Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Finland
Finland
- at Roschier
- at Roschier
Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In Greece, workplace investigations are not heavily regulated.
However, internal disciplinary procedures are governed by certain general principles, while there is also legislation regulating certain aspects of investigations opened in the context of whistleblowing procedures or concerning complaints for workplace violence or harassment. These include Law 4990/2022, which transposed EU Directive 2019/1937 into Greek Law; and Law 4808/2021, which ratified the ILO’s Violence and Harassment Convention, 2019 (No190) and introduced relevant provisions.
As far as disciplinary procedures in private-sector companies are concerned, employers that must have internal labour regulations in place (ie, those with more than 70 employees) or opt to adopt them voluntarily, can regulate the procedures themselves.
In the public sector, internal investigations are governed by disciplinary provisions included in the civil servant code.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In the United States, any combination of legislation at the federal, state and local level, as well as judicial opinions and regulatory guidance interpreting those statutes, may impose obligations on relevant employers to undertake a timely internal investigation in response to complaints of workplace misconduct and to promptly implement remedial measures, where appropriate.
An employer’s written policies often also set forth the company’s expectations for how its employees, partners, vendors, consultants or other third parties will conduct themselves in carrying out the business of the company, and these policies may include protocols setting forth the parameters for an investigation in the event of potential non-compliance. Such investigatory roadmaps are often described in, for example, employee handbooks or a company’s policy against discrimination and harassment.
Due to the patchwork nature of employment and related laws, it is not possible to cover every investigation scenario or related legislation in this guide. Employers should instead consult with experienced employment attorneys in their state to ensure compliance with the applicable legal and regulatory regimes.
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Finland
Finland
- at Roschier
- at Roschier
When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Internal investigations can be initiated either upon a complaint or report by an employee, (or other persons providing services or seeking employment, etc) in the workplace or by the employer as part of their managerial right.
If from an employee, the complaint or report may fall within the scope of an internal disciplinary procedure, if any, or may concern an alleged workplace violence or harassment incident, or fall within the scope of L.4990/2022 on the protection of persons who report breaches of Union law.
Reports by whistleblowers are submitted to the manager with responsibility for receiving and monitoring reports, a person appointed for that purpose under L.4990/2022. Complaints for incidents and harassment in the workplace can also be submitted, according to L.4808/2022, to the person or internal body specifically assigned to receive such complaints. Both laws require the employer to define the persons competent for receiving and monitoring complaints or reports and notifying the employees stricto sensu and any other persons falling within the scope of the respective provisions.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
A workplace investigation is often, although not always, prompted by a complaint of workplace misconduct, usually made directly by the employee who was harmed by the conduct, a third party who witnessed the conduct, or a manager or supervisor who was made aware of the issue and has reporting obligations as a result of his or her role in the organisation.
It is best practice – and often a legal requirement depending on the applicable state law – for companies to clearly outline a complaint process in their policies and to provide employees who experience, have knowledge of, or witness incidents they believe to violate the company’s policies with one or more options for making a report. Although the specific complaint procedure may vary depending on the size of the organisation, the nature of the business and the type of complaint at issue, many companies provide for (or require) making a report through one of the following channels:
- a company-managed hotline or online equivalent;
- human resources;
- an affected employee’s supervisor or manager; or
- a member of the legal or compliance department.
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Internal labour regulations may allow for the suspension of an employee when there is reasonable suspicion that a disciplinary offence has been committed. Given that under Greek law employees have the right to receive wages and to be employed, suspension without a specific provision in the internal labour regulation may only be imposed in an extreme case where the offence and the risk of keeping the employee employed during an investigation is obvious.
Payment of remuneration during suspension should not be withheld, otherwise, the suspension could be considered a disciplinary penalty not provided in law and imposed without completion of the disciplinary procedure, thus illegally harming the employee.
