Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Netherlands
Netherlands
- at De Brauw Blackstone Westbroek
- at De Brauw Blackstone Westbroek
- at De Brauw Blackstone Westbroek
There is no statutory regime for employee witnesses in internal (workplace) investigations and, hence, no specific statutory regime for legal protection. However, as part of the idea that employees have to act in line with good employment practices (section 7:611 DCC), employees, who potentially acquired knowledge in a work-related context on the subject matter of an investigation, are typically required vis-à-vis their employer to participate in such internal investigations. The required degree of cooperation will depend on the type and nature of the investigation and the matter that is being investigated. The principle of “good employment practices” in turn requires the employer to be guided by proportionality and subsidiarity considerations: which information is relevant to the investigation and what is the least burdensome means of collecting such information?
This may also impact the degree to which an employer can involve employee witnesses in an investigation. Increased prudence should be observed, among other things, if the relevant employee witnesses may themselves become implicated in the investigation or when the employer envisages sharing certain investigative findings with regulatory or criminal authorities, for instance as part of cooperation arrangements in an ongoing investigation. In such cases, the relevant employee should at least be allowed to retain legal counsel before continuing interview procedures.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Employees may be reluctant to be interviewed or act as witnesses as part of an investigation, perhaps due to fear of reprisals. The investigator should discuss any concerns with the employee and attempt to alleviate any fears.
In general terms, an employer should not compel any employee to provide a witness statement. There may be circumstances in which this could be seen as a reasonable management instruction (and any refusal to comply treated as a disciplinary matter), but these will be rare. Evidence that is compelled is unlikely to be particularly useful to the investigator.
It may be possible to establish an express or implied obligation for senior managers to report on another employee's misconduct – as a feature of either their employment contractual duties, their fiduciary duties or their implied duty of fidelity. However, it is unlikely, in the absence of an express obligation, that a junior employee would be compelled to give evidence against a colleague.
Employees who act as witnesses benefit from their usual employment protections, and must be treated as per their contractual and statutory rights, as well as any policy governing the investigation. If the investigation involves allegations which could involve discrimination, the EA 2010 extends protection from victimisation to “giving evidence or information in connection with proceedings under this Act”. Witnesses should therefore not be subject to any detrimental treatment because they have acted as a witness in this type of investigation. Witnesses may also be entitled to protection as whistleblowers if their evidence amounts to a protected disclosure (see question 9).
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Netherlands
Netherlands
- at De Brauw Blackstone Westbroek
- at De Brauw Blackstone Westbroek
- at De Brauw Blackstone Westbroek
Dutch data protection rules are based on the EU Data Protection Directive. The employer has to notify the Dutch Data Protection Authority when processing personal data as part of an internal investigation. Given that the notification can be accessed publicly, it is recommended that the employer give a sufficiently high-level description of the case. In addition, the description should be sufficiently broad to include the entire investigation, and any future expansions of the scope of the investigation. Often companies make filings for all future internal investigations, without referring to specific matters.
The employer has to notify employees whose personal data is being processed about – among other things – the purposes of the investigation and any other relevant information. According to the Dutch Data Protection Act, this information obligation may only be suspended on restricted grounds, i.e. if the purpose of the investigation is the prevention, detection and prosecution of crimes and postponement is necessary for the interests of the investigation (e.g., because there is a risk of losing evidence, or collusion by individuals coordinating responses before being interviewed)). These exceptions on the duty to inform involved persons must be interpreted very restrictively. As soon as the reason for postponement is no longer applicable (e.g., because the evidence has been secured), the individuals need to be informed.
Dutch data protection law does not require the consent of employees. Consent given by employees, however, also cannot compensate for a lack of legitimate purpose or unnecessary or disproportionate data processing, as the consent given by an employee to its employer is not considered to be voluntary given the inequality of power between them.
Furthermore, internal company policies may contain specific data protection rules.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Most forms of workplace surveillance involve the processing of personal data that is regulated by the UK GDPR and DPA 2018. The UK GDPR requires that personal data must be processed lawfully, fairly and in a transparent manner; it also must be adequate, relevant and limited to what is necessary concerning the purposes for which it is processed.
Employers should ensure that they have undertaken a data protection impact assessment (DPIA) to document the lawful basis for processing data, and informed employees that their files may be searched before proceeding. They should also ideally have a clear policy on the use of electronic communications systems, detailing when, how and for what purpose they may be monitored by the employer. In Q3 2023 the ICO produced new guidance on monitoring workers (https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/) and on email and security (https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/email-and-security/) which employers should bear in mind during investigations. Employers should also be prepared to make the data collected through employee monitoring available to employees, should the employee submit a data subject access request under the DPA 2018.
The IPA 2016 makes it unlawful in certain circumstances to intercept a communication (such as one on an employer’s telephone or computer network) in the course of its transmission in the UK. The IPA Regs 2018 set out the circumstances where, in a business context, such interception will be lawful. These include monitoring or recording communications without consent to: establish the existence of facts; ascertain compliance with the regulatory or self-regulatory practices or procedures relevant to the business; ascertain or demonstrate standards which are or ought to be achieved by persons using the system; and prevent or detect crime.
Covert surveillance can lead to a breach of an employee's right to privacy under the HRA 1998. The employer will need to consider if covert surveillance is proportionate, which will depend on the facts of each case. Employers should be careful not to use the investigation as an excuse to undertake a "fishing expedition", and should avoid gathering material that is obviously personal, such as private messages and diary entries (see question 8).