Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Finland
Finland
- at Roschier
- at Roschier
Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While there are no specific laws that regulate a workplace investigation, there are several laws that companies should consider when conducting a workplace investigation concerning alleged employee misconduct.
One key example is the Whistleblower Protection Act (WPA). The WPA provides legal protection to a whistleblower if their allegations are raised in good faith and are in the public interest as specified under the WPA. If the WPA applies, certain obligations apply to the company, including but not limited to the following:
- the obligation to protect the confidentiality of the whistleblower’s identity;
- protecting the whistleblower if the whistleblower suffers or is likely to suffer serious harm to life or health as a result of whistleblowing and the whistleblower requests protection; and
- refraining from taking retaliatory action on the whistleblower.
Therefore, if an employee raises allegations of another employee’s misconduct, the company should review whether the allegations fall under the WPA.
There are also special laws that impose obligations on the company if there are certain types of allegations (eg, sexual harassment, workplace harassment).
In addition, when collecting and reviewing employees’ electronic data, such as emails or files stored in work laptops or company servers, which may contain personal information, the company should comply with data privacy laws discussed in more detail in questions 7 and 8.
Companies may also have internal policies (eg, whistleblower protection policies, Code of Conduct) that may apply to workplace investigations, aside from the requirements under Korean law.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Workplace investigations in Sweden are governed by several rules and regulations. Listed below are the central legislation and regulations that govern a workplace investigation related to alleged employee misconduct.
- The Swedish Discrimination Act (2008:567).
- The Swedish Work Environment Act (1977:1160), which is complemented by the Swedish Work Environment Authority’s other statutes.[1]
- The Swedish Whistleblowing Act (2021:890).
If a workplace investigation has been initiated after the receipt of a report filed through a reporting channel established under the Swedish Whistleblowing Act, that law applies provided that the report has been filed by a person who may report under the Act and provided that the subject of the report falls under the material scope of the Act. The Swedish Whistleblowing Act implements Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law and has been given a wide material scope in Sweden. The Swedish Whistleblowing Act may apply if the reported irregularity concerns breaches of certain EU laws or if the reported irregularity is of public interest.
In addition to the regulations mentioned above, certain data protection legislation may affect workplace investigations by restricting what personal data may be processed. Such data protection legislation includes the following:
- Regulation (EU) 2016/679 on the protection of natural persons concerning the processing of personal data and the free movement of such data (the GDPR);
- the Swedish Supplementary Data Protection Act (2018:218);
- the Swedish Supplementary Data Protection Regulation (2018:219);
- Regulation DIFS:2018:2 on the processing of personal data relating to criminal convictions or offences. This regulation governs the processing of personal data relating to criminal convictions or suspected criminal offences in internal workplace investigations that are not governed by the Swedish Whistleblowing Act.[2]
The above-mentioned legislation and regulations may overlap in many aspects and it is therefore important before starting an investigation, as well as during an investigation, to assess which rules and regulations apply to the situation at hand. Another aspect of this is that many issues that can arise during an investigation are not regulated by law or other legislation. If the investigation is a non-whistleblowing investigation there are limited rules on exactly how and by whom the investigation should be carried out.
A Swedish law firm that undertakes a workplace investigation also has to adhere to the Swedish Bar Association’s Code of Conduct. The Code of Conduct includes additional considerations, mainly ethical, which will not be addressed in this submission. Furthermore, this submission will not focus on investigations following an employee’s possible misappropriation of proprietary information or breach of the Swedish Trade Secrets Act (2018:558). Investigations into such irregularities are often conducted to gather evidence and these investigations include the same or similar investigative measures used in other investigations, such as interviews with employees and IT-forensic searches, but also infringement investigations carried out by the authorities or other measures by the police.
[1] Mainly Systematic Work Environment Management (AFS 2001:1), Organisational and Social Work Environment (AFS 2015:4) and Violence and Menaces in the Working Environment (AFS 1993:2)
[2] Under Section 2 item 4 of DIFS 2018:2, personal data relating to criminal convictions or suspected criminal offences may only be processed if the personal data concerns serious misconduct, such as bribery, corruption, financial fraud or serious threats to the environment, health and safety, by an individual who is in a leading position or who is considered key personnel within the company. The processing of personal data received in a report or collected during an investigation governed by the Swedish Whistleblowing Act is instead governed by the Swedish Whistleblowing Act, which complements the GDPR and the supplementing Swedish act and regulation stated in item (ii) and (iii) above.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The Labour Protection Act B.E. 2541 (1998) (LPA) is the key legislation governing the relationship between employer and employee in Thailand. The LPA set out a minimum standard for the protection of employees’ rights, as well as a mechanism for suspension from work for an investigation.
The LPA requires any employer having ten or more employees to prepare work rules in the Thai language and the work rules require an employer to prescribe a procedure for the submission of grievances that would normally include the process for investigations in the workplace. Therefore, the work rules are the main guidance and policy that govern a workplace investigation. In some cases, an employer may have a whistleblowing policy allowing whistle-blowers to submit complaints of illegal or improper activities to the employer. The whistleblowing policy will also prescribe the procedures for investigating in workplace reflecting the complaints submitted by whistle-blowers.
