Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Austrian law does not impose an obligation on employers to conduct internal investigations and they do not have to follow a specific legal pattern when doing so. However, an obligation to conduct internal investigations may arise out of certain provisions of criminal, company or even labour law – in particular, an indirect obligation arising from an employer's duty of care, which requires them to act against employee mistreatment, such as bullying.
If such internal investigations are initiated, compliance with labour law and data protection regulations is mandatory. According to section 16 of the Austrian Civil Code (ABGB), the employer must also protect the personal rights of the individual. It is important to emphasise that a company's internal investigation is a private measure and differs from official investigations.
Italy
Italy
- at BonelliErede
- at BonelliErede
From an Italian employment law perspective, there is no specific body of legislation that governs investigations. However, several legal and case-law principles may be relevant concerning various specific aspects of investigations, and to which reference will be made below (eg, provisions under Law No. 300 of 1970, the so-called Workers’ Statute regarding “controls on employees”, both physical and “remote”, or regarding “disciplinary proceedings”).
In addition, and outside of the specific scope of employment law, other law provisions may have an impact on investigations, including those regarding privacy law (eg, Italian Legislative Decree No. 196 of 2003 and the Regulation (EU) No. 679 of 2016 (GDPR), regarding data protection and the related policies), whistleblowing (Law No. 179 of 2017 and Directive (EU) No. 1937 of 2019, regarding whistleblower protection) and criminal law (eg, Italian Criminal Procedure Code, providing rules for criminal investigation and Italian Legislative Decree No. 231 of 2001, regarding the corporate (criminal) liability of legal entities).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Pursuant to article 98 of the Portuguese Labour Code, the employer has a disciplinary power over its employees during the employment period. This is enforced through the initiation of disciplinary procedures – which can include a preliminary workplace investigation as provided for in article 352(1) of the Portuguese Labour Code – and ultimately the application of sanctions laid down by law or in an applicable collective bargaining agreement.
The Portuguese Labour Code governs disciplinary procedures, which can include a preliminary workplace investigation, in two different sections. On the one hand, articles 328 to 332 establish general rules regarding the imposition of disciplinary sanctions; statutory deadlines and statutes of limitations involved; decision criteria; penalties; and disciplinary records. On the other hand, articles 351 to 358 lay down the rules applicable to dismissals with cause, which are also widely understood to be applicable concerning conservatory sanctions (i.e. those that enable the continuity of the employment relationship).
Additionally, collective bargaining agreements may provide for different disciplinary penalties, as long as the rights and guarantees of employees are not impaired.
Workplace investigations must also abide by the general rules laid down in the Portuguese Constitution, Portuguese Civil Code and Data Protection Laws (including guidelines issued by the Data Protection Agency), as regards the personal rights of the employees.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
There is no specific legal regulation for internal investigations in Switzerland. The legal framework is derived from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights. Depending on the context of the investigation, additional legal provisions may apply; for instance, additional provisions of the Swiss Federal Act on Data Protection or the Swiss Criminal Code.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In the United States, any combination of legislation at the federal, state and local level, as well as judicial opinions and regulatory guidance interpreting those statutes, may impose obligations on relevant employers to undertake a timely internal investigation in response to complaints of workplace misconduct and to promptly implement remedial measures, where appropriate.
An employer’s written policies often also set forth the company’s expectations for how its employees, partners, vendors, consultants or other third parties will conduct themselves in carrying out the business of the company, and these policies may include protocols setting forth the parameters for an investigation in the event of potential non-compliance. Such investigatory roadmaps are often described in, for example, employee handbooks or a company’s policy against discrimination and harassment.
Due to the patchwork nature of employment and related laws, it is not possible to cover every investigation scenario or related legislation in this guide. Employers should instead consult with experienced employment attorneys in their state to ensure compliance with the applicable legal and regulatory regimes.
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, an internal investigation is only initiated if there is suspicion of a violation. The decision to commence an internal investigation is up to the company, and it has to weigh the pros and cons. For limited liability companies, which are subject to the Association Responsibility Act, an internal investigation may exempt them from criminal liability. Disadvantages may include investigation costs, disruption of operations, discovery of information requiring later disclosure, possible negative media coverage and increased risk of exposure to external parties.
Investigations can relate to specific individuals, departments, or the entire company. An investigation may include various measures, such as obtaining and analysing files and documents, conducting questionnaires and employee interviews, monitoring internet use, video or telephone surveillance of employees and setting up whistleblowing hotlines. Not all measures are acceptable without restrictions. The provisions of labour law and data protection law must always be complied with.
To avoid wasting resources, the objectives of the investigation should be defined in advance. In addition, the selection and sequence of instruments to be used should be determined. A legal assessment of the chosen measures is essential to avoid legal complications.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, a workplace investigation can commence either as a consequence of facts reported by employees or third parties (either anonymous or not), for instance within a whistleblowing procedure or as part of normal and periodical activity carried out by internal auditing.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Having been informed of an alleged infraction committed by an employee, the employer must prepare a detailed written accusation and notify the employee.
Moreover, if the alleged infraction constitutes gross misconduct and the employer is considering dismissal, a formal statement of the employer’s intention to dismiss the employee should accompany the accusation. If this is not expressly done, the employer will be unable to dismiss the employee and may only apply one of the conservatory sanctions. A copy of these documents must be sent to the works council, if any, and, should the employee be a union member, to the respective trade union.
Notwithstanding this, if before preparing the accusation the employer needs to further investigate the facts and circumstances, it may open a preliminary investigation aimed at collecting all the facts and circumstances and conclude if there are grounds to bring an accusation against the employee.
The preliminary investigation must start within 30 days of the employer becoming aware of the facts, be diligently carried out (but with no maximum period laid down by law) and concluded within 30 days of the last investigatory act. Furthermore, the preliminary investigation will suspend the relevant statutory deadlines and statutes of limitations (ie, 60 days from the date of acknowledgment, by the employer or a supervisor with disciplinary power, of the facts to enforce disciplinary action against the employee and one year from when the facts occurred, regardless of the employer’s acknowledgment, unless the infraction also constitutes a criminal offence, in which case the longer statutes of limitation established in criminal law will apply).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).
For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
A workplace investigation is often, although not always, prompted by a complaint of workplace misconduct, usually made directly by the employee who was harmed by the conduct, a third party who witnessed the conduct, or a manager or supervisor who was made aware of the issue and has reporting obligations as a result of his or her role in the organisation.
It is best practice – and often a legal requirement depending on the applicable state law – for companies to clearly outline a complaint process in their policies and to provide employees who experience, have knowledge of, or witness incidents they believe to violate the company’s policies with one or more options for making a report. Although the specific complaint procedure may vary depending on the size of the organisation, the nature of the business and the type of complaint at issue, many companies provide for (or require) making a report through one of the following channels:
- a company-managed hotline or online equivalent;
- human resources;
- an affected employee’s supervisor or manager; or
- a member of the legal or compliance department.
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Yes. An employer may always, and without legal restrictions, temporarily suspend an employee during an internal investigation, provided he or she continues to be paid.
However, suspending the employee does not release the employer from an obligation to terminate employment without notice. It must be clear to the employee that the suspension is a temporary measure in preparation for dismissal. A suspension does not entitle the employer to postpone the reasons for dismissal for any length of time. The longer the suspension lasts, the more likely it is that the employer intends to keep the employee.
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, from an Italian employment law perspective, there is no specific legal rule governing the suspension of an employee during a workplace investigation.
However, it should be noted that:
- certain National Collective Bargaining Agreements (NCBAs) may provide, in particular circumstances, for the possibility of suspending (with pay) an employee (eg, when the employee is under criminal proceedings – as stated, for example, in the NCBA for executives of credit, financial and investment companies);
- according to well-established case law, the employer may suspend the employee from work (with pay) in the framework of a disciplinary procedure (which, according to Italian law, must be followed before applying any disciplinary sanction, including dismissal[1]), where the facts behind the procedure are sufficiently serious;
- certain case-law decisions have also stated that – even in the absence of a disciplinary procedure – the employer may suspend (with pay) the employee when it has very serious suspicions of an employee’s unlawful conduct, and for the time that is strictly necessary to ascertain his or her liability.
The above may be done by the employer, for instance, if keeping the employee in service may cause a risk of tampering with evidence or a risk of damage to the physical safety of other employees or company property.
Normally, in the above-mentioned circumstances, the suspension is with pay and with job security.
[1] The steps of the disciplinary procedure can be summarised as follows: (i) the employer must send a letter to the employee in which the disciplinary facts are described in detail and precisely; (ii) the employee can submit his written or oral defence to the employer within five days from receiving the letter (or different term provided under applicable collective bargaining); during this period, the employer cannot take any punitive measures against the employee; (iii) after receiving the employee’s defence (or, if the employee has not submitted any defence within the relevant term), the employer may serve the executive with a notice of dismissal (certain NCBAs set a term within which a sanction, if any, should be applied by the employer). Failure to comply with the procedure results in the dismissal being null and void. According to the law, the dismissal takes effect from the commencement of the disciplinary procedure itself.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
After the employee is notified of the accusation, the employer may decide on a preventive suspension of the employee if the employee’s presence on company premises is deemed problematic. In this case, the employee’s salary will continue to be paid.
As per article 330(5) of the Portuguese Labour Code, a preventive suspension may also be determined during the 30 days before the accusation is made, provided that the employer, in writing, justifies why is necessary (eg, for interfering with the inquiry) and why the accusation cannot be served at that moment.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
It is possible to suspend an employee during a workplace investigation.[1] While there are no limits on duration, the employee will remain entitled to full pay during this time.
[1] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 181.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Yes. An employer may suspend the subject of an internal investigation with full pay pending the outcome of an investigation. However, this measure should be used sparingly, for example in cases where an employee has been accused of gross misconduct or where it is the only means of separating the alleged victim of harassment from the accused to prevent continued harassment. As an alternative means of separating the victim from the accused, an employer can consider interim measures such as a schedule change, transfer or leave of absence for the alleged victim with his or her consent (employers should take care not to take any action that could be perceived as retaliatory against the complainant – even if well-intentioned – including involuntarily transferring him or her or forcing a leave of absence).
