Workplace Investigations

Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.

There is no legislation on this area in Poland. However, employers implement internal policies that provide for workplace investigation rules to fulfil certain legal obligations, including those arising directly from labour law.

Based on the currently binding provisions of labour law, an employer must counteract unwanted behaviour in the workplace (eg, bullying, discrimination and unequal treatment). To fulfil this obligation, employers implement internal policies that provide a framework for reporting misconduct and conducting internal investigations. They may freely design the rules of such investigations, within the constraints of their policy. Therefore, it is recommended they create the policy based on the following:
 

• it should be possible to effectively report the misconduct;
• there should be more than one way to report misconduct;
• anonymous reporting should be allowed;
• an investigation committee should be appointed and be objective;
• rules on excluding persons with a conflict of interest from conducting the investigation should be provided; and
• the report from the investigation should be prepared and signed by all persons participating in the process.

However, work on a bill on whistleblower protections is in progress (the Draft Law). The Draft Law will not determine the rules of workplace investigations but it will force employers to implement a whistleblowing procedure and follow-up on recommendations in the case of a report, including initiating an internal investigation where appropriate. Whether an internal investigation is initiated depends on the assessment of a reported irregularity by the employer.

In addition, employers (especially those that are part of an international group) often already implement internal policies on whistleblowing management and internal investigations. Employers often base their policies on guidelines issued by relevant (usually international) organisations.

In the United States, any combination of legislation at the federal, state and local level, as well as judicial opinions and regulatory guidance interpreting those statutes, may impose obligations on relevant employers to undertake a timely internal investigation in response to complaints of workplace misconduct and to promptly implement remedial measures, where appropriate.

An employer’s written policies often also set forth the company’s expectations for how its employees, partners, vendors, consultants or other third parties will conduct themselves in carrying out the business of the company, and these policies may include protocols setting forth the parameters for an investigation in the event of potential non-compliance. Such investigatory roadmaps are often described in, for example, employee handbooks or a company’s policy against discrimination and harassment.

Due to the patchwork nature of employment and related laws, it is not possible to cover every investigation scenario or related legislation in this guide. Employers should instead consult with experienced employment attorneys in their state to ensure compliance with the applicable legal and regulatory regimes. 

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

There are no legal requirements in this respect – it depends on the internal policies or practices at a given working establishment. Based on our experience – an internal investigation usually commences with a preliminary assessment of a reported irregularity. If the preliminary assessment leads to a conclusion that a reported situation may be an irregularity, an investigation is launched by appointing a commission or team that conducts the investigation or selecting an investigator. Then, a plan of investigation is established. Depending on the circumstances, the investigation plan may involve a collection of documents or files, their analysis, and interviews with a victim, witnesses or a subject (although the procedure depends on the type of case, internal rules and practice). At the end of the process, the report is prepared by the commission or team with facts established during the process, recommendations, and other suggestions as to the investigated issue.

A workplace investigation is often, although not always, prompted by a complaint of workplace misconduct, usually made directly by the employee who was harmed by the conduct, a third party who witnessed the conduct, or a manager or supervisor who was made aware of the issue and has reporting obligations as a result of his or her role in the organisation. 

It is best practice – and often a legal requirement depending on the applicable state law – for companies to clearly outline a complaint process in their policies and to provide employees who experience, have knowledge of, or witness incidents they believe to violate the company’s policies with one or more options for making a report. Although the specific complaint procedure may vary depending on the size of the organisation, the nature of the business and the type of complaint at issue, many companies provide for (or require) making a report through one of the following channels:

• a company-managed hotline or online equivalent;
•  human resources;
• an affected employee’s supervisor or manager; or
• a member of the legal or compliance department.    

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

Polish law does not provide for the suspension of an employee. Instead, an employer may agree with an employee that he or she will be released from the obligation to perform work during a relevant period of investigation (with the right to remuneration). The employer may not do this unilaterally, unless the employee is in a notice period. As an alternative, which is more common in practice, the employer may force the employee to use outstanding holiday leave (subject to limitations provided by law) or the parties may mutually agree on the use of holiday leave or unpaid leave (if the employee has already used his or her holiday entitlement in full).

