Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Finland
Finland
- at Roschier
- at Roschier
Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There is no legislation on this area in Poland. However, employers implement internal policies that provide for workplace investigation rules to fulfil certain legal obligations, including those arising directly from labour law.
Based on the currently binding provisions of labour law, an employer must counteract unwanted behaviour in the workplace (eg, bullying, discrimination and unequal treatment). To fulfil this obligation, employers implement internal policies that provide a framework for reporting misconduct and conducting internal investigations. They may freely design the rules of such investigations, within the constraints of their policy. Therefore, it is recommended they create the policy based on the following:
- it should be possible to effectively report the misconduct;
- there should be more than one way to report misconduct;
- anonymous reporting should be allowed;
- an investigation committee should be appointed and be objective;
- rules on excluding persons with a conflict of interest from conducting the investigation should be provided; and
- the report from the investigation should be prepared and signed by all persons participating in the process.
However, work on a bill on whistleblower protections is in progress (the Draft Law). The Draft Law will not determine the rules of workplace investigations but it will force employers to implement a whistleblowing procedure and follow-up on recommendations in the case of a report, including initiating an internal investigation where appropriate. Whether an internal investigation is initiated depends on the assessment of a reported irregularity by the employer.
In addition, employers (especially those that are part of an international group) often already implement internal policies on whistleblowing management and internal investigations. Employers often base their policies on guidelines issued by relevant (usually international) organisations.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While there are no specific laws that regulate a workplace investigation, there are several laws that companies should consider when conducting a workplace investigation concerning alleged employee misconduct.
One key example is the Whistleblower Protection Act (WPA). The WPA provides legal protection to a whistleblower if their allegations are raised in good faith and are in the public interest as specified under the WPA. If the WPA applies, certain obligations apply to the company, including but not limited to the following:
- the obligation to protect the confidentiality of the whistleblower’s identity;
- protecting the whistleblower if the whistleblower suffers or is likely to suffer serious harm to life or health as a result of whistleblowing and the whistleblower requests protection; and
- refraining from taking retaliatory action on the whistleblower.
Therefore, if an employee raises allegations of another employee’s misconduct, the company should review whether the allegations fall under the WPA.
There are also special laws that impose obligations on the company if there are certain types of allegations (eg, sexual harassment, workplace harassment).
In addition, when collecting and reviewing employees’ electronic data, such as emails or files stored in work laptops or company servers, which may contain personal information, the company should comply with data privacy laws discussed in more detail in questions 7 and 8.
Companies may also have internal policies (eg, whistleblower protection policies, Code of Conduct) that may apply to workplace investigations, aside from the requirements under Korean law.
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Finland
Finland
- at Roschier
- at Roschier
When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There are no legal requirements in this respect – it depends on the internal policies or practices at a given working establishment. Based on our experience – an internal investigation usually commences with a preliminary assessment of a reported irregularity. If the preliminary assessment leads to a conclusion that a reported situation may be an irregularity, an investigation is launched by appointing a commission or team that conducts the investigation or selecting an investigator. Then, a plan of investigation is established. Depending on the circumstances, the investigation plan may involve a collection of documents or files, their analysis, and interviews with a victim, witnesses or a subject (although the procedure depends on the type of case, internal rules and practice). At the end of the process, the report is prepared by the commission or team with facts established during the process, recommendations, and other suggestions as to the investigated issue.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There are many different ways a workplace investigation concerning employee misconduct could commence. Below are some key examples from our experience:
- an employee reports allegations concerning another employee’s misconduct through an ethics hotline or other means (eg, email, phone call);
- an outsider such as a former employee or a vendor reports allegations concerning employee misconduct to a company officer;
- an internal audit reveals potential employee misconduct;
- media reports raise allegations of employee misconduct; and
- an external investigation begins (eg, by criminal authorities or administrative agencies) concerning alleged employee misconduct.
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Polish law does not provide for the suspension of an employee. Instead, an employer may agree with an employee that he or she will be released from the obligation to perform work during a relevant period of investigation (with the right to remuneration). The employer may not do this unilaterally, unless the employee is in a notice period. As an alternative, which is more common in practice, the employer may force the employee to use outstanding holiday leave (subject to limitations provided by law) or the parties may mutually agree on the use of holiday leave or unpaid leave (if the employee has already used his or her holiday entitlement in full).