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Finland
Finland
- at Roschier
- at Roschier
When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There are many different ways a workplace investigation concerning employee misconduct could commence. Below are some key examples from our experience:
- an employee reports allegations concerning another employee’s misconduct through an ethics hotline or other means (eg, email, phone call);
- an outsider such as a former employee or a vendor reports allegations concerning employee misconduct to a company officer;
- an internal audit reveals potential employee misconduct;
- media reports raise allegations of employee misconduct; and
- an external investigation begins (eg, by criminal authorities or administrative agencies) concerning alleged employee misconduct.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
An investigation can be initiated in several ways. It is usually as a result of whistleblowing or a report on work environment deficiencies, or through other channels (eg, HR, the police, media coverage).
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Usually, a complainant submitting a grievance to the company would be a trigger for proceeding with a workplace investigation. The LPA does not specify when a workplace investigation should commence but it is subject to the employer’s work rules and regulations, including the whistleblowing policy, as the investigation usually commences after an employee or a whistle-blower has filed a complaint to the employer. In some cases, there might be a whistleblower and the start of the workplace investigation would be subject to the whistleblowing policy and the employer’s discretion. Also, if a questionable transaction or activity is detected, fiscal audits may be the source that triggers a voluntary workplace investigation.
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
The company may place an employee who is subject to a workplace investigation under administrative leave if this seems necessary or appropriate to ensure the integrity of the workplace investigation. While administrative leave can take different forms, one way is to issue a “standby order” to the relevant employee, instructing him or her not to come into work and prohibiting contact with other employees or customers while the workplace investigation is ongoing.
Administrative leave is not a disciplinary action, but rather an exercise of the company’s authority to take personnel management measures. This authority is generally subject to a “reasonableness” test, with the Korean courts balancing the employer’s business necessity in placing the employee on administrative leave with the inconvenience caused to the employee. In conducting the balancing test, the Korean courts have considered whether the employee receives pay during the leave and the duration of the leave, among other things. In general, if the duration of the leave is not excessive and is with full pay and benefits, the employer’s management prerogative is likely to be recognised.
The company doesn't need to obtain the employee’s consent but, in practice, a company should consider getting the employee’s acknowledgement that they have received the administrative leave notice.
In addition to Korean labour law, other factors such as the company’s rules of employment or a collective bargaining agreement (if any) may affect the company’s ability to place the employee on administrative leave, by providing for prescribed procedures for placing an employee on administrative leave or requiring the company to obtain the union’s consent if a union leader or executive is involved.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
In general, an employee in the private sector may be temporarily suspended for a short period with pay and other benefits during a workplace investigation. The room for suspension without pay is, by contrast, very limited. An applicable collective bargaining agreement may impose additional restrictions on the right to temporary suspend an employee. The suspension should be limited in time and only be in force during the investigation, but can be repeated for (multiple) additional short periods if necessary to conclude the investigation. An assessment needs to be made on a case-by-case basis as suspension in some cases may be considered unlawful. If not executed with sufficient consideration of the employee’s interests, it may be considered a constructive dismissal or a breach of the employer’s work environment obligations. If the employee is unionised, trade unions sometimes request that the employer initiates consultations as part of a decision to suspend an employee.
In the public sector, the right to suspension is limited. There are also special regulations regarding the suspension of certain employees, for example, employees who are employed as permanent judges.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
While an employee is being investigated by the employer, the LPA permits the employer to suspend that employee from work for the duration of the investigation, provided that the suspension can only be made when permitted by the work rules or an agreement related to the conditions of employment. Also, a suspension order must be made in writing and specify the offence and period of the suspension, which may not exceed seven days. Note that the employer must give a written suspension order in advance to the employee before the work suspension.
As aforementioned, the LPA only permits the employer to suspend the employee under investigation from work only for seven days. During the interim period of the suspension, the employer must pay the employee at the rate indicated in the work rules or the agreement reached between the employer and the employee, which must not be less than half of the employee's wages for a working day before his or her suspension. If the employer determines that the employee subject to investigation is not guilty following the outcome, the employer must compensate the employee for outstanding wages from the date of suspension with 15% interest per annum.
In some complicated cases, a workplace investigation does not conclude within seven days, and, in which case the employer should consult with a legal advisor.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Finland
Finland
- at Roschier
- at Roschier
The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While there are no laws that set minimum qualifications for who should conduct a workplace investigation, companies often engage external legal counsel to ensure the investigation is conducted in an unbiased and professional manner. If the company itself undertakes the workplace investigation, the company should take precautions such as ensuring that the person conducting the investigation is not biased and not involved in the alleged wrongdoing. If the person conducting the investigation cannot converse in the native language of the employee under investigation, the company may consider arranging for an interpreter when conducting interviews, to minimise the risk of misunderstanding.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the workplace investigation falls under the Swedish Whistleblowing Act, the investigation has to be conducted by independent and autonomous persons or entities designated under the Swedish Whistleblowing Act as competent to investigate reports.
