Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Austrian law does not impose an obligation on employers to conduct internal investigations and they do not have to follow a specific legal pattern when doing so. However, an obligation to conduct internal investigations may arise out of certain provisions of criminal, company or even labour law – in particular, an indirect obligation arising from an employer's duty of care, which requires them to act against employee mistreatment, such as bullying.
If such internal investigations are initiated, compliance with labour law and data protection regulations is mandatory. According to section 16 of the Austrian Civil Code (ABGB), the employer must also protect the personal rights of the individual. It is important to emphasise that a company's internal investigation is a private measure and differs from official investigations.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
There are no specific legislative requirements for workplace investigations in Germany. In 2020, the Federal Ministry of Justice presented a draft bill with regulations on internal investigations and, in particular, employee interviews. However, this law failed to pass under the previous government. The current government has announced it will take up this matter again and plans to create a precise legal framework for internal investigations. Details, timing and content remain to be seen.
Nevertheless, workplace investigations do not take place in a "lawless space". They must comply with the provisions of employment and data protection law. Further, criminal and corporate law aspects can play a role. Moreover, works council information and co-determination rights may have to be taken into account.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
In the UK, the primary employment legislation of relevance to a workplace investigation includes the Employment Rights Act 1996 (ERA 1996), the Equality Act 2010 (EA 2010), and the Employment Relations Act 1999 (ERA 1999).
Other legislation includes the retained EU law version of the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), the Investigatory Powers Act 2016 (IPA 2016) and the Investigatory Powers (Interception by Businesses etc for Monitoring and Record-keeping Purposes) Regulations 2018 (IP Regs 2018), and the Humans Rights Act 1998 (HRA 1998).
In terms of guidance, the Advisory, Conciliation and Arbitration Service (ACAS) have produced a Code of Practice on Disciplinary and Grievance Procedures (the ACAS Code) as well as a Guide to conducting workplace investigations. The Information Commissioner’s Office (ICO) have their Employment Practices Code, and other pieces of guidance on the data protection aspects of investigations (see question 7).
Most employers will have internal policies governing how workplace investigations should be conducted. The level of detail may vary considerably; public sector and regulated employers may be more prescriptive in their policies, which may even have contractual force. There may also be provisions of the employment contract that are relevant (particularly as regards suspension – see question 3).
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, an internal investigation is only initiated if there is suspicion of a violation. The decision to commence an internal investigation is up to the company, and it has to weigh the pros and cons. For limited liability companies, which are subject to the Association Responsibility Act, an internal investigation may exempt them from criminal liability. Disadvantages may include investigation costs, disruption of operations, discovery of information requiring later disclosure, possible negative media coverage and increased risk of exposure to external parties.
Investigations can relate to specific individuals, departments, or the entire company. An investigation may include various measures, such as obtaining and analysing files and documents, conducting questionnaires and employee interviews, monitoring internet use, video or telephone surveillance of employees and setting up whistleblowing hotlines. Not all measures are acceptable without restrictions. The provisions of labour law and data protection law must always be complied with.
To avoid wasting resources, the objectives of the investigation should be defined in advance. In addition, the selection and sequence of instruments to be used should be determined. A legal assessment of the chosen measures is essential to avoid legal complications.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Typical triggers for a workplace investigation may be internal hints (eg, from employees), internal audits, compliance or the legal department. However, investigations by the public prosecutor or other authorities can also lead to a workplace investigation.
There are no strict guidelines for the course of the investigation. The measures to be taken and the sequence in which they will be carried out to clarify the facts must be decided on a case-by-case basis. However, the first step should be to secure evidence. All relevant documents and records (eg, e-mails, hard disks, text messages, data carriers, copies) should be collected and employees may be interviewed. The second step should be to evaluate the evidence and the third step is to decide how to deal with the results (eg, whether any disciplinary measures should be taken or the intended procedures should be adjusted).
Irrespective of how a workplace investigation is commenced, when it comes to severe breaches of duty by an employee, a two-week exclusion period for issuing a termination for cause must be observed at all stages. This two-week period starts when the employer becomes aware of the relevant facts but is suspended as long as the employer is still investigating and collecting information, provided that the investigation is carried out swiftly.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The trigger could come from several sources, such as a grievance from a current or former employee, a complaint from external sources, a whistleblowing disclosure, or as the result of internal governance measures.
In each case, the employer will need to decide if an investigation is warranted. It may be required by internal policies or regulatory requirements in some circumstances. Consideration must be given to whether an investigation is feasible; for example, is the evidence still in existence and accessible? Are key witnesses still employed or contactable?
If the employer concludes that an investigation is warranted, it should start without unreasonable delay. The first step would usually be to set terms of reference, which outline the purpose and remit of the investigation. These should be closely drafted and continually referred to, to avoid the investigation’s scope expanding when new points arise (as they almost always will). An investigator will also need to be appointed (see question 4).
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Yes. An employer may always, and without legal restrictions, temporarily suspend an employee during an internal investigation, provided he or she continues to be paid.
However, suspending the employee does not release the employer from an obligation to terminate employment without notice. It must be clear to the employee that the suspension is a temporary measure in preparation for dismissal. A suspension does not entitle the employer to postpone the reasons for dismissal for any length of time. The longer the suspension lasts, the more likely it is that the employer intends to keep the employee.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Generally, under German employment law, an employee has a right to perform his[1] work and, therefore, suspending an employee would only be possible with the employee's consent. If an employer decided to suspend an employee without his consent, the employee could then claim his right to employment has been affected and seek a preliminary injunction before the competent labour court.
Unilaterally suspending an employee is, in principle, not permissible. Exceptions are made in cases where the employer has a legitimate interest. Typically, such legitimate interest exists after the employer has issued a notice of termination. During a workplace investigation, the employer may have a legitimate interest in suspending the employee, for example, if there is a risk that evidence may be destroyed, colleagues may be influenced, or the employee's presence may otherwise have a detrimental effect on the investigation or employer. Whether or not there is a legitimate interest must be assessed in each case. In practice, it is rare for employees to take legal action against a suspension.
In any event, during a suspension, the employee would be entitled to further payment of his salary without the employer receiving any services in return.
