Workplace Investigations

Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.

Workplace investigations in Sweden are governed by several rules and regulations. Listed below are the central legislation and regulations that govern a workplace investigation related to alleged employee misconduct.

• The Swedish Discrimination Act (2008:567).
• The Swedish Work Environment Act (1977:1160), which is complemented by the Swedish Work Environment Authority’s other statutes.[1]
• The Swedish Whistleblowing Act (2021:890).

If a workplace investigation has been initiated after the receipt of a report filed through a reporting channel established under the Swedish Whistleblowing Act, that law applies provided that the report has been filed by a person who may report under the Act and provided that the subject of the report falls under the material scope of the Act. The Swedish Whistleblowing Act implements Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law and has been given a wide material scope in Sweden. The Swedish Whistleblowing Act may apply if the reported irregularity concerns breaches of certain EU laws or if the reported irregularity is of public interest.

In addition to the regulations mentioned above, certain data protection legislation may affect workplace investigations by restricting what personal data may be processed. Such data protection legislation includes the following:

• Regulation (EU) 2016/679 on the protection of natural persons concerning the processing of personal data and the free movement of such data (the GDPR);
• the Swedish Supplementary Data Protection Act (2018:218);
• the Swedish Supplementary Data Protection Regulation (2018:219);

• Regulation DIFS:2018:2 on the processing of personal data relating to criminal convictions or offences. This regulation governs the processing of personal data relating to criminal convictions or suspected criminal offences in internal workplace investigations that are not governed by the Swedish Whistleblowing Act.[2]

The above-mentioned legislation and regulations may overlap in many aspects and it is therefore important before starting an investigation, as well as during an investigation, to assess which rules and regulations apply to the situation at hand. Another aspect of this is that many issues that can arise during an investigation are not regulated by law or other legislation. If the investigation is a non-whistleblowing investigation there are limited rules on exactly how and by whom the investigation should be carried out.

A Swedish law firm that undertakes a workplace investigation also has to adhere to the Swedish Bar Association’s Code of Conduct. The Code of Conduct includes additional considerations, mainly ethical, which will not be addressed in this submission. Furthermore, this submission will not focus on investigations following an employee’s possible misappropriation of proprietary information or breach of the Swedish Trade Secrets Act (2018:558). Investigations into such irregularities are often conducted to gather evidence and these investigations include the same or similar investigative measures used in other investigations, such as interviews with employees and IT-forensic searches, but also infringement investigations carried out by the authorities or other measures by the police.

There are no specific legislative requirements for workplace investigations in Vietnam. However, Labor Code No. 45/2019/QH14 dated 20 November 2019 (2019 Labor Code), which is currently the primary legislation governing employment relationships, requires employers that have more than ten employees to provide a mechanism and procedure for handling sexual harassment cases in the workplace. Other than that, an employer may incorporate policies and guidelines on how to deal with workplace investigations into its handbook.

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

An investigation can be initiated in several ways. It is usually as a result of whistleblowing or a report on work environment deficiencies, or through other channels (eg, HR, the police, media coverage).

The circumstances in which an employer commences a workplace investigation may vary, either through a whistleblower, through an internal system, email or phone call; complaints from suppliers, contractors, or customers; or accounts from observations and hearsay. Sometimes, it comes from anonymous complaints. However, it is common for an employer to verify whether the report or complaint is substantiated, partially substantiated, or unsubstantiated, which is sufficient to initiate and commence a workplace investigation.

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

In general, an employee in the private sector may be temporarily suspended for a short period with pay and other benefits during a workplace investigation. The room for suspension without pay is, by contrast, very limited. An applicable collective bargaining agreement may impose additional restrictions on the right to temporary suspend an employee. The suspension should be limited in time and only be in force during the investigation, but can be repeated for (multiple) additional short periods if necessary to conclude the investigation. An assessment needs to be made on a case-by-case basis as suspension in some cases may be considered unlawful. If not executed with sufficient consideration of the employee’s interests, it may be considered a constructive dismissal or a breach of the employer’s work environment obligations. If the employee is unionised, trade unions sometimes request that the employer initiates consultations as part of a decision to suspend an employee.

