Workplace Investigations

There are no legal requirements in this respect – it depends on the internal policies or practices at a given working establishment. Based on our experience – an internal investigation usually commences with a preliminary assessment of a reported irregularity. If the preliminary assessment leads to a conclusion that a reported situation may be an irregularity, an investigation is launched by appointing a commission or team that conducts the investigation or selecting an investigator. Then, a plan of investigation is established. Depending on the circumstances, the investigation plan may involve a collection of documents or files, their analysis, and interviews with a victim, witnesses or a subject (although the procedure depends on the type of case, internal rules and practice). At the end of the process, the report is prepared by the commission or team with facts established during the process, recommendations, and other suggestions as to the investigated issue.

Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).

For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]

A workplace investigation is often, although not always, prompted by a complaint of workplace misconduct, usually made directly by the employee who was harmed by the conduct, a third party who witnessed the conduct, or a manager or supervisor who was made aware of the issue and has reporting obligations as a result of his or her role in the organisation. 

It is best practice – and often a legal requirement depending on the applicable state law – for companies to clearly outline a complaint process in their policies and to provide employees who experience, have knowledge of, or witness incidents they believe to violate the company’s policies with one or more options for making a report. Although the specific complaint procedure may vary depending on the size of the organisation, the nature of the business and the type of complaint at issue, many companies provide for (or require) making a report through one of the following channels:

• a company-managed hotline or online equivalent;
•  human resources;
• an affected employee’s supervisor or manager; or
• a member of the legal or compliance department.    

It depends on whether the employer implemented rules of personal control at the workplace. If yes, such rules are applicable. If not, in our opinion if there is suspicion of a serious violation, it is possible to carry out an ad hoc inspection but its scope should be limited only to necessary activities and should not concern an employee’s private files or correspondence, so as not to infringe on personal rights. If there is an ad hoc inspection, an employee should be informed in advance, and it should take place in the presence of the employee or employee’s representative, observing the rules of fairness and equity.

The basic rule is that the employer may not search private data during internal investigations.

If there is a strong suspicion of criminal conduct on the part of the employee and a sufficiently strong justification exists, a search of private data may be justified.[1] The factual connection with the employment relationship is given, for example, in the case of a criminal act committed during working hours or using workplace infrastructure.[2]

As there is no unified data protection regime, privacy protections stem from a patchwork of federal and state privacy laws which impose limits on the extent to which an employer can collect information from its employees in connection with an internal investigation. Whether specific conduct violates an employee’s rights is a very fact-specific inquiry requiring the application of relevant state laws and a regulatory regime. 

In most circumstances, an employer is free to conduct searches of its workplace and computer systems in the course of investigating potential wrongdoing. Such searches are generally not protected by personal privacy laws because workspaces, computer systems and company-issued electronic devices are often considered company property. Many companies explicitly address this in written corporate policies and employment agreements. Employees who use their own electronic devices for work should be aware that work-related data stored on those devices is generally considered to belong to the employer (as a matter of best practice, employers should generally prohibit or at least advise employees against using personal devices for work and to maintain separate work devices, where possible).

These broad investigatory powers notwithstanding, the ability of an employer to conduct searches in furtherance of an internal investigation is not unlimited. For example, if an employer seeks to obtain or review work-related data from an employee’s personal device, the employer must be careful to exclude any personal data. Certain states also prohibit an employer from requiring an employee to disclose passwords or other credentials to his or her personal email and social networking accounts, but permit an employer to require employees to share the content of personal online accounts as necessary during an interview while investigating employee misconduct.