Where an employer does determine that suspending the subject of an investigation is warranted while the company carries out its investigation, it should provide him or her with a written statement briefly outlining the reason for the suspension and the estimated date the employee will be advised of the investigation outcome and his or her final employment status.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
There are no prescribed minimum standards for this procedure. The responsibility for conducting these investigations lies with the employers. Internal compliance or legal teams are often entrusted with this task, as they are familiar with internal protocols. In practice, these investigations are often overseen by an internal team, occasionally with the assistance of law firms or auditing firms. Those involved in the investigation must remain impartial. Potentially biased persons, such as those under investigation and their close associates, should be excluded from participation.
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, from an employment law perspective, there is no specific legal rule governing the minimum qualifications of who should conduct a workplace investigation. Generally speaking, a workplace investigation is carried out by the internal audit function, when there is one (generally in large companies), or by the HR or legal departments.
Outside the workplace, the employer may carry out investigations on the employee – normally without the latter knowing – through a private investigator. This investigation should be carried out to verify that the employee does not engage in conduct contrary to the company’s interests (eg, unlawful competition, disclosure of confidential information, criminal breaches). In such cases, the private investigator must comply with specific rules, mainly found in Italian Royal Decree No. 773 of 1931, according to which the investigator must, among other things: hold a licence issued by the competent authority; and keep a register of the activities conducted daily.
In addition, if there is a suspicion that a crime has been committed, the company may appoint a criminal law lawyer to conduct their own defensive criminal law investigation, as provided by article 391bis and the Italian Criminal Procedure Code.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
According to article 356(1) of the Portuguese Labour Code, the employer can appoint an instructor, who shall be responsible for the probationary proceedings. Usually, workplace investigations are conducted by external advisors (eg, lawyers), appointed by the employer.
However, regarding disciplinary powers, there is a legal limitation in article 98 of the Portuguese Labour Code. As such, only the employer (or the immediate superior of the concerned employee, if the employer has delegated its powers, as per article 329(4) of the Portuguese Labour Code) has disciplinary powers.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The examinations can be carried out internally by designated internal employees, by external specialists, or by a combination thereof. The addition of external advisors is particularly recommended if the allegations are against an employee of a high hierarchical level[1], if the allegations concerned are quite substantive and, in any case, where an increased degree of independence is sought.
[1] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 18.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
While every internal investigation should be carried out promptly, thoroughly and in a well-documented manner, employers should appoint one individual or team of individuals to oversee all complaints regardless of how they are received. Doing so helps to ensure that all allegations are documented, reviewed and assigned for investigation as consistently as practicable.
Once a complaint is received and recorded, the company should undertake an initial triage process to determine:
- the risk of the alleged misconduct from a reputational, operational and legal perspective;
- who is best suited to conduct an investigation based on the nature of the alleged misconduct and the perceived risk level (potential candidates may include members of human resources, legal or compliance departments, or outside counsel); and
- a plan for investigating the factual allegations raised in the complaint.
The appropriate investigator should be able to investigate objectively without bias (ie, the investigator cannot have a stake in the outcome, a personal relationship with the involved parties and the outcome of the investigation should not directly affect the investigator’s position within the organisation); has skills that include prior investigative knowledge and a working knowledge of employment laws; has strong interpersonal skills to build a rapport with the parties involved and to be perceived as neutral and fair; is detail-oriented; has the right temperament to conduct interviews; can be trusted to maintain confidentiality; is respected within the organisation; and can act as a credible witness.
At this triage stage, an employer may also wish to use the information collected from the complaint to proactively identify potential patterns or systemic issues at an individual, divisional or corporate level and react accordingly. For example, if a company receives a complaint against a supervisor for harassing conduct and that same individual has already been the subject of previous complaints, the company should consider whether it may be appropriate to engage outside counsel to carry out a new investigation to bring objectivity and lend credibility to the review – even if the prior complaints were not ultimately substantiated following thorough internal investigations. Similarly, the engagement of outside counsel is often appropriate where a complaint involves alleged misconduct on the part of a company’s senior management or board members.
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If the investigated employee believes that individual measures violate his rights, he or she can defend him or herself against them, but he or she cannot stop the entire investigation.
In principle, the employee has various rights such as access, rectification, erasure and the right to contest the processing of his or her data (articles 12-17 and 21 GDPR). Should these principles be violated, the employee has the right to lodge a complaint with the data protection authority.
Italy
Italy
- at BonelliErede
- at BonelliErede
In principle, no. However, if the employee believes that, during the workplace investigation, there is a breach of his or her rights, he or she could act to protect them before the court (eg, through precautionary urgency proceedings under Article 700 of the Italian Civil Procedure Code.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
The employee under investigation can only bring legal action after the investigation is finished and if the employer has applied a disciplinary sanction.
According to article 329(7) of the Portuguese Labour Code, the employee may submit a complaint to the immediate superior officer that applied the sanction or may resort to a dispute resolution procedure as provided for by the applicable collective bargaining agreements or the law (this is uncommon, however).
Furthermore, should a company dismiss an employee in breach of the legal requirements described above, the latter may take legal action against the company within 60 days of the date of termination of his or her employment agreement. The employee may also choose to file a preliminary injunction against the employer seeking immediate (albeit provisional) reinstatement.
Notwithstanding this, if the employee can prove that they suffered damages as a result of being subject to an abusive and illegal investigation, they may file a complaint with the Labour Authorities or bring a claim against the employer and demand the payment of compensation for the damages caused.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The accused could theoretically request a court to stop the investigation, for instance, by arguing that there is no reason for the investigation and that the investigation infringes the employee's personality rights. However, if the employer can prove that there were grounds for reasonable suspicion and is conducting the investigation properly, it is unlikely that such a request would be successful.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In general, private sector employees have considerably fewer rights vis-à-vis a company-led internal investigation than their public sector counterparts. This is because many US states are “at will” employment states, which means that, absent an employment contract that provides otherwise, an employee can be terminated for any reason not prohibited by statute or public policy. Depending on the specific circumstances, however, an employee who is the subject of an internal investigation could bring or threaten legal action according to contract or tort principles to stop an investigation. An employee may also challenge an investigation because it was conducted in violation of certain federal, state or foreign laws, for example, the use of polygraph tests in violation of the Employee Polygraph Protection Act or foreign data privacy laws.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
An essential part of an internal investigation is the questioning of employees. Their statements contribute significantly to clarifying possible violations. In particular, the legal principles that apply to criminal proceedings, including the right to refuse to testify, do not apply directly to internal investigations.
Employees do not legally have to participate in such interviews. Their duty to cooperate arises indirectly from other legal provisions, in particular from employees’ duties of loyalty and service under labour law.
Austrian law suggests there is a general principle of loyalty, which triggers a “duty to inform” under some circumstances; in principle, the employee and any witnesses are expected to provide information in the context of internal investigations. While the employee is not compelled to incriminate him or herself, he or she also may not withhold work-related information that the employer legitimately wishes to protect, for the sole reason that it might incriminate him or her. The decision as to whether the employee must disclose information depends on a balancing of interests in the specific case.
Investigators and employers must strictly adhere to the permissible limits. This requires compliance with labour law, criminal law and data protection law.
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, employees must cooperate with a workplace investigation (as it is part of their general duty of diligence, as provided under article 2104 of the Italian Civil Code), and this may also include a duty to act as a witness.
In this respect, it must be pointed out that, even if the employee has a contractual duty to provide information requested by the employer, one limit to this principle could be, for example, self-incrimination.
However, caution is necessary during the interviews both with the employee under investigation and with co-workers, to avoid the risk of transforming the interview into what could be considered the de facto start of a disciplinary procedure. In other words, during the interview, the employer should only gather information on certain facts, and not put forward charges against the employee; otherwise, this could prevent or limit the employer’s possibility to take disciplinary action regarding the same facts.
Furthermore, employees who cooperate within the workplace investigation must be protected against any retaliatory action directly or indirectly linked to their testimony (eg, as far as is possible, anonymity should be guaranteed, and disciplinary measures should apply to those who breach measures in place to protect the employee).
Apart from workplace investigations, employees are protected against retaliatory measures of any kind, which are always null and void and subject to appeal.
For a defensive criminal law investigation (see par. 4), the witness can refuse to testify; in this case, the criminal law lawyer may ask the prosecutor to interview the witness.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
If the employer decides on an internal investigation to assess potential wrongful actions carried out within the company, employees must cooperate. However, employees are entitled to the privilege against self-incrimination established in the Portuguese Criminal Code, according to which individuals are not obliged to self-report.
An employee's refusal to cooperate with an internal investigation may be regarded as a breach of conduct by the employer and, ultimately, may lead to disciplinary sanctions.
Employees who act as witnesses in cases of harassment cannot be sanctioned unless they acted with wilful misconduct, and any sanction applied to an employee who acted as a witness in a harassment procedure will be presumed to be abusive.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Due to the employee's duty of loyalty towards the employer and the employer's right to give instructions to its employees, employees generally must take part in an ongoing investigation and comply with any summons for questioning if the employer demands this (article 321d, Swiss Code of Obligations). If the employees refuse to participate, they generally are in breach of their statutory duties, which may lead to measures such as a termination of employment.
The question of whether employees may refuse to testify if they would have to incriminate themselves is disputed in legal doctrine.[1] However, according to legal doctrine, a right to refuse to testify exists if criminal conduct regarding the questioned employee or a relative (article 168 et seq, Swiss Criminal Procedure Code) is involved, and it cannot be ruled out that the investigation documentation may later end up with the prosecuting authorities (ie, where employees have a right to refuse to testify in criminal proceedings, they cannot be forced to incriminate themselves by answering questions in an internal investigation).[2]
[1] Nicolas Facincani/Reto Sutter, Interne Untersuchungen: Rechte und Pflichten von Arbeitgebern und Angestellten, published on hrtoday.ch, last visited on 17 June 2022.
[2] Same opinion: Nicolas Facincani/Reto Sutter, Interne Untersuchungen: Rechte und Pflichten von Arbeitgebern und Angestellten, published on hrtoday.ch, last visited on 17 June 2022.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Yes. The investigator is empowered to decide which witnesses should be interviewed as a part of the fact-gathering process. In addition to interviewing the complainant, the investigation should include individual interviews with other involved parties, including the subject of the complaint, as well as individuals who may have observed the alleged conduct or may have other relevant knowledge, including supervisors or other employees. Many companies’ code of conduct, employee handbook or similar policy set forth the requirement for current employees to cooperate fully in any investigation by the company or its external advisors and also provide that failure to do so could result in disciplinary action, up to and including termination.
