Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
01. What legislation, guidance and/or policies govern a workplace investigation?
01. What legislation, guidance and/or policies govern a workplace investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Before commencing a workplace investigation, an employer must review the terms of any applicable employment contract, policy, procedure or industrial instrument. These documents will likely contain clauses that will dictate the investigation process.
There is also a significant body of common law that dictates how an investigation should be conducted and the procedural fairness that should be afforded to those involved. To ensure a workplace investigation is procedurally fair, employers must consider several factors, including:
- putting all allegations to the respondent in a manner which does not suggest a pre-determination of the outcome;
- conducting the investigation in a timely manner;
- providing the respondent with the opportunity to respond to the allegations;
- conducting a fair investigation process;
- making an unbiased (and not pre-determined) decision; and
- permitting the respondent and complainant to involve a support person or union representative.
Employers should also consider the additional steps they can take to conduct a best-practice investigation, including:
- being thorough and taking the time to plan the investigation;
- communicating clearly and fairly;
- considering whether the allegations are indicative of a wider workplace behaviour problem;
- maintaining confidentiality; and
- preventing victimisation.
Japan
Japan
- at Mori Hamada & Matsumoto
There is no specific legislation, guidance or policies covering investigations in the workplace. Issues such as the Personal Data Protection Law, invasion of privacy, and infringement of freedoms may arise regarding the related parties, subjects, methods, and results of investigations. In addition, court decisions have stated that "when there has been a violation of corporate order, an investigation of the facts may be conducted to clarify the nature of the violation, issue business instructions or orders necessary to restore the disturbed order or take disciplinary action against the violator as a sanction”. The investigation or order must be reasonable and necessary for the smooth operation of the enterprise, and the method and manner of the investigation or order must not be excessive or restrain an employee's personality or freedom. In such a case, the investigation may be considered to be illegal and may constitute a tort.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Workplace investigations in Sweden are governed by several rules and regulations. Listed below are the central legislation and regulations that govern a workplace investigation related to alleged employee misconduct.
- The Swedish Discrimination Act (2008:567).
- The Swedish Work Environment Act (1977:1160), which is complemented by the Swedish Work Environment Authority’s other statutes.[1]
- The Swedish Whistleblowing Act (2021:890).
If a workplace investigation has been initiated after the receipt of a report filed through a reporting channel established under the Swedish Whistleblowing Act, that law applies provided that the report has been filed by a person who may report under the Act and provided that the subject of the report falls under the material scope of the Act. The Swedish Whistleblowing Act implements Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law and has been given a wide material scope in Sweden. The Swedish Whistleblowing Act may apply if the reported irregularity concerns breaches of certain EU laws or if the reported irregularity is of public interest.
In addition to the regulations mentioned above, certain data protection legislation may affect workplace investigations by restricting what personal data may be processed. Such data protection legislation includes the following:
- Regulation (EU) 2016/679 on the protection of natural persons concerning the processing of personal data and the free movement of such data (the GDPR);
- the Swedish Supplementary Data Protection Act (2018:218);
- the Swedish Supplementary Data Protection Regulation (2018:219);
- Regulation DIFS:2018:2 on the processing of personal data relating to criminal convictions or offences. This regulation governs the processing of personal data relating to criminal convictions or suspected criminal offences in internal workplace investigations that are not governed by the Swedish Whistleblowing Act.[2]
The above-mentioned legislation and regulations may overlap in many aspects and it is therefore important before starting an investigation, as well as during an investigation, to assess which rules and regulations apply to the situation at hand. Another aspect of this is that many issues that can arise during an investigation are not regulated by law or other legislation. If the investigation is a non-whistleblowing investigation there are limited rules on exactly how and by whom the investigation should be carried out.
A Swedish law firm that undertakes a workplace investigation also has to adhere to the Swedish Bar Association’s Code of Conduct. The Code of Conduct includes additional considerations, mainly ethical, which will not be addressed in this submission. Furthermore, this submission will not focus on investigations following an employee’s possible misappropriation of proprietary information or breach of the Swedish Trade Secrets Act (2018:558). Investigations into such irregularities are often conducted to gather evidence and these investigations include the same or similar investigative measures used in other investigations, such as interviews with employees and IT-forensic searches, but also infringement investigations carried out by the authorities or other measures by the police.
