Workplace Investigations

There is no specific legislation, guidance or policies covering investigations in the workplace. Issues such as the Personal Data Protection Law, invasion of privacy, and infringement of freedoms may arise regarding the related parties, subjects, methods, and results of investigations. In addition, court decisions have stated that "when there has been a violation of corporate order, an investigation of the facts may be conducted to clarify the nature of the violation, issue business instructions or orders necessary to restore the disturbed order or take disciplinary action against the violator as a sanction”. The investigation or order must be reasonable and necessary for the smooth operation of the enterprise, and the method and manner of the investigation or order must not be excessive or restrain an employee's personality or freedom. In such a case, the investigation may be considered to be illegal and may constitute a tort.

Spain has not passed any statutes, regulations or policies specifically governing workplace investigations. Instead, general employment and data protection legislation, which safeguards employees’ rights, is fully applicable during these types of enquiries.

These statutes focus on employee privacy. As a result, the application of this legislation:

• limits the matters that may be investigated: they have to be relevant to the employment relationship and there has to be a legitimate reason to conduct the enquiry;
• sets boundaries to the means that may be lawfully used by the company in the investigation: they must be the least intrusive means for employees’ rights (for instance, an email review should be a last resort, reserved for when less-invasive means are not available or would not be effective); and
• states that the companies’ decisions during the investigation must be proportional in light of the facts under review and the legal consequences attached to them.

Collective bargaining agreements, which in Spain generally apply to every company within their scope of application (normally a given economic sector), may regulate workplace investigations. However, it is unusual for collective bargaining agreements to regulate workplace investigations.

Finally, major international corporations with a presence in Spain do tend to have an ethics or whistleblowing policy that governs how an investigation should be conducted. Even if these are self-imposed policies, they are contractually binding and, once established, must be respected by companies.

There is no specific legal regulation for internal investigations in Switzerland. The legal framework is derived from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights. Depending on the context of the investigation, additional legal provisions may apply; for instance, additional provisions of the Swiss Federal Act on Data Protection or the Swiss Criminal Code.

The trigger for an investigation in the workplace may be:

• when an employee makes a report (eg, a report of harassment, a report of misconduct by another employee, etc);
• when an investigation is conducted by the Labour Standards Inspection Office or another regulatory agency;
• when a criminal or illegal act is discovered in the workplace; or
• when an internal audit conducted by the company reveals a problem.

Given that Spain lacks legislation in this area (see question 1), each company commences workplace investigations following its internal guidelines, policies or practices, if any. In our experience, investigations begin with a formal decision to commence the enquiry, which is set out in writing for record-keeping purposes.

This decision will normally mention:

• the facts that will be investigated;
• the reasons to investigate the facts (eg, they could be a breach of company policies);
• how the investigation will be conducted; and
• the individuals who will conduct the enquiry.

Depending on the company, the decision to initiate the investigation may take the form of a decision by the competent employee or officer (ethics or compliance officer) or the minutes of the relevant corporate body (board of directors or compliance committee).

Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).

For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]

Court precedent states that a valid requirement for a stay-at-home order is it “would not be considered to put employees at a legal disadvantage (deprive them of their rights and imposes obligations on them), except in exceptional cases where employees are legally entitled to request work, unless there are special circumstances such as discrimination in salary increases and the like." (Tokyo High Court decision 25 January 2012, All Japan Mariners' Union). Therefore, it is considered possible to order the employee to stay at home during the investigation period if necessary. Some companies stipulate in their work rules that they may order employees to take special leave or stay at home when an incident occurs that could be the subject of disciplinary action.

In principle, the payment of salary in full during the stay-at-home period is required. However, work rules may stipulate that an employee will not be paid during the investigation period, and in cases where the employee is clearly responsible and it is inappropriate to allow the employee to work (eg, where it is almost certain that the employee has embezzled money on the job), the employee may be ordered to stay at home without pay. In addition, if the work rules stipulate that an absence allowance under the Labour Standards Law (60% or more of wages) must be paid for the stay-at-home period, such an allowance may be paid under the said rules.

Yes, a company may suspend an employee if it has valid grounds to believe that keeping an employee under investigation in his or her position during the enquiry could obstruct the investigation or become an obstacle to it (for example, the employee could try to conceal facts or influence other employees within the organisation).

The decision to suspend the employee must be communicated in writing. This will usually take the form of a suspension letter that explains the reasons that have led to the suspension, its expected duration and that the suspension is not a disciplinary measure. Since the suspension is not a disciplinary measure, the employee would be entitled to continue collecting his or her standard remuneration during the suspension.

