Workplace Investigations

Spain has not passed any statutes, regulations or policies specifically governing workplace investigations. Instead, general employment and data protection legislation, which safeguards employees’ rights, is fully applicable during these types of enquiries.

These statutes focus on employee privacy. As a result, the application of this legislation:

• limits the matters that may be investigated: they have to be relevant to the employment relationship and there has to be a legitimate reason to conduct the enquiry;
• sets boundaries to the means that may be lawfully used by the company in the investigation: they must be the least intrusive means for employees’ rights (for instance, an email review should be a last resort, reserved for when less-invasive means are not available or would not be effective); and
• states that the companies’ decisions during the investigation must be proportional in light of the facts under review and the legal consequences attached to them.

Collective bargaining agreements, which in Spain generally apply to every company within their scope of application (normally a given economic sector), may regulate workplace investigations. However, it is unusual for collective bargaining agreements to regulate workplace investigations.

Finally, major international corporations with a presence in Spain do tend to have an ethics or whistleblowing policy that governs how an investigation should be conducted. Even if these are self-imposed policies, they are contractually binding and, once established, must be respected by companies.

The Labour Protection Act B.E. 2541 (1998) (LPA) is the key legislation governing the relationship between employer and employee in Thailand. The LPA set out a minimum standard for the protection of employees’ rights, as well as a mechanism for suspension from work for an investigation.

The LPA requires any employer having ten or more employees to prepare work rules in the Thai language and the work rules require an employer to prescribe a procedure for the submission of grievances that would normally include the process for investigations in the workplace. Therefore, the work rules are the main guidance and policy that govern a workplace investigation. In some cases, an employer may have a whistleblowing policy allowing whistle-blowers to submit complaints of illegal or improper activities to the employer. The whistleblowing policy will also prescribe the procedures for investigating in workplace reflecting the complaints submitted by whistle-blowers.

Given that Spain lacks legislation in this area (see question 1), each company commences workplace investigations following its internal guidelines, policies or practices, if any. In our experience, investigations begin with a formal decision to commence the enquiry, which is set out in writing for record-keeping purposes.

This decision will normally mention:

• the facts that will be investigated;
• the reasons to investigate the facts (eg, they could be a breach of company policies);
• how the investigation will be conducted; and
• the individuals who will conduct the enquiry.

Depending on the company, the decision to initiate the investigation may take the form of a decision by the competent employee or officer (ethics or compliance officer) or the minutes of the relevant corporate body (board of directors or compliance committee).

Usually, a complainant submitting a grievance to the company would be a trigger for proceeding with a workplace investigation. The LPA does not specify when a workplace investigation should commence but it is subject to the employer’s work rules and regulations, including the whistleblowing policy, as the investigation usually commences after an employee or a whistle-blower has filed a complaint to the employer. In some cases, there might be a whistleblower and the start of the workplace investigation would be subject to the whistleblowing policy and the employer’s discretion. Also, if a questionable transaction or activity is detected, fiscal audits may be the source that triggers a voluntary workplace investigation.

Yes, a company may suspend an employee if it has valid grounds to believe that keeping an employee under investigation in his or her position during the enquiry could obstruct the investigation or become an obstacle to it (for example, the employee could try to conceal facts or influence other employees within the organisation).

The decision to suspend the employee must be communicated in writing. This will usually take the form of a suspension letter that explains the reasons that have led to the suspension, its expected duration and that the suspension is not a disciplinary measure. Since the suspension is not a disciplinary measure, the employee would be entitled to continue collecting his or her standard remuneration during the suspension.

In Spain, employees have the right to be effectively occupied during their employment. Therefore, the duration of the suspension should be limited in time to what is strictly necessary to avoid what led to the suspension in the first place.

While an employee is being investigated by the employer, the LPA permits the employer to suspend that employee from work for the duration of the investigation, provided that the suspension can only be made when permitted by the work rules or an agreement related to the conditions of employment. Also, a suspension order must be made in writing and specify the offence and period of the suspension, which may not exceed seven days. Note that the employer must give a written suspension order in advance to the employee before the work suspension.