[1] Mainly Systematic Work Environment Management (AFS 2001:1), Organisational and Social Work Environment (AFS 2015:4) and Violence and Menaces in the Working Environment (AFS 1993:2)
[2] Under Section 2 item 4 of DIFS 2018:2, personal data relating to criminal convictions or suspected criminal offences may only be processed if the personal data concerns serious misconduct, such as bribery, corruption, financial fraud or serious threats to the environment, health and safety, by an individual who is in a leading position or who is considered key personnel within the company. The processing of personal data received in a report or collected during an investigation governed by the Swedish Whistleblowing Act is instead governed by the Swedish Whistleblowing Act, which complements the GDPR and the supplementing Swedish act and regulation stated in item (ii) and (iii) above.
02. How is a workplace investigation usually commenced?
02. How is a workplace investigation usually commenced?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
A workplace investigation will generally be triggered by an employee making a complaint; however, issues may also be brought to the attention of an employer through an anonymous tip, by suppliers or contractors, from customers or because of observations and hearsay.
Complaints can be made directly to Human Resources (HR), anonymously, by email to a line manager or a third party. While complaints do not need to be written and can be informal, brief or verbal, complaints of this nature can make the process harder and more information may be required.
The receipt of a complaint does not necessarily mean that an employer needs to undertake an investigation immediately. A grievance policy ordinarily contains a multi-step approach to dealing with complaints, starting with internal resolution options such as informal discussions, conciliation and mediation. However, an investigation should be commenced where:
- the complaint alleges serious misconduct or unlawful conduct;
- the employer is required to conduct a workplace investigation as per an employment contract, policy, procedure or industrial instrument; or
- the complaint is complex and requires clarity on what has occurred to establish the facts.
Japan
Japan
- at Mori Hamada & Matsumoto
The trigger for an investigation in the workplace may be:
- when an employee makes a report (eg, a report of harassment, a report of misconduct by another employee, etc);
- when an investigation is conducted by the Labour Standards Inspection Office or another regulatory agency;
- when a criminal or illegal act is discovered in the workplace; or
- when an internal audit conducted by the company reveals a problem.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
An investigation can be initiated in several ways. It is usually as a result of whistleblowing or a report on work environment deficiencies, or through other channels (eg, HR, the police, media coverage).
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
03. Can an employee be suspended during a workplace investigation? Are there any conditions on suspension (eg, pay, duration)?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
It is an important consideration as to whether any of the employees involved in the investigation should be suspended, stood down or asked to undertake alternative duties for the period of the investigation. This decision will need to be made taking into consideration the nature of the complaint, any further damage to workplace relationships that could be caused by employees continuing to interact with each other, and potential work, health and safety issues.
It should not be automatic that the respondent is suspended as the employer will need to consider whether this is necessary in the circumstances. However, a period of suspension should be considered where:
- the allegations involve serious misconduct;
- there is a risk that the conduct will continue throughout the investigation;
- the respondent’s presence could exacerbate the situation; or
- the respondent’s presence could be disruptive to the investigation.
As an alternative to suspension, other options include working from home, performing amended duties or moving to a different workspace.
If an employee is suspended then they should ordinarily receive their full pay for this period. There are some exceptions to this, for example, if the employee is a casual employee or if a policy, employment contract or other industrial instrument allows the employee to be suspended without pay.
Generally, there is no minimum or maximum period a suspension should last, as this will depend on the length of the investigation.
Japan
Japan
- at Mori Hamada & Matsumoto
Court precedent states that a valid requirement for a stay-at-home order is it “would not be considered to put employees at a legal disadvantage (deprive them of their rights and imposes obligations on them), except in exceptional cases where employees are legally entitled to request work, unless there are special circumstances such as discrimination in salary increases and the like." (Tokyo High Court decision 25 January 2012, All Japan Mariners' Union). Therefore, it is considered possible to order the employee to stay at home during the investigation period if necessary. Some companies stipulate in their work rules that they may order employees to take special leave or stay at home when an incident occurs that could be the subject of disciplinary action.