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
The company may place an employee who is subject to a workplace investigation under administrative leave if this seems necessary or appropriate to ensure the integrity of the workplace investigation. While administrative leave can take different forms, one way is to issue a “standby order” to the relevant employee, instructing him or her not to come into work and prohibiting contact with other employees or customers while the workplace investigation is ongoing.
Administrative leave is not a disciplinary action, but rather an exercise of the company’s authority to take personnel management measures. This authority is generally subject to a “reasonableness” test, with the Korean courts balancing the employer’s business necessity in placing the employee on administrative leave with the inconvenience caused to the employee. In conducting the balancing test, the Korean courts have considered whether the employee receives pay during the leave and the duration of the leave, among other things. In general, if the duration of the leave is not excessive and is with full pay and benefits, the employer’s management prerogative is likely to be recognised.
The company doesn't need to obtain the employee’s consent but, in practice, a company should consider getting the employee’s acknowledgement that they have received the administrative leave notice.
In addition to Korean labour law, other factors such as the company’s rules of employment or a collective bargaining agreement (if any) may affect the company’s ability to place the employee on administrative leave, by providing for prescribed procedures for placing an employee on administrative leave or requiring the company to obtain the union’s consent if a union leader or executive is involved.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Finland
Finland
- at Roschier
- at Roschier
The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There are no legal requirements in this regard but it is good practice if the team of investigators or individuals who deal with the case consists of:
- a person who has specific knowledge in a given field (concerning the violation);
- a member of the HR team; and
- a lawyer (it is recommended to engage an independent, external lawyer who can maintain the objectivity of the investigation, especially in complex matters or where a conflict of interest arises or may arise).
It is crucial that the investigators are independent (and they must be allowed to act independently).
Also, certain personal features are useful (eg, the ability to objectively assess a situation, empathy, and managing skills).
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While there are no laws that set minimum qualifications for who should conduct a workplace investigation, companies often engage external legal counsel to ensure the investigation is conducted in an unbiased and professional manner. If the company itself undertakes the workplace investigation, the company should take precautions such as ensuring that the person conducting the investigation is not biased and not involved in the alleged wrongdoing. If the person conducting the investigation cannot converse in the native language of the employee under investigation, the company may consider arranging for an interpreter when conducting interviews, to minimise the risk of misunderstanding.
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
This is unlikely. Theoretically, an employee can file a claim against an employer concerning the infringement of personal rights in the course of an investigation and a motion to secure his or her claims, which would consist of an employer being forced to suspend the proceedings, but in practice we have not encountered such a situation.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
An employee under investigation cannot bring legal action (eg, an injunction) to stop a workplace investigation. However, there have been instances where an employee under investigation raised legal challenges concerning the investigation (eg, breach of privacy). Please see question 19. While the company would not be legally compelled to stop the investigation when legal challenges are raised, they may face penalties under the relevant laws if it is determined they have committed a violation.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Finland
Finland
- at Roschier
- at Roschier
There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
In general, an employee may not be forced to act as a witness, but based on the provisions of the Polish Labour Code, an employee must act for the benefit of a working establishment or employer and perform work in line with the instructions of an employer. A lack of cooperation from an employee (eg, refusing to attend a hearing, hiding facts or even false testimony) may constitute a basis for the loss of an employer’s trust in the employee and, as a consequence, may constitute a valid reason for termination (in some specific situations, even without notice).
There is no formal protection for employees who act as witnesses. However, participation in an investigation cannot result in negative consequences (eg, no retaliation is allowed). Also, during an investigation, employees who are bound by professional secrecy are not required to provide information that would imply a breach of such secrecy.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While there are no laws to compel co-workers to act as witnesses, the company may have internal policies (eg, rules of employment, code of conduct) that require employees to cooperate with company actions such as a workplace investigation. That said, it would be difficult to enforce such policies even if the employee refuses to cooperate (eg, taking disciplinary action against an employee who refuses to act as a witness).
There may be instances when the company is required to provide certain legal protection to employees acting as witnesses in an investigation. For example, if a whistleblower falling under the WPA is required to act as a witness, they would be entitled to legal protections as discussed in question 1. The company may also have internal policies that provide protection to employees acting as witnesses in an investigation.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Finland
Finland
- at Roschier
- at Roschier
Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.
Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.
However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
If personal data is involved – the rules and principles of the GDPR will apply. If the physical evidence includes e-mail correspondence, files, or an employee’s equipment and possessions, the Labour Code will apply (ie, as a general rule, to monitor it, a monitoring policy must be implemented at that working establishment). Such a policy must strictly determine the aim of the surveillance and an employer must only apply surveillance in situations that reflect this aim. Also, when it comes to monitoring correspondence, it must not infringe on the secrecy of the correspondence, which in practice means that the employer should not check employees’ private correspondence when checking their business mailboxes.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
It may be difficult for a company to search and collect physical items that personally belong to the employee.
While the company may search and gather electronic data, such as emails or files stored in work laptops or company servers, there are requirements and restrictions under the Criminal Code, the Personal Information Protection Act (PIPA), and the Act on Promotion of Information and Communications Network Utilisation and Information Protection, etc (Network Act), among other laws.
Article 316(2) of the Criminal Code states that accessing the contents of another person’s documents, pictures, special media records, etc, that are sealed or designated as secret using technical means may constitute the crime of accessing electronic records.
Under the PIPA, consent must be obtained from the information owner to collect or use personal information, or to provide such information to a third party. Consent must be separately obtained for sensitive information or unique identification information. There are strict requirements as to the format and contents of the consent forms under the PIPA.
The Network Act prohibits accessing an information and communications network without rightful authority or any intrusion that goes beyond the permitted authority for access. Although this may not be an issue if a company directly manages the email accounts at issue, if an employee’s email account is protected by a password or through other means, accessing emails from that account without obtaining the employee’s consent could constitute unlawful intrusion under the Network Act as well as under the Criminal Code as discussed above.
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Finland
Finland
- at Roschier
- at Roschier
Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on whether the employer implemented rules of personal control at the workplace. If yes, such rules are applicable. If not, in our opinion if there is suspicion of a serious violation, it is possible to carry out an ad hoc inspection but its scope should be limited only to necessary activities and should not concern an employee’s private files or correspondence, so as not to infringe on personal rights. If there is an ad hoc inspection, an employee should be informed in advance, and it should take place in the presence of the employee or employee’s representative, observing the rules of fairness and equity.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
As discussed in question 7, it may be difficult for a company to search an employee’s personal possessions. The company may search and gather electronic data stored in work laptops or company servers, subject to legal requirements and restrictions (eg, obtaining consent).
The PIPA provides specific guidance on the requirements for obtaining consent. Under the PIPA, to collect or use an individual’s personal information, the information holder must be informed of and consent to:
- the purpose of the collection or use;
- the personal information that will be collected;
- the period of retention and use; and
- his or her right to refuse to provide consent and any disadvantages that may result from such refusal.
There are separate requirements for obtaining consent to provide an individual’s personal information to a third party. Also, consent must be obtained separately for the collection, use or provision of sensitive or unique identification information.
Under limited circumstances, personal information may be collected, used, or provided to third parties without obtaining the consent of the information holder. For instance, a company may collect and use personal information without obtaining consent where obtaining the information is necessary to achieve the company’s “legitimate interests”, which clearly exceed the information holder’s right to his or her personal information, and the collection and use are carried out within reasonable bounds. The term “legitimate interests” in this context is generally understood as a concept similar to “justifiable act” under the Criminal Code. The Korean Supreme Court has held that under exceptional circumstances such as the following, the company’s collection and review of employee data may constitute a “justifiable act” under the Criminal Code:
- the company had specific and reasonable suspicion that the employee had committed a crime and the company had an urgent need to verify the facts;
- the scope of the company’s review was limited to the suspected crime through the use of keywords, etc;
- the employee had signed an agreement stating that he or she would not use work computers in an unauthorised manner and that all work products would belong to the company; and
- the company’s review uncovered materials that could be used to verify whether the employee committed the alleged crime.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Finland
Finland
- at Roschier
- at Roschier
In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
In principle, an internal investigation should be conducted in the same way, regardless of whether it is initiated following a whistleblowing report, an audit, or a monitoring result. This includes anything related to confidentiality, fairness, data privacy protection, etc.
