Workplace Investigations

Austrian law does not impose an obligation on employers to conduct internal investigations and they do not have to follow a specific legal pattern when doing so. However, an obligation to conduct internal investigations may arise out of certain provisions of criminal, company or even labour law – in particular, an indirect obligation arising from an employer's duty of care, which requires them to act against employee mistreatment, such as bullying.

If such internal investigations are initiated, compliance with labour law and data protection regulations is mandatory. According to section 16 of the Austrian Civil Code (ABGB), the employer must also protect the personal rights of the individual. It is important to emphasise that a company's internal investigation is a private measure and differs from official investigations.

There is no specific law governing workplace investigations in Brazil, but Law 14.457/2022 states that companies must have rules that relate to sexual and other forms of harassment in their internal policies, address the rules for receiving and processing accusations, assess the facts, and discipline any individuals directly and indirectly involved in acts of sexual harassment or violence.

If the investigation has any connection with anticorruption matters, the investigation procedure must comply with Law 12846/2013 (Brazilian Anticorruption Act) and Decree 8420/2015.

As a result, Brazilian employers usually follow the rules determined by internal corporate policies, which often result from international regulations and principles that differ from the Brazilian ones, which inadvertently expose the Brazilian subsidiary to liability. The answers below will highlight common examples of this, when appropriate.

There is no specific legislation governing workplace investigations in Turkish law. However, there are general principles stemming from Labour Law No. 4857 as well as good practice principles. Data protection laws also occasionally intertwine with these. The internal codes and policies of the company should also be followed throughout the process.

In general, an internal investigation is only initiated if there is suspicion of a violation. The decision to commence an internal investigation is up to the company, and it has to weigh the pros and cons. For limited liability companies, which are subject to the Association Responsibility Act, an internal investigation may exempt them from criminal liability. Disadvantages may include investigation costs, disruption of operations, discovery of information requiring later disclosure, possible negative media coverage and increased risk of exposure to external parties.

Investigations can relate to specific individuals, departments, or the entire company. An investigation may include various measures, such as obtaining and analysing files and documents, conducting questionnaires and employee interviews, monitoring internet use, video or telephone surveillance of employees and setting up whistleblowing hotlines. Not all measures are acceptable without restrictions. The provisions of labour law and data protection law must always be complied with.

To avoid wasting resources, the objectives of the investigation should be defined in advance. In addition, the selection and sequence of instruments to be used should be determined. A legal assessment of the chosen measures is essential to avoid legal complications.

Workplace investigations usually commence on the receipt of an allegation, which can be presented orally or in writing to an assigned member of the company (usually, within the HR, Compliance or Legal Departments, or to a direct supervisor) or via an external channel, as determined by the company’s policy.

The need to initiate an internal investigation may arise from the receipt of information from various sources. Reporting is one of the most common sources and can be in different forms. In Turkey, while conventional methods such as reporting to a direct supervisor, human resources or executives is quite common, whistleblowers also use reporting mechanisms such as web-based forms, telephone hotlines or e-mail, if such mechanisms exist. It is critical to obtain as much information as possible from the complainants at this initial contact, to make a sound decision on whether or not to commence an investigation. There is no requirement to decide to start an investigation and it can be commenced through a corporate resolution (eg, ethics committee resolution or board resolution) of a decision-making body or a decision of the body or person who has such authority under the company policies. The investigation team who will conduct the process may also be approved by the company's decision-making body. It is also advisable to have a preliminary inquiry for the complaints, before commencing a fully-fledged investigation.

Yes. An employer may always, and without legal restrictions, temporarily suspend an employee during an internal investigation, provided he or she continues to be paid.

However, suspending the employee does not release the employer from an obligation to terminate employment without notice. It must be clear to the employee that the suspension is a temporary measure in preparation for dismissal. A suspension does not entitle the employer to postpone the reasons for dismissal for any length of time. The longer the suspension lasts, the more likely it is that the employer intends to keep the employee.

Yes, an employee can be suspended during or before a workplace investigation. However, suspending an employee is not a legal requirement in Brazil. It is also not standard business practice and entails legal risk, as detailed below.

While internal policies in line with a company’s global investigation approach may determine whether investigated employees are suspended during an investigation, the suspension of an accused employee is not recommended. The only exception is when the accused employee, upon becoming aware of the existence of the investigation, poses a clear and imminent risk of physical danger to other employees or interfering with the investigation.