In principle, the payment of salary in full during the stay-at-home period is required. However, work rules may stipulate that an employee will not be paid during the investigation period, and in cases where the employee is clearly responsible and it is inappropriate to allow the employee to work (eg, where it is almost certain that the employee has embezzled money on the job), the employee may be ordered to stay at home without pay. In addition, if the work rules stipulate that an absence allowance under the Labour Standards Law (60% or more of wages) must be paid for the stay-at-home period, such an allowance may be paid under the said rules.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
In general, an employee in the private sector may be temporarily suspended for a short period with pay and other benefits during a workplace investigation. The room for suspension without pay is, by contrast, very limited. An applicable collective bargaining agreement may impose additional restrictions on the right to temporary suspend an employee. The suspension should be limited in time and only be in force during the investigation, but can be repeated for (multiple) additional short periods if necessary to conclude the investigation. An assessment needs to be made on a case-by-case basis as suspension in some cases may be considered unlawful. If not executed with sufficient consideration of the employee’s interests, it may be considered a constructive dismissal or a breach of the employer’s work environment obligations. If the employee is unionised, trade unions sometimes request that the employer initiates consultations as part of a decision to suspend an employee.
In the public sector, the right to suspension is limited. There are also special regulations regarding the suspension of certain employees, for example, employees who are employed as permanent judges.
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
04. Who should conduct a workplace investigation, are there minimum qualifications or criteria that need to be met?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Once the decision to undertake a workplace investigation has been made, it is important to decide who is the most appropriate person to conduct the investigation. For the investigation process to run smoothly a single lead investigator should be selected, although they may work with a larger team. The lead investigator and investigation team can be internally or externally appointed.
In deciding whether to appoint an external investigator an employer should consider:
- the nature of the allegations;
- the seniority of the respondent;
- whether a fair investigation can be conducted internally without any actual or perceived bias;
- whether there is a dedicated HR department with someone who has the required capability, skills and experience to conduct the investigation; and
- whether the employer wants the investigation to be covered by legal professional privilege.
If the employer decides to investigate the matter internally without appointing a third party, then the investigator does not need to have any specific qualifications. However, it is prudent to confirm that the investigator has the time and skills to conduct the investigation and that they can be objective.
Japan
Japan
- at Mori Hamada & Matsumoto
There are no specific qualifications or requirements for an investigator. In many cases, the investigation is handled by a department or employee as deemed appropriate by the company. In some cases, an outside attorney may be asked to handle the investigation. Also, when it is a serious matter for the company, a third-party committee may be formed and commissioned to conduct an investigation.
However, under the revision of the Whistleblower Protection Act, which came into effect in June 2022, entities employing 300 or more employees must designate a person (whistleblower response service employee) in charge of accepting internal whistleblowing reports, investigating internal whistleblowing reports, or taking corrective measures as a whistleblower response service provider. Entities with less than 300 employees must also make an effort to do the same.
The person designated as a whistleblower response service provider must not divulge the name, employee ID number, or other information that would enable whistleblower identification without a justifiable reason. Criminal penalties (fines of up to 300,000 yen) have been established for violations of this confidentiality obligation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the workplace investigation falls under the Swedish Whistleblowing Act, the investigation has to be conducted by independent and autonomous persons or entities designated under the Swedish Whistleblowing Act as competent to investigate reports.
If the workplace investigation is not governed by the Swedish Whistleblowing Act, there are no minimum qualification requirements. When appointing an investigator, one should consider who would be most suitable in the given situation. For example, it may in some situations be more suitable to have an external investigator to ensure impartiality.
05. Can the employee under investigation bring legal action to stop the investigation?
05. Can the employee under investigation bring legal action to stop the investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
The respondent has several rights including the right to have the complaint investigated in a fair, impartial and adequate manner, to hear the allegations in full and to not be victimised. However, there is no avenue for a respondent to bring legal action to stop a procedurally fair investigation.
In 2014, Australia introduced an anti-bullying jurisdiction which gave the Fair Work Commission (FWC) the powers to issue a Stop Bullying Order. There have been circumstances where it has been successfully argued that an investigation itself amounted to bullying and accordingly the respondent applied to the FWC for a Stop Bullying Order to suspend the investigation.
