Workplace Investigations

Before commencing a workplace investigation, an employer must review the terms of any applicable employment contract, policy, procedure or industrial instrument. These documents will likely contain clauses that will dictate the investigation process.

There is also a significant body of common law that dictates how an investigation should be conducted and the procedural fairness that should be afforded to those involved. To ensure a workplace investigation is procedurally fair, employers must consider several factors, including:

• putting all allegations to the respondent in a manner which does not suggest a pre-determination of the outcome;
• conducting the investigation in a timely manner;
• providing the respondent with the opportunity to respond to the allegations;
• conducting a fair investigation process;
• making an unbiased (and not pre-determined) decision; and
• permitting the respondent and complainant to involve a support person or union representative.

Employers should also consider the additional steps they can take to conduct a best-practice investigation, including:

• being thorough and taking the time to plan the investigation;
• communicating clearly and fairly;
• considering whether the allegations are indicative of a wider workplace behaviour problem;
• maintaining confidentiality; and
• preventing victimisation.

Austrian law does not impose an obligation on employers to conduct internal investigations and they do not have to follow a specific legal pattern when doing so. However, an obligation to conduct internal investigations may arise out of certain provisions of criminal, company or even labour law – in particular, an indirect obligation arising from an employer's duty of care, which requires them to act against employee mistreatment, such as bullying.

If such internal investigations are initiated, compliance with labour law and data protection regulations is mandatory. According to section 16 of the Austrian Civil Code (ABGB), the employer must also protect the personal rights of the individual. It is important to emphasise that a company's internal investigation is a private measure and differs from official investigations.

Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.

A workplace investigation will generally be triggered by an employee making a complaint; however, issues may also be brought to the attention of an employer through an anonymous tip, by suppliers or contractors, from customers or because of observations and hearsay.

Complaints can be made directly to Human Resources (HR), anonymously, by email to a line manager or a third party. While complaints do not need to be written and can be informal, brief or verbal, complaints of this nature can make the process harder and more information may be required.

The receipt of a complaint does not necessarily mean that an employer needs to undertake an investigation immediately. A grievance policy ordinarily contains a multi-step approach to dealing with complaints, starting with internal resolution options such as informal discussions, conciliation and mediation. However, an investigation should be commenced where:

• the complaint alleges serious misconduct or unlawful conduct;
• the employer is required to conduct a workplace investigation as per an employment contract, policy, procedure or industrial instrument; or
• the complaint is complex and requires clarity on what has occurred to establish the facts.

In general, an internal investigation is only initiated if there is suspicion of a violation. The decision to commence an internal investigation is up to the company, and it has to weigh the pros and cons. For limited liability companies, which are subject to the Association Responsibility Act, an internal investigation may exempt them from criminal liability. Disadvantages may include investigation costs, disruption of operations, discovery of information requiring later disclosure, possible negative media coverage and increased risk of exposure to external parties.

Investigations can relate to specific individuals, departments, or the entire company. An investigation may include various measures, such as obtaining and analysing files and documents, conducting questionnaires and employee interviews, monitoring internet use, video or telephone surveillance of employees and setting up whistleblowing hotlines. Not all measures are acceptable without restrictions. The provisions of labour law and data protection law must always be complied with.

To avoid wasting resources, the objectives of the investigation should be defined in advance. In addition, the selection and sequence of instruments to be used should be determined. A legal assessment of the chosen measures is essential to avoid legal complications.

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

It is an important consideration as to whether any of the employees involved in the investigation should be suspended, stood down or asked to undertake alternative duties for the period of the investigation. This decision will need to be made taking into consideration the nature of the complaint, any further damage to workplace relationships that could be caused by employees continuing to interact with each other, and potential work, health and safety issues.

It should not be automatic that the respondent is suspended as the employer will need to consider whether this is necessary in the circumstances. However, a period of suspension should be considered where:

• the allegations involve serious misconduct;
• there is a risk that the conduct will continue throughout the investigation;
• the respondent’s presence could exacerbate the situation; or
• the respondent’s presence could be disruptive to the investigation.

As an alternative to suspension, other options include working from home, performing amended duties or moving to a different workspace.