The suspension of an employee during an investigation makes it difficult for the company to keep the investigation confidential, because the absence of the investigated employee will have to be explained to his or her colleagues and business contacts. As a result, the investigated employee may be exposed to the stigma of being associated with potential misconduct.

Even if the accusation is confirmed and the individual is terminated with cause, the employer cannot disclose the reason for the termination or that the contract was terminated for a cause or violation in the employee’s employment records. Also, if the employer shares such information with prospective employers they may be liable for damages.

Termination for cause on the grounds of dishonest conduct, if not upheld by the labour court, usually leads to liability for damages to the former employee due to the accusation and the stigma associated with it. 

Therefore, if the company decides to suspend the employee during the investigation and terminate his or her employment at the end of the investigation, the suspension will be associated with wrongdoing, and the individual will have grounds to claim damages for the association between the termination, the investigation and wrongdoing, which will likely be presumed by a labour court (damage in re ipsa).

On the other hand, if the accusation is deemed groundless, the connection between the employee and potential wrongdoing resulting from his or her suspension can be used as grounds for damages because of the resulting environment at the workplace or the development of mental health conditions such as depression or anxiety by the investigated employee due to the investigation and uncertainty about the negative effect of it on his or her reputation. 

Because suspension during an investigation is not a disciplinary measure, if the company decides to suspend, the employee’s salary cannot be affected. Also, the suspension period must be as short as possible, and can in no circumstance be longer than 30 days. If it exceeds 30 days, it would trigger termination for cause by the company, which increases the amount of statutory severance due to the employee.

An employee can be suspended during a workplace investigation provided his or her prior written consent is obtained to this effect during or immediately before the investigation. Obtaining a generic written consent from the employee regarding suspension, which is not tied to a specific event, will not be valid. If there is a suspension of employment due to the workplace investigation, the obligations of the parties arising from the employment relationship continue, except for the employer’s obligation to pay a salary (and provide benefits, if any) and the employees’ duty to perform work.

There is no provision or established court decision setting forth the rules regarding the length of the suspension period; however, as a general rule, this period should be as brief as possible, so as not to cause any impression that the employment relationship has been terminated by the employer. Suspension of an employee on full pay during a workplace investigation, which is also known as garden leave, is a commonly used alternative to a conventional suspension method described above. During the garden leave period, an employee can be banned from entering the workplace and performing any of his or her duties either partially or entirely while continuing to be paid his or her regular salary, along with fringe benefits. Garden leave is not a concept regulated under Turkish employment legislation, but rather developed in practice, mostly by the Turkish subsidiaries of multinational companies. An ideal approach for the implementation of garden leave would be to obtain the written consent of the employees either at the commencement of employment or during the investigation.

There are no prescribed minimum standards for this procedure. The responsibility for conducting these investigations lies with the employers. Internal compliance or legal teams are often entrusted with this task, as they are familiar with internal protocols. In practice, these investigations are often overseen by an internal team, occasionally with the assistance of law firms or auditing firms. Those involved in the investigation must remain impartial. Potentially biased persons, such as those under investigation and their close associates, should be excluded from participation.

There is no statutory rule, and therefore the investigator can be chosen by the company.

In sensitive matters, it is recommended that attorneys undertake the investigation due to legal privilege. Engaging external lawyers increases the confidence of witnesses and parties in the independence and lack of bias of the investigation process, especially when the allegations involve senior employees.

Additionally, attorneys are trained to collect information based on legal thresholds that apply to the allegations, allowing the decision-makers to understand the events as they would be posed before a labour judge or a prosecutor, and enabling them to clearly assess the legal risk involved in the situation.

There is no compulsory requirement or qualification arising from the law as to the selection of the investigation team. The number and the profile of the investigation team need to be decided according to the characteristics of the case, whereas the head of the investigation team needs to be a competent and experienced investigator. A conflict of interest review is required to be conducted for the whole investigation team to protect the interests of the company. As conflicts of interest can also arise during an investigation process, relying on the support of an outside legal team should be considered, particularly for internal investigations that are likely to expand.

If the investigated employee believes that individual measures violate his rights, he or she can defend him or herself against them, but he or she cannot stop the entire investigation.

In principle, the employee has various rights such as access, rectification, erasure and the right to contest the processing of his or her data (articles 12-17 and 21 GDPR). Should these principles be violated, the employee has the right to lodge a complaint with the data protection authority.

