Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Austrian law does not impose an obligation on employers to conduct internal investigations and they do not have to follow a specific legal pattern when doing so. However, an obligation to conduct internal investigations may arise out of certain provisions of criminal, company or even labour law – in particular, an indirect obligation arising from an employer's duty of care, which requires them to act against employee mistreatment, such as bullying.
If such internal investigations are initiated, compliance with labour law and data protection regulations is mandatory. According to section 16 of the Austrian Civil Code (ABGB), the employer must also protect the personal rights of the individual. It is important to emphasise that a company's internal investigation is a private measure and differs from official investigations.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
Currently there are no unified laws, administrative regulations or policies in the field of labor laws in People's Republic of China (referred to as “PRC”) regarding investigations on workplaces of ordinary employers. The laws and regulations of employers in certain specific industries (such as banking, securities, insurance, medical institutions, etc.) and the laws and regulations governing certain personnel (such as officers of state-owned enterprises and members of the Communist Party of China) contain provisions relating to investigations on employees' conduct, but such provisions are only applicable to the aforementioned specific industries or personnel.
Employers generally will specify their investigation rights and rules and procedures of internal investigations in their internal rules and regulations (such as the employee handbook) or the employment contracts entered into with their employees. However, it should be noted that workplace investigations are still subject to laws and regulations in relation to personal information, privacy and data protection.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In Greece, workplace investigations are not heavily regulated.
However, internal disciplinary procedures are governed by certain general principles, while there is also legislation regulating certain aspects of investigations opened in the context of whistleblowing procedures or concerning complaints for workplace violence or harassment. These include Law 4990/2022, which transposed EU Directive 2019/1937 into Greek Law; and Law 4808/2021, which ratified the ILO’s Violence and Harassment Convention, 2019 (No190) and introduced relevant provisions.
As far as disciplinary procedures in private-sector companies are concerned, employers that must have internal labour regulations in place (ie, those with more than 70 employees) or opt to adopt them voluntarily, can regulate the procedures themselves.
In the public sector, internal investigations are governed by disciplinary provisions included in the civil servant code.
Italy
Italy
- at BonelliErede
- at BonelliErede
From an Italian employment law perspective, there is no specific body of legislation that governs investigations. However, several legal and case-law principles may be relevant concerning various specific aspects of investigations, and to which reference will be made below (eg, provisions under Law No. 300 of 1970, the so-called Workers’ Statute regarding “controls on employees”, both physical and “remote”, or regarding “disciplinary proceedings”).
In addition, and outside of the specific scope of employment law, other law provisions may have an impact on investigations, including those regarding privacy law (eg, Italian Legislative Decree No. 196 of 2003 and the Regulation (EU) No. 679 of 2016 (GDPR), regarding data protection and the related policies), whistleblowing (Law No. 179 of 2017 and Directive (EU) No. 1937 of 2019, regarding whistleblower protection) and criminal law (eg, Italian Criminal Procedure Code, providing rules for criminal investigation and Italian Legislative Decree No. 231 of 2001, regarding the corporate (criminal) liability of legal entities).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
There is no specific legal regulation for internal investigations in Switzerland. The legal framework is derived from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights. Depending on the context of the investigation, additional legal provisions may apply; for instance, additional provisions of the Swiss Federal Act on Data Protection or the Swiss Criminal Code.
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, an internal investigation is only initiated if there is suspicion of a violation. The decision to commence an internal investigation is up to the company, and it has to weigh the pros and cons. For limited liability companies, which are subject to the Association Responsibility Act, an internal investigation may exempt them from criminal liability. Disadvantages may include investigation costs, disruption of operations, discovery of information requiring later disclosure, possible negative media coverage and increased risk of exposure to external parties.
Investigations can relate to specific individuals, departments, or the entire company. An investigation may include various measures, such as obtaining and analysing files and documents, conducting questionnaires and employee interviews, monitoring internet use, video or telephone surveillance of employees and setting up whistleblowing hotlines. Not all measures are acceptable without restrictions. The provisions of labour law and data protection law must always be complied with.
To avoid wasting resources, the objectives of the investigation should be defined in advance. In addition, the selection and sequence of instruments to be used should be determined. A legal assessment of the chosen measures is essential to avoid legal complications.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The employer will generally obtain clues of employees' misconduct, actively or passively, through such means as internal audit, employee whistleblowing, whistleblowing from suppliers or partners, regular or irregular compliance management assessment of the employer and management concerns, and carry out investigation based on such clues. Meanwhile, the employer will further investigate whether the employees involved have committed other acts of misconduct.
The investigation is usually carried out from outside to inside and from the macro level to the specific level. That is to first interview the provider of the clues and other insiders for verification and obtaining further information. Then to conduct internal and external system and written documents review based on the investigation clues. Preliminary evidence will be formed after the basic verification of facts. Finally, the employer will interview the employees involved and listen to their explanations, and finally determine the subsequent handling method.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Internal investigations can be initiated either upon a complaint or report by an employee, (or other persons providing services or seeking employment, etc) in the workplace or by the employer as part of their managerial right.
If from an employee, the complaint or report may fall within the scope of an internal disciplinary procedure, if any, or may concern an alleged workplace violence or harassment incident, or fall within the scope of L.4990/2022 on the protection of persons who report breaches of Union law.
Reports by whistleblowers are submitted to the manager with responsibility for receiving and monitoring reports, a person appointed for that purpose under L.4990/2022. Complaints for incidents and harassment in the workplace can also be submitted, according to L.4808/2022, to the person or internal body specifically assigned to receive such complaints. Both laws require the employer to define the persons competent for receiving and monitoring complaints or reports and notifying the employees stricto sensu and any other persons falling within the scope of the respective provisions.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, a workplace investigation can commence either as a consequence of facts reported by employees or third parties (either anonymous or not), for instance within a whistleblowing procedure or as part of normal and periodical activity carried out by internal auditing.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).
For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Yes. An employer may always, and without legal restrictions, temporarily suspend an employee during an internal investigation, provided he or she continues to be paid.
However, suspending the employee does not release the employer from an obligation to terminate employment without notice. It must be clear to the employee that the suspension is a temporary measure in preparation for dismissal. A suspension does not entitle the employer to postpone the reasons for dismissal for any length of time. The longer the suspension lasts, the more likely it is that the employer intends to keep the employee.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
When an employer is found to have engaged in misconduct of an employee, whether it has the right to suspend the employee from his/her duties and subject him/her to investigation, there are no explicit provisions in the existing labor law. Generally speaking, suspension of investigation arranged internally by an employer is within the scope of autonomous management of the employer. However, such suspension of investigation is subject to certain restrictions, and the basic rights and interests of the employee must be guaranteed. For example, the employer should continue to pay social insurance fund for the employee.
Suspension investigation shall generally be specified in advance in the labor contract or rules and regulations, and the duration of suspension investigation should be within the necessary and reasonable period. Indefinite suspension or the suspension of obviously long time will not be supported by arbitral tribunals and courts.
Generally annual leave may be taken preferentially by the employees during suspension period. The annual leave period shall be deemed as normal attendance, and the salary shall remain unchanged. Under the circumstance that the annual leave has been used up, in judicial practice, there are few cases supporting the claim that the employer can fully deduct the employee's salary during the suspension period. It is generally believed that the employer shall at least guarantee the basic living needs of the employee during the suspension period (i.e. the salary shall not be lower than the local minimum salary standard) or pay the employee as per the original salary standard. However, in judicial practice, some arbitrators and judges hold the view that an employer may use its discretion to reduce employees' salary if all of the following conditions are met:
- it is stipulated in its rules and regulations or a contract that it is entitled to suspend employees from their duties and reduce salaries if their fraudulent behaviour harms the employer's interests;
- the rules and regulations are stipulated in its rules and regulations, and are publicly announced and accepted by the employees; and
- there is evidence showing the corresponding fraudulent behaviour of the employees.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Internal labour regulations may allow for the suspension of an employee when there is reasonable suspicion that a disciplinary offence has been committed. Given that under Greek law employees have the right to receive wages and to be employed, suspension without a specific provision in the internal labour regulation may only be imposed in an extreme case where the offence and the risk of keeping the employee employed during an investigation is obvious.
Payment of remuneration during suspension should not be withheld, otherwise, the suspension could be considered a disciplinary penalty not provided in law and imposed without completion of the disciplinary procedure, thus illegally harming the employee.
In any case, suspension is one of the ultimate measures that may be taken, in contrast to, for example, a change of work position.
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, from an Italian employment law perspective, there is no specific legal rule governing the suspension of an employee during a workplace investigation.
However, it should be noted that:
- certain National Collective Bargaining Agreements (NCBAs) may provide, in particular circumstances, for the possibility of suspending (with pay) an employee (eg, when the employee is under criminal proceedings – as stated, for example, in the NCBA for executives of credit, financial and investment companies);
- according to well-established case law, the employer may suspend the employee from work (with pay) in the framework of a disciplinary procedure (which, according to Italian law, must be followed before applying any disciplinary sanction, including dismissal[1]), where the facts behind the procedure are sufficiently serious;
- certain case-law decisions have also stated that – even in the absence of a disciplinary procedure – the employer may suspend (with pay) the employee when it has very serious suspicions of an employee’s unlawful conduct, and for the time that is strictly necessary to ascertain his or her liability.
The above may be done by the employer, for instance, if keeping the employee in service may cause a risk of tampering with evidence or a risk of damage to the physical safety of other employees or company property.
Normally, in the above-mentioned circumstances, the suspension is with pay and with job security.
[1] The steps of the disciplinary procedure can be summarised as follows: (i) the employer must send a letter to the employee in which the disciplinary facts are described in detail and precisely; (ii) the employee can submit his written or oral defence to the employer within five days from receiving the letter (or different term provided under applicable collective bargaining); during this period, the employer cannot take any punitive measures against the employee; (iii) after receiving the employee’s defence (or, if the employee has not submitted any defence within the relevant term), the employer may serve the executive with a notice of dismissal (certain NCBAs set a term within which a sanction, if any, should be applied by the employer). Failure to comply with the procedure results in the dismissal being null and void. According to the law, the dismissal takes effect from the commencement of the disciplinary procedure itself.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
It is possible to suspend an employee during a workplace investigation.[1] While there are no limits on duration, the employee will remain entitled to full pay during this time.
[1] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 181.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
There are no prescribed minimum standards for this procedure. The responsibility for conducting these investigations lies with the employers. Internal compliance or legal teams are often entrusted with this task, as they are familiar with internal protocols. In practice, these investigations are often overseen by an internal team, occasionally with the assistance of law firms or auditing firms. Those involved in the investigation must remain impartial. Potentially biased persons, such as those under investigation and their close associates, should be excluded from participation.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
In some laws and regulations for specific industries, enterprises or personnel, there are certain requirements for the qualifications of investigators. For example, according to the Interim Measures for Investigating and Dealing with Disciplinary Violations of Professional Personnel by Medical Institutions, the personnel conducting an investigation and evidence collection shall not be less than two. If the investigator is a close relative of the investigated person, or a tip-off person or a key witness of the issue to be investigated, the investigator shall withdraw from the investigation.