[1] The pronouns he/him/his shall be interpreted to mean any or all genders.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
In the UK, suspension is not seen as a neutral act, so should not be a default approach at the start of an investigation. It may be appropriate if, for example, there is a risk to the health and safety of the employee in question (or any other employee), a risk that their continued presence in the business could prejudice the investigation, or risk of continued wrongdoing.
The employer should always check the individual’s employment contract to see if it contains the power to suspend. Suspension should generally always be with pay to avoid any breach of contract. It should also be regularly reviewed and kept to a minimum duration.
Employers should not suspend employees under investigation as a knee-jerk reaction to bare allegations. There must be at least some evidence to support the need for suspension (which may require a preliminary investigation before deciding to suspend). Alternatives to suspension should always be considered, such as a temporary transfer to a different area of work, if the employee agrees or it is otherwise permitted by their contract.
If authorities such as regulators or prosecutorial agencies are involved in the investigation, they may have an opinion about an employee’s suspension, particularly if they wish to conduct interviews. Consider whether or not to involve the authorities in the suspension discussions at an early stage.
ACAS have produced a guide to suspension during investigations (last updated Sept 2022) which gives further guidance on these issues.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
There are no prescribed minimum standards for this procedure. The responsibility for conducting these investigations lies with the employers. Internal compliance or legal teams are often entrusted with this task, as they are familiar with internal protocols. In practice, these investigations are often overseen by an internal team, occasionally with the assistance of law firms or auditing firms. Those involved in the investigation must remain impartial. Potentially biased persons, such as those under investigation and their close associates, should be excluded from participation.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
It is up to the company to decide who should carry out the workplace investigation and individual investigative steps. If their staff is used, the question arises of which person or department (compliance, legal, internal audit, HR or management) should take the lead. The answer to this question may depend on various factors such as the number of employees affected by the workplace investigation and the nature of the alleged misconduct. In any event, due to various employment law and data protection issues, the HR department and the legal department should be involved.
Further, it may make sense to bring in external advisors to lead the investigation together with an internal investigation team of the company. The engagement of an external investigation team can also be advantageous concerning the two-week exclusion period for termination for cause. This period does not start to run as long as the external advisors are investigating, but only when the persons authorised to terminate employment receive the investigation report.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The investigator would typically be a line manager or HR representative. Complex cases, particularly if criminality is suspected, or cases where a senior employee is accused of misconduct, may require the investigator to be someone more senior within the organisation, or someone from the in-house legal team. Employers should bear in mind the need for someone more senior than the investigator to act as a disciplinary decisionmaker, if disciplinary action is found to be warranted.
Check the organisation’s policies and procedures, which may stipulate who can act as an investigator.
The investigator should be someone without any personal involvement in the matters under investigation, or any conflict of interest, but with sufficient knowledge of the organisation and where possible with both training and experience in conducting investigations.
The business should consider how any prospective investigator may appear if they are called as a witness in court, or to give evidence before any governmental committee or regulatory panel. They should also consider whether the employee accused of wrongdoing should have any say in the choice of investigator; this would not typically occur, but having the employee’s buy-in can increase the chances of a successful outcome to the investigation.
It is becoming increasingly common for businesses to use an external consultant or lawyer to conduct workplace investigations. This may be beneficial where it is not operationally viable within the employer organisation to have a different person conducting the investigation and the disciplinary hearing, or if the investigation is particularly sensitive or complex, or relates to a very senior employee. If an external investigator is appointed, the employer remains responsible for that investigation.
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If the investigated employee believes that individual measures violate his rights, he or she can defend him or herself against them, but he or she cannot stop the entire investigation.
In principle, the employee has various rights such as access, rectification, erasure and the right to contest the processing of his or her data (articles 12-17 and 21 GDPR). Should these principles be violated, the employee has the right to lodge a complaint with the data protection authority.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
There is no general legal remedy against the conduct of the investigation itself. However, if individual measures are carried out in violation of the law (eg, data protection rules), the employee can take legal action against the specific measure through an interim injunction. In addition, the employee has the right to complain to the works council and ask for the works council's support if he feels that the employer has discriminated against him, has treated him unfairly, or that he has been adversely affected in any other way (section 84 paragraph 1 s 2, German Works Constitution Act (BetrVG)).
Additionally, the works council has the right to take legal action against investigative measures that were carried out in violation of its co-determination rights (see question 16).
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Not usually, unless the investigation is being conducted in breach of a contractual policy (as sometimes happens in the NHS, for example), or if the investigation is not adjourned pending the outcome of criminal proceedings, and the employee can show that failure to do so is a breach of either an express term or the implied term of trust and confidence. The latter would be rare, but possible if the employee can demonstrate a real danger of a miscarriage of justice (see question 21).
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
An essential part of an internal investigation is the questioning of employees. Their statements contribute significantly to clarifying possible violations. In particular, the legal principles that apply to criminal proceedings, including the right to refuse to testify, do not apply directly to internal investigations.
Employees do not legally have to participate in such interviews. Their duty to cooperate arises indirectly from other legal provisions, in particular from employees’ duties of loyalty and service under labour law.
Austrian law suggests there is a general principle of loyalty, which triggers a “duty to inform” under some circumstances; in principle, the employee and any witnesses are expected to provide information in the context of internal investigations. While the employee is not compelled to incriminate him or herself, he or she also may not withhold work-related information that the employer legitimately wishes to protect, for the sole reason that it might incriminate him or her. The decision as to whether the employee must disclose information depends on a balancing of interests in the specific case.
Investigators and employers must strictly adhere to the permissible limits. This requires compliance with labour law, criminal law and data protection law.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Since there is no mandatory law (yet) that provides a framework for workplace investigation interviews, there are also no special protective regulations for employees acting as witnesses.
Employees have a contractual duty to participate in interviews – be it as a suspect or as a witness – as part of workplace investigations. The employee must provide truthful information based on his duty of loyalty if:
- the questions relate to his area of work;
- the employer has an interest worthy of protection in obtaining the information; and
- the requested information does not represent an excessive burden for the employee.
Whether such a burden can be assumed when the employee must make statements by which he may incriminate himself is disputed in German case law and legal literature. The German Federal Labour Court has not yet decided on this question. Since an internal workplace investigation interview is an interview under private law and not under criminal law, there are, in our view, good arguments that the employee must also make a true statement even if he incriminates himself, provided his area of work is concerned. However, some labour courts assume that in these cases such a statement could not be used in criminal proceedings.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Employees may be reluctant to be interviewed or act as witnesses as part of an investigation, perhaps due to fear of reprisals. The investigator should discuss any concerns with the employee and attempt to alleviate any fears.