Employees are not legally prohibited from bringing legal action, but because investigations are within an employer’s powers, a legal action to broadly stop an investigation (as opposed to an injunction to prevent a limited measure within an investigation, such as the review of private messages) would likely be deemed groundless.

There is no specific remedy provided under Turkish law to stop the investigation. One may consider requesting an injunction from a court for this purpose, but it is less likely that such a request would be successful. This is because investigations are often conducted for fact-finding purposes and to obtain an injunction the claimant will need to prove that this fact-finding exercise will pose a great risk and cause irreparable harm to the employee.

An essential part of an internal investigation is the questioning of employees. Their statements contribute significantly to clarifying possible violations. In particular, the legal principles that apply to criminal proceedings, including the right to refuse to testify, do not apply directly to internal investigations.

Employees do not legally have to participate in such interviews. Their duty to cooperate arises indirectly from other legal provisions, in particular from employees’ duties of loyalty and service under labour law.

Austrian law suggests there is a general principle of loyalty, which triggers a “duty to inform” under some circumstances; in principle, the employee and any witnesses are expected to provide information in the context of internal investigations. While the employee is not compelled to incriminate him or herself, he or she also may not withhold work-related information that the employer legitimately wishes to protect, for the sole reason that it might incriminate him or her. The decision as to whether the employee must disclose information depends on a balancing of interests in the specific case.

Investigators and employers must strictly adhere to the permissible limits. This requires compliance with labour law, criminal law and data protection law.

Employees cannot be compelled to act as witnesses. Employers may have trouble enforcing internal policies stating that employees who refuse to participate in investigations will be disciplined (warned, suspended or have their contract terminated for cause), but can terminate their contract without cause.

There are no explicit legal protections for employees acting as witnesses, but it is common best practice to have witnesses’ identities protected to the extent necessary for the investigation, and to protect them from retaliation.

Co-workers cannot be compelled to act as witnesses in a workplace investigation. Employees also have rights arising from the law that must be respected by the employers and investigators, such as the right to privacy or to remain silent, freedom of expression and communication. These rights must be protected during every step of the workplace investigation process.

All data processing must comply with the principles of article 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity). Personal data may only be collected and processed for specific, lawful purposes.

The admissibility of data processing depends on whether the suspicion relates to a criminal offence or another violation of the law. If the data processing is relevant to criminal law, article 10 GDPR or section 4(3) of the Austrian Data Protection Act (DSG) applies. If the investigations are exclusively to clarify violations under civil or labour law, such as an assertion of claims for damages or if they are general investigations to establish a criminal offence, the permissibility of data processing is based on article 6 or, for data covered by article 9 GDPR, on this provision.

The Brazilian General Data Protection Law (LGPD) does not have specific rules or principles that apply to internal investigations conducted within private organisations. Despite that, the general principles and obligations set forth by the LGPD apply to any processing of personal data carried out within the context of such investigations. As a result, the company must ensure the transparency of such processing activities through a privacy notice addressed to the data subjects; only process the personal data that is necessary for the investigation; define the lawful basis that applies to such processing activities (especially for sensitive data); and apply any other obligations established by the LGPD.

The conditions applicable to gathering physical evidence mainly stem from the precedents of the Turkish Constitutional Court about employment disputes and the rules set forth under Turkish Law No. 6698 on the Protection of Personal Data (DPL). It is generally accepted that employers can gather physical evidence for certain legitimate purposes, such as disciplinary investigations, the prevention of bribery and corruption, fraud or theft, money laundering, and employee performance monitoring and compliance. In doing so, employers must, however, comply with the fundamental principles of the Turkish Constitutional Court as briefly described below:

• The grounds for the gathering of evidence must be legitimate. The definition of the legitimate interests of the employer may change depending on the characteristics of the business, workplace and employee job description, as well as the specific circumstances of the case. Therefore, it is advisable to carry out a balancing test between the legitimate interest the employer is seeking to protect and the employee’s interest in the protection of their privacy.
• The collection activities must be proportionate, in the sense that the measure implemented by the employer must be appropriate and reasonably necessary to achieve the legitimate purpose, without infringing upon the fundamental rights and freedoms of the employees. For instance, e-mail monitoring to collect evidence may not be proportionate if it is determined that e-mails that are not related to the incident subject to investigation are also accessed. To achieve this, certain keywords or algorithms can be used while monitoring e-mails during a disciplinary investigation.
• The collection process must be necessary to achieve the purpose. In other words, the collection of physical evidence must only be carried out to the extent there are no other measures allowing the employer to achieve its purpose, such as witness testimony, workplace records, or examining the results of projects. If the purpose can be achieved through less invasive means, the collection of physical evidence may not comply with the principles established by the decisions of the Constitutional Court.