In any case, suspension is one of the ultimate measures that may be taken, in contrast to, for example, a change of work position.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Yes. An employer may suspend the subject of an internal investigation with full pay pending the outcome of an investigation. However, this measure should be used sparingly, for example in cases where an employee has been accused of gross misconduct or where it is the only means of separating the alleged victim of harassment from the accused to prevent continued harassment. As an alternative means of separating the victim from the accused, an employer can consider interim measures such as a schedule change, transfer or leave of absence for the alleged victim with his or her consent (employers should take care not to take any action that could be perceived as retaliatory against the complainant – even if well-intentioned – including involuntarily transferring him or her or forcing a leave of absence).
Where an employer does determine that suspending the subject of an investigation is warranted while the company carries out its investigation, it should provide him or her with a written statement briefly outlining the reason for the suspension and the estimated date the employee will be advised of the investigation outcome and his or her final employment status.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Finland
Finland
- at Roschier
- at Roschier
The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As far as the persons in charge of an internal investigation are concerned, L. 4990/2022 on the protection of persons who report breaches of Union law provides for certain conditions that should be met when exercising their duties (ie, being impartial and abstaining when there is a conflict of interest), which also apply as general principles in all disciplinary procedures. Whistleblowing legislation stipulates that persons appointed to receive and investigate a whistleblowing procedure should meet certain conditions, including no penal proceedings against them, no disciplinary proceedings or convictions for specific offences, and no workplace suspensions.
Official disciplinary procedures are conducted by the competent bodies as described in the respective internal labour regulations.
Although not specifically regulated, support from external advisors (eg, lawyers) is allowed.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
While every internal investigation should be carried out promptly, thoroughly and in a well-documented manner, employers should appoint one individual or team of individuals to oversee all complaints regardless of how they are received. Doing so helps to ensure that all allegations are documented, reviewed and assigned for investigation as consistently as practicable.
Once a complaint is received and recorded, the company should undertake an initial triage process to determine:
- the risk of the alleged misconduct from a reputational, operational and legal perspective;
- who is best suited to conduct an investigation based on the nature of the alleged misconduct and the perceived risk level (potential candidates may include members of human resources, legal or compliance departments, or outside counsel); and
- a plan for investigating the factual allegations raised in the complaint.
The appropriate investigator should be able to investigate objectively without bias (ie, the investigator cannot have a stake in the outcome, a personal relationship with the involved parties and the outcome of the investigation should not directly affect the investigator’s position within the organisation); has skills that include prior investigative knowledge and a working knowledge of employment laws; has strong interpersonal skills to build a rapport with the parties involved and to be perceived as neutral and fair; is detail-oriented; has the right temperament to conduct interviews; can be trusted to maintain confidentiality; is respected within the organisation; and can act as a credible witness.
At this triage stage, an employer may also wish to use the information collected from the complaint to proactively identify potential patterns or systemic issues at an individual, divisional or corporate level and react accordingly. For example, if a company receives a complaint against a supervisor for harassing conduct and that same individual has already been the subject of previous complaints, the company should consider whether it may be appropriate to engage outside counsel to carry out a new investigation to bring objectivity and lend credibility to the review – even if the prior complaints were not ultimately substantiated following thorough internal investigations. Similarly, the engagement of outside counsel is often appropriate where a complaint involves alleged misconduct on the part of a company’s senior management or board members.
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Although there is no specific legal provision, access to legal action and judicial proceedings cannot be obstructed under any circumstances as this is a fundamental right under the Greek constitution. Thus, if an employee manages to bring legal action to stop the investigation (eg, a prolonged investigation for a frivolous complaint harms them), then the investigation may have to be temporarily paused or permanently terminated depending on the court decision.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In general, private sector employees have considerably fewer rights vis-à-vis a company-led internal investigation than their public sector counterparts. This is because many US states are “at will” employment states, which means that, absent an employment contract that provides otherwise, an employee can be terminated for any reason not prohibited by statute or public policy. Depending on the specific circumstances, however, an employee who is the subject of an internal investigation could bring or threaten legal action according to contract or tort principles to stop an investigation. An employee may also challenge an investigation because it was conducted in violation of certain federal, state or foreign laws, for example, the use of polygraph tests in violation of the Employee Polygraph Protection Act or foreign data privacy laws.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Indirectly involved employees may be interviewed as witnesses in the context of the investigation, as the employee has a duty of loyalty towards the employer originating from the employment relationship. However, they cannot be forced to do so (in contrast with criminal procedures). Any harmful act that could be considered retaliation against witnesses in the context of violence or harassment or whistleblowing investigation is prohibited. In addition, the identity of any employees as witnesses is also covered by the principle of confidentiality.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Yes. The investigator is empowered to decide which witnesses should be interviewed as a part of the fact-gathering process. In addition to interviewing the complainant, the investigation should include individual interviews with other involved parties, including the subject of the complaint, as well as individuals who may have observed the alleged conduct or may have other relevant knowledge, including supervisors or other employees. Many companies’ code of conduct, employee handbook or similar policy set forth the requirement for current employees to cooperate fully in any investigation by the company or its external advisors and also provide that failure to do so could result in disciplinary action, up to and including termination.