As aforementioned, the LPA only permits the employer to suspend the employee under investigation from work only for seven days. During the interim period of the suspension, the employer must pay the employee at the rate indicated in the work rules or the agreement reached between the employer and the employee, which must not be less than half of the employee's wages for a working day before his or her suspension. If the employer determines that the employee subject to investigation is not guilty following the outcome, the employer must compensate the employee for outstanding wages from the date of suspension with 15% interest per annum.

In some complicated cases, a workplace investigation does not conclude within seven days, and, in which case the employer should consult with a legal advisor.

As set out in question 1, workplace investigations must be proportional and companies must use the least intrusive means to affect employees’ rights. This translates into the following principles on who conducts the investigation:

• the enquiry must involve a minimal number of employees;
• only those employees with competencies on the investigated matters should be involved (normally human resources or compliance); and
• employees conducting the investigation must be qualified and have the power and seniority to do so proficiently (although a formal qualification is not required).

The employer should conduct a workplace investigation on its own; however, an outside firm experienced in interviewing witnesses and assessing the credibility of evidence may also be appointed to assist with the workplace investigation.

There is no minimum qualification or criteria provided under Thai laws. It is worth noting that anyone who has been accused of misconduct or potentially has a conflict of interest should be excluded from any role in the investigation. This is to avoid a challenge from the subject employee that the investigation was not conducted fairly.

No, an employee under investigation has no direct legal option to stop an investigation. This is because conducting an enquiry is within the employers’ legally acknowledged powers, attached to their capacity to manage their business and enforce employment contracts and internal policies.

Notwithstanding the above, if the investigation breaches an employee’s rights (privacy, dignity, remuneration, etc), the individual could:

• file a lawsuit aimed at stopping said breach (and potentially seeking an award for damages); or
• file a claim with the Labour Inspectorate with the same purpose.

The result, in this case, would stop the enquiry.

There is no mechanism in place to take legal action to halt an investigation. The investigation is an internal process of the employer.

A company cannot force an employee to actively take part in a workplace investigation or to act as a witness. However, if a co-worker’s decision not to collaborate could be construed as an attempt to conceal evidence of wrongdoing, the company could then enforce disciplinary measures for this reason.

In our experience, employees tend to collaborate during workplace investigations and no retaliatory action can be taken against them for this reason. For example, if an employee provided evidence against his or her direct manager, the manager could not reprimand the employee or take any action that could be construed as such.

Normally, the work rules prescribe requirements for cooperation with investigations. An employer may instruct co-workers to give statements as witnesses as this would be a fair and legitimate order of the employer, because investigations are conducted to maintain a good working environment.

Witness protection measures in a workplace can vary as no minimum standard has been set and they are generally subject to work rules and regulations. However, some legislation, which may not relate to a workplace investigation conducted by an employer, also protects the witnesses who are helping authorities investigate violations under the relevant acts. For example, the Labor Relation Act B.E. 2518 (1975) prohibits an employer from terminating an employee or conducting any action that may result in the employee being unable to work because of filing a complaint or being a witness for the authorities, or providing information on issues related to labour protection laws to the authorities.

The employer may have a policy of non-retaliation for the protection of witnesses who have given statements and evidence for a workplace investigation.

The General Data Protection Regulation and the Spanish Data Protection Law apply when gathering any type of evidence, including physical evidence. This means that companies may only process personal data when they have lawful grounds to do so and within the limits set forth for special categories of personal data (health, union affiliation, criminal records, etc.).

The Spanish Statute of Workers specifically states that employees and their possessions may be registered when it is necessary to protect the companies’ property (or the property of other co-workers). This registration must:

• be conducted in the workplace and during working hours;
• respect the employee’s privacy and dignity; and
• be performed in front of an employee representative or, if not possible, in the presence of another employee of the company.

