Workplace Investigations

Before commencing a workplace investigation, an employer must review the terms of any applicable employment contract, policy, procedure or industrial instrument. These documents will likely contain clauses that will dictate the investigation process.

There is also a significant body of common law that dictates how an investigation should be conducted and the procedural fairness that should be afforded to those involved. To ensure a workplace investigation is procedurally fair, employers must consider several factors, including:

• putting all allegations to the respondent in a manner which does not suggest a pre-determination of the outcome;
• conducting the investigation in a timely manner;
• providing the respondent with the opportunity to respond to the allegations;
• conducting a fair investigation process;
• making an unbiased (and not pre-determined) decision; and
• permitting the respondent and complainant to involve a support person or union representative.

Employers should also consider the additional steps they can take to conduct a best-practice investigation, including:

• being thorough and taking the time to plan the investigation;
• communicating clearly and fairly;
• considering whether the allegations are indicative of a wider workplace behaviour problem;
• maintaining confidentiality; and
• preventing victimisation.

Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.

A workplace investigation will generally be triggered by an employee making a complaint; however, issues may also be brought to the attention of an employer through an anonymous tip, by suppliers or contractors, from customers or because of observations and hearsay.

Complaints can be made directly to Human Resources (HR), anonymously, by email to a line manager or a third party. While complaints do not need to be written and can be informal, brief or verbal, complaints of this nature can make the process harder and more information may be required.

The receipt of a complaint does not necessarily mean that an employer needs to undertake an investigation immediately. A grievance policy ordinarily contains a multi-step approach to dealing with complaints, starting with internal resolution options such as informal discussions, conciliation and mediation. However, an investigation should be commenced where:

• the complaint alleges serious misconduct or unlawful conduct;
• the employer is required to conduct a workplace investigation as per an employment contract, policy, procedure or industrial instrument; or
• the complaint is complex and requires clarity on what has occurred to establish the facts.

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

It is an important consideration as to whether any of the employees involved in the investigation should be suspended, stood down or asked to undertake alternative duties for the period of the investigation. This decision will need to be made taking into consideration the nature of the complaint, any further damage to workplace relationships that could be caused by employees continuing to interact with each other, and potential work, health and safety issues.

It should not be automatic that the respondent is suspended as the employer will need to consider whether this is necessary in the circumstances. However, a period of suspension should be considered where:

• the allegations involve serious misconduct;
• there is a risk that the conduct will continue throughout the investigation;
• the respondent’s presence could exacerbate the situation; or
• the respondent’s presence could be disruptive to the investigation.

As an alternative to suspension, other options include working from home, performing amended duties or moving to a different workspace.

If an employee is suspended then they should ordinarily receive their full pay for this period. There are some exceptions to this, for example, if the employee is a casual employee or if a policy, employment contract or other industrial instrument allows the employee to be suspended without pay.

Generally, there is no minimum or maximum period a suspension should last, as this will depend on the length of the investigation.

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

Once the decision to undertake a workplace investigation has been made, it is important to decide who is the most appropriate person to conduct the investigation. For the investigation process to run smoothly a single lead investigator should be selected, although they may work with a larger team. The lead investigator and investigation team can be internally or externally appointed.

In deciding whether to appoint an external investigator an employer should consider:

• the nature of the allegations;
• the seniority of the respondent;
• whether a fair investigation can be conducted internally without any actual or perceived bias;
• whether there is a dedicated HR department with someone who has the required capability, skills and experience to conduct the investigation; and
• whether the employer wants the investigation to be covered by legal professional privilege.

If the employer decides to investigate the matter internally without appointing a third party, then the investigator does not need to have any specific qualifications. However, it is prudent to confirm that the investigator has the time and skills to conduct the investigation and that they can be objective.   

The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation

The respondent has several rights including the right to have the complaint investigated in a fair, impartial and adequate manner, to hear the allegations in full and to not be victimised. However, there is no avenue for a respondent to bring legal action to stop a procedurally fair investigation.

In 2014, Australia introduced an anti-bullying jurisdiction which gave the Fair Work Commission (FWC) the powers to issue a Stop Bullying Order. There have been circumstances where it has been successfully argued that an investigation itself amounted to bullying and accordingly the respondent applied to the FWC for a Stop Bullying Order to suspend the investigation.

The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.