Japan
Japan
- at Mori Hamada & Matsumoto
There are very few cases in which an employee subject to an investigation can file a legal proceeding to have the investigation stopped. Theoretically, an employee may be able to file a lawsuit or a provisional disposition to stop the investigation if he or she has a legal right to request that the company stop the investigation, but usually a lawsuit or a petition for a provisional disposition alone will not stop an investigation from proceeding. Although a provisional injunction would conclude in a relatively short period, such a provisional injunction would be unlikely to be issued if the investigation is conducted properly.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
No. It should, however, be noted that the employee under investigation may claim a right to rectification under article 16 of the GDPR and its right to object to processing under article 21 of the GDPR. This may give the employee under investigation an undesirable opportunity to withhold evidence and obstruct or impede the investigation. The risk of these rights being exercised is, however, considered to be low.
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
06. Can co-workers be compelled to act as witnesses? What legal protections do employees have when acting as witnesses in an investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Co-workers can be interviewed as part of an investigation where they are witnesses to a complaint. If the employee refuses to attend the interview or is generally not cooperating with the investigation, the reasons for this will need to be considered carefully by the employer. Employers should consider whether there can be any amendments made to the interview process to accommodate the employee. However, an employer can make a reasonable and lawful direction to an employee to attend an interview. If an employee fails to comply with a lawful and reasonable direction, then it may constitute grounds for disciplinary action.
Witnesses who are employees are entitled to the legal protections that ordinarily attach to their employment, including not being bullied, discriminated against, or harassed and having their health and safety protected. Employers should also ensure that witnesses are not victimised as a result of participating in the investigation and that confidentiality is maintained.
Japan
Japan
- at Mori Hamada & Matsumoto
Interviewing co-workers is often conducted in internal investigations. Company employees are generally required to cooperate with company investigations, especially those who are in a position to instruct and supervise employees, or those who are responsible for maintaining corporate order, since cooperation with an investigation is itself the fulfilment of their duty to the company. Other employees are not compelled to cooperate with such an investigation unless it is deemed necessary and reasonable. No specific legal protection is provided for testifying in an investigation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
In general, yes, employees in Sweden have a far-reaching duty of loyalty toward their employers. This includes, among other things, a duty to truthfully answer an employer’s questions and to inform the employer of events that may be of interest to the employer. An employee’s obligation to assist is, however, more limited when assistance would entail self-incrimination.
A person acting as a witness under an investigation governed by the Swedish Whistleblowing Act will be protected by confidentiality. Personal data and details that could reveal the identity of a witness may not be disclosed without authorisation.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
As part of an investigation, the investigator may want to collect evidence such as camera footage from CCTV, swipe card records, computer records, telephone records or recordings and GPS tracking. There are state-based workplace surveillance laws that operate in each jurisdiction in Australia. The laws recognise that employers are justified in monitoring workplaces for proper purposes, but this is balanced against employees’ reasonable expectations of privacy.
The Privacy Act 1988 (Cth) (Privacy Act) also regulates how certain organisations handle personal information, sensitive personal information and employee records. The Privacy Act contains 13 privacy principles that regulate the collection and management of information. Employers should familiarise themselves with the privacy principles before conducting any investigation to ensure they are not in breach when gathering evidence.
Japan
Japan
- at Mori Hamada & Matsumoto
When collecting physical evidence that contains personal information, the Personal Information Protection Law and its related guidelines apply. In addition, when collecting physical evidence that contains privacy information or an employee's photograph, care must be taken to ensure that the right to privacy and the image rights are not violated.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
To the extent the gathering of physical evidence includes the processing of personal data, please see question 1.
08. Can the employer search employees’ possessions or files as part of an investigation?
08. Can the employer search employees’ possessions or files as part of an investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
The starting position is that there is no general right for an employer to search an employee’s possessions. However, an employer may be able to undertake a search in circumstances where:
- the employee consents to the search;
- there is a “right to search” contained in a contract, policy, procedure or industrial instrument; or
- the request to search constitutes a lawful and reasonable direction.
If an employee agrees to a search of their possessions, this consent should be confirmed in writing. If the employee does not consent then the employer can issue a direction to the employee. If the direction is lawful and reasonable, and the employee does not comply, then disciplinary action may be considered.
Japan
Japan
- at Mori Hamada & Matsumoto
Since inspections of personal belongings may potentially undermine employees' fundamental human rights, they would not become lawful simply because they are conducted under employment regulations.
Inspections of personal belongings must be conducted uniformly among employees in the workplace based on reasonable grounds, in a generally reasonable manner and to a generally reasonable degree, and based on the work rules, etc.
