Workplace Investigations

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.

Documents and instruments that set out a company’s policies (eg, employee handbooks, code of conduct or other written guidelines) often contain provisions regarding employee data and document collection, workplace searches, communication monitoring, privacy, and confidentiality. As discussed below, state and federal constitutional, statutory and common law – and in some cases foreign data privacy regimes – may provide additional protections to protect employees from an unwarranted or unreasonable invasion of privacy during an internal investigation.

Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.

The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]

In general, it is often helpful to provide the complainant and subject of the complaint with a short written communication or verbal communication at the end of an investigation to advise that the investigation has concluded. Where the allegations are unsubstantiated, the communication should convey that no evidence of misconduct or unlawful conduct was found. Where the allegations are substantiated, the results and proposed communication should be reviewed with the legal function, together with potential disciplinary and remedial action, before it is communicated to the complainant and the subject of the complaint.

Where the misconduct alleged poses a high risk to the company from a reputational, operational or legal perspective, and especially where an investigation is conducted by outside counsel, outside counsel should determine, in consultation with the relevant individuals at the company, for example the general counsel, how and with whom to share investigation results and if and how to communicate the outcome to the complainant and the subject of the complaint. This is the case regardless of whether the allegations are found to be substantiated or unsubstantiated.