In general terms, an employer should not compel any employee to provide a witness statement. There may be circumstances in which this could be seen as a reasonable management instruction (and any refusal to comply treated as a disciplinary matter), but these will be rare. Evidence that is compelled is unlikely to be particularly useful to the investigator.
It may be possible to establish an express or implied obligation for senior managers to report on another employee's misconduct – as a feature of either their employment contractual duties, their fiduciary duties or their implied duty of fidelity. However, it is unlikely, in the absence of an express obligation, that a junior employee would be compelled to give evidence against a colleague.
Employees who act as witnesses benefit from their usual employment protections, and must be treated as per their contractual and statutory rights, as well as any policy governing the investigation. If the investigation involves allegations which could involve discrimination, the EA 2010 extends protection from victimisation to “giving evidence or information in connection with proceedings under this Act”. Witnesses should therefore not be subject to any detrimental treatment because they have acted as a witness in this type of investigation. Witnesses may also be entitled to protection as whistleblowers if their evidence amounts to a protected disclosure (see question 9).
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
All data processing must comply with the principles of article 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity). Personal data may only be collected and processed for specific, lawful purposes.
The admissibility of data processing depends on whether the suspicion relates to a criminal offence or another violation of the law. If the data processing is relevant to criminal law, article 10 GDPR or section 4(3) of the Austrian Data Protection Act (DSG) applies. If the investigations are exclusively to clarify violations under civil or labour law, such as an assertion of claims for damages or if they are general investigations to establish a criminal offence, the permissibility of data processing is based on article 6 or, for data covered by article 9 GDPR, on this provision.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
When collecting data (in physical or digital form), the employer must ensure compliance with the data protection principles according to the General Data Protection Regulation (DSGVO) and the German Data Protection Act (BDSG). These principles include, among other things, that data collection must be carried out lawfully (principle of legality) and transparently (transparency principle) and must be comprehensively documented – specifically concerning the purpose of the workplace investigation – to be able to prove compliance with data protection.
The principle of legality states that data may only be collected on a legal basis (ie, there must either be a law authorising this or the employee must have consented to the collection of his data).
The transparency principle may constitute a special challenge during workplace investigations. Under the transparency principle, the employee must be generally informed about the collection of his data. This includes information on who processes the data, the purposes for which it is processed and whether the data is made available to third parties. However, there may be a risk of collusion, particularly when electronic data has to be reviewed, and thus the success of the investigation may be jeopardised if the relevant employee is comprehensively informed in advance. Accordingly, the employer should check, with the assistance of the data protection officer, whether the obligation to provide information may be dispensed with. This may be the case if providing the information would impair the assertion, exercise or defence of legal claims and the interests of the employer in not providing the information outweigh the interests of the employee. The respective circumstances and employer's considerations should be well documented in each case.
Regardless of whether the employee is informed about the investigation, to prevent data loss, the employee should be sent a so-called hold notice (ie, a prohibition to delete data). Additionally, to prevent automatic deletion, blocking mechanisms should also be implemented.
When gathering evidence by searching the employee's possessions or files, the employee's privacy rights also need to be observed (see question 8).
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Most forms of workplace surveillance involve the processing of personal data that is regulated by the UK GDPR and DPA 2018. The UK GDPR requires that personal data must be processed lawfully, fairly and in a transparent manner; it also must be adequate, relevant and limited to what is necessary concerning the purposes for which it is processed.
Employers should ensure that they have undertaken a data protection impact assessment (DPIA) to document the lawful basis for processing data, and informed employees that their files may be searched before proceeding. They should also ideally have a clear policy on the use of electronic communications systems, detailing when, how and for what purpose they may be monitored by the employer. In Q3 2023 the ICO produced new guidance on monitoring workers (https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/) and on email and security (https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/email-and-security/) which employers should bear in mind during investigations. Employers should also be prepared to make the data collected through employee monitoring available to employees, should the employee submit a data subject access request under the DPA 2018.
The IPA 2016 makes it unlawful in certain circumstances to intercept a communication (such as one on an employer’s telephone or computer network) in the course of its transmission in the UK. The IPA Regs 2018 set out the circumstances where, in a business context, such interception will be lawful. These include monitoring or recording communications without consent to: establish the existence of facts; ascertain compliance with the regulatory or self-regulatory practices or procedures relevant to the business; ascertain or demonstrate standards which are or ought to be achieved by persons using the system; and prevent or detect crime.
Covert surveillance can lead to a breach of an employee's right to privacy under the HRA 1998. The employer will need to consider if covert surveillance is proportionate, which will depend on the facts of each case. Employers should be careful not to use the investigation as an excuse to undertake a "fishing expedition", and should avoid gathering material that is obviously personal, such as private messages and diary entries (see question 8).
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, it is advisable to back up data, documents, emails and other records promptly to prevent their deletion. Admissibility depends on whether the data originates from personal or professional records and whether they are legally relevant. If internal investigations are carried out based on a specific suspicion of a criminal offence, it is the processing of legally relevant data. In general, the processing of professional emails or documents is permissible. If there is no professional connection, access to private files and documents is only permitted in exceptional cases.
If, for example, using a business email account for private purposes is not allowed, the employer can usually assume that the data processed is only "general" data within the meaning of article 6 GDPR and that such data processing is justified by a balancing of interests. However, if private use is allowed, the data may still be part of a special category within the meaning of article 9 GDPR. In such cases, the justification for its use must be based on one of the grounds explicitly mentioned in article 9(2) GDPR.
The employer must protect the employee's rights under section 16 of the ABGB and must consider the proportionality of the interference. Only the least restrictive means – the method that least interferes with the employee's rights – may be used to obtain the necessary information. The employer's interest in obtaining the information must outweigh the employee's interest in protecting his or her rights. The implementation or initiation of controls by the employer does not automatically constitute an interference with personal rights, as being subject to the employer's rights of control is part of the position as an employee.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Files and documents that are purely business-related – whether in physical or digital form – may, in principle, be inspected by the employer without restriction. The employee has no right to refuse inspection.
