Risk appears in the sequence
Separate events become a legal pattern when they are seen together.
Cross-domain patterns that signal legal risk rarely announce themselves in a single complaint. They show up as separate events — a comp claim, a leave request, a safety report, a performance write-up — that only look dangerous when you see them together.
Retaliation rarely announces itself. It appears as a series of separate decisions that add up when the full sequence is visible.
Five patterns worth seeing early
Protected activity. Then a shift. Then adverse action.
The Sudden Discipline
An employee files a workers’ comp claim, returns to modified duty, then receives a write-up for an old issue. Across multiple employees, the timing stops looking coincidental and starts signaling retaliation.
Claim → return → old disciplineThe Accommodation Breakdown
An ADA accommodation is approved but never fully implemented. When multiple employees experience the same failure and later complain or leave, the issue is systemic—not isolated.
Approval → manager resistance → complaintThe Leave-to-Termination Pipeline
An employee returns from FMLA leave to a changed schedule, reassigned work, and eventual termination. A higher post-leave termination rate reveals interference that one case cannot.
Leave → changed conditions → terminationThe Safety Complaint Silence
A documented hazard goes unresolved while the reporting employee loses hours, is reassigned, or receives unrelated discipline. Repetition across reports signals OSHA retaliation risk.
Report → no correction → adverse actionThe Concentrated Manager
When complaints, comp claims, accommodation requests, and terminations cluster under one manager—and protected employees leave at a dramatically higher rate—the concentration itself becomes the signal.
Multiple domains → one manager → abnormal rateWhy fragmented systems miss it
Every event looks ordinary in its own system.
The sudden-discipline pattern lives between workers’ comp and performance documentation. The leave-to-termination pattern requires FMLA dates and later employment actions. The concentrated-manager pattern spans terminations, complaints, accommodations, and safety reports.
These questions require a single view across domains. When the data is scattered, the sequence disappears.
The “should have known” standard
Documentation is not the same as a compliance program.
If the data exists and the pattern is present, monitoring is what turns records into controls.
The DOJ Compliance Program Guidance asks whether organizations monitor compliance risks, analyze data to identify patterns, and maintain controls that detect violations. Cross-domain correlation is what makes those answers real.
What the data should answer
Four questions that turn scattered records into an early-warning system.
How often does adverse action follow return to work—and which managers have unusual rates?
How often are employees terminated within 12 months of leave, compared with the baseline?
Which complaints produce corrective action, and which reporters face adverse action within 90 days?
Which employees have multiple protected activities, and what happened after each one?
If these questions can be answered because the data is analyzed together, there is a compliance program. If they cannot, there is only hope—and hope is not a control.