Yes. An employer may suspend the subject of an internal investigation with full pay pending the outcome of an investigation. However, this measure should be used sparingly, for example in cases where an employee has been accused of gross misconduct or where it is the only means of separating the alleged victim of harassment from the accused to prevent continued harassment. As an alternative means of separating the victim from the accused, an employer can consider interim measures such as a schedule change, transfer or leave of absence for the alleged victim with his or her consent (employers should take care not to take any action that could be perceived as retaliatory against the complainant – even if well-intentioned – including involuntarily transferring him or her or forcing a leave of absence).

Where an employer does determine that suspending the subject of an investigation is warranted while the company carries out its investigation, it should provide him or her with a written statement briefly outlining the reason for the suspension and the estimated date the employee will be advised of the investigation outcome and his or her final employment status.

The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation

There are no legal requirements in this regard but it is good practice if the team of investigators or individuals who deal with the case consists of:

• a person who has specific knowledge in a given field (concerning the violation);
• a member of the HR team; and
• a lawyer (it is recommended to engage an independent, external lawyer who can maintain the objectivity of the investigation, especially in complex matters or where a conflict of interest arises or may arise).

It is crucial that the investigators are independent (and they must be allowed to act independently).

Also, certain personal features are useful (eg, the ability to objectively assess a situation, empathy, and managing skills).

While every internal investigation should be carried out promptly, thoroughly and in a well-documented manner, employers should appoint one individual or team of individuals to oversee all complaints regardless of how they are received. Doing so helps to ensure that all allegations are documented, reviewed and assigned for investigation as consistently as practicable.

Once a complaint is received and recorded, the company should undertake an initial triage process to determine:

• the risk of the alleged misconduct from a reputational, operational and legal perspective;
• who is best suited to conduct an investigation based on the nature of the alleged misconduct and the perceived risk level (potential candidates may include members of human resources, legal or compliance departments, or outside counsel); and
• a plan for investigating the factual allegations raised in the complaint.

The appropriate investigator should be able to investigate objectively without bias (ie, the investigator cannot have a stake in the outcome, a personal relationship with the involved parties and the outcome of the investigation should not directly affect the investigator’s position within the organisation); has skills that include prior investigative knowledge and a working knowledge of employment laws; has strong interpersonal skills to build a rapport with the parties involved and to be perceived as neutral and fair; is detail-oriented; has the right temperament to conduct interviews; can be trusted to maintain confidentiality; is respected within the organisation; and can act as a credible witness.

At this triage stage, an employer may also wish to use the information collected from the complaint to proactively identify potential patterns or systemic issues at an individual, divisional or corporate level and react accordingly. For example, if a company receives a complaint against a supervisor for harassing conduct and that same individual has already been the subject of previous complaints, the company should consider whether it may be appropriate to engage outside counsel to carry out a new investigation to bring objectivity and lend credibility to the review – even if the prior complaints were not ultimately substantiated following thorough internal investigations. Similarly, the engagement of outside counsel is often appropriate where a complaint involves alleged misconduct on the part of a company’s senior management or board members.

The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.

This is unlikely. Theoretically, an employee can file a claim against an employer concerning the infringement of personal rights in the course of an investigation and a motion to secure his or her claims, which would consist of an employer being forced to suspend the proceedings, but in practice we have not encountered such a situation.

In general, private sector employees have considerably fewer rights vis-à-vis a company-led internal investigation than their public sector counterparts. This is because many US states are “at will” employment states, which means that, absent an employment contract that provides otherwise, an employee can be terminated for any reason not prohibited by statute or public policy. Depending on the specific circumstances, however, an employee who is the subject of an internal investigation could bring or threaten legal action according to contract or tort principles to stop an investigation. An employee may also challenge an investigation because it was conducted in violation of certain federal, state or foreign laws, for example, the use of polygraph tests in violation of the Employee Polygraph Protection Act or foreign data privacy laws.

There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing. 

In general, an employee may not be forced to act as a witness, but based on the provisions of the Polish Labour Code, an employee must act for the benefit of a working establishment or employer and perform work in line with the instructions of an employer. A lack of cooperation from an employee (eg, refusing to attend a hearing, hiding facts or even false testimony) may constitute a basis for the loss of an employer’s trust in the employee and, as a consequence, may constitute a valid reason for termination (in some specific situations, even without notice).

