Workplace Investigations

Files and documents that are purely business-related – whether in physical or digital form – may, in principle, be inspected by the employer without restriction. The employee has no right to refuse inspection.

When searching business laptops, computers, phones and e-mail accounts, a distinction must be made as to whether private use is permitted (or at least tolerated) or not: if the employee is allowed to use the items exclusively for business purposes, the employer may monitor and control them. If private use is permitted, the employee's right to privacy must be observed for private files, as must the protection of the secrecy of correspondence. Accordingly, the employer must avoid accessing private documents, files and e-mails. However, a review of private documents, files and e-mails may be permissible in the event of particularly serious violations if the employer's interest in the review outweighs the employee's interest in safeguarding his right to privacy. Generally, employers should allow private use of electronic devices only if employees have previously consented to the terms of use (including searches in certain cases).

A search of the employee's workplace by the employer is, in principle, permissible. However, a search of personal items (eg, bags, clothes, personal mobile phone) is generally only permissible with the employee's consent. Similarly to the review of digital personal data, a search of personal items may be permitted, however, in the event of particularly serious violations if the employer's interest in the search outweighs the employee's right to privacy.

As a first step, the employer should ask for the employee’s permission to access their possessions and files. Employment contracts and internal labour regulations may include provisions regarding an employer’s access to employees’ documents created and kept for business purposes or related to business activity.

The basic rule is that the employer may not search private data during internal investigations.

If there is a strong suspicion of criminal conduct on the part of the employee and a sufficiently strong justification exists, a search of private data may be justified.[1] The factual connection with the employment relationship is given, for example, in the case of a criminal act committed during working hours or using workplace infrastructure.[2]

The employer has no general obligation to proactively inform the employee about the outcome of an investigation. However, if personal data was collected, the employee has the right to request certain information: the purpose of the data collection, type of data, recipients of the data, the planned storage period of the data, his right to have the data corrected or deleted, his right to complain to a supervisory authority, and information on the source of the data.

The employer has an obligation, towards the alleged victim but also the alleged perpetrator, to carefully investigate the report and any existing evidence before making decisions. The employee under investigation must be informed about the outcome of the procedure and any measures adopted in this regard. The respective decision must have due justification.

Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.

The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]

Depending on the results of the investigation, different steps may have to be taken by the employer. Specifically, the following should be considered:

• in certain cases, there may be an obligation (or at least good reason) to share the results of the workplace investigation with the authorities (see question 25);
• filing of a criminal complaint against the employee;
• disciplinary measures against the employee such as a warning, ordinary termination or termination for cause;
• assessing and asserting claims for damages against the employee;
• offering compliance training to the relevant employees or introducing additional measures to prevent further violations;
• if there is a risk that the company itself is exposed to investigative proceedings at some point and may have to defend itself, investigation materials should be stored at the company's external attorney's office; and
• depending on the individual circumstances of the case and to mitigate potential reputational damage, proactively informing the public (eg, by issuing a press release) may be beneficial.

For workplace violence and harassment investigations, depending on the outcome of the internal investigation, the employer may adopt certain measures including, for example, recommendations to the employee under investigation, changes to the employee’s working hours and transfer to another department.

If the employer decides to terminate the employment relationship, without having previously followed existing corporate policies regarding reporting procedures or without having provided the alleged perpetrator with the right to be heard, the dismissal could be deemed invalid. In any case, the measures adopted should be appropriate and proportional to the act committed.

If the investigation uncovers misconduct, the question arises as to what steps should be taken. Of course, the severity of the misconduct and the damage caused play a significant role. Furthermore, it must be noted that the cooperation of the employee concerned may be of decisive importance for the outcome of the investigation. The possibilities are numerous, ranging, for example, from preventive measures to criminal complaints.[1]

If individual disciplinary actions are necessary, these may range from warnings to ordinary or immediate termination of employment.