The basic premise is that all evidence is admissible unless it violates the law of admissibility and production of evidence, which may vary depending on the jurisdiction. In a criminal court, for example, evidence gathered in violation of the fruit of the poisonous tree doctrine would be typically inadmissible, yet in a civil court, this doctrine would not be an exclusionary rule.

The Personal Data Protection Act, BE 2562 (2019) (PDPA), which is the main data protection law in Thailand, applies when collecting, using, and disclosing pieces of evidence containing the personal data of employees. If the investigation requires sensitive information of the employee under investigation, for example, race, ethnic origin, political opinion, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, genetic data and biometric data, consent from the employee should be obtained.

Please see question 7.

Electronic information created during employment would generally be owned by the employer and would be the employer’s assets. If an employee is given a computer or laptop to use for work, the employer has the right to log into that device and take any data that is stored therein, provided that the data does not contain sensitive information of that employee and PDPA requirements are met.

To avoid any potential issues regarding physical data such as documents on the employee’s desk, it is advisable to search those areas with the subject employee to show good faith. In practice, the employee normally agrees to search those areas with the employer, or allows the employer to search alone.

Directive (EU) 2019/1937 of the European Parliament and of the Council, of 23 October 2019, on the protection of persons who report breaches of Union law, has been implemented in Spain through Law 2/2023 (Ley 2/2023, de 20 de febrero, reguladora de la protección de las personas que informen sobre infracciones normativas y de lucha contra la corrupción). This law limits the capacity of companies to retaliate or to take any action against employees who report workplace violations or breaches of the law. Any action taken against an employee in such a position would be considered null and void if challenged in court.

Spanish law allows anonymous reports to protect whistleblowers from retaliation.

It is down to the employer’s discretion and subject to the whistleblowing policy (if any) to commence the investigation resulting from a complaint from a whistleblower. Whistleblowers and those who cooperate with an investigation should be protected. Normally the employer would not try to identify the whistleblowers. Also, it is best not to reveal the identity of the witness or the source of information; otherwise, they may feel uncomfortable giving information or raising their concerns next time. Any allegations of retaliation that surface during the investigation should be treated as a new report of possible misconduct that could be subject to additional investigation.

Companies and employees are not bound by any statutory confidentiality obligation in the context of workplace investigations. However, if a company’s enquiry has the potential to examine employees’ private affairs, then the company must ensure the confidentiality of the investigation.

This confidentiality obligation would not arise from the investigation itself, but from the company’s obligation to safeguard its employees’ rights.

Unless the investigation is handled by a qualified professional (eg, attorney or auditor) where certain privileges apply, confidentiality obligations are generally subject to the contractual arrangement between the parties involved in the investigation. The employers need to inform any persons, including the investigators, to respect confidentiality obligations because a leak of the information gathered from the investigations could cause damage to relevant parties.

It is not necessary to inform an investigated employee about an enquiry or of the allegations made against him or her. The obligation to disclose would only arise when:

• interviewing the employee would be the least intrusive means to investigate the facts; or
• if disciplinary measures are implemented as a result of the investigation. Since employees are entitled to challenge all disciplinary measures against them, they could request a court of law to disclose all the findings of the investigation, to assess if these findings could be useful to challenge the disciplinary measure.

The subject employee(s) should be informed of the details of the allegations, such as the details of wrongdoing or violations, made against them. This creates a fair opportunity for them to clarify themselves and defend against such allegations properly. Also, if there is any evidence that needs clarification from the employee, it should be shown to the employee.

As in question 10, the identity of the complainant or other employees involved in the investigation may be kept confidential and companies do not have to share their identity with investigated employees. Anonymous complaints are expressly allowed under Spanish law (see question 9).

Companies may have to produce this information and share it with the investigated employees if it is necessary to allow them to defend themselves from disciplinary measures taken against them. Similarly, in the context of litigation, an employee or plaintiff could request a Labour Court to order the company to disclose the details of the investigation.