However, at present, there are no unified and detailed national rules and regulations on the qualification of the investigators and organizations. In practice, the selection of the personnel and organizations responsible for internal investigation is usually based on the relevant provisions in the internal rules and regulations of the employer. The personnel conducting internal investigation are usually internal functional departments of the employer and are independent to some extent, including the personnel department, legal department, compliance department or risk control department. For significant or complex issues or senior management investigations, in order to ensure professionalism, accuracy and compliance, external law firms, consultants and accounting firms are also frequently hired to conduct investigations.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As far as the persons in charge of an internal investigation are concerned, L. 4990/2022 on the protection of persons who report breaches of Union law provides for certain conditions that should be met when exercising their duties (ie, being impartial and abstaining when there is a conflict of interest), which also apply as general principles in all disciplinary procedures. Whistleblowing legislation stipulates that persons appointed to receive and investigate a whistleblowing procedure should meet certain conditions, including no penal proceedings against them, no disciplinary proceedings or convictions for specific offences, and no workplace suspensions.
Official disciplinary procedures are conducted by the competent bodies as described in the respective internal labour regulations.
Although not specifically regulated, support from external advisors (eg, lawyers) is allowed.
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, from an employment law perspective, there is no specific legal rule governing the minimum qualifications of who should conduct a workplace investigation. Generally speaking, a workplace investigation is carried out by the internal audit function, when there is one (generally in large companies), or by the HR or legal departments.
Outside the workplace, the employer may carry out investigations on the employee – normally without the latter knowing – through a private investigator. This investigation should be carried out to verify that the employee does not engage in conduct contrary to the company’s interests (eg, unlawful competition, disclosure of confidential information, criminal breaches). In such cases, the private investigator must comply with specific rules, mainly found in Italian Royal Decree No. 773 of 1931, according to which the investigator must, among other things: hold a licence issued by the competent authority; and keep a register of the activities conducted daily.
In addition, if there is a suspicion that a crime has been committed, the company may appoint a criminal law lawyer to conduct their own defensive criminal law investigation, as provided by article 391bis and the Italian Criminal Procedure Code.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The examinations can be carried out internally by designated internal employees, by external specialists, or by a combination thereof. The addition of external advisors is particularly recommended if the allegations are against an employee of a high hierarchical level[1], if the allegations concerned are quite substantive and, in any case, where an increased degree of independence is sought.
[1] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 18.
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If the investigated employee believes that individual measures violate his rights, he or she can defend him or herself against them, but he or she cannot stop the entire investigation.
In principle, the employee has various rights such as access, rectification, erasure and the right to contest the processing of his or her data (articles 12-17 and 21 GDPR). Should these principles be violated, the employee has the right to lodge a complaint with the data protection authority.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
There is no provision in the law which provides the employee the right to suspend or interrupt an investigation by initiating a lawsuit. However, the employee who is suspended for investigation may request to terminate the employment contract unilaterally and demand the employer to pay economic compensation on the ground that the employer has not paid enough remuneration, and may initiate labor arbitration and litigation accordingly, but such arbitration and litigation will not have the effect of suspending or interrupting the investigation.
In addition, if the employee's privacy or personal information is improperly disposed of during the investigation, the relevant evidence obtained during the suspension investigation may be deemed as illegal evidence by arbitral tribunals and courts, and the employer may also be exposed to relevant legal liabilities for the infringement of privacy, etc.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Although there is no specific legal provision, access to legal action and judicial proceedings cannot be obstructed under any circumstances as this is a fundamental right under the Greek constitution. Thus, if an employee manages to bring legal action to stop the investigation (eg, a prolonged investigation for a frivolous complaint harms them), then the investigation may have to be temporarily paused or permanently terminated depending on the court decision.
Italy
Italy
- at BonelliErede
- at BonelliErede
In principle, no. However, if the employee believes that, during the workplace investigation, there is a breach of his or her rights, he or she could act to protect them before the court (eg, through precautionary urgency proceedings under Article 700 of the Italian Civil Procedure Code.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The accused could theoretically request a court to stop the investigation, for instance, by arguing that there is no reason for the investigation and that the investigation infringes the employee's personality rights. However, if the employer can prove that there were grounds for reasonable suspicion and is conducting the investigation properly, it is unlikely that such a request would be successful.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
An essential part of an internal investigation is the questioning of employees. Their statements contribute significantly to clarifying possible violations. In particular, the legal principles that apply to criminal proceedings, including the right to refuse to testify, do not apply directly to internal investigations.
Employees do not legally have to participate in such interviews. Their duty to cooperate arises indirectly from other legal provisions, in particular from employees’ duties of loyalty and service under labour law.
Austrian law suggests there is a general principle of loyalty, which triggers a “duty to inform” under some circumstances; in principle, the employee and any witnesses are expected to provide information in the context of internal investigations. While the employee is not compelled to incriminate him or herself, he or she also may not withhold work-related information that the employer legitimately wishes to protect, for the sole reason that it might incriminate him or her. The decision as to whether the employee must disclose information depends on a balancing of interests in the specific case.
Investigators and employers must strictly adhere to the permissible limits. This requires compliance with labour law, criminal law and data protection law.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
Article 75 of the Civil Procedure Law of the PRC (Amended in 2021) provides, "All entities and individuals that are aware of the circumstances of a case shall have the obligation to testify in court. The persons-in-charge of relevant entities shall support the witnesses to testify in court. "Article 193 of the Criminal Procedure Law of the PRC (Amended in 2018) provides, "Where, after the notification of a people's court, a witness refuses to testify in court without justified reasons, the people's court may compel the witness to appear in court, unless the witness is the spouse, a parent or a child of the defendant."
According to relevant provisions of the Civil Procedure Law of the PRC, only a court has the power to compel a witness to appear in court. Neither the employer nor any other individual may compel any colleague to act as a witness and testify in court. However, the employer may set forth in the employment contract or its internal rules and regulations that the employee shall cooperate with its internal investigation.
As for the legal system for witness protection, PRC's criminal procedure laws stipulate a relatively detailed legal system for witness protection, such as establishing a crime of retaliating against a witness; making public a witness's personal information such as name, address, employer and contact information for the purpose of protecting the personal safety of the witness; using assumed names in the indictments; and so on. However, there are relatively few legal provisions regarding the legal protection of witness in civil procedure, and provisions only regulate the expenses that may be incurred by the witness for testifying in court. For instance, Article 77 of the Civil Procedure Law of the PRC (Amended in 2021) provides, "The necessary expenses incurred by a witness in fulfilling his obligation to testify in court, including transportation, accommodation and meals, as well as the loss of salaries, shall be borne by the losing party. If a party applies for a witness to testify, the costs and expenses shall be advanced by the party; if the people's court notifies a witness to testify without the application by a party, the costs and expenses shall be advanced by the people's court. "
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Indirectly involved employees may be interviewed as witnesses in the context of the investigation, as the employee has a duty of loyalty towards the employer originating from the employment relationship. However, they cannot be forced to do so (in contrast with criminal procedures). Any harmful act that could be considered retaliation against witnesses in the context of violence or harassment or whistleblowing investigation is prohibited. In addition, the identity of any employees as witnesses is also covered by the principle of confidentiality.
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, employees must cooperate with a workplace investigation (as it is part of their general duty of diligence, as provided under article 2104 of the Italian Civil Code), and this may also include a duty to act as a witness.
In this respect, it must be pointed out that, even if the employee has a contractual duty to provide information requested by the employer, one limit to this principle could be, for example, self-incrimination.
However, caution is necessary during the interviews both with the employee under investigation and with co-workers, to avoid the risk of transforming the interview into what could be considered the de facto start of a disciplinary procedure. In other words, during the interview, the employer should only gather information on certain facts, and not put forward charges against the employee; otherwise, this could prevent or limit the employer’s possibility to take disciplinary action regarding the same facts.
Furthermore, employees who cooperate within the workplace investigation must be protected against any retaliatory action directly or indirectly linked to their testimony (eg, as far as is possible, anonymity should be guaranteed, and disciplinary measures should apply to those who breach measures in place to protect the employee).
Apart from workplace investigations, employees are protected against retaliatory measures of any kind, which are always null and void and subject to appeal.
For a defensive criminal law investigation (see par. 4), the witness can refuse to testify; in this case, the criminal law lawyer may ask the prosecutor to interview the witness.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Due to the employee's duty of loyalty towards the employer and the employer's right to give instructions to its employees, employees generally must take part in an ongoing investigation and comply with any summons for questioning if the employer demands this (article 321d, Swiss Code of Obligations). If the employees refuse to participate, they generally are in breach of their statutory duties, which may lead to measures such as a termination of employment.
The question of whether employees may refuse to testify if they would have to incriminate themselves is disputed in legal doctrine.[1] However, according to legal doctrine, a right to refuse to testify exists if criminal conduct regarding the questioned employee or a relative (article 168 et seq, Swiss Criminal Procedure Code) is involved, and it cannot be ruled out that the investigation documentation may later end up with the prosecuting authorities (ie, where employees have a right to refuse to testify in criminal proceedings, they cannot be forced to incriminate themselves by answering questions in an internal investigation).[2]
[1] Nicolas Facincani/Reto Sutter, Interne Untersuchungen: Rechte und Pflichten von Arbeitgebern und Angestellten, published on hrtoday.ch, last visited on 17 June 2022.
[2] Same opinion: Nicolas Facincani/Reto Sutter, Interne Untersuchungen: Rechte und Pflichten von Arbeitgebern und Angestellten, published on hrtoday.ch, last visited on 17 June 2022.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
All data processing must comply with the principles of article 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity). Personal data may only be collected and processed for specific, lawful purposes.
The admissibility of data processing depends on whether the suspicion relates to a criminal offence or another violation of the law. If the data processing is relevant to criminal law, article 10 GDPR or section 4(3) of the Austrian Data Protection Act (DSG) applies. If the investigations are exclusively to clarify violations under civil or labour law, such as an assertion of claims for damages or if they are general investigations to establish a criminal offence, the permissibility of data processing is based on article 6 or, for data covered by article 9 GDPR, on this provision.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The Civil Code of the PRC, the Personal Information Protection Law of the PRC and other laws provide for the protection of employees' personal information and privacy. Employers are often involved in checking the information and materials stored in the computers, hard disks and other electronic office equipment provided to employees in internal investigation and are likely to access the employees' personal information including personal privacy information, such as the communication records stored in instant communication software such as WeChat, QQ or other instant communication software or to and from private email boxes. According to the Personal Information Protection Law of the PRC, employers are required to perform the obligation of informing and obtain the individuals' consent prior to the processing of personal information, i.e. the principle of informing + consent. Moreover, the Civil Code of the PRC stipulates that no organization or individual may process any person's private information, except as otherwise provided by law or with the explicit consent of the right holder.