In the public sector, the right to suspension is limited. There are also special regulations regarding the suspension of certain employees, for example, employees who are employed as permanent judges.

Article 128 of the 2019 Labor Code explicitly states that an employer has the right to temporarily suspend an employee who is being investigated for committing an alleged act of misconduct in breach of the labour rules, if the following conditions are met:

• the misconduct committed is complex in nature, and any further work carried out by the employee may jeopardise the ongoing investigation. The law does not clearly define “complex nature”; it may be open to various interpretations by the employer. In practice and from our experience, allegations of sexual harassment may be considered complex misconduct and, therefore, can be a ground for suspension;
• the employer has consulted with (and effectively obtained the approval of) the grassroots-level representative organisation of the employee. No formal process is stipulated under the law for such consultation with this organisation. From our experience, the consultation can be in the form of a meeting between the management of the employer and the executive committee of the organisation. However, the organisation should require the employee to acknowledge their consent in writing by signing the meeting minutes;
• the period of suspension cannot exceed 15 days or 90 days in “special circumstances”. The law does not define what falls under “special circumstances”. In our view, this will be subject to the interpretation and discretion of the employer after consulting with the grassroots-level representative organisation of the employee; and
• the employee must be paid 50% of his or her wage that would be due during the period of the temporary suspension in advance. When the temporary suspension ends, if no disciplinary measure is imposed on the employee, the employer must pay the full wage for the period of the suspension by paying the remaining 50%.

The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation

If the workplace investigation falls under the Swedish Whistleblowing Act, the investigation has to be conducted by independent and autonomous persons or entities designated under the Swedish Whistleblowing Act as competent to investigate reports.

If the workplace investigation is not governed by the Swedish Whistleblowing Act, there are no minimum qualification requirements. When appointing an investigator, one should consider who would be most suitable in the given situation. For example, it may in some situations be more suitable to have an external investigator to ensure impartiality.

There are no statutory minimum qualifications or criteria for someone to conduct a workplace investigation. The employer can simply delegate the investigation task to anyone. However, it is good practice for qualified persons with proper training in workplace investigations to conduct the investigation as these involve intricate issues. It is also important that investigators are fair, unbiased, and impartial. In addition, they should not be related to any parties involved in the investigation.

In complex cases or cases involving a senior or high-ranking employee, the employer should appoint a person with a higher authority or rank in the company to lead and oversee the conduct of the investigation. This also applies in instances where it is foreseeable that the investigation may lead to disciplinary action, summary dismissal of the employee, or a report to an authority.

There are instances when engaging with external parties or professional advisors may be necessary. This is especially the case if the conduct under investigation is serious or widespread, which may lead to regulatory consequences if the employer does not have the expertise to handle the investigation.

The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.

No. It should, however, be noted that the employee under investigation may claim a right to rectification under article 16 of the GDPR and its right to object to processing under article 21 of the GDPR. This may give the employee under investigation an undesirable opportunity to withhold evidence and obstruct or impede the investigation. The risk of these rights being exercised is, however, considered to be low.

The employee can only bring legal action to stop the investigation if he or she claims that his or her rights have been clearly and blatantly violated during the investigation. However, the employee bears a heavy legal burden of proof to substantiate his or her claims. Based on our experience, most of the time, it is very difficult for the employee to prove this and successfully stop the investigation.

There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing. 

In general, yes, employees in Sweden have a far-reaching duty of loyalty toward their employers. This includes, among other things, a duty to truthfully answer an employer’s questions and to inform the employer of events that may be of interest to the employer. An employee’s obligation to assist is, however, more limited when assistance would entail self-incrimination.

A person acting as a witness under an investigation governed by the Swedish Whistleblowing Act will be protected by confidentiality. Personal data and details that could reveal the identity of a witness may not be disclosed without authorisation.