When inspections of personal belongings are conducted under employment regulations, etc, employees must agree to the inspection except in special circumstances, such as the method or degree of the inspection being unreasonable.
On the other hand, an investigation of information stored on a company network system may constitute an infringement of the right to privacy. If there is a provision in the employment regulations regarding the use of the internet and monitoring, it is possible to investigate under such a provision. A Japanese court case on the illegality of reading e-mails in the absence of a monitoring provision stated that private use of e-mails also carries a certain right to privacy, but also stated that "considering the fact that the system is maintained and managed by the company, the protection of the employee's privacy can only be expected within a reasonable range according to the specific circumstances of the system," and that the act of reading e-mails was not illegal because the extent of private use of e-mails was beyond the limit, which was outside the reasonable range of socially accepted ideas. The court also ruled that the monitoring of the employee's abusive private use of e-mail, which was discovered in the course of an investigation of slanderous e-mails within the company, was not illegal because even if the monitoring was conducted without notice, there was suspicion of a violation of the duty of devotion to duty and corporate order. The court also stated that the investigation was necessary and that the scope of the investigation did not exceed its limit.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
An employer can search an employee’s personal possessions (eg, handbag, pockets and locker) if the employer has a legitimate interest in a search. This could, for example, include a reasonable suspicion of theft of employer property. Furthermore, an employer may search, but not continually monitor, an employee’s computer and email provided that it is in accordance with GDPR requirements. For the processing to be lawful under the GDPR, the employer has to establish a purpose and a legal basis for the processing of personal data. Furthermore, data subjects must have received information on the legal basis for and purpose of the processing of personal data beforehand. If the data subjects have not received such information, the employer’s right to process their data is limited. However, if the employer has reasonable grounds to believe that trade secrets or similar has been copied and stolen, no such requirements would typically apply.
Investigations into an employee's possessions may, under certain circumstances, also be carried out by the Swedish authorities.
09. What additional considerations apply when the investigation involves whistleblowing?
09. What additional considerations apply when the investigation involves whistleblowing?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
A complaint will be a whistleblowing complaint where a complainant has reasonable grounds to suspect that the information they are disclosing about the organisation concerns misconduct or an improper state of affairs or circumstances. The information can be about the organisation or an officer or employee of the organisation engaging in conduct that:
- breaches the Corporations Act 2001 (Cth);
- breaches other financial sector laws;
- breaches any other law punishable by 12 months’ imprisonment; or
- represents a danger to the public or the financial system.
Since 2020, all public companies, large proprietary companies and trustees of registrable superannuation entities in Australia are required to have a whistleblower policy. Employers conducting an investigation will need to follow the processes outlined in their policy.
One of the key differences when conducting an investigation that involves whistleblowing is identity protection and the ability of the whistleblower to disclose anonymously and remain anonymous.
Japan
Japan
- at Mori Hamada & Matsumoto
See question 4 regarding amendments to the Whistleblower Protection Act.
The person designated as a whistleblower response service employee must not divulge the name, employee ID number, or other information that would allow a whistleblower to be identified without a justifiable reason, and there is a criminal penalty of up to 300,000 yen for violating this duty of confidentiality.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the Swedish Whistleblowing Act governs the investigation, additional considerations apply relating to who may investigate a reported irregularity (see question 4) and the duty of confidentiality and restrictions on access to and disclosure of personal data in investigations (see questions 6, 10 and 11), as well as the rights and protections of whistleblowers.
As regards the rights and protections of whistleblowers, the following can be noted. A person reporting in a reporting channel governed by the Swedish Whistleblowing Act is protected against retaliation and restrictive measures. Thus, companies are prohibited from preventing or trying to prevent a person from reporting, and retaliating against a person who reports. Furthermore, a reporting person will not be held liable for breach of confidentiality for collecting the reported information if the person had reasonable grounds to believe that it was necessary to submit the report to expose irregularities. Under the Swedish Whistleblowing Act, any person reporting irregularities in a reporting channel established under the Swedish Whistleblowing Act may also report irregularities to designated Swedish authorities.
10. What confidentiality obligations apply during an investigation?
10. What confidentiality obligations apply during an investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Confidentiality protects the interests of the persons involved in the investigation as well as the integrity of the investigation. Before providing information as part of the investigation, employers should direct the complainant, respondent or witnesses to sign confidentiality agreements. This agreement should direct the person to refrain from discussing the investigation or matters that are the subject of the investigation with any person other than the investigator.
