Workplace Investigations

In principle, the health of an ordinary employee would not prevent the investigation procedure from taking place (eg, interviews with witnesses or the collection of evidence would not be postponed or suspended). However, if the employee under investigation is unwell and they can't participate in the procedure, the investigation may be suspended or postponed until the employee can take part. Bearing in mind the majority of company internal policies and regulations governing workplace investigations provide for a specific framework and timetable for the whole procedure to be completed, the long-term sickness of an employee under investigation may impede the completion of the procedure in the prescribed time. As a result, the person conducting the investigation may seek alternative measures to facilitate participation (eg, teleconferencing).

On a related note, if sickness occurs after the investigation is completed and the employer decides upon the imposition of disciplinary measures against the said employee and the initiation of a relevant procedure, the decision should be duly and timely communicated to the employee, irrespective of whether his or her presence in the workplace is not possible because of the illness.

If the employee under investigation goes off sick, the employer should ascertain the medical condition of the employee and when he or she is likely to return to fitness. If the employee is unlikely to return to work for a reasonable time, the employer should consider what adjustments can be made to the investigation process to continue with the investigation. If the employee’s input is necessary for the conclusion of the investigation, the employer may invite the employee to provide information by way of a written questionnaire or to attend a virtual meeting. However, the employee may not necessarily agree to these proposals, especially if he or she is unwell. In such circumstances, the employer may not be able to conclude the investigation in the absence of the employee.

The time spent on the internal investigation by the employee should be counted as working time[1]. The general statutory and internal company principles on sick leave apply. Sick leave for which the respective employee is not responsible must generally be compensated (article 324a paragraph 1 and article 324b, Swiss Code of Obligations). During certain periods of sick leave (blocking period), the employer may not ordinarily terminate the employment contract; however, immediate termination for cause remains possible.

The duration of the blocking period depends on the employee's seniority, amounting to 30 days in the employee's first year of service, 90 days in the employee's second to ninth year of service and 180 days thereafter (article 336c paragraph 1 (lit. c), Swiss Code of Obligations).

In principle, there is no specific obligation for investigating persons to disclose their findings. For proceedings before a court that have been initiated or investigated by the police or competent regulatory bodies, the relevant findings may be communicated under strict conditions and provided that the personal data of the parties involved are not publicly disclosed.

More specifically, under L. 4490/2022, in the context of whistleblowing procedures, personal data and any information that leads, directly or indirectly, to the identification of the complainant are not disclosed to anyone other than employees involved in the investigation, unless the complainant consents. The identity of the complainant and any other information may only be disclosed in the context of investigations by competent authorities or judicial proceedings, to the extent necessary for the protection of the employee under investigation’s rights of defence. Confidentiality obligations govern the procedure for revealing trade secrets to police and regulatory bodies, especially in the framework of L.4990/2022.

As mentioned in questions 21, 22 and 23, under Hong Kong law, the employer is generally not obliged to actively disclose the findings of a workplace investigation to any party.

Having said that, the employer should be aware of certain statutory disclosure requirements that may become applicable as a result of the matters revealed during the workplace investigation. For example, if the investigation reveals or gives rise to any knowledge or suspicion that any property represents the proceeds of an indictable offence[1], drug trafficking[2], or terrorism[3], the employer is required to report its knowledge or suspicion, together with any matter on which that knowledge or suspicion is based, to the JFIU as soon as is reasonably practicable (even where the investigation has not yet been concluded). Employers who are licensed corporations must also provide the SFC with information about whether departing licensed employees were the subject of an internal investigation in the six months prior to his/her departure. If the internal investigation commences after the departure of the licensed employee, the licensed corporation should notify the SFC as soon as practicable[4].

In any event, as in question 14, if any documents related to the investigation are protected by legal professional privilege, they can generally be kept confidential and would not be subject to disclosure even if the employer is subject to a mandatory reporting or disclosure obligation.

The employer is generally not required to disclose the final report, or the data obtained in connection with the investigation. In particular, the employer is not obliged to file a criminal complaint with the police or the public prosecutor's office.

Exceptions may arise, for example, from data protection law (see question 22) or a duty to release records may arise in a subsequent state proceeding.

Data voluntarily submitted in a proceeding in connection with the internal investigation shall be considered private opinion or party assertion.[1] If the company refuses to hand over the documents upon request, coercive measures may be used under certain circumstances.[2]

Under the General Data Protection Regulation, employees’ personal details and information must be kept in the business records for as long as is necessary for the purposes of the employment relationship. Otherwise, stored data must be deleted. However, under L.4990/2022[14], reports remain in the relevant record for a reasonable and necessary time, and in any case until the completion of investigations or proceedings before the courts that have been initiated as a consequence of a complaint against the employee under investigation, the complainant or any third parties.

There is no legal requirement in Hong Kong on this. However, since the investigation records will likely contain personal data, employers should be mindful of the requirement under the PDPO that personal data should not be kept for longer than necessary.[1]

According to the Code of Practice on Human Resources Management published by the Privacy Commissioner for Personal Data, generally, employment data about an employee can be kept for the entire duration of his or her employment, plus a recommended period of no more than seven years after the employee leaves employment unless there is a subsisting reason that justifies a longer retention period. A longer retention period may be justified where there is ongoing litigation or a parallel investigation. Even where it is deemed necessary to retain the outcome of the investigation concerning a departed employee, the employer should ensure that other personal data on the employee’s record (that is unrelated to the purpose of retention) are erased after the expiry of the recommended retention period.

From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.

From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]