I am sitting here feeling quite panicked and would really appreciate some advice from anyone with legal or HR experience. I resigned with immediate effect from a small mission-led limited company earlier this month after a very difficult period involving disability discrimination and a failure to provide reasonable adjustments. They have agreed in writing to pay my notice period and accrued leave at the end of April, and I am currently on a doctor-certified fit note for work-related stress.
While my employer knows I am a member of a union, they do not yet know that I am preparing a potential legal claim with their help, though they are aware that I have an active Subject Access Request in progress with them. They have not yet seen my full internal log of evidence, which includes about 13 pages of notes and screenshots documenting the issues I faced.
About 10 minutes ago on a Friday evening, I received a formal email from the directors demanding that I acknowledge a confidentiality reminder and confirm that I have securely deleted all company information and files by first thing Monday morning. They are threatening legal action for any breach of these obligations. They quoted the confidentiality clause from my contract but notably left out the part that says these provisions do not affect my right to make a protected disclosure or my duty to disclose information for legal or regulatory reasons.
I want to be clear that I have not retained any information I am not entitled to, nor do I have any intention of misusing any information. One of the main reasons I left the company was because all work was conducted on personal devices using shared emails and folders, and despite me repeatedly raising concerns about these security practices, nothing was ever done.
I am very concerned that if I provide a blanket confirmation of deletion, I would be forced to destroy evidence that is essential for my legal claim and for checking their SAR response when it eventually arrives. It feels like this sudden Friday night deadline and legal threat might amount to victimisation since they know a dispute is ongoing and I have filed a SAR. I cannot reach my union representative before their deadline on Monday morning, so I really need a sanity check. Is such a short weekend deadline even enforceable, and does their demand for deletion override my legal right to keep evidence for a tribunal or for reporting regulatory breaches like their data security failures? It feels like a blatant attempt to intimidate me into destroying my own case and I am not sure how to handle it.