It is also best practice for participants in the investigation to be directed not to victimise (threaten or subject to any detriment) any persons who are witnesses to or are otherwise involved in the investigation.
After an investigation, employers should write to the complainant, respondent and any witnesses reminding them of their ongoing confidentiality obligations.
Japan
Japan
- at Mori Hamada & Matsumoto
See question 9 for the confidentiality obligations of a whistleblower response service employee.
Other than the above, there is no specific legal obligation to maintain confidentiality for persons in charge of investigations, etc. However, if the information falls under the category of confidential information obtained by employees in the course of their work, compliance is required as an obligation attached to a labour contract, and many employment regulations stipulate a duty to keep information obtained in the course of work confidential.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the Swedish Whistleblowing Act applies, the persons or entities handling the investigation have a duty of confidentiality and may not, without permission, disclose any information that could reveal the identity of the reporting person, any person subject to the report or any other person mentioned in the report or during the investigation of the report. Access to personal data is limited to designated competent entities or persons. Investigative material including personal data may not be shared with other persons or entities during the investigation. Once the investigation has reached actionable conclusions, investigative material may be shared with other persons or entities, such as HR or the police, provided that such sharing is necessary to take action on the outcome of the investigation. Investigative material may also be shared if it is necessary for the use of reports as evidence in legal proceedings or under the law or other regulations.
If the Swedish Whistleblowing Act does not apply, there are no particular confidentiality obligations for employers. Yet, an employer needs to consider what information is suitable to share during an investigation, how this is done and to whom it is shared. An employer must also respect employees’ privacy in line with what is generally considered good practice in the labour market. This means that an employer should be careful as to what sensitive and personal information is shared during an investigation. Furthermore, the spreading of damaging information (even if true) about an employee to a wider group may be a criminal offence under the Swedish Criminal Code.
11. What information must the employee under investigation be given about the allegations against them?
11. What information must the employee under investigation be given about the allegations against them?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
To ensure procedural fairness, the allegations must be put to the respondent in writing in advance of the investigation interview. The allegations must be specific, but the respondent does not need to be provided with a copy of the original complaint. The respondent should also be informed that if the allegations are substantiated they may result in disciplinary action up to and including the termination of the employee’s employment.
Japan
Japan
- at Mori Hamada & Matsumoto
There are no specific legal stipulations or requirements regarding information, etc, that must be provided to employees who are the subject of an investigation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
According to article 14 of the GDPR, no information must be provided. The exemption in article 14.5(b) applies to the extent the obligation to provide such information is likely to render impossible or seriously impair the objectives of the processing of the personal data of the employee under investigation (ie, to diligently investigate the suspected irregularity).
If the Swedish Whistleblowing Act applies, information about where the personal data processed originates from may not be provided under article 14 of the GDPR, as the personal data must remain confidential subject to obligations under the Swedish Whistleblowing Act.
In addition to the above, an investigation should, to the extent possible and suitable, be characterised by the principles in ECHR (particularly articles 6 and 8). The employee under investigation should, among other things, be presented with sufficient information to safeguard his or her interests and be allowed to respond to the allegations. The investigation must also be compliant with the work environment responsibilities that the employer has concerning the involved parties (see questions 17 and 20).
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
12. Can the identity of the complainant, witnesses or sources of information for the investigation be kept confidential?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Employers will generally take steps to treat complaints sensitively and confidentially. However, because of the obligations employers have, confidentiality cannot be guaranteed as part of the investigation and the complainant, respondent and witnesses should be made aware of this.
Understandably, the complainant or witnesses may wish to remain anonymous. However, because the details of the allegations need to be put to the respondent so that they can provide an informed response or explanation, the source of the information will often need to be disclosed.
Employers can take steps to “ringfence” the investigation by asking employees to sign a confidentiality agreement. This will protect the interests of the participants of the investigation and uphold the integrity of the investigation.
Japan
Japan
- at Mori Hamada & Matsumoto
For whistleblowing investigations, whistleblower protection is required (see question 9).
Witnesses and other sources of information are not protected by the Whistleblower Protection Act.