In the absence of contractual protections, employees may have no legal right to refuse to submit to an interview, even if their answers tend to incriminate them. That being said, when acting as a witness in an internal investigation, a current employee is usually afforded similar legal protections as the subject of an investigation, including the right to oppose unreasonable intrusions into his or her privacy and unreasonable workplace searches. For example, certain state laws prohibit an employer from questioning an employee regarding issues that serve no business purpose.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Finland
Finland
- at Roschier
- at Roschier
Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.
Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.
However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
GDPR and the provisions of L. 4624/2019 regulate the gathering of physical evidence from a data protection perspective, providing, among other things, that personal data should be processed with transparency and to the extent necessary for the investigation.
L.4990/2022 on the protection of persons who report breaches of Union law regulates data protection issues in the context of whistleblowing investigations, mainly to safeguard confidentiality throughout the investigations.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Documents and instruments that set out a company’s policies (eg, employee handbooks, code of conduct or other written guidelines) often contain provisions regarding employee data and document collection, workplace searches, communication monitoring, privacy, and confidentiality. As discussed below, state and federal constitutional, statutory and common law – and in some cases foreign data privacy regimes – may provide additional protections to protect employees from an unwarranted or unreasonable invasion of privacy during an internal investigation.
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Finland
Finland
- at Roschier
- at Roschier
Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As a first step, the employer should ask for the employee’s permission to access their possessions and files. Employment contracts and internal labour regulations may include provisions regarding an employer’s access to employees’ documents created and kept for business purposes or related to business activity.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
As there is no unified data protection regime, privacy protections stem from a patchwork of federal and state privacy laws which impose limits on the extent to which an employer can collect information from its employees in connection with an internal investigation. Whether specific conduct violates an employee’s rights is a very fact-specific inquiry requiring the application of relevant state laws and a regulatory regime.
In most circumstances, an employer is free to conduct searches of its workplace and computer systems in the course of investigating potential wrongdoing. Such searches are generally not protected by personal privacy laws because workspaces, computer systems and company-issued electronic devices are often considered company property. Many companies explicitly address this in written corporate policies and employment agreements. Employees who use their own electronic devices for work should be aware that work-related data stored on those devices is generally considered to belong to the employer (as a matter of best practice, employers should generally prohibit or at least advise employees against using personal devices for work and to maintain separate work devices, where possible).
These broad investigatory powers notwithstanding, the ability of an employer to conduct searches in furtherance of an internal investigation is not unlimited. For example, if an employer seeks to obtain or review work-related data from an employee’s personal device, the employer must be careful to exclude any personal data. Certain states also prohibit an employer from requiring an employee to disclose passwords or other credentials to his or her personal email and social networking accounts, but permit an employer to require employees to share the content of personal online accounts as necessary during an interview while investigating employee misconduct.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Finland
Finland
- at Roschier
- at Roschier
In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
L. 4990/2022 includes specific requirements regarding, among other things, the procedure of receiving and investigating respective reports, confidentiality issues (especially regarding the identity of the whistleblower), data protection issues (including restrictions to the right of access) and the employer’s right to keep a record of the relevant complaint and investigation. Such provisions are expected to be further detailed by Ministerial Decisions in future.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Several federal, state, and local employment laws prohibit retaliation against employees who come forward with complaints or participate in corporate investigations. Employees who possess information regarding corporate misconduct may also be considered whistleblowers protected from retaliation under federal and state whistleblower laws, including but not limited to the Sarbanes-Oxley Act of 2002, the Dodd-Frank Wall Street Reform and Consumer Protection Act, and the Consumer Financial Protection Act of 2010.
