Workplace Investigations

Austrian law does not impose an obligation on employers to conduct internal investigations and they do not have to follow a specific legal pattern when doing so. However, an obligation to conduct internal investigations may arise out of certain provisions of criminal, company or even labour law – in particular, an indirect obligation arising from an employer's duty of care, which requires them to act against employee mistreatment, such as bullying.

If such internal investigations are initiated, compliance with labour law and data protection regulations is mandatory. According to section 16 of the Austrian Civil Code (ABGB), the employer must also protect the personal rights of the individual. It is important to emphasise that a company's internal investigation is a private measure and differs from official investigations.

Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.

There are essentially two phases in a workplace investigation: the fact-finding phase and the administrative proceeding.

The fact-finding phase of workplace investigations is usually governed by the internal policies of the employer, save for investigations relating to gender-based sexual harassment in the workplace. Republic Act No. 11313, otherwise known as the Safe Spaces Act, sets the parameters for these kinds of investigations.

Philippine case law recognises the right of an employer to conduct investigations for other acts of misconduct in the workplace in the exercise of its management prerogative. The Supreme Court has held that it is an employer’s right to investigate acts of wrongdoing by employees, and employees involved in such investigations cannot simply claim that employers are out to get them.

After the fact-finding aspect of the investigation, if the employer decides it has sufficient grounds to proceed to full-blown administrative proceedings, it needs to comply with the due process requirements outlined under the Philippine Labor Code. These requirements are:

• a first notice, or notice to explain, informing the employee of the charges against him or her;
• an opportunity for the employee to be heard; and
• a final notice on the outcome of the administrative action.

In general, an internal investigation is only initiated if there is suspicion of a violation. The decision to commence an internal investigation is up to the company, and it has to weigh the pros and cons. For limited liability companies, which are subject to the Association Responsibility Act, an internal investigation may exempt them from criminal liability. Disadvantages may include investigation costs, disruption of operations, discovery of information requiring later disclosure, possible negative media coverage and increased risk of exposure to external parties.

Investigations can relate to specific individuals, departments, or the entire company. An investigation may include various measures, such as obtaining and analysing files and documents, conducting questionnaires and employee interviews, monitoring internet use, video or telephone surveillance of employees and setting up whistleblowing hotlines. Not all measures are acceptable without restrictions. The provisions of labour law and data protection law must always be complied with.

To avoid wasting resources, the objectives of the investigation should be defined in advance. In addition, the selection and sequence of instruments to be used should be determined. A legal assessment of the chosen measures is essential to avoid legal complications.

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

Workplace investigations are normally commenced either through a complaint filed by other employees in the workplace or by HR or other representatives of management.

Under the Safe Spaces Act, employers are required to commence an investigation and decide on complaints regarding gender-based sexual harassment, within ten days of the complaint being brought to their attention. For other workplace misconduct, management is given wide discretion regarding the means and method by which the workplace investigation may be carried out.

Yes. An employer may always, and without legal restrictions, temporarily suspend an employee during an internal investigation, provided he or she continues to be paid.

However, suspending the employee does not release the employer from an obligation to terminate employment without notice. It must be clear to the employee that the suspension is a temporary measure in preparation for dismissal. A suspension does not entitle the employer to postpone the reasons for dismissal for any length of time. The longer the suspension lasts, the more likely it is that the employer intends to keep the employee.

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

A preventive suspension pending investigation is allowed under the law, provided that the continued employment of the subject of the investigation poses a serious and imminent threat to the life or property of the employer or other employees. Additionally, the period of preventive suspension pending investigation should not last longer than 30 days. However, should the employer wish to extend this period, the employer must pay the employee’s wages and other benefits. The employee is under no obligation to reimburse the amount paid to them during the extension if the employer should, later on, decide to dismiss the employee after the completion of the process.

In practice, the notice of preventive suspension is issued simultaneously with the first notice or the notice to explain after the employer has conducted its fact-finding investigation and has reason to believe that the employee must be held accountable for his or her actions.