In the absence of contractual protections, employees may have no legal right to refuse to submit to an interview, even if their answers tend to incriminate them. That being said, when acting as a witness in an internal investigation, a current employee is usually afforded similar legal protections as the subject of an investigation, including the right to oppose unreasonable intrusions into his or her privacy and unreasonable workplace searches. For example, certain state laws prohibit an employer from questioning an employee regarding issues that serve no business purpose.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
All data processing must comply with the principles of article 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity). Personal data may only be collected and processed for specific, lawful purposes.
The admissibility of data processing depends on whether the suspicion relates to a criminal offence or another violation of the law. If the data processing is relevant to criminal law, article 10 GDPR or section 4(3) of the Austrian Data Protection Act (DSG) applies. If the investigations are exclusively to clarify violations under civil or labour law, such as an assertion of claims for damages or if they are general investigations to establish a criminal offence, the permissibility of data processing is based on article 6 or, for data covered by article 9 GDPR, on this provision.
Italy
Italy
- at BonelliErede
- at BonelliErede
Several legal and case-law principles may be relevant depending on the kind of investigation, including the following:
- gathering evidence through employee “physical inspections and inspections on the employee’s belongings”: according to article 6 of the Workers’ Statute, these inspections are generally prohibited. They are permitted only where necessary to protect company assets (in such cases, corporal inspections may be carried out, subject to trade union agreement or National Labour Inspectorate authorisation, provided that, for example, they are carried out outside the workplace, that employees are selected with an automatic selection tool, and that the dignity and confidentiality of employees are protected);
- gathering evidence through “audiovisual equipment and other instruments from which the possibility of remote control of employees’ activities arises”: according to article 4 of the Workers’ Statute, remote systems cannot be directly aimed at controlling employees’ activity, but can only be put in place for organisational, production, work safety or asset-protection needs (which may result in an indirect control over employees’ activity), and may be installed before a trade union agreement or with previous authorisation from the National Labour Inspectorate; however, these rules do not apply to working tools in an employee’s possession (see question 8) and, in any case, employees must be informed of the possibility of remote control;
- gathering physical evidence through so-called defensive controls: according to the most recent case law, “defensive controls” can be defined as investigations carried out by the company where it has a suspicion of unlawful conduct by its employees. These controls can be carried out within certain limits and restrictions provided by case law – even in the absence of the guarantees provided for in article 4 of the Workers’ Statute.
In addition, when gathering physical evidence, there may be other provisions of law not strictly related to employment law that must be followed, for example, regarding privacy regulations (eg, minimisation of the use of personal data, collection of data only for specific purposes, and adoption of safety measures).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Whenever employers process personal data in the course of an investigation, they need to comply with Regulation (EU) 2016/679 (the GDPR) and Law 58/2019, which implements the GDPR in Portugal (jointly the Data Protection Regulations). If the gathering of physical evidence includes the collection and processing of sensitive data (eg, related to the employee’s health or any other category outlined in article 9 of the GDPR), additional safety measures should be in place to safeguard the adequate and confidential nature of such information.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]
It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).
It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Documents and instruments that set out a company’s policies (eg, employee handbooks, code of conduct or other written guidelines) often contain provisions regarding employee data and document collection, workplace searches, communication monitoring, privacy, and confidentiality. As discussed below, state and federal constitutional, statutory and common law – and in some cases foreign data privacy regimes – may provide additional protections to protect employees from an unwarranted or unreasonable invasion of privacy during an internal investigation.
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, it is advisable to back up data, documents, emails and other records promptly to prevent their deletion. Admissibility depends on whether the data originates from personal or professional records and whether they are legally relevant. If internal investigations are carried out based on a specific suspicion of a criminal offence, it is the processing of legally relevant data. In general, the processing of professional emails or documents is permissible. If there is no professional connection, access to private files and documents is only permitted in exceptional cases.
If, for example, using a business email account for private purposes is not allowed, the employer can usually assume that the data processed is only "general" data within the meaning of article 6 GDPR and that such data processing is justified by a balancing of interests. However, if private use is allowed, the data may still be part of a special category within the meaning of article 9 GDPR. In such cases, the justification for its use must be based on one of the grounds explicitly mentioned in article 9(2) GDPR.
The employer must protect the employee's rights under section 16 of the ABGB and must consider the proportionality of the interference. Only the least restrictive means – the method that least interferes with the employee's rights – may be used to obtain the necessary information. The employer's interest in obtaining the information must outweigh the employee's interest in protecting his or her rights. The implementation or initiation of controls by the employer does not automatically constitute an interference with personal rights, as being subject to the employer's rights of control is part of the position as an employee.
Italy
Italy
- at BonelliErede
- at BonelliErede
In light of the legal and case-law principles as outlined above:
- see question 7 regarding employee “physical inspections and inspections on the employee’s belongings”;
- regarding “audiovisual equipment and other instruments from which the possibility of remote control of employees’ activities also arises”, article 4 of the Workers’ Statute provides for:
- the prohibition of the use of audiovisual equipment and instruments of “direct” remote control (ie, whose sole purpose is to verify the manner, quality and quantity of working performance (eg, a camera installed in an office to film employees’ working activities, without any other purpose));
- the possibility of carrying out controls through audiovisual equipment and “indirect” remote instruments (ie, instruments that serve different needs (organisational, production, work safety or company assets’ protection), but which indirectly monitor working activities (eg, a camera installed in a warehouse to prevent theft, but which indirectly monitors the activity of warehouse workers), which may only be installed with a trade union agreement (or National Labour Inspectorate authorisation);
- the possibility of carrying out checks using working tools in the employee’s possession (e.g., PCs, tablets, mobile phones, e-mail), which may be carried out even in the absence of any trade union agreement, provided that the employee is given adequate information on how to use the tools and how checks may be carried out on their use (according to privacy law strictly related to the employment relationship).
Furthermore, based on case law, the employer can carry out so-called defensive controls (ie, actions carried out in the absence of the guarantees provided for in article 4, to protect the company and its assets from any unlawful conduct by employees). These “defensive controls” can be carried out if:
- they are intended to determine unlawful behaviour by the employee (ie, not simply to verify his or her working performance);
- there is a “well-founded suspicion” that an offence has been committed;
- they take place after the conduct complained of has been committed; and
- adequate precautions are nevertheless put in place to guarantee a proper balancing between the need to protect company assets and safeguarding the dignity and privacy of the employee.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
The employer is allowed to search an employee’s possessions or files, provided that they are work instruments or of a professional nature.
When performing these searches, employers should consider the specific provisions of the Data Protection Regulations as well as Resolution No. 1638/2013 of the Portuguese Data Protection Authority (CNPD), which contains rules on monitoring phone calls, e-mail and internet usage by employees. The CNPD understands that for the employer to access the employees’ professional data (e-mails, documents and other information stored on electronic devices), the latter should be present during the monitoring, to identify any information of a personal nature that should not be accessed by the employer (the employer must comply with these directions and should not access that email). In addition, review of the data should respect specific protocols to avoid potential access to personal data (eg, review of subject, recipients, data flow and type of files attached).
Body searches or the seizure of personal belongings or documents belonging to the employee are not permitted within the scope of a disciplinary procedure.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The basic rule is that the employer may not search private data during internal investigations.
If there is a strong suspicion of criminal conduct on the part of the employee and a sufficiently strong justification exists, a search of private data may be justified.[1] The factual connection with the employment relationship is given, for example, in the case of a criminal act committed during working hours or using workplace infrastructure.[2]
[1] Claudia Fritsche, Interne Untersuchungen in der Schweiz: Ein Handbuch für regulierte Finanzinstitute und andere Unternehmen, Zürich/St. Gallen 2013, p. 168.
[2] Claudia Fritsche, Interne Untersuchungen in der Schweiz: Ein Handbuch für regulierte Finanzinstitute und andere Unternehmen, Zürich/St. Gallen 2013, p. 168 et seq.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
As there is no unified data protection regime, privacy protections stem from a patchwork of federal and state privacy laws which impose limits on the extent to which an employer can collect information from its employees in connection with an internal investigation. Whether specific conduct violates an employee’s rights is a very fact-specific inquiry requiring the application of relevant state laws and a regulatory regime.
In most circumstances, an employer is free to conduct searches of its workplace and computer systems in the course of investigating potential wrongdoing. Such searches are generally not protected by personal privacy laws because workspaces, computer systems and company-issued electronic devices are often considered company property. Many companies explicitly address this in written corporate policies and employment agreements. Employees who use their own electronic devices for work should be aware that work-related data stored on those devices is generally considered to belong to the employer (as a matter of best practice, employers should generally prohibit or at least advise employees against using personal devices for work and to maintain separate work devices, where possible).
These broad investigatory powers notwithstanding, the ability of an employer to conduct searches in furtherance of an internal investigation is not unlimited. For example, if an employer seeks to obtain or review work-related data from an employee’s personal device, the employer must be careful to exclude any personal data. Certain states also prohibit an employer from requiring an employee to disclose passwords or other credentials to his or her personal email and social networking accounts, but permit an employer to require employees to share the content of personal online accounts as necessary during an interview while investigating employee misconduct.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The provisions of the Whistleblowing Directive must be respected. In Austria, these have been implemented through the Whistleblower Protection Act (HSchG). If the whistleblower or the persons concerned fall within the scope of the Directive, their identity must be protected. Only authorised persons may access the report. Retaliatory measures are invalid or must be reversed. Within a maximum of seven days, the whistleblower must receive a confirmation of his or her complaint. Feedback to the whistleblower must then be provided within a maximum of three months.
Italy
Italy
- at BonelliErede
- at BonelliErede
The regulations on whistleblowing in the private sector were originally outlined in article 6 of Italian Legislative Decree No. 231 of 2001 (as amended by Law No. 179 of 2017), which state that the models of organisation must provide for one or more channels that allow persons in positions of representation, administration and management of the entity (and persons subject to their direction or supervision) to report unlawful conduct according to Italian Legislative Decree No. 231 of 2001 and violations of the entity’s organisational and management rules.
Currently, Italy has implemented Directive (EU) No. 1937 of 2019, which provides for the adoption of new standards of protection for whistleblowers, through the Italian Legislative Decree No. 24 of 2023 (WB Decree)[1].