Separately, depending on the type of physical evidence collected, the collection process may lead to the processing of the concerned employees’ personal data. Under the DPL, personal data collected in Turkey can only be processed if the explicit consent of the data subject is obtained; or the data is processed based on one of the exceptions to consent provided by the law. To the extent the data processing can be deemed to be based on the pursuit of a legitimate interest of the employer, it should also meet the following conditions:

• it should be the most convenient and efficient method to identify any employee wrongdoing to protect the legitimate interests of the company; and
• the data processing should not harm the fundamental rights and freedoms of the employees.

The employer should in any case comply with the obligation to inform employees before the processing of their data, through a privacy notice containing mandatory information required by the DPL.

In addition, as a general principle, the evidence-gathering process should always be conducted based on the assumption that the internal investigation can lead to litigation. Any evidence that will be used in litigation needs to have been gathered in compliance with the law. In both criminal and civil litigation, the courts will review each piece of evidence to confirm whether it was gathered through lawful methods and disregard any evidence that fails to comply with due process.

In general, it is advisable to back up data, documents, emails and other records promptly to prevent their deletion. Admissibility depends on whether the data originates from personal or professional records and whether they are legally relevant. If internal investigations are carried out based on a specific suspicion of a criminal offence, it is the processing of legally relevant data. In general, the processing of professional emails or documents is permissible. If there is no professional connection, access to private files and documents is only permitted in exceptional cases.

If, for example, using a business email account for private purposes is not allowed, the employer can usually assume that the data processed is only "general" data within the meaning of article 6 GDPR and that such data processing is justified by a balancing of interests. However, if private use is allowed, the data may still be part of a special category within the meaning of article 9 GDPR. In such cases, the justification for its use must be based on one of the grounds explicitly mentioned in article 9(2) GDPR.

The employer must protect the employee's rights under section 16 of the ABGB and must consider the proportionality of the interference. Only the least restrictive means – the method that least interferes with the employee's rights – may be used to obtain the necessary information. The employer's interest in obtaining the information must outweigh the employee's interest in protecting his or her rights. The implementation or initiation of controls by the employer does not automatically constitute an interference with personal rights, as being subject to the employer's rights of control is part of the position as an employee.

No; employers are only generally allowed to search the work tools they provide to employees, such as company mobile phones, electronic files, and company email and other electronic communications. However, they may also request that employees turn over any company documents in their possession.

Searches of employees’ private possessions or files during an investigation can only occur with the verifiable consent of the employee.   

There is no explicit answer to this question. However, it is important to make a distinction between employees’ possessions and files that are strictly personal and employees’ possessions and files that are found on devices or files provided for company use. For the first category, the employer does not have the right to search employees’ possessions and files. For the latter category though, justifications need to be established, by observing the requirements explained in question 7. Furthermore, the employers must also ensure that employees are fully and explicitly informed in advance of the monitoring operations, either through a provision included in the employment agreement, or in a separate notice or employee policy, the receipt of which should be duly acknowledged by the employee.

The provisions of the Whistleblowing Directive must be respected. In Austria, these have been implemented through the Whistleblower Protection Act (HSchG). If the whistleblower or the persons concerned fall within the scope of the Directive, their identity must be protected. Only authorised persons may access the report. Retaliatory measures are invalid or must be reversed. Within a maximum of seven days, the whistleblower must receive a confirmation of his or her complaint. Feedback to the whistleblower must then be provided within a maximum of three months.

If the investigation involves matters within the scope of a specific whistleblowing policy, the policy rules should prevail against the general investigation rules if there is a conflict.

Although there is no specific legislation in Turkish law on whistleblowing, necessary mechanisms need to be implemented to ensure that whistleblowers and the whistleblowing process are kept confidential. In addition, whistleblowers must be encouraged and supported to be open about raising their concerns in good faith. A whistleblowing activity, when it amounts to raising a concern in good faith, must not be mistreated by the employer. Employers should also put in place protection mechanisms against the mistreatment of whistleblowers or retaliation towards them by other employees.   

If the report and the whistleblower fall within the scope of the Whistleblowing Directive, his or her identity must be protected. From a data protection perspective, the principles of the DSG must be observed to protect the legitimate confidentiality of the individuals concerned.