Since placing an employee under preventive suspension requires the existence of a serious and imminent threat to the life or property of the employer or other employees, some employers opt to place the employee or employees involved on agreed paid leave. This will allow the employer to conduct an unhampered workplace investigation while the investigated employee is still able to receive his or her full salary during this period. The exact period of paid leave may be agreed upon by the employer and the employee, but ideally it should not last for more than thirty days.

There are no prescribed minimum standards for this procedure. The responsibility for conducting these investigations lies with the employers. Internal compliance or legal teams are often entrusted with this task, as they are familiar with internal protocols. In practice, these investigations are often overseen by an internal team, occasionally with the assistance of law firms or auditing firms. Those involved in the investigation must remain impartial. Potentially biased persons, such as those under investigation and their close associates, should be excluded from participation.

The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation

Under the Safe Spaces Act, an employer should create an independent internal mechanism or a committee on decorum and investigation to investigate and address complaints of gender-based sexual harassment, which should:

• adequately represent the management, the employees from the supervisory rank, the rank-and-file employees, and the union, if any;
• designate a woman as its head and no less than half of its members should be women;
• be composed of members who are impartial and not connected or related to the alleged perpetrator;
• investigate and decide on the complaints within 10 days or less upon receipt thereof;
• observe due process;
• protect the complainant from retaliation; and
• guarantee confidentiality to the greatest extent possible.

For other types of offences, it is the prerogative of management as to who will conduct the investigation and how it will be conducted, provided the proceedings remain impartial.

If the investigated employee believes that individual measures violate his rights, he or she can defend him or herself against them, but he or she cannot stop the entire investigation.

In principle, the employee has various rights such as access, rectification, erasure and the right to contest the processing of his or her data (articles 12-17 and 21 GDPR). Should these principles be violated, the employee has the right to lodge a complaint with the data protection authority.

The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.

There is generally no legal remedy for an employee to stop a workplace investigation as it is the prerogative of management to conduct it. Nevertheless, if the employee alleges violation of any specific law or contractual provision in the conduct of the investigation, the employee may be able to seek judicial relief for violation of the law or contract, and ask for interim relief.

An essential part of an internal investigation is the questioning of employees. Their statements contribute significantly to clarifying possible violations. In particular, the legal principles that apply to criminal proceedings, including the right to refuse to testify, do not apply directly to internal investigations.

Employees do not legally have to participate in such interviews. Their duty to cooperate arises indirectly from other legal provisions, in particular from employees’ duties of loyalty and service under labour law.

Austrian law suggests there is a general principle of loyalty, which triggers a “duty to inform” under some circumstances; in principle, the employee and any witnesses are expected to provide information in the context of internal investigations. While the employee is not compelled to incriminate him or herself, he or she also may not withhold work-related information that the employer legitimately wishes to protect, for the sole reason that it might incriminate him or her. The decision as to whether the employee must disclose information depends on a balancing of interests in the specific case.

Investigators and employers must strictly adhere to the permissible limits. This requires compliance with labour law, criminal law and data protection law.

There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing. 

Neither the employer nor the employee subject of the investigation can compel co-workers to act as a witness. There is no specific law for whistleblowers or employees who act as witnesses during an investigation. Nevertheless, the employer can have its own whistleblower policy.

All data processing must comply with the principles of article 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity). Personal data may only be collected and processed for specific, lawful purposes.

The admissibility of data processing depends on whether the suspicion relates to a criminal offence or another violation of the law. If the data processing is relevant to criminal law, article 10 GDPR or section 4(3) of the Austrian Data Protection Act (DSG) applies. If the investigations are exclusively to clarify violations under civil or labour law, such as an assertion of claims for damages or if they are general investigations to establish a criminal offence, the permissibility of data processing is based on article 6 or, for data covered by article 9 GDPR, on this provision.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

The procedure for gathering physical evidence is governed primarily by company policy. Nevertheless, the Data Privacy Act of the Philippines protects all data subjects from unlawful processing of their personal information without consent.