In line with the Directive, the WB Decree states, inter alia, that[2]:
- an internal whistleblowing reporting channel must be put in place by all private legal entities (and legal entities in the public sector) that have employed, during the previous year, an average of 50 employees or, even below this threshold, operate in certain industries[3] or have adopted an organizational model in accordance with Legislative Decree no. 231 of 2001;
- the WB Decree prescriptions apply to reports concerning breaches of certain national/EU[4] legal provisions (varying depending on features such as the private or public nature of the employer and its dimensions), and not to claims or requests linked to interests of a personal nature of the reporting individuals (pertaining to their individual employment contracts or to relations with their superiors)[5];
- whistleblowers’ reporting may take place through:
- the company’s internal reporting channels and internal reporting procedures (with the possibility – for entities employing up to 249 employees, even if not part of the same group – to share whistleblowing reporting channels); or
- external reporting channels and external reporting procedures established by the member states’ competent authorities (in Italy, ANAC, i.e. the National Anticorruption Authority); or
- in certain circumstances, public disclosure;
- whistleblowing systems must provide:
- a duty of confidentiality regarding the whistleblowers’ identity (which generally may not be disclosed to persons other than those competent to receive or investigate on the reports, except in specific case and with the whistleblower’s consent; see also answer to question 12 below); and
- ways of protecting collected data according to the GDPR, as well as tight deadlines for communication with whistleblowers[6]; and
- an integrated system of protection of whistleblowers against any retaliatory action directly or indirectly linked to their reports or declarations, with a reversal of the burden of proof (meaning the employer must give proof of the non-retaliatory nature of measures adopted vis-à-vis whistleblowers); and
- the procedures to be taken in case of anonymous whistleblowing report.
[1] The provisions of the Decree are binding since July 15, 2023, for larger companies, and as of Dec. 17, 2023, for entities employing an average of from 50 to 249 employees.
[2] This is only a brief and non-exhaustive summary of some of the main provisions under the WB Decree.
[3] In particular, companies that fall within the scope of application of EU acts listed in Annex (part I.B and II) of the WB Decree (for instance, financial services, products and markets; money laundering/terrorism prevention; transportation security; etc.)
[4] Listed in art. 2 and in Annex 1 of the WB Decree (for instance, regarding financial services, products and markets sector) or protecting the EU financial interests or internal market.
[5] Listed in art. 2 and in Annex 1 of the WB Decree (for instance, regarding financial services, products and markets sector) or protecting the EU financial interests or internal market.
[6] In greater detail: (i) a notice acknowledging the receipt of the WB report must be released within seven days; (ii) contacts must be kept with the whistleblower for any additions needed (if the identity is known); and (iii) within three months of the notice of receipt of the report, a follow-up notice must be given to the whistleblower (which may also be non-definitive, with a status update on activities in progress).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
The treatment of whistleblowers and their reports is laid down in various specific laws in Portugal.
Law 93/2021
Under Law 93/2021, a whistleblower of work-related offences must not be retaliated against. Furthermore, imposing disciplinary penalties on the whistleblower within two years after their disclosure is presumed to be abusive. The whistleblower is entitled to judicial protection and may benefit from the witness protection programme within criminal proceedings. Additionally, reports will be recorded for five years and, where applicable, personal data that is not relevant for the handling of a specific report will not be collected or, if accidentally collected, will be deleted immediately.
Corruption and Financial Crime Law (Law 19/2008)
Under Law 19/2008, a whistleblower must not be hampered. Furthermore, the imposition of disciplinary penalties on a whistleblower within one year following the communication of the infraction is presumed to be unfair.
Additionally, whistleblowers are entitled to:
- anonymity until the pressing of charges;
- be transferred following the pressing of charges; and
- benefit from the witness protection programme within criminal proceedings (remaining anonymous upon the verification of specific circumstances).
Money Laundering and Terrorism Financing Law (Law 83/2017)
Law 83/2017, which sets forth the legal framework to prevent, detect and effectively combat money laundering and terrorism financing, applies to financial entities and legal or natural persons acting in the exercise of their professional activities (eg, auditors and lawyers)(collectively, obliged entities).
According to article 20 of Law 83/2017, individuals who learn of any breach through their professional duties must report those breaches to the company's supervisory or management bodies. As a result, the obliged entities must refrain from threatening or taking hostile action against the whistleblower and, in particular, unfair treatment within the workplace. Specifically, the report cannot be used as grounds for disciplinary, civil or criminal action against the whistleblower (unless the communication is deliberately and clearly unjustified).
Legal Framework of Credit Institutions and Financial Companies (RGICSF)
Credit institutions must implement internal-reporting mechanisms that must guarantee the confidentiality of the information received and the protection of the personal data of the persons reporting the breaches and the persons charged. Under article 116-AA of RGICSF, persons who, while working in a credit institution, become aware of:
- any serious irregularities in the management, accounting procedures or internal control of the credit institution; or
- evidence of a breach of the duties set out in the RGICSF that may cause any financial imbalance, must communicate those circumstances to the company's supervisory body.
These communications cannot, per se, be used as grounds for disciplinary, criminal or civil liability actions brought by the credit institution against the whistleblower.
Moreover, article 116-AB of the RGICSF establishes that any person aware of compelling evidence of a breach of statutory duties may report it to the Bank of Portugal. Such communications cannot, per se, be used as grounds for disciplinary, criminal or civil liability actions brought by the credit institution against the whistleblower, unless the report is clearly unfounded.
The Bank of Portugal must ensure adequate protection of the person who has reported the breach and the person accused of breaching the applicable duties. It must also guarantee the confidentiality of the persons who have reported breaches at any given time.
Portuguese Securities Code (CVM)
Article 382 of the CVM states that financial intermediaries subject to the supervision of the Portuguese Securities Market Commission (CMVM), judicial authorities, police authorities, or respective employees must immediately inform the CMVM if they become aware of facts that qualify as crimes against the securities market or the market of other financial instruments, due to their performance, activity, or position.
Additionally, according to article 368-A of the CVM, any person aware of facts, evidence, or information regarding administrative offences under the CVM or its supplementary regulations may report them to the CMVM either anonymously or with the whistleblower's identity. The disclosure of the whistleblower's identity, as well as that of their employer, is optional. If the report identifies the whistleblower, their identity cannot be disclosed unless specifically authorised by the whistleblower, by an express provision of law or by the determination of a court.
Such communications may not be used as grounds for disciplinary, criminal, or civil liability action brought against the whistleblower, and they may not be used to demote the employee.
According to article 368-E of the CVM, the CMVM must cooperate with other authorities within the scope of administrative or judicial proceedings to protect employees against employer discrimination, retaliation or any other form of unfair treatment by the employer that may be linked to the communication to the CMVM. The whistleblower may be entitled to benefit from the witness-protection programme if an individual is charged in criminal or administrative proceedings because of their communication to the CMVM.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
If an employee complains to his or her superiors about grievances or misconduct in the workplace and is subsequently dismissed, this may constitute an unlawful termination (article 336, Swiss Code of Obligations). However, the prerequisite for this is that the employee behaves in good faith, which is not the case if he or she is (partly) responsible for the grievance.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Several federal, state, and local employment laws prohibit retaliation against employees who come forward with complaints or participate in corporate investigations. Employees who possess information regarding corporate misconduct may also be considered whistleblowers protected from retaliation under federal and state whistleblower laws, including but not limited to the Sarbanes-Oxley Act of 2002, the Dodd-Frank Wall Street Reform and Consumer Protection Act, and the Consumer Financial Protection Act of 2010.
An employee generally does not need to show that he or she was terminated or demoted to bring a retaliation claim; other actions on the part of the employer may qualify if they could be seen to discourage employees from raising complaints. To protect against a potential retaliation claim, employers should make clear at the outset of an investigation that retaliation will not be tolerated and require the complaining employee (and potentially his or her manager) to bring any instances of retaliation to the investigator’s attention immediately.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If the report and the whistleblower fall within the scope of the Whistleblowing Directive, his or her identity must be protected. From a data protection perspective, the principles of the DSG must be observed to protect the legitimate confidentiality of the individuals concerned.
Furthermore, the employer should ensure that information is only disclosed to trustworthy persons to avoid pre-judgements.
Italy
Italy
- at BonelliErede
- at BonelliErede
From an employment law perspective, confidentiality obligations may be seen from two different points of view:
- as a general duty of the employee related to the employment relationship, according to article 2105 of the Italian Civil Code, a “loyalty obligation”, which includes confidentiality obligations. On top of these, there are usually further confidentiality clauses in individual employment contracts; and
- as a general duty (linked to the outcome of the investigation) of the employer to keep confidential the identity of the employee who cooperates during the investigation (as whistleblower or a witness) to protect him or her.
In defensive criminal law investigations, the witness can’t reveal questions or answers given in his or her interview to a third party.
With regards to the confidentiality applicable to the whistleblower, see above under question 9 and below under question 12.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
The Portuguese Labour Code does not specifically provide for any confidentiality obligations concerning disciplinary procedures. On the contrary, it states that the employee should have access to any information included in the disciplinary procedure. Otherwise, the employee’s defence rights could be jeopardised, which would make the disciplinary procedure (and possible disciplinary sanctions) null and void.
As for the witnesses, even though there is no specific provision on confidentiality, employees are generally bound by a duty of loyalty vis-a-vis the employer, which includes not disclosing information that should be kept reserved,
However, in the cases of whistleblowing, it is mandatory to ensure the confidentiality of the complainant, as per question 9.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Besides the employee's duty of performance (article 319, Swiss Code of Obligations), the employment relationship is defined by the employer's duty of care (article 328, Swiss Code of Obligations) and the employee's duty of loyalty (article 321a, Swiss Code of Obligations). Ancillary duties can be derived from the two duties, which are of importance for the confidentiality of an internal investigation.[1]
In principle, the employer must respect and protect the personality (including confidentiality and privacy) and integrity of the employee (article 328 paragraph 1, Swiss Code of Obligations) and take appropriate measures to protect the employee. Because of the danger of pre-judgment or damage to reputation as well as other adverse consequences, the employer must conduct an internal investigation discreetly and objectively. The limits of the duty of care are found in the legitimate self-interest of the employer.[2]
In return for the employer's duty of care, employees must comply with their duty of loyalty and safeguard the employer's legitimate interests. In connection with an internal investigation, employees must therefore keep the conduct of an investigation confidential. Additionally, employees must keep confidential and not disclose to any third party any facts that they have acquired in the course of the employment relationship, and which are neither obvious nor publicly accessible.[3]
[1] Wolfgang Portmann/Roger Rudolph, BSK OR, Art. 328 N 1 et seq.