It is generally possible to keep the identity of the complainant, witnesses, or information sources confidential. There is no mandatory rule to disclose the identity of a complainant, witnesses, or sources of information. If the complainant, witnesses, or sources of information for the investigation know that their identities would not be disclosed, they will be more confident in cooperating with and supporting the investigations.

Yes. NDAs are the preferred instrument to ensure that employees conducting the investigation, as well as those who participate as witnesses or collaborators, will keep the enquiry and its existence confidential.

Non-disclosure agreements can be made between an employer and employees who are involved in an investigation. This may include investigators and witnesses, apart from the employee under investigation. This minimises the risk of information being leaked, which can affect all parties related to the workplace investigation. However, an NDA is not absolute means to prevent the disclosure of confidential information, as the court has the authority to compel disclosure.

As explained above, investigation materials are not protected by privilege per se. To protect the confidentially of these materials, it is advisable to enter into NDAs with the employees involved in the investigation.

Client-attorney privilege between qualified attorneys and the client (ie, an employer) begins once information is made available to the attorney, regardless of the form it takes.

A workplace investigation under Spanish law is a fact-finding exercise and not a disciplinary procedure. For this reason, employees are not entitled to representation during an investigation (it is not even necessary to inform them about the enquiry).

If the investigated employees are made aware of the investigation (eg, because they will be interviewed or questioned), then it is good practice to allow them to be accompanied by external counsel or an employee representative. This would reduce the risk that employees would claim that they were under duress during the interview, or that they challenge the validity of the evidence obtained by the company.

Unless the work regulations provide otherwise, an employee has the right to request legal representation during an investigation. If legal representation is requested, it is an opportunity for the employer to confirm and verify that an investigation is being conducted fairly, as the employee under investigation can bring his or her lawyer to attend the investigation.

As explained in question 15, employees are not entitled to representation during an investigation. However, if a disciplinary procedure starts as a result of the investigation, employee representatives may be entitled to be informed of the disciplinary procedure and its outcome.

The degree and timing of when employee representatives must be involved will depend on several factors such as:

• the employee’s affiliation to a union;
• if the employee is an employee representative;
• the seriousness of the potential sanction to be imposed; and
• the information rights that the applicable collective bargaining agreement acknowledges regarding employee representatives.

Thai labor laws do not require a workplace investigation to involve participation from trade unions or labour unions. However, it is possible for labour unions established under the Labor Relation Act BE. 2518 (1975) to submit a demand for a collective bargaining agreement (CBA) with employers to get a seat at the table. There was a case where a management union made a CBA with the employer wherein the president of the management union would be involved in any investigation of any manager, who is a union member, under investigation. In that case, the employer must comply with the CBA by informing the president and allowing the president to participate in the investigations.

For the reasons outlined in question 15, companies sometimes choose to voluntarily provide support to employees involved in the investigation (to ensure that evidence was lawfully obtained during the interview and is valid).

For investigated employees, one available support mechanism is for the company to cover the legal fees of an external counsel during the investigation or to offer to involve employee representatives. Reassurance may be provided to witnesses by guaranteeing, in writing, that their involvement in the investigation will be kept confidential and will not result in a detriment.

The employees may then file a complaint with the labour inspection officer of the Labour Protection and Welfare Department to investigate the situation if they view that the conduct of the employer in the investigation violates the LPA. For example, if the employer issues a written order for suspending an employee for more than seven days. The labour inspection officer may issue an order requesting compliance, where failure to comply with such an order would result in a criminal penalty.

The issue with revealing unrelated matters to the investigation is that it may jeopardise the entire enquiry. If the unrelated matters are private or the disclosure is construed as a breach of employees’ fundamental rights, then the materials gathered during the investigation could be considered to be unlawfully obtained and would not be admitted as evidence in court.

Moreover, the employee could seek damages and a fine could be imposed on the company for breaching its employee’s rights.

