Workplace Investigations

Workplace suspensions in Ireland are a contentious issue and can result in an employer defending injunction proceedings in the High Court before an investigation has started.

In the case of Governor and Company of the Bank of Ireland v Reilly, the judge stated: “The suspension of an employee, whether paid or unpaid, is an extremely serious measure which can cause irreparable damage to his or her reputation and standing."

In the 2023 case of O’Sullivan v HSE, the Supreme Court held that the Health Service Executive acted fairly and reasonably as an employer in suspending a consultant doctor after he had performed experiments on patients without their consent. This ruling overturned the Court of Appeal's earlier decision that previously found the suspension to be unlawful, as the consultant did not represent an immediate threat to the health of patients.

The Supreme Court considered whether the employer's decision to place the consultant on administrative leave met the test set out in the English case of Braganza v BP Shipping Limited & Anor. In that case, the court held that the decisionmaker's discretion would be limited "by concepts of good faith, honesty and genuineness and the need for absence of arbitrariness, capriciousness, perversity and irrationality."

In relying on the principles set out in the Braganza case, the Irish courts have reinforced the right of a decision-maker in an employment context to have discretionary power when implementing a suspension and that any decision to do so must be made honestly and in good faith. Employers should obtain legal advice when considering whether to suspend an employee in any circumstance.

The company may place an employee who is subject to a workplace investigation under administrative leave if this seems necessary or appropriate to ensure the integrity of the workplace investigation. While administrative leave can take different forms, one way is to issue a “standby order” to the relevant employee, instructing him or her not to come into work and prohibiting contact with other employees or customers while the workplace investigation is ongoing.

Administrative leave is not a disciplinary action, but rather an exercise of the company’s authority to take personnel management measures. This authority is generally subject to a “reasonableness” test, with the Korean courts balancing the employer’s business necessity in placing the employee on administrative leave with the inconvenience caused to the employee. In conducting the balancing test, the Korean courts have considered whether the employee receives pay during the leave and the duration of the leave, among other things. In general, if the duration of the leave is not excessive and is with full pay and benefits, the employer’s management prerogative is likely to be recognised.

The company doesn't need to obtain the employee’s consent but, in practice, a company should consider getting the employee’s acknowledgement that they have received the administrative leave notice.

In addition to Korean labour law, other factors such as the company’s rules of employment or a collective bargaining agreement (if any) may affect the company’s ability to place the employee on administrative leave, by providing for prescribed procedures for placing an employee on administrative leave or requiring the company to obtain the union’s consent if a union leader or executive is involved.

It is possible to suspend an employee during a workplace investigation.[1] While there are no limits on duration, the employee will remain entitled to full pay during this time.

Under the GDPR (General Data Protection Regulation), personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject. The Data Protection Commission published Data Protection in the Workplace: Employer Guidance in April 2023, which is a useful guide.

Employers should exercise caution when gathering physical evidence that may involve the use of CCTV or other surveillance practices. The Irish Court of Appeal in the case of Doolin v DPC examined the use by an employer of CCTV footage for disciplinary purposes and found such use constituted unlawful further processing. The original reason for processing the CCTV footage was to establish who was responsible for terrorist-related graffiti that was carved into a table in the staff tearoom. It subsequently transpired Mr Doolin, who was in no way connected to the graffiti incident, had accessed the tearoom for unauthorised breaks and a workplace investigation followed. The original reason for viewing the CCTV related to security, but further use of the CCTV footage in the disciplinary investigation was not related to the original reason. This case confirms that employers must have clear policies in place in compliance with both GDPR and the Data Protection Act 2018 specifying the purpose for which CCTV or any other monitoring system is being used. Not only that, but these policies must be communicated to employees specifying the use of such practices.

It is not only data about the investigation that must be processed fairly, but any retention of the data, which can only be further processed with good reason. It is a legitimate business reason to retain data to deal with any subsequent requests or appeals under various internal or statutory processes, provided employees have been advised of the relevant retention period.

It may be difficult for a company to search and collect physical items that personally belong to the employee.

While the company may search and gather electronic data, such as emails or files stored in work laptops or company servers, there are requirements and restrictions under the Criminal Code, the Personal Information Protection Act (PIPA), and the Act on Promotion of Information and Communications Network Utilisation and Information Protection, etc (Network Act), among other laws. 

Article 316(2) of the Criminal Code states that accessing the contents of another person’s documents, pictures, special media records, etc, that are sealed or designated as secret using technical means may constitute the crime of accessing electronic records.

Under the PIPA, consent must be obtained from the information owner to collect or use personal information, or to provide such information to a third party. Consent must be separately obtained for sensitive information or unique identification information. There are strict requirements as to the format and contents of the consent forms under the PIPA.

The Network Act prohibits accessing an information and communications network without rightful authority or any intrusion that goes beyond the permitted authority for access. Although this may not be an issue if a company directly manages the email accounts at issue, if an employee’s email account is protected by a password or through other means, accessing emails from that account without obtaining the employee’s consent could constitute unlawful intrusion under the Network Act as well as under the Criminal Code as discussed above.

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.