In Spain, employees have the right to be effectively occupied during their employment. Therefore, the duration of the suspension should be limited in time to what is strictly necessary to avoid what led to the suspension in the first place.

It is possible to suspend an employee during a workplace investigation.[1] While there are no limits on duration, the employee will remain entitled to full pay during this time.

There are no specific qualifications or requirements for an investigator. In many cases, the investigation is handled by a department or employee as deemed appropriate by the company. In some cases, an outside attorney may be asked to handle the investigation. Also, when it is a serious matter for the company, a third-party committee may be formed and commissioned to conduct an investigation.

However, under the revision of the Whistleblower Protection Act, which came into effect in June 2022, entities employing 300 or more employees must designate a person (whistleblower response service employee) in charge of accepting internal whistleblowing reports, investigating internal whistleblowing reports, or taking corrective measures as a whistleblower response service provider. Entities with less than 300 employees must also make an effort to do the same.

The person designated as a whistleblower response service provider must not divulge the name, employee ID number, or other information that would enable whistleblower identification without a justifiable reason. Criminal penalties (fines of up to 300,000 yen) have been established for violations of this confidentiality obligation.

As set out in question 1, workplace investigations must be proportional and companies must use the least intrusive means to affect employees’ rights. This translates into the following principles on who conducts the investigation:

• the enquiry must involve a minimal number of employees;
• only those employees with competencies on the investigated matters should be involved (normally human resources or compliance); and
• employees conducting the investigation must be qualified and have the power and seniority to do so proficiently (although a formal qualification is not required).

The examinations can be carried out internally by designated internal employees, by external specialists, or by a combination thereof. The addition of external advisors is particularly recommended if the allegations are against an employee of a high hierarchical level[1], if the allegations concerned are quite substantive and, in any case, where an increased degree of independence is sought.

There are very few cases in which an employee subject to an investigation can file a legal proceeding to have the investigation stopped. Theoretically, an employee may be able to file a lawsuit or a provisional disposition to stop the investigation if he or she has a legal right to request that the company stop the investigation, but usually a lawsuit or a petition for a provisional disposition alone will not stop an investigation from proceeding. Although a provisional injunction would conclude in a relatively short period, such a provisional injunction would be unlikely to be issued if the investigation is conducted properly.

No, an employee under investigation has no direct legal option to stop an investigation. This is because conducting an enquiry is within the employers’ legally acknowledged powers, attached to their capacity to manage their business and enforce employment contracts and internal policies.

Notwithstanding the above, if the investigation breaches an employee’s rights (privacy, dignity, remuneration, etc), the individual could:

• file a lawsuit aimed at stopping said breach (and potentially seeking an award for damages); or
• file a claim with the Labour Inspectorate with the same purpose.

The result, in this case, would stop the enquiry.

The accused could theoretically request a court to stop the investigation, for instance, by arguing that there is no reason for the investigation and that the investigation infringes the employee's personality rights. However, if the employer can prove that there were grounds for reasonable suspicion and is conducting the investigation properly, it is unlikely that such a request would be successful.

Interviewing co-workers is often conducted in internal investigations. Company employees are generally required to cooperate with company investigations, especially those who are in a position to instruct and supervise employees, or those who are responsible for maintaining corporate order, since cooperation with an investigation is itself the fulfilment of their duty to the company. Other employees are not compelled to cooperate with such an investigation unless it is deemed necessary and reasonable. No specific legal protection is provided for testifying in an investigation.

A company cannot force an employee to actively take part in a workplace investigation or to act as a witness. However, if a co-worker’s decision not to collaborate could be construed as an attempt to conceal evidence of wrongdoing, the company could then enforce disciplinary measures for this reason.

In our experience, employees tend to collaborate during workplace investigations and no retaliatory action can be taken against them for this reason. For example, if an employee provided evidence against his or her direct manager, the manager could not reprimand the employee or take any action that could be construed as such.

Due to the employee's duty of loyalty towards the employer and the employer's right to give instructions to its employees, employees generally must take part in an ongoing investigation and comply with any summons for questioning if the employer demands this (article 321d, Swiss Code of Obligations). If the employees refuse to participate, they generally are in breach of their statutory duties, which may lead to measures such as a termination of employment.

The question of whether employees may refuse to testify if they would have to incriminate themselves is disputed in legal doctrine.[1] However, according to legal doctrine, a right to refuse to testify exists if criminal conduct regarding the questioned employee or a relative (article 168 et seq, Swiss Criminal Procedure Code) is involved, and it cannot be ruled out that the investigation documentation may later end up with the prosecuting authorities (ie, where employees have a right to refuse to testify in criminal proceedings, they cannot be forced to incriminate themselves by answering questions in an internal investigation).[2]

When collecting physical evidence that contains personal information, the Personal Information Protection Law and its related guidelines apply. In addition, when collecting physical evidence that contains privacy information or an employee's photograph, care must be taken to ensure that the right to privacy and the image rights are not violated.