If an employee is suspended then they should ordinarily receive their full pay for this period. There are some exceptions to this, for example, if the employee is a casual employee or if a policy, employment contract or other industrial instrument allows the employee to be suspended without pay.

Generally, there is no minimum or maximum period a suspension should last, as this will depend on the length of the investigation.

Yes. An employer may always, and without legal restrictions, temporarily suspend an employee during an internal investigation, provided he or she continues to be paid.

However, suspending the employee does not release the employer from an obligation to terminate employment without notice. It must be clear to the employee that the suspension is a temporary measure in preparation for dismissal. A suspension does not entitle the employer to postpone the reasons for dismissal for any length of time. The longer the suspension lasts, the more likely it is that the employer intends to keep the employee.

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

Once the decision to undertake a workplace investigation has been made, it is important to decide who is the most appropriate person to conduct the investigation. For the investigation process to run smoothly a single lead investigator should be selected, although they may work with a larger team. The lead investigator and investigation team can be internally or externally appointed.

In deciding whether to appoint an external investigator an employer should consider:

• the nature of the allegations;
• the seniority of the respondent;
• whether a fair investigation can be conducted internally without any actual or perceived bias;
• whether there is a dedicated HR department with someone who has the required capability, skills and experience to conduct the investigation; and
• whether the employer wants the investigation to be covered by legal professional privilege.

If the employer decides to investigate the matter internally without appointing a third party, then the investigator does not need to have any specific qualifications. However, it is prudent to confirm that the investigator has the time and skills to conduct the investigation and that they can be objective.   

There are no prescribed minimum standards for this procedure. The responsibility for conducting these investigations lies with the employers. Internal compliance or legal teams are often entrusted with this task, as they are familiar with internal protocols. In practice, these investigations are often overseen by an internal team, occasionally with the assistance of law firms or auditing firms. Those involved in the investigation must remain impartial. Potentially biased persons, such as those under investigation and their close associates, should be excluded from participation.

The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation

The respondent has several rights including the right to have the complaint investigated in a fair, impartial and adequate manner, to hear the allegations in full and to not be victimised. However, there is no avenue for a respondent to bring legal action to stop a procedurally fair investigation.

In 2014, Australia introduced an anti-bullying jurisdiction which gave the Fair Work Commission (FWC) the powers to issue a Stop Bullying Order. There have been circumstances where it has been successfully argued that an investigation itself amounted to bullying and accordingly the respondent applied to the FWC for a Stop Bullying Order to suspend the investigation.

If the investigated employee believes that individual measures violate his rights, he or she can defend him or herself against them, but he or she cannot stop the entire investigation.

In principle, the employee has various rights such as access, rectification, erasure and the right to contest the processing of his or her data (articles 12-17 and 21 GDPR). Should these principles be violated, the employee has the right to lodge a complaint with the data protection authority.

The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.

Co-workers can be interviewed as part of an investigation where they are witnesses to a complaint.  If the employee refuses to attend the interview or is generally not cooperating with the investigation, the reasons for this will need to be considered carefully by the employer. Employers should consider whether there can be any amendments made to the interview process to accommodate the employee. However, an employer can make a reasonable and lawful direction to an employee to attend an interview. If an employee fails to comply with a lawful and reasonable direction, then it may constitute grounds for disciplinary action.  

Witnesses who are employees are entitled to the legal protections that ordinarily attach to their employment, including not being bullied, discriminated against, or harassed and having their health and safety protected. Employers should also ensure that witnesses are not victimised as a result of participating in the investigation and that confidentiality is maintained.

An essential part of an internal investigation is the questioning of employees. Their statements contribute significantly to clarifying possible violations. In particular, the legal principles that apply to criminal proceedings, including the right to refuse to testify, do not apply directly to internal investigations.

Employees do not legally have to participate in such interviews. Their duty to cooperate arises indirectly from other legal provisions, in particular from employees’ duties of loyalty and service under labour law.