If the workplace investigation is not governed by the Swedish Whistleblowing Act, there are no minimum qualification requirements. When appointing an investigator, one should consider who would be most suitable in the given situation. For example, it may in some situations be more suitable to have an external investigator to ensure impartiality.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The employer should conduct a workplace investigation on its own; however, an outside firm experienced in interviewing witnesses and assessing the credibility of evidence may also be appointed to assist with the workplace investigation.
There is no minimum qualification or criteria provided under Thai laws. It is worth noting that anyone who has been accused of misconduct or potentially has a conflict of interest should be excluded from any role in the investigation. This is to avoid a challenge from the subject employee that the investigation was not conducted fairly.
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
An employee under investigation cannot bring legal action (eg, an injunction) to stop a workplace investigation. However, there have been instances where an employee under investigation raised legal challenges concerning the investigation (eg, breach of privacy). Please see question 19. While the company would not be legally compelled to stop the investigation when legal challenges are raised, they may face penalties under the relevant laws if it is determined they have committed a violation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
No. It should, however, be noted that the employee under investigation may claim a right to rectification under article 16 of the GDPR and its right to object to processing under article 21 of the GDPR. This may give the employee under investigation an undesirable opportunity to withhold evidence and obstruct or impede the investigation. The risk of these rights being exercised is, however, considered to be low.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
There is no mechanism in place to take legal action to halt an investigation. The investigation is an internal process of the employer.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While there are no laws to compel co-workers to act as witnesses, the company may have internal policies (eg, rules of employment, code of conduct) that require employees to cooperate with company actions such as a workplace investigation. That said, it would be difficult to enforce such policies even if the employee refuses to cooperate (eg, taking disciplinary action against an employee who refuses to act as a witness).
There may be instances when the company is required to provide certain legal protection to employees acting as witnesses in an investigation. For example, if a whistleblower falling under the WPA is required to act as a witness, they would be entitled to legal protections as discussed in question 1. The company may also have internal policies that provide protection to employees acting as witnesses in an investigation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
In general, yes, employees in Sweden have a far-reaching duty of loyalty toward their employers. This includes, among other things, a duty to truthfully answer an employer’s questions and to inform the employer of events that may be of interest to the employer. An employee’s obligation to assist is, however, more limited when assistance would entail self-incrimination.
A person acting as a witness under an investigation governed by the Swedish Whistleblowing Act will be protected by confidentiality. Personal data and details that could reveal the identity of a witness may not be disclosed without authorisation.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Normally, the work rules prescribe requirements for cooperation with investigations. An employer may instruct co-workers to give statements as witnesses as this would be a fair and legitimate order of the employer, because investigations are conducted to maintain a good working environment.
Witness protection measures in a workplace can vary as no minimum standard has been set and they are generally subject to work rules and regulations. However, some legislation, which may not relate to a workplace investigation conducted by an employer, also protects the witnesses who are helping authorities investigate violations under the relevant acts. For example, the Labor Relation Act B.E. 2518 (1975) prohibits an employer from terminating an employee or conducting any action that may result in the employee being unable to work because of filing a complaint or being a witness for the authorities, or providing information on issues related to labour protection laws to the authorities.
The employer may have a policy of non-retaliation for the protection of witnesses who have given statements and evidence for a workplace investigation.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Finland
Finland
- at Roschier
- at Roschier
Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.
Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.
However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
It may be difficult for a company to search and collect physical items that personally belong to the employee.
While the company may search and gather electronic data, such as emails or files stored in work laptops or company servers, there are requirements and restrictions under the Criminal Code, the Personal Information Protection Act (PIPA), and the Act on Promotion of Information and Communications Network Utilisation and Information Protection, etc (Network Act), among other laws.
Article 316(2) of the Criminal Code states that accessing the contents of another person’s documents, pictures, special media records, etc, that are sealed or designated as secret using technical means may constitute the crime of accessing electronic records.
Under the PIPA, consent must be obtained from the information owner to collect or use personal information, or to provide such information to a third party. Consent must be separately obtained for sensitive information or unique identification information. There are strict requirements as to the format and contents of the consent forms under the PIPA.
The Network Act prohibits accessing an information and communications network without rightful authority or any intrusion that goes beyond the permitted authority for access. Although this may not be an issue if a company directly manages the email accounts at issue, if an employee’s email account is protected by a password or through other means, accessing emails from that account without obtaining the employee’s consent could constitute unlawful intrusion under the Network Act as well as under the Criminal Code as discussed above.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
To the extent the gathering of physical evidence includes the processing of personal data, please see question 1.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The basic premise is that all evidence is admissible unless it violates the law of admissibility and production of evidence, which may vary depending on the jurisdiction. In a criminal court, for example, evidence gathered in violation of the fruit of the poisonous tree doctrine would be typically inadmissible, yet in a civil court, this doctrine would not be an exclusionary rule.
The Personal Data Protection Act, BE 2562 (2019) (PDPA), which is the main data protection law in Thailand, applies when collecting, using, and disclosing pieces of evidence containing the personal data of employees. If the investigation requires sensitive information of the employee under investigation, for example, race, ethnic origin, political opinion, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, genetic data and biometric data, consent from the employee should be obtained.