If an internal investigation is initiated following a whistleblower report, the main characteristic that is imposed by the EU Directive on the protection of persons who report breaches of EU Law (Whistleblowers Directive) and that will also be available under the Draft Law is for the organisation (employer) to communicate (if practicable) the report to the whistleblower. Furthermore, the whistleblower should receive feedback as to whether follow-up actions were undertaken following the report and, if yes – what actions were taken – and if not – why the follow-up actions were not taken.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
Aside from the legal obligations imposed on the company when dealing with a whistleblower who is subject to the WPA as discussed in question 1, there are also practical considerations the company should keep in mind when dealing with a whistleblower, regardless of whether the whistleblower falls under the WPA.
For example, there have been instances where an employee who raised allegations filed a complaint with Korean authorities (such as the Anti-Corruption and Civil Rights Commission (ACRC) or the Labour Office) that the company took retaliatory action against the whistleblower. The company should carefully review the legal risks before taking action, such as personnel action or civil or criminal action, against an employee who raises allegations if that employee was also involved in the wrongdoing.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Finland
Finland
- at Roschier
- at Roschier
Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
The law does not cover this issue, apart from whistleblower regulations, as it should be regulated by the employer in their internal rules. The employer should ensure all participants of the investigation keep information related to it secret, as long as is necessary for the investigation (or even longer, if required by law concerning personal data or other specially protected information). Reputation, personal data and the personal rights of other people cannot be breached during the proceedings and this should be protected.
Moreover, according to the Draft Law – a whistleblower’s personal data should be kept confidential. It can only be disclosed if law enforcement authorities require it. Also, confidentiality should be guaranteed for the subject and other interested persons.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
It is general practice in Korea for a company to require interviewees to maintain confidentiality concerning a workplace investigation and instruct them that they are not permitted to discuss the matter under investigation with other employees, etc. If an employee violates this instruction, it may be possible for the company to take disciplinary action against them under the company’s rules.
Further, the company or its employees who have engaged in an investigation for sexual harassment or workplace harassment in the workplace are obliged to maintain the confidentiality of the investigation. Failure to comply with such requirements may lead to an administrative fine from the Ministry of Employment and Labour for the company or its registered representative.
There may be some exceptions to the confidentiality obligation, such as when an employee is required by government authorities to provide relevant information in a parallel investigation.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Finland
Finland
- at Roschier
- at Roschier
The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There is no specific mandatory information that should be given to an employee who is the subject of an internal investigation. However, it is common practice that he or she must know what the allegations against them are, on what grounds these allegations are formulated and be given a right to discuss these allegations and the evidence or grounds for these allegations.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no requirement to notify an employee under investigation concerning the allegations against him or her when requesting cooperation with a workplace investigation (eg, requesting the employee’s consent to review electronic data, or requesting an interview).
However, the company may strategically consider explaining the general purpose of the investigation before requesting consent to review electronic data or when requesting an interview. This may help increase the likelihood of cooperation and also reduce the risk of the employee raising objections to the company’s findings from the investigation by saying he or she was not properly informed of the purpose of the investigation, or that the investigation was conducted in a coercive manner.
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Finland
Finland
- at Roschier
- at Roschier
See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Yes.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
As discussed in question 1, if the whistleblower falls under the WPA, the whistleblower’s identity should be kept confidential. Even if the WPA does not apply, the company may wish to keep the identity of the whistleblower and other key witnesses confidential to the greatest extent possible.
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Finland
Finland
- at Roschier
- at Roschier
Yes, however, the need for an NDA is assessed always on a case-by-case basis.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Yes, but it may not stop the disclosure of information at the request of relevant law enforcement authorities.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
Some companies require an employee subject to investigation to sign an NDA or other similar documents (eg, a pledge of confidentiality) agreeing not to disclose information relating to the investigation to outside parties.
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Finland
Finland
- at Roschier
- at Roschier
The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
In general, findings made and documents established during an internal investigation, including the report thereof, are not covered by privilege per se. It can be claimed that they are covered by the employer’s commercial secrecy, but this secrecy is not very well protected from requests of law enforcement authorities. Hence, if prosecuting authorities find a report of an internal investigation or other documents established during an investigation relevant for criminal proceedings, they can ask for them. If they are not produced voluntarily, a search can be performed.