An employee generally does not need to show that he or she was terminated or demoted to bring a retaliation claim; other actions on the part of the employer may qualify if they could be seen to discourage employees from raising complaints. To protect against a potential retaliation claim, employers should make clear at the outset of an investigation that retaliation will not be tolerated and require the complaining employee (and potentially his or her manager) to bring any instances of retaliation to the investigator’s attention immediately.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Finland
Finland
- at Roschier
- at Roschier
Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Confidentiality applies as a general principle in disciplinary investigations.
Moreover, L. 4990/2022, which transposed EU Directive 2019/1937 into Greek Law, regulates the issue of confidentiality during investigations that start based on an internal report. The managers conducting the investigation must respect and abide by the rules of confidentiality regarding the information they have become aware of when exercising their duties[1]. They must also protect the complainant’s and any third party’s (referred to in the report) confidentiality by preventing unauthorised persons from accessing the report[2].
Finally, L. 4808/2021 provides that employers must create a procedure that should be communicated to employees regarding all the necessary steps of an investigation following a complaint. Throughout the whole process, the employer, managers and the employer’s representatives responsible for the investigation must respect and abide by the rules of confidentiality in a manner that safeguards the dignity and personal data of the complainant and the person under investigation[3].
[1] Law 4990/2022, art. 9 par.8(b)
[2] Law 4990/2022, art. 10 par. 2(e)
[3] Law 4808/2021 art. 5 par.1(a) and 10 par.2(b)
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Information arising from the initial complaint, interviews and records should be kept as confidential as practically possible while still permitting a thorough investigation. Although an employer must maintain confidentiality to the best of its ability, it is often not possible to keep confidential the identity of the complainant or all information gathered through the investigation process. An employer should therefore not promise absolute confidentiality to any party involved in an internal investigation, including the complainant. The investigator should instead explain at the outset to the complaining party and all individuals involved that information gathered will be maintained in confidence to the extent possible, but that some information may be revealed to the accused or potential witnesses on a need-to-know basis to conduct a thorough and effective investigation.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Finland
Finland
- at Roschier
- at Roschier
The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
As a matter of general principle, employees under investigation must have access to the necessary information to be able to defend themselves, in the context of their fundamental right to a fair trial and hearing.
Moreover, from a data protection perspective, they may be entitled to access their personal data in the respective files.
The above rights must be balanced with confidentiality and the need to safeguard the completion of the investigation and to protect the complainant from retaliation.
According to L.4990/2022, all data and information as well as the identity of the complainant are confidential, and any disclosure is only permitted where required by the EU or national legislation or during court proceedings, and only if it is necessary for the protection of the defence rights of the employee under investigation. The section of L.4808/2021 for the elimination of workplace violence and harassment does not regulate this specifically but provides a general obligation for confidentiality.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
The investigator must disclose to the employee under investigation the purpose of the investigation and, where the investigator is in-house or outside counsel, he or she should disclose that the company is the client.
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Finland
Finland
- at Roschier
- at Roschier
See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
According to express provisions of L.4990/2020, in principle personal data and any other information that may lead directly or indirectly to the identification of the complainant must not be disclosed to anyone other than the investigating individuals unless the complainant gives consent[4] and that is why pseudonyms should be used. The witnesses and third persons that aid the complainant are deemed as “mediators” by the Law and their contribution to the procedure should be confidential[5].