Therefore, the legitimacy of obtaining data evidence can be enhanced and guaranteed only if it is explicitly stated in the relevant rules and regulations that the employer shall have the right to the work equipment provided to the employees or obtains the employees' personal consent.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
GDPR and the provisions of L. 4624/2019 regulate the gathering of physical evidence from a data protection perspective, providing, among other things, that personal data should be processed with transparency and to the extent necessary for the investigation.
L.4990/2022 on the protection of persons who report breaches of Union law regulates data protection issues in the context of whistleblowing investigations, mainly to safeguard confidentiality throughout the investigations.
Italy
Italy
- at BonelliErede
- at BonelliErede
Several legal and case-law principles may be relevant depending on the kind of investigation, including the following:
- gathering evidence through employee “physical inspections and inspections on the employee’s belongings”: according to article 6 of the Workers’ Statute, these inspections are generally prohibited. They are permitted only where necessary to protect company assets (in such cases, corporal inspections may be carried out, subject to trade union agreement or National Labour Inspectorate authorisation, provided that, for example, they are carried out outside the workplace, that employees are selected with an automatic selection tool, and that the dignity and confidentiality of employees are protected);
- gathering evidence through “audiovisual equipment and other instruments from which the possibility of remote control of employees’ activities arises”: according to article 4 of the Workers’ Statute, remote systems cannot be directly aimed at controlling employees’ activity, but can only be put in place for organisational, production, work safety or asset-protection needs (which may result in an indirect control over employees’ activity), and may be installed before a trade union agreement or with previous authorisation from the National Labour Inspectorate; however, these rules do not apply to working tools in an employee’s possession (see question 8) and, in any case, employees must be informed of the possibility of remote control;
- gathering physical evidence through so-called defensive controls: according to the most recent case law, “defensive controls” can be defined as investigations carried out by the company where it has a suspicion of unlawful conduct by its employees. These controls can be carried out within certain limits and restrictions provided by case law – even in the absence of the guarantees provided for in article 4 of the Workers’ Statute.
In addition, when gathering physical evidence, there may be other provisions of law not strictly related to employment law that must be followed, for example, regarding privacy regulations (eg, minimisation of the use of personal data, collection of data only for specific purposes, and adoption of safety measures).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]
It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).
It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, it is advisable to back up data, documents, emails and other records promptly to prevent their deletion. Admissibility depends on whether the data originates from personal or professional records and whether they are legally relevant. If internal investigations are carried out based on a specific suspicion of a criminal offence, it is the processing of legally relevant data. In general, the processing of professional emails or documents is permissible. If there is no professional connection, access to private files and documents is only permitted in exceptional cases.
If, for example, using a business email account for private purposes is not allowed, the employer can usually assume that the data processed is only "general" data within the meaning of article 6 GDPR and that such data processing is justified by a balancing of interests. However, if private use is allowed, the data may still be part of a special category within the meaning of article 9 GDPR. In such cases, the justification for its use must be based on one of the grounds explicitly mentioned in article 9(2) GDPR.
The employer must protect the employee's rights under section 16 of the ABGB and must consider the proportionality of the interference. Only the least restrictive means – the method that least interferes with the employee's rights – may be used to obtain the necessary information. The employer's interest in obtaining the information must outweigh the employee's interest in protecting his or her rights. The implementation or initiation of controls by the employer does not automatically constitute an interference with personal rights, as being subject to the employer's rights of control is part of the position as an employee.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
Article 13 of the Constitution of the PRC provides that the lawful private property of the citizens shall not be violated. Therefore, during the process of investigation, without the employees' consent, the employer has no right to search the employees' personal possessions or files. If it is necessary to search the employees' personal possessions or files, the employer may require the employees to sign a Letter of Informed Consent before searching; or the employer may call the police and the search will be conducted under the escort of the public security authorities or directly by the public security authorities.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As a first step, the employer should ask for the employee’s permission to access their possessions and files. Employment contracts and internal labour regulations may include provisions regarding an employer’s access to employees’ documents created and kept for business purposes or related to business activity.
Italy
Italy
- at BonelliErede
- at BonelliErede
In light of the legal and case-law principles as outlined above:
- see question 7 regarding employee “physical inspections and inspections on the employee’s belongings”;
- regarding “audiovisual equipment and other instruments from which the possibility of remote control of employees’ activities also arises”, article 4 of the Workers’ Statute provides for:
- the prohibition of the use of audiovisual equipment and instruments of “direct” remote control (ie, whose sole purpose is to verify the manner, quality and quantity of working performance (eg, a camera installed in an office to film employees’ working activities, without any other purpose));
- the possibility of carrying out controls through audiovisual equipment and “indirect” remote instruments (ie, instruments that serve different needs (organisational, production, work safety or company assets’ protection), but which indirectly monitor working activities (eg, a camera installed in a warehouse to prevent theft, but which indirectly monitors the activity of warehouse workers), which may only be installed with a trade union agreement (or National Labour Inspectorate authorisation);
- the possibility of carrying out checks using working tools in the employee’s possession (e.g., PCs, tablets, mobile phones, e-mail), which may be carried out even in the absence of any trade union agreement, provided that the employee is given adequate information on how to use the tools and how checks may be carried out on their use (according to privacy law strictly related to the employment relationship).
Furthermore, based on case law, the employer can carry out so-called defensive controls (ie, actions carried out in the absence of the guarantees provided for in article 4, to protect the company and its assets from any unlawful conduct by employees). These “defensive controls” can be carried out if:
- they are intended to determine unlawful behaviour by the employee (ie, not simply to verify his or her working performance);
- there is a “well-founded suspicion” that an offence has been committed;
- they take place after the conduct complained of has been committed; and
- adequate precautions are nevertheless put in place to guarantee a proper balancing between the need to protect company assets and safeguarding the dignity and privacy of the employee.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The basic rule is that the employer may not search private data during internal investigations.
If there is a strong suspicion of criminal conduct on the part of the employee and a sufficiently strong justification exists, a search of private data may be justified.[1] The factual connection with the employment relationship is given, for example, in the case of a criminal act committed during working hours or using workplace infrastructure.[2]
[1] Claudia Fritsche, Interne Untersuchungen in der Schweiz: Ein Handbuch für regulierte Finanzinstitute und andere Unternehmen, Zürich/St. Gallen 2013, p. 168.
[2] Claudia Fritsche, Interne Untersuchungen in der Schweiz: Ein Handbuch für regulierte Finanzinstitute und andere Unternehmen, Zürich/St. Gallen 2013, p. 168 et seq.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The provisions of the Whistleblowing Directive must be respected. In Austria, these have been implemented through the Whistleblower Protection Act (HSchG). If the whistleblower or the persons concerned fall within the scope of the Directive, their identity must be protected. Only authorised persons may access the report. Retaliatory measures are invalid or must be reversed. Within a maximum of seven days, the whistleblower must receive a confirmation of his or her complaint. Feedback to the whistleblower must then be provided within a maximum of three months.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
In practice, the following factors to be considered will be: (1) verification of the informant's identity; (2) whether the informant has any conflict of interest with the reported employee or whether it will affect the objectivity of their reporting; (3) how to persuade the informant to provide more information or evidence, or to cooperate in court as a witness; (4) how to increase the admissibility of evidence when the informant refuses to cooperate in court as a witness or fails to provide original evidence; (5) how to improve the evidence chain and protect the informant from being attacked or retaliated by the informant, etc.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
L. 4990/2022 includes specific requirements regarding, among other things, the procedure of receiving and investigating respective reports, confidentiality issues (especially regarding the identity of the whistleblower), data protection issues (including restrictions to the right of access) and the employer’s right to keep a record of the relevant complaint and investigation. Such provisions are expected to be further detailed by Ministerial Decisions in future.
Italy
Italy
- at BonelliErede
- at BonelliErede
The regulations on whistleblowing in the private sector were originally outlined in article 6 of Italian Legislative Decree No. 231 of 2001 (as amended by Law No. 179 of 2017), which state that the models of organisation must provide for one or more channels that allow persons in positions of representation, administration and management of the entity (and persons subject to their direction or supervision) to report unlawful conduct according to Italian Legislative Decree No. 231 of 2001 and violations of the entity’s organisational and management rules.
Currently, Italy has implemented Directive (EU) No. 1937 of 2019, which provides for the adoption of new standards of protection for whistleblowers, through the Italian Legislative Decree No. 24 of 2023 (WB Decree)[1].
In line with the Directive, the WB Decree states, inter alia, that[2]:
- an internal whistleblowing reporting channel must be put in place by all private legal entities (and legal entities in the public sector) that have employed, during the previous year, an average of 50 employees or, even below this threshold, operate in certain industries[3] or have adopted an organizational model in accordance with Legislative Decree no. 231 of 2001;
- the WB Decree prescriptions apply to reports concerning breaches of certain national/EU[4] legal provisions (varying depending on features such as the private or public nature of the employer and its dimensions), and not to claims or requests linked to interests of a personal nature of the reporting individuals (pertaining to their individual employment contracts or to relations with their superiors)[5];
- whistleblowers’ reporting may take place through:
- the company’s internal reporting channels and internal reporting procedures (with the possibility – for entities employing up to 249 employees, even if not part of the same group – to share whistleblowing reporting channels); or
- external reporting channels and external reporting procedures established by the member states’ competent authorities (in Italy, ANAC, i.e. the National Anticorruption Authority); or
- in certain circumstances, public disclosure;
- whistleblowing systems must provide:
- a duty of confidentiality regarding the whistleblowers’ identity (which generally may not be disclosed to persons other than those competent to receive or investigate on the reports, except in specific case and with the whistleblower’s consent; see also answer to question 12 below); and
- ways of protecting collected data according to the GDPR, as well as tight deadlines for communication with whistleblowers[6]; and
- an integrated system of protection of whistleblowers against any retaliatory action directly or indirectly linked to their reports or declarations, with a reversal of the burden of proof (meaning the employer must give proof of the non-retaliatory nature of measures adopted vis-à-vis whistleblowers); and
- the procedures to be taken in case of anonymous whistleblowing report.
[1] The provisions of the Decree are binding since July 15, 2023, for larger companies, and as of Dec. 17, 2023, for entities employing an average of from 50 to 249 employees.
[2] This is only a brief and non-exhaustive summary of some of the main provisions under the WB Decree.
[3] In particular, companies that fall within the scope of application of EU acts listed in Annex (part I.B and II) of the WB Decree (for instance, financial services, products and markets; money laundering/terrorism prevention; transportation security; etc.)