Austrian law suggests there is a general principle of loyalty, which triggers a “duty to inform” under some circumstances; in principle, the employee and any witnesses are expected to provide information in the context of internal investigations. While the employee is not compelled to incriminate him or herself, he or she also may not withhold work-related information that the employer legitimately wishes to protect, for the sole reason that it might incriminate him or her. The decision as to whether the employee must disclose information depends on a balancing of interests in the specific case.

Investigators and employers must strictly adhere to the permissible limits. This requires compliance with labour law, criminal law and data protection law.

There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing. 

As part of an investigation, the investigator may want to collect evidence such as camera footage from CCTV, swipe card records, computer records, telephone records or recordings and GPS tracking. There are state-based workplace surveillance laws that operate in each jurisdiction in Australia. The laws recognise that employers are justified in monitoring workplaces for proper purposes, but this is balanced against employees’ reasonable expectations of privacy.

The Privacy Act 1988 (Cth) (Privacy Act) also regulates how certain organisations handle personal information, sensitive personal information and employee records. The Privacy Act contains 13 privacy principles that regulate the collection and management of information. Employers should familiarise themselves with the privacy principles before conducting any investigation to ensure they are not in breach when gathering evidence.

All data processing must comply with the principles of article 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity). Personal data may only be collected and processed for specific, lawful purposes.

The admissibility of data processing depends on whether the suspicion relates to a criminal offence or another violation of the law. If the data processing is relevant to criminal law, article 10 GDPR or section 4(3) of the Austrian Data Protection Act (DSG) applies. If the investigations are exclusively to clarify violations under civil or labour law, such as an assertion of claims for damages or if they are general investigations to establish a criminal offence, the permissibility of data processing is based on article 6 or, for data covered by article 9 GDPR, on this provision.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

The starting position is that there is no general right for an employer to search an employee’s possessions. However, an employer may be able to undertake a search in circumstances where:

• the employee consents to the search;
• there is a “right to search” contained in a contract, policy, procedure or industrial instrument; or
• the request to search constitutes a lawful and reasonable direction.

If an employee agrees to a search of their possessions, this consent should be confirmed in writing. If the employee does not consent then the employer can issue a direction to the employee. If the direction is lawful and reasonable, and the employee does not comply, then disciplinary action may be considered.

In general, it is advisable to back up data, documents, emails and other records promptly to prevent their deletion. Admissibility depends on whether the data originates from personal or professional records and whether they are legally relevant. If internal investigations are carried out based on a specific suspicion of a criminal offence, it is the processing of legally relevant data. In general, the processing of professional emails or documents is permissible. If there is no professional connection, access to private files and documents is only permitted in exceptional cases.

If, for example, using a business email account for private purposes is not allowed, the employer can usually assume that the data processed is only "general" data within the meaning of article 6 GDPR and that such data processing is justified by a balancing of interests. However, if private use is allowed, the data may still be part of a special category within the meaning of article 9 GDPR. In such cases, the justification for its use must be based on one of the grounds explicitly mentioned in article 9(2) GDPR.

The employer must protect the employee's rights under section 16 of the ABGB and must consider the proportionality of the interference. Only the least restrictive means – the method that least interferes with the employee's rights – may be used to obtain the necessary information. The employer's interest in obtaining the information must outweigh the employee's interest in protecting his or her rights. The implementation or initiation of controls by the employer does not automatically constitute an interference with personal rights, as being subject to the employer's rights of control is part of the position as an employee.

Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).

A complaint will be a whistleblowing complaint where a complainant has reasonable grounds to suspect that the information they are disclosing about the organisation concerns misconduct or an improper state of affairs or circumstances. The information can be about the organisation or an officer or employee of the organisation engaging in conduct that:

• breaches the Corporations Act 2001 (Cth);
• breaches other financial sector laws;
• breaches any other law punishable by 12 months’ imprisonment; or
• represents a danger to the public or the financial system.

Since 2020, all public companies, large proprietary companies and trustees of registrable superannuation entities in Australia are required to have a whistleblower policy. Employers conducting an investigation will need to follow the processes outlined in their policy.

One of the key differences when conducting an investigation that involves whistleblowing is identity protection and the ability of the whistleblower to disclose anonymously and remain anonymous.

