Workplace Investigations

There is no specific law governing workplace investigations in Brazil, but Law 14.457/2022 states that companies must have rules that relate to sexual and other forms of harassment in their internal policies, address the rules for receiving and processing accusations, assess the facts, and discipline any individuals directly and indirectly involved in acts of sexual harassment or violence.

If the investigation has any connection with anticorruption matters, the investigation procedure must comply with Law 12846/2013 (Brazilian Anticorruption Act) and Decree 8420/2015.

As a result, Brazilian employers usually follow the rules determined by internal corporate policies, which often result from international regulations and principles that differ from the Brazilian ones, which inadvertently expose the Brazilian subsidiary to liability. The answers below will highlight common examples of this, when appropriate.

Pursuant to article 98 of the Portuguese Labour Code, the employer has a disciplinary power over its employees during the employment period. This is enforced through the initiation of disciplinary procedures – which can include a preliminary workplace investigation as provided for in article 352(1) of the Portuguese Labour Code – and ultimately the application of sanctions laid down by law or in an applicable collective bargaining agreement.

The Portuguese Labour Code governs disciplinary procedures, which can include a preliminary workplace investigation, in two different sections. On the one hand, articles 328 to 332 establish general rules regarding the imposition of disciplinary sanctions; statutory deadlines and statutes of limitations involved; decision criteria; penalties; and disciplinary records. On the other hand, articles 351 to 358 lay down the rules applicable to dismissals with cause, which are also widely understood to be applicable concerning conservatory sanctions (i.e. those that enable the continuity of the employment relationship).

Additionally, collective bargaining agreements may provide for different disciplinary penalties, as long as the rights and guarantees of employees are not impaired.

Workplace investigations must also abide by the general rules laid down in the Portuguese Constitution, Portuguese Civil Code and Data Protection Laws (including guidelines issued by the Data Protection Agency), as regards the personal rights of the employees.

Spain has not passed any statutes, regulations or policies specifically governing workplace investigations. Instead, general employment and data protection legislation, which safeguards employees’ rights, is fully applicable during these types of enquiries.

These statutes focus on employee privacy. As a result, the application of this legislation:

• limits the matters that may be investigated: they have to be relevant to the employment relationship and there has to be a legitimate reason to conduct the enquiry;
• sets boundaries to the means that may be lawfully used by the company in the investigation: they must be the least intrusive means for employees’ rights (for instance, an email review should be a last resort, reserved for when less-invasive means are not available or would not be effective); and
• states that the companies’ decisions during the investigation must be proportional in light of the facts under review and the legal consequences attached to them.

Collective bargaining agreements, which in Spain generally apply to every company within their scope of application (normally a given economic sector), may regulate workplace investigations. However, it is unusual for collective bargaining agreements to regulate workplace investigations.

Finally, major international corporations with a presence in Spain do tend to have an ethics or whistleblowing policy that governs how an investigation should be conducted. Even if these are self-imposed policies, they are contractually binding and, once established, must be respected by companies.

There is no specific legal regulation for internal investigations in Switzerland. The legal framework is derived from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights. Depending on the context of the investigation, additional legal provisions may apply; for instance, additional provisions of the Swiss Federal Act on Data Protection or the Swiss Criminal Code.

In the UK, the primary employment legislation of relevance to a workplace investigation includes the Employment Rights Act 1996 (ERA 1996), the Equality Act 2010 (EA 2010), and the Employment Relations Act 1999 (ERA 1999).

Other legislation includes the retained EU law version of the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), the Investigatory Powers Act 2016 (IPA 2016) and the Investigatory Powers (Interception by Businesses etc for Monitoring and Record-keeping Purposes) Regulations 2018 (IP Regs 2018), and the Humans Rights Act 1998 (HRA 1998).

In terms of guidance, the Advisory, Conciliation and Arbitration Service (ACAS) have produced a Code of Practice on Disciplinary and Grievance Procedures (the ACAS Code) as well as a Guide to conducting workplace investigations. The Information Commissioner’s Office (ICO) have their Employment Practices Code,  and other pieces of guidance on the data protection aspects of investigations (see question 7).

Most employers will have internal policies governing how workplace investigations should be conducted. The level of detail may vary considerably; public sector and regulated employers may be more prescriptive in their policies, which may even have contractual force. There may also be provisions of the employment contract that are relevant (particularly as regards suspension – see question 3).