In general, it is advisable to back up data, documents, emails and other records promptly to prevent their deletion. Admissibility depends on whether the data originates from personal or professional records and whether they are legally relevant. If internal investigations are carried out based on a specific suspicion of a criminal offence, it is the processing of legally relevant data. In general, the processing of professional emails or documents is permissible. If there is no professional connection, access to private files and documents is only permitted in exceptional cases.

If, for example, using a business email account for private purposes is not allowed, the employer can usually assume that the data processed is only "general" data within the meaning of article 6 GDPR and that such data processing is justified by a balancing of interests. However, if private use is allowed, the data may still be part of a special category within the meaning of article 9 GDPR. In such cases, the justification for its use must be based on one of the grounds explicitly mentioned in article 9(2) GDPR.

The employer must protect the employee's rights under section 16 of the ABGB and must consider the proportionality of the interference. Only the least restrictive means – the method that least interferes with the employee's rights – may be used to obtain the necessary information. The employer's interest in obtaining the information must outweigh the employee's interest in protecting his or her rights. The implementation or initiation of controls by the employer does not automatically constitute an interference with personal rights, as being subject to the employer's rights of control is part of the position as an employee.

Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).

Subject to the employees’ reasonable expectation of privacy, gathering physical evidence within the premises of the workplace and through company-issued property has been upheld to be legally permissible in pursuit of the employer’s right to conduct work-related investigations. The search, however, should be limited to the alleged acts complained of and must not be used as a fishing expedition to find incriminating information about the erring employee.

The provisions of the Whistleblowing Directive must be respected. In Austria, these have been implemented through the Whistleblower Protection Act (HSchG). If the whistleblower or the persons concerned fall within the scope of the Directive, their identity must be protected. Only authorised persons may access the report. Retaliatory measures are invalid or must be reversed. Within a maximum of seven days, the whistleblower must receive a confirmation of his or her complaint. Feedback to the whistleblower must then be provided within a maximum of three months.

In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).

Since there is no specific law that governs whistleblowing, matters that involve whistleblowing will be governed by company policy.

If the report and the whistleblower fall within the scope of the Whistleblowing Directive, his or her identity must be protected. From a data protection perspective, the principles of the DSG must be observed to protect the legitimate confidentiality of the individuals concerned.

Furthermore, the employer should ensure that information is only disclosed to trustworthy persons to avoid pre-judgements.

Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).

Since the right to investigate ultimately belongs to the employer, it may impose strict confidentiality obligations upon the individuals involved, not only to ensure unhampered investigation proceedings but also and more importantly for the protection of the company and employees involved.

The purpose of internal investigations would be jeopardised by fully informing a suspected employee beforehand, as it would allow him or her to hide or destroy possible evidence, plan his testimony or coordinate with other employees.

There is no legal requirement to inform the employee of the allegations or suspicions.

The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.

During the fact-finding stage of the investigation, the employees under investigation are not generally entitled to information concerning the conduct of the investigation. It is the prerogative of management to involve the employee under investigation during the fact-finding stage. When, however, the employer determines that an administrative disciplinary process must proceed, the employee’s right to due process attaches. As such, due process includes the right to be informed of the grounds relied upon by the employer and the opportunity to be heard. The first notice or notice to explain should specifically inform the employee of the charge against him or her.

When dealing with reports and persons covered by the HSchG, the provisions on identity protection must be followed. In all internal investigations, only authorised persons should receive information.

See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.

The identity of the complainant, witnesses and sources of information may be kept confidential under the employer’s policies.

According to section 6(1) of the DSG, employees who have access to personal data in the course of their professional activities must maintain data confidentiality and continue to do so even after termination of their employment.

Non-disclosure agreements can generally be used to achieve this but are subject to certain restrictions. They may not be used to conceal criminal activity, violate the privacy rights of individuals, circumvent legal disclosure obligations, prevent the exercise of legal rights or contain clauses that violate existing laws, in particular data protection regulations.

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

The practice of stipulating matters to ensure adherence to confidentiality is not uncommon. As such, NDAs are executed as a means of added protection for both the company and the employees involved.