The General Data Protection Regulation and the Spanish Data Protection Law apply when gathering any type of evidence, including physical evidence. This means that companies may only process personal data when they have lawful grounds to do so and within the limits set forth for special categories of personal data (health, union affiliation, criminal records, etc.).

The Spanish Statute of Workers specifically states that employees and their possessions may be registered when it is necessary to protect the companies’ property (or the property of other co-workers). This registration must:

• be conducted in the workplace and during working hours;
• respect the employee’s privacy and dignity; and
• be performed in front of an employee representative or, if not possible, in the presence of another employee of the company.

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.

Since inspections of personal belongings may potentially undermine employees' fundamental human rights, they would not become lawful simply because they are conducted under employment regulations.

Inspections of personal belongings must be conducted uniformly among employees in the workplace based on reasonable grounds, in a generally reasonable manner and to a generally reasonable degree, and based on the work rules, etc.

When inspections of personal belongings are conducted under employment regulations, etc, employees must agree to the inspection except in special circumstances, such as the method or degree of the inspection being unreasonable.

On the other hand, an investigation of information stored on a company network system may constitute an infringement of the right to privacy. If there is a provision in the employment regulations regarding the use of the internet and monitoring, it is possible to investigate under such a provision. A Japanese court case on the illegality of reading e-mails in the absence of a monitoring provision stated that private use of e-mails also carries a certain right to privacy, but also stated that "considering the fact that the system is maintained and managed by the company, the protection of the employee's privacy can only be expected within a reasonable range according to the specific circumstances of the system," and that the act of reading e-mails was not illegal because the extent of private use of e-mails was beyond the limit, which was outside the reasonable range of socially accepted ideas. The court also ruled that the monitoring of the employee's abusive private use of e-mail, which was discovered in the course of an investigation of slanderous e-mails within the company, was not illegal because even if the monitoring was conducted without notice, there was suspicion of a violation of the duty of devotion to duty and corporate order. The court also stated that the investigation was necessary and that the scope of the investigation did not exceed its limit.

Please see question 7.

The basic rule is that the employer may not search private data during internal investigations.

If there is a strong suspicion of criminal conduct on the part of the employee and a sufficiently strong justification exists, a search of private data may be justified.[1] The factual connection with the employment relationship is given, for example, in the case of a criminal act committed during working hours or using workplace infrastructure.[2]

See question 4 regarding amendments to the Whistleblower Protection Act.

The person designated as a whistleblower response service employee must not divulge the name, employee ID number, or other information that would allow a whistleblower to be identified without a justifiable reason, and there is a criminal penalty of up to 300,000 yen for violating this duty of confidentiality.

Directive (EU) 2019/1937 of the European Parliament and of the Council, of 23 October 2019, on the protection of persons who report breaches of Union law, has been implemented in Spain through Law 2/2023 (Ley 2/2023, de 20 de febrero, reguladora de la protección de las personas que informen sobre infracciones normativas y de lucha contra la corrupción). This law limits the capacity of companies to retaliate or to take any action against employees who report workplace violations or breaches of the law. Any action taken against an employee in such a position would be considered null and void if challenged in court.

Spanish law allows anonymous reports to protect whistleblowers from retaliation.

If an employee complains to his or her superiors about grievances or misconduct in the workplace and is subsequently dismissed, this may constitute an unlawful termination (article 336, Swiss Code of Obligations). However, the prerequisite for this is that the employee behaves in good faith, which is not the case if he or she is (partly) responsible for the grievance.

See question 9 for the confidentiality obligations of a whistleblower response service employee.

Other than the above, there is no specific legal obligation to maintain confidentiality for persons in charge of investigations, etc. However, if the information falls under the category of confidential information obtained by employees in the course of their work, compliance is required as an obligation attached to a labour contract, and many employment regulations stipulate a duty to keep information obtained in the course of work confidential.

Companies and employees are not bound by any statutory confidentiality obligation in the context of workplace investigations. However, if a company’s enquiry has the potential to examine employees’ private affairs, then the company must ensure the confidentiality of the investigation.

This confidentiality obligation would not arise from the investigation itself, but from the company’s obligation to safeguard its employees’ rights.