There are no provisions in Vietnamese law that impose any statutory or legal obligation on an employee to act as a witness in an investigation. Hence, an employer does not have the power to compel its employees to act as witnesses in an investigation. However, a request for an employee to provide evidence or give details of an event that he or she knows of may reasonably be deemed to be a lawful and reasonable directive from an employer. Consequently, an employee’s refusal to act as a witness may be tantamount to an act of insubordination, which may lead to disciplinary action by the employer. In any circumstances, if an employee refuses to attend an interview or is generally not cooperating with an investigation, the reasons for this will need to be considered carefully by the employer.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

To the extent the gathering of physical evidence includes the processing of personal data, please see question 1.

Decree No. 13/2023/ND-CP on personal data protection is the main data protection regulation in Vietnam. It regulates the processing of personal data, including the collection or gathering of data. If the physical evidence contains personal data of an individual, the gathering of physical evidence must comply with this decree.

Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).

An employer can search an employee’s personal possessions (eg, handbag, pockets and locker) if the employer has a legitimate interest in a search. This could, for example, include a reasonable suspicion of theft of employer property. Furthermore, an employer may search, but not continually monitor, an employee’s computer and email provided that it is in accordance with GDPR requirements. For the processing to be lawful under the GDPR, the employer has to establish a purpose and a legal basis for the processing of personal data. Furthermore, data subjects must have received information on the legal basis for and purpose of the processing of personal data beforehand. If the data subjects have not received such information, the employer’s right to process their data is limited. However, if the employer has reasonable grounds to believe that trade secrets or similar has been copied and stolen, no such requirements would typically apply.

Investigations into an employee's possessions may, under certain circumstances, also be carried out by the Swedish authorities.

As part of an investigation, an employer may search the objects or files that are part of the company’s property (eg, company or employers’ laptops or phones for business purposes and emails or messages stored on the company’s servers) without prior notice and without the need of the consent of the employee. However, the employer has no right to search an employee’s personal possessions without consent.

To further avoid arguments or conflicts as to the right of ownership of a particular object or property, employers may specify in their internal policies, labour contracts, and handover documents what is to be regarded as the company’s assets and subject to a search in a workplace investigation.

In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).

If the Swedish Whistleblowing Act governs the investigation, additional considerations apply relating to who may investigate a reported irregularity (see question 4) and the duty of confidentiality and restrictions on access to and disclosure of personal data in investigations (see questions 6, 10 and 11), as well as the rights and protections of whistleblowers.

As regards the rights and protections of whistleblowers, the following can be noted. A person reporting in a reporting channel governed by the Swedish Whistleblowing Act is protected against retaliation and restrictive measures. Thus, companies are prohibited from preventing or trying to prevent a person from reporting, and retaliating against a person who reports. Furthermore, a reporting person will not be held liable for breach of confidentiality for collecting the reported information if the person had reasonable grounds to believe that it was necessary to submit the report to expose irregularities. Under the Swedish Whistleblowing Act, any person reporting irregularities in a reporting channel established under the Swedish Whistleblowing Act may also report irregularities to designated Swedish authorities.

It is up to the employer to determine whether or not to open an investigation after a complaint from a whistleblower. It is very important that the identity of the whistleblower is protected and that the employer also should not reveal the identity of the witness or the source of information, as the sources and witnesses may fear retaliation and feel uncomfortable or hesitant in giving information or raising concerns again.

Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).

If the Swedish Whistleblowing Act applies, the persons or entities handling the investigation have a duty of confidentiality and may not, without permission, disclose any information that could reveal the identity of the reporting person, any person subject to the report or any other person mentioned in the report or during the investigation of the report. Access to personal data is limited to designated competent entities or persons. Investigative material including personal data may not be shared with other persons or entities during the investigation. Once the investigation has reached actionable conclusions, investigative material may be shared with other persons or entities, such as HR or the police, provided that such sharing is necessary to take action on the outcome of the investigation. Investigative material may also be shared if it is necessary for the use of reports as evidence in legal proceedings or under the law or other regulations.