There is no formal protection for employees who act as witnesses. However, participation in an investigation cannot result in negative consequences (eg, no retaliation is allowed). Also, during an investigation, employees who are bound by professional secrecy are not required to provide information that would imply a breach of such secrecy.

Yes. The investigator is empowered to decide which witnesses should be interviewed as a part of the fact-gathering process. In addition to interviewing the complainant, the investigation should include individual interviews with other involved parties, including the subject of the complaint, as well as individuals who may have observed the alleged conduct or may have other relevant knowledge, including supervisors or other employees. Many companies’ code of conduct, employee handbook or similar policy set forth the requirement for current employees to cooperate fully in any investigation by the company or its external advisors and also provide that failure to do so could result in disciplinary action, up to and including termination.

In the absence of contractual protections, employees may have no legal right to refuse to submit to an interview, even if their answers tend to incriminate them. That being said, when acting as a witness in an internal investigation, a current employee is usually afforded similar legal protections as the subject of an investigation, including the right to oppose unreasonable intrusions into his or her privacy and unreasonable workplace searches. For example, certain state laws prohibit an employer from questioning an employee regarding issues that serve no business purpose.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

If personal data is involved – the rules and principles of the GDPR will apply. If the physical evidence includes e-mail correspondence, files, or an employee’s equipment and possessions, the Labour Code will apply (ie, as a general rule, to monitor it, a monitoring policy must be implemented at that working establishment). Such a policy must strictly determine the aim of the surveillance and an employer must only apply surveillance in situations that reflect this aim. Also, when it comes to monitoring correspondence, it must not infringe on the secrecy of the correspondence, which in practice means that the employer should not check employees’ private correspondence when checking their business mailboxes.

Documents and instruments that set out a company’s policies (eg, employee handbooks, code of conduct or other written guidelines) often contain provisions regarding employee data and document collection, workplace searches, communication monitoring, privacy, and confidentiality. As discussed below, state and federal constitutional, statutory and common law – and in some cases foreign data privacy regimes – may provide additional protections to protect employees from an unwarranted or unreasonable invasion of privacy during an internal investigation.

Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).

It depends on whether the employer implemented rules of personal control at the workplace. If yes, such rules are applicable. If not, in our opinion if there is suspicion of a serious violation, it is possible to carry out an ad hoc inspection but its scope should be limited only to necessary activities and should not concern an employee’s private files or correspondence, so as not to infringe on personal rights. If there is an ad hoc inspection, an employee should be informed in advance, and it should take place in the presence of the employee or employee’s representative, observing the rules of fairness and equity.

As there is no unified data protection regime, privacy protections stem from a patchwork of federal and state privacy laws which impose limits on the extent to which an employer can collect information from its employees in connection with an internal investigation. Whether specific conduct violates an employee’s rights is a very fact-specific inquiry requiring the application of relevant state laws and a regulatory regime. 

In most circumstances, an employer is free to conduct searches of its workplace and computer systems in the course of investigating potential wrongdoing. Such searches are generally not protected by personal privacy laws because workspaces, computer systems and company-issued electronic devices are often considered company property. Many companies explicitly address this in written corporate policies and employment agreements. Employees who use their own electronic devices for work should be aware that work-related data stored on those devices is generally considered to belong to the employer (as a matter of best practice, employers should generally prohibit or at least advise employees against using personal devices for work and to maintain separate work devices, where possible).

These broad investigatory powers notwithstanding, the ability of an employer to conduct searches in furtherance of an internal investigation is not unlimited. For example, if an employer seeks to obtain or review work-related data from an employee’s personal device, the employer must be careful to exclude any personal data. Certain states also prohibit an employer from requiring an employee to disclose passwords or other credentials to his or her personal email and social networking accounts, but permit an employer to require employees to share the content of personal online accounts as necessary during an interview while investigating employee misconduct.

In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).

In principle, an internal investigation should be conducted in the same way, regardless of whether it is initiated following a whistleblowing report, an audit, or a monitoring result. This includes anything related to confidentiality, fairness, data privacy protection, etc.

If an internal investigation is initiated following a whistleblower report, the main characteristic that is imposed by the EU Directive on the protection of persons who report breaches of EU Law (Whistleblowers Directive) and that will also be available under the Draft Law is for the organisation (employer) to communicate (if practicable) the report to the whistleblower. Furthermore, the whistleblower should receive feedback as to whether follow-up actions were undertaken following the report and, if yes – what actions were taken – and if not – why the follow-up actions were not taken.