In addition, as a response to a report of harassment, the Ministry of Health, Labour and Welfare guidelines require that necessary measures be taken to protect the privacy of the reporter, the offender, and others, and that these measures be announced to the company.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
If the Swedish Whistleblowing Act applies, their identity must be kept confidential under the duty of confidentiality. If the Swedish Whistleblowing Act does not apply, their identity can to a large extent be kept confidential.
It can also be noted that a workplace investigation carried out in the public sector will often (eventually) become an official document, which means that the document can be requested by the public. There are, however, provisions on secrecy that may restrict the right to gain access to official documents. These provisions are found in the Public Access to Information and Secrecy Act (2009:400).
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
13. Can non-disclosure agreements (NDAs) be used to keep the fact and substance of an investigation confidential?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Non-disclosure agreements, also known as confidentiality agreements, can be used to maintain the confidentiality of the investigation. In this agreement, the employee will be directed to maintain confidentiality concerning the investigation and matters that are the subject of the investigation, and not speak to anyone outside the investigation team about the investigation without authorisation.
Confidentiality agreements are legal documents. Employees should be informed that a breach of the confidentiality agreement could result in disciplinary action being taken against them, up to and including termination of their employment.
Japan
Japan
- at Mori Hamada & Matsumoto
It is possible to use NDAs in investigations.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
NDAs can be used for some investigations carried out in the private sector. However, under the Swedish Whistleblowing Act, a contract is void to the extent it retracts or restricts a person’s rights under the Swedish Whistleblowing Act. An NDA that restricts the right to report irregularities to authorities or the media would, therefore, typically be void.
14. When does privilege attach to investigation materials?
14. When does privilege attach to investigation materials?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Investigation materials are not privileged and an employer may be required to disclose them in subsequent legal proceedings. If an employer is concerned about privilege attaching to an investigation, they should engage a legal practitioner to facilitate the investigation.
Employers who are concerned about privilege attaching to investigation materials should also consider the method of a lawyer’s engagement. The lawyer should be expressly engaged to investigate, report and to assist the employer by providing legal advice. Additional benefits can be achieved if the legal practitioner engages an external investigator to investigate the complaint and prepare the investigation report. Privilege will attach to the investigation materials because they are prepared for the lawyer to allow the lawyer to provide legal advice to the employer.
It is important that employers do not expressly or inadvertently waive privilege. For example, by disclosing the investigation report or substantial contents of the investigation report. It is a balance between providing information to the respondent and complainant about the outcome of the investigation and disclosing too much information.
Japan
Japan
- at Mori Hamada & Matsumoto
There are no specific laws or rules for the provision of confidentiality privileges other than that provided by the Fair Trade Commission Rules, which allow companies that are the subject of investigations into cartels, bid rigging, etc, to treat communications with their lawyers as confidential. However, when a motion for an order to produce documents is filed in a court proceeding, if the requested documents are "documents exclusively for the use of the possessor of the documents", the obligation to produce the documents is not recognised. If the investigation materials fall under this category, it is possible to exclude them from the scope of the court order to produce documents.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Attorney-client privilege will apply to all communication and investigative material between a client and its law firm. Attorney-client privilege is, however, not without limitations. Regarding investigations into alleged employee misconduct, a law firm may have to report suspected money laundering to the authorities and under certain circumstances disclose information to the financial police.
Written material covered by attorney-client privilege generally may not be seized.
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
15. Does the employee under investigation have a right to be accompanied or have legal representation during the investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
The respondent should be given the opportunity to have a support person present during the investigation meeting and any subsequent conversations that concern the termination of their employment. Failure to allow the respondent to have a support person may result in any subsequent termination of employment being found to be an unfair dismissal. This is because under the Fair Work Act 2009 (Cth), when the FWC is considering whether a dismissal is an unfair dismissal, they must consider any unreasonable refusal by the employer to allow the person to have a support person present to assist at any discussions relating to dismissal.
Employers should request that the respondent inform them 48 hours before any meeting of the identity of their support person. This will allow the employer to confirm the support person’s suitability. A support person can be a legal representative or trade union representative, but the role of a support person is limited to assisting the employee and they are not there to act as an advocate or representative.
