CEA's obligations around confidentiality would also apply to the sharing of Frances' experiences in the doc?
The sharing of the document with people who probably shouldn't have seen it seems to have primarily been done by Riley in the original narrative (which is inappropriate, to be clear). The original post says that the people CEA's HR shared it with was the COO and legal team. That seems appropriate to have done including in cases where CEA handled this well, as they would be the people evaluating if harassment occured and how to respond.
It sounds like a lot of really bad things happened in this case, and it may have been handled really poorly, but I don't think from the narrative that has been presented so far there is strong evidence it was shared inappropriately by anyone except Riley (though of course if the description of the contents is accurate, Riley sharing it is a form of harassment).
The sharing of the document with people who probably shouldn't have seen it seems to have primarily been done by Riley in the original narrative (which is inappropriate, to be clear). The original post says that the people CEA's HR shared it with was the COO and legal team. That seems appropriate to have done including in cases where CEA handled this well, as they would be the people evaluating if harassment occured and how to respond.
It sounds like a lot of really bad things happened in this case, and it may have been handled really poorly, but I don't think from the narrative that has been presented so far there is strong evidence it was shared inappropriately by anyone except Riley (though of course if the description of the contents is accurate, Riley sharing it is a form of harassment).