Furthermore, the employer should ensure that information is only disclosed to trustworthy persons to avoid pre-judgements.

Law 14.457/2022 states that companies must guarantee the anonymity of accusers. As a result, it is best practice that companies allow for anonymous submissions, or allow accusers to voluntarily disclose their identity while acknowledging that they agree that it will be kept confidential to the extent required by the investigation.

Also, companies should have internal rules stating that all parties involved in an investigation (accusing party, accused party, witnesses, investigators, and any other person that has any contact with the investigation) must keep the existence of the investigation and of the events related to the investigation confidential to the extent required by the investigation, and discipline any individuals that violate this.

As a general practice, workplace investigations need to be kept confidential for the integrity of the process. In some cases, employees can specifically request their identity or involvement be kept confidential. In such cases, additional measures need to be taken to protect confidentiality. In any case, obligations and rights arising from the DPL and Labour Law must be respected and complied with by the employer and the investigation team.

The purpose of internal investigations would be jeopardised by fully informing a suspected employee beforehand, as it would allow him or her to hide or destroy possible evidence, plan his testimony or coordinate with other employees.

There is no legal requirement to inform the employee of the allegations or suspicions.

There is no obligation to inform an employee under investigation that this is the case, and it should not happen automatically.

While some policies require that the investigated employee be informed about the allegations against them at the beginning of the investigation, from a local perspective it is recommended that the accused employee be notified about the existence of the allegations if, after a reasonable review, there are elements that suggest that the accusation may be material.

In this context, the employee should be informed about the accusation and be allowed to confirm, deny, provide further context or justify each reported or identified event; offer evidence; and indicate persons or sources of information that could corroborate his or her defence. Information about the accusation must be focused on facts rather than on how the company obtained the information.

If the accusation is found to be groundless after initial review, involving the accused employee at the beginning of the process may have triggered unjust and unnecessary stress and a disruption in the employment relationship that may not be satisfactorily repaired by a determination that the accusation was void. This may result in a legal liability for the company or HR issues that could otherwise have been avoided.

Informing the employee under investigation on the subject, purpose and possible consequences of the investigation need to be evaluated by the investigation team before the interview. As a general principle, the interviewer is expected to share the information he obtained on the case with the employee, and ask for confirmation or clarification on these matters. The employee under investigation may be subject to an interview to gain information or as a confrontation if there is concrete evidence. If the evidence in hand is not based on concrete and material grounds, it would be more appropriate not to lead the interview to a confession, but inform the employee of the possible allegations. However, if the available evidence is based on concrete and material grounds, the interviewer may confront the interviewee by sharing the information that was gathered during the investigation in an attempt to obtain a confession.

When dealing with reports and persons covered by the HSchG, the provisions on identity protection must be followed. In all internal investigations, only authorised persons should receive information.

Yes, the identity of the complainant, witnesses and sources of information for the investigation should be kept confidential.

It is possible to keep such information confidential. If this is the case, the investigation team should conduct the interview outside the workplace of the company. This is actually good practice applicable to all internal investigations, unless there is a particular reason that requires the meetings to be held at the company.

According to section 6(1) of the DSG, employees who have access to personal data in the course of their professional activities must maintain data confidentiality and continue to do so even after termination of their employment.

Non-disclosure agreements can generally be used to achieve this but are subject to certain restrictions. They may not be used to conceal criminal activity, violate the privacy rights of individuals, circumvent legal disclosure obligations, prevent the exercise of legal rights or contain clauses that violate existing laws, in particular data protection regulations.

Yes, NDAs may be executed to reinforce the confidentiality obligations outlined in the company's policies and reinforced in interviews.

It is crucial to keep the events and facts of a workplace investigation confidential for the integrity of the process. It may be necessary to consider appropriate confidentiality measures to protect the complainant, mitigate risks, and preserve evidence. Damage to the confidentiality of the case can prevent the investigation team from bringing the case to a correct and complete conclusion. Although the labour legislation imposes a general confidentiality obligation on employees, NDAs can still be used as supplementary documents that may emphasise the confidentiality obligations of employees in workplace investigations and provide additional contractual protections such as penalties if there is a breach.

If a lawyer is involved in the investigation, communication between the lawyer and client is subject to legal professional privilege. These communications must not be disclosed. Any documents collected by an internal audit can be seized and used. However, a document created by a lawyer can only be seized. The same applies to other professional representatives of parties, such as notaries and auditors, as potential holders of professional secrecy.