Legal privilege will, on the other hand, cover an internal investigation if it is entrusted to an independent lawyer. Specifically, client-attorney privilege will cover all documents that are established during the investigation by a lawyer.
Under Polish law there is no distinction between legal advice privilege and litigation privilege. Hence, legal privilege will cover the documentation of the internal investigation led by a lawyer regardless of whether the lawyer’s involvement is for the purpose of obtaining legal advice or because of ongoing or contemplated litigation.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
No law recognises the common law concept of “attorney-client privilege” in Korea. However, communication with an attorney is protected to some extent under certain laws, such as the Constitution, the Attorney Act, the Criminal Procedure Act, and the Civil Procedure Act. This protection is based on the attorney’s confidentiality obligation, which prohibits an attorney from divulging confidential matters acquired in the course of representing clients, unless otherwise prescribed by law. This confidentiality obligation generally allows an attorney to refuse to testify or comply with document production orders for information or materials the attorney obtained in the course of his or her duties that relate to the confidential information of clients.
In addition, there could be instances where materials from an investigation conducted in Korea may become subject to discovery outside of Korea. It is, therefore, important to ensure investigation materials are privileged under the relevant non-Korean laws in the jurisdictions where attorney-client privilege is recognised (eg, the US).
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Finland
Finland
- at Roschier
- at Roschier
The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
This is not regulated by law and it depends on internal procedures or practice at a given working establishment. As a rule, the participation of third parties or proxies is neither a recognised practice nor recommended (according to the principle that the fewer people participate in the investigation, the easier it is to determine the circumstances of the case, the so-called need-to-know rule). However, in certain situations it should be permissible for a proxy (eg, a lawyer) to participate in a meeting with a subject.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While the company cannot prevent an employee from engaging his or her legal counsel, there is no legal obligation for a company to allow an employee to bring his or her legal counsel to an interview, for example. If the employee expresses his or her intention not to participate in the interview session without his or her legal counsel, the company may consider explaining to the employee that such refusal to participate in the interview may constitute a breach of reasonable work-related orders and may be subject to disciplinary action. However, the company should consider the possibility of the employee claiming that he or she was not given a proper opportunity to explain the allegations during the investigation because they were prevented from obtaining legal assistance.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Finland
Finland
- at Roschier
- at Roschier
A works council or a trade union does not have a role in the investigation.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
There is no such obligation, unless it is provided for in an internal procedure or, for example, in the applicable collective bargaining agreement. It is neither a recognised practice nor recommended that such persons participate in the investigation.
However, in the event of violations that justify the termination of an employment contract with the employee, the employer should consult with that employee’s union about their intention to immediately terminate any employment contract concluded with that person or to terminate, with notice, the employment contract agreed with him or her for an indefinite term, or apply for consent to terminate the employment contract with an employee who is protected by a union.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
While a labour union does not have a legal right under Korean law to be informed or involved in the investigation, unless otherwise required under the relevant collective bargaining agreement, there have been instances where the labour union raised complaints that the company did not properly investigate an employee, who is a member of the labour union, particularly if the company took disciplinary action against that employee based on the findings of the investigation. The company should consider such a practical risk when conducting a workplace investigation.
If the investigation was conducted based on a claim filed by an employee to the Grievance Handling Committee (which is a sub-committee of a works council), the members of that committee have a right to be informed of the results of the investigation.
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Finland
Finland
- at Roschier
- at Roschier
They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
They may be supported by, for example, allowing an alternative work environment (eg, remote work to avoid direct contact with people involved in the case). Depending on circumstances of the case, this solution will be offered to the subject or the victim. However, it is important that such actions do not infringe the rights of other people (eg, the subject itself).
Employees may also be sent on leave (by a unilateral decision of the employer – if possible under currently binding law provisions) or the parties to an employment contract may mutually agree to use such leave. Moreover, if they employer thinks it is necessary, they may assign the employee to another job for a period not exceeding three months (only if it does not result in a reduction in the employee’s remuneration and corresponds to the employee’s qualifications).