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Finland
Finland
- at Roschier
- at Roschier
Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
As discussed in question 7, it may be difficult for a company to search an employee’s personal possessions. The company may search and gather electronic data stored in work laptops or company servers, subject to legal requirements and restrictions (eg, obtaining consent).
The PIPA provides specific guidance on the requirements for obtaining consent. Under the PIPA, to collect or use an individual’s personal information, the information holder must be informed of and consent to:
- the purpose of the collection or use;
- the personal information that will be collected;
- the period of retention and use; and
- his or her right to refuse to provide consent and any disadvantages that may result from such refusal.
There are separate requirements for obtaining consent to provide an individual’s personal information to a third party. Also, consent must be obtained separately for the collection, use or provision of sensitive or unique identification information.
Under limited circumstances, personal information may be collected, used, or provided to third parties without obtaining the consent of the information holder. For instance, a company may collect and use personal information without obtaining consent where obtaining the information is necessary to achieve the company’s “legitimate interests”, which clearly exceed the information holder’s right to his or her personal information, and the collection and use are carried out within reasonable bounds. The term “legitimate interests” in this context is generally understood as a concept similar to “justifiable act” under the Criminal Code. The Korean Supreme Court has held that under exceptional circumstances such as the following, the company’s collection and review of employee data may constitute a “justifiable act” under the Criminal Code:
- the company had specific and reasonable suspicion that the employee had committed a crime and the company had an urgent need to verify the facts;
- the scope of the company’s review was limited to the suspected crime through the use of keywords, etc;
- the employee had signed an agreement stating that he or she would not use work computers in an unauthorised manner and that all work products would belong to the company; and
- the company’s review uncovered materials that could be used to verify whether the employee committed the alleged crime.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
An employer can search an employee’s personal possessions (eg, handbag, pockets and locker) if the employer has a legitimate interest in a search. This could, for example, include a reasonable suspicion of theft of employer property. Furthermore, an employer may search, but not continually monitor, an employee’s computer and email provided that it is in accordance with GDPR requirements. For the processing to be lawful under the GDPR, the employer has to establish a purpose and a legal basis for the processing of personal data. Furthermore, data subjects must have received information on the legal basis for and purpose of the processing of personal data beforehand. If the data subjects have not received such information, the employer’s right to process their data is limited. However, if the employer has reasonable grounds to believe that trade secrets or similar has been copied and stolen, no such requirements would typically apply.
Investigations into an employee's possessions may, under certain circumstances, also be carried out by the Swedish authorities.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Electronic information created during employment would generally be owned by the employer and would be the employer’s assets. If an employee is given a computer or laptop to use for work, the employer has the right to log into that device and take any data that is stored therein, provided that the data does not contain sensitive information of that employee and PDPA requirements are met.
To avoid any potential issues regarding physical data such as documents on the employee’s desk, it is advisable to search those areas with the subject employee to show good faith. In practice, the employee normally agrees to search those areas with the employer, or allows the employer to search alone.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Finland
Finland
- at Roschier
- at Roschier
In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
Aside from the legal obligations imposed on the company when dealing with a whistleblower who is subject to the WPA as discussed in question 1, there are also practical considerations the company should keep in mind when dealing with a whistleblower, regardless of whether the whistleblower falls under the WPA.
For example, there have been instances where an employee who raised allegations filed a complaint with Korean authorities (such as the Anti-Corruption and Civil Rights Commission (ACRC) or the Labour Office) that the company took retaliatory action against the whistleblower. The company should carefully review the legal risks before taking action, such as personnel action or civil or criminal action, against an employee who raises allegations if that employee was also involved in the wrongdoing.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the Swedish Whistleblowing Act governs the investigation, additional considerations apply relating to who may investigate a reported irregularity (see question 4) and the duty of confidentiality and restrictions on access to and disclosure of personal data in investigations (see questions 6, 10 and 11), as well as the rights and protections of whistleblowers.
As regards the rights and protections of whistleblowers, the following can be noted. A person reporting in a reporting channel governed by the Swedish Whistleblowing Act is protected against retaliation and restrictive measures. Thus, companies are prohibited from preventing or trying to prevent a person from reporting, and retaliating against a person who reports. Furthermore, a reporting person will not be held liable for breach of confidentiality for collecting the reported information if the person had reasonable grounds to believe that it was necessary to submit the report to expose irregularities. Under the Swedish Whistleblowing Act, any person reporting irregularities in a reporting channel established under the Swedish Whistleblowing Act may also report irregularities to designated Swedish authorities.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
It is down to the employer’s discretion and subject to the whistleblowing policy (if any) to commence the investigation resulting from a complaint from a whistleblower. Whistleblowers and those who cooperate with an investigation should be protected. Normally the employer would not try to identify the whistleblowers. Also, it is best not to reveal the identity of the witness or the source of information; otherwise, they may feel uncomfortable giving information or raising their concerns next time. Any allegations of retaliation that surface during the investigation should be treated as a new report of possible misconduct that could be subject to additional investigation.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Finland
Finland
- at Roschier
- at Roschier
Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
It is general practice in Korea for a company to require interviewees to maintain confidentiality concerning a workplace investigation and instruct them that they are not permitted to discuss the matter under investigation with other employees, etc. If an employee violates this instruction, it may be possible for the company to take disciplinary action against them under the company’s rules.