When searching business laptops, computers, phones and e-mail accounts, a distinction must be made as to whether private use is permitted (or at least tolerated) or not: if the employee is allowed to use the items exclusively for business purposes, the employer may monitor and control them. If private use is permitted, the employee's right to privacy must be observed for private files, as must the protection of the secrecy of correspondence. Accordingly, the employer must avoid accessing private documents, files and e-mails. However, a review of private documents, files and e-mails may be permissible in the event of particularly serious violations if the employer's interest in the review outweighs the employee's interest in safeguarding his right to privacy. Generally, employers should allow private use of electronic devices only if employees have previously consented to the terms of use (including searches in certain cases).
A search of the employee's workplace by the employer is, in principle, permissible. However, a search of personal items (eg, bags, clothes, personal mobile phone) is generally only permissible with the employee's consent. Similarly to the review of digital personal data, a search of personal items may be permitted, however, in the event of particularly serious violations if the employer's interest in the search outweighs the employee's right to privacy.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
It may sometimes be difficult to draw a clear distinction between the property of the employer and employees’ personal property, both physical and electronic, particularly where employees are increasingly working from home. Employers should ideally have a clear policy to delineate what is the employer’s property.
Employees typically have a reasonable expectation of privacy at work, although how far this extends will depend on the circumstances of each case and the employer’s policies.
When it comes to employees’ personal possessions, a search should only be conducted in exceptional circumstances where there is a clear, legitimate justification. The employer should always consider whether it is possible to establish the relevant facts through the collection of other evidence. Even if the employee’s contract specifies that it is permitted, employers would usually require explicit employee consent for the search to be lawful. The employee should be invited to be present during the search; if this is not feasible, another independent third party (such as a manager) should be present.
If the employee refuses to consent to a search of their personal possessions, their refusal should not be used to assume guilt; the investigator should explore why the employee has refused and seek to resolve their concerns if possible.
If the employer believes that a criminal offence has been committed it should consider involving the police, since they have wider powers to search individuals and their possessions.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The provisions of the Whistleblowing Directive must be respected. In Austria, these have been implemented through the Whistleblower Protection Act (HSchG). If the whistleblower or the persons concerned fall within the scope of the Directive, their identity must be protected. Only authorised persons may access the report. Retaliatory measures are invalid or must be reversed. Within a maximum of seven days, the whistleblower must receive a confirmation of his or her complaint. Feedback to the whistleblower must then be provided within a maximum of three months.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
In 2023, Germany has implemented the EU Whistleblowing Directive into national law with the German Whistleblower Protection Act (HinSchG).
The German Whistleblower Protection Act provides that companies with at least 50 employees must establish internal reporting channels as further set out in the law. Among other things, the confidentiality of the whistleblower as well as of the individuals affected by the report must be protected.
Further, whistleblowers must be protected from negative consequences that may arise from their reports. If the employment of a whistleblower were terminated or if the whistleblower were to be denied promotion after reporting a violation, the employer would have to prove that this was not related to the whistleblowing but was based on justified reasons.
Employers should familiarise themselves with the provisions of the new law.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The employer should first identify which individuals may have protection as whistleblowers. This could be a current or former employee who raises the initial complaint, a co-worker who gives evidence as part of the investigation, or the accused employee.
In each case, consider whether a “protected disclosure” has been made (under Part IVA ERA 1996). This requires analysis of the subject matter of the disclosure, how it is made, and a reasonable belief that it is made in the public interest.
Employers must then ensure there is no detrimental treatment or dismissal of any worker on the grounds of their protected disclosure. Although the causation test for these purposes is not straightforward, as a general rule if the protected disclosure has a “material influence” on the decision to discipline or dismiss, there may be liability. Individual managers may be personally liable alongside the employer. Compensation for whistleblowing cases is uncapped, meaning businesses and individuals can face significant financial and reputational exposure.
What this means in practical terms is that the employer should promote a “speak-up” culture and, where protected disclosures are made, ensure they are handled by a team who are properly trained in how to do so.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If the report and the whistleblower fall within the scope of the Whistleblowing Directive, his or her identity must be protected. From a data protection perspective, the principles of the DSG must be observed to protect the legitimate confidentiality of the individuals concerned.
Furthermore, the employer should ensure that information is only disclosed to trustworthy persons to avoid pre-judgements.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Depending on the subject of the investigation and the severity and significance of the suspected violation, employees who are involved in the workplace investigation may already have to maintain confidentiality based on their contractual duties. The prerequisite for this is that the employer has a legitimate interest in maintaining confidentiality. Criminal acts are not subject to confidentiality, but there is also no general obligation for the employee to report or disclose a criminal act to the authorities or the public prosecutor. However, reporting to the competent authorities may be required in certain cases (see question 25).
Lawyers are bound by professional confidentiality and are generally not allowed to provide information about any information they receive from their clients. An exception exists, for example, if the lawyer must provide information to defend himself in court proceedings. There is also no absolute protection against the seizure of documents at an attorney’s office (see question 14).
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Workplace investigations should usually be conducted on a confidential basis, so that only those involved in the investigation are aware of its existence and subject matter. The need to maintain confidentiality about both the fact of the investigation, and any content discussed with an investigator, should be emphasised to all those involved. It may also be necessary to explain that a breach of confidentiality could be viewed as a disciplinary matter. Appropriate exceptions must, however, be made to allow employees to speak to any relevant employee or trade union representative, legal adviser and potentially the police or other regulators. Confidentiality provisions cannot override the rights of workers to make protected disclosures (see question 9).
In some situations, such as those involving a wide-ranging investigation into the organisation’s working practices and culture, it may be more appropriate to investigate a more “open” basis, and inform employees and other stakeholders.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The purpose of internal investigations would be jeopardised by fully informing a suspected employee beforehand, as it would allow him or her to hide or destroy possible evidence, plan his testimony or coordinate with other employees.
There is no legal requirement to inform the employee of the allegations or suspicions.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
In principle, the employer does not have to inform the employees about the investigation. Furthermore, there is no obligation to inform the "suspect" about the specific content of the workplace investigation itself and the allegations against him.
However, if personal data relating to the employee is collected and reviewed, the employee must be informed under German data protection principles (see question 7).