[4] Listed in art. 2 and in Annex 1 of the WB Decree (for instance, regarding financial services, products and markets sector) or protecting the EU financial interests or internal market.
[5] Listed in art. 2 and in Annex 1 of the WB Decree (for instance, regarding financial services, products and markets sector) or protecting the EU financial interests or internal market.
[6] In greater detail: (i) a notice acknowledging the receipt of the WB report must be released within seven days; (ii) contacts must be kept with the whistleblower for any additions needed (if the identity is known); and (iii) within three months of the notice of receipt of the report, a follow-up notice must be given to the whistleblower (which may also be non-definitive, with a status update on activities in progress).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
If an employee complains to his or her superiors about grievances or misconduct in the workplace and is subsequently dismissed, this may constitute an unlawful termination (article 336, Swiss Code of Obligations). However, the prerequisite for this is that the employee behaves in good faith, which is not the case if he or she is (partly) responsible for the grievance.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If the report and the whistleblower fall within the scope of the Whistleblowing Directive, his or her identity must be protected. From a data protection perspective, the principles of the DSG must be observed to protect the legitimate confidentiality of the individuals concerned.
Furthermore, the employer should ensure that information is only disclosed to trustworthy persons to avoid pre-judgements.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
Although there are no specific laws or regulations regulating the extent of confidentiality obligation employers or the investigators shall comply with, in practice, the confidentiality obligation of both parties usually originates from the confidentiality agreement between the employee and the employer, as well as general provisions on protection of personal information and right of privacy, etc.
In this regard, it is advisable to require the relevant personnel responsible for handling the suspension for investigation to sign a confidentiality agreement or a letter of commitment, and require them to pay attention to the protection of the personal information and privacy of the complainant and other relevant personnel, for the purpose of avoiding extra losses caused by the occurrence of disputes relating to right of reputation, right of privacy and personal information leakage during the investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Confidentiality applies as a general principle in disciplinary investigations.
Moreover, L. 4990/2022, which transposed EU Directive 2019/1937 into Greek Law, regulates the issue of confidentiality during investigations that start based on an internal report. The managers conducting the investigation must respect and abide by the rules of confidentiality regarding the information they have become aware of when exercising their duties[1]. They must also protect the complainant’s and any third party’s (referred to in the report) confidentiality by preventing unauthorised persons from accessing the report[2].
Finally, L. 4808/2021 provides that employers must create a procedure that should be communicated to employees regarding all the necessary steps of an investigation following a complaint. Throughout the whole process, the employer, managers and the employer’s representatives responsible for the investigation must respect and abide by the rules of confidentiality in a manner that safeguards the dignity and personal data of the complainant and the person under investigation[3].
[1] Law 4990/2022, art. 9 par.8(b)
[2] Law 4990/2022, art. 10 par. 2(e)
[3] Law 4808/2021 art. 5 par.1(a) and 10 par.2(b)
Italy
Italy
- at BonelliErede
- at BonelliErede
From an employment law perspective, confidentiality obligations may be seen from two different points of view:
- as a general duty of the employee related to the employment relationship, according to article 2105 of the Italian Civil Code, a “loyalty obligation”, which includes confidentiality obligations. On top of these, there are usually further confidentiality clauses in individual employment contracts; and
- as a general duty (linked to the outcome of the investigation) of the employer to keep confidential the identity of the employee who cooperates during the investigation (as whistleblower or a witness) to protect him or her.
In defensive criminal law investigations, the witness can’t reveal questions or answers given in his or her interview to a third party.
With regards to the confidentiality applicable to the whistleblower, see above under question 9 and below under question 12.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Besides the employee's duty of performance (article 319, Swiss Code of Obligations), the employment relationship is defined by the employer's duty of care (article 328, Swiss Code of Obligations) and the employee's duty of loyalty (article 321a, Swiss Code of Obligations). Ancillary duties can be derived from the two duties, which are of importance for the confidentiality of an internal investigation.[1]
In principle, the employer must respect and protect the personality (including confidentiality and privacy) and integrity of the employee (article 328 paragraph 1, Swiss Code of Obligations) and take appropriate measures to protect the employee. Because of the danger of pre-judgment or damage to reputation as well as other adverse consequences, the employer must conduct an internal investigation discreetly and objectively. The limits of the duty of care are found in the legitimate self-interest of the employer.[2]
In return for the employer's duty of care, employees must comply with their duty of loyalty and safeguard the employer's legitimate interests. In connection with an internal investigation, employees must therefore keep the conduct of an investigation confidential. Additionally, employees must keep confidential and not disclose to any third party any facts that they have acquired in the course of the employment relationship, and which are neither obvious nor publicly accessible.[3]
[1] Wolfgang Portmann/Roger Rudolph, BSK OR, Art. 328 N 1 et seq.
[2]Claudia Fritsche, Interne Untersuchungen in der Schweiz, Ein Handbuch für Unternehmen mit besonderem Fokus auf Finanzinstitute, p. 202.
[3] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 133.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The purpose of internal investigations would be jeopardised by fully informing a suspected employee beforehand, as it would allow him or her to hide or destroy possible evidence, plan his testimony or coordinate with other employees.
There is no legal requirement to inform the employee of the allegations or suspicions.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
Although there are no explicit provisions of law or policy requiring employers to provide specific information of allegations to investigated employees, in practice, at the early stage of investigation, in order to avoid alerting the investigated employee and reduce the possibility that the investigated employee may destroy the relevant evidence, the employer usually will not disclose the information of allegations to the investigated employee at the beginning of investigation. At the later stage of an investigation, when the employer has already obtained main evidence, the employer usually will properly disclose to the investigated employee the allegations that are clearly known by the employer and have sufficient evidence, and listen to the counterparty's opinions or argument, for the purpose of obtaining more information or getting the employee's confession.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As a matter of general principle, employees under investigation must have access to the necessary information to be able to defend themselves, in the context of their fundamental right to a fair trial and hearing.
Moreover, from a data protection perspective, they may be entitled to access their personal data in the respective files.
The above rights must be balanced with confidentiality and the need to safeguard the completion of the investigation and to protect the complainant from retaliation.
According to L.4990/2022, all data and information as well as the identity of the complainant are confidential, and any disclosure is only permitted where required by the EU or national legislation or during court proceedings, and only if it is necessary for the protection of the defence rights of the employee under investigation. The section of L.4808/2021 for the elimination of workplace violence and harassment does not regulate this specifically but provides a general obligation for confidentiality.
Italy
Italy
- at BonelliErede
- at BonelliErede
From an employment law perspective, our legal system does not provide a specific duty for an employer to inform employees that a workplace investigation is in progress.
In addition, disclosing such information could put at risk the outcome of the workplace investigation (eg, destruction of evidence), and it would therefore be arguable that no information should be provided to employees.
On the other hand, if, upon completion of the investigation, the employer decides to bring disciplinary action against the employee, then the latter must be informed of the complaints with a letter stating the procedure (see questions 3 and 12).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As a result of the employer's duty of care (article 328, Swiss Code of Obligations), employees under investigation have certain procedural rights. These include, in principle, the right of the accused to be heard. In this context, the accused has the right to be informed at the beginning of the questioning about the subject of the investigation and at least the main allegations and they must be allowed to share their view and provide exculpatory evidence.[1] The employer, on the other hand, is not obliged to provide the employee with existing evidence, documents, etc, before the start of the questioning.[2]
Covert investigations in which employees are involved in informal or even private conversations to induce them to provide statements are not compatible with the data-processing principles of good faith and the requirement of recognisability, according to article 4 of the Swiss Federal Act on Data Protection.[3]
Also, rights to information arise from the Swiss Federal Act on Data Protection. In principle, the right to information (article 8, Swiss Federal Act on Data Protection) is linked to a corresponding request for information by the concerned person and the existence of data collection within the meaning of article 3 (lit. g), Swiss Federal Act on Data Protection. Insofar as the documents from the internal investigation recognisably relate to a specific person, there is in principle a right to information concerning these documents. Subject to certain conditions, the right to information may be denied, restricted or postponed by law (article 9 paragraph 1, Swiss Federal Act on Data Protection). For example, such documents and reports may also affect the confidentiality and protection interests of third parties, such as other employees. Based on the employer's duty of care (article 328, Swiss Code of Obligations), the employer is required to protect them by taking appropriate measures (eg, by making appropriate redactions before handing out copies of the respective documents (article 9 paragraph 1 (lit. b), Swiss Federal Act on Data Protection)).[4] Furthermore, the employer may refuse, restrict or defer the provision of information where the company’s interests override the employee’s, and not disclose personal data to third parties (article 9 paragraph 4, Swiss Federal Act on Data Protection). The right to information is also not subject to the statute of limitations, and individuals may waive their right to information in advance (article 8 paragraph 6, Swiss Federal Act on Data Protection). If there are corresponding requests, the employer must generally grant access, or provide a substantiated decision on the restriction of the right of access, within 30 days (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 paragraph 4, Ordinance to the Federal Act on Data Protection).
[1] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
[2] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
[3] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
[4] Claudia Götz Staehelin, Unternehmensinterne Untersuchungen, 2019, p. 37.
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
When dealing with reports and persons covered by the HSchG, the provisions on identity protection must be followed. In all internal investigations, only authorised persons should receive information.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
At the level of criminal procedure in PRC, only the Criminal Procedure Law of PRC provides that pseudonyms may be used in the indictment as a substitute for the disclosure of a witness's personal information, such as name, address, employer and contact information, to protect the personal safety of the witness. However, there are no relevant provisions on whether the identity of the complainant, the witness in civil litigation and the provider of information shall be kept confidential during an investigation.
During the course of an investigation, in order to protect the privacy of relevant personnel and avoid the risk of infringement, the employer usually keeps the identity of the complainant or the provider of investigation information confidential. However, at the civil litigation stage, the witness is unavoidably required to testify in court, and must truthfully identify himself/herself to the court.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
According to express provisions of L.4990/2020, in principle personal data and any other information that may lead directly or indirectly to the identification of the complainant must not be disclosed to anyone other than the investigating individuals unless the complainant gives consent[4] and that is why pseudonyms should be used. The witnesses and third persons that aid the complainant are deemed as “mediators” by the Law and their contribution to the procedure should be confidential[5].
L.4808/2021 does not indicate when such disclosures are permitted; however, it is obvious that this is a matter of cost-benefit analysis where the public interest and the fundamental rights of the involved persons should be considered in a balanced way to ensure the best results. From a data protection perspective, it could be argued that the person under investigation’s right to know the identity of the complainant, witnesses or sources of information should be limited to protect the rights of these persons.
Italy
Italy
- at BonelliErede
- at BonelliErede
Yes, in principle the identity of the complainant, witnesses or sources of information for the investigation can be kept confidential.