If a lawyer is involved in the investigation, communication between the lawyer and client is subject to legal professional privilege. These communications must not be disclosed. Any documents collected by an internal audit can be seized and used. However, a document created by a lawyer can only be seized. The same applies to other professional representatives of parties, such as notaries and auditors, as potential holders of professional secrecy.

The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.

The employer’s internal policy can indicate that investigation materials must be kept confidential.

In general, an employee is not entitled to have a representative present during investigations. However, he is free to reach out to the works council or independently contact a lawyer for advice. The employer must hear the works council upon his or her request on all matters concerning the interests of employees at the company. Once disciplinary proceedings begin, the employee has the right to be represented by a lawyer.

The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.

Since the fact-finding phase of the investigation is considered to be a preliminary step before the commencement of the administrative disciplinary process, an employee’s right to representation does not attach.

However, when the administrative disciplinary process commences, the employee has the right to have legal representation during the investigation. While no law requires the employee to have counsel present during the investigation, the employee has the right, if he or she chooses, to be advised by counsel or have legal representation.

The Austrian Labour Constitution Act (ArbVG) does not contain any provisions regarding workplace investigations. The employee has the right to address the works council but is not entitled to have the works council comply with his or her request.

The works council's opportunities for participation are conclusively regulated. Certain investigative or control measures may require the consent or co-determination of the works council.

Under section 96(1)3 ArbVG, the consent of the works council is required if the employer wishes to introduce and maintain control measures or technical systems for monitoring employees that affect human dignity, such as video surveillance or specific staff questionnaires. If there is no works council, the consent of each individual employee is required.

A works council or a trade union does not have a role in the investigation.

Except if provided expressly under a collective bargaining agreement, the union does not have the right to be involved in the investigation. Given that the investigation is between the employee and the company, it follows that the union does not have any right to participate in the investigation proceedings.

There is no additional support for the employees concerned. However, the employer may offer support measures to the employees to ensure better cooperation. The choice of support measures is at the employer's discretion. For example, the employer could offer to bear lawyer’s fees, if the employee is cooperative. Such decisions must always be made on a case-by-case basis.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

Since the conduct of an investigation is different from the administrative disciplinary process, management is given wide latitude for the exercise of the same.

After the employer determines that there are sufficient grounds to support the conduct of a formal administrative process, employees that are the subject of an administrative hearing should be allowed to present evidence to support his or her statements. Further, the employee may also provide affidavits of his or her co-employees consistent with his or her testimony.

The employer must decide how to deal with this information. Possible options are to initiate separate and unrelated investigations or to extend the ongoing investigations.

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

If unrelated matters are revealed because of a workplace investigation, the employer may look into the new matter and then determine whether there are sufficient grounds to proceed with an administrative disciplinary process for the new matter.

Provided the employer complies with labour law and data protection regulations, internal investigations are lawful and are not regarded as administrative or judicial proceedings. If legal consequences for not cooperating, such as dismissal, are threatened by the employer or his investigators, the offence of coercion under section 105 of the Austrian Criminal Code could be fulfilled.

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

If an employee under investigation raises a grievance during an ongoing investigation, the employer must ensure that the employee under investigation is treated reasonably and fairly. Thus, the employer must also give attention to the complaint made by the employee and determine if there are reasonable grounds for the concern of the employee. If the employer determines the validity of the grievance raised, the employer may conduct a separate investigation for it.

The involved employee's sick leave does not affect the internal investigation. Most investigative measures can be carried out without the employee's presence.

As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.

Since neither consent nor the presence of the employee is material to the conduct of the investigation, his or her absence would not, in practice, imperil the conduct of the investigation.

As previously discussed, because the employer exercises a wide latitude of discretion in conducting workplace investigations, the employer may choose to proceed with the investigation despite the absence of the employee being investigated. Since the proceeding is only in the investigation phase, the statutory right of the employee to be heard is not violated, even if the investigation takes place without his or her participation.