Co-workers can be interviewed as part of an investigation where they are witnesses to a complaint.  If the employee refuses to attend the interview or is generally not cooperating with the investigation, the reasons for this will need to be considered carefully by the employer. Employers should consider whether there can be any amendments made to the interview process to accommodate the employee. However, an employer can make a reasonable and lawful direction to an employee to attend an interview. If an employee fails to comply with a lawful and reasonable direction, then it may constitute grounds for disciplinary action.  

Witnesses who are employees are entitled to the legal protections that ordinarily attach to their employment, including not being bullied, discriminated against, or harassed and having their health and safety protected. Employers should also ensure that witnesses are not victimised as a result of participating in the investigation and that confidentiality is maintained.

There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing. 

As part of an investigation, the investigator may want to collect evidence such as camera footage from CCTV, swipe card records, computer records, telephone records or recordings and GPS tracking. There are state-based workplace surveillance laws that operate in each jurisdiction in Australia. The laws recognise that employers are justified in monitoring workplaces for proper purposes, but this is balanced against employees’ reasonable expectations of privacy.

The Privacy Act 1988 (Cth) (Privacy Act) also regulates how certain organisations handle personal information, sensitive personal information and employee records. The Privacy Act contains 13 privacy principles that regulate the collection and management of information. Employers should familiarise themselves with the privacy principles before conducting any investigation to ensure they are not in breach when gathering evidence.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

The starting position is that there is no general right for an employer to search an employee’s possessions. However, an employer may be able to undertake a search in circumstances where:

• the employee consents to the search;
• there is a “right to search” contained in a contract, policy, procedure or industrial instrument; or
• the request to search constitutes a lawful and reasonable direction.

If an employee agrees to a search of their possessions, this consent should be confirmed in writing. If the employee does not consent then the employer can issue a direction to the employee. If the direction is lawful and reasonable, and the employee does not comply, then disciplinary action may be considered.

Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).

A complaint will be a whistleblowing complaint where a complainant has reasonable grounds to suspect that the information they are disclosing about the organisation concerns misconduct or an improper state of affairs or circumstances. The information can be about the organisation or an officer or employee of the organisation engaging in conduct that:

• breaches the Corporations Act 2001 (Cth);
• breaches other financial sector laws;
• breaches any other law punishable by 12 months’ imprisonment; or
• represents a danger to the public or the financial system.

Since 2020, all public companies, large proprietary companies and trustees of registrable superannuation entities in Australia are required to have a whistleblower policy. Employers conducting an investigation will need to follow the processes outlined in their policy.

One of the key differences when conducting an investigation that involves whistleblowing is identity protection and the ability of the whistleblower to disclose anonymously and remain anonymous.

In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).

Confidentiality protects the interests of the persons involved in the investigation as well as the integrity of the investigation. Before providing information as part of the investigation, employers should direct the complainant, respondent or witnesses to sign confidentiality agreements. This agreement should direct the person to refrain from discussing the investigation or matters that are the subject of the investigation with any person other than the investigator.

It is also best practice for participants in the investigation to be directed not to victimise (threaten or subject to any detriment) any persons who are witnesses to or are otherwise involved in the investigation.

After an investigation, employers should write to the complainant, respondent and any witnesses reminding them of their ongoing confidentiality obligations.

Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).

To ensure procedural fairness, the allegations must be put to the respondent in writing in advance of the investigation interview. The allegations must be specific, but the respondent does not need to be provided with a copy of the original complaint. The respondent should also be informed that if the allegations are substantiated they may result in disciplinary action up to and including the termination of the employee’s employment.

The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.

Employers will generally take steps to treat complaints sensitively and confidentially. However, because of the obligations employers have, confidentiality cannot be guaranteed as part of the investigation and the complainant, respondent and witnesses should be made aware of this.

Understandably, the complainant or witnesses may wish to remain anonymous. However, because the details of the allegations need to be put to the respondent so that they can provide an informed response or explanation, the source of the information will often need to be disclosed.  

Employers can take steps to “ringfence” the investigation by asking employees to sign a confidentiality agreement. This will protect the interests of the participants of the investigation and uphold the integrity of the investigation.

See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.

Non-disclosure agreements, also known as confidentiality agreements, can be used to maintain the confidentiality of the investigation. In this agreement, the employee will be directed to maintain confidentiality concerning the investigation and matters that are the subject of the investigation, and not speak to anyone outside the investigation team about the investigation without authorisation.

Confidentiality agreements are legal documents. Employees should be informed that a breach of the confidentiality agreement could result in disciplinary action being taken against them, up to and including termination of their employment.  