If the employer considers issuing a notice of termination based on the suspicion of wrongdoing, the employee must be allowed to comment on the allegations against him before receiving the termination notice. This requires that the employee be properly informed about the allegations and evidence against him. However, until the time of such a hearing, which usually follows the workplace investigation, there is no obligation on the part of the employer to inform the employee concerned about ongoing investigations.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The employee must be able to effectively challenge the allegations against them. They should be given the terms of reference for the investigation, and any relevant documentary evidence, including copies of witness statements.
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
When dealing with reports and persons covered by the HSchG, the provisions on identity protection must be followed. In all internal investigations, only authorised persons should receive information.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
There is no general obligation on the part of the employer to disclose to the employee concerned the identity of the complainant, witnesses or other sources of information during the workplace investigation.
However, as described in question 11, the employee must be sufficiently informed of the allegations before a termination based on suspicion of wrongdoing is issued. This may also require disclosing the complainant's or witnesses' identity or other sources of information. In addition, the employer would have the burden of proof in the context of a legal dispute (eg, termination protection proceedings or proceedings about the legality of certain investigation measures) and may have to name witnesses and disclose sources of information.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Only in exceptional circumstances, such as where there is a genuine risk of retaliation. Anonymising a complaint puts the employee under investigation at a significant disadvantage, as they may be unable to properly challenge the evidence against them. It can also impair the effectiveness of the investigation. Employers should, therefore, not provide any guarantees of confidentiality to complainants or to employees who are to act as witnesses. That said, employers should think carefully about any necessary disclosure of names or facts. This can be particularly relevant where the witness is subordinate to the employee being investigated.
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
According to section 6(1) of the DSG, employees who have access to personal data in the course of their professional activities must maintain data confidentiality and continue to do so even after termination of their employment.
Non-disclosure agreements can generally be used to achieve this but are subject to certain restrictions. They may not be used to conceal criminal activity, violate the privacy rights of individuals, circumvent legal disclosure obligations, prevent the exercise of legal rights or contain clauses that violate existing laws, in particular data protection regulations.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
In principle, it is possible to conclude non-disclosure agreements with external consultants of the investigation or with employees involved in the investigation. However, regarding external lawyers, a non-disclosure agreement is not necessary since lawyers are already subject to professional confidentiality. Concerning employees, it is rare in Germany to conclude confidentiality agreements in connection with a workplace investigation.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Only to a limited extent. As a matter of law, NDAs cannot prevent a worker from making a protected disclosure, or reporting a crime to the police. As a matter of the regulatory obligations of solicitors, NDAs should not be used in other ways, including as a means of influencing the content of disclosures, or by using warranties, indemnities and clawback clauses in a way that is designed to, or has the effect of, improperly preventing or inhibiting permitted reporting or disclosures (see the SRA’s warning notice on the use of NDAs).
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If a lawyer is involved in the investigation, communication between the lawyer and client is subject to legal professional privilege. These communications must not be disclosed. Any documents collected by an internal audit can be seized and used. However, a document created by a lawyer can only be seized. The same applies to other professional representatives of parties, such as notaries and auditors, as potential holders of professional secrecy.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
The legal situation regarding attorney-client privilege for investigation materials compiled by external advisors (in particular investigation reports) is unclear. In principle, there is no absolute protection against seizure by the public prosecutor in the relationship between client and lawyer. Such protection only exists in the relationship between the accused in a criminal proceeding and his criminal defence attorney.
In recent years, German courts have repeatedly issued different rulings on the question of whether investigation materials (at the company itself or a lawyer's office) may be seized. In 2018, the Federal Constitutional Court (BVerfG) ruled that the seizure of documents at the offices of an international law firm that is not based in Germany, and therefore can not invoke German constitutional rights, is lawful. However, the BVerfG did not comment on what would apply to seizures at law firms based in Germany.
For violations that could lead to the company itself being exposed to investigative proceedings at some point and possibly having to defend itself, there are, in our view, good arguments for investigation materials being subject to attorney-client privilege. Additionally, the lawyer's hand file, in which he usually keeps his notes on the case or minutes of conversations with his client, may also not be seized. In all other cases, under the current legal situation, there is a risk that the materials may be seized, even in the office of the company’s lawyer. From a practical point of view, it is nevertheless advisable to label investigative materials, especially interview protocols and investigation reports, with a notice that they are confidential documents subject to attorney-client privilege and to store them not at the company’s premises but in an attorney’s office.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
There are two limited types of privilege which may be relevant to investigations:
- Legal Advice Privilege (LAP), which protects communications between lawyers and their clients provided they are confidential and made for the dominant purpose of obtaining or giving legal advice; and
- Litigation Privilege (LP), which can extend to communications between a lawyer and client or third parties, but only where the dominant purpose of the communication is to prepare for or conduct existing or contemplated litigation.
If the relevant tests for privilege are met and apply to materials generated in the course of the investigation, the employer retains greater control over their subsequent disclosure to third parties. The materials would, for example, be protected against disclosure in any subject access request under the DPA 2018.
That said, privilege can be difficult to maintain in investigations, particularly where litigation is not active or in contemplation. Interview notes and witness statements may not attract privilege, particularly if these were conducted with employees who do not fall within the narrow definition of “the client” for LAP purposes (which is limited to employees who are capable of seeking and receiving advice on behalf of the employer).
If privilege applies to investigation materials, the investigator should keep tight control on what documents are created and how they are circulated, to avoid inadvertent disclosure and potential waiver of privilege.
Bear in mind that even if privilege applies to certain investigation materials, there may be a need to create disclosable documentation at a later stage, particularly if there is a decision to instigate disciplinary action.
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, an employee is not entitled to have a representative present during investigations. However, he is free to reach out to the works council or independently contact a lawyer for advice. The employer must hear the works council upon his or her request on all matters concerning the interests of employees at the company. Once disciplinary proceedings begin, the employee has the right to be represented by a lawyer.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Generally, the employee is free to engage a lawyer at his own expense if he needs legal advice in connection with a workplace investigation. However, the employee does not have a right to consult a lawyer at the employer's expense or to have a lawyer present at an interview. Similarly, the employee is not entitled to be accompanied, for example, by a works council member, during an interview. The involvement of legal counsel may potentially inflate the investigation unnecessarily, making it longer and more expensive. However, it may be advisable from the employer's point of view to (proactively) allow legal representation (eg, to increase the employee's willingness to testify or to create trust) and even to bear the legal counsel's fees. Specifically, if the employee is already a defendant in criminal proceedings or runs the risk of incriminating himself, he should be allowed to be accompanied by a lawyer, otherwise he may be unwilling to cooperate.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
There is no statutory right to be accompanied at a disciplinary investigation meeting; the right only applies to disciplinary hearings (section 10 ERA 1999). There is, however, a right to be accompanied by a colleague or trade union representative at any grievance investigation meeting, under section 10, although this is only in respect of the person who raises the grievance (not any person who is the subject of the grievance or other witnesses).