Several federal, state, and local employment laws prohibit retaliation against employees who come forward with complaints or participate in corporate investigations. Employees who possess information regarding corporate misconduct may also be considered whistleblowers protected from retaliation under federal and state whistleblower laws, including but not limited to the Sarbanes-Oxley Act of 2002, the Dodd-Frank Wall Street Reform and Consumer Protection Act, and the Consumer Financial Protection Act of 2010.

An employee generally does not need to show that he or she was terminated or demoted to bring a retaliation claim; other actions on the part of the employer may qualify if they could be seen to discourage employees from raising complaints. To protect against a potential retaliation claim, employers should make clear at the outset of an investigation that retaliation will not be tolerated and require the complaining employee (and potentially his or her manager) to bring any instances of retaliation to the investigator’s attention immediately.

Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).

The law does not cover this issue, apart from whistleblower regulations, as it should be regulated by the employer in their internal rules. The employer should ensure all participants of the investigation keep information related to it secret, as long as is necessary for the investigation (or even longer, if required by law concerning personal data or other specially protected information). Reputation, personal data and the personal rights of other people cannot be breached during the proceedings and this should be protected.

Moreover, according to the Draft Law – a whistleblower’s personal data should be kept confidential. It can only be disclosed if law enforcement authorities require it. Also, confidentiality should be guaranteed for the subject and other interested persons.

Information arising from the initial complaint, interviews and records should be kept as confidential as practically possible while still permitting a thorough investigation. Although an employer must maintain confidentiality to the best of its ability, it is often not possible to keep confidential the identity of the complainant or all information gathered through the investigation process. An employer should therefore not promise absolute confidentiality to any party involved in an internal investigation, including the complainant. The investigator should instead explain at the outset to the complaining party and all individuals involved that information gathered will be maintained in confidence to the extent possible, but that some information may be revealed to the accused or potential witnesses on a need-to-know basis to conduct a thorough and effective investigation.

The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.

There is no specific mandatory information that should be given to an employee who is the subject of an internal investigation. However, it is common practice that he or she must know what the allegations against them are, on what grounds these allegations are formulated and be given a right to discuss these allegations and the evidence or grounds for these allegations.

The investigator must disclose to the employee under investigation the purpose of the investigation and, where the investigator is in-house or outside counsel, he or she should disclose that the company is the client.

See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.

Yes.

In general, except as provided above, depending on the seriousness of the complaint and investigation, the only persons who should be aware of it are the relevant individual in human resources or legal, and where different, the persons assigned to investigate. Although it may not be feasible to maintain absolute confidentiality in conducting an investigation depending on the nature of the allegations, investigators should exercise discretion at all times and, where possible, avoid identifying complainants, the subject of the investigation or witnesses by name where it is not necessary, and where doing so could be detrimental to the fact-finding process.

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

Yes, but it may not stop the disclosure of information at the request of relevant law enforcement authorities.

This is a fact-specific inquiry that depends on the specific circumstances and laws of the relevant state. In general, NDAs are frowned upon but can be used to an extent to keep certain facts and the substance of an investigation confidential. NDAs can never prevent employees from assisting in official agency investigations, however. NDAs also cannot lawfully prohibit employees from officially reporting illegal conduct by their employer.

The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.

In general, findings made and documents established during an internal investigation, including the report thereof, are not covered by privilege per se. It can be claimed that they are covered by the employer’s commercial secrecy, but this secrecy is not very well protected from requests of law enforcement authorities. Hence, if prosecuting authorities find a report of an internal investigation or other documents established during an investigation relevant for criminal proceedings, they can ask for them. If they are not produced voluntarily, a search can be performed.

Legal privilege will, on the other hand, cover an internal investigation if it is entrusted to an independent lawyer. Specifically, client-attorney privilege will cover all documents that are established during the investigation by a lawyer.

Under Polish law there is no distinction between legal advice privilege and litigation privilege. Hence, legal privilege will cover the documentation of the internal investigation led by a lawyer regardless of whether the lawyer’s involvement is for the purpose of obtaining legal advice or because of ongoing or contemplated litigation.

