Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Finland
Finland
- at Roschier
- at Roschier
Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In Greece, workplace investigations are not heavily regulated.
However, internal disciplinary procedures are governed by certain general principles, while there is also legislation regulating certain aspects of investigations opened in the context of whistleblowing procedures or concerning complaints for workplace violence or harassment. These include Law 4990/2022, which transposed EU Directive 2019/1937 into Greek Law; and Law 4808/2021, which ratified the ILO’s Violence and Harassment Convention, 2019 (No190) and introduced relevant provisions.
As far as disciplinary procedures in private-sector companies are concerned, employers that must have internal labour regulations in place (ie, those with more than 70 employees) or opt to adopt them voluntarily, can regulate the procedures themselves.
In the public sector, internal investigations are governed by disciplinary provisions included in the civil servant code.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There is no legislation on this area in Poland. However, employers implement internal policies that provide for workplace investigation rules to fulfil certain legal obligations, including those arising directly from labour law.
Based on the currently binding provisions of labour law, an employer must counteract unwanted behaviour in the workplace (eg, bullying, discrimination and unequal treatment). To fulfil this obligation, employers implement internal policies that provide a framework for reporting misconduct and conducting internal investigations. They may freely design the rules of such investigations, within the constraints of their policy. Therefore, it is recommended they create the policy based on the following:
- it should be possible to effectively report the misconduct;
- there should be more than one way to report misconduct;
- anonymous reporting should be allowed;
- an investigation committee should be appointed and be objective;
- rules on excluding persons with a conflict of interest from conducting the investigation should be provided; and
- the report from the investigation should be prepared and signed by all persons participating in the process.
However, work on a bill on whistleblower protections is in progress (the Draft Law). The Draft Law will not determine the rules of workplace investigations but it will force employers to implement a whistleblowing procedure and follow-up on recommendations in the case of a report, including initiating an internal investigation where appropriate. Whether an internal investigation is initiated depends on the assessment of a reported irregularity by the employer.
In addition, employers (especially those that are part of an international group) often already implement internal policies on whistleblowing management and internal investigations. Employers often base their policies on guidelines issued by relevant (usually international) organisations.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Spain has not passed any statutes, regulations or policies specifically governing workplace investigations. Instead, general employment and data protection legislation, which safeguards employees’ rights, is fully applicable during these types of enquiries.
These statutes focus on employee privacy. As a result, the application of this legislation:
- limits the matters that may be investigated: they have to be relevant to the employment relationship and there has to be a legitimate reason to conduct the enquiry;
- sets boundaries to the means that may be lawfully used by the company in the investigation: they must be the least intrusive means for employees’ rights (for instance, an email review should be a last resort, reserved for when less-invasive means are not available or would not be effective); and
- states that the companies’ decisions during the investigation must be proportional in light of the facts under review and the legal consequences attached to them.
Collective bargaining agreements, which in Spain generally apply to every company within their scope of application (normally a given economic sector), may regulate workplace investigations. However, it is unusual for collective bargaining agreements to regulate workplace investigations.
Finally, major international corporations with a presence in Spain do tend to have an ethics or whistleblowing policy that governs how an investigation should be conducted. Even if these are self-imposed policies, they are contractually binding and, once established, must be respected by companies.
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Finland
Finland
- at Roschier
- at Roschier
When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Internal investigations can be initiated either upon a complaint or report by an employee, (or other persons providing services or seeking employment, etc) in the workplace or by the employer as part of their managerial right.
If from an employee, the complaint or report may fall within the scope of an internal disciplinary procedure, if any, or may concern an alleged workplace violence or harassment incident, or fall within the scope of L.4990/2022 on the protection of persons who report breaches of Union law.
Reports by whistleblowers are submitted to the manager with responsibility for receiving and monitoring reports, a person appointed for that purpose under L.4990/2022. Complaints for incidents and harassment in the workplace can also be submitted, according to L.4808/2022, to the person or internal body specifically assigned to receive such complaints. Both laws require the employer to define the persons competent for receiving and monitoring complaints or reports and notifying the employees stricto sensu and any other persons falling within the scope of the respective provisions.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There are no legal requirements in this respect – it depends on the internal policies or practices at a given working establishment. Based on our experience – an internal investigation usually commences with a preliminary assessment of a reported irregularity. If the preliminary assessment leads to a conclusion that a reported situation may be an irregularity, an investigation is launched by appointing a commission or team that conducts the investigation or selecting an investigator. Then, a plan of investigation is established. Depending on the circumstances, the investigation plan may involve a collection of documents or files, their analysis, and interviews with a victim, witnesses or a subject (although the procedure depends on the type of case, internal rules and practice). At the end of the process, the report is prepared by the commission or team with facts established during the process, recommendations, and other suggestions as to the investigated issue.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Given that Spain lacks legislation in this area (see question 1), each company commences workplace investigations following its internal guidelines, policies or practices, if any. In our experience, investigations begin with a formal decision to commence the enquiry, which is set out in writing for record-keeping purposes.
This decision will normally mention:
- the facts that will be investigated;
- the reasons to investigate the facts (eg, they could be a breach of company policies);
- how the investigation will be conducted; and
- the individuals who will conduct the enquiry.