If the Swedish Whistleblowing Act does not apply, there are no particular confidentiality obligations for employers. Yet, an employer needs to consider what information is suitable to share during an investigation, how this is done and to whom it is shared. An employer must also respect employees’ privacy in line with what is generally considered good practice in the labour market. This means that an employer should be careful as to what sensitive and personal information is shared during an investigation. Furthermore, the spreading of damaging information (even if true) about an employee to a wider group may be a criminal offence under the Swedish Criminal Code.

Workplace investigations should be conducted in a strictly confidential manner to preserve the integrity and professionalism of the investigation and to protect the identity of the employee under investigation. This means that all information gathered, received, and shared during the investigation (ie, the subject employee and any material witnesses) should only be disclosed on a need-to-know basis.

The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.

According to article 14 of the GDPR, no information must be provided. The exemption in article 14.5(b) applies to the extent the obligation to provide such information is likely to render impossible or seriously impair the objectives of the processing of the personal data of the employee under investigation (ie, to diligently investigate the suspected irregularity).

If the Swedish Whistleblowing Act applies, information about where the personal data processed originates from may not be provided under article 14 of the GDPR, as the personal data must remain confidential subject to obligations under the Swedish Whistleblowing Act.

In addition to the above, an investigation should, to the extent possible and suitable, be characterised by the principles in ECHR (particularly articles 6 and 8). The employee under investigation should, among other things, be presented with sufficient information to safeguard his or her interests and be allowed to respond to the allegations. The investigation must also be compliant with the work environment responsibilities that the employer has concerning the involved parties (see questions 17 and 20).

There is no legal requirement as to what particular information should be stated in the allegations; however, such information must be provided to the employee under investigation. The information provided by the employer to the employee must be sufficiently clear and specific so that the latter understands the case or alleged issues against him or her and can respond to it.

See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.

If the Swedish Whistleblowing Act applies, their identity must be kept confidential under the duty of confidentiality. If the Swedish Whistleblowing Act does not apply, their identity can to a large extent be kept confidential.

It can also be noted that a workplace investigation carried out in the public sector will often (eventually) become an official document, which means that the document can be requested by the public. There are, however, provisions on secrecy that may restrict the right to gain access to official documents. These provisions are found in the Public Access to Information and Secrecy Act (2009:400).

The identity of the complainant and witnesses must be kept confidential and cannot be disclosed to anyone, unless both the complainant and witnesses consent to its disclosure or if the employer is asked to disclose this information by the competent authorities under Vietnamese law.

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

NDAs can be used for some investigations carried out in the private sector. However, under the Swedish Whistleblowing Act, a contract is void to the extent it retracts or restricts a person’s rights under the Swedish Whistleblowing Act. An NDA that restricts the right to report irregularities to authorities or the media would, therefore, typically be void.

Generally, NDAs can be used to keep the facts and substance of a workplace investigation confidential. There are no express prohibitions against such NDAs. However, there are cases set out under Decree No. 13/2023/ND-CP on personal data protection where personal data is allowed or required to be disclosed without the data subject’s consent, in instances that are necessary to serve the public interest or to protect the life and health of the data subject.

The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.

Attorney-client privilege will apply to all communication and investigative material between a client and its law firm. Attorney-client privilege is, however, not without limitations. Regarding investigations into alleged employee misconduct, a law firm may have to report suspected money laundering to the authorities and under certain circumstances disclose information to the financial police.

Written material covered by attorney-client privilege generally may not be seized.

Generally, privilege does not apply to internal workplace investigation materials as the investigation does not constitute a relationship between a lawyer and his or her client, and even less so a judicial investigation. However, if a lawyer is appointed to represent a specific party in an investigation, for example, as an investigator, the privilege may apply to materials exchanged between the lawyer and that client.

The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.