Besides the employee's duty of performance (article 319, Swiss Code of Obligations), the employment relationship is defined by the employer's duty of care (article 328, Swiss Code of Obligations) and the employee's duty of loyalty (article 321a, Swiss Code of Obligations). Ancillary duties can be derived from the two duties, which are of importance for the confidentiality of an internal investigation.[1]

In principle, the employer must respect and protect the personality (including confidentiality and privacy) and integrity of the employee (article 328 paragraph 1, Swiss Code of Obligations) and take appropriate measures to protect the employee. Because of the danger of pre-judgment or damage to reputation as well as other adverse consequences, the employer must conduct an internal investigation discreetly and objectively. The limits of the duty of care are found in the legitimate self-interest of the employer.[2]

In return for the employer's duty of care, employees must comply with their duty of loyalty and safeguard the employer's legitimate interests. In connection with an internal investigation, employees must therefore keep the conduct of an investigation confidential. Additionally, employees must keep confidential and not disclose to any third party any facts that they have acquired in the course of the employment relationship, and which are neither obvious nor publicly accessible.[3]

There are no specific legal stipulations or requirements regarding information, etc, that must be provided to employees who are the subject of an investigation.

It is not necessary to inform an investigated employee about an enquiry or of the allegations made against him or her. The obligation to disclose would only arise when:

• interviewing the employee would be the least intrusive means to investigate the facts; or
• if disciplinary measures are implemented as a result of the investigation. Since employees are entitled to challenge all disciplinary measures against them, they could request a court of law to disclose all the findings of the investigation, to assess if these findings could be useful to challenge the disciplinary measure.

As a result of the employer's duty of care (article 328, Swiss Code of Obligations), employees under investigation have certain procedural rights. These include, in principle, the right of the accused to be heard. In this context, the accused has the right to be informed at the beginning of the questioning about the subject of the investigation and at least the main allegations and they must be allowed to share their view and provide exculpatory evidence.[1] The employer, on the other hand, is not obliged to provide the employee with existing evidence, documents, etc, before the start of the questioning.[2]

Covert investigations in which employees are involved in informal or even private conversations to induce them to provide statements are not compatible with the data-processing principles of good faith and the requirement of recognisability, according to article 4 of the Swiss Federal Act on Data Protection.[3]

Also, rights to information arise from the Swiss Federal Act on Data Protection. In principle, the right to information (article 8, Swiss Federal Act on Data Protection) is linked to a corresponding request for information by the concerned person and the existence of data collection within the meaning of article 3 (lit. g), Swiss Federal Act on Data Protection. Insofar as the documents from the internal investigation recognisably relate to a specific person, there is in principle a right to information concerning these documents. Subject to certain conditions, the right to information may be denied, restricted or postponed by law (article 9 paragraph 1, Swiss Federal Act on Data Protection). For example, such documents and reports may also affect the confidentiality and protection interests of third parties, such as other employees. Based on the employer's duty of care (article 328, Swiss Code of Obligations), the employer is required to protect them by taking appropriate measures (eg, by making appropriate redactions before handing out copies of the respective documents (article 9 paragraph 1 (lit. b), Swiss Federal Act on Data Protection)).[4] Furthermore, the employer may refuse, restrict or defer the provision of information where the company’s interests override the employee’s, and not disclose personal data to third parties (article 9 paragraph 4, Swiss Federal Act on Data Protection). The right to information is also not subject to the statute of limitations, and individuals may waive their right to information in advance (article 8 paragraph 6, Swiss Federal Act on Data Protection). If there are corresponding requests, the employer must generally grant access, or provide a substantiated decision on the restriction of the right of access, within 30 days (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 paragraph 4, Ordinance to the Federal Act on Data Protection).

For whistleblowing investigations, whistleblower protection is required (see question 9).

Witnesses and other sources of information are not protected by the Whistleblower Protection Act.

In addition, as a response to a report of harassment, the Ministry of Health, Labour and Welfare guidelines require that necessary measures be taken to protect the privacy of the reporter, the offender, and others, and that these measures be announced to the company.

As in question 10, the identity of the complainant or other employees involved in the investigation may be kept confidential and companies do not have to share their identity with investigated employees. Anonymous complaints are expressly allowed under Spanish law (see question 9).

Companies may have to produce this information and share it with the investigated employees if it is necessary to allow them to defend themselves from disciplinary measures taken against them. Similarly, in the context of litigation, an employee or plaintiff could request a Labour Court to order the company to disclose the details of the investigation.

As mentioned under Question 10, the employer’s duty of care (article 328, Swiss Code of Obligations) also entails the employer’s duty to respect and protect the personality (including confidentiality and privacy) and integrity of employees (article 328 paragraph 1, Swiss Code of Obligations) and to take appropriate measures to protect them.

