> Some things are just common sense. It wasn’t her role to disseminate information about any type of compliance outside of security. As a professional, you should know what’s appropriate in a workplace based on your position.
"Common sense" often isn't as common or as sensible as some people think.
You often make seemingly-authoritative statements like "it wasn't her role." Avoiding post-hoc rationalizations based on the fact that she was fired, can you explain to me how that was communicated to her?