The provisions of the Whistleblowing Directive must be respected. In Austria, these have been implemented through the Whistleblower Protection Act (HSchG). If the whistleblower or the persons concerned fall within the scope of the Directive, their identity must be protected. Only authorised persons may access the report. Retaliatory measures are invalid or must be reversed. Within a maximum of seven days, the whistleblower must receive a confirmation of his or her complaint. Feedback to the whistleblower must then be provided within a maximum of three months.

In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).

Confidentiality protects the interests of the persons involved in the investigation as well as the integrity of the investigation. Before providing information as part of the investigation, employers should direct the complainant, respondent or witnesses to sign confidentiality agreements. This agreement should direct the person to refrain from discussing the investigation or matters that are the subject of the investigation with any person other than the investigator.

It is also best practice for participants in the investigation to be directed not to victimise (threaten or subject to any detriment) any persons who are witnesses to or are otherwise involved in the investigation.

After an investigation, employers should write to the complainant, respondent and any witnesses reminding them of their ongoing confidentiality obligations.

If the report and the whistleblower fall within the scope of the Whistleblowing Directive, his or her identity must be protected. From a data protection perspective, the principles of the DSG must be observed to protect the legitimate confidentiality of the individuals concerned.

Furthermore, the employer should ensure that information is only disclosed to trustworthy persons to avoid pre-judgements.

Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).

To ensure procedural fairness, the allegations must be put to the respondent in writing in advance of the investigation interview. The allegations must be specific, but the respondent does not need to be provided with a copy of the original complaint. The respondent should also be informed that if the allegations are substantiated they may result in disciplinary action up to and including the termination of the employee’s employment.

The purpose of internal investigations would be jeopardised by fully informing a suspected employee beforehand, as it would allow him or her to hide or destroy possible evidence, plan his testimony or coordinate with other employees.

There is no legal requirement to inform the employee of the allegations or suspicions.

The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.

Employers will generally take steps to treat complaints sensitively and confidentially. However, because of the obligations employers have, confidentiality cannot be guaranteed as part of the investigation and the complainant, respondent and witnesses should be made aware of this.

Understandably, the complainant or witnesses may wish to remain anonymous. However, because the details of the allegations need to be put to the respondent so that they can provide an informed response or explanation, the source of the information will often need to be disclosed.  

Employers can take steps to “ringfence” the investigation by asking employees to sign a confidentiality agreement. This will protect the interests of the participants of the investigation and uphold the integrity of the investigation.

When dealing with reports and persons covered by the HSchG, the provisions on identity protection must be followed. In all internal investigations, only authorised persons should receive information.

See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.

Non-disclosure agreements, also known as confidentiality agreements, can be used to maintain the confidentiality of the investigation. In this agreement, the employee will be directed to maintain confidentiality concerning the investigation and matters that are the subject of the investigation, and not speak to anyone outside the investigation team about the investigation without authorisation.

Confidentiality agreements are legal documents. Employees should be informed that a breach of the confidentiality agreement could result in disciplinary action being taken against them, up to and including termination of their employment.  

According to section 6(1) of the DSG, employees who have access to personal data in the course of their professional activities must maintain data confidentiality and continue to do so even after termination of their employment.

Non-disclosure agreements can generally be used to achieve this but are subject to certain restrictions. They may not be used to conceal criminal activity, violate the privacy rights of individuals, circumvent legal disclosure obligations, prevent the exercise of legal rights or contain clauses that violate existing laws, in particular data protection regulations.

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

Investigation materials are not privileged and an employer may be required to disclose them in subsequent legal proceedings. If an employer is concerned about privilege attaching to an investigation, they should engage a legal practitioner to facilitate the investigation.

Employers who are concerned about privilege attaching to investigation materials should also consider the method of a lawyer’s engagement. The lawyer should be expressly engaged to investigate, report and to assist the employer by providing legal advice. Additional benefits can be achieved if the legal practitioner engages an external investigator to investigate the complaint and prepare the investigation report. Privilege will attach to the investigation materials because they are prepared for the lawyer to allow the lawyer to provide legal advice to the employer.