For legal privilege to apply, a primary purpose of the investigation should be to provide legal advice to the company, including concerning non-lawyers working at the counsel’s direction, and legal privilege likely will not apply to internal investigations performed as part of the ordinary course of business or where the investigation is required by a state or federal regulatory regime (eg, post-incident investigations of operations governed by OSHA’s Process Safety Management Standards). It is, therefore, important to contemporaneously document the scope and purpose of the investigation and not risk waiving privilege by sharing privileged materials with unnecessary third parties.

Whereas attorney-client privilege includes only communications between an attorney and the client, work-product privilege is broader and includes materials prepared or collected by persons other than the attorney with an eye towards impending litigation. Examples of potential work products produced by attorneys in the context of an investigation include investigative work plans, interview outlines, memoranda summarising witness interviews and investigative reports.

As a practical matter, employees should be aware that communications with other employees or colleagues regarding the investigation are not privileged regardless of whether the colleague is also involved in the investigation or represented by the same counsel. Even if an employee believes he or she is sharing attorney communications with other employees who need to know the attorney’s advice and who also have attorney-client privilege with the same counsel because he or she is involved or implicated in the investigation and also represented by company counsel, it is always prudent to refrain from sharing privileged information. If an attorney’s communication is shared beyond those who need to know, attorney-client privilege may be destroyed.

The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.

This is not regulated by law and it depends on internal procedures or practice at a given working establishment. As a rule, the participation of third parties or proxies is neither a recognised practice nor recommended (according to the principle that the fewer people participate in the investigation, the easier it is to determine the circumstances of the case, the so-called need-to-know rule). However, in certain situations it should be permissible for a proxy (eg, a lawyer) to participate in a meeting with a subject.

Employees generally have no automatic right to counsel in connection with an internal investigation, unless contractually provided for under the terms of an employment agreement. Nonetheless, employees may choose to retain counsel, particularly if they face liability.

A works council or a trade union does not have a role in the investigation.

There is no such obligation, unless it is provided for in an internal procedure or, for example, in the applicable collective bargaining agreement. It is neither a recognised practice nor recommended that such persons participate in the investigation.

However, in the event of violations that justify the termination of an employment contract with the employee, the employer should consult with that employee’s union about their intention to immediately terminate any employment contract concluded with that person or to terminate, with notice, the employment contract agreed with him or her for an indefinite term, or apply for consent to terminate the employment contract with an employee who is protected by a union.

Employers generally have no obligation to inform employees of their right to union representation or to ask if they would like a union representative present during the interview. Union employees may insist, however, that a union representative attend any investigatory interview that could lead to the employee’s punishment, although the union representative may not interfere with the interview.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

They may be supported by, for example, allowing an alternative work environment (eg, remote work to avoid direct contact with people involved in the case). Depending on circumstances of the case, this solution will be offered to the subject or the victim. However, it is important that such actions do not infringe the rights of other people (eg, the subject itself).

Employees may also be sent on leave (by a unilateral decision of the employer – if possible under currently binding law provisions) or the parties to an employment contract may mutually agree to use such leave. Moreover, if they employer thinks it is necessary, they may assign the employee to another job for a period not exceeding three months (only if it does not result in a reduction in the employee’s remuneration and corresponds to the employee’s qualifications).

Also, depending on the employer’s decision – psychological or even legal assistance can be provided by the employer to a whistleblower or a victim.

The employer’s counsel should provide an Upjohn warning at the start of any interview, and delivery of the warning should be documented by a note-taker. An Upjohn warning is the notice an attorney (in-house or outside counsel) provides a company employee to inform the employee that the attorney represents only the company and not the employee individually.

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

It depends on the circumstances of the revealed issue and the employer’s compliance culture. Normally, if a new issue is revealed during the investigation, it should be analysed and investigated if appropriate.

Where new issues or claims arise during an ongoing workplace investigation, the investigator should discuss with in-house counsel whether the new issues or claims should be separately investigated and if so, by whom, or if instead those new issues or claims are sufficiently related to the current review that they can be investigated in parallel and incorporated into the ongoing fact-gathering process. 

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

It depends on the internal policies in force in the organisation. Most often, it constitutes the basis for separate proceedings.

