Workplace Investigations

Investigations can start in multiple ways. They usually stem from an employee raising a grievance, a bullying complaint, or a possible protected disclosure. Investigations may also stem from the employer in a disciplinary context, or indeed can be commenced if an external complaint or issue is raised by a third party of the organisation.

The first thing the employer must consider is whether an investigation is necessary. It may be that the issue at hand can be resolved informally or is of such a nature that it cannot be investigated, either through a lack of detail or simply because the subject of the complaint is no longer an employee. Any such decision to investigate or not should be carefully documented.

The next step to determine is the nature of the investigation. It should be clear at the outset whether the investigation is simply a fact-gathering exercise or if the investigator will be tasked with making findings on the evidence. The distinction is significant as a fact-gathering investigation can proceed without prompting the full panoply of rights, but the basic principles of fairness should still be applied. A fact-gathering investigation should determine whether there is or is not, a case to answer. If a disciplinary hearing follows then the rights outlined in question 1 will apply at that stage. If it is a fact-finding investigation, the rights apply from the outset of the process. The employee who is required to respond to the issues (the respondent) should be fully aware of the extent of the investigation. The investigator appointed to do the investigation should be clear about what is expected of them.

If the employer believes an investigation is necessary, it should be acknowledged and started without delay. In particular, according to the Protected Disclosures legislation, a report should be acknowledged within seven days.

An employer should consider and identify the scope of the investigation and establish who will investigate the matter. Terms of reference under which the investigation will be carried out should be established by the employer and shared with the employee raising the issue (the complainant). An employer should not seek agreement on the terms, but invite commentary to ensure that the full scope of the investigation is captured within the terms of reference. Robust terms of reference that lay down the clear parameters of the investigation will assist the investigator and all parties involved in the process.

There are no legal requirements in this respect – it depends on the internal policies or practices at a given working establishment. Based on our experience – an internal investigation usually commences with a preliminary assessment of a reported irregularity. If the preliminary assessment leads to a conclusion that a reported situation may be an irregularity, an investigation is launched by appointing a commission or team that conducts the investigation or selecting an investigator. Then, a plan of investigation is established. Depending on the circumstances, the investigation plan may involve a collection of documents or files, their analysis, and interviews with a victim, witnesses or a subject (although the procedure depends on the type of case, internal rules and practice). At the end of the process, the report is prepared by the commission or team with facts established during the process, recommendations, and other suggestions as to the investigated issue.

Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).

For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]

Irrespective of the outcome of the investigation, the fact that an employee was subject to an investigation is not the key issue. The key concern is whether any further action was taken as a result of the investigation. If a disciplinary process ensued, then it is the outcome of that disciplinary record and any subsequent appeal that would or would not be noted on an employee's record. If a disciplinary sanction were imposed then the length of time the sanction remains on the employee's record would depend on what is specified in the disciplinary policy.

Neither Polish law nor the Draft Law specifically provide for a mandatory period during which the outcome of the investigation should be kept on the employee’s record.

At the same time, the Draft Law indicates that the register of whistleblowing reports, which should also contain information about follow-up actions undertaken as a result of the report, should be kept for 15 months starting from the end of the calendar year in which the follow-up actions have been completed, or the proceedings initiated by those actions have been terminated.

Also, while determining how long the outcome of an internal investigation should be kept, additional legal considerations can be taken into account, especially data privacy.

The GDPR does not specify precise storage time for personal data. The employer must assess what will be an appropriate time for storage of the data, taking into consideration the necessity of keeping personal data concerning the purpose of the processing in question. Employees' personal data should be kept for the period necessary for the performance of the employment relationship and may be kept for a period appropriate for the statute of limitations for claims and criminal deeds. A longer retention period may result from applicable laws. Following the Regulation of the Minister of Family, Labour and Social Policy on employee documentation, the employer may keep a copy of the notice of punishment and other documents related to the employee’s incurring of disciplinary responsibility in the employee record.

There are different retention periods for the data contained in employee files:

• 10 years if the employee was hired on or after 1 January 2019;
•  if the employment relationship began between 1 January 1999 and 1 January 2019, the retention period is 50 years, but may be reduced to 10 years if the employer provides the Polish Social Insurance Institution with certain mandatory information; and
•  for 50 years if the employee was hired before 1 January 1999. It does not matter whether the person is still working or not.

From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.

From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]