Depending on the company, the decision to initiate the investigation may take the form of a decision by the competent employee or officer (ethics or compliance officer) or the minutes of the relevant corporate body (board of directors or compliance committee).
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Internal labour regulations may allow for the suspension of an employee when there is reasonable suspicion that a disciplinary offence has been committed. Given that under Greek law employees have the right to receive wages and to be employed, suspension without a specific provision in the internal labour regulation may only be imposed in an extreme case where the offence and the risk of keeping the employee employed during an investigation is obvious.
Payment of remuneration during suspension should not be withheld, otherwise, the suspension could be considered a disciplinary penalty not provided in law and imposed without completion of the disciplinary procedure, thus illegally harming the employee.
In any case, suspension is one of the ultimate measures that may be taken, in contrast to, for example, a change of work position.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Polish law does not provide for the suspension of an employee. Instead, an employer may agree with an employee that he or she will be released from the obligation to perform work during a relevant period of investigation (with the right to remuneration). The employer may not do this unilaterally, unless the employee is in a notice period. As an alternative, which is more common in practice, the employer may force the employee to use outstanding holiday leave (subject to limitations provided by law) or the parties may mutually agree on the use of holiday leave or unpaid leave (if the employee has already used his or her holiday entitlement in full).
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Yes, a company may suspend an employee if it has valid grounds to believe that keeping an employee under investigation in his or her position during the enquiry could obstruct the investigation or become an obstacle to it (for example, the employee could try to conceal facts or influence other employees within the organisation).
The decision to suspend the employee must be communicated in writing. This will usually take the form of a suspension letter that explains the reasons that have led to the suspension, its expected duration and that the suspension is not a disciplinary measure. Since the suspension is not a disciplinary measure, the employee would be entitled to continue collecting his or her standard remuneration during the suspension.
In Spain, employees have the right to be effectively occupied during their employment. Therefore, the duration of the suspension should be limited in time to what is strictly necessary to avoid what led to the suspension in the first place.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Finland
Finland
- at Roschier
- at Roschier
The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As far as the persons in charge of an internal investigation are concerned, L. 4990/2022 on the protection of persons who report breaches of Union law provides for certain conditions that should be met when exercising their duties (ie, being impartial and abstaining when there is a conflict of interest), which also apply as general principles in all disciplinary procedures. Whistleblowing legislation stipulates that persons appointed to receive and investigate a whistleblowing procedure should meet certain conditions, including no penal proceedings against them, no disciplinary proceedings or convictions for specific offences, and no workplace suspensions.
Official disciplinary procedures are conducted by the competent bodies as described in the respective internal labour regulations.
Although not specifically regulated, support from external advisors (eg, lawyers) is allowed.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There are no legal requirements in this regard but it is good practice if the team of investigators or individuals who deal with the case consists of:
- a person who has specific knowledge in a given field (concerning the violation);
- a member of the HR team; and
- a lawyer (it is recommended to engage an independent, external lawyer who can maintain the objectivity of the investigation, especially in complex matters or where a conflict of interest arises or may arise).
It is crucial that the investigators are independent (and they must be allowed to act independently).
Also, certain personal features are useful (eg, the ability to objectively assess a situation, empathy, and managing skills).
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
As set out in question 1, workplace investigations must be proportional and companies must use the least intrusive means to affect employees’ rights. This translates into the following principles on who conducts the investigation:
- the enquiry must involve a minimal number of employees;
- only those employees with competencies on the investigated matters should be involved (normally human resources or compliance); and
- employees conducting the investigation must be qualified and have the power and seniority to do so proficiently (although a formal qualification is not required).
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Although there is no specific legal provision, access to legal action and judicial proceedings cannot be obstructed under any circumstances as this is a fundamental right under the Greek constitution. Thus, if an employee manages to bring legal action to stop the investigation (eg, a prolonged investigation for a frivolous complaint harms them), then the investigation may have to be temporarily paused or permanently terminated depending on the court decision.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
This is unlikely. Theoretically, an employee can file a claim against an employer concerning the infringement of personal rights in the course of an investigation and a motion to secure his or her claims, which would consist of an employer being forced to suspend the proceedings, but in practice we have not encountered such a situation.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
No, an employee under investigation has no direct legal option to stop an investigation. This is because conducting an enquiry is within the employers’ legally acknowledged powers, attached to their capacity to manage their business and enforce employment contracts and internal policies.
Notwithstanding the above, if the investigation breaches an employee’s rights (privacy, dignity, remuneration, etc), the individual could:
- file a lawsuit aimed at stopping said breach (and potentially seeking an award for damages); or
- file a claim with the Labour Inspectorate with the same purpose.