Where an employee who is the subject of a workplace investigation raises his or her grievance during the investigation, the investigator should follow the same steps outlined above to triage new issues or claims. The investigator should also discuss with in-house counsel whether any particular steps should be taken to avoid the perception that any disciplinary measures taken against the employee (in the event the original claims are substantiated) were retaliatory.

As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.

This may prolong the investigation, as the employee may be unable to participate for a time (if the employee is not able to work, in many cases he or she will not be able to participate in proceedings that requires some level of engagement and psychophysical ability). Also, an employee is protected against termination of an employment contract with notice during sick leave. During such a period, the employer may only terminate his or her employment contract without notice (with immediate effect).

If an employee who is the subject of a workplace investigation becomes sick during the investigation, the investigator should complete as much of the process as possible in the employee’s absence, for example by conducting interviews with the complainant and other witnesses and collecting and reviewing relevant documentation. Where the employee’s absence is expected to be short-term, the employer can postpone completing the investigation until the employee returns to work and can be interviewed. Where a lengthy absence is expected, the investigator should take steps to ensure that the employee nevertheless has a fair chance to participate in the process, for example by providing the employee with flexibility in scheduling his or her interview or by offering other accommodations such as conducting the interview by video conference instead of requiring an in-person interview, or alternatively meeting in a neutral place instead of the office. It is important to maintain records of the steps taken to accommodate the employee to show that the process was reasonable and fair. 

Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.

They can be run in parallel. It is up to the company whether it informs the authority about the ongoing internal investigation.

Based on our experience in criminal matters, a report from an internal investigation may not necessarily be treated as evidence per se, but as a source of information about the evidence.

According to procedural rules stemming from, for example, the Criminal Procedure Code, the authorities can demand to see evidence and documents in the employer’s possession that they consider relevant to the conducted proceedings and their subject matter.

Employers have obligations to conduct a thorough and unbiased internal investigation and take prompt remedial action to prevent further workplace violations. As such, absent a criminal or regulatory investigation where the investigators ask the employer to pause an internal investigation, employers should be prepared to continue their internal investigation in parallel with the criminal or regulatory investigation while cooperating with police or regulatory investigators.

The police and the regulator can often compel the employer to share certain information gathered from its internal investigation. In some cases, the employer should analyse whether the non-disclosure of information evidencing criminal conduct within the company itself constitutes an independent crime or whether an applicable statute or regulation imposes an independent duty to disclose. Alternatively, the employer should consider whether, even absent an affirmative duty to disclose, disclosure of information gathered during an internal investigation may still benefit the employer.

The employer's conclusions from the investigation.

He or she must be given feedback about follow-up actions that were undertaken, or reasons why the follow-up actions were not undertaken.

In any case – the feedback must be adapted to the circumstances of each case so as not to reveal too many details or infringe the other interested parties’ rights.

In general, it is often helpful to provide the complainant and subject of the complaint with a short written communication or verbal communication at the end of an investigation to advise that the investigation has concluded. Where the allegations are unsubstantiated, the communication should convey that no evidence of misconduct or unlawful conduct was found. Where the allegations are substantiated, the results and proposed communication should be reviewed with the legal function, together with potential disciplinary and remedial action, before it is communicated to the complainant and the subject of the complaint.

Where the misconduct alleged poses a high risk to the company from a reputational, operational or legal perspective, and especially where an investigation is conducted by outside counsel, outside counsel should determine, in consultation with the relevant individuals at the company, for example the general counsel, how and with whom to share investigation results and if and how to communicate the outcome to the complainant and the subject of the complaint. This is the case regardless of whether the allegations are found to be substantiated or unsubstantiated.

The employee under investigation may only be informed of the conclusions.

It does not need to be shared with the employees at all. It may be shared only to the extent such a disclosure will not violate any law, including personal data protection law or personal rights.

Only the findings should be shared with the complainant and the subject of the complaint.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

It depends on the outcome of the investigation: imposing penalties; reporting to a regulator; notifying a suspected offence or civil claim; termination of an employment contract with or without notice; and changes to the work organisation. Following the investigation, the employer must make some legal, business or HR corrective actions.

Where the misconduct alleged is substantiated in whole or in part by an internal investigation, the human resources function, potentially in consultation with in-house or outside counsel, should agree on disciplinary or remedial action to be implemented.

In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.

