Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Select specific jurisdictions to filter on
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Flag / Icon
Finland
Finland
- at Roschier
- at Roschier
Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.
Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.
However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.
Download your results as a PDF
Download as pdf link
Contributors
Australia
People + Culture Strategies
Austria
GERLACH
Belgium
Van Olmen & Wynant
Brazil
CGM
China
Jingtian & Gongcheng
Finland
Roschier
France
Bredin Prat
Germany
Hengeler Mueller
Greece
Karatzas & Partners
Hong Kong
Slaughter and May
India
Trilegal
Ireland
Ogier
Italy
BonelliErede
Japan
Mori Hamada & Matsumoto
Netherlands
De Brauw Blackstone Westbroek
Nigeria
Bloomfield LP
Philippines
Villaraza & Angangco
Poland
WKB Lawyers
Portugal
Uría Menéndez - Proença de Carvalho
Singapore
Rajah & Tann Singapore
South Korea
Kim & Chang
Spain
Uría Menéndez
Sweden
Mannheimer Swartling
Switzerland
Bär & Karrer
Thailand
Chandler MHM
Turkey
Paksoy
United Kingdom
Slaughter and May
United States
Cravath, Swaine & Moore
Vietnam
Le & Tran Law Corporation