That said, the employer’s policies and contracts should be checked to see if they contain a broader right to be accompanied. Employers may also need to allow a broader right to be accompanied as a reasonable adjustment for disabled employees (for example, to allow family members or medical professionals to be present). Equally, where the allegations are sufficiently serious (eg, criminal, especially if the findings are likely to be shared with the police), it may be appropriate to allow legal representation during the investigation.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The Austrian Labour Constitution Act (ArbVG) does not contain any provisions regarding workplace investigations. The employee has the right to address the works council but is not entitled to have the works council comply with his or her request.
The works council's opportunities for participation are conclusively regulated. Certain investigative or control measures may require the consent or co-determination of the works council.
Under section 96(1)3 ArbVG, the consent of the works council is required if the employer wishes to introduce and maintain control measures or technical systems for monitoring employees that affect human dignity, such as video surveillance or specific staff questionnaires. If there is no works council, the consent of each individual employee is required.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
The works council does not have a general right of co-determination on whether and in what way a workplace investigation is carried out. However, workplace investigations may trigger co-determination rights of the works council in specific cases, as outlined below. If co-determination rights come into consideration, the employer must inform the works council about the investigation to put the works council in a position to assess whether or not co-determination rights are affected.
In connection with workplace investigations, the works council may have a co-determination right in the following cases:
- If e-mail accounts and data are screened by using technical devices that are suitable to monitor the behaviour or performance of employees (section 87 paragraph 1 no. 6, BetrVG).
- If, for example, the employer instructs all or a large group of employees to participate in interviews, the co-determination right of the works council regarding the rules of operation of the establishment and the conduct of employees in the establishment (section 87 paragraph 1 no. 1, BetrVG) may be affected.
- If standardised questionnaires are used in employee interviews, provided they are used for a large group of interviewed employees (section 94, BetrVG).
If co-determination rights exist in the specific case, the works council has the right to co-determine the type and structure of the specific investigative measures used (ie, the relevant investigative measure cannot be carried out without the works council's consent). To avoid any conflicts, the employer should set up, together with the works council, general rules about workplace investigations well ahead of any investigation.
Trade unions have no right of co-determination in workplace investigations.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Aside from the statutory right to be accompanied (see question 15), any further involvement by the works council or trade union would depend on the terms of the relevant works council or trade union recognition agreement.
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
There is no additional support for the employees concerned. However, the employer may offer support measures to the employees to ensure better cooperation. The choice of support measures is at the employer's discretion. For example, the employer could offer to bear lawyer’s fees, if the employee is cooperative. Such decisions must always be made on a case-by-case basis.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Generally, when employees may also use their devices for private purposes, the employer should ensure it allows its employees to tag their private data as "private". This tagging may facilitate the differentiation between business data (relevant for the investigation) and (non-usable) private data in the event of e-mail and electronic data screening.
In addition, the employer may, in appropriate cases, assure the employee that, if there is complete and truthful disclosure of facts to be clarified, the employer will refrain from imposing sanctions under labour and civil law (eg, a warning, termination of employment and the assertion of any claims for damages). In practice, assistance in finding a lawyer and the payment of legal fees is sometimes offered. However, such amnesty programmes are commonly only useful if there is a large number of cases that are particularly complex, poorly documented and difficult to resolve without amnesty offers.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The employer needs to consider the health and wellbeing of all staff involved in the investigation, since this can be a very stressful process. The employer and investigator can assist by ensuring that all parties are aware of what is expected of them. Timings are also important; having a clear and expeditious timetable and providing updates if the timetable slips will help. Regular catch-ups by managers can be used to monitor how employees are coping. They should be reminded about any resources to help support them, such as employee helplines or employee assistance programmes.
Where an employer has particular concerns about an employee’s health, a referral to occupational health can assist. The employer may also wish to consider whether employees should be given additional time off, or whether any other adjustments can be made to the investigation process. For particularly serious allegations, the employer may consider facilitating the provision of independent legal advice for the employee, or making a contribution towards legal fees.
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Provided the employer complies with labour law and data protection regulations, internal investigations are lawful and are not regarded as administrative or judicial proceedings. If legal consequences for not cooperating, such as dismissal, are threatened by the employer or his investigators, the offence of coercion under section 105 of the Austrian Criminal Code could be fulfilled.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
As seen in question 6, the employee must participate in interviews requested by the employer under certain circumstances. Generally, the employee must provide truthful information even if it is incriminating.
The raising of a grievance by the employee does not directly affect the workplace investigation (ie, the investigation does not have to be stopped and the employee's obligation to provide truthful information continues). This may change, however, once the court decides that certain measures were conducted unlawfully and must, therefore, cease.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
This is a relatively common tactic. The employer will need to decide whether to suspend the investigation to deal with the grievance, or conclude the investigation first, depending on the circumstances. It would usually be difficult to deal with both the grievance and the investigation concurrently, unless the facts overlap significantly.
If the employee becomes uncooperative and refuses to take part in the investigation, they should be told that the investigator may need to make a decision in the absence of their account based on all the other evidence available. The employer may decide to treat it as failure to comply with a reasonable management instruction and take disciplinary action on that basis.
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The involved employee's sick leave does not affect the internal investigation. Most investigative measures can be carried out without the employee's presence.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Workplace investigations that do not require the presence or active cooperation of the employee may also start or continue during the employee's absence due to illness. If the employee's cooperation is required, for example for an interview, the employer can only instruct the employee to participate despite an existing illness if certain narrow conditions are met:
Regarding staff meetings at the company, the German Federal Labour Court has ruled that the employer can only instruct the employee to attend the staff meeting during illness if
- there is an urgent operational reason for doing so, which does not allow the instruction to be postponed until after the end of the incapacity to work; and
- the employee's presence at the company is urgently required and can be expected of him.