It depends on the matter. In general, there is no obligation to disclose the report. In some instances, there is an obligation to notify a suspected offence (for example, a terrorist attack or a political assassination). This, however, does not mean there is an obligation to file a report from the internal investigation, but to provide the law enforcement authority with the facts and evidence at the notifier’s disposal. In other instances of criminal offences, for example corruption, there is no obligation to notify law enforcement authorities. Therefore, it is up to the organisation to decide whether it will file a notification for a suspected offence.

At the same time, presenting a report from an internal investigation can constitute an element of defence for an organisation if a regulatory authority initiates proceedings regarding a failure by the organisation to comply with regulatory obligations.

Records of interviews do not need to be produced for the case file provided the law enforcement authority does not ask for them.

Once fact-finding is complete, the investigator should discuss his or her notes with in-house or outside counsel and prepare a summary of the process, high-level findings, and a proposed resolution at the counsel’s direction. This report should not include subjective commentary and should also avoid including excessive detail, and generally be treated confidentially during and after the investigation. If the report is requested by regulators or the police, the company should discuss with in-house counsel, and preferably also with outside counsel, how to respond to the request and whether any steps need to be taken to protect any applicable legal privilege.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

Neither Polish law nor the Draft Law specifically provide for a mandatory period during which the outcome of the investigation should be kept on the employee’s record.

At the same time, the Draft Law indicates that the register of whistleblowing reports, which should also contain information about follow-up actions undertaken as a result of the report, should be kept for 15 months starting from the end of the calendar year in which the follow-up actions have been completed, or the proceedings initiated by those actions have been terminated.

Also, while determining how long the outcome of an internal investigation should be kept, additional legal considerations can be taken into account, especially data privacy.

The GDPR does not specify precise storage time for personal data. The employer must assess what will be an appropriate time for storage of the data, taking into consideration the necessity of keeping personal data concerning the purpose of the processing in question. Employees' personal data should be kept for the period necessary for the performance of the employment relationship and may be kept for a period appropriate for the statute of limitations for claims and criminal deeds. A longer retention period may result from applicable laws. Following the Regulation of the Minister of Family, Labour and Social Policy on employee documentation, the employer may keep a copy of the notice of punishment and other documents related to the employee’s incurring of disciplinary responsibility in the employee record.

There are different retention periods for the data contained in employee files:

• 10 years if the employee was hired on or after 1 January 2019;
•  if the employment relationship began between 1 January 1999 and 1 January 2019, the retention period is 50 years, but may be reduced to 10 years if the employer provides the Polish Social Insurance Institution with certain mandatory information; and
•  for 50 years if the employee was hired before 1 January 1999. It does not matter whether the person is still working or not.

There is no requirement for the results of a workplace investigation to remain on an employee’s record for any specific period. It is often helpful, however, for information relating to the outcome of such an investigation (regardless of whether the allegations are substantiated) to be accessible to the human resources or legal functions such that during the initial complaint intake process described above, any prior complaints and investigations relating to the same individual or group of individuals can be taken into account to identify any recurring issues or systemic violations.

There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.

If any untrue allegations were made by an employer against an employee without checking them beforehand, there is a risk that such an employee would claim damages eg, for infringement of personal rights or even filing a private indictment for defamation or outrage.

Certainly, an employer must be aware that one must never behave in a way that, for example, in the employee's opinion, could constitute a form of blackmailing or deprivation of liberty. A problem may also arise when accessing the employee's correspondence, especially when access is made to documents or private correspondence. The Draft Law provides for several criminal offences related to, for example, preventing reporting, using retaliatory measures against a whistleblower or disclosing personal data of a whistleblower).

The subject of the investigation, the complainant, or a government agency investigating the same alleged misconduct could subject the employer to legal exposure. It is, therefore, helpful for a company to prepare a contemporaneous report of the investigation that summarises: the incident or issues investigated, including dates; the parties involved; key factual and credibility findings; employer policies or guidelines and their applicability to the investigation; specific conclusions; the party (or parties) responsible for making the final determination; issues that could not be resolved through the internal investigation; and employer actions taken.

The employer should also maintain a clear record of the steps taken to investigate the alleged misconduct and any findings, as well as all evidence gathered during the investigation, including documents collected and reviewed, any work done to identify systemic issues or patterns of behaviour, and notes from all interviews, which should be limited to the facts gathered, dated and should indicate the duration and location of the interview.