On the other hand, if the employer – after having concluded the investigation – brings disciplinary action against the employee, the employer must send a letter to the employee in which the facts are described in detail, objectively and in a precise way, identifying when and where they have taken place, to allow a proper defence for the employee.
Even at this stage, however, the employer has no obligation to provide the employee with the evidence underlying the facts ascribed to him (ie, the employer has no obligation to specify the identity of the individuals through which they gained knowledge of the facts reported in the disciplinary letter).
However, if the employee subsequently challenges the disciplinary sanction before a judge, the employer bears the burden of proof, which may mean having to call the individuals interviewed within the internal investigation to stand as witnesses in court.
Moreover, in case of whistleblowing reports falling within the scope of the WB Decree, the employer is requested to generally keep the whistleblower’s identity confidential (according to art. 12 of the WB Decree). More specifically: (i) if the disciplinary charges are grounded on investigations which are different and additional to the whistleblowing report (although arising as a consequence of the report), the whistleblower’s identity may not be disclosed; (ii) if the disciplinary charges are grounded, in whole or in part, on the whistleblowing report, and knowing the identity of the whistleblower is indispensable for the defendant, such report may be used for the purpose of the disciplinary proceeding only if the whistleblower gives consent to his/her identity being revealed.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As mentioned under Question 10, the employer’s duty of care (article 328, Swiss Code of Obligations) also entails the employer’s duty to respect and protect the personality (including confidentiality and privacy) and integrity of employees (article 328 paragraph 1, Swiss Code of Obligations) and to take appropriate measures to protect them.
However, in combination with the right to be heard and the right to be informed regarding an investigation, the accused also has the right that incriminating evidence is presented to them throughout the investigation and that they can comment on it. For instance, this right includes disclosure of the persons accusing them and their concrete statements. Anonymisation or redaction of such statements is permissible if the interests of the persons incriminating the accused or the interests of the employer override the accused’ interests to be presented with the relevant documents or statements (see question 11; see also article 9 paragraphs 1 and 4, Swiss Federal Act on Data Protection). However, a careful assessment of interests is required, and these must be limited to what is necessary. In principle, a person accusing another person must take responsibility for their information and accept criticism from the person implicated by the information provided.[1]
[1] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 390.
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
According to section 6(1) of the DSG, employees who have access to personal data in the course of their professional activities must maintain data confidentiality and continue to do so even after termination of their employment.
Non-disclosure agreements can generally be used to achieve this but are subject to certain restrictions. They may not be used to conceal criminal activity, violate the privacy rights of individuals, circumvent legal disclosure obligations, prevent the exercise of legal rights or contain clauses that violate existing laws, in particular data protection regulations.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
Yes. In practice, before conducting a compliance investigation, we recommend that the employer and the investigator enter into a confidentiality agreement to require the investigator to keep confidential the facts and the substance of the investigation. This will not only better protect the personal information of the complainant, the witness and the investigated employee, but also help the investigation to proceed smoothly.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
NDAs are an option, especially to outline in detail the obligations of the persons conducting the investigation, which is also provided for in law. On the other hand, NDAs will not prevent persons involved from providing information to the competent authorities in the context of criminal or other similar procedures, where they must do so by law. Moreover, they may not protect confidentiality if persons who report breaches of Union law decide to make an external or public report, according to the provisions of L. 4990/2022.
Italy
Italy
- at BonelliErede
- at BonelliErede
Yes, in principle, NDAs can be used to keep the fact and substance of an investigation confidential, even if it is not strictly necessary (and not often done in our experience).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In addition to the above-mentioned statutory confidentiality obligations, separate non-disclosure agreements can be signed. In an internal investigation, the employee should be expressly instructed to maintain confidentiality.
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
If a lawyer is involved in the investigation, communication between the lawyer and client is subject to legal professional privilege. These communications must not be disclosed. Any documents collected by an internal audit can be seized and used. However, a document created by a lawyer can only be seized. The same applies to other professional representatives of parties, such as notaries and auditors, as potential holders of professional secrecy.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The employer has the property right over all its properties. When discovering employee's misconduct, the employer is entitled to conduct an investigation within a certain scope according to the relevant laws and regulations, as well as the management system of the employer. Generally speaking, the employer is not required to obtain consent of the employee when conducting an investigation of the space and objects owned by it. The employer has no right to directly conduct an investigation of the employee's private space, objects, bank accounts and stock trading accounts. The public security organ or other public authorities should be involved in the investigation. In principle, if the employee's private space or objects are mixed with the employer's private space or objects, the employer should obtain consent of the employee for an investigation. Meanwhile, the employer's investigation should be controlled within the reasonable and necessary limit, and the employer is not allowed to illegally use or disclose the investigation results, otherwise it may constitute infringement. In addition, we also recommend that the employer stipulate explicitly in the employment contract and the internal management system that the employer has the right to detain and inspect the articles or equipment distributed by the employer, so as to reduce the compliance risk of internal investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Regarding L.4990/2022 for whistleblowers’ procedures, many categories of privilege may occur during an investigation, such as: attorney-client privilege; doctor-patient privilege; and court or other proceedings’ privilege deemed as classified. L.4990/2022 provides that its provisions do not affect any of these privileges and these privileges supersede[6].
Privilege may also be attached to investigation materials in investigations relating to workplace harassment and violence incidents; however, since L.4808/2021 does not offer a specific provision and criminal proceedings may also commence, the matter of privilege must be examined ad hoc.
[6] Law 4990/2022 art.5 par.2(b) and par.2(c)
Italy
Italy
- at BonelliErede
- at BonelliErede
In general, from an employment law perspective, workplace investigations made by corporate departments (eg, HR and legal counsel who do not operate in their function as lawyers) are not covered by privilege. Generally speaking, privilege covers correspondence and conversations between lawyers.
In defensive criminal law investigations, legal privilege applies.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As outlined above, all employees generally have the right to know whether and what personal data is being or has been processed about them (article 8 paragraph 1, Swiss Federal Act on Data Protection; article 328b, Swiss Code of Obligations).
The employer may refuse, restrict or postpone the disclosure or inspection of internal investigation documents if a legal statute so provides, if such action is necessary because of overriding third-party interests (article 9 paragraph 1, Swiss Federal Act on Data Protection) or if the request for information is manifestly unfounded or malicious. Furthermore, a restriction is possible if overriding the self-interests of the responsible company requires such a measure and it also does not disclose the personal data to third parties. The employer or responsible party must justify its decision (article 9 paragraph 5, Swiss Federal Act on Data Protection).[1]
The scope of the disclosure of information must, therefore, be determined by carefully weighing the interests of all parties involved in the internal investigation.
[1] Claudia M. Fritsche, Interne Untersuchungen in der Schweiz, Ein Handbuch für Unternehmen mit besonderem Fokus auf Finanzinstitute, p. 284 et seq.
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
In general, an employee is not entitled to have a representative present during investigations. However, he is free to reach out to the works council or independently contact a lawyer for advice. The employer must hear the works council upon his or her request on all matters concerning the interests of employees at the company. Once disciplinary proceedings begin, the employee has the right to be represented by a lawyer.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The relevant laws and regulations in the PRC have not made explicit provision regarding rights to representation. In practice, some arbitral tribunals and courts hold the view that it is reasonable for the employee to refuse to cooperate with the investigation if he/she is not accompanied or has no legal representatives. Therefore, the employer usually cannot impose disciplinary punishment by warning or even termination of employment contract on the basis of such refusal. Therefore, we tend to believe that, where the employee under investigation requests to be accompanied or have legal representation, the employer should fully consider and communicate with the employee about the request, and prudently impose disciplinary punishment on the employee for failing to cooperate with the investigation.
Of course, considering that satisfying such request will increase the difficulties and obstacles for the employer to carry out the investigation to a certain extent, we still suggest that the employer include in its rules and regulations such provisions as "the employee being investigated shall actively and unconditionally cooperate with the employer's investigation", etc., in order to provide institutional support for the follow-up requirement or even disciplinary punishment by the employer on employee and to encourage the employee to cooperate in the investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Greek law does not specifically regulate the right to be accompanied or have legal representation during internal investigations for private-sector employees.
However, the right to legal representation established in article 6 of the European Convention on Human Rights could be interpreted to cover cases such as internal investigations in the workplace. In addition, according to article 136 of Civil Servant Code, the employee under investigation has the right to be represented by an attorney at law. There is an additional argument regarding private-sector employees and their right to legal representation, by applying this provision by analogy.
Italy
Italy
- at BonelliErede
- at BonelliErede
In principle no, because the investigations’ interviews should only deal with the collection of data/or information and not have any disciplinary or accusatory purpose.
However, if the investigation leads to a disciplinary procedure, the employee – under article 7 of the Workers’ Statute – has the right to ask for a meeting to present his or her justification and, on that occasion, to be assisted by a trade union representative. Employees sometimes ask to be assisted by a lawyer and companies usually accept, as a standard practice.
In defensive criminal law investigations, if the employee is suspected of having committed a crime, he or she must be interviewed with the assistance of a criminal lawyer.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In the case of an employee involved in an internal investigation, a distinction must be made as to whether the employee is acting purely as an informant or whether there are conflicting interests between the company and the employee involved. If the employee is acting purely as an informant, the employee has, in principle, no right to be accompanied by their own legal representative.[1]
However, if there are conflicting interests between the company and the employee involved, when the employee is accused of any misconduct, the employee must be able to be accompanied by their own legal representative. For example, if the employee's conduct might potentially constitute a criminal offence, the involvement of a legal representative must be permitted.[2] Failure to allow an accused person to be accompanied by a legal representative during an internal investigation, even though the facts in question are relevant to criminal law, raises the question of the admissibility of statements made in a subsequent criminal proceeding. The principles of the Swiss Criminal Procedure Code cannot be undermined by alternatively collecting evidence in civil proceedings and thus circumventing the stricter rules applicable in criminal proceedings.[3]
In general, it is advisable to allow the involvement of a legal representative to increase the willingness of the employee involved to cooperate.
[1] Claudia Götz Staehelin, Unternehmensinterne Untersuchungen, 2019, p. 37.
[2] Simona Wantz/Sara Licci, Arbeitsvertragliche Rechte und Pflichten bei internen Untersuchungen, in: Jusletter 18 February 2019, N 59.
[3] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 392; Niklaus Ruckstuhl, BSK-StPO, Art. 158 StPO N 36.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The Austrian Labour Constitution Act (ArbVG) does not contain any provisions regarding workplace investigations. The employee has the right to address the works council but is not entitled to have the works council comply with his or her request.
The works council's opportunities for participation are conclusively regulated. Certain investigative or control measures may require the consent or co-determination of the works council.