It is important that employers do not expressly or inadvertently waive privilege. For example, by disclosing the investigation report or substantial contents of the investigation report. It is a balance between providing information to the respondent and complainant about the outcome of the investigation and disclosing too much information.

If a lawyer is involved in the investigation, communication between the lawyer and client is subject to legal professional privilege. These communications must not be disclosed. Any documents collected by an internal audit can be seized and used. However, a document created by a lawyer can only be seized. The same applies to other professional representatives of parties, such as notaries and auditors, as potential holders of professional secrecy.

The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.

The respondent should be given the opportunity to have a support person present during the investigation meeting and any subsequent conversations that concern the termination of their employment. Failure to allow the respondent to have a support person may result in any subsequent termination of employment being found to be an unfair dismissal. This is because under the Fair Work Act 2009 (Cth), when the FWC is considering whether a dismissal is an unfair dismissal, they must consider any unreasonable refusal by the employer to allow the person to have a support person present to assist at any discussions relating to dismissal.

Employers should request that the respondent inform them 48 hours before any meeting of the identity of their support person. This will allow the employer to confirm the support person’s suitability. A support person can be a legal representative or trade union representative, but the role of a support person is limited to assisting the employee and they are not there to act as an advocate or representative.

In general, an employee is not entitled to have a representative present during investigations. However, he is free to reach out to the works council or independently contact a lawyer for advice. The employer must hear the works council upon his or her request on all matters concerning the interests of employees at the company. Once disciplinary proceedings begin, the employee has the right to be represented by a lawyer.

The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.

A trade union does not have any right to be informed of, or involved in, an investigation by an employer. However, an employee may request that their support person is a trade union member or trade union representative. This is appropriate and should be permitted.

Employers should review the terms of an employment contract, policy or industrial instrument as this may contain terms regarding trade union involvement. In particular, heavily-unionised workplaces may contain enterprise agreements which contain relevant clauses.

The Austrian Labour Constitution Act (ArbVG) does not contain any provisions regarding workplace investigations. The employee has the right to address the works council but is not entitled to have the works council comply with his or her request.

The works council's opportunities for participation are conclusively regulated. Certain investigative or control measures may require the consent or co-determination of the works council.

Under section 96(1)3 ArbVG, the consent of the works council is required if the employer wishes to introduce and maintain control measures or technical systems for monitoring employees that affect human dignity, such as video surveillance or specific staff questionnaires. If there is no works council, the consent of each individual employee is required.

A works council or a trade union does not have a role in the investigation.

Employers should be conscious that the investigation may have an impact on the complainant, respondent and witnesses. Employers will need to consider how to support their employees. The level of support provided will often depend on the size of the organisation and programmes already in place.

Many employers have an Employee Assistance Programme and employees should be reminded about this programme if further support or assistance is required. An employer’s HR team may also be able to assist if an employee has concerns about the progress of an investigation.

There is no additional support for the employees concerned. However, the employer may offer support measures to the employees to ensure better cooperation. The choice of support measures is at the employer's discretion. For example, the employer could offer to bear lawyer’s fees, if the employee is cooperative. Such decisions must always be made on a case-by-case basis.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

During the investigation, unrelated matters can come to light, usually made by the complainant or a witness during the interview process. Unrelated matters may take the form of further complaints against the respondent (but on grounds that are outside the scope of the current investigation), or entirely different complaints.

An employer should first assess the nature of the new allegations. Entirely unrelated matters should be dealt with separately. However, if the matter relates to the respondent it may be appropriate to obtain consent from the respondent and complainant for the scope of the investigation to be widened. It is important to remember that all allegations must be put to the respondent and they must be given an opportunity to respond.

The employer must decide how to deal with this information. Possible options are to initiate separate and unrelated investigations or to extend the ongoing investigations.

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

If a respondent raises a grievance during the investigation this should be dealt with under any employment contract, grievance policy or industrial instrument. This may involve investigating and responding accordingly. The content of the grievance should be carefully considered, but in many circumstances it is appropriate for the initial investigation to continue. Multiple investigations can be run simultaneously.