Private investigations differ from criminal or regulatory investigations. Nevertheless, even for internal investigations, it is advisable to collect evidence in a way that can be admitted in court, as it may have to be presented to the authorities during the investigation process. Generally, any evidence obtained in the course of an internal investigation may be admitted in subsequent administrative or judicial proceedings.

If the evidence is not voluntarily surrendered, seizure or confiscation is possible. Since official proceedings are often lengthy, suspension is not always recommended.

Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.

It is within the employer’s discretion to pursue the investigation even if a parallel criminal or regulatory investigation is taking place. As such, different investigations may proceed independently of each other. However, if the workplace investigation would interfere with or hinder the criminal or regulatory investigation, the workplace investigation should defer to the investigation being conducted by the people in authority. Since the nature of a workplace investigation is highly confidential, the police or regulations cannot compel any evidence from the employer without a court order.

The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.

The employer's conclusions from the investigation.

The employee under investigation should be informed of the results of the investigation and the basis of the conclusion. It should be included in the first notice or the notice to explain.

The employer should determine the intended recipients and format of the report in advance. In many cases, it may be advisable to publish only the results of the investigation to protect the privacy and reputation of the individuals concerned, as this may help to minimise any potential negative impact on them.

However, under certain circumstances or due to legal requirements, full disclosure of the investigation report may be required, especially if transparency and disclosure are necessary to maintain public or investor confidence.

The employee under investigation may only be informed of the conclusions.

The employer is not compelled to share its investigation report with the employee. However, it would be ideal for the company to keep in its records a comprehensive report that details the findings of the investigation. This would be useful during the administrative disciplinary process when the employee requests to be informed of the substantive grounds for his or her eventual termination.

The employer may impose consequences under labour law. Consequences may include verbal or written warnings, transfers or other disciplinary measures. The employer may also implement training or educational measures if the issue is due to the employee's lack of knowledge. In serious cases, besides dismissal without notice – for example. if the employer seeks damages –legal action (civil or criminal) may be taken against the employee.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

After the investigation has been concluded, the next steps of the employer will depend on the result of the investigation. If there are reasonable grounds to hold the employee for an administrative hearing, the employer may issue a Notice To Explain containing the charges against him or her and allowing the employee to explain his or her side. Otherwise, the employer may terminate the investigation immediately.

It is up to management to decide which results should be disclosed and to whom. It is important to know who the persons concerned are and who has an interest in disclosure.

From a legal perspective, disclosure must follow the GDPR. Internal policies can specify how the results are to be handled. Works Council Agreements (WCAs) may also contain regulations on how to deal with internal investigations and the disclosure of results.

There is no requirement to publish the results of the investigation, but it may be advisable to cooperate with the authorities. This is particularly the case if the employer has suffered damage or is himself threatened with prosecution. The release of investigation results can be compelled through the courts.

In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.

The result of the workplace investigation must be kept private by the employer. These are confidential matters that should not be disclosed to people or entities who did not take part in the investigation. However, if the investigation findings show that a possibly unlawful or criminal activity has taken place, or is about to take place, the employer should share such findings with the authorities.

Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

The outcome of the investigation should only remain on the employee’s record for as long as is necessary, but shall not be less than three years as this is the record-keeping requirement under the Philippine Labor Code. If circumstances deem that such a report ceases to have any purpose whatsoever, it should be struck out of the employee’s record.

This relates to the severity of the error. Data protection violations can lead to fines by the data protection authority or claims for damages. If consequences under labour law, such as dismissal, have taken place due to erroneous investigations or incorrect results, the employee concerned can assert claims under labour law or seek damages.

Furthermore, there may be consequences under criminal law. This is particularly the case if documents have been falsified in the course of the investigation. It is, therefore, crucial that employers exercise diligence and due process in internal investigations. Investigations must be conducted transparently and lawfully.

There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.

An employer may be liable for illegal termination if a dismissal is made based on wrong information collected during the investigation. Thus, the data and information gathered during the investigation stage must be correct and accurate. Further, investigations should be conducted in a manner that is fair and reasonable to the employee under investigation. Otherwise, the employee may treat the investigation as harassment on the part of the employer, which may subject the employer to a potential lawsuit.