation," Sarah said. "That is not the question. The question is whether someone with influence can make a company investigate a private citizen simply by selecting the right category on a form."
Rachel displayed several anonymized descriptions. Some involved former contractors who had disputed invoices. Others were neighborhood acquaintances of executives, journalists asking uncomfortable questions, and former employees involved in labor complaints. In most cases investigators had gathered publicly accessible information, but the resulting files had been stored in a way that could affect internal risk judgments without giving the subjects an opportunity to correct mistakes. One investigation had begun after a vendor criticized a delayed payment on social media; another followed a disagreement at a charitable event.
David listened while Thomas questioned the scope of the data collection. He thought of the HOA notice that had labeled him aggressive, and of the police stop that had made him prove the property he already owned. Every institution in the chain had possessed some legitimate purpose: public safety, neighborhood standards, corporate protection. The harm appeared when a person with influence was allowed to substitute certainty for evidence, and the procedures moved faster than anyone could challenge the premise.
"Freeze the program," Thomas said to Rachel. "Preserve the existing records and prevent anyone from opening new investigations without approval from independent counsel. We need a full audit."
Rachel nodded and started documenting the action. David asked that an outside ethics firm review all seventeen cases and any related investigations during the same period, not merely Clare's request. Wherever legally appropriate, people who had been improperly investigated should receive notice, an opportunity to correct false information, and deletion of material the company had no legitimate reason to retain. The request was not a grand speech. It was a list of safeguards, the sort of unglamorous work he trusted more than another promise about values.
"That review could embarrass the entire company," George said, not as an objection but as an acknowledgment of what transparency might cost.
"Possibly," David answered. "But if the company survives by hiding what it did, we haven't fixed it. We've only made the next person easier to harm."