L.4808/2021 does not indicate when such disclosures are permitted; however, it is obvious that this is a matter of cost-benefit analysis where the public interest and the fundamental rights of the involved persons should be considered in a balanced way to ensure the best results. From a data protection perspective, it could be argued that the person under investigation’s right to know the identity of the complainant, witnesses or sources of information should be limited to protect the rights of these persons.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In general, except as provided above, depending on the seriousness of the complaint and investigation, the only persons who should be aware of it are the relevant individual in human resources or legal, and where different, the persons assigned to investigate. Although it may not be feasible to maintain absolute confidentiality in conducting an investigation depending on the nature of the allegations, investigators should exercise discretion at all times and, where possible, avoid identifying complainants, the subject of the investigation or witnesses by name where it is not necessary, and where doing so could be detrimental to the fact-finding process.
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Finland
Finland
- at Roschier
- at Roschier
Yes, however, the need for an NDA is assessed always on a case-by-case basis.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
NDAs are an option, especially to outline in detail the obligations of the persons conducting the investigation, which is also provided for in law. On the other hand, NDAs will not prevent persons involved from providing information to the competent authorities in the context of criminal or other similar procedures, where they must do so by law. Moreover, they may not protect confidentiality if persons who report breaches of Union law decide to make an external or public report, according to the provisions of L. 4990/2022.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
This is a fact-specific inquiry that depends on the specific circumstances and laws of the relevant state. In general, NDAs are frowned upon but can be used to an extent to keep certain facts and the substance of an investigation confidential. NDAs can never prevent employees from assisting in official agency investigations, however. NDAs also cannot lawfully prohibit employees from officially reporting illegal conduct by their employer.
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Finland
Finland
- at Roschier
- at Roschier
The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Regarding L.4990/2022 for whistleblowers’ procedures, many categories of privilege may occur during an investigation, such as: attorney-client privilege; doctor-patient privilege; and court or other proceedings’ privilege deemed as classified. L.4990/2022 provides that its provisions do not affect any of these privileges and these privileges supersede[6].
Privilege may also be attached to investigation materials in investigations relating to workplace harassment and violence incidents; however, since L.4808/2021 does not offer a specific provision and criminal proceedings may also commence, the matter of privilege must be examined ad hoc.
[6] Law 4990/2022 art.5 par.2(b) and par.2(c)
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
For legal privilege to apply, a primary purpose of the investigation should be to provide legal advice to the company, including concerning non-lawyers working at the counsel’s direction, and legal privilege likely will not apply to internal investigations performed as part of the ordinary course of business or where the investigation is required by a state or federal regulatory regime (eg, post-incident investigations of operations governed by OSHA’s Process Safety Management Standards). It is, therefore, important to contemporaneously document the scope and purpose of the investigation and not risk waiving privilege by sharing privileged materials with unnecessary third parties.
Whereas attorney-client privilege includes only communications between an attorney and the client, work-product privilege is broader and includes materials prepared or collected by persons other than the attorney with an eye towards impending litigation. Examples of potential work products produced by attorneys in the context of an investigation include investigative work plans, interview outlines, memoranda summarising witness interviews and investigative reports.
As a practical matter, employees should be aware that communications with other employees or colleagues regarding the investigation are not privileged regardless of whether the colleague is also involved in the investigation or represented by the same counsel. Even if an employee believes he or she is sharing attorney communications with other employees who need to know the attorney’s advice and who also have attorney-client privilege with the same counsel because he or she is involved or implicated in the investigation and also represented by company counsel, it is always prudent to refrain from sharing privileged information. If an attorney’s communication is shared beyond those who need to know, attorney-client privilege may be destroyed.
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Greek law does not specifically regulate the right to be accompanied or have legal representation during internal investigations for private-sector employees.
However, the right to legal representation established in article 6 of the European Convention on Human Rights could be interpreted to cover cases such as internal investigations in the workplace. In addition, according to article 136 of Civil Servant Code, the employee under investigation has the right to be represented by an attorney at law. There is an additional argument regarding private-sector employees and their right to legal representation, by applying this provision by analogy.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Employees generally have no automatic right to counsel in connection with an internal investigation, unless contractually provided for under the terms of an employment agreement. Nonetheless, employees may choose to retain counsel, particularly if they face liability.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Finland
Finland
- at Roschier
- at Roschier
A works council or a trade union does not have a role in the investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
L.4990/2022 explicitly states that the exercise of employee rights that refer to consulting from representatives or trade unions and protection against any detrimental measure that results from those consultations does not affect the implementation of any legal provisions. The autonomy of social partners and their right to enter into collective agreements regardless of the level of protection provided by L.4990/2022[7] is also unaffected.