Further, the company or its employees who have engaged in an investigation for sexual harassment or workplace harassment in the workplace are obliged to maintain the confidentiality of the investigation. Failure to comply with such requirements may lead to an administrative fine from the Ministry of Employment and Labour for the company or its registered representative.
There may be some exceptions to the confidentiality obligation, such as when an employee is required by government authorities to provide relevant information in a parallel investigation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the Swedish Whistleblowing Act applies, the persons or entities handling the investigation have a duty of confidentiality and may not, without permission, disclose any information that could reveal the identity of the reporting person, any person subject to the report or any other person mentioned in the report or during the investigation of the report. Access to personal data is limited to designated competent entities or persons. Investigative material including personal data may not be shared with other persons or entities during the investigation. Once the investigation has reached actionable conclusions, investigative material may be shared with other persons or entities, such as HR or the police, provided that such sharing is necessary to take action on the outcome of the investigation. Investigative material may also be shared if it is necessary for the use of reports as evidence in legal proceedings or under the law or other regulations.
If the Swedish Whistleblowing Act does not apply, there are no particular confidentiality obligations for employers. Yet, an employer needs to consider what information is suitable to share during an investigation, how this is done and to whom it is shared. An employer must also respect employees’ privacy in line with what is generally considered good practice in the labour market. This means that an employer should be careful as to what sensitive and personal information is shared during an investigation. Furthermore, the spreading of damaging information (even if true) about an employee to a wider group may be a criminal offence under the Swedish Criminal Code.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Unless the investigation is handled by a qualified professional (eg, attorney or auditor) where certain privileges apply, confidentiality obligations are generally subject to the contractual arrangement between the parties involved in the investigation. The employers need to inform any persons, including the investigators, to respect confidentiality obligations because a leak of the information gathered from the investigations could cause damage to relevant parties.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Finland
Finland
- at Roschier
- at Roschier
The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no requirement to notify an employee under investigation concerning the allegations against him or her when requesting cooperation with a workplace investigation (eg, requesting the employee’s consent to review electronic data, or requesting an interview).
However, the company may strategically consider explaining the general purpose of the investigation before requesting consent to review electronic data or when requesting an interview. This may help increase the likelihood of cooperation and also reduce the risk of the employee raising objections to the company’s findings from the investigation by saying he or she was not properly informed of the purpose of the investigation, or that the investigation was conducted in a coercive manner.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
According to article 14 of the GDPR, no information must be provided. The exemption in article 14.5(b) applies to the extent the obligation to provide such information is likely to render impossible or seriously impair the objectives of the processing of the personal data of the employee under investigation (ie, to diligently investigate the suspected irregularity).
If the Swedish Whistleblowing Act applies, information about where the personal data processed originates from may not be provided under article 14 of the GDPR, as the personal data must remain confidential subject to obligations under the Swedish Whistleblowing Act.
In addition to the above, an investigation should, to the extent possible and suitable, be characterised by the principles in ECHR (particularly articles 6 and 8). The employee under investigation should, among other things, be presented with sufficient information to safeguard his or her interests and be allowed to respond to the allegations. The investigation must also be compliant with the work environment responsibilities that the employer has concerning the involved parties (see questions 17 and 20).
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The subject employee(s) should be informed of the details of the allegations, such as the details of wrongdoing or violations, made against them. This creates a fair opportunity for them to clarify themselves and defend against such allegations properly. Also, if there is any evidence that needs clarification from the employee, it should be shown to the employee.
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Finland
Finland
- at Roschier
- at Roschier
See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
As discussed in question 1, if the whistleblower falls under the WPA, the whistleblower’s identity should be kept confidential. Even if the WPA does not apply, the company may wish to keep the identity of the whistleblower and other key witnesses confidential to the greatest extent possible.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the Swedish Whistleblowing Act applies, their identity must be kept confidential under the duty of confidentiality. If the Swedish Whistleblowing Act does not apply, their identity can to a large extent be kept confidential.
It can also be noted that a workplace investigation carried out in the public sector will often (eventually) become an official document, which means that the document can be requested by the public. There are, however, provisions on secrecy that may restrict the right to gain access to official documents. These provisions are found in the Public Access to Information and Secrecy Act (2009:400).
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
It is generally possible to keep the identity of the complainant, witnesses, or information sources confidential. There is no mandatory rule to disclose the identity of a complainant, witnesses, or sources of information. If the complainant, witnesses, or sources of information for the investigation know that their identities would not be disclosed, they will be more confident in cooperating with and supporting the investigations.