Also, depending on the employer’s decision – psychological or even legal assistance can be provided by the employer to a whistleblower or a victim.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There could be some instances where an employee involved in an investigation may be entitled to support from the company. To give an example, there have been some cases where a whistleblower claimed they suffered workplace harassment or their employer took retaliatory action (eg, wrongful transfer) and they sought damages or other relief.
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Finland
Finland
- at Roschier
- at Roschier
If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on the internal policies in force in the organisation. Most often, it constitutes the basis for separate proceedings.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
It is not uncommon for an employee under investigation to raise grievances during or after the investigation. Below are some examples of claims an employee may raise:
- that the company reviewed the employee’s electronic data without obtaining the requisite consent;
- that witnesses or the company committed defamation in violation of the Criminal Code;
- that the employee was coerced to comply with the investigation in violation of the Criminal Code;
- that the employee was disciplined without just cause; or
- that the employee was harassed by other employees for providing information during the investigation.
The actions the company should take would vary depending on the grievance raised.
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Finland
Finland
- at Roschier
- at Roschier
As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
This may prolong the investigation, as the employee may be unable to participate for a time (if the employee is not able to work, in many cases he or she will not be able to participate in proceedings that requires some level of engagement and psychophysical ability). Also, an employee is protected against termination of an employment contract with notice during sick leave. During such a period, the employer may only terminate his or her employment contract without notice (with immediate effect).
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
The company should review whether the employee under investigation is requesting sick leave under appropriate procedures and for a legitimate reason and may consider ways to persuade the employee to cooperate with the investigation. If the employee applies for sick leave following company policy, the company would need to grant such sick leave and suspend the investigation during the sick leave.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Finland
Finland
- at Roschier
- at Roschier
Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
They can be run in parallel. It is up to the company whether it informs the authority about the ongoing internal investigation.
Based on our experience in criminal matters, a report from an internal investigation may not necessarily be treated as evidence per se, but as a source of information about the evidence.
According to procedural rules stemming from, for example, the Criminal Procedure Code, the authorities can demand to see evidence and documents in the employer’s possession that they consider relevant to the conducted proceedings and their subject matter.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no obligation to stay the workplace investigation while the parallel criminal or regulatory investigation is being conducted. In practice, companies often proceed with, or even accelerate, the workplace investigation to find out the facts and defend themselves against the parallel criminal or regulatory investigation being conducted. The company should be careful not to engage in activities that may raise suspicions as to whether the company is impeding the government investigation or concealing or destroying evidence.
While the investigation report would typically not be privileged, the company may consider explaining to the authorities that the investigation findings are not conclusive, should the police or regulator request the internal investigation report.
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Finland
Finland
- at Roschier
- at Roschier
The employer's conclusions from the investigation.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
He or she must be given feedback about follow-up actions that were undertaken, or reasons why the follow-up actions were not undertaken.
In any case – the feedback must be adapted to the circumstances of each case so as not to reveal too many details or infringe the other interested parties’ rights.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no legal obligation for a company to disclose the outcome of an investigation to the employee who was subject to it. Having said that, if the company wishes to take disciplinary action against the employee based on the outcome of an investigation, it is required to disclose sufficient detail on the employee’s wrongdoing that is subject to disciplinary action. This information should be provided to the employee before the disciplinary action committee (DAC) hearing to provide the employee with sufficient time to present and defend his or her position during the DAC hearing.
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Finland
Finland
- at Roschier
- at Roschier
The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on the outcome of the investigation: imposing penalties; reporting to a regulator; notifying a suspected offence or civil claim; termination of an employment contract with or without notice; and changes to the work organisation. Following the investigation, the employer must make some legal, business or HR corrective actions.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
After completing an investigation, the company may consider the following measures, among others:
- taking disciplinary action against the relevant employees;
- taking legal action (eg, criminal action, civil action) against the relevant employees; and
- taking appropriate remedial measures (eg, strengthening existing policies and establishing new policies, and conducting training).
The company may also consider making a voluntary report to the relevant authorities as discussed in question 25.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Finland
Finland
- at Roschier
- at Roschier
In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
It depends on the matter. In general, there is no obligation to disclose the report. In some instances, there is an obligation to notify a suspected offence (for example, a terrorist attack or a political assassination). This, however, does not mean there is an obligation to file a report from the internal investigation, but to provide the law enforcement authority with the facts and evidence at the notifier’s disposal. In other instances of criminal offences, for example corruption, there is no obligation to notify law enforcement authorities. Therefore, it is up to the organisation to decide whether it will file a notification for a suspected offence.