Provided the employer complies with labour law and data protection regulations, internal investigations are lawful and are not regarded as administrative or judicial proceedings. If legal consequences for not cooperating, such as dismissal, are threatened by the employer or his investigators, the offence of coercion under section 105 of the Austrian Criminal Code could be fulfilled.

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

It is not uncommon for respondents to an investigation to take personal or carer’s leave (sick leave) claiming that they are suffering from stress or anxiety. If this occurs, employers need to act appropriately, but this does not necessarily involve stopping the investigation process.

Employers should:

• assess the medical evidence to ascertain the respondent’s condition and determine how long they are likely to be unwell;
• avoid exacerbating the condition;
• determine whether the employee is unfit to attend the investigation meeting;
• take into consideration the evidence of other witnesses;
• consider delaying the investigation for a short period; and
• consider conducting the interviews in other ways, for example, in writing.

While all efforts should be made to accommodate an employee who has taken personal or carer’s leave during an investigation, if the respondent does not participate in the investigation, the investigation report may be prepared based on the available evidence.

The involved employee's sick leave does not affect the internal investigation. Most investigative measures can be carried out without the employee's presence.

As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.

There are circumstances of misconduct in the workplace that can also constitute criminal conduct and be subject to a criminal or regulatory investigation. This can include physical or sexual assault, theft, fraud, illegal drug use or stalking.

An employer can proceed with an investigation to determine whether the respondent engaged in misconduct on the balance of probabilities. The employer can terminate an employee’s employment before the outcome of any criminal investigation. However, the employer must keep in mind that procedural fairness must be afforded to the employee, particularly in circumstances where an employee is awaiting the outcome of a court proceeding.  

Alternatively, an employer may decide to suspend the employee pending the outcome of the criminal investigation. If a criminal act has been committed, then the employer may decide to terminate the employee’s employment.

Co-operation with the police and regulatory authorities is sensible and evidence can be compelled by the police or regulators by, for example, a subpoena, search warrant or an order for production.

Private investigations differ from criminal or regulatory investigations. Nevertheless, even for internal investigations, it is advisable to collect evidence in a way that can be admitted in court, as it may have to be presented to the authorities during the investigation process. Generally, any evidence obtained in the course of an internal investigation may be admitted in subsequent administrative or judicial proceedings.

If the evidence is not voluntarily surrendered, seizure or confiscation is possible. Since official proceedings are often lengthy, suspension is not always recommended.

Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.

Managing the outcome of the investigation is an important part of the process. The respondent must be informed of the outcome of the investigation as soon as possible after the investigation is completed and the decision-maker has decided how to proceed.

The investigator must decide whether the claims have been substantiated on the balance of probabilities and the decision-maker must decide what disciplinary action, if any, will be taken. Any disciplinary action should be proportionate to the seriousness of the misconduct. Disciplinary action could include a warning, counselling, monitoring of behaviour or termination of employment.

Ideally, the outcome of the investigation should be communicated to the respondent and complainant in writing, setting out the allegations that have been substantiated, unsubstantiated or whether there is insufficient evidence to make a finding.

The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.

The employer's conclusions from the investigation.

The investigator should prepare a written report setting out whether the allegations are substantiated, unsubstantiated or cannot be determined due to insufficient evidence. This report should be used for internal purposes only. Accordingly, the report should not be shared with the complainant, respondent or witnesses unless required by law, the employer’s policies or another industrial instrument. It is particularly important not to share the investigation report should the employer wish to maintain privilege in respect of the report.

The employer should determine the intended recipients and format of the report in advance. In many cases, it may be advisable to publish only the results of the investigation to protect the privacy and reputation of the individuals concerned, as this may help to minimise any potential negative impact on them.

However, under certain circumstances or due to legal requirements, full disclosure of the investigation report may be required, especially if transparency and disclosure are necessary to maintain public or investor confidence.

The employee under investigation may only be informed of the conclusions.

Employers must take steps to deal with the findings of the investigation and implement any recommendations promptly. This may involve commencing disciplinary action.

The complainant and respondent need to be informed of the outcome of the investigation. All witnesses who participated in the investigation should also be thanked for their contribution and advised that the investigation has been completed. All participants in an investigation should be reminded of their ongoing obligations concerning confidentiality and victimisation.