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Finland
Finland
- at Roschier
- at Roschier
Yes, however, the need for an NDA is assessed always on a case-by-case basis.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
Some companies require an employee subject to investigation to sign an NDA or other similar documents (eg, a pledge of confidentiality) agreeing not to disclose information relating to the investigation to outside parties.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
NDAs can be used for some investigations carried out in the private sector. However, under the Swedish Whistleblowing Act, a contract is void to the extent it retracts or restricts a person’s rights under the Swedish Whistleblowing Act. An NDA that restricts the right to report irregularities to authorities or the media would, therefore, typically be void.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Non-disclosure agreements can be made between an employer and employees who are involved in an investigation. This may include investigators and witnesses, apart from the employee under investigation. This minimises the risk of information being leaked, which can affect all parties related to the workplace investigation. However, an NDA is not absolute means to prevent the disclosure of confidential information, as the court has the authority to compel disclosure.
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Finland
Finland
- at Roschier
- at Roschier
The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
No law recognises the common law concept of “attorney-client privilege” in Korea. However, communication with an attorney is protected to some extent under certain laws, such as the Constitution, the Attorney Act, the Criminal Procedure Act, and the Civil Procedure Act. This protection is based on the attorney’s confidentiality obligation, which prohibits an attorney from divulging confidential matters acquired in the course of representing clients, unless otherwise prescribed by law. This confidentiality obligation generally allows an attorney to refuse to testify or comply with document production orders for information or materials the attorney obtained in the course of his or her duties that relate to the confidential information of clients.
In addition, there could be instances where materials from an investigation conducted in Korea may become subject to discovery outside of Korea. It is, therefore, important to ensure investigation materials are privileged under the relevant non-Korean laws in the jurisdictions where attorney-client privilege is recognised (eg, the US).
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Attorney-client privilege will apply to all communication and investigative material between a client and its law firm. Attorney-client privilege is, however, not without limitations. Regarding investigations into alleged employee misconduct, a law firm may have to report suspected money laundering to the authorities and under certain circumstances disclose information to the financial police.
Written material covered by attorney-client privilege generally may not be seized.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Client-attorney privilege between qualified attorneys and the client (ie, an employer) begins once information is made available to the attorney, regardless of the form it takes.
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While the company cannot prevent an employee from engaging his or her legal counsel, there is no legal obligation for a company to allow an employee to bring his or her legal counsel to an interview, for example. If the employee expresses his or her intention not to participate in the interview session without his or her legal counsel, the company may consider explaining to the employee that such refusal to participate in the interview may constitute a breach of reasonable work-related orders and may be subject to disciplinary action. However, the company should consider the possibility of the employee claiming that he or she was not given a proper opportunity to explain the allegations during the investigation because they were prevented from obtaining legal assistance.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
The employee has no right to bring legal representation. However, the outcome of an investigation may lead to employment-related consequences, so it may be appropriate (depending on the situation) to offer the employee the opportunity to bring a union representative (if the employee is unionised) or a legal representative.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Unless the work regulations provide otherwise, an employee has the right to request legal representation during an investigation. If legal representation is requested, it is an opportunity for the employer to confirm and verify that an investigation is being conducted fairly, as the employee under investigation can bring his or her lawyer to attend the investigation.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Finland
Finland
- at Roschier
- at Roschier
A works council or a trade union does not have a role in the investigation.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While a labour union does not have a legal right under Korean law to be informed or involved in the investigation, unless otherwise required under the relevant collective bargaining agreement, there have been instances where the labour union raised complaints that the company did not properly investigate an employee, who is a member of the labour union, particularly if the company took disciplinary action against that employee based on the findings of the investigation. The company should consider such a practical risk when conducting a workplace investigation.
If the investigation was conducted based on a claim filed by an employee to the Grievance Handling Committee (which is a sub-committee of a works council), the members of that committee have a right to be informed of the results of the investigation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
No, but if the employee under investigation is unionised it is appropriate to inform the union about the investigation. If the employer chooses to take action against the employee during, or after, the investigation, the trade union generally needs to be consulted before any final decisions are made.
If the Swedish Whistleblowing Act applies, the employer is not authorised to inform a works council or trade union about the investigation, as it may be in violation of the duty of confidentiality (see question 10).
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Thai labor laws do not require a workplace investigation to involve participation from trade unions or labour unions. However, it is possible for labour unions established under the Labor Relation Act BE. 2518 (1975) to submit a demand for a collective bargaining agreement (CBA) with employers to get a seat at the table. There was a case where a management union made a CBA with the employer wherein the president of the management union would be involved in any investigation of any manager, who is a union member, under investigation. In that case, the employer must comply with the CBA by informing the president and allowing the president to participate in the investigations.
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Finland
Finland
- at Roschier
- at Roschier
They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There could be some instances where an employee involved in an investigation may be entitled to support from the company. To give an example, there have been some cases where a whistleblower claimed they suffered workplace harassment or their employer took retaliatory action (eg, wrongful transfer) and they sought damages or other relief.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
The employer is responsible for the work environment and must ensure that employees are not at risk of mental (or physical) illness due to an investigation. If an employee, in connection with an investigation, requires support or if risk of ill health is otherwise anticipated, the employer is obliged to assess the situation and provide said employee with sufficient support (eg, counselling or work adjustments).
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The employees may then file a complaint with the labour inspection officer of the Labour Protection and Welfare Department to investigate the situation if they view that the conduct of the employer in the investigation violates the LPA. For example, if the employer issues a written order for suspending an employee for more than seven days. The labour inspection officer may issue an order requesting compliance, where failure to comply with such an order would result in a criminal penalty.