At the same time, presenting a report from an internal investigation can constitute an element of defence for an organisation if a regulatory authority initiates proceedings regarding a failure by the organisation to comply with regulatory obligations.
Records of interviews do not need to be produced for the case file provided the law enforcement authority does not ask for them.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is generally no obligation to report violations to the Korean authorities, subject to limited exceptions (eg, financial institutions are required to report certain types of wrongdoing to the financial regulator; if there was a leak of an industrial technology developed through a national research and development project or a national core technology, this leak should be reported to the Ministry of Trade, Industry and Energy and the National Intelligence Service). However, even in the absence of a self-reporting obligation, the company may consider strategically deciding to make a voluntary report. For example, there have been instances where the police or prosecutors’ investigations were conducted in a more limited manner where the company filed a voluntary report and cooperated with the investigation. Also, for certain types of violations (eg, cartel activities), self-reporting to the relevant authority may entitle the company to leniency provided under the law.
In certain instances, the company may also consider reporting violations to the relevant foreign authorities, in addition to, or instead of, the Korean authorities. For example, if the company found potential violations of US law such as sanctions law or the Foreign Corrupt Practice Act, the company may want to self-report these violations to the relevant authorities such as the Office of Foreign Assets Control, or the US Department of Justice.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Finland
Finland
- at Roschier
- at Roschier
Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
Neither Polish law nor the Draft Law specifically provide for a mandatory period during which the outcome of the investigation should be kept on the employee’s record.
At the same time, the Draft Law indicates that the register of whistleblowing reports, which should also contain information about follow-up actions undertaken as a result of the report, should be kept for 15 months starting from the end of the calendar year in which the follow-up actions have been completed, or the proceedings initiated by those actions have been terminated.
Also, while determining how long the outcome of an internal investigation should be kept, additional legal considerations can be taken into account, especially data privacy.
The GDPR does not specify precise storage time for personal data. The employer must assess what will be an appropriate time for storage of the data, taking into consideration the necessity of keeping personal data concerning the purpose of the processing in question. Employees' personal data should be kept for the period necessary for the performance of the employment relationship and may be kept for a period appropriate for the statute of limitations for claims and criminal deeds. A longer retention period may result from applicable laws. Following the Regulation of the Minister of Family, Labour and Social Policy on employee documentation, the employer may keep a copy of the notice of punishment and other documents related to the employee’s incurring of disciplinary responsibility in the employee record.
There are different retention periods for the data contained in employee files:
- 10 years if the employee was hired on or after 1 January 2019;
- if the employment relationship began between 1 January 1999 and 1 January 2019, the retention period is 50 years, but may be reduced to 10 years if the employer provides the Polish Social Insurance Institution with certain mandatory information; and
- for 50 years if the employee was hired before 1 January 1999. It does not matter whether the person is still working or not.
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
There is no legal requirement on how long the records of the investigation (eg disciplinary action) should be maintained by the company. Many companies maintain a record of disciplinary action throughout the employment period.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Finland
Finland
- at Roschier
- at Roschier
There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.
Poland
Poland
- at WKB Lawyers
- at WKB Lawyers
- at WKB Lawyers
If any untrue allegations were made by an employer against an employee without checking them beforehand, there is a risk that such an employee would claim damages eg, for infringement of personal rights or even filing a private indictment for defamation or outrage.
Certainly, an employer must be aware that one must never behave in a way that, for example, in the employee's opinion, could constitute a form of blackmailing or deprivation of liberty. A problem may also arise when accessing the employee's correspondence, especially when access is made to documents or private correspondence. The Draft Law provides for several criminal offences related to, for example, preventing reporting, using retaliatory measures against a whistleblower or disclosing personal data of a whistleblower).
South Korea
South Korea
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
- at Kim & Chang
As mentioned in question 19, employees may potentially raise claims, such as that the company violated data privacy laws in reviewing employee data, committed defamation, coerced the employee to comply with the investigation, and that witnesses or the company committed defamation in violation of the Criminal Code or disciplined the employee without just cause.