If an employer decides that it may be appropriate to terminate a respondent’s employment, the employee must be provided with the opportunity to respond and to “show cause” as to why their employment should not be terminated.

The investigation report along with any other materials produced during the investigation should be kept in a separate confidential file.

Employers should also consider whether action should be taken at an organisational level to prevent future misconduct. In particular, employers are required to take a proactive approach to addressing systemic workplace cultural issues in relation to sex discrimination, sexual harassment and victimisation.

The employer may impose consequences under labour law. Consequences may include verbal or written warnings, transfers or other disciplinary measures. The employer may also implement training or educational measures if the issue is due to the employee's lack of knowledge. In serious cases, besides dismissal without notice – for example. if the employer seeks damages –legal action (civil or criminal) may be taken against the employee.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

The outcome of the investigation must be disclosed to the complainant and respondent. If there is a concurrent police or regulatory investigation, they may request a copy of the investigation report. Employers should generally cooperate with regulatory authorities, but should be careful about disclosing the investigation report as this may be privileged and privacy obligations must be considered. Employers should consider only disclosing the investigation findings and interview records if compelled to do so by regulators or police.

Interview reports, the investigation report and communications about the investigation should be kept in a separate file. The file should be marked confidential and access to the file should be restricted.

If proceedings are commenced, the investigation materials may be subject to disclosure unless legal professional privilege can be asserted, see above.

It is up to management to decide which results should be disclosed and to whom. It is important to know who the persons concerned are and who has an interest in disclosure.

From a legal perspective, disclosure must follow the GDPR. Internal policies can specify how the results are to be handled. Works Council Agreements (WCAs) may also contain regulations on how to deal with internal investigations and the disclosure of results.

There is no requirement to publish the results of the investigation, but it may be advisable to cooperate with the authorities. This is particularly the case if the employer has suffered damage or is himself threatened with prosecution. The release of investigation results can be compelled through the courts.

In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.

There are legal requirements related to the time you must keep certain employee records in Australia, such as pay slips and time sheets. However, there are no laws concerning disciplinary records.

Employers can rely on previous misconduct to justify an employee’s termination of employment where it can be shown it is part of a course of conduct. Accordingly, if complaints have been substantiated, and disciplinary action has been taken, these records should be maintained. However, if a significant period has elapsed since the misconduct, an employer should carefully consider whether it is appropriate to rely on this past behaviour to justify future disciplinary action for similar conduct.

Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

It is important for employers to conduct procedurally fair investigations that result in a fair outcome. Failure to do so may expose the employer to various claims by an employee. The most common type of claim following an investigation is an unfair dismissal claim. If a respondent’s employment is terminated because of an investigation, they may be eligible to bring an unfair dismissal claim in the FWC alleging their dismissal was harsh, unjust or unreasonable.

An employee may also bring a bullying, discrimination or general protections claim. These claims may be made even where the investigation does not result in the employee’s dismissal.

If an employer has departed from the procedures set out in their policies, or they have not followed the terms of an employee’s employment contract or another applicable industrial instrument then an employee may bring a claim for breach of contract.

Australia has also recently introduced the “Respect@Work” legislation which places a positive obligation on employers to take reasonable and proportionate measures to eliminate sex discrimination, sexual harassment and victimisation, as far as possible. Accordingly, an employer who is not perceived to have taken a proactive and fair approach to these workplace issues faces significant legal exposure.

Failure to conduct an investigation properly (or a failure to conduct an investigation in circumstances where it is needed) can also cause significant reputational and financial risk.

This relates to the severity of the error. Data protection violations can lead to fines by the data protection authority or claims for damages. If consequences under labour law, such as dismissal, have taken place due to erroneous investigations or incorrect results, the employee concerned can assert claims under labour law or seek damages.

Furthermore, there may be consequences under criminal law. This is particularly the case if documents have been falsified in the course of the investigation. It is, therefore, crucial that employers exercise diligence and due process in internal investigations. Investigations must be conducted transparently and lawfully.

There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.