Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Select specific jurisdictions to filter on
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Flag / Icon
Ireland
Ireland
- at Ogier
- at Ogier
Under the GDPR (General Data Protection Regulation), personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject. The Data Protection Commission published Data Protection in the Workplace: Employer Guidance in April 2023, which is a useful guide.
Employers should exercise caution when gathering physical evidence that may involve the use of CCTV or other surveillance practices. The Irish Court of Appeal in the case of Doolin v DPC examined the use by an employer of CCTV footage for disciplinary purposes and found such use constituted unlawful further processing. The original reason for processing the CCTV footage was to establish who was responsible for terrorist-related graffiti that was carved into a table in the staff tearoom. It subsequently transpired Mr Doolin, who was in no way connected to the graffiti incident, had accessed the tearoom for unauthorised breaks and a workplace investigation followed. The original reason for viewing the CCTV related to security, but further use of the CCTV footage in the disciplinary investigation was not related to the original reason. This case confirms that employers must have clear policies in place in compliance with both GDPR and the Data Protection Act 2018 specifying the purpose for which CCTV or any other monitoring system is being used. Not only that, but these policies must be communicated to employees specifying the use of such practices.
It is not only data about the investigation that must be processed fairly, but any retention of the data, which can only be further processed with good reason. It is a legitimate business reason to retain data to deal with any subsequent requests or appeals under various internal or statutory processes, provided employees have been advised of the relevant retention period.
Download your results as a PDF
Download as pdf link
Contributors
Australia
People + Culture Strategies
Austria
GERLACH
Belgium
Van Olmen & Wynant
Brazil
CGM
China
Jingtian & Gongcheng
Finland
Roschier
France
Bredin Prat
Germany
Hengeler Mueller
Greece
Karatzas & Partners
Hong Kong
Slaughter and May
India
Trilegal
Ireland
Ogier
Italy
BonelliErede
Japan
Mori Hamada & Matsumoto
Netherlands
De Brauw Blackstone Westbroek
Nigeria
Bloomfield LP
Philippines
Villaraza & Angangco
Poland
WKB Lawyers
Portugal
Uría Menéndez - Proença de Carvalho
Singapore
Rajah & Tann Singapore
South Korea
Kim & Chang
Spain
Uría Menéndez
Sweden
Mannheimer Swartling
Switzerland
Bär & Karrer
Thailand
Chandler MHM
Turkey
Paksoy
United Kingdom
Slaughter and May
United States
Cravath, Swaine & Moore
Vietnam
Le & Tran Law Corporation