Workplace Investigations

There are no specific legislative requirements for workplace investigations in Germany. In 2020, the Federal Ministry of Justice presented a draft bill with regulations on internal investigations and, in particular, employee interviews. However, this law failed to pass under the previous government. The current government has announced it will take up this matter again and plans to create a precise legal framework for internal investigations. Details, timing and content remain to be seen.

Nevertheless, workplace investigations do not take place in a "lawless space". They must comply with the provisions of employment and data protection law. Further, criminal and corporate law aspects can play a role. Moreover, works council information and co-determination rights may have to be taken into account.

Dutch employment law does not provide for a timeframe within which an internal investigation must be launched. However, it is important for an employer who suspects abuse or irregularities, to start an internal investigation without delay. In essence, that means that as soon as management, or – depending on the specific circumstances – the person who is authorised to decide on disciplinary sanctions against a certain employee, becomes aware of a potential abuse or irregularity, all measures to initiate an internal investigation should be taken promptly. If this is not done, the employer may lose the opportunity to take certain disciplinary actions.

The legal framework relating to an investigation by an employer into the acts and omissions of an employee are determined by, among other things, section 7:611 of the Dutch Civil Code (DCC) that stipulates good employer practices; Section 7:660 DCC (right to give instructions to the employee); the European Convention on Human Rights; the Dutch Constitution; the General Data Processing Regulation; and, if the employer uses a private investigation agency, the Private Security Organisations and Detective Agencies Act and the Privacy Code of Conduct for Private Investigation Agencies.

The legal basis from which the employer derives the authority to investigate can be based on the employer's right to give instructions (section 7:660 DCC). Pursuant to this section, the employer has – to a certain extent – the right to give instructions to the employee “which are intended to promote good order in the undertaking of the employer”. In many cases, an investigation of a work-related incident will aim to promote good order within the company. As such, the investigation is trying to:

• find the truth;
• sanction the perpetrator; and
• prevent repetition.

Instructing an employee to cooperate with an internal investigation falls within the scope of the right to instruct.

Subsequently, the employer must behave as a good employer during the investigation, pursuant to section 7:611 DCC. This is coloured by the classic principles of careful investigation: the principle of justification, the principle of trust, the principle of proportionality, the principle of subsidiarity and the principle of equality. Furthermore, the principle of hearing both sides of the argument applies and there must be a concrete suspicion of wrongdoing.

There is no specific legal regulation for internal investigations in Switzerland. The legal framework is derived from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights. Depending on the context of the investigation, additional legal provisions may apply; for instance, additional provisions of the Swiss Federal Act on Data Protection or the Swiss Criminal Code.

At the end of the workplace investigation, the results are presented to the company's management bodies so that they can make a decision. This may be a mere summary of the facts, or it may contain a legal assessment and recommendation for action.

There is no general obligation to report compliance violations to the police or public prosecutor's office. For some violations, there are statutory disclosure requirements. For example, data protection violations must be reported to the responsible supervisory authority (article 33 and 34, DSGVO), violations in connection with money laundering must be reported to the Central Office for Financial Transaction Investigations (section 43, Anti-Money Laundering Act), unlawful claiming of subventions must be disclosed to the subsidy-providing authority (section 3, Subventions Act), and incorrect information in the tax declaration must be reported to the tax authority (section 153, Tax Code). Additionally, in listed companies, criminal acts may constitute insider information in individual cases, and this must be disclosed within the framework of ad hoc publicity following market abuse regulations.

Also, there may be cases where reporting to the authorities should be considered for corporate policy and tactical reasons (eg, to avoid or mitigate negative consequences for the business).

Pursuant to section 17 paragraph 2, HinSchG, feedback will need to be provided to the whistleblower within three months of confirmation of receipt of the report or, if the receipt has not been confirmed to the whistleblower, within three months and seven days after receipt of the report. This includes the communication of planned and already taken follow-up measures as well as their reasons. Feedback to the whistleblower may only be provided to the extent that it does not affect the workplace investigation and does not prejudice the rights of the persons who are the subject of the report or who are named in the report.

For the question of whether internal investigations reports and material need to be shared with or can be seized by the public prosecutor, please see question 14.

The fundamental right to a fair hearing entails that the investigation findings must be disclosed to the employee under investigation at least once, so that they are given the opportunity to respond to them. Under Dutch administrative or criminal law, there are no general provisions requiring disclosure of investigative findings to regulators or criminal authorities. Certain specific provisions, however, apply, for example, in reportable incidents at financial institutions or certain HSE incidents that need to be disclosed to relevant regulatory authorities. Regulatory and criminal authorities, however, do have broad investigative powers enabling them to order the provision of data from subjects or involved parties in investigations they are conducting. Such information may also comprise investigation findings and underlying documents, such as interview records. If such interview records are subject to legal privilege (see question 14), they are typically not subject to disclosure to the relevant authorities.

Under Dutch civil law, a party that possesses certain records (such as investigation findings and underlying documents) is generally not required to disclose those to other parties for inspection. Parties are, in principle, not required to share information with third parties, other than relevant authorities (see above).

An exception to this rule is section 843a Dutch Code of Civil Procedure. Under section 843a, a party can be required to produce specific exhibits, if:

• the requesting party has a legitimate interest;
• the request concerns specific and well-defined records or information (ie, no fishing expeditions); and
• the documents pertain to a legal relationship (e.g., a contract or alleged tort; the requested party does not need to be a party to the relevant legal relationship).

If these requirements are met, the requestee should, in principle, disclose the requested information, except for specific exceptions. Such exceptions, which can also be relevant in the context of internal (workplace) investigations, could include confidentiality arrangements and privacy protection, to the extent that this would qualify as a compelling interest. To establish such a compelling interest, the relevant interest should outweigh the requesting party's legitimate interest regarding the requested information. This is a balancing act. Documents that are subject to legal privilege are protected against disclosure.

The employer is generally not required to disclose the final report, or the data obtained in connection with the investigation. In particular, the employer is not obliged to file a criminal complaint with the police or the public prosecutor's office.

Exceptions may arise, for example, from data protection law (see question 22) or a duty to release records may arise in a subsequent state proceeding.

Data voluntarily submitted in a proceeding in connection with the internal investigation shall be considered private opinion or party assertion.[1] If the company refuses to hand over the documents upon request, coercive measures may be used under certain circumstances.[2]