[2]Claudia Fritsche, Interne Untersuchungen in der Schweiz, Ein Handbuch für Unternehmen mit besonderem Fokus auf Finanzinstitute, p. 202.
[3] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 133.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Information arising from the initial complaint, interviews and records should be kept as confidential as practically possible while still permitting a thorough investigation. Although an employer must maintain confidentiality to the best of its ability, it is often not possible to keep confidential the identity of the complainant or all information gathered through the investigation process. An employer should therefore not promise absolute confidentiality to any party involved in an internal investigation, including the complainant. The investigator should instead explain at the outset to the complaining party and all individuals involved that information gathered will be maintained in confidence to the extent possible, but that some information may be revealed to the accused or potential witnesses on a need-to-know basis to conduct a thorough and effective investigation.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The purpose of internal investigations would be jeopardised by fully informing a suspected employee beforehand, as it would allow him or her to hide or destroy possible evidence, plan his testimony or coordinate with other employees.
There is no legal requirement to inform the employee of the allegations or suspicions.
Italy
Italy
- at BonelliErede
- at BonelliErede
From an employment law perspective, our legal system does not provide a specific duty for an employer to inform employees that a workplace investigation is in progress.
In addition, disclosing such information could put at risk the outcome of the workplace investigation (eg, destruction of evidence), and it would therefore be arguable that no information should be provided to employees.
On the other hand, if, upon completion of the investigation, the employer decides to bring disciplinary action against the employee, then the latter must be informed of the complaints with a letter stating the procedure (see questions 3 and 12).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
If, before taking disciplinary action, the employer decides to open a preliminary investigation phase, the employee does not have to be informed.
Only when the preliminary investigation leads to a formal accusation will the employee be entitled to know that enquiries were carried out and the source of the facts (eg, witnesses, documents).
However, if an employer does not need to open a formal preliminary investigation phase, it only has to serve the accusation notice to the employee.
As a rule, employees will only know that they are being investigated if they are suspended or when they are notified of the accusation.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As a result of the employer's duty of care (article 328, Swiss Code of Obligations), employees under investigation have certain procedural rights. These include, in principle, the right of the accused to be heard. In this context, the accused has the right to be informed at the beginning of the questioning about the subject of the investigation and at least the main allegations and they must be allowed to share their view and provide exculpatory evidence.[1] The employer, on the other hand, is not obliged to provide the employee with existing evidence, documents, etc, before the start of the questioning.[2]
Covert investigations in which employees are involved in informal or even private conversations to induce them to provide statements are not compatible with the data-processing principles of good faith and the requirement of recognisability, according to article 4 of the Swiss Federal Act on Data Protection.[3]
Also, rights to information arise from the Swiss Federal Act on Data Protection. In principle, the right to information (article 8, Swiss Federal Act on Data Protection) is linked to a corresponding request for information by the concerned person and the existence of data collection within the meaning of article 3 (lit. g), Swiss Federal Act on Data Protection. Insofar as the documents from the internal investigation recognisably relate to a specific person, there is in principle a right to information concerning these documents. Subject to certain conditions, the right to information may be denied, restricted or postponed by law (article 9 paragraph 1, Swiss Federal Act on Data Protection). For example, such documents and reports may also affect the confidentiality and protection interests of third parties, such as other employees. Based on the employer's duty of care (article 328, Swiss Code of Obligations), the employer is required to protect them by taking appropriate measures (eg, by making appropriate redactions before handing out copies of the respective documents (article 9 paragraph 1 (lit. b), Swiss Federal Act on Data Protection)).[4] Furthermore, the employer may refuse, restrict or defer the provision of information where the company’s interests override the employee’s, and not disclose personal data to third parties (article 9 paragraph 4, Swiss Federal Act on Data Protection). The right to information is also not subject to the statute of limitations, and individuals may waive their right to information in advance (article 8 paragraph 6, Swiss Federal Act on Data Protection). If there are corresponding requests, the employer must generally grant access, or provide a substantiated decision on the restriction of the right of access, within 30 days (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 paragraph 4, Ordinance to the Federal Act on Data Protection).
[1] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
[2] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
[3] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
[4] Claudia Götz Staehelin, Unternehmensinterne Untersuchungen, 2019, p. 37.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
The investigator must disclose to the employee under investigation the purpose of the investigation and, where the investigator is in-house or outside counsel, he or she should disclose that the company is the client.
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
When dealing with reports and persons covered by the HSchG, the provisions on identity protection must be followed. In all internal investigations, only authorised persons should receive information.
Italy
Italy
- at BonelliErede
- at BonelliErede
Yes, in principle the identity of the complainant, witnesses or sources of information for the investigation can be kept confidential.
On the other hand, if the employer – after having concluded the investigation – brings disciplinary action against the employee, the employer must send a letter to the employee in which the facts are described in detail, objectively and in a precise way, identifying when and where they have taken place, to allow a proper defence for the employee.
Even at this stage, however, the employer has no obligation to provide the employee with the evidence underlying the facts ascribed to him (ie, the employer has no obligation to specify the identity of the individuals through which they gained knowledge of the facts reported in the disciplinary letter).
However, if the employee subsequently challenges the disciplinary sanction before a judge, the employer bears the burden of proof, which may mean having to call the individuals interviewed within the internal investigation to stand as witnesses in court.
Moreover, in case of whistleblowing reports falling within the scope of the WB Decree, the employer is requested to generally keep the whistleblower’s identity confidential (according to art. 12 of the WB Decree). More specifically: (i) if the disciplinary charges are grounded on investigations which are different and additional to the whistleblowing report (although arising as a consequence of the report), the whistleblower’s identity may not be disclosed; (ii) if the disciplinary charges are grounded, in whole or in part, on the whistleblowing report, and knowing the identity of the whistleblower is indispensable for the defendant, such report may be used for the purpose of the disciplinary proceeding only if the whistleblower gives consent to his/her identity being revealed.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
An employee served a notice of accusation is entitled to assess all information that was gathered within the scope of the investigation and disciplinary procedure (notably the identity of the complainant, witnesses heard, other sources of information, etc), otherwise his right of defence may be jeopardised.
Where a preliminary investigation does not lead to an accusation against the employee, no disclosure has to be made by the employer.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As mentioned under Question 10, the employer’s duty of care (article 328, Swiss Code of Obligations) also entails the employer’s duty to respect and protect the personality (including confidentiality and privacy) and integrity of employees (article 328 paragraph 1, Swiss Code of Obligations) and to take appropriate measures to protect them.
However, in combination with the right to be heard and the right to be informed regarding an investigation, the accused also has the right that incriminating evidence is presented to them throughout the investigation and that they can comment on it. For instance, this right includes disclosure of the persons accusing them and their concrete statements. Anonymisation or redaction of such statements is permissible if the interests of the persons incriminating the accused or the interests of the employer override the accused’ interests to be presented with the relevant documents or statements (see question 11; see also article 9 paragraphs 1 and 4, Swiss Federal Act on Data Protection). However, a careful assessment of interests is required, and these must be limited to what is necessary. In principle, a person accusing another person must take responsibility for their information and accept criticism from the person implicated by the information provided.[1]
[1] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In general, except as provided above, depending on the seriousness of the complaint and investigation, the only persons who should be aware of it are the relevant individual in human resources or legal, and where different, the persons assigned to investigate. Although it may not be feasible to maintain absolute confidentiality in conducting an investigation depending on the nature of the allegations, investigators should exercise discretion at all times and, where possible, avoid identifying complainants, the subject of the investigation or witnesses by name where it is not necessary, and where doing so could be detrimental to the fact-finding process.
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
According to section 6(1) of the DSG, employees who have access to personal data in the course of their professional activities must maintain data confidentiality and continue to do so even after termination of their employment.
Non-disclosure agreements can generally be used to achieve this but are subject to certain restrictions. They may not be used to conceal criminal activity, violate the privacy rights of individuals, circumvent legal disclosure obligations, prevent the exercise of legal rights or contain clauses that violate existing laws, in particular data protection regulations.
Italy
Italy
- at BonelliErede
- at BonelliErede
Yes, in principle, NDAs can be used to keep the fact and substance of an investigation confidential, even if it is not strictly necessary (and not often done in our experience).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Please see question 12 above. NDAs are not admissible.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In addition to the above-mentioned statutory confidentiality obligations, separate non-disclosure agreements can be signed. In an internal investigation, the employee should be expressly instructed to maintain confidentiality.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
This is a fact-specific inquiry that depends on the specific circumstances and laws of the relevant state. In general, NDAs are frowned upon but can be used to an extent to keep certain facts and the substance of an investigation confidential. NDAs can never prevent employees from assisting in official agency investigations, however. NDAs also cannot lawfully prohibit employees from officially reporting illegal conduct by their employer.
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If a lawyer is involved in the investigation, communication between the lawyer and client is subject to legal professional privilege. These communications must not be disclosed. Any documents collected by an internal audit can be seized and used. However, a document created by a lawyer can only be seized. The same applies to other professional representatives of parties, such as notaries and auditors, as potential holders of professional secrecy.
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, from an employment law perspective, workplace investigations made by corporate departments (eg, HR and legal counsel who do not operate in their function as lawyers) are not covered by privilege. Generally speaking, privilege covers correspondence and conversations between lawyers.
In defensive criminal law investigations, legal privilege applies.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
If any sources of information used within an investigation include privileged data, they may be redacted to safeguard third parties' rights. However, where disclosure of that data is necessary for the employee to understand why he or she is being accused, it may be necessary to reveal those elements. Otherwise, the employee may argue that their rights were affected and, for that reason, the disciplinary procedure – and any possible sanction – should be deemed null and void.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As outlined above, all employees generally have the right to know whether and what personal data is being or has been processed about them (article 8 paragraph 1, Swiss Federal Act on Data Protection; article 328b, Swiss Code of Obligations).
The employer may refuse, restrict or postpone the disclosure or inspection of internal investigation documents if a legal statute so provides, if such action is necessary because of overriding third-party interests (article 9 paragraph 1, Swiss Federal Act on Data Protection) or if the request for information is manifestly unfounded or malicious. Furthermore, a restriction is possible if overriding the self-interests of the responsible company requires such a measure and it also does not disclose the personal data to third parties. The employer or responsible party must justify its decision (article 9 paragraph 5, Swiss Federal Act on Data Protection).[1]
The scope of the disclosure of information must, therefore, be determined by carefully weighing the interests of all parties involved in the internal investigation.