The employee has no right to bring legal representation. However, the outcome of an investigation may lead to employment-related consequences, so it may be appropriate (depending on the situation) to offer the employee the opportunity to bring a union representative (if the employee is unionised) or a legal representative.

Yes, the employee under investigation has a right to be accompanied or have legal representation during the investigation. Before the start of investigation proceedings, the employee under investigation must be informed about his or her right to have someone present with him or have a legal representative during the investigation.

A works council or a trade union does not have a role in the investigation.

No, but if the employee under investigation is unionised it is appropriate to inform the union about the investigation. If the employer chooses to take action against the employee during, or after, the investigation, the trade union generally needs to be consulted before any final decisions are made.

If the Swedish Whistleblowing Act applies, the employer is not authorised to inform a works council or trade union about the investigation, as it may be in violation of the duty of confidentiality (see question 10).

In Vietnam, the “trade union” is the only organisation solely dedicated to protecting employees’ legitimate rights and interests. Under the 2012 Labor Code, the term referring to trade unions was changed to “grassroots-level representative organisation of employees”. But the essence of this organisation remained and was later defined as “the executive committee of a grassroots trade union or the executive committee of the immediate upper-level trade union in a non-unionised company”. As such, it could be said that it was old wine in a new bottle.

As required under article 70.1 of Decree No. 145/2020/ND-CP, which serves as a guide to the Labor Code on working conditions and labour relations, when suspecting that an employee has committed a violation of labour discipline, the employer has to make a record of the violation at the time and notify the grassroots-level representative organisation of employees of which the employee is a member, or the legal representative of the employee if they are under 15 years of age. If the employer detects a violation after it has occurred, it will collect evidence to prove it. In this instance, the employer has no obligation to inform or involve the trade union or grassroots-level representative organisation of employees during the workplace investigation stage.

Also, an employee who is a member of the trade union or organisation has the right to seek assistance from this organisation and may authorise the trade union’s representative to represent and get involved in the workplace investigation.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

The employer is responsible for the work environment and must ensure that employees are not at risk of mental (or physical) illness due to an investigation. If an employee, in connection with an investigation, requires support or if risk of ill health is otherwise anticipated, the employer is obliged to assess the situation and provide said employee with sufficient support (eg, counselling or work adjustments).

It is quite stressful for an employee, whether as the victim, the subject of an investigation, or a witness, to be involved in a workplace investigation. Thus, transparency in the investigation process would alleviate the employees’ stress and anxiety. This could be achieved by providing involved and concerned employees with the timeline for different stages of the investigation and regular updates. Further, the employer can make necessary work arrangements to minimise potential interaction with other involved employees so that it would not further aggravate the conflict or situation, (eg, days off or temporary suspension of work).

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

According to the GDPR, personal data can only be processed for specified, explicit and legitimate purposes and may not be further processed in a manner that is incompatible with those purposes. This imposes restrictions on the use of material from previous investigations in new investigations when the material was collected for other purposes. It is, therefore, necessary to ensure whether the new matter relates to the investigation and falls within the purpose of the investigation. If the new matter is unrelated to the investigation and does not fall within the purpose of the investigation, the identified information may not be processed under the GDPR.

Except for what is stated above, no regulation limits how the employer can use information regarding unrelated matters. Unrelated matters may be a myriad of different things, and could in some instances just be discarded, while in other situations the information may invoke a responsibility to act for the employer (eg, if the unrelated matters concern work environment issues or other severe misconduct by an employee who is not the target of the investigation). Furthermore, the employer may always use any revealed information (unrelated or not) as evidence in a court of law, since the principle of free examination of evidence applies.

If unrelated matters are revealed during the investigation, the employer should consider whether an investigation is needed. If necessary, the employer should decide whether it is appropriate to incorporate the new matters into the scope of the existing investigation by expanding the terms of reference. However, such action may not be appropriate if different individuals are involved or the inclusion of a new unrelated matter would unduly complicate or delay the progress of the existing investigation. If that is the case, the employer should investigate that matter separately.