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

Investigation materials are not privileged and an employer may be required to disclose them in subsequent legal proceedings. If an employer is concerned about privilege attaching to an investigation, they should engage a legal practitioner to facilitate the investigation.

Employers who are concerned about privilege attaching to investigation materials should also consider the method of a lawyer’s engagement. The lawyer should be expressly engaged to investigate, report and to assist the employer by providing legal advice. Additional benefits can be achieved if the legal practitioner engages an external investigator to investigate the complaint and prepare the investigation report. Privilege will attach to the investigation materials because they are prepared for the lawyer to allow the lawyer to provide legal advice to the employer.

It is important that employers do not expressly or inadvertently waive privilege. For example, by disclosing the investigation report or substantial contents of the investigation report. It is a balance between providing information to the respondent and complainant about the outcome of the investigation and disclosing too much information.

The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.

The respondent should be given the opportunity to have a support person present during the investigation meeting and any subsequent conversations that concern the termination of their employment. Failure to allow the respondent to have a support person may result in any subsequent termination of employment being found to be an unfair dismissal. This is because under the Fair Work Act 2009 (Cth), when the FWC is considering whether a dismissal is an unfair dismissal, they must consider any unreasonable refusal by the employer to allow the person to have a support person present to assist at any discussions relating to dismissal.

Employers should request that the respondent inform them 48 hours before any meeting of the identity of their support person. This will allow the employer to confirm the support person’s suitability. A support person can be a legal representative or trade union representative, but the role of a support person is limited to assisting the employee and they are not there to act as an advocate or representative.

The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.

A trade union does not have any right to be informed of, or involved in, an investigation by an employer. However, an employee may request that their support person is a trade union member or trade union representative. This is appropriate and should be permitted.

Employers should review the terms of an employment contract, policy or industrial instrument as this may contain terms regarding trade union involvement. In particular, heavily-unionised workplaces may contain enterprise agreements which contain relevant clauses.

A works council or a trade union does not have a role in the investigation.

Employers should be conscious that the investigation may have an impact on the complainant, respondent and witnesses. Employers will need to consider how to support their employees. The level of support provided will often depend on the size of the organisation and programmes already in place.

Many employers have an Employee Assistance Programme and employees should be reminded about this programme if further support or assistance is required. An employer’s HR team may also be able to assist if an employee has concerns about the progress of an investigation.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

During the investigation, unrelated matters can come to light, usually made by the complainant or a witness during the interview process. Unrelated matters may take the form of further complaints against the respondent (but on grounds that are outside the scope of the current investigation), or entirely different complaints.

An employer should first assess the nature of the new allegations. Entirely unrelated matters should be dealt with separately. However, if the matter relates to the respondent it may be appropriate to obtain consent from the respondent and complainant for the scope of the investigation to be widened. It is important to remember that all allegations must be put to the respondent and they must be given an opportunity to respond.

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

If a respondent raises a grievance during the investigation this should be dealt with under any employment contract, grievance policy or industrial instrument. This may involve investigating and responding accordingly. The content of the grievance should be carefully considered, but in many circumstances it is appropriate for the initial investigation to continue. Multiple investigations can be run simultaneously.

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

It is not uncommon for respondents to an investigation to take personal or carer’s leave (sick leave) claiming that they are suffering from stress or anxiety. If this occurs, employers need to act appropriately, but this does not necessarily involve stopping the investigation process.

Employers should:

• assess the medical evidence to ascertain the respondent’s condition and determine how long they are likely to be unwell;
• avoid exacerbating the condition;
• determine whether the employee is unfit to attend the investigation meeting;
• take into consideration the evidence of other witnesses;
• consider delaying the investigation for a short period; and
• consider conducting the interviews in other ways, for example, in writing.

While all efforts should be made to accommodate an employee who has taken personal or carer’s leave during an investigation, if the respondent does not participate in the investigation, the investigation report may be prepared based on the available evidence.

As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.

There are circumstances of misconduct in the workplace that can also constitute criminal conduct and be subject to a criminal or regulatory investigation. This can include physical or sexual assault, theft, fraud, illegal drug use or stalking.

An employer can proceed with an investigation to determine whether the respondent engaged in misconduct on the balance of probabilities. The employer can terminate an employee’s employment before the outcome of any criminal investigation. However, the employer must keep in mind that procedural fairness must be afforded to the employee, particularly in circumstances where an employee is awaiting the outcome of a court proceeding.  