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Finland
Finland
- at Roschier
- at Roschier
If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
It is not uncommon for an employee under investigation to raise grievances during or after the investigation. Below are some examples of claims an employee may raise:
- that the company reviewed the employee’s electronic data without obtaining the requisite consent;
- that witnesses or the company committed defamation in violation of the Criminal Code;
- that the employee was coerced to comply with the investigation in violation of the Criminal Code;
- that the employee was disciplined without just cause; or
- that the employee was harassed by other employees for providing information during the investigation.
The actions the company should take would vary depending on the grievance raised.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
There are no formal rules or processes for handling grievances in Sweden. Depending on the nature of the grievance, such a complaint may also have to be investigated (unless the grievance is deemed to be trivial). This could, for example, be the case if the grievance concerns new or other work environment issues that the employer is obliged to investigate.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The investigator should guide the employee who has raised the grievance to properly raise their concerns through the grievance protocols or whistleblowing policy (if any). It is acceptable to preliminarily hear their concerns, but the investigation should be initiated separately and subject to the employer’s discretion.
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Finland
Finland
- at Roschier
- at Roschier
As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
The company should review whether the employee under investigation is requesting sick leave under appropriate procedures and for a legitimate reason and may consider ways to persuade the employee to cooperate with the investigation. If the employee applies for sick leave following company policy, the company would need to grant such sick leave and suspend the investigation during the sick leave.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
The employer is responsible for the employee’s work environment during the investigation. The employer must assess the situation and the impact on the employee’s health and may, depending on the situation, have to postpone certain investigative measures, such as interviewing the employee in question. The investigation may even have to be completed without the employee participating.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
If the absence is anticipated to be brief, the employer may wait until the employee's return before concluding the investigation. If the employee's absence is expected to be prolonged, the investigator may alter the time of meetings or request that the employee submits a witness statement. The key point would be that all necessary measures should be taken to give the employee a chance to participate.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Finland
Finland
- at Roschier
- at Roschier
Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no obligation to stay the workplace investigation while the parallel criminal or regulatory investigation is being conducted. In practice, companies often proceed with, or even accelerate, the workplace investigation to find out the facts and defend themselves against the parallel criminal or regulatory investigation being conducted. The company should be careful not to engage in activities that may raise suspicions as to whether the company is impeding the government investigation or concealing or destroying evidence.
While the investigation report would typically not be privileged, the company may consider explaining to the authorities that the investigation findings are not conclusive, should the police or regulator request the internal investigation report.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Handling a parallel investigation will have to be assessed on a case-by-case basis depending on the applicable rules. For instance, an investigation under the Swedish Discrimination Act is subject to certain timing requirements with which the employer must comply. In other cases, it may be more appropriate to hold off the workplace investigation while awaiting the outcome of the parallel investigation.
The police or regulator can, depending on the matter at hand, request an employer to share evidence. The police or the regulator may also, under certain circumstances, retain evidence in a search.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Employers are not required to wait until the police or regulatory investigations are finished before conducting their disciplinary investigations, but it is necessary to ensure that such internal proceedings do not compromise the integrity of an investigation or result in misrepresentation or a miscarriage of justice. The level of proof for internal disciplinary action is less than the level of proof for criminal proceedings.
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Finland
Finland
- at Roschier
- at Roschier
The employer's conclusions from the investigation.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no legal obligation for a company to disclose the outcome of an investigation to the employee who was subject to it. Having said that, if the company wishes to take disciplinary action against the employee based on the outcome of an investigation, it is required to disclose sufficient detail on the employee’s wrongdoing that is subject to disciplinary action. This information should be provided to the employee before the disciplinary action committee (DAC) hearing to provide the employee with sufficient time to present and defend his or her position during the DAC hearing.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
This depends on the outcome of the investigation and the applicable rules.
If the outcome of the investigation leads to termination, the employer will have to disclose some information regarding the reason for termination. If the employee questions the termination, the employer may have to disclose more information in a subsequent dispute. If the outcome of the investigation leads to less invasive measures, such as a warning, there are less extensive requirements to provide information.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
There is no mandatory information on the outcome of an investigation that must be disclosed to an employee. However, disclosure of the outcome should, at a minimum, include whether an employee did or did not commit a violation. In addition, an employee who has committed a violation should be informed of any disciplinary action, and the grounds for such a decision (such as a violation of the company’s work rules). This enables the employee under investigation to appeal the outcome if it is applicable under the work rules or whistleblowing policy.
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Finland
Finland
- at Roschier
- at Roschier
The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
After completing an investigation, the company may consider the following measures, among others:
- taking disciplinary action against the relevant employees;
- taking legal action (eg, criminal action, civil action) against the relevant employees; and
- taking appropriate remedial measures (eg, strengthening existing policies and establishing new policies, and conducting training).