Also, as detailed in article 19 of the 2015 Criminal Code of Vietnam, there is a legal duty on any person who is aware that a certain violation is being committed or has been committed to report it to the police unless otherwise provided for under law. Failure to comply with this requirement may lead to criminal liability for the offender.

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

There are no formal rules or processes for handling grievances in Sweden. Depending on the nature of the grievance, such a complaint may also have to be investigated (unless the grievance is deemed to be trivial). This could, for example, be the case if the grievance concerns new or other work environment issues that the employer is obliged to investigate.

The employer should require the employee to raise any grievance under the company’s existing policy on grievance reporting, disciplinary, and investigation processes, so that it can determine if the grievance is relevant to the current investigation. The grievance can be investigated together with the ongoing investigation. It can also be dealt with separately and independently from the existing investigation.

As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.

The employer is responsible for the employee’s work environment during the investigation. The employer must assess the situation and the impact on the employee’s health and may, depending on the situation, have to postpone certain investigative measures, such as interviewing the employee in question. The investigation may even have to be completed without the employee participating.

Workplace investigations do not require the presence or active cooperation of the employee under investigation. Thus, the investigation may start or continue in the employee’s absence due to illness.

If the employee’s presence is necessary for the conclusion of the investigation, the employer may invite the employee to provide information either by submitting his or her answers to a written questionnaire or attending a virtual meeting. However, the employee may not accede to the employer’s requests and proposals, especially if the employee has an illness. As a result, the employer may not be able to conclude the investigation due to the absence of the involved employee.

Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.

Handling a parallel investigation will have to be assessed on a case-by-case basis depending on the applicable rules. For instance, an investigation under the Swedish Discrimination Act is subject to certain timing requirements with which the employer must comply. In other cases, it may be more appropriate to hold off the workplace investigation while awaiting the outcome of the parallel investigation.

The police or regulator can, depending on the matter at hand, request an employer to share evidence. The police or the regulator may also, under certain circumstances, retain evidence in a search.

There are no issues with an internal workplace investigation being conducted in parallel to any criminal or regulatory investigation. In such a case, the employer should handle the workplace investigation meticulously, pay attention to all the facts and evidence, inform the authorities of the ongoing internal workplace investigation, and ensure that it complies with all applicable legal requirements or directions made by the relevant authorities concurrently. Also, the employer should not take any steps that interfere with, hinder, or obstruct the parallel investigations.

The employer's conclusions from the investigation.

This depends on the outcome of the investigation and the applicable rules.

If the outcome of the investigation leads to termination, the employer will have to disclose some information regarding the reason for termination. If the employee questions the termination, the employer may have to disclose more information in a subsequent dispute. If the outcome of the investigation leads to less invasive measures, such as a warning, there are less extensive requirements to provide information.

If the Swedish Whistleblowing Act applies, the duty of confidentiality and the restrictions on access to and disclosure of personal data must be considered (see question 10). If the investigation is based on the rules in the Swedish Discrimination Act, there are also feedback requirements concerning the involved parties.

It is recommended that the employer informs the employee under investigation of the outcome and provides information on a need-to-know basis. Consequently, the employer has the discretion to proceed with any labour disciplinary procedure or actions against the employee based on the outcome of the investigation.

The employee under investigation may only be informed of the conclusions.

There is no obligation to share the investigation report, neither in full nor key findings, with the involved parties. An assessment needs to be made in each case of what is appropriate to share and with whom.

When sharing an investigation report, certain data protection considerations must be made. A purpose and legal basis for the sharing must be established and, in principle, documented.

If the Swedish Whistleblowing Act applies, the duty of confidentiality and the restrictions on access to and disclosure of personal data must be considered (see question 10).

There is no obligation to share the investigation report or the findings unless the employer and employee agree to do so.