However, in combination with the right to be heard and the right to be informed regarding an investigation, the accused also has the right that incriminating evidence is presented to them throughout the investigation and that they can comment on it. For instance, this right includes disclosure of the persons accusing them and their concrete statements. Anonymisation or redaction of such statements is permissible if the interests of the persons incriminating the accused or the interests of the employer override the accused’ interests to be presented with the relevant documents or statements (see question 11; see also article 9 paragraphs 1 and 4, Swiss Federal Act on Data Protection). However, a careful assessment of interests is required, and these must be limited to what is necessary. In principle, a person accusing another person must take responsibility for their information and accept criticism from the person implicated by the information provided.[1]

It is possible to use NDAs in investigations.

Yes. NDAs are the preferred instrument to ensure that employees conducting the investigation, as well as those who participate as witnesses or collaborators, will keep the enquiry and its existence confidential.

In addition to the above-mentioned statutory confidentiality obligations, separate non-disclosure agreements can be signed. In an internal investigation, the employee should be expressly instructed to maintain confidentiality.

There are no specific laws or rules for the provision of confidentiality privileges other than that provided by the Fair Trade Commission Rules, which allow companies that are the subject of investigations into cartels, bid rigging, etc, to treat communications with their lawyers as confidential. However, when a motion for an order to produce documents is filed in a court proceeding, if the requested documents are "documents exclusively for the use of the possessor of the documents", the obligation to produce the documents is not recognised. If the investigation materials fall under this category, it is possible to exclude them from the scope of the court order to produce documents.

As explained above, investigation materials are not protected by privilege per se. To protect the confidentially of these materials, it is advisable to enter into NDAs with the employees involved in the investigation.

As outlined above, all employees generally have the right to know whether and what personal data is being or has been processed about them (article 8 paragraph 1, Swiss Federal Act on Data Protection; article 328b, Swiss Code of Obligations).

The employer may refuse, restrict or postpone the disclosure or inspection of internal investigation documents if a legal statute so provides, if such action is necessary because of overriding third-party interests (article 9 paragraph 1, Swiss Federal Act on Data Protection) or if the request for information is manifestly unfounded or malicious. Furthermore, a restriction is possible if overriding the self-interests of the responsible company requires such a measure and it also does not disclose the personal data to third parties. The employer or responsible party must justify its decision (article 9 paragraph 5, Swiss Federal Act on Data Protection).[1]

The scope of the disclosure of information must, therefore, be determined by carefully weighing the interests of all parties involved in the internal investigation.

There is no legal right to have a legal representative present or appointed during the investigation.

A workplace investigation under Spanish law is a fact-finding exercise and not a disciplinary procedure. For this reason, employees are not entitled to representation during an investigation (it is not even necessary to inform them about the enquiry).

If the investigated employees are made aware of the investigation (eg, because they will be interviewed or questioned), then it is good practice to allow them to be accompanied by external counsel or an employee representative. This would reduce the risk that employees would claim that they were under duress during the interview, or that they challenge the validity of the evidence obtained by the company.

In the case of an employee involved in an internal investigation, a distinction must be made as to whether the employee is acting purely as an informant or whether there are conflicting interests between the company and the employee involved. If the employee is acting purely as an informant, the employee has, in principle, no right to be accompanied by their own legal representative.[1]

However, if there are conflicting interests between the company and the employee involved, when the employee is accused of any misconduct, the employee must be able to be accompanied by their own legal representative. For example, if the employee's conduct might potentially constitute a criminal offence, the involvement of a legal representative must be permitted.[2] Failure to allow an accused person to be accompanied by a legal representative during an internal investigation, even though the facts in question are relevant to criminal law, raises the question of the admissibility of statements made in a subsequent criminal proceeding. The principles of the Swiss Criminal Procedure Code cannot be undermined by alternatively collecting evidence in civil proceedings and thus circumventing the stricter rules applicable in criminal proceedings.[3]

In general, it is advisable to allow the involvement of a legal representative to increase the willingness of the employee involved to cooperate.

A labour union has no legal right to be involved in the investigation. However, if there is a provision in the collective bargaining agreement between the company and the labour union that allows the labour union to be involved in an investigation conducted by the company or to receive disclosure of the results of an investigation, then such a provision should be followed.

As explained in question 15, employees are not entitled to representation during an investigation. However, if a disciplinary procedure starts as a result of the investigation, employee representatives may be entitled to be informed of the disciplinary procedure and its outcome.

The degree and timing of when employee representatives must be involved will depend on several factors such as:

• the employee’s affiliation to a union;
• if the employee is an employee representative;
• the seriousness of the potential sanction to be imposed; and
• the information rights that the applicable collective bargaining agreement acknowledges regarding employee representatives.

