Workplace Investigations

Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.

Spain has not passed any statutes, regulations or policies specifically governing workplace investigations. Instead, general employment and data protection legislation, which safeguards employees’ rights, is fully applicable during these types of enquiries.

These statutes focus on employee privacy. As a result, the application of this legislation:

• limits the matters that may be investigated: they have to be relevant to the employment relationship and there has to be a legitimate reason to conduct the enquiry;
• sets boundaries to the means that may be lawfully used by the company in the investigation: they must be the least intrusive means for employees’ rights (for instance, an email review should be a last resort, reserved for when less-invasive means are not available or would not be effective); and
• states that the companies’ decisions during the investigation must be proportional in light of the facts under review and the legal consequences attached to them.

Collective bargaining agreements, which in Spain generally apply to every company within their scope of application (normally a given economic sector), may regulate workplace investigations. However, it is unusual for collective bargaining agreements to regulate workplace investigations.

Finally, major international corporations with a presence in Spain do tend to have an ethics or whistleblowing policy that governs how an investigation should be conducted. Even if these are self-imposed policies, they are contractually binding and, once established, must be respected by companies.

There are no specific legislative requirements for workplace investigations in Vietnam. However, Labor Code No. 45/2019/QH14 dated 20 November 2019 (2019 Labor Code), which is currently the primary legislation governing employment relationships, requires employers that have more than ten employees to provide a mechanism and procedure for handling sexual harassment cases in the workplace. Other than that, an employer may incorporate policies and guidelines on how to deal with workplace investigations into its handbook.

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

Given that Spain lacks legislation in this area (see question 1), each company commences workplace investigations following its internal guidelines, policies or practices, if any. In our experience, investigations begin with a formal decision to commence the enquiry, which is set out in writing for record-keeping purposes.

This decision will normally mention:

• the facts that will be investigated;
• the reasons to investigate the facts (eg, they could be a breach of company policies);
• how the investigation will be conducted; and
• the individuals who will conduct the enquiry.

Depending on the company, the decision to initiate the investigation may take the form of a decision by the competent employee or officer (ethics or compliance officer) or the minutes of the relevant corporate body (board of directors or compliance committee).

The circumstances in which an employer commences a workplace investigation may vary, either through a whistleblower, through an internal system, email or phone call; complaints from suppliers, contractors, or customers; or accounts from observations and hearsay. Sometimes, it comes from anonymous complaints. However, it is common for an employer to verify whether the report or complaint is substantiated, partially substantiated, or unsubstantiated, which is sufficient to initiate and commence a workplace investigation.

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

Yes, a company may suspend an employee if it has valid grounds to believe that keeping an employee under investigation in his or her position during the enquiry could obstruct the investigation or become an obstacle to it (for example, the employee could try to conceal facts or influence other employees within the organisation).

The decision to suspend the employee must be communicated in writing. This will usually take the form of a suspension letter that explains the reasons that have led to the suspension, its expected duration and that the suspension is not a disciplinary measure. Since the suspension is not a disciplinary measure, the employee would be entitled to continue collecting his or her standard remuneration during the suspension.

In Spain, employees have the right to be effectively occupied during their employment. Therefore, the duration of the suspension should be limited in time to what is strictly necessary to avoid what led to the suspension in the first place.

Article 128 of the 2019 Labor Code explicitly states that an employer has the right to temporarily suspend an employee who is being investigated for committing an alleged act of misconduct in breach of the labour rules, if the following conditions are met:

• the misconduct committed is complex in nature, and any further work carried out by the employee may jeopardise the ongoing investigation. The law does not clearly define “complex nature”; it may be open to various interpretations by the employer. In practice and from our experience, allegations of sexual harassment may be considered complex misconduct and, therefore, can be a ground for suspension;
• the employer has consulted with (and effectively obtained the approval of) the grassroots-level representative organisation of the employee. No formal process is stipulated under the law for such consultation with this organisation. From our experience, the consultation can be in the form of a meeting between the management of the employer and the executive committee of the organisation. However, the organisation should require the employee to acknowledge their consent in writing by signing the meeting minutes;
• the period of suspension cannot exceed 15 days or 90 days in “special circumstances”. The law does not define what falls under “special circumstances”. In our view, this will be subject to the interpretation and discretion of the employer after consulting with the grassroots-level representative organisation of the employee; and
• the employee must be paid 50% of his or her wage that would be due during the period of the temporary suspension in advance. When the temporary suspension ends, if no disciplinary measure is imposed on the employee, the employer must pay the full wage for the period of the suspension by paying the remaining 50%.