Privilege attaches to investigation materials when attorneys conduct interviews and take notes, and when they write reports and recommendations.

However, if other persons participate in an interview or write a report, and they are not attorneys, they can be required to testify about what they witnessed while participating in the interview or to discuss or disclose their investigation report.

For this reason, when starting an investigation, and depending on the matters to be investigated, it is important to determine whether it is convenient to allocate lawyers to certain roles to increase the company’s control of corporate confidentiality resulting from third-party involvement in the investigation.

Attorneys should also clearly state to participants of the investigation that they are attorneys representing the company and that their work papers fall under attorney-client privilege and will not be shared with them.

Attorney-client privilege is attached at the time the attorney is hired as a legal representative. Attorney-client privilege, which is regulated under the Law of Criminal Procedure No. 5271 and the Attorney’s Act No. 1136, covers not only the investigation process, but also the legal advice and counselling received before and after the investigation. The importance of this privilege is especially present in cases where judicial or administrative authorities are involved in the process. Documents and correspondence benefiting from attorney-client privilege can be protected and fall outside the scope of preventive measures such as search and seizures due to the right of defence.

In general, an employee is not entitled to have a representative present during investigations. However, he is free to reach out to the works council or independently contact a lawyer for advice. The employer must hear the works council upon his or her request on all matters concerning the interests of employees at the company. Once disciplinary proceedings begin, the employee has the right to be represented by a lawyer.

Legally, a minor or someone with limited mental capacity must be represented by his or her parents or legal guardian in a meeting at work. Besides that, employers are not legally required to allow any external person to accompany employees during investigations, since these are internal proceedings and, generally, employee participation should be voluntary and not subject to retaliation, including if the employee refuses to participate.

Yes, the employee under investigation has a right to be accompanied by his or her legal representative during the investigation. It is also essential that the employee under investigation is informed about his or her right to have a legal representative.

The Austrian Labour Constitution Act (ArbVG) does not contain any provisions regarding workplace investigations. The employee has the right to address the works council but is not entitled to have the works council comply with his or her request.

The works council's opportunities for participation are conclusively regulated. Certain investigative or control measures may require the consent or co-determination of the works council.

Under section 96(1)3 ArbVG, the consent of the works council is required if the employer wishes to introduce and maintain control measures or technical systems for monitoring employees that affect human dignity, such as video surveillance or specific staff questionnaires. If there is no works council, the consent of each individual employee is required.

No, there is no such right.

An authorized trade union, if any, may have the right to be informed or involved in the investigation, depending on the terms of the collective bargaining agreement in place. Even in the absence of such a provision in the collective bargaining agreement, it would still be recommended to inform the trade union of the investigation as a courtesy. We do not have works councils under Turkish employment law.

There is no additional support for the employees concerned. However, the employer may offer support measures to the employees to ensure better cooperation. The choice of support measures is at the employer's discretion. For example, the employer could offer to bear lawyer’s fees, if the employee is cooperative. Such decisions must always be made on a case-by-case basis.

It is highly recommended that investigation interviews are conducted in the interviewed person’s native language, even if the individual speaks the language used for business within the company, to ensure that there is no miscommunication or loss of accuracy in the determination of the facts. Also, speaking their native tongue reduces the discomfort of participating in the interview and potential extra work due to post-interview correction or confirmation. Depending on the scope of the investigation, the company can have attorneys who speak both the individual’s language and the company’s business language conducting interviews.

The employees involved in the investigation should be granted their personal needs (such as refreshments or access to the bathroom), as well as translation services or transportation, if needed. A breach of these rights or needs during the process may constitute a violation of the law and adversely affect the validity of the results to be obtained from the investigation.

The employer must decide how to deal with this information. Possible options are to initiate separate and unrelated investigations or to extend the ongoing investigations.

If unrelated matters are revealed as a result of the investigation, the company must be notified and must start a new investigation regarding them per the appropriate rules, without affecting the original investigation.

If an unrelated matter is revealed during the investigation, an independent assessment needs to be made as to whether this new matter requires to be included in the same internal investigation, or a separate/new one should be commenced.  

Provided the employer complies with labour law and data protection regulations, internal investigations are lawful and are not regarded as administrative or judicial proceedings. If legal consequences for not cooperating, such as dismissal, are threatened by the employer or his investigators, the offence of coercion under section 105 of the Austrian Criminal Code could be fulfilled.

