Workplace Investigations

GDPR and the provisions of L. 4624/2019 regulate the gathering of physical evidence from a data protection perspective, providing, among other things, that personal data should be processed with transparency and to the extent necessary for the investigation.

L.4990/2022 on the protection of persons who report breaches of Union law regulates data protection issues in the context of whistleblowing investigations, mainly to safeguard confidentiality throughout the investigations.  

Several legal and case-law principles may be relevant depending on the kind of investigation, including the following:

• gathering evidence through employee “physical inspections and inspections on the employee’s belongings”: according to article 6 of the Workers’ Statute, these inspections are generally prohibited. They are permitted only where necessary to protect company assets (in such cases, corporal inspections may be carried out, subject to trade union agreement or National Labour Inspectorate authorisation, provided that, for example, they are carried out outside the workplace, that employees are selected with an automatic selection tool, and that the dignity and confidentiality of employees are protected);
• gathering evidence through “audiovisual equipment and other instruments from which the possibility of remote control of employees’ activities arises”: according to article 4 of the Workers’ Statute, remote systems cannot be directly aimed at controlling employees’ activity, but can only be put in place for organisational, production, work safety or asset-protection needs (which may result in an indirect control over employees’ activity), and may be installed before a trade union agreement or with previous authorisation from the National Labour Inspectorate; however, these rules do not apply to working tools in an employee’s possession (see question 8) and, in any case, employees must be informed of the possibility of remote control;
• gathering physical evidence through so-called defensive controls: according to the most recent case law, “defensive controls” can be defined as investigations carried out by the company where it has a suspicion of unlawful conduct by its employees. These controls can be carried out within certain limits and restrictions provided by case law – even in the absence of the guarantees provided for in article 4 of the Workers’ Statute.

In addition, when gathering physical evidence, there may be other provisions of law not strictly related to employment law that must be followed, for example, regarding privacy regulations (eg, minimisation of the use of personal data, collection of data only for specific purposes, and adoption of safety measures).

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.

Incidents of violence and harassment may be dealt with by certain independent authorities, such as the Labour Inspectorate Body and the Greek Ombudsman. The former is competent to impose sanctions on the employer if there is a breach of the general prohibition of violence and harassment at the workplace and the obligation of employers regarding the prevention of such incidents and the obligation to adopt policies within the business. The Greek Ombudsman is competent to deal with disputes when there is violence or harassment in the workplace coupled with discrimination due to, for example, gender, age, disability, sexual orientation, religious beliefs, or gender identity. Moreover, the applicable legal framework[13] stipulates that victims of violence and harassment are entitled to lodge a report before the Labour Inspectorate Body and the Greek Ombudsman. This is in addition to the judicial protection he or she may seek and the internal investigation procedure to which he or she may have recourse, without specifying whether internal proceedings may be suspended before the regulatory bodies decide on the matter.

On the other hand, the National Transparency Authority and in certain cases the Hellenic Competition Commission are external reporting channels for employees reporting breaches of Union law. In such cases, L.4990/2022 (article 11 paragraph 5) stipulates that the investigation before the National Transparency Authority is not suspended if reporting procedures before other regulatory authorities have been initiated.

Moreover, criminal investigations can run in parallel with internal probes.

Generally speaking, internal investigations and those performed by external authorities are autonomous.

In addition, there are no general rules under which the employer must wait for the completion of a criminal investigation before completing its investigation and taking disciplinary action; if the employer believes it has sufficient grounds and evidence to take disciplinary action, it does not have to wait.

That being said, criminal investigations – given the wider investigation powers that public prosecutors or regulators have – may help to gather further evidence on the matter. From a practical point of view, the employer may decide to suspend (with pay) the employee apending the outcome of the criminal investigation, although this option must be evaluated carefully, given the potentially long duration of criminal proceedings, and the fact that the employer normally would not be in a position to access the documents and information about the criminal investigation (unless the company is somehow involved in the proceeding).

Lastly, in very general terms, police or public prosecutors have broad investigatory powers during criminal investigations, which could in certain circumstances make it compulsory for an employer to share evidence (but a case-by-case analysis is necessary regarding specific situations). Moreover, public prosecutors usually do not appreciate that, pending criminal proceedings, internal investigations are being conducted, because it can interfere with the criminal investigation.

The actions of the employer may carry through to a subsequent state proceeding. First and foremost, any prohibitions on the use of evidence must be considered. Whereas in civil proceedings the interest in establishing the truth must merely prevail for exploitation (article 152 paragraph 2, Swiss Civil Procedure Code), in criminal proceedings, depending on the nature of the unlawful act, there is a risk that the evidence may not be used (see question 27 and article 140 et seq, Swiss Civil Procedure Code).