Workplace Investigations

The workplace investigation can be exercised by an internal (ad hoc) investigation department of the company itself, for example under the direction of the internal audit department or compliance department. This is possible if there is sufficient manpower with the necessary independence, knowledge and experience. Case law, however, shows that courts tend to be more critical of internal investigations than external investigations. For more complex and sensitive investigations, a forensic accountant or lawyer is often involved. The advantage of involving a lawyer is that the investigation and its outcome are covered by privilege. This guarantees the confidentiality of the investigation, also regarding supervisors and investigating authorities. Yet, at the same time, there is increasing debate about the role of lawyers as investigators, given their inherent bias to work in the interests of their client (the employer).

The investigation starts with a plan of approach that must be signed by the contractor. This plan of approach outlines the legal framework of the investigation, such as the scope, the means to be used, how it will deal with data, the use of experts, how the interviews will be conducted, the way of reporting and confidentiality. Furthermore, there must be a protocol for how the investigator conducts the investigation and that applies to all parties involved.

Gathering information can be done in various ways. For example:

• An inventory can be made of the household effects of a company. In the event of theft, an inventory can be an appropriate means of establishing exactly what has been stolen.
• An investigation of the books: this is an investigation of all documents of the company. These are not private documents of employees, but documents of the company itself. For an investigator, an interview can be a good way to gather more information, for example by interviewing witnesses. In practice, there are almost always several interviews with the suspects, the employer and other people involved.
• Open source research, which often involves researching a person's social media, or public documents relevant to the research. In principle, “open sources” refers to all public documents in the world; nowadays, many public documents are digitised.
• A workplace search, which includes everything present in the workplace: diaries, computer files, e-mails, letters, and even the contents of a wastebasket.
• A digital data investigation: this is a frequently used tool in fraud investigations. Most communication and documents are digital nowadays. It is, therefore, very likely that evidence can be found in digital data. Each of these means of investigation must respect the principles of an internal investigation and comply with the GDPR principles .

There are no legal requirements in this respect – it depends on the internal policies or practices at a given working establishment. Based on our experience – an internal investigation usually commences with a preliminary assessment of a reported irregularity. If the preliminary assessment leads to a conclusion that a reported situation may be an irregularity, an investigation is launched by appointing a commission or team that conducts the investigation or selecting an investigator. Then, a plan of investigation is established. Depending on the circumstances, the investigation plan may involve a collection of documents or files, their analysis, and interviews with a victim, witnesses or a subject (although the procedure depends on the type of case, internal rules and practice). At the end of the process, the report is prepared by the commission or team with facts established during the process, recommendations, and other suggestions as to the investigated issue.

Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).

For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]

If the employee under investigation goes off sick during the investigation, they will generally be treated as a regular employee on sick leave, meaning they are entitled to continued salary payment and that both employer and employee have a reintegration obligation. This entails regular consults with the company doctor to determine how recovery progresses and when the employee can return to work. If the employer suspects that the employee is merely calling in sick to delay the investigation and such suspicion is not confirmed by the company doctor, the employer can ask the Employees Insurance Agency (UWV) to give a second opinion. When it is determined that the employee is in fact fit for work, the employer can oblige the employee to return to work and cooperate with the investigation. If the employee fails to comply, the employer can – after due warning – suspend the employee's salary payment.

This may prolong the investigation, as the employee may be unable to participate for a time (if the employee is not able to work, in many cases he or she will not be able to participate in proceedings that requires some level of engagement and psychophysical ability). Also, an employee is protected against termination of an employment contract with notice during sick leave. During such a period, the employer may only terminate his or her employment contract without notice (with immediate effect).

The time spent on the internal investigation by the employee should be counted as working time[1]. The general statutory and internal company principles on sick leave apply. Sick leave for which the respective employee is not responsible must generally be compensated (article 324a paragraph 1 and article 324b, Swiss Code of Obligations). During certain periods of sick leave (blocking period), the employer may not ordinarily terminate the employment contract; however, immediate termination for cause remains possible.

The duration of the blocking period depends on the employee's seniority, amounting to 30 days in the employee's first year of service, 90 days in the employee's second to ninth year of service and 180 days thereafter (article 336c paragraph 1 (lit. c), Swiss Code of Obligations).