The result, in this case, would stop the enquiry.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Indirectly involved employees may be interviewed as witnesses in the context of the investigation, as the employee has a duty of loyalty towards the employer originating from the employment relationship. However, they cannot be forced to do so (in contrast with criminal procedures). Any harmful act that could be considered retaliation against witnesses in the context of violence or harassment or whistleblowing investigation is prohibited. In addition, the identity of any employees as witnesses is also covered by the principle of confidentiality.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
In general, an employee may not be forced to act as a witness, but based on the provisions of the Polish Labour Code, an employee must act for the benefit of a working establishment or employer and perform work in line with the instructions of an employer. A lack of cooperation from an employee (eg, refusing to attend a hearing, hiding facts or even false testimony) may constitute a basis for the loss of an employer’s trust in the employee and, as a consequence, may constitute a valid reason for termination (in some specific situations, even without notice).
There is no formal protection for employees who act as witnesses. However, participation in an investigation cannot result in negative consequences (eg, no retaliation is allowed). Also, during an investigation, employees who are bound by professional secrecy are not required to provide information that would imply a breach of such secrecy.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
A company cannot force an employee to actively take part in a workplace investigation or to act as a witness. However, if a co-worker’s decision not to collaborate could be construed as an attempt to conceal evidence of wrongdoing, the company could then enforce disciplinary measures for this reason.
In our experience, employees tend to collaborate during workplace investigations and no retaliatory action can be taken against them for this reason. For example, if an employee provided evidence against his or her direct manager, the manager could not reprimand the employee or take any action that could be construed as such.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Finland
Finland
- at Roschier
- at Roschier
Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.
Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.
However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
GDPR and the provisions of L. 4624/2019 regulate the gathering of physical evidence from a data protection perspective, providing, among other things, that personal data should be processed with transparency and to the extent necessary for the investigation.
L.4990/2022 on the protection of persons who report breaches of Union law regulates data protection issues in the context of whistleblowing investigations, mainly to safeguard confidentiality throughout the investigations.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
If personal data is involved – the rules and principles of the GDPR will apply. If the physical evidence includes e-mail correspondence, files, or an employee’s equipment and possessions, the Labour Code will apply (ie, as a general rule, to monitor it, a monitoring policy must be implemented at that working establishment). Such a policy must strictly determine the aim of the surveillance and an employer must only apply surveillance in situations that reflect this aim. Also, when it comes to monitoring correspondence, it must not infringe on the secrecy of the correspondence, which in practice means that the employer should not check employees’ private correspondence when checking their business mailboxes.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
The General Data Protection Regulation and the Spanish Data Protection Law apply when gathering any type of evidence, including physical evidence. This means that companies may only process personal data when they have lawful grounds to do so and within the limits set forth for special categories of personal data (health, union affiliation, criminal records, etc.).
The Spanish Statute of Workers specifically states that employees and their possessions may be registered when it is necessary to protect the companies’ property (or the property of other co-workers). This registration must:
- be conducted in the workplace and during working hours;
- respect the employee’s privacy and dignity; and
- be performed in front of an employee representative or, if not possible, in the presence of another employee of the company.
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Finland
Finland
- at Roschier
- at Roschier
Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As a first step, the employer should ask for the employee’s permission to access their possessions and files. Employment contracts and internal labour regulations may include provisions regarding an employer’s access to employees’ documents created and kept for business purposes or related to business activity.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on whether the employer implemented rules of personal control at the workplace. If yes, such rules are applicable. If not, in our opinion if there is suspicion of a serious violation, it is possible to carry out an ad hoc inspection but its scope should be limited only to necessary activities and should not concern an employee’s private files or correspondence, so as not to infringe on personal rights. If there is an ad hoc inspection, an employee should be informed in advance, and it should take place in the presence of the employee or employee’s representative, observing the rules of fairness and equity.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Please see question 7.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Finland
Finland
- at Roschier
- at Roschier
In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
L. 4990/2022 includes specific requirements regarding, among other things, the procedure of receiving and investigating respective reports, confidentiality issues (especially regarding the identity of the whistleblower), data protection issues (including restrictions to the right of access) and the employer’s right to keep a record of the relevant complaint and investigation. Such provisions are expected to be further detailed by Ministerial Decisions in future.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
In principle, an internal investigation should be conducted in the same way, regardless of whether it is initiated following a whistleblowing report, an audit, or a monitoring result. This includes anything related to confidentiality, fairness, data privacy protection, etc.
If an internal investigation is initiated following a whistleblower report, the main characteristic that is imposed by the EU Directive on the protection of persons who report breaches of EU Law (Whistleblowers Directive) and that will also be available under the Draft Law is for the organisation (employer) to communicate (if practicable) the report to the whistleblower. Furthermore, the whistleblower should receive feedback as to whether follow-up actions were undertaken following the report and, if yes – what actions were taken – and if not – why the follow-up actions were not taken.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Directive (EU) 2019/1937 of the European Parliament and of the Council, of 23 October 2019, on the protection of persons who report breaches of Union law, has been implemented in Spain through Law 2/2023 (Ley 2/2023, de 20 de febrero, reguladora de la protección de las personas que informen sobre infracciones normativas y de lucha contra la corrupción). This law limits the capacity of companies to retaliate or to take any action against employees who report workplace violations or breaches of the law. Any action taken against an employee in such a position would be considered null and void if challenged in court.