Under L.4808/2021, legal persons and associations of persons, including trade unions, that have a legitimate interest in doing so may, with the consent of the complainant, bring an action in the complainant’s name before the competent administrative or judicial authorities. They may also intervene in their defence[8].
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Employers generally have no obligation to inform employees of their right to union representation or to ask if they would like a union representative present during the interview. Union employees may insist, however, that a union representative attend any investigatory interview that could lead to the employee’s punishment, although the union representative may not interfere with the interview.
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Finland
Finland
- at Roschier
- at Roschier
They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
According to L.4990/2022, any form of retaliation against complainants is prohibited, including threats of retaliation[9]. The complainants have the right to cost-free legal advice about possible acts of retaliation as well as cost-free provision of psychological support (to be defined by Ministerial Decisions)[10]. In terms of other types of support, the complainants are not in principle liable for the acquisition of information or releasing the information they reported under specific conditions (eg, the acquisition or access does not independently constitute a criminal offence, if they had reasonable grounds for believing that a report was necessary to reveal the violation)[11].
L. 4808/2021 states that the dismissal or termination of the legal relationship of employment and any other discrimination that constitutes an act of revenge or retaliation is prohibited and invalid[12].
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
The employer’s counsel should provide an Upjohn warning at the start of any interview, and delivery of the warning should be documented by a note-taker. An Upjohn warning is the notice an attorney (in-house or outside counsel) provides a company employee to inform the employee that the attorney represents only the company and not the employee individually.
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Finland
Finland
- at Roschier
- at Roschier
If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Employees under investigation frequently raise grievances during investigation procedures that are dealt with on a case-by-case basis. The grievances raised by the employee under investigation are examined by the employees responsible for the investigation. They may either pause the relevant proceedings and review the grievance, especially if the claims of the employee under investigation are linked to a breach of his or her data or hearing rights, or they may continue the investigation.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Where an employee who is the subject of a workplace investigation raises his or her grievance during the investigation, the investigator should follow the same steps outlined above to triage new issues or claims. The investigator should also discuss with in-house counsel whether any particular steps should be taken to avoid the perception that any disciplinary measures taken against the employee (in the event the original claims are substantiated) were retaliatory.
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Finland
Finland
- at Roschier
- at Roschier
As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In principle, the health of an ordinary employee would not prevent the investigation procedure from taking place (eg, interviews with witnesses or the collection of evidence would not be postponed or suspended). However, if the employee under investigation is unwell and they can't participate in the procedure, the investigation may be suspended or postponed until the employee can take part. Bearing in mind the majority of company internal policies and regulations governing workplace investigations provide for a specific framework and timetable for the whole procedure to be completed, the long-term sickness of an employee under investigation may impede the completion of the procedure in the prescribed time. As a result, the person conducting the investigation may seek alternative measures to facilitate participation (eg, teleconferencing).
On a related note, if sickness occurs after the investigation is completed and the employer decides upon the imposition of disciplinary measures against the said employee and the initiation of a relevant procedure, the decision should be duly and timely communicated to the employee, irrespective of whether his or her presence in the workplace is not possible because of the illness.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
If an employee who is the subject of a workplace investigation becomes sick during the investigation, the investigator should complete as much of the process as possible in the employee’s absence, for example by conducting interviews with the complainant and other witnesses and collecting and reviewing relevant documentation. Where the employee’s absence is expected to be short-term, the employer can postpone completing the investigation until the employee returns to work and can be interviewed. Where a lengthy absence is expected, the investigator should take steps to ensure that the employee nevertheless has a fair chance to participate in the process, for example by providing the employee with flexibility in scheduling his or her interview or by offering other accommodations such as conducting the interview by video conference instead of requiring an in-person interview, or alternatively meeting in a neutral place instead of the office. It is important to maintain records of the steps taken to accommodate the employee to show that the process was reasonable and fair.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Finland
Finland
- at Roschier
- at Roschier
Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Incidents of violence and harassment may be dealt with by certain independent authorities, such as the Labour Inspectorate Body and the Greek Ombudsman. The former is competent to impose sanctions on the employer if there is a breach of the general prohibition of violence and harassment at the workplace and the obligation of employers regarding the prevention of such incidents and the obligation to adopt policies within the business. The Greek Ombudsman is competent to deal with disputes when there is violence or harassment in the workplace coupled with discrimination due to, for example, gender, age, disability, sexual orientation, religious beliefs, or gender identity. Moreover, the applicable legal framework[13] stipulates that victims of violence and harassment are entitled to lodge a report before the Labour Inspectorate Body and the Greek Ombudsman. This is in addition to the judicial protection he or she may seek and the internal investigation procedure to which he or she may have recourse, without specifying whether internal proceedings may be suspended before the regulatory bodies decide on the matter.