Finally, if unrelated matters are revealed, it could be a clear sign that the company has failed to conduct a diligent investigation and use the least intrusive means available to it (see question 1). One of the reasons to minimise the number of employees conducting the investigation (see question 4) is to reduce damages if matters unrelated to the investigation are revealed.

Subject to the grievance protocol in place, any matter that emerges during the investigation should be handled separately as a fresh report of potential misconduct that needs further investigation.

Spanish law does not regulate grievance processes and most companies do not have an internal grievance procedure. The only way in which an employee can formally challenge an investigation is by filing a lawsuit or lodging a claim with the Labour Inspectorate (see question 5).

To the extent that the company can show that the investigation is unrelated to the complaint (ie, that the investigation is not retaliation for filing the complaint), the claim should be seen as neutral from the perspective of the enquiry.

The investigator should guide the employee who has raised the grievance to properly raise their concerns through the grievance protocols or whistleblowing policy (if any). It is acceptable to preliminarily hear their concerns, but the investigation should be initiated separately and subject to the employer’s discretion.

Like in the case of grievances (see question 19), the deciding factor will be assessing whether sick leave is related to the investigation or not.

If there is no link between the investigation and the sick leave, then the leave is not relevant from the point of view of the investigation. However, if the sick leave was a result of the investigation (for instance, an employee taking sick leave due to anxiety related to the investigation), then the convenience of pursuing the investigation or of temporarily suspending it should be evaluated to avoid any liability for the company.

If the absence is anticipated to be brief, the employer may wait until the employee's return before concluding the investigation. If the employee's absence is expected to be prolonged, the investigator may alter the time of meetings or request that the employee submits a witness statement. The key point would be that all necessary measures should be taken to give the employee a chance to participate.

Criminal or regulatory investigations may (and usually do) run in parallel to workplace investigations.

There is no need to stay the internal investigation and, in practice, this normally is not possible or advisable considering the substantially longer timeframe of criminal or regulatory investigations (which can extend for several months or years).

The police or a regulator may request a company to share any relevant information that it might have on the facts being reviewed by them. However, the company’s obligation to provide that information would have to be reviewed on a case-by-case basis, depending on the information being requested (eg, whether it is sensitive to the business, such as trade secrets or internal correspondence) and the grounds to do so (if the police or regulator have a search warrant issued by a court or not).

Employers are not required to wait until the police or regulatory investigations are finished before conducting their disciplinary investigations, but it is necessary to ensure that such internal proceedings do not compromise the integrity of an investigation or result in misrepresentation or a miscarriage of justice. The level of proof for internal disciplinary action is less than the level of proof for criminal proceedings.

Employees under investigation are not entitled to be informed about the investigation or its outcome. As set out above (see question 11), an employee would have a right to be informed about the outcome of an investigation if the employer takes any disciplinary actions as a consequence of the enquiry.

The reason to disclose the details of the investigation is to allow the employee to adequately defend him or herself from the alleged breaches.

There is no mandatory information on the outcome of an investigation that must be disclosed to an employee. However, disclosure of the outcome should, at a minimum, include whether an employee did or did not commit a violation. In addition, an employee who has committed a violation should be informed of any disciplinary action, and the grounds for such a decision (such as a violation of the company’s work rules). This enables the employee under investigation to appeal the outcome if it is applicable under the work rules or whistleblowing policy.

Since workplace investigations are not regulated in Spain, there are no clear rules as to the amount of information on the investigation that would need to be shared with an employee if the company was compelled to disclose the enquiry (see questions 11 and 22). A good rule of thumb is that an employee should have access to all the information that is relevant to be in a position to oppose the alleged breaches.

Moreover, if the disciplinary measures taken were challenged before a Labour Court – employees in Spain tend to challenge these types of measures – the plaintiff could request the Labour Court to order the company to produce all of the investigation details, including the findings and the full investigation report.

