Workplace Investigations

If a lawyer is involved in the investigation, communication between the lawyer and client is subject to legal professional privilege. These communications must not be disclosed. Any documents collected by an internal audit can be seized and used. However, a document created by a lawyer can only be seized. The same applies to other professional representatives of parties, such as notaries and auditors, as potential holders of professional secrecy.

As outlined above, all employees generally have the right to know whether and what personal data is being or has been processed about them (article 8 paragraph 1, Swiss Federal Act on Data Protection; article 328b, Swiss Code of Obligations).

The employer may refuse, restrict or postpone the disclosure or inspection of internal investigation documents if a legal statute so provides, if such action is necessary because of overriding third-party interests (article 9 paragraph 1, Swiss Federal Act on Data Protection) or if the request for information is manifestly unfounded or malicious. Furthermore, a restriction is possible if overriding the self-interests of the responsible company requires such a measure and it also does not disclose the personal data to third parties. The employer or responsible party must justify its decision (article 9 paragraph 5, Swiss Federal Act on Data Protection).[1]

The scope of the disclosure of information must, therefore, be determined by carefully weighing the interests of all parties involved in the internal investigation.

Generally, privilege does not apply to internal workplace investigation materials as the investigation does not constitute a relationship between a lawyer and his or her client, and even less so a judicial investigation. However, if a lawyer is appointed to represent a specific party in an investigation, for example, as an investigator, the privilege may apply to materials exchanged between the lawyer and that client.

It is up to management to decide which results should be disclosed and to whom. It is important to know who the persons concerned are and who has an interest in disclosure.

From a legal perspective, disclosure must follow the GDPR. Internal policies can specify how the results are to be handled. Works Council Agreements (WCAs) may also contain regulations on how to deal with internal investigations and the disclosure of results.

There is no requirement to publish the results of the investigation, but it may be advisable to cooperate with the authorities. This is particularly the case if the employer has suffered damage or is himself threatened with prosecution. The release of investigation results can be compelled through the courts.

The employer is generally not required to disclose the final report, or the data obtained in connection with the investigation. In particular, the employer is not obliged to file a criminal complaint with the police or the public prosecutor's office.

Exceptions may arise, for example, from data protection law (see question 22) or a duty to release records may arise in a subsequent state proceeding.

Data voluntarily submitted in a proceeding in connection with the internal investigation shall be considered private opinion or party assertion.[1] If the company refuses to hand over the documents upon request, coercive measures may be used under certain circumstances.[2]

Generally, the employer does not have to actively disclose the findings of a workplace investigation to any party.

Notwithstanding this, the employer should be aware of certain statutory disclosure requirements that may apply as a result of the matters revealed during the workplace investigation, if the said investigation reveals any knowledge or suspicion of an indictable offence that has been committed.

Interview records should be kept private unless disclosure is required by the authorities.