Under section 96(1)3 ArbVG, the consent of the works council is required if the employer wishes to introduce and maintain control measures or technical systems for monitoring employees that affect human dignity, such as video surveillance or specific staff questionnaires. If there is no works council, the consent of each individual employee is required.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The relevant laws and regulations in the PRC have not expressly provided the employer’s obligation to inform the trade union of the internal investigation or the right of the trade union to participate in the employer's internal investigation. In practice, given the confidential nature of internal investigation, the employer usually does not voluntarily inform the trade union of such information. However, in accordance with Article 25 of the Measures for the Supervision of Labor Law by Trade Unions of the PRC, the trade union shall have the right to conduct an investigation if the employer has violated the labor laws and regulations or infringed the legitimate rights and interests of the employee. Therefore, it is still possible that the employer, in the course of the internal investigation, may be investigated by the trade union if it has violated the labor laws and regulations or infringed the legitimate rights and interests of the employee (e.g. being suspected of infringing personal information or privacy).
In addition, if the employer determines that the employee has committed a serious disciplinary offence based on the result of the internal investigation and thus decides to terminate the employment contract unilaterally, it shall notify the trade union of the reasons for termination in advance. If the employer has violated the laws, administrative regulations or the provisions of the employment contract, the trade union is entitled to request the employer to make corrections.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
L.4990/2022 explicitly states that the exercise of employee rights that refer to consulting from representatives or trade unions and protection against any detrimental measure that results from those consultations does not affect the implementation of any legal provisions. The autonomy of social partners and their right to enter into collective agreements regardless of the level of protection provided by L.4990/2022[7] is also unaffected.
Under L.4808/2021, legal persons and associations of persons, including trade unions, that have a legitimate interest in doing so may, with the consent of the complainant, bring an action in the complainant’s name before the competent administrative or judicial authorities. They may also intervene in their defence[8].
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, a workplace investigation does not require the involvement of a trade union (on the assumption that no specific union agreement has been reached at a company level to entitle trade unions to specific forms of consultation or involvement in workplace investigations, which is not common).
According to section 4 of the Workers’ Statute, as stated above, the involvement of the trade union is necessary regarding the installation and use of specific equipment (such as cameras, switchboards, software) that potentially allows the employer to remotely monitor working activity, and which can be done only with prior agreement of the unions (or authorised by the labour inspectorate). The union agreement must be made before the installation of the system, and therefore would normally be already in place when an investigation starts.
Pursuant to the WB Decree (Art. 4), union representatives (or external unions) should be “heard” before the employer activates a WB reporting channel[1].
[1] According to certain guidelines issued by the industrial trade association (Confindustria), the involvement should be purely for information purposes.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In general, works councils and trade unions are not very common in Switzerland and there are no statutory rules that would provide a works council or trade union a right to be informed or involved in an ongoing internal investigation. However, respective obligations might be foreseen in an applicable collective bargaining agreement, internal regulations or similar.
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
There is no additional support for the employees concerned. However, the employer may offer support measures to the employees to ensure better cooperation. The choice of support measures is at the employer's discretion. For example, the employer could offer to bear lawyer’s fees, if the employee is cooperative. Such decisions must always be made on a case-by-case basis.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The relevant laws and regulations in the PRC have not made explicit requirements regarding the supports received by the employee involved in the investigation. In practice, the employer will usually prepare an internal time schedule before carrying out the investigation. Although the detailed time schedule will not be disclosed to the employee, the employer will usually inform the employee of each investigation in advance. In order to improve the transparency of the investigation, we recommend that employer should make positive and proper responses to employee who enquires about the progress of the investigation, so as to avoid employee's suspicion.
In addition, the Personal Information Protection Law of the PRC stipulates the rights of individuals in the process of personal information processing. In the scenario of internal investigation of an employer, the investigated party may, in accordance with such provisions, ask the employer for the right to review and even copy the personal information collected. Where the employee finds that the personal information collected by internal investigation is inaccurate or incomplete, he/she is entitled to request for correction or supplementation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
According to L.4990/2022, any form of retaliation against complainants is prohibited, including threats of retaliation[9]. The complainants have the right to cost-free legal advice about possible acts of retaliation as well as cost-free provision of psychological support (to be defined by Ministerial Decisions)[10]. In terms of other types of support, the complainants are not in principle liable for the acquisition of information or releasing the information they reported under specific conditions (eg, the acquisition or access does not independently constitute a criminal offence, if they had reasonable grounds for believing that a report was necessary to reveal the violation)[11].
L. 4808/2021 states that the dismissal or termination of the legal relationship of employment and any other discrimination that constitutes an act of revenge or retaliation is prohibited and invalid[12].
Italy
Italy
- at BonelliErede
- at BonelliErede
According to the law, there is no other specific kind of support other than what is mentioned above.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The employer does not generally need to provide specific support for employees that are subject to an internal investigation. The employer may, however, allow concerned employees to be accompanied by a trusted third party such as family members or friends.[1] These third parties will need to sign separate non-disclosure agreements before being involved in the internal investigation.
In addition, a company may appoint a so-called lawyer of confidence who has been approved by the employer and is thus subject to professional secrecy. This lawyer will not be involved in the internal investigation but may look after the concerned employees and give them confidential advice as well as inform them about their rights and obligations arising from the employment relationship.[2]
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Provided the employer complies with labour law and data protection regulations, internal investigations are lawful and are not regarded as administrative or judicial proceedings. If legal consequences for not cooperating, such as dismissal, are threatened by the employer or his investigators, the offence of coercion under section 105 of the Austrian Criminal Code could be fulfilled.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
There is no specific provision on this in relevant laws and regulations in the PRC. In practice, the employer will usually stipulate the relevant grievance procedure and process in its internal rules and regulations, and provide the employee with the relevant grievance rights in accordance with the grievance regulations. Alternatively, even if there is no provision on grievance procedure and process in their internal rules and regulations, from the perspective of fairness and rationality, we recommend that the employer should review and evaluate the grievance raised by the employee. If it is confirmed that irregularities exist in the investigation, which may directly affect the conclusions of the investigation (e.g. a past conflict between the employee and the investigator or the employee was unfairly treated in the investigation), the employer shall suspend the investigation and resume the investigation after timely resolution of such complaint. If the grievance does not affect the normal conduct of the investigation, the employer can still proceed with the investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Employees under investigation frequently raise grievances during investigation procedures that are dealt with on a case-by-case basis. The grievances raised by the employee under investigation are examined by the employees responsible for the investigation. They may either pause the relevant proceedings and review the grievance, especially if the claims of the employee under investigation are linked to a breach of his or her data or hearing rights, or they may continue the investigation.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, grievances from the employee do not per se automatically entail an interruption of the investigation. This conclusion, however, should be double-checked on a case-by-case basis, depending on what kind of grievance the employee under investigation raises, and on the potential effect of that grievance (if grounded): for example, should the grievance concern alleged unlawful processing of personal data, the employer could consider suspending the investigation while checking if the grievance has grounds, to avoid collecting data that cannot be used.
Grievances may be raised “internally” vis-à-vis the employer, possibly through procedures regulated by internal policies or codes (including, for example, whistleblowing procedures), if any, or brought to external authorities (which, depending on the kind of issue, could be a labour court, the Data Privacy Authority, law enforcement authorities, etc).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
In the context of private internal investigations, grievances initially raised by the employee do not usually have an impact on the investigation.
However, if the employer terminates the employment contract due to a justified legal complaint raised by an employee, a court might consider the termination to be abusive and award the employee compensation in an amount to be determined by the court but not exceeding six months’ pay for the employee (article 336 paragraph 1 (lit. b) and article 337c paragraph 3, Swiss Code of Obligations). Furthermore, a termination by the employer may be challenged if it takes place without good cause following a complaint of discrimination by the employee to a superior or the initiation of proceedings before a conciliation board or a court by the employee (article 10, Federal Act on Gender Equality).
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The involved employee's sick leave does not affect the internal investigation. Most investigative measures can be carried out without the employee's presence.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
During the investigation, the employer should fully respect the basic labor rights of the employee. According to the relevant provisions of Labor Contract Law of the PRC, if an employee is sick during the investigation, the employer should permit him/her to take sick leave provided that he/she provides the medical certificate issued by the medical institution and performs the medical leave application procedure as required by the employer. Therefore, the employer usually needs to request the employee to cooperate with the investigation after the sick leave, and cannot force the investigation by means of coercion or violence.
However, for the contents that can be investigated by the employer alone, such as the information publicized by the employee on social media and the employee's relevant information publicized on official website, since the investigation of such information is not affected by the employee's physical condition, the employer may adjust the investigation plan and conduct such part of the investigation first.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In principle, the health of an ordinary employee would not prevent the investigation procedure from taking place (eg, interviews with witnesses or the collection of evidence would not be postponed or suspended). However, if the employee under investigation is unwell and they can't participate in the procedure, the investigation may be suspended or postponed until the employee can take part. Bearing in mind the majority of company internal policies and regulations governing workplace investigations provide for a specific framework and timetable for the whole procedure to be completed, the long-term sickness of an employee under investigation may impede the completion of the procedure in the prescribed time. As a result, the person conducting the investigation may seek alternative measures to facilitate participation (eg, teleconferencing).
On a related note, if sickness occurs after the investigation is completed and the employer decides upon the imposition of disciplinary measures against the said employee and the initiation of a relevant procedure, the decision should be duly and timely communicated to the employee, irrespective of whether his or her presence in the workplace is not possible because of the illness.
Italy
Italy
- at BonelliErede
- at BonelliErede
Although there are no specific rules stating an investigation must be suspended if the employee under investigation goes off sick, practically speaking, this may slow down the process. Indeed, the employer would not be in the position to “force” the employee, while he or she is absent from work, to physically attend meetings, although they may ask for the employee’s availability to attend remote interviews (eg, via videoconference).
There is case law regarding an employee’s sickness during a disciplinary procedure (i.e. the procedure described above in point 3): according to certain rulings, if an employee, as per his or her rights, asks to submit an oral defence, but then falls sick, this does not prevent the employer from completing the procedure (and taking disciplinary action), unless the employee proves that his or her sickness prevents him or her from physically attending the meeting (being said that, above all if the procedure ends with a dismissal, a case-by-case analysis on how to manage such situations is highly recommended).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The time spent on the internal investigation by the employee should be counted as working time[1]. The general statutory and internal company principles on sick leave apply. Sick leave for which the respective employee is not responsible must generally be compensated (article 324a paragraph 1 and article 324b, Swiss Code of Obligations). During certain periods of sick leave (blocking period), the employer may not ordinarily terminate the employment contract; however, immediate termination for cause remains possible.
The duration of the blocking period depends on the employee's seniority, amounting to 30 days in the employee's first year of service, 90 days in the employee's second to ninth year of service and 180 days thereafter (article 336c paragraph 1 (lit. c), Swiss Code of Obligations).