On the other hand, the National Transparency Authority and in certain cases the Hellenic Competition Commission are external reporting channels for employees reporting breaches of Union law. In such cases, L.4990/2022 (article 11 paragraph 5) stipulates that the investigation before the National Transparency Authority is not suspended if reporting procedures before other regulatory authorities have been initiated.
Moreover, criminal investigations can run in parallel with internal probes.
[13] Law 4808/2018 art.10
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Employers have obligations to conduct a thorough and unbiased internal investigation and take prompt remedial action to prevent further workplace violations. As such, absent a criminal or regulatory investigation where the investigators ask the employer to pause an internal investigation, employers should be prepared to continue their internal investigation in parallel with the criminal or regulatory investigation while cooperating with police or regulatory investigators.
The police and the regulator can often compel the employer to share certain information gathered from its internal investigation. In some cases, the employer should analyse whether the non-disclosure of information evidencing criminal conduct within the company itself constitutes an independent crime or whether an applicable statute or regulation imposes an independent duty to disclose. Alternatively, the employer should consider whether, even absent an affirmative duty to disclose, disclosure of information gathered during an internal investigation may still benefit the employer.
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Finland
Finland
- at Roschier
- at Roschier
The employer's conclusions from the investigation.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
The employer has an obligation, towards the alleged victim but also the alleged perpetrator, to carefully investigate the report and any existing evidence before making decisions. The employee under investigation must be informed about the outcome of the procedure and any measures adopted in this regard. The respective decision must have due justification.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
In general, it is often helpful to provide the complainant and subject of the complaint with a short written communication or verbal communication at the end of an investigation to advise that the investigation has concluded. Where the allegations are unsubstantiated, the communication should convey that no evidence of misconduct or unlawful conduct was found. Where the allegations are substantiated, the results and proposed communication should be reviewed with the legal function, together with potential disciplinary and remedial action, before it is communicated to the complainant and the subject of the complaint.
Where the misconduct alleged poses a high risk to the company from a reputational, operational or legal perspective, and especially where an investigation is conducted by outside counsel, outside counsel should determine, in consultation with the relevant individuals at the company, for example the general counsel, how and with whom to share investigation results and if and how to communicate the outcome to the complainant and the subject of the complaint. This is the case regardless of whether the allegations are found to be substantiated or unsubstantiated.
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Finland
Finland
- at Roschier
- at Roschier
The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
For workplace violence and harassment investigations, depending on the outcome of the internal investigation, the employer may adopt certain measures including, for example, recommendations to the employee under investigation, changes to the employee’s working hours and transfer to another department.
If the employer decides to terminate the employment relationship, without having previously followed existing corporate policies regarding reporting procedures or without having provided the alleged perpetrator with the right to be heard, the dismissal could be deemed invalid. In any case, the measures adopted should be appropriate and proportional to the act committed.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Where the misconduct alleged is substantiated in whole or in part by an internal investigation, the human resources function, potentially in consultation with in-house or outside counsel, should agree on disciplinary or remedial action to be implemented.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Finland
Finland
- at Roschier
- at Roschier
In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
In principle, there is no specific obligation for investigating persons to disclose their findings. For proceedings before a court that have been initiated or investigated by the police or competent regulatory bodies, the relevant findings may be communicated under strict conditions and provided that the personal data of the parties involved are not publicly disclosed.