Alternatively, an employer may decide to suspend the employee pending the outcome of the criminal investigation. If a criminal act has been committed, then the employer may decide to terminate the employee’s employment.

Co-operation with the police and regulatory authorities is sensible and evidence can be compelled by the police or regulators by, for example, a subpoena, search warrant or an order for production.

Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.

Managing the outcome of the investigation is an important part of the process. The respondent must be informed of the outcome of the investigation as soon as possible after the investigation is completed and the decision-maker has decided how to proceed.

The investigator must decide whether the claims have been substantiated on the balance of probabilities and the decision-maker must decide what disciplinary action, if any, will be taken. Any disciplinary action should be proportionate to the seriousness of the misconduct. Disciplinary action could include a warning, counselling, monitoring of behaviour or termination of employment.

Ideally, the outcome of the investigation should be communicated to the respondent and complainant in writing, setting out the allegations that have been substantiated, unsubstantiated or whether there is insufficient evidence to make a finding.

The employer's conclusions from the investigation.

The investigator should prepare a written report setting out whether the allegations are substantiated, unsubstantiated or cannot be determined due to insufficient evidence. This report should be used for internal purposes only. Accordingly, the report should not be shared with the complainant, respondent or witnesses unless required by law, the employer’s policies or another industrial instrument. It is particularly important not to share the investigation report should the employer wish to maintain privilege in respect of the report.

The employee under investigation may only be informed of the conclusions.

Employers must take steps to deal with the findings of the investigation and implement any recommendations promptly. This may involve commencing disciplinary action.

The complainant and respondent need to be informed of the outcome of the investigation. All witnesses who participated in the investigation should also be thanked for their contribution and advised that the investigation has been completed. All participants in an investigation should be reminded of their ongoing obligations concerning confidentiality and victimisation.

If an employer decides that it may be appropriate to terminate a respondent’s employment, the employee must be provided with the opportunity to respond and to “show cause” as to why their employment should not be terminated.

The investigation report along with any other materials produced during the investigation should be kept in a separate confidential file.

Employers should also consider whether action should be taken at an organisational level to prevent future misconduct. In particular, employers are required to take a proactive approach to addressing systemic workplace cultural issues in relation to sex discrimination, sexual harassment and victimisation.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

The outcome of the investigation must be disclosed to the complainant and respondent. If there is a concurrent police or regulatory investigation, they may request a copy of the investigation report. Employers should generally cooperate with regulatory authorities, but should be careful about disclosing the investigation report as this may be privileged and privacy obligations must be considered. Employers should consider only disclosing the investigation findings and interview records if compelled to do so by regulators or police.

Interview reports, the investigation report and communications about the investigation should be kept in a separate file. The file should be marked confidential and access to the file should be restricted.

If proceedings are commenced, the investigation materials may be subject to disclosure unless legal professional privilege can be asserted, see above.

In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.

There are legal requirements related to the time you must keep certain employee records in Australia, such as pay slips and time sheets. However, there are no laws concerning disciplinary records.

Employers can rely on previous misconduct to justify an employee’s termination of employment where it can be shown it is part of a course of conduct. Accordingly, if complaints have been substantiated, and disciplinary action has been taken, these records should be maintained. However, if a significant period has elapsed since the misconduct, an employer should carefully consider whether it is appropriate to rely on this past behaviour to justify future disciplinary action for similar conduct.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

It is important for employers to conduct procedurally fair investigations that result in a fair outcome. Failure to do so may expose the employer to various claims by an employee. The most common type of claim following an investigation is an unfair dismissal claim. If a respondent’s employment is terminated because of an investigation, they may be eligible to bring an unfair dismissal claim in the FWC alleging their dismissal was harsh, unjust or unreasonable.

An employee may also bring a bullying, discrimination or general protections claim. These claims may be made even where the investigation does not result in the employee’s dismissal.

If an employer has departed from the procedures set out in their policies, or they have not followed the terms of an employee’s employment contract or another applicable industrial instrument then an employee may bring a claim for breach of contract.

Australia has also recently introduced the “Respect@Work” legislation which places a positive obligation on employers to take reasonable and proportionate measures to eliminate sex discrimination, sexual harassment and victimisation, as far as possible. Accordingly, an employer who is not perceived to have taken a proactive and fair approach to these workplace issues faces significant legal exposure.

Failure to conduct an investigation properly (or a failure to conduct an investigation in circumstances where it is needed) can also cause significant reputational and financial risk.

There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.