Workplace Investigations

In some laws and regulations for specific industries, enterprises or personnel, there are certain requirements for the qualifications of investigators. For example, according to the Interim Measures for Investigating and Dealing with Disciplinary Violations of Professional Personnel by Medical Institutions, the personnel conducting an investigation and evidence collection shall not be less than two. If the investigator is a close relative of the investigated person, or a tip-off person or a key witness of the issue to be investigated, the investigator shall withdraw from the investigation.

However, at present, there are no unified and detailed national rules and regulations on the qualification of the investigators and organizations. In practice, the selection of the personnel and organizations responsible for internal investigation is usually based on the relevant provisions in the internal rules and regulations of the employer. The personnel conducting internal investigation are usually internal functional departments of the employer and are independent to some extent, including the personnel department, legal department, compliance department or risk control department. For significant or complex issues or senior management investigations, in order to ensure professionalism, accuracy and compliance, external law firms, consultants and accounting firms are also frequently hired to conduct investigations.

As far as the persons in charge of an internal investigation are concerned, L. 4990/2022 on the protection of persons who report breaches of Union law provides for certain conditions that should be met when exercising their duties (ie, being impartial and abstaining when there is a conflict of interest), which also apply as general principles in all disciplinary procedures. Whistleblowing legislation stipulates that persons appointed to receive and investigate a whistleblowing procedure should meet certain conditions, including no penal proceedings against them, no disciplinary proceedings or convictions for specific offences, and no workplace suspensions.

Official disciplinary procedures are conducted by the competent bodies as described in the respective internal labour regulations.

Although not specifically regulated, support from external advisors (eg, lawyers) is allowed.

The examinations can be carried out internally by designated internal employees, by external specialists, or by a combination thereof. The addition of external advisors is particularly recommended if the allegations are against an employee of a high hierarchical level[1], if the allegations concerned are quite substantive and, in any case, where an increased degree of independence is sought.

The Civil Code of the PRC, the Personal Information Protection Law of the PRC and other laws provide for the protection of employees' personal information and privacy. Employers are often involved in checking the information and materials stored in the computers, hard disks and other electronic office equipment provided to employees in internal investigation and are likely to access the employees' personal information including personal privacy information, such as the communication records stored in instant communication software such as WeChat, QQ or other instant communication software or to and from private email boxes. According to the Personal Information Protection Law of the PRC, employers are required to perform the obligation of informing and obtain the individuals' consent prior to the processing of personal information, i.e. the principle of informing + consent. Moreover, the Civil Code of the PRC stipulates that no organization or individual may process any person's private information, except as otherwise provided by law or with the explicit consent of the right holder.

Therefore, the legitimacy of obtaining data evidence can be enhanced and guaranteed only if it is explicitly stated in the relevant rules and regulations that the employer shall have the right to the work equipment provided to the employees or obtains the employees' personal consent.

GDPR and the provisions of L. 4624/2019 regulate the gathering of physical evidence from a data protection perspective, providing, among other things, that personal data should be processed with transparency and to the extent necessary for the investigation.

L.4990/2022 on the protection of persons who report breaches of Union law regulates data protection issues in the context of whistleblowing investigations, mainly to safeguard confidentiality throughout the investigations.  

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.