Workplace Investigations

It would be difficult to assert privilege over materials that relate to the investigation itself.

Privilege may arise before the instigation of an investigation where an employer may seek legal advice from their legal advisors over the initial complaint and appropriate next steps. Subject to the relevant tests being met, Legal Advice Privilege arises in respect of a confidential communication that takes place between a professionally qualified lawyer and a client. Who the client is will be of significant importance as they must be capable of giving instructions to their lawyer, on behalf of the employer. Caution should be exercised by employers if advice to "the client" is disseminated further within the business to other members of management. If such a scenario arises, then there is a risk that privilege may be waived and such material could be disclosable under a data subject access request. Litigation privilege arises with respect to confidential communications that take place between a lawyer or a client and a third party for the dominant purpose of preparing for litigation, whether existing or reasonably contemplated.

It is also prudent to consider whether an external investigator should have access to their own independent legal advisor, and the funding arrangements for such advice would have to be considered by the employer.

As outlined above, all employees generally have the right to know whether and what personal data is being or has been processed about them (article 8 paragraph 1, Swiss Federal Act on Data Protection; article 328b, Swiss Code of Obligations).

The employer may refuse, restrict or postpone the disclosure or inspection of internal investigation documents if a legal statute so provides, if such action is necessary because of overriding third-party interests (article 9 paragraph 1, Swiss Federal Act on Data Protection) or if the request for information is manifestly unfounded or malicious. Furthermore, a restriction is possible if overriding the self-interests of the responsible company requires such a measure and it also does not disclose the personal data to third parties. The employer or responsible party must justify its decision (article 9 paragraph 5, Swiss Federal Act on Data Protection).[1]

The scope of the disclosure of information must, therefore, be determined by carefully weighing the interests of all parties involved in the internal investigation.