More specifically, under L. 4490/2022, in the context of whistleblowing procedures, personal data and any information that leads, directly or indirectly, to the identification of the complainant are not disclosed to anyone other than employees involved in the investigation, unless the complainant consents. The identity of the complainant and any other information may only be disclosed in the context of investigations by competent authorities or judicial proceedings, to the extent necessary for the protection of the employee under investigation’s rights of defence. Confidentiality obligations govern the procedure for revealing trade secrets to police and regulatory bodies, especially in the framework of L.4990/2022.
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
Once fact-finding is complete, the investigator should discuss his or her notes with in-house or outside counsel and prepare a summary of the process, high-level findings, and a proposed resolution at the counsel’s direction. This report should not include subjective commentary and should also avoid including excessive detail, and generally be treated confidentially during and after the investigation. If the report is requested by regulators or the police, the company should discuss with in-house counsel, and preferably also with outside counsel, how to respond to the request and whether any steps need to be taken to protect any applicable legal privilege.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Finland
Finland
- at Roschier
- at Roschier
Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
Under the General Data Protection Regulation, employees’ personal details and information must be kept in the business records for as long as is necessary for the purposes of the employment relationship. Otherwise, stored data must be deleted. However, under L.4990/2022[14], reports remain in the relevant record for a reasonable and necessary time, and in any case until the completion of investigations or proceedings before the courts that have been initiated as a consequence of a complaint against the employee under investigation, the complainant or any third parties.
[14] L.4990/2022 art.16 par.1
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
There is no requirement for the results of a workplace investigation to remain on an employee’s record for any specific period. It is often helpful, however, for information relating to the outcome of such an investigation (regardless of whether the allegations are substantiated) to be accessible to the human resources or legal functions such that during the initial complaint intake process described above, any prior complaints and investigations relating to the same individual or group of individuals can be taken into account to identify any recurring issues or systemic violations.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Finland
Finland
- at Roschier
- at Roschier
There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.
Greece
Greece
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
- at Karatzas & Partners
The employee can contest the decisions of disciplinary councils before the courts and request their annulment.
Moreover, in the framework of L.4990/2022, a monetary penalty and prison sentence (to be defined by an implementing Ministerial Decision) may be imposed on any person violating confidentiality obligations concerning the identity and personal data of employees or third parties included in the investigation procedure, while monetary penalties are also provided for legal entities[15].
Moreover, administrative fines may also be imposed if the employer does not comply with the legal requirements concerning the prevention of violence and harassment in the workplace.
Furthermore, the employee under investigation may initiate proceedings before the courts under tort law, by claiming compensation for moral damages suffered if the company did not comply with its confidentiality obligations after the incident (eg, due to the spread of rumours in the workplace). This may also be linked with criminal law proceedings against the persons responsible for dealing with the investigation (and not against the legal person, since under Greek law there is no criminal liability for legal persons).
On the other hand, the employer may also be exposed to liability vis-à-vis the complainant, witnesses or facilitators, for breach of confidentiality or other obligations prescribed in the respective legal provisions, or if there are retaliation measures.
[15] L.4990/2022 art.23 par.1
United States
United States
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
- at Cravath, Swaine & Moore
The subject of the investigation, the complainant, or a government agency investigating the same alleged misconduct could subject the employer to legal exposure. It is, therefore, helpful for a company to prepare a contemporaneous report of the investigation that summarises: the incident or issues investigated, including dates; the parties involved; key factual and credibility findings; employer policies or guidelines and their applicability to the investigation; specific conclusions; the party (or parties) responsible for making the final determination; issues that could not be resolved through the internal investigation; and employer actions taken.
The employer should also maintain a clear record of the steps taken to investigate the alleged misconduct and any findings, as well as all evidence gathered during the investigation, including documents collected and reviewed, any work done to identify systemic issues or patterns of behaviour, and notes from all interviews, which should be limited to the facts gathered, dated and should indicate the duration and location of the interview.