I am also fairly sure employees are generally not personally liable.
The issue here is while employees aren't personally liable if they discuss Google wrong doing, Google is liable, which causes the culture of secrecy and deletion.
So the comment I was replying to is kind of wrong about "liability" and the root cause here. Because yeah..Google isn't gonna not be liable for stuff they as an organization of people do. That can't be helped.
According to some at the DoJ, there are usually individuals liable for these sorts of violations: https://www.justice.gov/opa/file/826721/dl