Similar rules are likely to apply to the employee's presence for workplace investigations.
Urgent operational reasons that cannot be postponed could exist, for example, if during the employee's absence due to illness, there is a risk that evidence will be lost (eg, where only the employee affected has access to certain files or data) or there is a risk of significant damage to the employer if workplace investigations are stopped until after the employee's return.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
This is a relatively common occurrence. It would usually be appropriate to suspend the investigation temporarily, to determine how serious the health issue is and when the employee may be fit to return. The investigator should consider what adjustments or allowances can be made to progress the investigation despite the employee’s absence. If their evidence has not yet been gathered, the employee may be invited to provide a written statement instead of attending an investigation meeting, or the meeting could be held remotely or at a neutral location. If none of this is possible, it may be difficult to fully conclude the investigation.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Private investigations differ from criminal or regulatory investigations. Nevertheless, even for internal investigations, it is advisable to collect evidence in a way that can be admitted in court, as it may have to be presented to the authorities during the investigation process. Generally, any evidence obtained in the course of an internal investigation may be admitted in subsequent administrative or judicial proceedings.
If the evidence is not voluntarily surrendered, seizure or confiscation is possible. Since official proceedings are often lengthy, suspension is not always recommended.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
In principle, workplace investigations and criminal or regulatory investigations are not dependent on each other and can therefore be conducted in parallel. German public prosecutors have an ambivalent view of internal investigations. On the one hand, they are to some extent sceptical about workplace investigations. They fear that evidence will be destroyed and facts manipulated. On the other hand, they often do not have the resources to conduct investigations as extensive as the companies do. In any event, due to the principle of official investigation that applies in Germany, the investigating public prosecutor's office will usually reassess the results of an internal investigation and conduct independent investigations.
Regarding whether internal investigations reports and material have to be shared with or can be seized by the public prosecutor, please see question 14.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
This situation needs to be handled with caution. It is important to remember that regulatory or criminal proceedings, and employment proceedings, are separate; while there may be an overlap of alleged misconduct, they are usually addressing different questions, with different standards of proof. The outcome in one should not, therefore, be treated as determinative of the other.
Where the employee is suspected of, charged with, or convicted of, a criminal or regulatory offence, the employer should still investigate the facts as far as possible, come to a view about them and consider whether the conduct is sufficiently serious to warrant instituting the disciplinary procedure.
In terms of timing, there are no concrete rules governing how an employer must proceed in the circumstances of a parallel criminal investigation. Much will depend upon the circumstances of the case, the length of delay, the size of and resources available to the employer, and the preferences (if expressed) of the external authority. If the employer is concerned about prejudicing the regulatory or criminal proceedings or otherwise prefers to wait for their conclusion before instigating internal proceedings, they are unlikely to be criticised for delaying. The accused employee may also be advised not to provide a statement in the workplace investigation for fear of a negative impact on the criminal investigation. This would make it difficult to proceed with the workplace investigation, unless the employer is confident it has strong enough evidence to justify any disciplinary action subsequently taken.
On the other hand, regulatory or criminal investigations may take months or years to progress; it may not be realistic for the employer to keep any investigation in abeyance for so long. This is particularly true when the accused employee is suspended on full pay, witness recollections will grow less reliable, and the alleged victim may feel unable to return to work until the matter is resolved.
In these circumstances, the employer may continue with their investigation if they believe it is reasonable to do so, and consultations have commenced with the external agency. The court will usually only intervene if the employee can show that the continuation of the disciplinary proceedings will give rise to a real danger that there would be a miscarriage of justice in the criminal proceedings.
Employers should consider carefully whether and when to involve the police in allegations of employee misconduct. Employers must be careful not to subject their employees to the heavy burden of potential criminal proceedings without the most careful consideration, and a genuine and reasonable belief that the case, if established, might justify the epithet “criminal” being applied to the employee's conduct.
Where the police are called in, they should not be asked to conduct any investigation on behalf of the employer, nor should they be present at any meeting or disciplinary meeting. The employer should, however, communicate with the police to see if they have a strong view about whether the internal process should be stayed, or whether they should interview witnesses first.
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
The employer has no general obligation to proactively inform the employee about the outcome of an investigation. However, if personal data was collected, the employee has the right to request certain information: the purpose of the data collection, type of data, recipients of the data, the planned storage period of the data, his right to have the data corrected or deleted, his right to complain to a supervisory authority, and information on the source of the data.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The employee would usually get a copy of the investigation report (which would typically have the relevant evidence considered by the investigator annexed to the report, unless the report is privileged). It is not usual practice to allow the employee to make representations on the report before it is finalised.
The report will set out what facts the investigator was able to establish by reference to the available evidence. The investigator’s role is to gather and consider evidence about what did or did not happen, so the employer can understand if there is a case to answer. This is distinct from determining culpability, which is something for the manager conducting the disciplinary hearing (not the investigator) to determine, in addition to deciding any disciplinary sanction.
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The employer may impose consequences under labour law. Consequences may include verbal or written warnings, transfers or other disciplinary measures. The employer may also implement training or educational measures if the issue is due to the employee's lack of knowledge. In serious cases, besides dismissal without notice – for example. if the employer seeks damages –legal action (civil or criminal) may be taken against the employee.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Depending on the results of the investigation, different steps may have to be taken by the employer. Specifically, the following should be considered:
- in certain cases, there may be an obligation (or at least good reason) to share the results of the workplace investigation with the authorities (see question 25);
- filing of a criminal complaint against the employee;
- disciplinary measures against the employee such as a warning, ordinary termination or termination for cause;
- assessing and asserting claims for damages against the employee;
- offering compliance training to the relevant employees or introducing additional measures to prevent further violations;
- if there is a risk that the company itself is exposed to investigative proceedings at some point and may have to defend itself, investigation materials should be stored at the company's external attorney's office; and
- depending on the individual circumstances of the case and to mitigate potential reputational damage, proactively informing the public (eg, by issuing a press release) may be beneficial.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The investigator may recommend further action, but should not decide whether allegations are true, or suggest a possible sanction or prejudge what the outcome of any subsequent disciplinary process would be.