If the object of the grievance is connected to the ongoing investigation, the investigator may pursue that grievance within the same procedure or open a separate matter, under the company’s rules governing such a situation.

If the object of the grievance is not connected to the investigation, the employee must report the matter, or the investigator can do it, if the company’s policies allow it.

If, during the investigation, the employee under investigation raises a grievance, the investigator will be expected to temporarily stop the investigation to assess the situation. The investigation team will evaluate whether the employee is raising a grievance as a defence mechanism or in good faith and with sincere concerns. If the subject of the grievance is related to the pending investigation, the investigation may be extended to cover this new item. Otherwise, a new investigation can be initiated by the investigation team.

The involved employee's sick leave does not affect the internal investigation. Most investigative measures can be carried out without the employee's presence.

Sick leave suspends the employment agreement, and as a rule the employee should not be contacted during such a suspension. The investigation may continue without the participation of the investigated employee while that employee is absent, have its conclusion suspended while he or she is on leave, and resume once the employee returns to work.

The employee’s participation in the investigation is vital for a fair assessment and to ensure that the employee has been allowed to defend himself or herself against the allegations. As such, every reasonable effort must be made by the employer to adjust the investigation process so that the employee can take part in the investigation. For example, if the employee goes off sick and thus cannot attend the investigation interviews or disciplinary hearings, the investigation should be carried out as much as possible without resorting to the employee in question, by initially exhausting the other available options (such as conducting interviews or disciplinary hearings with other available witnesses). However, if the employee’s absence takes longer than is reasonably expected or the matter at hand must be dealt with urgently, the employer may consider concluding the investigation and determining the next steps based on the information at hand. In such a case, it is recommended to explain in the investigation report the reasons why the employee could not take part in the investigation process (ie, why an interview or disciplinary hearing, etc, could not have been arranged with the employee) along with supporting documentation evidencing the employer’s efforts to involve the employee in the investigation process and the employee’s excuse for not participating interviews or disciplinary hearings.

Private investigations differ from criminal or regulatory investigations. Nevertheless, even for internal investigations, it is advisable to collect evidence in a way that can be admitted in court, as it may have to be presented to the authorities during the investigation process. Generally, any evidence obtained in the course of an internal investigation may be admitted in subsequent administrative or judicial proceedings.

If the evidence is not voluntarily surrendered, seizure or confiscation is possible. Since official proceedings are often lengthy, suspension is not always recommended.

The company may be required to share information or documents with authorities such as a judge, the police, or the Public Attorney's office, or be subject to a government authority’s dawn raid. Workplace investigations can and in most cases should continue, and in such circumstances client-work privilege will be essential to enable the employer to control information being shared with third parties.

If the issues being examined during an investigation are also subject to parallel criminal or regulatory investigation, the workplace investigation will probably be stayed. This is primarily because parallel criminal or regulatory investigations would necessitate a more comprehensive examination and public bodies overseeing such investigations have a broader legal prerogative to gather evidence. It is, therefore, advisable to stay the internal investigation to not interfere with the criminal or regulatory authorities. If a prosecutor or a court requires the employer to give evidence or share certain documents, the police can compel the employer to share evidence. Regulatory bodies may also ask the employer to share evidence and the powers conferred on such regulatory bodies will be a determining factor in whether they can compel the employer.

The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.

There is no legal obligation to inform them of the outcome. Any obligation would come from the company's policies.

In general, the employee under investigation should be adequately informed about the allegations and findings to be able to defend him or herself. If no legal action will be taken against the employee under investigation as a result of the investigation, the employee may be notified regarding the findings and the outcome of the investigation. If the employee will be subject to a legal or administrative action (ie, warning, reprimand, or termination of employment), the formal requirements stemming from the Labour Law will need to be followed.   

The employer should determine the intended recipients and format of the report in advance. In many cases, it may be advisable to publish only the results of the investigation to protect the privacy and reputation of the individuals concerned, as this may help to minimise any potential negative impact on them.

However, under certain circumstances or due to legal requirements, full disclosure of the investigation report may be required, especially if transparency and disclosure are necessary to maintain public or investor confidence.

There is no legal requirement or recommendation for the company to share the full or partial report or findings. It is also not a recommended measure. Therefore, unless the internal rules determine that the company must do it, any answer to queries should be limited to the fact that the investigation was concluded, and the company took the appropriate action.