Spanish law allows anonymous reports to protect whistleblowers from retaliation.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Finland
Finland
- at Roschier
- at Roschier
Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Confidentiality applies as a general principle in disciplinary investigations.
Moreover, L. 4990/2022, which transposed EU Directive 2019/1937 into Greek Law, regulates the issue of confidentiality during investigations that start based on an internal report. The managers conducting the investigation must respect and abide by the rules of confidentiality regarding the information they have become aware of when exercising their duties[1]. They must also protect the complainant’s and any third party’s (referred to in the report) confidentiality by preventing unauthorised persons from accessing the report[2].
Finally, L. 4808/2021 provides that employers must create a procedure that should be communicated to employees regarding all the necessary steps of an investigation following a complaint. Throughout the whole process, the employer, managers and the employer’s representatives responsible for the investigation must respect and abide by the rules of confidentiality in a manner that safeguards the dignity and personal data of the complainant and the person under investigation[3].
[1] Law 4990/2022, art. 9 par.8(b)
[2] Law 4990/2022, art. 10 par. 2(e)
[3] Law 4808/2021 art. 5 par.1(a) and 10 par.2(b)
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
The law does not cover this issue, apart from whistleblower regulations, as it should be regulated by the employer in their internal rules. The employer should ensure all participants of the investigation keep information related to it secret, as long as is necessary for the investigation (or even longer, if required by law concerning personal data or other specially protected information). Reputation, personal data and the personal rights of other people cannot be breached during the proceedings and this should be protected.
Moreover, according to the Draft Law – a whistleblower’s personal data should be kept confidential. It can only be disclosed if law enforcement authorities require it. Also, confidentiality should be guaranteed for the subject and other interested persons.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Companies and employees are not bound by any statutory confidentiality obligation in the context of workplace investigations. However, if a company’s enquiry has the potential to examine employees’ private affairs, then the company must ensure the confidentiality of the investigation.
This confidentiality obligation would not arise from the investigation itself, but from the company’s obligation to safeguard its employees’ rights.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Finland
Finland
- at Roschier
- at Roschier
The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As a matter of general principle, employees under investigation must have access to the necessary information to be able to defend themselves, in the context of their fundamental right to a fair trial and hearing.
Moreover, from a data protection perspective, they may be entitled to access their personal data in the respective files.
The above rights must be balanced with confidentiality and the need to safeguard the completion of the investigation and to protect the complainant from retaliation.
According to L.4990/2022, all data and information as well as the identity of the complainant are confidential, and any disclosure is only permitted where required by the EU or national legislation or during court proceedings, and only if it is necessary for the protection of the defence rights of the employee under investigation. The section of L.4808/2021 for the elimination of workplace violence and harassment does not regulate this specifically but provides a general obligation for confidentiality.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There is no specific mandatory information that should be given to an employee who is the subject of an internal investigation. However, it is common practice that he or she must know what the allegations against them are, on what grounds these allegations are formulated and be given a right to discuss these allegations and the evidence or grounds for these allegations.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
It is not necessary to inform an investigated employee about an enquiry or of the allegations made against him or her. The obligation to disclose would only arise when:
- interviewing the employee would be the least intrusive means to investigate the facts; or
- if disciplinary measures are implemented as a result of the investigation. Since employees are entitled to challenge all disciplinary measures against them, they could request a court of law to disclose all the findings of the investigation, to assess if these findings could be useful to challenge the disciplinary measure.
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Finland
Finland
- at Roschier
- at Roschier
See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
According to express provisions of L.4990/2020, in principle personal data and any other information that may lead directly or indirectly to the identification of the complainant must not be disclosed to anyone other than the investigating individuals unless the complainant gives consent[4] and that is why pseudonyms should be used. The witnesses and third persons that aid the complainant are deemed as “mediators” by the Law and their contribution to the procedure should be confidential[5].
L.4808/2021 does not indicate when such disclosures are permitted; however, it is obvious that this is a matter of cost-benefit analysis where the public interest and the fundamental rights of the involved persons should be considered in a balanced way to ensure the best results. From a data protection perspective, it could be argued that the person under investigation’s right to know the identity of the complainant, witnesses or sources of information should be limited to protect the rights of these persons.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Yes.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
As in question 10, the identity of the complainant or other employees involved in the investigation may be kept confidential and companies do not have to share their identity with investigated employees. Anonymous complaints are expressly allowed under Spanish law (see question 9).
Companies may have to produce this information and share it with the investigated employees if it is necessary to allow them to defend themselves from disciplinary measures taken against them. Similarly, in the context of litigation, an employee or plaintiff could request a Labour Court to order the company to disclose the details of the investigation.
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Finland
Finland
- at Roschier
- at Roschier
Yes, however, the need for an NDA is assessed always on a case-by-case basis.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
NDAs are an option, especially to outline in detail the obligations of the persons conducting the investigation, which is also provided for in law. On the other hand, NDAs will not prevent persons involved from providing information to the competent authorities in the context of criminal or other similar procedures, where they must do so by law. Moreover, they may not protect confidentiality if persons who report breaches of Union law decide to make an external or public report, according to the provisions of L. 4990/2022.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Yes, but it may not stop the disclosure of information at the request of relevant law enforcement authorities.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Yes. NDAs are the preferred instrument to ensure that employees conducting the investigation, as well as those who participate as witnesses or collaborators, will keep the enquiry and its existence confidential.
