Workplace Investigations

Internal investigations can be initiated either upon a complaint or report by an employee, (or other persons providing services or seeking employment, etc) in the workplace or by the employer as part of their managerial right.

If from an employee, the complaint or report may fall within the scope of an internal disciplinary procedure, if any, or may concern an alleged workplace violence or harassment incident, or fall within the scope of L.4990/2022 on the protection of persons who report breaches of Union law.  

Reports by whistleblowers are submitted to the manager with responsibility for receiving and monitoring reports, a person appointed for that purpose under L.4990/2022. Complaints for incidents and harassment in the workplace can also be submitted, according to L.4808/2022, to the person or internal body specifically assigned to receive such complaints. Both laws require the employer to define the persons competent for receiving and monitoring complaints or reports and notifying the employees stricto sensu and any other persons falling within the scope of the respective provisions.

Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).

For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]

The trigger could come from several sources, such as a grievance from a current or former employee, a complaint from external sources, a whistleblowing disclosure, or as the result of internal governance measures.

In each case, the employer will need to decide if an investigation is warranted. It may be required by internal policies or regulatory requirements in some circumstances. Consideration must be given to whether an investigation is feasible; for example, is the evidence still in existence and accessible? Are key witnesses still employed or contactable?

If the employer concludes that an investigation is warranted, it should start without unreasonable delay. The first step would usually be to set terms of reference, which outline the purpose and remit of the investigation. These should be closely drafted and continually referred to, to avoid the investigation’s scope expanding when new points arise (as they almost always will). An investigator will also need to be appointed (see question 4).

A workplace investigation is often, although not always, prompted by a complaint of workplace misconduct, usually made directly by the employee who was harmed by the conduct, a third party who witnessed the conduct, or a manager or supervisor who was made aware of the issue and has reporting obligations as a result of his or her role in the organisation. 

It is best practice – and often a legal requirement depending on the applicable state law – for companies to clearly outline a complaint process in their policies and to provide employees who experience, have knowledge of, or witness incidents they believe to violate the company’s policies with one or more options for making a report. Although the specific complaint procedure may vary depending on the size of the organisation, the nature of the business and the type of complaint at issue, many companies provide for (or require) making a report through one of the following channels:

• a company-managed hotline or online equivalent;
•  human resources;
• an affected employee’s supervisor or manager; or
• a member of the legal or compliance department.    

If any unrelated matters are revealed as a result of an investigation and are of legal importance, the applicable legal provisions must be implemented and any relevant policies or agreements between the involved parties should be taken into account. For example, if the reporting procedure sheds light on other criminal acts, criminal law procedure may be followed if the matter is reported to the competent authorities.

If these unrelated matters fall under the ambit of another company’s policies, the relevant procedures may also be followed separately. However, the employee under investigation must be allowed to defend him or herself, otherwise he or she may raise complaints relating to the procedural guarantees of the investigation.

There are no regulations in this regard in the Swiss employment law framework. However, in criminal proceedings, the rules regarding accidental findings apply (eg, article 243, Swiss Criminal Procedure Code for searches and examinations or article 278, Swiss Criminal Procedure Code for surveillance of post and telecommunications). In principle, accidental findings are usable, with the caveat of general prohibitions on the use of evidence.

These should typically be disregarded by the investigator. From a data protection perspective, the ICO’s position is that other information collected during an investigation should be disregarded and, where feasible, deleted unless it reveals information that no reasonable employer could be expected to ignore. In those circumstances, the employer should arrange for an independent third party to determine whether a separate investigation into unrelated matters is needed.

Where new issues or claims arise during an ongoing workplace investigation, the investigator should discuss with in-house counsel whether the new issues or claims should be separately investigated and if so, by whom, or if instead those new issues or claims are sufficiently related to the current review that they can be investigated in parallel and incorporated into the ongoing fact-gathering process.