[1] Ullin Streiff/Adrian von Kaenel/Roger Rudolph, Arbeitsvertrag, Praxiskommentar zu Art. 319–362 OR, 7. A. 2012, Art. 328b N 8 OR.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Private investigations differ from criminal or regulatory investigations. Nevertheless, even for internal investigations, it is advisable to collect evidence in a way that can be admitted in court, as it may have to be presented to the authorities during the investigation process. Generally, any evidence obtained in the course of an internal investigation may be admitted in subsequent administrative or judicial proceedings.
If the evidence is not voluntarily surrendered, seizure or confiscation is possible. Since official proceedings are often lengthy, suspension is not always recommended.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The PRC law is silent on how to deal with the conflict between internal investigation and criminal or regulatory investigation. In general, the employer should cooperate with the criminal or regulatory investigation being conducted by the investigating authority to avoid hindering official business.
According to the Civil Procedure Law of the PRC, the Administrative Procedure Law of the PRC, and the Criminal Procedure Law of the PRC, the investigating authorities (including the public security authority, the people's procuratorate, the people's court, and the supervision authority) have the power to investigate and verify evidence from the witness or the individuals or entities that have access to the evidentiary materials. Therefore, the investigating authorities have the power to compel the employer to share or provide evidentiary materials relating to the case, and the employer shall cooperate and provide such materials. If the employer refuses to cooperate, it may face administrative liability (such as warning, fine and detention of the directly responsible person), judicial liability (fine shall be imposed on the main person in charge or the directly responsible person, and detention may be granted to those who refuse to cooperate) and even criminal liability (those who conceal criminal evidence may be guilty of perjury).
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Incidents of violence and harassment may be dealt with by certain independent authorities, such as the Labour Inspectorate Body and the Greek Ombudsman. The former is competent to impose sanctions on the employer if there is a breach of the general prohibition of violence and harassment at the workplace and the obligation of employers regarding the prevention of such incidents and the obligation to adopt policies within the business. The Greek Ombudsman is competent to deal with disputes when there is violence or harassment in the workplace coupled with discrimination due to, for example, gender, age, disability, sexual orientation, religious beliefs, or gender identity. Moreover, the applicable legal framework[13] stipulates that victims of violence and harassment are entitled to lodge a report before the Labour Inspectorate Body and the Greek Ombudsman. This is in addition to the judicial protection he or she may seek and the internal investigation procedure to which he or she may have recourse, without specifying whether internal proceedings may be suspended before the regulatory bodies decide on the matter.
On the other hand, the National Transparency Authority and in certain cases the Hellenic Competition Commission are external reporting channels for employees reporting breaches of Union law. In such cases, L.4990/2022 (article 11 paragraph 5) stipulates that the investigation before the National Transparency Authority is not suspended if reporting procedures before other regulatory authorities have been initiated.
Moreover, criminal investigations can run in parallel with internal probes.
[13] Law 4808/2018 art.10
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, internal investigations and those performed by external authorities are autonomous.
In addition, there are no general rules under which the employer must wait for the completion of a criminal investigation before completing its investigation and taking disciplinary action; if the employer believes it has sufficient grounds and evidence to take disciplinary action, it does not have to wait.
That being said, criminal investigations – given the wider investigation powers that public prosecutors or regulators have – may help to gather further evidence on the matter. From a practical point of view, the employer may decide to suspend (with pay) the employee apending the outcome of the criminal investigation, although this option must be evaluated carefully, given the potentially long duration of criminal proceedings, and the fact that the employer normally would not be in a position to access the documents and information about the criminal investigation (unless the company is somehow involved in the proceeding).
Lastly, in very general terms, police or public prosecutors have broad investigatory powers during criminal investigations, which could in certain circumstances make it compulsory for an employer to share evidence (but a case-by-case analysis is necessary regarding specific situations). Moreover, public prosecutors usually do not appreciate that, pending criminal proceedings, internal investigations are being conducted, because it can interfere with the criminal investigation.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The actions of the employer may carry through to a subsequent state proceeding. First and foremost, any prohibitions on the use of evidence must be considered. Whereas in civil proceedings the interest in establishing the truth must merely prevail for exploitation (article 152 paragraph 2, Swiss Civil Procedure Code), in criminal proceedings, depending on the nature of the unlawful act, there is a risk that the evidence may not be used (see question 27 and article 140 et seq, Swiss Civil Procedure Code).
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
There is no explicit stipulation in the laws and regulations in the PRC on this issue. In practice, given the confidentiality of any investigation into a violation, the employer usually will not disclose the investigation result or submit the investigation report to the investigated employee, unless it is explicitly provided in its rules and regulations that the employer is obliged to inform the employee of the investigation result. However, according to the Employment Contract Law of the PRC and the opinions of the mainstream arbitration tribunals and courts, if an employer decides to take disciplinary action against an employee (in particular, termination of employment contract) according to the investigation result, it is generally required to inform the employee of the investigation result. In other words, the employer generally needs to inform the employee of the specific facts based on which the disciplinary action is taken. Failure to do so may result in the generalization of serious violation of the employer's rules and regulations and lead the arbitration tribunals and courts to regard the termination as illegal.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
The employer has an obligation, towards the alleged victim but also the alleged perpetrator, to carefully investigate the report and any existing evidence before making decisions. The employee under investigation must be informed about the outcome of the procedure and any measures adopted in this regard. The respective decision must have due justification.
Italy
Italy
- at BonelliErede
- at BonelliErede
If the outcome of the investigation does not lead to a disciplinary procedure, there is no specific obligation for the employer regarding this.
However, to a certain extent, under privacy laws, the employee may exercise his or her right of access to information strictly related to him or her, arising from the investigation (which is, however, a wider privacy issue to be assessed under the GDPR.)
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.
The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
The employer may impose consequences under labour law. Consequences may include verbal or written warnings, transfers or other disciplinary measures. The employer may also implement training or educational measures if the issue is due to the employee's lack of knowledge. In serious cases, besides dismissal without notice – for example. if the employer seeks damages –legal action (civil or criminal) may be taken against the employee.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The employer may take disciplinary actions against the employee based on the investigation result and pursue their civil, administrative and even criminal liabilities. To be specific: 1) the employer may criticize and educate the employee, or take disciplinary actions such as warning, demotion and removal according to the internal rules and regulations of the employer. If the misconduct of the employee constitutes one of the circumstances stipulated in Article 39 of the Employment Contract Law of the PRC, the employer is entitled to take the most severe disciplinary action, namely termination of employment contract; 2) if the employee has caused economic loss to the employer, the employer may lawfully initiate a civil litigation recourse procedure; 3) if the employee violates the Law on Administrative Penalties for Public Security Administration of the PRC, the employer may deliver the case to the administrative department for corresponding administrative penalties; 4) if the employee is suspected of a crime, the employer should deliver the case to the public security authority and pursue his/her corresponding criminal liabilities according to the law.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
For workplace violence and harassment investigations, depending on the outcome of the internal investigation, the employer may adopt certain measures including, for example, recommendations to the employee under investigation, changes to the employee’s working hours and transfer to another department.
If the employer decides to terminate the employment relationship, without having previously followed existing corporate policies regarding reporting procedures or without having provided the alleged perpetrator with the right to be heard, the dismissal could be deemed invalid. In any case, the measures adopted should be appropriate and proportional to the act committed.
Italy
Italy
- at BonelliErede
- at BonelliErede
Upon completion of the investigation, the employer – if misconduct by the employee emerges – may bring disciplinary action against him or her (which may be either dismissal or a “conservative” measure such as an oral or written warning, a fine, or a suspension, within the limits provided under the law and possibly the applicable NCBA).
If a criminal offence by the employee emerges, the employer may also decide to report the crime to the public authorities (see question 25).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
If the investigation uncovers misconduct, the question arises as to what steps should be taken. Of course, the severity of the misconduct and the damage caused play a significant role. Furthermore, it must be noted that the cooperation of the employee concerned may be of decisive importance for the outcome of the investigation. The possibilities are numerous, ranging, for example, from preventive measures to criminal complaints.[1]
If individual disciplinary actions are necessary, these may range from warnings to ordinary or immediate termination of employment.
[1] David Rosenthal et al., Praxishandbuch für interne Untersuchungen und eDiscovery, Release 1.01, Zürich/Bern 2021, p. 180 et seq.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
It is up to management to decide which results should be disclosed and to whom. It is important to know who the persons concerned are and who has an interest in disclosure.
From a legal perspective, disclosure must follow the GDPR. Internal policies can specify how the results are to be handled. Works Council Agreements (WCAs) may also contain regulations on how to deal with internal investigations and the disclosure of results.
There is no requirement to publish the results of the investigation, but it may be advisable to cooperate with the authorities. This is particularly the case if the employer has suffered damage or is himself threatened with prosecution. The release of investigation results can be compelled through the courts.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
If the relevant investigation authorities or regulatory authorities require the employer to provide the investigation findings and the interview records of its employee's illegal activities, the employer is usually obliged to cooperate with the authorities and make disclosures according to the requirements of the law. Meanwhile, according to Article 110 of the Criminal Procedure Law of the PRC, any entity or individual who has found out facts of a crime or a criminal suspect has both the right and the duty to report the case or provide information to the public security authority, the people's procuratorate or the people's court. Therefore, if the investigation findings show that the employee is suspected of a crime, the employer should disclose the information to the relevant investigation authorities including the public security authority. For some special industries, for example, the investigation findings against the banking industry usually also need to be reported to the higher-level banking supervisory authorities. Although the relevant investigation staff and supervisory staff are usually required to comply with the confidentiality obligations according to the laws or regulations, the risk of leakage of the reported information due to the expansion of the scope of persons who are aware of the investigation findings cannot be completely excluded.
In addition, an employer may decide whether to disclose the results of an investigation (mainly including the violation of disciplines and the disciplinary punishment) to other employees at its own discretion, but has to disclose the relevant information among employees to the extent that it is "minimum and necessary", so as to avoid infringing on the employee's personal information or privacy or even right of reputation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In principle, there is no specific obligation for investigating persons to disclose their findings. For proceedings before a court that have been initiated or investigated by the police or competent regulatory bodies, the relevant findings may be communicated under strict conditions and provided that the personal data of the parties involved are not publicly disclosed.
More specifically, under L. 4490/2022, in the context of whistleblowing procedures, personal data and any information that leads, directly or indirectly, to the identification of the complainant are not disclosed to anyone other than employees involved in the investigation, unless the complainant consents. The identity of the complainant and any other information may only be disclosed in the context of investigations by competent authorities or judicial proceedings, to the extent necessary for the protection of the employee under investigation’s rights of defence. Confidentiality obligations govern the procedure for revealing trade secrets to police and regulatory bodies, especially in the framework of L.4990/2022.