The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation

As set out in question 1, workplace investigations must be proportional and companies must use the least intrusive means to affect employees’ rights. This translates into the following principles on who conducts the investigation:

• the enquiry must involve a minimal number of employees;
• only those employees with competencies on the investigated matters should be involved (normally human resources or compliance); and
• employees conducting the investigation must be qualified and have the power and seniority to do so proficiently (although a formal qualification is not required).

There are no statutory minimum qualifications or criteria for someone to conduct a workplace investigation. The employer can simply delegate the investigation task to anyone. However, it is good practice for qualified persons with proper training in workplace investigations to conduct the investigation as these involve intricate issues. It is also important that investigators are fair, unbiased, and impartial. In addition, they should not be related to any parties involved in the investigation.

In complex cases or cases involving a senior or high-ranking employee, the employer should appoint a person with a higher authority or rank in the company to lead and oversee the conduct of the investigation. This also applies in instances where it is foreseeable that the investigation may lead to disciplinary action, summary dismissal of the employee, or a report to an authority.

There are instances when engaging with external parties or professional advisors may be necessary. This is especially the case if the conduct under investigation is serious or widespread, which may lead to regulatory consequences if the employer does not have the expertise to handle the investigation.

The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.

No, an employee under investigation has no direct legal option to stop an investigation. This is because conducting an enquiry is within the employers’ legally acknowledged powers, attached to their capacity to manage their business and enforce employment contracts and internal policies.

Notwithstanding the above, if the investigation breaches an employee’s rights (privacy, dignity, remuneration, etc), the individual could:

• file a lawsuit aimed at stopping said breach (and potentially seeking an award for damages); or
• file a claim with the Labour Inspectorate with the same purpose.

The result, in this case, would stop the enquiry.

The employee can only bring legal action to stop the investigation if he or she claims that his or her rights have been clearly and blatantly violated during the investigation. However, the employee bears a heavy legal burden of proof to substantiate his or her claims. Based on our experience, most of the time, it is very difficult for the employee to prove this and successfully stop the investigation.

There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing. 

A company cannot force an employee to actively take part in a workplace investigation or to act as a witness. However, if a co-worker’s decision not to collaborate could be construed as an attempt to conceal evidence of wrongdoing, the company could then enforce disciplinary measures for this reason.

In our experience, employees tend to collaborate during workplace investigations and no retaliatory action can be taken against them for this reason. For example, if an employee provided evidence against his or her direct manager, the manager could not reprimand the employee or take any action that could be construed as such.

There are no provisions in Vietnamese law that impose any statutory or legal obligation on an employee to act as a witness in an investigation. Hence, an employer does not have the power to compel its employees to act as witnesses in an investigation. However, a request for an employee to provide evidence or give details of an event that he or she knows of may reasonably be deemed to be a lawful and reasonable directive from an employer. Consequently, an employee’s refusal to act as a witness may be tantamount to an act of insubordination, which may lead to disciplinary action by the employer. In any circumstances, if an employee refuses to attend an interview or is generally not cooperating with an investigation, the reasons for this will need to be considered carefully by the employer.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

The General Data Protection Regulation and the Spanish Data Protection Law apply when gathering any type of evidence, including physical evidence. This means that companies may only process personal data when they have lawful grounds to do so and within the limits set forth for special categories of personal data (health, union affiliation, criminal records, etc.).

The Spanish Statute of Workers specifically states that employees and their possessions may be registered when it is necessary to protect the companies’ property (or the property of other co-workers). This registration must:

• be conducted in the workplace and during working hours;
• respect the employee’s privacy and dignity; and
• be performed in front of an employee representative or, if not possible, in the presence of another employee of the company.

Decree No. 13/2023/ND-CP on personal data protection is the main data protection regulation in Vietnam. It regulates the processing of personal data, including the collection or gathering of data. If the physical evidence contains personal data of an individual, the gathering of physical evidence must comply with this decree.

Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).

Please see question 7.

As part of an investigation, an employer may search the objects or files that are part of the company’s property (eg, company or employers’ laptops or phones for business purposes and emails or messages stored on the company’s servers) without prior notice and without the need of the consent of the employee. However, the employer has no right to search an employee’s personal possessions without consent.

To further avoid arguments or conflicts as to the right of ownership of a particular object or property, employers may specify in their internal policies, labour contracts, and handover documents what is to be regarded as the company’s assets and subject to a search in a workplace investigation.

In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).

Directive (EU) 2019/1937 of the European Parliament and of the Council, of 23 October 2019, on the protection of persons who report breaches of Union law, has been implemented in Spain through Law 2/2023 (Ley 2/2023, de 20 de febrero, reguladora de la protección de las personas que informen sobre infracciones normativas y de lucha contra la corrupción). This law limits the capacity of companies to retaliate or to take any action against employees who report workplace violations or breaches of the law. Any action taken against an employee in such a position would be considered null and void if challenged in court.

Spanish law allows anonymous reports to protect whistleblowers from retaliation.

It is up to the employer to determine whether or not to open an investigation after a complaint from a whistleblower. It is very important that the identity of the whistleblower is protected and that the employer also should not reveal the identity of the witness or the source of information, as the sources and witnesses may fear retaliation and feel uncomfortable or hesitant in giving information or raising concerns again.

Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).

Companies and employees are not bound by any statutory confidentiality obligation in the context of workplace investigations. However, if a company’s enquiry has the potential to examine employees’ private affairs, then the company must ensure the confidentiality of the investigation.

This confidentiality obligation would not arise from the investigation itself, but from the company’s obligation to safeguard its employees’ rights.

Workplace investigations should be conducted in a strictly confidential manner to preserve the integrity and professionalism of the investigation and to protect the identity of the employee under investigation. This means that all information gathered, received, and shared during the investigation (ie, the subject employee and any material witnesses) should only be disclosed on a need-to-know basis.

The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.

It is not necessary to inform an investigated employee about an enquiry or of the allegations made against him or her. The obligation to disclose would only arise when:

• interviewing the employee would be the least intrusive means to investigate the facts; or
• if disciplinary measures are implemented as a result of the investigation. Since employees are entitled to challenge all disciplinary measures against them, they could request a court of law to disclose all the findings of the investigation, to assess if these findings could be useful to challenge the disciplinary measure.

There is no legal requirement as to what particular information should be stated in the allegations; however, such information must be provided to the employee under investigation. The information provided by the employer to the employee must be sufficiently clear and specific so that the latter understands the case or alleged issues against him or her and can respond to it.

See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.

As in question 10, the identity of the complainant or other employees involved in the investigation may be kept confidential and companies do not have to share their identity with investigated employees. Anonymous complaints are expressly allowed under Spanish law (see question 9).

Companies may have to produce this information and share it with the investigated employees if it is necessary to allow them to defend themselves from disciplinary measures taken against them. Similarly, in the context of litigation, an employee or plaintiff could request a Labour Court to order the company to disclose the details of the investigation.

The identity of the complainant and witnesses must be kept confidential and cannot be disclosed to anyone, unless both the complainant and witnesses consent to its disclosure or if the employer is asked to disclose this information by the competent authorities under Vietnamese law.

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

Yes. NDAs are the preferred instrument to ensure that employees conducting the investigation, as well as those who participate as witnesses or collaborators, will keep the enquiry and its existence confidential.

Generally, NDAs can be used to keep the facts and substance of a workplace investigation confidential. There are no express prohibitions against such NDAs. However, there are cases set out under Decree No. 13/2023/ND-CP on personal data protection where personal data is allowed or required to be disclosed without the data subject’s consent, in instances that are necessary to serve the public interest or to protect the life and health of the data subject.

The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.

As explained above, investigation materials are not protected by privilege per se. To protect the confidentially of these materials, it is advisable to enter into NDAs with the employees involved in the investigation.

Generally, privilege does not apply to internal workplace investigation materials as the investigation does not constitute a relationship between a lawyer and his or her client, and even less so a judicial investigation. However, if a lawyer is appointed to represent a specific party in an investigation, for example, as an investigator, the privilege may apply to materials exchanged between the lawyer and that client.