The employer will need to consider whether it is necessary to commence disciplinary proceedings. For regulated businesses, there may be an obligation to inform their regulator of the investigation outcome. In some circumstances, the employer may feel the need to make an internal or external announcement about the outcome, and any action it intends to take to implement any recommendations made by the investigator. There may also need to be certain updates to policies or procedures as a result of the investigation.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
It is up to management to decide which results should be disclosed and to whom. It is important to know who the persons concerned are and who has an interest in disclosure.
From a legal perspective, disclosure must follow the GDPR. Internal policies can specify how the results are to be handled. Works Council Agreements (WCAs) may also contain regulations on how to deal with internal investigations and the disclosure of results.
There is no requirement to publish the results of the investigation, but it may be advisable to cooperate with the authorities. This is particularly the case if the employer has suffered damage or is himself threatened with prosecution. The release of investigation results can be compelled through the courts.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
At the end of the workplace investigation, the results are presented to the company's management bodies so that they can make a decision. This may be a mere summary of the facts, or it may contain a legal assessment and recommendation for action.
There is no general obligation to report compliance violations to the police or public prosecutor's office. For some violations, there are statutory disclosure requirements. For example, data protection violations must be reported to the responsible supervisory authority (article 33 and 34, DSGVO), violations in connection with money laundering must be reported to the Central Office for Financial Transaction Investigations (section 43, Anti-Money Laundering Act), unlawful claiming of subventions must be disclosed to the subsidy-providing authority (section 3, Subventions Act), and incorrect information in the tax declaration must be reported to the tax authority (section 153, Tax Code). Additionally, in listed companies, criminal acts may constitute insider information in individual cases, and this must be disclosed within the framework of ad hoc publicity following market abuse regulations.
Also, there may be cases where reporting to the authorities should be considered for corporate policy and tactical reasons (eg, to avoid or mitigate negative consequences for the business).
Pursuant to section 17 paragraph 2, HinSchG, feedback will need to be provided to the whistleblower within three months of confirmation of receipt of the report or, if the receipt has not been confirmed to the whistleblower, within three months and seven days after receipt of the report. This includes the communication of planned and already taken follow-up measures as well as their reasons. Feedback to the whistleblower may only be provided to the extent that it does not affect the workplace investigation and does not prejudice the rights of the persons who are the subject of the report or who are named in the report.
For the question of whether internal investigations reports and material need to be shared with or can be seized by the public prosecutor, please see question 14.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
Primarily, the investigation findings are disclosed to the employer and the employee under investigation. In scenarios involving allegations of a breach of regulatory duty or criminal law, the authorities may have the power to compel disclosure of any non-privileged materials generated in the investigation. Powers of compulsion do not apply to privileged materials.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
If there is no special statutory storage period (which is the case for investigative reports and findings), personal data may only be stored for as long as is necessary for the purposes for which they are collected. As soon as the data is no longer required, it must be deleted. In connection with workplace investigations, the question arises as to how this obligation to delete personal data relates to the company's corporate interests. From the company's perspective, there may well be legitimate interests that speak in favour of retaining existing data for as long as possible. Under the data protection regulations of the DSGVO and the BDSG, data can be stored for as long as it is required for the assertion, exercise or defence of (civil) legal claims. This means that the data can, in any event, be saved at least as long as any measures related to the workplace investigation have not yet been completed and any legal disputes have not yet been concluded.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
The investigation outcome may not need to be noted on the accused employee’s record at all. Usually only the outcome of any subsequent disciplinary or grievance process would be noted, rather than the prior investigation.
The employer should keep the investigation report for as long as it remains relevant. This would usually be no longer than six years, unless regulatory obligations dictate otherwise. The report along with all documentation and witness statements gathered during the investigation should be retained securely and confidentially but for no longer than is absolutely necessary under the requirements of the DPA 2018 and the employer's data protection policies and procedures. There may be additional retention requirements in a regulated context; the position for each particular business and employee should be checked.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
This relates to the severity of the error. Data protection violations can lead to fines by the data protection authority or claims for damages. If consequences under labour law, such as dismissal, have taken place due to erroneous investigations or incorrect results, the employee concerned can assert claims under labour law or seek damages.
Furthermore, there may be consequences under criminal law. This is particularly the case if documents have been falsified in the course of the investigation. It is, therefore, crucial that employers exercise diligence and due process in internal investigations. Investigations must be conducted transparently and lawfully.
Germany
Germany
- at Hengeler Mueller
- at Hengeler Mueller
- at Hengeler Mueller
Different consequences may result from mistakes made by the employer (or its advisors) in the course of the workplace investigation. For example, if the employer has violated the data protection provisions of the DSGVO or BDSG, this may result in fines. This may also result in claims for damages by the employee. The employee may also have a claim for damages if it turns out that the suspicion of misconduct on the part of the employee is not confirmed and the employer has arbitrarily conducted workplace investigations without sufficient cause.
United Kingdom
United Kingdom
- at Slaughter and May
- at Slaughter and May
A reasonable investigation is a key component of a fair disciplinary process. Errors in the investigation could therefore expose the employer to liability for unfair dismissal under ERA 1996.
Failure to follow the ACAS Code does not automatically make an employer liable in any proceedings taken against it. However, an employment tribunal will take the ACAS Code into account when deciding whether an employer has behaved fairly, and has the power to increase awards by up to 25% where it believes an employer has unreasonably failed to follow the ACAS Code's provisions.
There may be liability for breach of the employee’s contract of employment if the employer breaches aspects of the investigation policy that are contractual, any contractual provisions relating to suspension, or otherwise conducts the investigation in a manner that breaches the implied term of trust and confidence.
There may be liability under the EA 2010 if the investigation is conducted in a discriminatory manner, which could include not making reasonable adjustments to the process for disabled employees.
Where the investigation involves protected disclosures, there may be liability under the whistleblowing provisions of ERA 1996 if the whistleblower is subjected to detriment or dismissal on the grounds of their protected disclosures.
Improper evidence gathering or processing may be actionable under the DPA 2018, IPA 2016 or the IP Regs 2018.
Finally, there may be common law claims in some circumstances (for example where reports need to be made to regulators, which in turn may affect the relevant employee’s future employment prospects) for defamation, or, more unusually, for stress-related personal injury.