In general, works councils and trade unions are not very common in Switzerland and there are no statutory rules that would provide a works council or trade union a right to be informed or involved in an ongoing internal investigation. However, respective obligations might be foreseen in an applicable collective bargaining agreement, internal regulations or similar.

There is no legally established assistance programme.

For the reasons outlined in question 15, companies sometimes choose to voluntarily provide support to employees involved in the investigation (to ensure that evidence was lawfully obtained during the interview and is valid).

For investigated employees, one available support mechanism is for the company to cover the legal fees of an external counsel during the investigation or to offer to involve employee representatives. Reassurance may be provided to witnesses by guaranteeing, in writing, that their involvement in the investigation will be kept confidential and will not result in a detriment.

The employer does not generally need to provide specific support for employees that are subject to an internal investigation. The employer may, however, allow concerned employees to be accompanied by a trusted third party such as family members or friends.[1] These third parties will need to sign separate non-disclosure agreements before being involved in the internal investigation.

In addition, a company may appoint a so-called lawyer of confidence who has been approved by the employer and is thus subject to professional secrecy. This lawyer will not be involved in the internal investigation but may look after the concerned employees and give them confidential advice as well as inform them about their rights and obligations arising from the employment relationship.[2]

Even if a matter arises that is not subject to the investigation, it can be used as an opportunity to conduct another investigation.

The issue with revealing unrelated matters to the investigation is that it may jeopardise the entire enquiry. If the unrelated matters are private or the disclosure is construed as a breach of employees’ fundamental rights, then the materials gathered during the investigation could be considered to be unlawfully obtained and would not be admitted as evidence in court.

Moreover, the employee could seek damages and a fine could be imposed on the company for breaching its employee’s rights.

Finally, if unrelated matters are revealed, it could be a clear sign that the company has failed to conduct a diligent investigation and use the least intrusive means available to it (see question 1). One of the reasons to minimise the number of employees conducting the investigation (see question 4) is to reduce damages if matters unrelated to the investigation are revealed.

There are no regulations in this regard in the Swiss employment law framework. However, in criminal proceedings, the rules regarding accidental findings apply (eg, article 243, Swiss Criminal Procedure Code for searches and examinations or article 278, Swiss Criminal Procedure Code for surveillance of post and telecommunications). In principle, accidental findings are usable, with the caveat of general prohibitions on the use of evidence.

Whether or not an investigation should be suspended when an employee under investigation files a complaint depends on the specific circumstances. There is no legal requirement to suspend the investigation.

Spanish law does not regulate grievance processes and most companies do not have an internal grievance procedure. The only way in which an employee can formally challenge an investigation is by filing a lawsuit or lodging a claim with the Labour Inspectorate (see question 5).

To the extent that the company can show that the investigation is unrelated to the complaint (ie, that the investigation is not retaliation for filing the complaint), the claim should be seen as neutral from the perspective of the enquiry.

In the context of private internal investigations, grievances initially raised by the employee do not usually have an impact on the investigation.

However, if the employer terminates the employment contract due to a justified legal complaint raised by an employee, a court might consider the termination to be abusive and award the employee compensation in an amount to be determined by the court but not exceeding six months’ pay for the employee (article 336 paragraph 1 (lit. b) and article 337c paragraph 3, Swiss Code of Obligations). Furthermore, a termination by the employer may be challenged if it takes place without good cause following a complaint of discrimination by the employee to a superior or the initiation of proceedings before a conciliation board or a court by the employee (article 10, Federal Act on Gender Equality).

The company will seek a physician's diagnosis and opinion and determine whether to proceed with the investigation. If an employee’s mental health suffers because of the investigation, the company may be charged with a violation of its duty of care.

Like in the case of grievances (see question 19), the deciding factor will be assessing whether sick leave is related to the investigation or not.

If there is no link between the investigation and the sick leave, then the leave is not relevant from the point of view of the investigation. However, if the sick leave was a result of the investigation (for instance, an employee taking sick leave due to anxiety related to the investigation), then the convenience of pursuing the investigation or of temporarily suspending it should be evaluated to avoid any liability for the company.

The time spent on the internal investigation by the employee should be counted as working time[1]. The general statutory and internal company principles on sick leave apply. Sick leave for which the respective employee is not responsible must generally be compensated (article 324a paragraph 1 and article 324b, Swiss Code of Obligations). During certain periods of sick leave (blocking period), the employer may not ordinarily terminate the employment contract; however, immediate termination for cause remains possible.

The duration of the blocking period depends on the employee's seniority, amounting to 30 days in the employee's first year of service, 90 days in the employee's second to ninth year of service and 180 days thereafter (article 336c paragraph 1 (lit. c), Swiss Code of Obligations).