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Finland
Finland
- at Roschier
- at Roschier
The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Regarding L.4990/2022 for whistleblowers’ procedures, many categories of privilege may occur during an investigation, such as: attorney-client privilege; doctor-patient privilege; and court or other proceedings’ privilege deemed as classified. L.4990/2022 provides that its provisions do not affect any of these privileges and these privileges supersede[6].
Privilege may also be attached to investigation materials in investigations relating to workplace harassment and violence incidents; however, since L.4808/2021 does not offer a specific provision and criminal proceedings may also commence, the matter of privilege must be examined ad hoc.
[6] Law 4990/2022 art.5 par.2(b) and par.2(c)
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
In general, findings made and documents established during an internal investigation, including the report thereof, are not covered by privilege per se. It can be claimed that they are covered by the employer’s commercial secrecy, but this secrecy is not very well protected from requests of law enforcement authorities. Hence, if prosecuting authorities find a report of an internal investigation or other documents established during an investigation relevant for criminal proceedings, they can ask for them. If they are not produced voluntarily, a search can be performed.
Legal privilege will, on the other hand, cover an internal investigation if it is entrusted to an independent lawyer. Specifically, client-attorney privilege will cover all documents that are established during the investigation by a lawyer.
Under Polish law there is no distinction between legal advice privilege and litigation privilege. Hence, legal privilege will cover the documentation of the internal investigation led by a lawyer regardless of whether the lawyer’s involvement is for the purpose of obtaining legal advice or because of ongoing or contemplated litigation.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
As explained above, investigation materials are not protected by privilege per se. To protect the confidentially of these materials, it is advisable to enter into NDAs with the employees involved in the investigation.
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Greek law does not specifically regulate the right to be accompanied or have legal representation during internal investigations for private-sector employees.
However, the right to legal representation established in article 6 of the European Convention on Human Rights could be interpreted to cover cases such as internal investigations in the workplace. In addition, according to article 136 of Civil Servant Code, the employee under investigation has the right to be represented by an attorney at law. There is an additional argument regarding private-sector employees and their right to legal representation, by applying this provision by analogy.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
This is not regulated by law and it depends on internal procedures or practice at a given working establishment. As a rule, the participation of third parties or proxies is neither a recognised practice nor recommended (according to the principle that the fewer people participate in the investigation, the easier it is to determine the circumstances of the case, the so-called need-to-know rule). However, in certain situations it should be permissible for a proxy (eg, a lawyer) to participate in a meeting with a subject.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
A workplace investigation under Spanish law is a fact-finding exercise and not a disciplinary procedure. For this reason, employees are not entitled to representation during an investigation (it is not even necessary to inform them about the enquiry).
If the investigated employees are made aware of the investigation (eg, because they will be interviewed or questioned), then it is good practice to allow them to be accompanied by external counsel or an employee representative. This would reduce the risk that employees would claim that they were under duress during the interview, or that they challenge the validity of the evidence obtained by the company.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Finland
Finland
- at Roschier
- at Roschier
A works council or a trade union does not have a role in the investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
L.4990/2022 explicitly states that the exercise of employee rights that refer to consulting from representatives or trade unions and protection against any detrimental measure that results from those consultations does not affect the implementation of any legal provisions. The autonomy of social partners and their right to enter into collective agreements regardless of the level of protection provided by L.4990/2022[7] is also unaffected.
Under L.4808/2021, legal persons and associations of persons, including trade unions, that have a legitimate interest in doing so may, with the consent of the complainant, bring an action in the complainant’s name before the competent administrative or judicial authorities. They may also intervene in their defence[8].
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There is no such obligation, unless it is provided for in an internal procedure or, for example, in the applicable collective bargaining agreement. It is neither a recognised practice nor recommended that such persons participate in the investigation.
However, in the event of violations that justify the termination of an employment contract with the employee, the employer should consult with that employee’s union about their intention to immediately terminate any employment contract concluded with that person or to terminate, with notice, the employment contract agreed with him or her for an indefinite term, or apply for consent to terminate the employment contract with an employee who is protected by a union.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
As explained in question 15, employees are not entitled to representation during an investigation. However, if a disciplinary procedure starts as a result of the investigation, employee representatives may be entitled to be informed of the disciplinary procedure and its outcome.
The degree and timing of when employee representatives must be involved will depend on several factors such as:
- the employee’s affiliation to a union;
- if the employee is an employee representative;
- the seriousness of the potential sanction to be imposed; and
- the information rights that the applicable collective bargaining agreement acknowledges regarding employee representatives.
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Finland
Finland
- at Roschier
- at Roschier
They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
According to L.4990/2022, any form of retaliation against complainants is prohibited, including threats of retaliation[9]. The complainants have the right to cost-free legal advice about possible acts of retaliation as well as cost-free provision of psychological support (to be defined by Ministerial Decisions)[10]. In terms of other types of support, the complainants are not in principle liable for the acquisition of information or releasing the information they reported under specific conditions (eg, the acquisition or access does not independently constitute a criminal offence, if they had reasonable grounds for believing that a report was necessary to reveal the violation)[11].