[1] Claudia M. Fritsche, Interne Untersuchungen in der Schweiz, Ein Handbuch für Unternehmen mit besonderem Fokus auf Finanzinstitute, p. 284 et seq.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
For legal privilege to apply, a primary purpose of the investigation should be to provide legal advice to the company, including concerning non-lawyers working at the counsel’s direction, and legal privilege likely will not apply to internal investigations performed as part of the ordinary course of business or where the investigation is required by a state or federal regulatory regime (eg, post-incident investigations of operations governed by OSHA’s Process Safety Management Standards). It is, therefore, important to contemporaneously document the scope and purpose of the investigation and not risk waiving privilege by sharing privileged materials with unnecessary third parties.
Whereas attorney-client privilege includes only communications between an attorney and the client, work-product privilege is broader and includes materials prepared or collected by persons other than the attorney with an eye towards impending litigation. Examples of potential work products produced by attorneys in the context of an investigation include investigative work plans, interview outlines, memoranda summarising witness interviews and investigative reports.
As a practical matter, employees should be aware that communications with other employees or colleagues regarding the investigation are not privileged regardless of whether the colleague is also involved in the investigation or represented by the same counsel. Even if an employee believes he or she is sharing attorney communications with other employees who need to know the attorney’s advice and who also have attorney-client privilege with the same counsel because he or she is involved or implicated in the investigation and also represented by company counsel, it is always prudent to refrain from sharing privileged information. If an attorney’s communication is shared beyond those who need to know, attorney-client privilege may be destroyed.
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, an employee is not entitled to have a representative present during investigations. However, he is free to reach out to the works council or independently contact a lawyer for advice. The employer must hear the works council upon his or her request on all matters concerning the interests of employees at the company. Once disciplinary proceedings begin, the employee has the right to be represented by a lawyer.
Italy
Italy
- at BonelliErede
- at BonelliErede
In principle no, because the investigations’ interviews should only deal with the collection of data/or information and not have any disciplinary or accusatory purpose.
However, if the investigation leads to a disciplinary procedure, the employee – under article 7 of the Workers’ Statute – has the right to ask for a meeting to present his or her justification and, on that occasion, to be assisted by a trade union representative. Employees sometimes ask to be assisted by a lawyer and companies usually accept, as a standard practice.
In defensive criminal law investigations, if the employee is suspected of having committed a crime, he or she must be interviewed with the assistance of a criminal lawyer.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Under the Portuguese Bar Association statutes, the assistance of a lawyer is allowed at all times and cannot be prevented by any jurisdiction or authority, public or private entity.
Nevertheless, the law does not provide any obligation to inform the employee that they are entitled to the assistance of a lawyer.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In the case of an employee involved in an internal investigation, a distinction must be made as to whether the employee is acting purely as an informant or whether there are conflicting interests between the company and the employee involved. If the employee is acting purely as an informant, the employee has, in principle, no right to be accompanied by their own legal representative.[1]
However, if there are conflicting interests between the company and the employee involved, when the employee is accused of any misconduct, the employee must be able to be accompanied by their own legal representative. For example, if the employee's conduct might potentially constitute a criminal offence, the involvement of a legal representative must be permitted.[2] Failure to allow an accused person to be accompanied by a legal representative during an internal investigation, even though the facts in question are relevant to criminal law, raises the question of the admissibility of statements made in a subsequent criminal proceeding. The principles of the Swiss Criminal Procedure Code cannot be undermined by alternatively collecting evidence in civil proceedings and thus circumventing the stricter rules applicable in criminal proceedings.[3]
In general, it is advisable to allow the involvement of a legal representative to increase the willingness of the employee involved to cooperate.
[1] Claudia Götz Staehelin, Unternehmensinterne Untersuchungen, 2019, p. 37.
[2] Simona Wantz/Sara Licci, Arbeitsvertragliche Rechte und Pflichten bei internen Untersuchungen, in: Jusletter 18 February 2019, N 59.
[3] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 392; Niklaus Ruckstuhl, BSK-StPO, Art. 158 StPO N 36.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Employees generally have no automatic right to counsel in connection with an internal investigation, unless contractually provided for under the terms of an employment agreement. Nonetheless, employees may choose to retain counsel, particularly if they face liability.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The Austrian Labour Constitution Act (ArbVG) does not contain any provisions regarding workplace investigations. The employee has the right to address the works council but is not entitled to have the works council comply with his or her request.
The works council's opportunities for participation are conclusively regulated. Certain investigative or control measures may require the consent or co-determination of the works council.
Under section 96(1)3 ArbVG, the consent of the works council is required if the employer wishes to introduce and maintain control measures or technical systems for monitoring employees that affect human dignity, such as video surveillance or specific staff questionnaires. If there is no works council, the consent of each individual employee is required.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, a workplace investigation does not require the involvement of a trade union (on the assumption that no specific union agreement has been reached at a company level to entitle trade unions to specific forms of consultation or involvement in workplace investigations, which is not common).
According to section 4 of the Workers’ Statute, as stated above, the involvement of the trade union is necessary regarding the installation and use of specific equipment (such as cameras, switchboards, software) that potentially allows the employer to remotely monitor working activity, and which can be done only with prior agreement of the unions (or authorised by the labour inspectorate). The union agreement must be made before the installation of the system, and therefore would normally be already in place when an investigation starts.
Pursuant to the WB Decree (Art. 4), union representatives (or external unions) should be “heard” before the employer activates a WB reporting channel[1].
[1] According to certain guidelines issued by the industrial trade association (Confindustria), the involvement should be purely for information purposes.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Employee representative bodies are not entitled to be informed about or to participate in the preliminary investigation. The works council is only entitled to participate in disciplinary proceedings after a formal accusation has been made against the employee.
A copy of the accusation should be sent to the works council (if any) and if the employee is a trade union member, to the respective trade union. After the instruction phase of the procedure has ended (where the employer has to hear the witnesses identified by the employee in his written defence and file any other sources of information that have been requested), the employer should provide a copy of the disciplinary procedure to the works council (if any) and the respective trade union, if the employee is a member. These employees’ representatives will then have five business days to issue their opinion on the matter.
Finally, a copy of the final decision must also be sent to these bodies.
There is no legal right for the interviewee to be assisted by a representative from the works council.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In general, works councils and trade unions are not very common in Switzerland and there are no statutory rules that would provide a works council or trade union a right to be informed or involved in an ongoing internal investigation. However, respective obligations might be foreseen in an applicable collective bargaining agreement, internal regulations or similar.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Employers generally have no obligation to inform employees of their right to union representation or to ask if they would like a union representative present during the interview. Union employees may insist, however, that a union representative attend any investigatory interview that could lead to the employee’s punishment, although the union representative may not interfere with the interview.
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
There is no additional support for the employees concerned. However, the employer may offer support measures to the employees to ensure better cooperation. The choice of support measures is at the employer's discretion. For example, the employer could offer to bear lawyer’s fees, if the employee is cooperative. Such decisions must always be made on a case-by-case basis.
Italy
Italy
- at BonelliErede
- at BonelliErede
According to the law, there is no other specific kind of support other than what is mentioned above.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Employees are usually assisted by lawyers when they are subject to an investigation or disciplinary procedure.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The employer does not generally need to provide specific support for employees that are subject to an internal investigation. The employer may, however, allow concerned employees to be accompanied by a trusted third party such as family members or friends.[1] These third parties will need to sign separate non-disclosure agreements before being involved in the internal investigation.
In addition, a company may appoint a so-called lawyer of confidence who has been approved by the employer and is thus subject to professional secrecy. This lawyer will not be involved in the internal investigation but may look after the concerned employees and give them confidential advice as well as inform them about their rights and obligations arising from the employment relationship.[2]
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
The employer’s counsel should provide an Upjohn warning at the start of any interview, and delivery of the warning should be documented by a note-taker. An Upjohn warning is the notice an attorney (in-house or outside counsel) provides a company employee to inform the employee that the attorney represents only the company and not the employee individually.
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Provided the employer complies with labour law and data protection regulations, internal investigations are lawful and are not regarded as administrative or judicial proceedings. If legal consequences for not cooperating, such as dismissal, are threatened by the employer or his investigators, the offence of coercion under section 105 of the Austrian Criminal Code could be fulfilled.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, grievances from the employee do not per se automatically entail an interruption of the investigation. This conclusion, however, should be double-checked on a case-by-case basis, depending on what kind of grievance the employee under investigation raises, and on the potential effect of that grievance (if grounded): for example, should the grievance concern alleged unlawful processing of personal data, the employer could consider suspending the investigation while checking if the grievance has grounds, to avoid collecting data that cannot be used.
Grievances may be raised “internally” vis-à-vis the employer, possibly through procedures regulated by internal policies or codes (including, for example, whistleblowing procedures), if any, or brought to external authorities (which, depending on the kind of issue, could be a labour court, the Data Privacy Authority, law enforcement authorities, etc).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Grievance procedures are not specifically provided for under Portuguese law. There is no formal procedure for an employee to raise a complaint against the employer. Nonetheless, a potential claim brought by the employee under investigation and subject to a disciplinary procedure should not have any impact.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In the context of private internal investigations, grievances initially raised by the employee do not usually have an impact on the investigation.
However, if the employer terminates the employment contract due to a justified legal complaint raised by an employee, a court might consider the termination to be abusive and award the employee compensation in an amount to be determined by the court but not exceeding six months’ pay for the employee (article 336 paragraph 1 (lit. b) and article 337c paragraph 3, Swiss Code of Obligations). Furthermore, a termination by the employer may be challenged if it takes place without good cause following a complaint of discrimination by the employee to a superior or the initiation of proceedings before a conciliation board or a court by the employee (article 10, Federal Act on Gender Equality).
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Where an employee who is the subject of a workplace investigation raises his or her grievance during the investigation, the investigator should follow the same steps outlined above to triage new issues or claims. The investigator should also discuss with in-house counsel whether any particular steps should be taken to avoid the perception that any disciplinary measures taken against the employee (in the event the original claims are substantiated) were retaliatory.
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The involved employee's sick leave does not affect the internal investigation. Most investigative measures can be carried out without the employee's presence.