It is possible to proceed with an investigation of a company even if there are concurrent criminal proceedings. It is up to the company to decide whether or not to proceed. The company may submit collected evidence collected to the police. The police will rarely disclose or provide the company with evidence they have collected. Usually, upon request by the police or regulator, the workplace investigation would be stayed. The police or regulator has to take legally required steps if compelling the employer to share evidence.

Criminal or regulatory investigations may (and usually do) run in parallel to workplace investigations.

There is no need to stay the internal investigation and, in practice, this normally is not possible or advisable considering the substantially longer timeframe of criminal or regulatory investigations (which can extend for several months or years).

The police or a regulator may request a company to share any relevant information that it might have on the facts being reviewed by them. However, the company’s obligation to provide that information would have to be reviewed on a case-by-case basis, depending on the information being requested (eg, whether it is sensitive to the business, such as trade secrets or internal correspondence) and the grounds to do so (if the police or regulator have a search warrant issued by a court or not).

The actions of the employer may carry through to a subsequent state proceeding. First and foremost, any prohibitions on the use of evidence must be considered. Whereas in civil proceedings the interest in establishing the truth must merely prevail for exploitation (article 152 paragraph 2, Swiss Civil Procedure Code), in criminal proceedings, depending on the nature of the unlawful act, there is a risk that the evidence may not be used (see question 27 and article 140 et seq, Swiss Civil Procedure Code).

Although there is no legal obligation to report the results of the investigation to the employee, when taking disciplinary action it is generally necessary, from a due process point of view, to explain the facts of the disciplinary action and the results of the investigation, and to allow the employee to explain him or herself. Particularly in the case of serious disciplinary actions such as dismissal, failure to provide an adequate opportunity for an explanation is a possible ground for denying the validity of the disciplinary action.

Employees under investigation are not entitled to be informed about the investigation or its outcome. As set out above (see question 11), an employee would have a right to be informed about the outcome of an investigation if the employer takes any disciplinary actions as a consequence of the enquiry.

The reason to disclose the details of the investigation is to allow the employee to adequately defend him or herself from the alleged breaches.

Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.

The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]

There is no legal obligation to share reports of findings. Therefore, the company may share only the summary or the entire report at its discretion.

Since workplace investigations are not regulated in Spain, there are no clear rules as to the amount of information on the investigation that would need to be shared with an employee if the company was compelled to disclose the enquiry (see questions 11 and 22). A good rule of thumb is that an employee should have access to all the information that is relevant to be in a position to oppose the alleged breaches.

Moreover, if the disciplinary measures taken were challenged before a Labour Court – employees in Spain tend to challenge these types of measures – the plaintiff could request the Labour Court to order the company to produce all of the investigation details, including the findings and the full investigation report.

Finally, companies will normally have an interest in producing a report that clearly states the moment in which the fact-finding exercise was concluded and the company had a full picture of the facts. This is because the statute of limitations to sanction employment breaches, which ranges from 10 to 60 days depending on the seriousness of the misconduct, starts to count when the company has a comprehensive view of the events (which would coincide with the date the investigation report was issued).

In principle, there is no obligation to disclose the final investigation report. Disclosure obligations may arise based on data protection law vis-à-vis the persons concerned (eg, the accused). Likewise, there is no obligation to disclose other documents, such as the records of interviews. The employee should be fully informed of the final investigation report, if necessary, with certain redactions (see question 22). The right of the employee concerned to information is comprehensive (ie, all investigation files must be disclosed to him).[1] Regarding publication to other bodies outside of criminal proceedings, the employer is bound by its duty of care (article 328, Swiss Code of Obligations) and must protect the employee as far as is possible and reasonable.[2]

In an investigation into an employee's misconduct, based on the results of the investigation, disciplinary action will be considered if there are grounds for disciplinary action, and dismissal will also be considered. Personnel actions (eg, dismissal, reassignment) may also be taken.

After the conclusion of the enquiry, a company may choose to:

• close the investigation without taking any additional action; or
• adopt disciplinary measures against the employee.

These could range from a verbal or written warning to the suspension of work and pay for a set period. Disciplinary dismissals are also possible, but they are reserved for very serious offences.

Note that any disciplinary measure will have to follow the procedures that might be established in the applicable collective bargaining agreement, such as informing employee representatives or following a grievance procedure before adopting the measure.

If the investigation uncovers misconduct, the question arises as to what steps should be taken. Of course, the severity of the misconduct and the damage caused play a significant role. Furthermore, it must be noted that the cooperation of the employee concerned may be of decisive importance for the outcome of the investigation. The possibilities are numerous, ranging, for example, from preventive measures to criminal complaints.[1]

If individual disciplinary actions are necessary, these may range from warnings to ordinary or immediate termination of employment.