However, under Decree No. 13/2023/ND-CP on personal data protection, the contents of the investigation report or findings related to the employee are likely to constitute the personal data of the employee under investigation. In that case, the employee may have a right under the said Decree to obtain copies of such documents by making a statutory data access request after the workplace investigation is completed. Where the employer is required to provide such documents to the employee under Decree No. 13/2023/ND-CP but the requested documents also contain the personal data of any other third parties (such as the employee’s co-workers who participated in the interview during the investigation), the employer should first redact or erase such data before providing the requested documents, unless the relevant third parties have consented to the disclosure of their personal data.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

An investigation may result in employment law measures (eg, support, training, relocation, warning, termination or dismissal). An investigation may also be inconclusive and not result in any action.

After the completion of the investigation, the employer may:

• take the appropriate labour disciplinary action against the employee;
• proceed with legal action against the employee (eg, reporting the criminal violations of the employee to the proper authority or filing a civil lawsuit against the employee before the court); or
• adopting preventive or remedial measures on how to avoid these violations and to mitigate the damage to the company (eg, reviewing internal policies and conducting employee training).

In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.

Findings may have to be handed over to the police or the regulator – there is no separate legal protection for material in employer investigations related to authorities. If the investigation has been carried out by a law firm, see question 14 on attorney-client privilege.

Generally, the employer does not have to actively disclose the findings of a workplace investigation to any party.

Notwithstanding this, the employer should be aware of certain statutory disclosure requirements that may apply as a result of the matters revealed during the workplace investigation, if the said investigation reveals any knowledge or suspicion of an indictable offence that has been committed.

Interview records should be kept private unless disclosure is required by the authorities.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

Under the GDPR personal data may not, according to the general principle on storage limitation, be retained for longer than is necessary for the purposes for which the personal data are processed. The GDPR does not stipulate a generally applicable storage limitation period. Such a regulation is, on the other hand, included in the Swedish Whistleblowing Act. If the Swedish Whistleblowing Act applies, the outcome of the investigation and all personal data should be retained for as long as necessary, but not for longer than two years after the investigation has been closed.

Vietnamese law does not provide for a period during which the outcome of the investigation should remain on the employee’s records and files. However, this will depend on the employer’s record-retention policies, which must comply with applicable data protection laws.

There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.

Errors resulting in terminations can be unlawful and, if they lead to employees terminating their employment as a result of the employer’s missteps, could be seen as constructive dismissal. Constructive dismissal is generally equivalent to an unlawful dismissal. Unlawful terminations generally result in an obligation to pay financial and general damages to the affected employees.

Failure to fulfil the obligations under the Swedish Discrimination Act may lead to an obligation to pay financial and general damages.

If an employer does not fulfil its obligations according to work environment legislation, there is a risk that the Swedish Work Environment Authority will issue injunctions or prohibitions against the employer. If an employer omits to meet its work environment related obligations, and that in turn results in a work related accident, e.g. self-harm in connection with an internal investigation, it may also, in a worst case scenario, lead to criminal liability.

The Swedish Work Environment Authority is also responsible for monitoring compliance with the provisions of the Swedish Whistleblowing Act. The Swedish Work Environment Authority may, if necessary to ensure compliance with the Swedish Whistleblowing Act, order an operator to comply with the obligations and requirements of the Swedish Whistleblowing Act. Employers violating the Swedish Whistleblowing Act may also be liable to pay damages to the affected employees.

If personal data is processed in a way that violates the GDPR, the authorised supervisory authority may issue warnings or reprimands to the data controller, order the controller to comply with the GDPR, impose a ban on processing, or impose an administrative fine on the controller. Companies violating the GDPR may also be liable to pay damages to data subjects.

The employer may be exposed to legal action for its failure to conduct the investigation properly, such as a lawsuit for labour disputes or sanctions for its failure to protect personal data as required under personal data protection regulations. For instance, if there were errors during the investigation which led to erroneous results for the investigation and consequently, the employee was dismissed, the employee may file a claim for illegal dismissal against the employer.