Italy
Italy
- at BonelliErede
- at BonelliErede
Although there are no specific rules stating an investigation must be suspended if the employee under investigation goes off sick, practically speaking, this may slow down the process. Indeed, the employer would not be in the position to “force” the employee, while he or she is absent from work, to physically attend meetings, although they may ask for the employee’s availability to attend remote interviews (eg, via videoconference).
There is case law regarding an employee’s sickness during a disciplinary procedure (i.e. the procedure described above in point 3): according to certain rulings, if an employee, as per his or her rights, asks to submit an oral defence, but then falls sick, this does not prevent the employer from completing the procedure (and taking disciplinary action), unless the employee proves that his or her sickness prevents him or her from physically attending the meeting (being said that, above all if the procedure ends with a dismissal, a case-by-case analysis on how to manage such situations is highly recommended).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
The employer will be able to proceed with the investigation or disciplinary procedure regardless, although if it is necessary to hear the employee and they are unable to attend the interview, either the employer waits for their return or it could also send a written questionnaire for the employee to complete.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The time spent on the internal investigation by the employee should be counted as working time[1]. The general statutory and internal company principles on sick leave apply. Sick leave for which the respective employee is not responsible must generally be compensated (article 324a paragraph 1 and article 324b, Swiss Code of Obligations). During certain periods of sick leave (blocking period), the employer may not ordinarily terminate the employment contract; however, immediate termination for cause remains possible.
The duration of the blocking period depends on the employee's seniority, amounting to 30 days in the employee's first year of service, 90 days in the employee's second to ninth year of service and 180 days thereafter (article 336c paragraph 1 (lit. c), Swiss Code of Obligations).
[1] Ullin Streiff/Adrian von Kaenel/Roger Rudolph, Arbeitsvertrag, Praxiskommentar zu Art. 319–362 OR, 7. A. 2012, Art. 328b N 8 OR.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
If an employee who is the subject of a workplace investigation becomes sick during the investigation, the investigator should complete as much of the process as possible in the employee’s absence, for example by conducting interviews with the complainant and other witnesses and collecting and reviewing relevant documentation. Where the employee’s absence is expected to be short-term, the employer can postpone completing the investigation until the employee returns to work and can be interviewed. Where a lengthy absence is expected, the investigator should take steps to ensure that the employee nevertheless has a fair chance to participate in the process, for example by providing the employee with flexibility in scheduling his or her interview or by offering other accommodations such as conducting the interview by video conference instead of requiring an in-person interview, or alternatively meeting in a neutral place instead of the office. It is important to maintain records of the steps taken to accommodate the employee to show that the process was reasonable and fair.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Private investigations differ from criminal or regulatory investigations. Nevertheless, even for internal investigations, it is advisable to collect evidence in a way that can be admitted in court, as it may have to be presented to the authorities during the investigation process. Generally, any evidence obtained in the course of an internal investigation may be admitted in subsequent administrative or judicial proceedings.
If the evidence is not voluntarily surrendered, seizure or confiscation is possible. Since official proceedings are often lengthy, suspension is not always recommended.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, internal investigations and those performed by external authorities are autonomous.
In addition, there are no general rules under which the employer must wait for the completion of a criminal investigation before completing its investigation and taking disciplinary action; if the employer believes it has sufficient grounds and evidence to take disciplinary action, it does not have to wait.
That being said, criminal investigations – given the wider investigation powers that public prosecutors or regulators have – may help to gather further evidence on the matter. From a practical point of view, the employer may decide to suspend (with pay) the employee apending the outcome of the criminal investigation, although this option must be evaluated carefully, given the potentially long duration of criminal proceedings, and the fact that the employer normally would not be in a position to access the documents and information about the criminal investigation (unless the company is somehow involved in the proceeding).
Lastly, in very general terms, police or public prosecutors have broad investigatory powers during criminal investigations, which could in certain circumstances make it compulsory for an employer to share evidence (but a case-by-case analysis is necessary regarding specific situations). Moreover, public prosecutors usually do not appreciate that, pending criminal proceedings, internal investigations are being conducted, because it can interfere with the criminal investigation.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
These procedures are independent and autonomous, and the law does not provide any particular rules to ensure coordination. This raises particular concerns when an employee is subject to a criminal investigation in secret, as the employer will be unable to access any evidence from the criminal procedure to begin an internal investigation or disciplinary procedure against the employee.
On the other hand, considering the short statutes of limitation to enforce disciplinary action, it may prove impossible to wait for the outcome of the criminal or regulatory investigation to decide if a disciplinary procedure should also be enforced, because by the time the employer is fully aware of the facts, the statutes of limitation may have already expired.
However, both the judge in a criminal procedure and the regulator have the public authority to order the employer to share any findings within the scope of the investigation or disciplinary procedure.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The actions of the employer may carry through to a subsequent state proceeding. First and foremost, any prohibitions on the use of evidence must be considered. Whereas in civil proceedings the interest in establishing the truth must merely prevail for exploitation (article 152 paragraph 2, Swiss Civil Procedure Code), in criminal proceedings, depending on the nature of the unlawful act, there is a risk that the evidence may not be used (see question 27 and article 140 et seq, Swiss Civil Procedure Code).
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Employers have obligations to conduct a thorough and unbiased internal investigation and take prompt remedial action to prevent further workplace violations. As such, absent a criminal or regulatory investigation where the investigators ask the employer to pause an internal investigation, employers should be prepared to continue their internal investigation in parallel with the criminal or regulatory investigation while cooperating with police or regulatory investigators.
The police and the regulator can often compel the employer to share certain information gathered from its internal investigation. In some cases, the employer should analyse whether the non-disclosure of information evidencing criminal conduct within the company itself constitutes an independent crime or whether an applicable statute or regulation imposes an independent duty to disclose. Alternatively, the employer should consider whether, even absent an affirmative duty to disclose, disclosure of information gathered during an internal investigation may still benefit the employer.
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.
Italy
Italy
- at BonelliErede
- at BonelliErede
If the outcome of the investigation does not lead to a disciplinary procedure, there is no specific obligation for the employer regarding this.
However, to a certain extent, under privacy laws, the employee may exercise his or her right of access to information strictly related to him or her, arising from the investigation (which is, however, a wider privacy issue to be assessed under the GDPR.)
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
If, further to the conclusion of the investigation, the employer concludes that there are no grounds to enforce disciplinary action against the employee, the employee does not even have to know that they were the subject of an investigation.
However, if the employer does decide to accuse the employee, the employee will be entitled to all the sources of information obtained during the preliminary investigation.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.
The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In general, it is often helpful to provide the complainant and subject of the complaint with a short written communication or verbal communication at the end of an investigation to advise that the investigation has concluded. Where the allegations are unsubstantiated, the communication should convey that no evidence of misconduct or unlawful conduct was found. Where the allegations are substantiated, the results and proposed communication should be reviewed with the legal function, together with potential disciplinary and remedial action, before it is communicated to the complainant and the subject of the complaint.
Where the misconduct alleged poses a high risk to the company from a reputational, operational or legal perspective, and especially where an investigation is conducted by outside counsel, outside counsel should determine, in consultation with the relevant individuals at the company, for example the general counsel, how and with whom to share investigation results and if and how to communicate the outcome to the complainant and the subject of the complaint. This is the case regardless of whether the allegations are found to be substantiated or unsubstantiated.
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The employer may impose consequences under labour law. Consequences may include verbal or written warnings, transfers or other disciplinary measures. The employer may also implement training or educational measures if the issue is due to the employee's lack of knowledge. In serious cases, besides dismissal without notice – for example. if the employer seeks damages –legal action (civil or criminal) may be taken against the employee.
Italy
Italy
- at BonelliErede
- at BonelliErede
Upon completion of the investigation, the employer – if misconduct by the employee emerges – may bring disciplinary action against him or her (which may be either dismissal or a “conservative” measure such as an oral or written warning, a fine, or a suspension, within the limits provided under the law and possibly the applicable NCBA).
If a criminal offence by the employee emerges, the employer may also decide to report the crime to the public authorities (see question 25).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
Once the preliminary investigation ends, the employer must decide whether or not, in its view, there are grounds to bring an accusation against the employee and enforce disciplinary action or if it should be dismissed due to a lack of evidence.
When the employer decides to enforce disciplinary action, the following sanctions may be applied:
- verbal warning;
- written warning;
- financial penalty;
- loss of holiday;
- suspension with loss of pay and length of service;
- dismissal with cause and without compensation.
The first five penalties are usually called conservatory sanctions, enabling the continuity of the employment relationship, as opposed to dismissal, which is deemed a measure of last resort.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
If the investigation uncovers misconduct, the question arises as to what steps should be taken. Of course, the severity of the misconduct and the damage caused play a significant role. Furthermore, it must be noted that the cooperation of the employee concerned may be of decisive importance for the outcome of the investigation. The possibilities are numerous, ranging, for example, from preventive measures to criminal complaints.[1]
If individual disciplinary actions are necessary, these may range from warnings to ordinary or immediate termination of employment.
[1] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 180 et seq.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Where the misconduct alleged is substantiated in whole or in part by an internal investigation, the human resources function, potentially in consultation with in-house or outside counsel, should agree on disciplinary or remedial action to be implemented.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
It is up to management to decide which results should be disclosed and to whom. It is important to know who the persons concerned are and who has an interest in disclosure.
From a legal perspective, disclosure must follow the GDPR. Internal policies can specify how the results are to be handled. Works Council Agreements (WCAs) may also contain regulations on how to deal with internal investigations and the disclosure of results.
There is no requirement to publish the results of the investigation, but it may be advisable to cooperate with the authorities. This is particularly the case if the employer has suffered damage or is himself threatened with prosecution. The release of investigation results can be compelled through the courts.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, even if the investigation leads to evidence of a criminal offence, the employer does not have to inform public authorities (citizens and private entities do not have an obligation to report crimes they discover). The existence of any obligations to report to regulatory authorities (eg, banking and insurance regulatory authorities) should be investigated on a case-by-case basis.
The internal procedures of the company – as adopted by the company in the framework of legislation on the administrative or quasi-criminal vicarious liability of legal entities – may require the findings to be disclosed to certain internal bodies or committees.
As said above, the police or public prosecutors (and possibly other public authorities) may have, within their investigatory powers, and in certain circumstances, the power to access internal investigation outcomes (but a case-by-case analysis would be necessary).
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
The investigation findings must be disclosed to the employee when an accusation is brought against him or her and to the works council (if any) or trade union, if the employee is a member.