If it is information related to a crime, and if it is necessary to report it to the supervisory authority, it is necessary and possible to report it even if the content relates to personal information. There is no obligation to report to the police even if one is aware of a criminal fact. However, it is possible to use the results of an investigation to file a complaint or charge with the police. It is also possible to use the results of the investigation to realise the company's rights (eg, to claim damages based on tortious behaviour).

Companies may only disclose the outcome of an investigation to employees or officers of the company who are empowered to adopt the measures that are necessary because of the investigation’s results (see question 4).

This disclosure obligation does not extend to authorities: while there is a general obligation to report criminal or administrative offences to the competent authorities, this obligation must be read in line with the companies’ right not to self-report themselves. What a company must not do is cover up, aid or otherwise become an accessory to the offence.

The employer is generally not required to disclose the final report, or the data obtained in connection with the investigation. In particular, the employer is not obliged to file a criminal complaint with the police or the public prosecutor's office.

Exceptions may arise, for example, from data protection law (see question 22) or a duty to release records may arise in a subsequent state proceeding.

Data voluntarily submitted in a proceeding in connection with the internal investigation shall be considered private opinion or party assertion.[1] If the company refuses to hand over the documents upon request, coercive measures may be used under certain circumstances.[2]

Records related to responses to whistleblowing must be kept for an appropriate period, but there is no legal stipulation on the retention period. Each entity is required to set an appropriate period after considering the need for evaluation and inspection, and the handling of individual cases. There is no legally stipulated retention period for other investigation results.

The outcome of the investigation will contain personal data of the affected employee. For this reason, this information should only be kept for as long as a legal obligation or liability in connection with the information could arise for the company. Since the general statute of limitations for employment liability is one year, this is a good guideline.

In addition to the above, two specific rules apply:

• once the information becomes irrelevant for the purpose for which it was obtained and processed, the information should no longer be stored on the employee’s record or elsewhere; and
• the employees’ information (including those of the reporter and the affected employees) should only be stored in whistleblower systems during the time that is necessary to decide on whether the facts need to be investigated or not and, in any case, for a maximum period of three months.

From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.

From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]

If the company deviates from appropriate social rules in its investigative methods and means, it will be liable for tortious behaviour. If disciplinary action or dismissal is taken based on erroneous investigation results, the validity of such action or dismissal will be denied, the employee will be able to claim for back wages, and, in some cases, claim for compensation.

Errors during an investigation are normally linked to the breach of the employees’ privacy or their personal data rights (see question 1). Breaching these rights might expose employers to:

• Fines from the Labour Inspectorate and the Spanish Data Protection Authority.
• A court awarding damages to the employee.
• Any disciplinary measures adopted by the company as a result of the investigation could be considered null and void.
• The evidenced obtained during the investigation being disregarded by a court.
• In some very serious cases, criminal liability might arise for the individuals who conducted the investigation and breached the employees’ rights.

As there are no specific regulations for internal investigations, the usual legal framework within which the employer must act towards the employee derives from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights.

But, for example, unwarranted surveillance could conceivably result in criminal liability (article 179 et seq, Swiss Criminal Code) for violations of the employee's privacy. Furthermore, errors made by the employer could have an impact on any later criminal proceedings (eg, in the form of prohibitions on the use of evidence).[1]

Evidence obtained unlawfully may only be used in civil proceedings if there is an overriding interest in establishing the truth (article 152 paragraph 2, Swiss Civil Procedure Code). Consequently, in each case, a balance must be struck between the individual’s interest in not using the evidence and in establishing the truth.[2] The question of the admissibility of evidence based on an unlawful invasion of privacy is a sensitive one – admissibility in this case is likely to be accepted only with restraint.[3] Since the parties in civil proceedings do not have any means of coercion at their disposal, it is not necessary, in contrast to criminal proceedings, to examine whether the evidence could also have been obtained by legal means.[4]

Unlawful action by the employer may also have consequences on future criminal proceedings: The prohibitions on exploitation (article 140 et seq, Swiss Criminal Procedure Code) apply a priori only to evidence obtained directly from public authorities. Evidence obtained unlawfully by private persons (ie, the employer) may also be used if it could have been lawfully obtained by the authority and if the interest in establishing the truth outweighs the interest of the individual in not using the evidence.[5] Art. 140 paragraph 1 Swiss Criminal Procure Code remains reserved: Evidence obtained in violation of Art. 140 paragraph 1 Swiss Criminal Procure Code is subject to an absolute ban on the use of evidence (e.g. evidence obtained under the use of torture[6]).[7]