Italy
Italy
- at BonelliErede
- at BonelliErede
Generally speaking, even if the investigation leads to evidence of a criminal offence, the employer does not have to inform public authorities (citizens and private entities do not have an obligation to report crimes they discover). The existence of any obligations to report to regulatory authorities (eg, banking and insurance regulatory authorities) should be investigated on a case-by-case basis.
The internal procedures of the company – as adopted by the company in the framework of legislation on the administrative or quasi-criminal vicarious liability of legal entities – may require the findings to be disclosed to certain internal bodies or committees.
As said above, the police or public prosecutors (and possibly other public authorities) may have, within their investigatory powers, and in certain circumstances, the power to access internal investigation outcomes (but a case-by-case analysis would be necessary).
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The employer is generally not required to disclose the final report, or the data obtained in connection with the investigation. In particular, the employer is not obliged to file a criminal complaint with the police or the public prosecutor's office.
Exceptions may arise, for example, from data protection law (see question 22) or a duty to release records may arise in a subsequent state proceeding.
Data voluntarily submitted in a proceeding in connection with the internal investigation shall be considered private opinion or party assertion.[1] If the company refuses to hand over the documents upon request, coercive measures may be used under certain circumstances.[2]
[1] Oliver Thormann, Sicht der Strafverfolger – Chancen und Risiken, in: Flavio Romerio/Claudio Bazzani (Hrsg.), Interne und regulatorische Untersuchungen, Zürich/Basel/Genf 2016, p. 123.
[2] Oliver Thormann, Sicht der Strafverfolger – Chancen und Risiken, in: Flavio Romerio/Claudio Bazzani (Hrsg.), Interne und regulatorische Untersuchungen, Zürich/Basel/Genf 2016, p. 102 et seq.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
The relevant laws and regulations in the PRC have not clarified the retention period of the investigation findings. According to Article 19 of the Personal Information Protection Law of the PRC, unless otherwise required by laws or administrative regulations, the retention period of personal information shall be the shortest period necessary to achieve the purpose of handling the information. Since the employee's personal information is very likely to be involved in the investigation findings, such report should be retained for the shortest period necessary to achieve the purpose of handling the information. In general, once the investigation is completed, the purpose of the internal investigation has been achieved or it is no longer necessary to achieve the purpose, and the employer may, in accordance with Article 22 of the Administrative Regulations of the PRC on Network Data Security (Draft for Comments), delete or anonymize the personal information within fifteen (15) working days. If it is technically difficult to delete the personal information, or it is difficult to do so within fifteen (15) working days due to business complexity or other reasons, the employer shall not conduct any processing other than storing the personal information and adopting necessary security measures, and shall give reasonable explanations to the employee.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Under the General Data Protection Regulation, employees’ personal details and information must be kept in the business records for as long as is necessary for the purposes of the employment relationship. Otherwise, stored data must be deleted. However, under L.4990/2022[14], reports remain in the relevant record for a reasonable and necessary time, and in any case until the completion of investigations or proceedings before the courts that have been initiated as a consequence of a complaint against the employee under investigation, the complainant or any third parties.
[14] L.4990/2022 art.16 par.1
Italy
Italy
- at BonelliErede
- at BonelliErede
The employer would normally keep the outcomes of the investigation for the entire duration of the employment relationship with the involved employee.
After the termination of the employment relationship, it appears reasonable to conclude that the employer would be entitled to retain this information for the time necessary to exercise its defence rights in litigation (taking into account that 10 years is the statute of limitations for contractual liability). Further requirements or restrictions under general privacy laws (and particularly the GDPR) should also be checked.
According to Art. 14 WB Decree, internal and external whistleblowing reports (including related documents) must be kept for as long as necessary for report processing, but no more than five years from the date of transmission of the procedure's final outcome.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.
From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]
[1] Wolfgang Portmann/Isabelle Wildhaber, Schweizerisches Arbeitsrecht, 4. Edition, Zurich/St. Gallen 2020, N 473.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Austria
Austria
- at GERLACH
- at GERLACH Rechtsanwälte
This relates to the severity of the error. Data protection violations can lead to fines by the data protection authority or claims for damages. If consequences under labour law, such as dismissal, have taken place due to erroneous investigations or incorrect results, the employee concerned can assert claims under labour law or seek damages.
Furthermore, there may be consequences under criminal law. This is particularly the case if documents have been falsified in the course of the investigation. It is, therefore, crucial that employers exercise diligence and due process in internal investigations. Investigations must be conducted transparently and lawfully.
China
China
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
- at Jingtian & Gongcheng
It is inevitable that the investigation involves the employee's personal information, and once the investigation is mishandled, the employer may face the following legal risks:
Civil liability: Both the Civil Code of the PRC and the Personal Information Protection Law of the PRC, clearly provide the civil liability for infringement of privacy and illegal processing of personal information. Therefore, the investigated employee or relevant organizations such as the people's procuratorate have the right to claim or file a public interest lawsuit on the employer's improper collection of evidence, requiring the employer to bear the liability for infringement. In addition, the evidence obtained by an employer through infringing the employee's privacy and personal information rights and interests, in violation of the law, cannot be used as the valid evidence for the employer's unilateral termination of the employment contract or requiring the employee to compensate for losses.
Administrative liability: Article 66 of the Personal Information Protection Law of the PRC provides that, where personal information is processed in violation of regulations, administrative penalties imposed by the department performing duties of personal information protection may be up to revoking the business license, and the person directly in charge and other directly liable persons may be fined up to one million yuan and prohibited from practicing within a time limit. Meanwhile, Article 67 of the Personal Information Protection Law of the PRC provides that relevant illegal acts shall be recorded in the employer's credit files and disclosed to the public.
Criminal liability: if an employer illegally sells or provides to others the personal information obtained during the internal investigation, and the circumstance is serious enough, the judicial authority has the right to hold the employer, the managers directly in charge and other directly liable persons criminally liable in accordance with the crime of "infringement of citizens' personal information" under Article 253A of the Criminal Law of the PRC.
It should be noted that a compliance investigation may also involve the employer's communication and investigation reporting with overseas authorities, or overseas institutions' direct access to information from the employer's domestic systems. If the employer conducts cross-border transmission of such personal information, it shall also meet one of the conditions set out in Article 38 of the Personal Information Protection Law of the PRC (i.e. passing the security assessment organized by the national cyberspace administration authority, obtaining certification from a professional institution concerning the protection of personal information or entering into a standard contract with an overseas recipient). Violations of the above provisions may result in civil, administrative and even criminal liability.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
The employee can contest the decisions of disciplinary councils before the courts and request their annulment.
Moreover, in the framework of L.4990/2022, a monetary penalty and prison sentence (to be defined by an implementing Ministerial Decision) may be imposed on any person violating confidentiality obligations concerning the identity and personal data of employees or third parties included in the investigation procedure, while monetary penalties are also provided for legal entities[15].
Moreover, administrative fines may also be imposed if the employer does not comply with the legal requirements concerning the prevention of violence and harassment in the workplace.
Furthermore, the employee under investigation may initiate proceedings before the courts under tort law, by claiming compensation for moral damages suffered if the company did not comply with its confidentiality obligations after the incident (eg, due to the spread of rumours in the workplace). This may also be linked with criminal law proceedings against the persons responsible for dealing with the investigation (and not against the legal person, since under Greek law there is no criminal liability for legal persons).
On the other hand, the employer may also be exposed to liability vis-à-vis the complainant, witnesses or facilitators, for breach of confidentiality or other obligations prescribed in the respective legal provisions, or if there are retaliation measures.
[15] L.4990/2022 art.23 par.1
Italy
Italy
- at BonelliErede
- at BonelliErede
It depends on the kind of error or breach. For example:
- a breach of privacy laws (eg, acquiring data from working instruments in lack of due requirements) would lead to the application of privacy law sanctions (including monetary fines); and
- breach of provisions regarding “remote” control of employees would lead to criminal sanctions and to the inadmissibility, for disciplinary purposes, of the data collected (and thus potentially to the unlawfulness of a dismissal based on such data).
Furthermore, if the employee has suffered damages as a result of the employer’s errors or breaches (and can specifically prove such damages and their amount), the employer may be held liable in court.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As there are no specific regulations for internal investigations, the usual legal framework within which the employer must act towards the employee derives from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights.
But, for example, unwarranted surveillance could conceivably result in criminal liability (article 179 et seq, Swiss Criminal Code) for violations of the employee's privacy. Furthermore, errors made by the employer could have an impact on any later criminal proceedings (eg, in the form of prohibitions on the use of evidence).[1]
Evidence obtained unlawfully may only be used in civil proceedings if there is an overriding interest in establishing the truth (article 152 paragraph 2, Swiss Civil Procedure Code). Consequently, in each case, a balance must be struck between the individual’s interest in not using the evidence and in establishing the truth.[2] The question of the admissibility of evidence based on an unlawful invasion of privacy is a sensitive one – admissibility in this case is likely to be accepted only with restraint.[3] Since the parties in civil proceedings do not have any means of coercion at their disposal, it is not necessary, in contrast to criminal proceedings, to examine whether the evidence could also have been obtained by legal means.[4]
Unlawful action by the employer may also have consequences on future criminal proceedings: The prohibitions on exploitation (article 140 et seq, Swiss Criminal Procedure Code) apply a priori only to evidence obtained directly from public authorities. Evidence obtained unlawfully by private persons (ie, the employer) may also be used if it could have been lawfully obtained by the authority and if the interest in establishing the truth outweighs the interest of the individual in not using the evidence.[5] Art. 140 paragraph 1 Swiss Criminal Procure Code remains reserved: Evidence obtained in violation of Art. 140 paragraph 1 Swiss Criminal Procure Code is subject to an absolute ban on the use of evidence (e.g. evidence obtained under the use of torture[6]).[7]
[1] Cf. ATF 139 II 7.
[2] ATF 140 III 6 E. 3
[3] Pascal Grolimund in: Adrian Staehelin/Daniel Staehelin/Pascal Grolimund (editors), Zivilprozessrecht, Zurich/Basel/Geneva 2019, 3rd Edition, §18 N 24a.
[4] Pascal Grolimund in: Adrian Staehelin/Daniel Staehelin/Pascal Grolimund (editors), Zivilprozessrecht, Zurich/Basel/Geneva 2019, 3rd Edition, §18 N 24a.
[5] Decision of the Swiss Federal Court 6B_1241/2016 dated 17. July 2017 consid. 1.2.2; Decision of the Swiss Federal Court 1B_22/2012 dated 11 May 2012 consid. 2.4.4.
[6] Jérôme Benedict/Jean Treccani, CR-CPP Art. 140 N. 5 and Art. 141 N. 3.
[7] Yvan Jeanneret/André Kuhn, Précis de procédure pénale, 2nd Edition, Berne 2018, N 9011.