Regulators or police authorities may also notify the employer if any investigations were brought against a particular employee (as regards regulators, this could occur within the scope of fit and proper procedures), in which case the employer must cooperate and disclose any investigation findings.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The employer is generally not required to disclose the final report, or the data obtained in connection with the investigation. In particular, the employer is not obliged to file a criminal complaint with the police or the public prosecutor's office.
Exceptions may arise, for example, from data protection law (see question 22) or a duty to release records may arise in a subsequent state proceeding.
Data voluntarily submitted in a proceeding in connection with the internal investigation shall be considered private opinion or party assertion.[1] If the company refuses to hand over the documents upon request, coercive measures may be used under certain circumstances.[2]
[1] Oliver Thormann, Sicht der Strafverfolger – Chancen und Risiken, in: Flavio Romerio/Claudio Bazzani (Hrsg.), Interne und regulatorische Untersuchungen, Zürich/Basel/Genf 2016, p. 123.
[2] Oliver Thormann, Sicht der Strafverfolger – Chancen und Risiken, in: Flavio Romerio/Claudio Bazzani (Hrsg.), Interne und regulatorische Untersuchungen, Zürich/Basel/Genf 2016, p. 102 et seq.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Once fact-finding is complete, the investigator should discuss his or her notes with in-house or outside counsel and prepare a summary of the process, high-level findings, and a proposed resolution at the counsel’s direction. This report should not include subjective commentary and should also avoid including excessive detail, and generally be treated confidentially during and after the investigation. If the report is requested by regulators or the police, the company should discuss with in-house counsel, and preferably also with outside counsel, how to respond to the request and whether any steps need to be taken to protect any applicable legal privilege.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.
Italy
Italy
- at BonelliErede
- at BonelliErede
The employer would normally keep the outcomes of the investigation for the entire duration of the employment relationship with the involved employee.
After the termination of the employment relationship, it appears reasonable to conclude that the employer would be entitled to retain this information for the time necessary to exercise its defence rights in litigation (taking into account that 10 years is the statute of limitations for contractual liability). Further requirements or restrictions under general privacy laws (and particularly the GDPR) should also be checked.
According to Art. 14 WB Decree, internal and external whistleblowing reports (including related documents) must be kept for as long as necessary for report processing, but no more than five years from the date of transmission of the procedure's final outcome.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
There are no specific rules in the Portuguese Labour Code on this matter.
However, article 332 of the PLC states that the employer should keep an updated record of disciplinary sanctions, so the competent authorities can easily verify compliance with applicable provisions. Accordingly, it is advisable to maintain a record of disciplinary sanctions during the entire employment relationship.
Also, please note that some collective bargaining agreements state that the disciplinary register must be deleted from the employee’s record periodically.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.
From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]
[1] Wolfgang Portmann/Isabelle Wildhaber, Schweizerisches Arbeitsrecht, 4. Edition, Zurich/St. Gallen 2020, N 473.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
There is no requirement for the results of a workplace investigation to remain on an employee’s record for any specific period. It is often helpful, however, for information relating to the outcome of such an investigation (regardless of whether the allegations are substantiated) to be accessible to the human resources or legal functions such that during the initial complaint intake process described above, any prior complaints and investigations relating to the same individual or group of individuals can be taken into account to identify any recurring issues or systemic violations.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
This relates to the severity of the error. Data protection violations can lead to fines by the data protection authority or claims for damages. If consequences under labour law, such as dismissal, have taken place due to erroneous investigations or incorrect results, the employee concerned can assert claims under labour law or seek damages.
Furthermore, there may be consequences under criminal law. This is particularly the case if documents have been falsified in the course of the investigation. It is, therefore, crucial that employers exercise diligence and due process in internal investigations. Investigations must be conducted transparently and lawfully.
Italy
Italy
- at BonelliErede
- at BonelliErede
It depends on the kind of error or breach. For example:
- a breach of privacy laws (eg, acquiring data from working instruments in lack of due requirements) would lead to the application of privacy law sanctions (including monetary fines); and
- breach of provisions regarding “remote” control of employees would lead to criminal sanctions and to the inadmissibility, for disciplinary purposes, of the data collected (and thus potentially to the unlawfulness of a dismissal based on such data).
Furthermore, if the employee has suffered damages as a result of the employer’s errors or breaches (and can specifically prove such damages and their amount), the employer may be held liable in court.
Portugal
Portugal
- at Uría Menéndez - Proença de Carvalho
If the disciplinary procedure recommends an employee's dismissal
Should a company dismiss an employee that has breached legal requirements, the latter may take action against the company within 60 days of the date of termination of their employment agreement.
If this action results in a ruling of unfair dismissal, the employee will be entitled:
- to receive all the payments they should normally have earned (back pay, including salary, holidays, legal subsidies, etc), from the month preceding the commencement of the lawsuit and until the final ruling of the court, minus any amounts they may have received during the same period and they would otherwise not have received; and
- to be reinstated in their former position or at the employee’s choice, to receive an indemnity that the court will calculate as between 15 and 45 days of base salary (and service bonuses) for each full year of service or fraction thereof, with a minimum limit of three months’ compensation.
This graduation will depend on the amount of the base salary (the lower the base salary, the higher the indemnity) and the severity of the company’s conduct. Additionally, the employee is entitled to claim an indemnity for further damages.
There are, however, two exceptions to the above: the first relates to high-ranking employees (ie employees carrying out management duties); the second refers to micro-companies (ie, a company that registered an average number of employees in the preceding calendar year below 10). In these two cases, the employer may oppose the employee’s option for reinstatement, arguing that it would be gravely harmful to the company's activity. From a practical perspective, opposition to reinstatement is not commonly decided by the courts.
Finally, should the court rule that the grounds for dismissal were valid, but the investigation was found to have been irregular, the dismissal will be deemed valid, but the employee will still be entitled to an indemnity of 7.5 to 22.5 days of base salary (plus service bonuses, if any) per year of service.
If the disciplinary procedure does not recommend dismissal, but the application of a conservatory sanction
In this event, the employee can challenge the application of the sanction through the filing of a lawsuit against the company. Although the law is not entirely clear, there are court rulings stating that the employee has one year to bring a lawsuit, but others consider that the statute of limitation to challenge a conservatory disciplinary sanction is also one year from the termination of the employment agreement when a pecuniary penalty or suspension was applied to the employee.
Moreover, according to article 331(3) of the Portuguese Labour Code, the employer who applies an unjustified conservatory penalty should compensate the worker under the terms set out in paragraphs 5 and 6 of said article. The imposition of an abusive penalty is also considered a very serious administrative offence as per article 331(7). Please note that the Portuguese Labour Code considers a penalty to be unjustified if its imposition is motivated by the following:
- the employee lawfully complaining about their labour conditions;
- the employee lawfully disobeying unlawful orders from a superior;
- the employee being a member of any employee representative structure or having been a candidate for such a position; and
- the employee exercising or invoking their rights and guarantees.
Furthermore, any penalty imposed within six months of any instance listed above (or within one year if the invoked rights are related to equality and non-discrimination) is presumed to be abusive.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As there are no specific regulations for internal investigations, the usual legal framework within which the employer must act towards the employee derives from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights.
But, for example, unwarranted surveillance could conceivably result in criminal liability (article 179 et seq, Swiss Criminal Code) for violations of the employee's privacy. Furthermore, errors made by the employer could have an impact on any later criminal proceedings (eg, in the form of prohibitions on the use of evidence).[1]
Evidence obtained unlawfully may only be used in civil proceedings if there is an overriding interest in establishing the truth (article 152 paragraph 2, Swiss Civil Procedure Code). Consequently, in each case, a balance must be struck between the individual’s interest in not using the evidence and in establishing the truth.[2] The question of the admissibility of evidence based on an unlawful invasion of privacy is a sensitive one – admissibility in this case is likely to be accepted only with restraint.[3] Since the parties in civil proceedings do not have any means of coercion at their disposal, it is not necessary, in contrast to criminal proceedings, to examine whether the evidence could also have been obtained by legal means.[4]
Unlawful action by the employer may also have consequences on future criminal proceedings: The prohibitions on exploitation (article 140 et seq, Swiss Criminal Procedure Code) apply a priori only to evidence obtained directly from public authorities. Evidence obtained unlawfully by private persons (ie, the employer) may also be used if it could have been lawfully obtained by the authority and if the interest in establishing the truth outweighs the interest of the individual in not using the evidence.[5] Art. 140 paragraph 1 Swiss Criminal Procure Code remains reserved: Evidence obtained in violation of Art. 140 paragraph 1 Swiss Criminal Procure Code is subject to an absolute ban on the use of evidence (e.g. evidence obtained under the use of torture[6]).[7]
[1] Cf. ATF 139 II 7.
[2] ATF 140 III 6 E. 3
[3] Pascal Grolimund in: Adrian Staehelin/Daniel Staehelin/Pascal Grolimund (editors), Zivilprozessrecht, Zurich/Basel/Geneva 2019, 3rd Edition, §18 N 24a.
[4] Pascal Grolimund in: Adrian Staehelin/Daniel Staehelin/Pascal Grolimund (editors), Zivilprozessrecht, Zurich/Basel/Geneva 2019, 3rd Edition, §18 N 24a.
[5] Decision of the Swiss Federal Court 6B_1241/2016 dated 17. July 2017 consid. 1.2.2; Decision of the Swiss Federal Court 1B_22/2012 dated 11 May 2012 consid. 2.4.4.
[6] Jérôme Benedict/Jean Treccani, CR-CPP Art. 140 N. 5 and Art. 141 N. 3.
[7] Yvan Jeanneret/André Kuhn, Précis de procédure pénale, 2nd Edition, Berne 2018, N 9011.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
The subject of the investigation, the complainant, or a government agency investigating the same alleged misconduct could subject the employer to legal exposure. It is, therefore, helpful for a company to prepare a contemporaneous report of the investigation that summarises: the incident or issues investigated, including dates; the parties involved; key factual and credibility findings; employer policies or guidelines and their applicability to the investigation; specific conclusions; the party (or parties) responsible for making the final determination; issues that could not be resolved through the internal investigation; and employer actions taken.
The employer should also maintain a clear record of the steps taken to investigate the alleged misconduct and any findings, as well as all evidence gathered during the investigation, including documents collected and reviewed, any work done to identify systemic issues or patterns of behaviour, and notes from all interviews, which should be limited to the facts gathered, dated and should indicate the duration and location of the interview.