L. 4808/2021 states that the dismissal or termination of the legal relationship of employment and any other discrimination that constitutes an act of revenge or retaliation is prohibited and invalid[12].
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
They may be supported by, for example, allowing an alternative work environment (eg, remote work to avoid direct contact with people involved in the case). Depending on circumstances of the case, this solution will be offered to the subject or the victim. However, it is important that such actions do not infringe the rights of other people (eg, the subject itself).
Employees may also be sent on leave (by a unilateral decision of the employer – if possible under currently binding law provisions) or the parties to an employment contract may mutually agree to use such leave. Moreover, if they employer thinks it is necessary, they may assign the employee to another job for a period not exceeding three months (only if it does not result in a reduction in the employee’s remuneration and corresponds to the employee’s qualifications).
Also, depending on the employer’s decision – psychological or even legal assistance can be provided by the employer to a whistleblower or a victim.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
For the reasons outlined in question 15, companies sometimes choose to voluntarily provide support to employees involved in the investigation (to ensure that evidence was lawfully obtained during the interview and is valid).
For investigated employees, one available support mechanism is for the company to cover the legal fees of an external counsel during the investigation or to offer to involve employee representatives. Reassurance may be provided to witnesses by guaranteeing, in writing, that their involvement in the investigation will be kept confidential and will not result in a detriment.
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Finland
Finland
- at Roschier
- at Roschier
If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Employees under investigation frequently raise grievances during investigation procedures that are dealt with on a case-by-case basis. The grievances raised by the employee under investigation are examined by the employees responsible for the investigation. They may either pause the relevant proceedings and review the grievance, especially if the claims of the employee under investigation are linked to a breach of his or her data or hearing rights, or they may continue the investigation.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on the internal policies in force in the organisation. Most often, it constitutes the basis for separate proceedings.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Spanish law does not regulate grievance processes and most companies do not have an internal grievance procedure. The only way in which an employee can formally challenge an investigation is by filing a lawsuit or lodging a claim with the Labour Inspectorate (see question 5).
To the extent that the company can show that the investigation is unrelated to the complaint (ie, that the investigation is not retaliation for filing the complaint), the claim should be seen as neutral from the perspective of the enquiry.
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Finland
Finland
- at Roschier
- at Roschier
As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In principle, the health of an ordinary employee would not prevent the investigation procedure from taking place (eg, interviews with witnesses or the collection of evidence would not be postponed or suspended). However, if the employee under investigation is unwell and they can't participate in the procedure, the investigation may be suspended or postponed until the employee can take part. Bearing in mind the majority of company internal policies and regulations governing workplace investigations provide for a specific framework and timetable for the whole procedure to be completed, the long-term sickness of an employee under investigation may impede the completion of the procedure in the prescribed time. As a result, the person conducting the investigation may seek alternative measures to facilitate participation (eg, teleconferencing).
On a related note, if sickness occurs after the investigation is completed and the employer decides upon the imposition of disciplinary measures against the said employee and the initiation of a relevant procedure, the decision should be duly and timely communicated to the employee, irrespective of whether his or her presence in the workplace is not possible because of the illness.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
This may prolong the investigation, as the employee may be unable to participate for a time (if the employee is not able to work, in many cases he or she will not be able to participate in proceedings that requires some level of engagement and psychophysical ability). Also, an employee is protected against termination of an employment contract with notice during sick leave. During such a period, the employer may only terminate his or her employment contract without notice (with immediate effect).
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Like in the case of grievances (see question 19), the deciding factor will be assessing whether sick leave is related to the investigation or not.
If there is no link between the investigation and the sick leave, then the leave is not relevant from the point of view of the investigation. However, if the sick leave was a result of the investigation (for instance, an employee taking sick leave due to anxiety related to the investigation), then the convenience of pursuing the investigation or of temporarily suspending it should be evaluated to avoid any liability for the company.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Finland
Finland
- at Roschier
- at Roschier
Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Incidents of violence and harassment may be dealt with by certain independent authorities, such as the Labour Inspectorate Body and the Greek Ombudsman. The former is competent to impose sanctions on the employer if there is a breach of the general prohibition of violence and harassment at the workplace and the obligation of employers regarding the prevention of such incidents and the obligation to adopt policies within the business. The Greek Ombudsman is competent to deal with disputes when there is violence or harassment in the workplace coupled with discrimination due to, for example, gender, age, disability, sexual orientation, religious beliefs, or gender identity. Moreover, the applicable legal framework[13] stipulates that victims of violence and harassment are entitled to lodge a report before the Labour Inspectorate Body and the Greek Ombudsman. This is in addition to the judicial protection he or she may seek and the internal investigation procedure to which he or she may have recourse, without specifying whether internal proceedings may be suspended before the regulatory bodies decide on the matter.