The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.

A workplace investigation under Spanish law is a fact-finding exercise and not a disciplinary procedure. For this reason, employees are not entitled to representation during an investigation (it is not even necessary to inform them about the enquiry).

If the investigated employees are made aware of the investigation (eg, because they will be interviewed or questioned), then it is good practice to allow them to be accompanied by external counsel or an employee representative. This would reduce the risk that employees would claim that they were under duress during the interview, or that they challenge the validity of the evidence obtained by the company.

Yes, the employee under investigation has a right to be accompanied or have legal representation during the investigation. Before the start of investigation proceedings, the employee under investigation must be informed about his or her right to have someone present with him or have a legal representative during the investigation.

A works council or a trade union does not have a role in the investigation.

As explained in question 15, employees are not entitled to representation during an investigation. However, if a disciplinary procedure starts as a result of the investigation, employee representatives may be entitled to be informed of the disciplinary procedure and its outcome.

The degree and timing of when employee representatives must be involved will depend on several factors such as:

• the employee’s affiliation to a union;
• if the employee is an employee representative;
• the seriousness of the potential sanction to be imposed; and
• the information rights that the applicable collective bargaining agreement acknowledges regarding employee representatives.

In Vietnam, the “trade union” is the only organisation solely dedicated to protecting employees’ legitimate rights and interests. Under the 2012 Labor Code, the term referring to trade unions was changed to “grassroots-level representative organisation of employees”. But the essence of this organisation remained and was later defined as “the executive committee of a grassroots trade union or the executive committee of the immediate upper-level trade union in a non-unionised company”. As such, it could be said that it was old wine in a new bottle.

As required under article 70.1 of Decree No. 145/2020/ND-CP, which serves as a guide to the Labor Code on working conditions and labour relations, when suspecting that an employee has committed a violation of labour discipline, the employer has to make a record of the violation at the time and notify the grassroots-level representative organisation of employees of which the employee is a member, or the legal representative of the employee if they are under 15 years of age. If the employer detects a violation after it has occurred, it will collect evidence to prove it. In this instance, the employer has no obligation to inform or involve the trade union or grassroots-level representative organisation of employees during the workplace investigation stage.

Also, an employee who is a member of the trade union or organisation has the right to seek assistance from this organisation and may authorise the trade union’s representative to represent and get involved in the workplace investigation.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

For the reasons outlined in question 15, companies sometimes choose to voluntarily provide support to employees involved in the investigation (to ensure that evidence was lawfully obtained during the interview and is valid).

For investigated employees, one available support mechanism is for the company to cover the legal fees of an external counsel during the investigation or to offer to involve employee representatives. Reassurance may be provided to witnesses by guaranteeing, in writing, that their involvement in the investigation will be kept confidential and will not result in a detriment.

It is quite stressful for an employee, whether as the victim, the subject of an investigation, or a witness, to be involved in a workplace investigation. Thus, transparency in the investigation process would alleviate the employees’ stress and anxiety. This could be achieved by providing involved and concerned employees with the timeline for different stages of the investigation and regular updates. Further, the employer can make necessary work arrangements to minimise potential interaction with other involved employees so that it would not further aggravate the conflict or situation, (eg, days off or temporary suspension of work).

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

The issue with revealing unrelated matters to the investigation is that it may jeopardise the entire enquiry. If the unrelated matters are private or the disclosure is construed as a breach of employees’ fundamental rights, then the materials gathered during the investigation could be considered to be unlawfully obtained and would not be admitted as evidence in court.

Moreover, the employee could seek damages and a fine could be imposed on the company for breaching its employee’s rights.

Finally, if unrelated matters are revealed, it could be a clear sign that the company has failed to conduct a diligent investigation and use the least intrusive means available to it (see question 1). One of the reasons to minimise the number of employees conducting the investigation (see question 4) is to reduce damages if matters unrelated to the investigation are revealed.