There is no legal requirement for the disclosure of the investigation report in full. If the investigation report needs to be submitted to the court, public institutions or other third parties, measures may need to be taken to protect confidentiality or to comply with the confidentiality requests of the persons participating in the investigation.

The employer may impose consequences under labour law. Consequences may include verbal or written warnings, transfers or other disciplinary measures. The employer may also implement training or educational measures if the issue is due to the employee's lack of knowledge. In serious cases, besides dismissal without notice – for example. if the employer seeks damages –legal action (civil or criminal) may be taken against the employee.

If investigators conclude that a breach has occurred, the company may determine the appropriate response, which may include verbal or written warnings; the suspension of employment without payment (for up to 29 days) or termination of employment without or with cause; a review of policies or operational protocols; and new training modules or the updating of training modules.

If the investigators conclude that a breach has not occurred but determine that the report was made in good faith, the case must be set aside. If the investigators determine that the report was made in bad faith, the employer must determine how to respond to the bad-faith reporter.

The employer may take various legal remedies against the employee whose infringement is discovered as a result of the internal investigation. Depending on the outcome of the investigation, the employer:

• may provide the employee with a written warning requesting him or her not to repeat the same conduct;
• terminate the employment relationship based on either just cause, without paying any compensation immediately, or valid reason by observing statutory notice periods or making payment in lieu of notice and paying severance compensation if applicable; or
• not take any action if the investigation concludes that no fault is attributable to the employee.

It is up to management to decide which results should be disclosed and to whom. It is important to know who the persons concerned are and who has an interest in disclosure.

From a legal perspective, disclosure must follow the GDPR. Internal policies can specify how the results are to be handled. Works Council Agreements (WCAs) may also contain regulations on how to deal with internal investigations and the disclosure of results.

There is no requirement to publish the results of the investigation, but it may be advisable to cooperate with the authorities. This is particularly the case if the employer has suffered damage or is himself threatened with prosecution. The release of investigation results can be compelled through the courts.

There are no legal requirements for the company to share the investigation findings with any party, including the reporter and the investigated party, so the employer must carefully consider the pros and cons of doing so on a case-by-case basis. Interview records can generally be kept private if interviews were conducted by an attorney.

Investigation reports may be disclosed in potential lawsuits or judicial proceedings. Therefore, the investigation report must demonstrate that a detailed and objective investigation has been carried out. Courts may also request that the interview records be disclosed to them, failing which, the courts may resort to an adverse inference in civil proceedings. Criminal courts can also ask the interview records to be disclosed if this would be necessary for reaching the truth. Failure to disclose may entail criminal responsibility under certain conditions.

Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.

The existence of the investigation should be kept on file for at least five years from the date of its conclusion. All information related to the investigation should be kept on file for the same period, but not on the employee’s record, to avoid the risk of accidental access by unauthorised individuals.

There is no provision in the legislation setting forth a specific duration for keeping the outcome of the investigation findings in personnel files. However, based on general principles, the outcome of the investigation can remain on the employee’s personnel files as long as the employer has a lawful interest in such processing without unnecessarily harming the privacy rights of the employee.

This relates to the severity of the error. Data protection violations can lead to fines by the data protection authority or claims for damages. If consequences under labour law, such as dismissal, have taken place due to erroneous investigations or incorrect results, the employee concerned can assert claims under labour law or seek damages.

Furthermore, there may be consequences under criminal law. This is particularly the case if documents have been falsified in the course of the investigation. It is, therefore, crucial that employers exercise diligence and due process in internal investigations. Investigations must be conducted transparently and lawfully.

The employer’s legal exposure resulting from errors during the investigation depends on the error and the victim or victims affected. It may range from paying damages to a witness who was harassed because the company did not prevent retaliation from occurring; to the reversal of a termination for cause if a court determines that the evidence collected during the investigation did not meet the legal threshold to uphold it; to indemnification for a violation of privacy; or criminal prosecution because of unauthorised access to private communications.

The nature of legal exposure is very much dependent on the legal action the employer has taken after the investigation. The employer may be subject to a wrongful termination lawsuit to be filed by the employee, which may result in the payment of compensation to the employee of between eight and 12 months’ salary, if the court concludes that the termination is wrongful. This may also include monetary and moral damages claims. If no termination has taken place, the employee may terminate his or her employment with just cause if the employer has erred in its neutral fact-finding mission and this affects the employee. The employee may also file a criminal complaint to the extent that the investigation findings incriminate the employee in error.