On the other hand, the National Transparency Authority and in certain cases the Hellenic Competition Commission are external reporting channels for employees reporting breaches of Union law. In such cases, L.4990/2022 (article 11 paragraph 5) stipulates that the investigation before the National Transparency Authority is not suspended if reporting procedures before other regulatory authorities have been initiated.
Moreover, criminal investigations can run in parallel with internal probes.
[13] Law 4808/2018 art.10
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
They can be run in parallel. It is up to the company whether it informs the authority about the ongoing internal investigation.
Based on our experience in criminal matters, a report from an internal investigation may not necessarily be treated as evidence per se, but as a source of information about the evidence.
According to procedural rules stemming from, for example, the Criminal Procedure Code, the authorities can demand to see evidence and documents in the employer’s possession that they consider relevant to the conducted proceedings and their subject matter.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Criminal or regulatory investigations may (and usually do) run in parallel to workplace investigations.
There is no need to stay the internal investigation and, in practice, this normally is not possible or advisable considering the substantially longer timeframe of criminal or regulatory investigations (which can extend for several months or years).
The police or a regulator may request a company to share any relevant information that it might have on the facts being reviewed by them. However, the company’s obligation to provide that information would have to be reviewed on a case-by-case basis, depending on the information being requested (eg, whether it is sensitive to the business, such as trade secrets or internal correspondence) and the grounds to do so (if the police or regulator have a search warrant issued by a court or not).
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Finland
Finland
- at Roschier
- at Roschier
The employer's conclusions from the investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
The employer has an obligation, towards the alleged victim but also the alleged perpetrator, to carefully investigate the report and any existing evidence before making decisions. The employee under investigation must be informed about the outcome of the procedure and any measures adopted in this regard. The respective decision must have due justification.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
He or she must be given feedback about follow-up actions that were undertaken, or reasons why the follow-up actions were not undertaken.
In any case – the feedback must be adapted to the circumstances of each case so as not to reveal too many details or infringe the other interested parties’ rights.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Employees under investigation are not entitled to be informed about the investigation or its outcome. As set out above (see question 11), an employee would have a right to be informed about the outcome of an investigation if the employer takes any disciplinary actions as a consequence of the enquiry.
The reason to disclose the details of the investigation is to allow the employee to adequately defend him or herself from the alleged breaches.
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Finland
Finland
- at Roschier
- at Roschier
The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
For workplace violence and harassment investigations, depending on the outcome of the internal investigation, the employer may adopt certain measures including, for example, recommendations to the employee under investigation, changes to the employee’s working hours and transfer to another department.
If the employer decides to terminate the employment relationship, without having previously followed existing corporate policies regarding reporting procedures or without having provided the alleged perpetrator with the right to be heard, the dismissal could be deemed invalid. In any case, the measures adopted should be appropriate and proportional to the act committed.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on the outcome of the investigation: imposing penalties; reporting to a regulator; notifying a suspected offence or civil claim; termination of an employment contract with or without notice; and changes to the work organisation. Following the investigation, the employer must make some legal, business or HR corrective actions.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
After the conclusion of the enquiry, a company may choose to:
- close the investigation without taking any additional action; or
- adopt disciplinary measures against the employee.
These could range from a verbal or written warning to the suspension of work and pay for a set period. Disciplinary dismissals are also possible, but they are reserved for very serious offences.
Note that any disciplinary measure will have to follow the procedures that might be established in the applicable collective bargaining agreement, such as informing employee representatives or following a grievance procedure before adopting the measure.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Finland
Finland
- at Roschier
- at Roschier
In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In principle, there is no specific obligation for investigating persons to disclose their findings. For proceedings before a court that have been initiated or investigated by the police or competent regulatory bodies, the relevant findings may be communicated under strict conditions and provided that the personal data of the parties involved are not publicly disclosed.
More specifically, under L. 4490/2022, in the context of whistleblowing procedures, personal data and any information that leads, directly or indirectly, to the identification of the complainant are not disclosed to anyone other than employees involved in the investigation, unless the complainant consents. The identity of the complainant and any other information may only be disclosed in the context of investigations by competent authorities or judicial proceedings, to the extent necessary for the protection of the employee under investigation’s rights of defence. Confidentiality obligations govern the procedure for revealing trade secrets to police and regulatory bodies, especially in the framework of L.4990/2022.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on the matter. In general, there is no obligation to disclose the report. In some instances, there is an obligation to notify a suspected offence (for example, a terrorist attack or a political assassination). This, however, does not mean there is an obligation to file a report from the internal investigation, but to provide the law enforcement authority with the facts and evidence at the notifier’s disposal. In other instances of criminal offences, for example corruption, there is no obligation to notify law enforcement authorities. Therefore, it is up to the organisation to decide whether it will file a notification for a suspected offence.
At the same time, presenting a report from an internal investigation can constitute an element of defence for an organisation if a regulatory authority initiates proceedings regarding a failure by the organisation to comply with regulatory obligations.
Records of interviews do not need to be produced for the case file provided the law enforcement authority does not ask for them.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Companies may only disclose the outcome of an investigation to employees or officers of the company who are empowered to adopt the measures that are necessary because of the investigation’s results (see question 4).