If unrelated matters are revealed during the investigation, the employer should consider whether an investigation is needed. If necessary, the employer should decide whether it is appropriate to incorporate the new matters into the scope of the existing investigation by expanding the terms of reference. However, such action may not be appropriate if different individuals are involved or the inclusion of a new unrelated matter would unduly complicate or delay the progress of the existing investigation. If that is the case, the employer should investigate that matter separately.

Also, as detailed in article 19 of the 2015 Criminal Code of Vietnam, there is a legal duty on any person who is aware that a certain violation is being committed or has been committed to report it to the police unless otherwise provided for under law. Failure to comply with this requirement may lead to criminal liability for the offender.

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

Spanish law does not regulate grievance processes and most companies do not have an internal grievance procedure. The only way in which an employee can formally challenge an investigation is by filing a lawsuit or lodging a claim with the Labour Inspectorate (see question 5).

To the extent that the company can show that the investigation is unrelated to the complaint (ie, that the investigation is not retaliation for filing the complaint), the claim should be seen as neutral from the perspective of the enquiry.

The employer should require the employee to raise any grievance under the company’s existing policy on grievance reporting, disciplinary, and investigation processes, so that it can determine if the grievance is relevant to the current investigation. The grievance can be investigated together with the ongoing investigation. It can also be dealt with separately and independently from the existing investigation.

As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.

Like in the case of grievances (see question 19), the deciding factor will be assessing whether sick leave is related to the investigation or not.

If there is no link between the investigation and the sick leave, then the leave is not relevant from the point of view of the investigation. However, if the sick leave was a result of the investigation (for instance, an employee taking sick leave due to anxiety related to the investigation), then the convenience of pursuing the investigation or of temporarily suspending it should be evaluated to avoid any liability for the company.

Workplace investigations do not require the presence or active cooperation of the employee under investigation. Thus, the investigation may start or continue in the employee’s absence due to illness.

If the employee’s presence is necessary for the conclusion of the investigation, the employer may invite the employee to provide information either by submitting his or her answers to a written questionnaire or attending a virtual meeting. However, the employee may not accede to the employer’s requests and proposals, especially if the employee has an illness. As a result, the employer may not be able to conclude the investigation due to the absence of the involved employee.

Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.

Criminal or regulatory investigations may (and usually do) run in parallel to workplace investigations.

There is no need to stay the internal investigation and, in practice, this normally is not possible or advisable considering the substantially longer timeframe of criminal or regulatory investigations (which can extend for several months or years).

The police or a regulator may request a company to share any relevant information that it might have on the facts being reviewed by them. However, the company’s obligation to provide that information would have to be reviewed on a case-by-case basis, depending on the information being requested (eg, whether it is sensitive to the business, such as trade secrets or internal correspondence) and the grounds to do so (if the police or regulator have a search warrant issued by a court or not).

There are no issues with an internal workplace investigation being conducted in parallel to any criminal or regulatory investigation. In such a case, the employer should handle the workplace investigation meticulously, pay attention to all the facts and evidence, inform the authorities of the ongoing internal workplace investigation, and ensure that it complies with all applicable legal requirements or directions made by the relevant authorities concurrently. Also, the employer should not take any steps that interfere with, hinder, or obstruct the parallel investigations.

The employer's conclusions from the investigation.

Employees under investigation are not entitled to be informed about the investigation or its outcome. As set out above (see question 11), an employee would have a right to be informed about the outcome of an investigation if the employer takes any disciplinary actions as a consequence of the enquiry.

The reason to disclose the details of the investigation is to allow the employee to adequately defend him or herself from the alleged breaches.

It is recommended that the employer informs the employee under investigation of the outcome and provides information on a need-to-know basis. Consequently, the employer has the discretion to proceed with any labour disciplinary procedure or actions against the employee based on the outcome of the investigation.

The employee under investigation may only be informed of the conclusions.

Since workplace investigations are not regulated in Spain, there are no clear rules as to the amount of information on the investigation that would need to be shared with an employee if the company was compelled to disclose the enquiry (see questions 11 and 22). A good rule of thumb is that an employee should have access to all the information that is relevant to be in a position to oppose the alleged breaches.

Moreover, if the disciplinary measures taken were challenged before a Labour Court – employees in Spain tend to challenge these types of measures – the plaintiff could request the Labour Court to order the company to produce all of the investigation details, including the findings and the full investigation report.