The company may also consider making a voluntary report to the relevant authorities as discussed in question 25.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
An investigation may result in employment law measures (eg, support, training, relocation, warning, termination or dismissal). An investigation may also be inconclusive and not result in any action.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
Upon completion of the investigation, the employer can decide to take proper disciplinary action against the employee if it is found that the employee committed an offence or violated the work rules. An employer may also file a report with the police if the findings of the investigation amount to a criminal offence.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Finland
Finland
- at Roschier
- at Roschier
In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is generally no obligation to report violations to the Korean authorities, subject to limited exceptions (eg, financial institutions are required to report certain types of wrongdoing to the financial regulator; if there was a leak of an industrial technology developed through a national research and development project or a national core technology, this leak should be reported to the Ministry of Trade, Industry and Energy and the National Intelligence Service). However, even in the absence of a self-reporting obligation, the company may consider strategically deciding to make a voluntary report. For example, there have been instances where the police or prosecutors’ investigations were conducted in a more limited manner where the company filed a voluntary report and cooperated with the investigation. Also, for certain types of violations (eg, cartel activities), self-reporting to the relevant authority may entitle the company to leniency provided under the law.
In certain instances, the company may also consider reporting violations to the relevant foreign authorities, in addition to, or instead of, the Korean authorities. For example, if the company found potential violations of US law such as sanctions law or the Foreign Corrupt Practice Act, the company may want to self-report these violations to the relevant authorities such as the Office of Foreign Assets Control, or the US Department of Justice.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Findings may have to be handed over to the police or the regulator – there is no separate legal protection for material in employer investigations related to authorities. If the investigation has been carried out by a law firm, see question 14 on attorney-client privilege.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The investigation findings should be disclosed to a limited group of persons who are involved in the investigation, and for which the findings are useful. For example, an HR manager who needs to record the findings in the employee’s record, the police if the employer decides to proceed further with a criminal claim, the court if requested by that court, or if there is a court case related to the violations of the employee.
Interview records should be kept confidential and private. There is a risk of disclosure because the information in the records may be beneficial to one but damaging to others. If the interview records are leaked to others who are not involved in the investigation, it may affect the work environment in the workplace and the protection of witnesses.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Finland
Finland
- at Roschier
- at Roschier
Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no legal requirement on how long the records of the investigation (eg disciplinary action) should be maintained by the company. Many companies maintain a record of disciplinary action throughout the employment period.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Under the GDPR personal data may not, according to the general principle on storage limitation, be retained for longer than is necessary for the purposes for which the personal data are processed. The GDPR does not stipulate a generally applicable storage limitation period. Such a regulation is, on the other hand, included in the Swedish Whistleblowing Act. If the Swedish Whistleblowing Act applies, the outcome of the investigation and all personal data should be retained for as long as necessary, but not for longer than two years after the investigation has been closed.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
There is no period required by law for keeping the outcome of the investigation on the employee’s record. However, if termination of employment is the outcome of the investigation, an employer should keep details of the investigation for at least 10 years, in line with the prescribed period for an employee to file an unfair dismissal claim against an employer. An employer may use the details of an investigation to defend such a claim. For other disciplinary action, the retention of investigation details on the employee’s record is at the employer’s discretion.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Finland
Finland
- at Roschier
- at Roschier
There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
As mentioned in question 19, employees may potentially raise claims, such as that the company violated data privacy laws in reviewing employee data, committed defamation, coerced the employee to comply with the investigation, and that witnesses or the company committed defamation in violation of the Criminal Code or disciplined the employee without just cause.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Errors resulting in terminations can be unlawful and, if they lead to employees terminating their employment as a result of the employer’s missteps, could be seen as constructive dismissal. Constructive dismissal is generally equivalent to an unlawful dismissal. Unlawful terminations generally result in an obligation to pay financial and general damages to the affected employees.
Failure to fulfil the obligations under the Swedish Discrimination Act may lead to an obligation to pay financial and general damages.
If an employer does not fulfil its obligations according to work environment legislation, there is a risk that the Swedish Work Environment Authority will issue injunctions or prohibitions against the employer. If an employer omits to meet its work environment related obligations, and that in turn results in a work related accident, e.g. self-harm in connection with an internal investigation, it may also, in a worst case scenario, lead to criminal liability.
The Swedish Work Environment Authority is also responsible for monitoring compliance with the provisions of the Swedish Whistleblowing Act. The Swedish Work Environment Authority may, if necessary to ensure compliance with the Swedish Whistleblowing Act, order an operator to comply with the obligations and requirements of the Swedish Whistleblowing Act. Employers violating the Swedish Whistleblowing Act may also be liable to pay damages to the affected employees.
If personal data is processed in a way that violates the GDPR, the authorised supervisory authority may issue warnings or reprimands to the data controller, order the controller to comply with the GDPR, impose a ban on processing, or impose an administrative fine on the controller. Companies violating the GDPR may also be liable to pay damages to data subjects.
Thailand
Thailand
- at Chandler MHM
- at Chandler MHM
The Thai Supreme Court has ruled that the termination of an employee was unfair due to an investigation being conducted contrary to requirements in the company’s work rules. As such, employers may be liable for damages to employees if there are errors made during investigations, or where investigations are not conducted properly.
The Supreme Court has also ruled that in cases of unfair termination, the underlying cause of the termination should be the determining factor, rather than other issues, including investigative procedures.