This disclosure obligation does not extend to authorities: while there is a general obligation to report criminal or administrative offences to the competent authorities, this obligation must be read in line with the companies’ right not to self-report themselves. What a company must not do is cover up, aid or otherwise become an accessory to the offence.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Finland
Finland
- at Roschier
- at Roschier
Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Under the General Data Protection Regulation, employees’ personal details and information must be kept in the business records for as long as is necessary for the purposes of the employment relationship. Otherwise, stored data must be deleted. However, under L.4990/2022[14], reports remain in the relevant record for a reasonable and necessary time, and in any case until the completion of investigations or proceedings before the courts that have been initiated as a consequence of a complaint against the employee under investigation, the complainant or any third parties.
[14] L.4990/2022 art.16 par.1
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Neither Polish law nor the Draft Law specifically provide for a mandatory period during which the outcome of the investigation should be kept on the employee’s record.
At the same time, the Draft Law indicates that the register of whistleblowing reports, which should also contain information about follow-up actions undertaken as a result of the report, should be kept for 15 months starting from the end of the calendar year in which the follow-up actions have been completed, or the proceedings initiated by those actions have been terminated.
Also, while determining how long the outcome of an internal investigation should be kept, additional legal considerations can be taken into account, especially data privacy.
The GDPR does not specify precise storage time for personal data. The employer must assess what will be an appropriate time for storage of the data, taking into consideration the necessity of keeping personal data concerning the purpose of the processing in question. Employees' personal data should be kept for the period necessary for the performance of the employment relationship and may be kept for a period appropriate for the statute of limitations for claims and criminal deeds. A longer retention period may result from applicable laws. Following the Regulation of the Minister of Family, Labour and Social Policy on employee documentation, the employer may keep a copy of the notice of punishment and other documents related to the employee’s incurring of disciplinary responsibility in the employee record.
There are different retention periods for the data contained in employee files:
- 10 years if the employee was hired on or after 1 January 2019;
- if the employment relationship began between 1 January 1999 and 1 January 2019, the retention period is 50 years, but may be reduced to 10 years if the employer provides the Polish Social Insurance Institution with certain mandatory information; and
- for 50 years if the employee was hired before 1 January 1999. It does not matter whether the person is still working or not.
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
The outcome of the investigation will contain personal data of the affected employee. For this reason, this information should only be kept for as long as a legal obligation or liability in connection with the information could arise for the company. Since the general statute of limitations for employment liability is one year, this is a good guideline.
In addition to the above, two specific rules apply:
- once the information becomes irrelevant for the purpose for which it was obtained and processed, the information should no longer be stored on the employee’s record or elsewhere; and
- the employees’ information (including those of the reporter and the affected employees) should only be stored in whistleblower systems during the time that is necessary to decide on whether the facts need to be investigated or not and, in any case, for a maximum period of three months.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Finland
Finland
- at Roschier
- at Roschier
There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
The employee can contest the decisions of disciplinary councils before the courts and request their annulment.
Moreover, in the framework of L.4990/2022, a monetary penalty and prison sentence (to be defined by an implementing Ministerial Decision) may be imposed on any person violating confidentiality obligations concerning the identity and personal data of employees or third parties included in the investigation procedure, while monetary penalties are also provided for legal entities[15].
Moreover, administrative fines may also be imposed if the employer does not comply with the legal requirements concerning the prevention of violence and harassment in the workplace.
Furthermore, the employee under investigation may initiate proceedings before the courts under tort law, by claiming compensation for moral damages suffered if the company did not comply with its confidentiality obligations after the incident (eg, due to the spread of rumours in the workplace). This may also be linked with criminal law proceedings against the persons responsible for dealing with the investigation (and not against the legal person, since under Greek law there is no criminal liability for legal persons).
On the other hand, the employer may also be exposed to liability vis-à-vis the complainant, witnesses or facilitators, for breach of confidentiality or other obligations prescribed in the respective legal provisions, or if there are retaliation measures.
[15] L.4990/2022 art.23 par.1
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
If any untrue allegations were made by an employer against an employee without checking them beforehand, there is a risk that such an employee would claim damages eg, for infringement of personal rights or even filing a private indictment for defamation or outrage.
Certainly, an employer must be aware that one must never behave in a way that, for example, in the employee's opinion, could constitute a form of blackmailing or deprivation of liberty. A problem may also arise when accessing the employee's correspondence, especially when access is made to documents or private correspondence. The Draft Law provides for several criminal offences related to, for example, preventing reporting, using retaliatory measures against a whistleblower or disclosing personal data of a whistleblower).
Spain
Spain
- at Uría Menéndez
- at Uría Menéndez
Errors during an investigation are normally linked to the breach of the employees’ privacy or their personal data rights (see question 1). Breaching these rights might expose employers to:
- Fines from the Labour Inspectorate and the Spanish Data Protection Authority.
- A court awarding damages to the employee.
- Any disciplinary measures adopted by the company as a result of the investigation could be considered null and void.
- The evidenced obtained during the investigation being disregarded by a court.
- In some very serious cases, criminal liability might arise for the individuals who conducted the investigation and breached the employees’ rights.