Finally, companies will normally have an interest in producing a report that clearly states the moment in which the fact-finding exercise was concluded and the company had a full picture of the facts. This is because the statute of limitations to sanction employment breaches, which ranges from 10 to 60 days depending on the seriousness of the misconduct, starts to count when the company has a comprehensive view of the events (which would coincide with the date the investigation report was issued).

There is no obligation to share the investigation report or the findings unless the employer and employee agree to do so.

However, under Decree No. 13/2023/ND-CP on personal data protection, the contents of the investigation report or findings related to the employee are likely to constitute the personal data of the employee under investigation. In that case, the employee may have a right under the said Decree to obtain copies of such documents by making a statutory data access request after the workplace investigation is completed. Where the employer is required to provide such documents to the employee under Decree No. 13/2023/ND-CP but the requested documents also contain the personal data of any other third parties (such as the employee’s co-workers who participated in the interview during the investigation), the employer should first redact or erase such data before providing the requested documents, unless the relevant third parties have consented to the disclosure of their personal data.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

After the conclusion of the enquiry, a company may choose to:

• close the investigation without taking any additional action; or
• adopt disciplinary measures against the employee.

These could range from a verbal or written warning to the suspension of work and pay for a set period. Disciplinary dismissals are also possible, but they are reserved for very serious offences.

Note that any disciplinary measure will have to follow the procedures that might be established in the applicable collective bargaining agreement, such as informing employee representatives or following a grievance procedure before adopting the measure.

After the completion of the investigation, the employer may:

• take the appropriate labour disciplinary action against the employee;
• proceed with legal action against the employee (eg, reporting the criminal violations of the employee to the proper authority or filing a civil lawsuit against the employee before the court); or
• adopting preventive or remedial measures on how to avoid these violations and to mitigate the damage to the company (eg, reviewing internal policies and conducting employee training).

In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.

Companies may only disclose the outcome of an investigation to employees or officers of the company who are empowered to adopt the measures that are necessary because of the investigation’s results (see question 4).

This disclosure obligation does not extend to authorities: while there is a general obligation to report criminal or administrative offences to the competent authorities, this obligation must be read in line with the companies’ right not to self-report themselves. What a company must not do is cover up, aid or otherwise become an accessory to the offence.

Generally, the employer does not have to actively disclose the findings of a workplace investigation to any party.

Notwithstanding this, the employer should be aware of certain statutory disclosure requirements that may apply as a result of the matters revealed during the workplace investigation, if the said investigation reveals any knowledge or suspicion of an indictable offence that has been committed.

Interview records should be kept private unless disclosure is required by the authorities.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

The outcome of the investigation will contain personal data of the affected employee. For this reason, this information should only be kept for as long as a legal obligation or liability in connection with the information could arise for the company. Since the general statute of limitations for employment liability is one year, this is a good guideline.

In addition to the above, two specific rules apply:

• once the information becomes irrelevant for the purpose for which it was obtained and processed, the information should no longer be stored on the employee’s record or elsewhere; and
• the employees’ information (including those of the reporter and the affected employees) should only be stored in whistleblower systems during the time that is necessary to decide on whether the facts need to be investigated or not and, in any case, for a maximum period of three months.

Vietnamese law does not provide for a period during which the outcome of the investigation should remain on the employee’s records and files. However, this will depend on the employer’s record-retention policies, which must comply with applicable data protection laws.

There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.

Errors during an investigation are normally linked to the breach of the employees’ privacy or their personal data rights (see question 1). Breaching these rights might expose employers to:

• Fines from the Labour Inspectorate and the Spanish Data Protection Authority.
• A court awarding damages to the employee.
• Any disciplinary measures adopted by the company as a result of the investigation could be considered null and void.
• The evidenced obtained during the investigation being disregarded by a court.
• In some very serious cases, criminal liability might arise for the individuals who conducted the investigation and breached the employees’ rights.

The employer may be exposed to legal action for its failure to conduct the investigation properly, such as a lawsuit for labour disputes or sanctions for its failure to protect personal data as required under personal data protection regulations. For instance, if there were errors during the investigation which led to erroneous results for the investigation and consequently, the employee was dismissed, the employee may file a claim for illegal dismissal against the employer.