Finally, companies will normally have an interest in producing a report that clearly states the moment in which the fact-finding exercise was concluded and the company had a full picture of the facts. This is because the statute of limitations to sanction employment breaches, which ranges from 10 to 60 days depending on the seriousness of the misconduct, starts to count when the company has a comprehensive view of the events (which would coincide with the date the investigation report was issued).

It depends on with whom the investigation report should be shared. If there is a court case or criminal case to be further investigated by police, the investigation report should be shared in full as this would be used as documentary evidence to make a case stronger. On the contrary, if the investigation report is requested by the employee under investigation, employers are entitled to use their discretion as to what information to share.

After the conclusion of the enquiry, a company may choose to:

• close the investigation without taking any additional action; or
• adopt disciplinary measures against the employee.

These could range from a verbal or written warning to the suspension of work and pay for a set period. Disciplinary dismissals are also possible, but they are reserved for very serious offences.

Note that any disciplinary measure will have to follow the procedures that might be established in the applicable collective bargaining agreement, such as informing employee representatives or following a grievance procedure before adopting the measure.

Upon completion of the investigation, the employer can decide to take proper disciplinary action against the employee if it is found that the employee committed an offence or violated the work rules. An employer may also file a report with the police if the findings of the investigation amount to a criminal offence.

Companies may only disclose the outcome of an investigation to employees or officers of the company who are empowered to adopt the measures that are necessary because of the investigation’s results (see question 4).

This disclosure obligation does not extend to authorities: while there is a general obligation to report criminal or administrative offences to the competent authorities, this obligation must be read in line with the companies’ right not to self-report themselves. What a company must not do is cover up, aid or otherwise become an accessory to the offence.

The investigation findings should be disclosed to a limited group of persons who are involved in the investigation, and for which the findings are useful. For example, an HR manager who needs to record the findings in the employee’s record, the police if the employer decides to proceed further with a criminal claim, the court if requested by that court, or if there is a court case related to the violations of the employee.

Interview records should be kept confidential and private. There is a risk of disclosure because the information in the records may be beneficial to one but damaging to others. If the interview records are leaked to others who are not involved in the investigation, it may affect the work environment in the workplace and the protection of witnesses.

The outcome of the investigation will contain personal data of the affected employee. For this reason, this information should only be kept for as long as a legal obligation or liability in connection with the information could arise for the company. Since the general statute of limitations for employment liability is one year, this is a good guideline.

In addition to the above, two specific rules apply:

• once the information becomes irrelevant for the purpose for which it was obtained and processed, the information should no longer be stored on the employee’s record or elsewhere; and
• the employees’ information (including those of the reporter and the affected employees) should only be stored in whistleblower systems during the time that is necessary to decide on whether the facts need to be investigated or not and, in any case, for a maximum period of three months.

There is no period required by law for keeping the outcome of the investigation on the employee’s record. However, if termination of employment is the outcome of the investigation, an employer should keep details of the investigation for at least 10 years, in line with the prescribed period for an employee to file an unfair dismissal claim against an employer. An employer may use the details of an investigation to defend such a claim. For other disciplinary action, the retention of investigation details on the employee’s record is at the employer’s discretion.

Errors during an investigation are normally linked to the breach of the employees’ privacy or their personal data rights (see question 1). Breaching these rights might expose employers to:

• Fines from the Labour Inspectorate and the Spanish Data Protection Authority.
• A court awarding damages to the employee.
• Any disciplinary measures adopted by the company as a result of the investigation could be considered null and void.
• The evidenced obtained during the investigation being disregarded by a court.
• In some very serious cases, criminal liability might arise for the individuals who conducted the investigation and breached the employees’ rights.

The Thai Supreme Court has ruled that the termination of an employee was unfair due to an investigation being conducted contrary to requirements in the company’s work rules. As such, employers may be liable for damages to employees if there are errors made during investigations, or where investigations are not conducted properly.

The Supreme Court has also ruled that in cases of unfair termination, the underlying cause of the termination should be the determining factor, rather than other issues, including investigative procedures.