Japan
Japan
- at Mori Hamada & Matsumoto
There is no legal right to have a legal representative present or appointed during the investigation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
The employee has no right to bring legal representation. However, the outcome of an investigation may lead to employment-related consequences, so it may be appropriate (depending on the situation) to offer the employee the opportunity to bring a union representative (if the employee is unionised) or a legal representative.
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
16. If there is a works council or trade union, does it have any right to be informed or involved in the investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
A trade union does not have any right to be informed of, or involved in, an investigation by an employer. However, an employee may request that their support person is a trade union member or trade union representative. This is appropriate and should be permitted.
Employers should review the terms of an employment contract, policy or industrial instrument as this may contain terms regarding trade union involvement. In particular, heavily-unionised workplaces may contain enterprise agreements which contain relevant clauses.
Japan
Japan
- at Mori Hamada & Matsumoto
A labour union has no legal right to be involved in the investigation. However, if there is a provision in the collective bargaining agreement between the company and the labour union that allows the labour union to be involved in an investigation conducted by the company or to receive disclosure of the results of an investigation, then such a provision should be followed.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
No, but if the employee under investigation is unionised it is appropriate to inform the union about the investigation. If the employer chooses to take action against the employee during, or after, the investigation, the trade union generally needs to be consulted before any final decisions are made.
If the Swedish Whistleblowing Act applies, the employer is not authorised to inform a works council or trade union about the investigation, as it may be in violation of the duty of confidentiality (see question 10).
17. What other support can employees involved in the investigation be given?
17. What other support can employees involved in the investigation be given?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Employers should be conscious that the investigation may have an impact on the complainant, respondent and witnesses. Employers will need to consider how to support their employees. The level of support provided will often depend on the size of the organisation and programmes already in place.
Many employers have an Employee Assistance Programme and employees should be reminded about this programme if further support or assistance is required. An employer’s HR team may also be able to assist if an employee has concerns about the progress of an investigation.
Japan
Japan
- at Mori Hamada & Matsumoto
There is no legally established assistance programme.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
The employer is responsible for the work environment and must ensure that employees are not at risk of mental (or physical) illness due to an investigation. If an employee, in connection with an investigation, requires support or if risk of ill health is otherwise anticipated, the employer is obliged to assess the situation and provide said employee with sufficient support (eg, counselling or work adjustments).
19. What if the employee under investigation raises a grievance during the investigation?
19. What if the employee under investigation raises a grievance during the investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
If a respondent raises a grievance during the investigation this should be dealt with under any employment contract, grievance policy or industrial instrument. This may involve investigating and responding accordingly. The content of the grievance should be carefully considered, but in many circumstances it is appropriate for the initial investigation to continue. Multiple investigations can be run simultaneously.
Japan
Japan
- at Mori Hamada & Matsumoto
Whether or not an investigation should be suspended when an employee under investigation files a complaint depends on the specific circumstances. There is no legal requirement to suspend the investigation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
There are no formal rules or processes for handling grievances in Sweden. Depending on the nature of the grievance, such a complaint may also have to be investigated (unless the grievance is deemed to be trivial). This could, for example, be the case if the grievance concerns new or other work environment issues that the employer is obliged to investigate.
20. What if the employee under investigation goes off sick during the investigation?
20. What if the employee under investigation goes off sick during the investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
It is not uncommon for respondents to an investigation to take personal or carer’s leave (sick leave) claiming that they are suffering from stress or anxiety. If this occurs, employers need to act appropriately, but this does not necessarily involve stopping the investigation process.
Employers should:
- assess the medical evidence to ascertain the respondent’s condition and determine how long they are likely to be unwell;
- avoid exacerbating the condition;
- determine whether the employee is unfit to attend the investigation meeting;
- take into consideration the evidence of other witnesses;
- consider delaying the investigation for a short period; and
- consider conducting the interviews in other ways, for example, in writing.
While all efforts should be made to accommodate an employee who has taken personal or carer’s leave during an investigation, if the respondent does not participate in the investigation, the investigation report may be prepared based on the available evidence.
Japan
Japan
- at Mori Hamada & Matsumoto
The company will seek a physician's diagnosis and opinion and determine whether to proceed with the investigation. If an employee’s mental health suffers because of the investigation, the company may be charged with a violation of its duty of care.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
The employer is responsible for the employee’s work environment during the investigation. The employer must assess the situation and the impact on the employee’s health and may, depending on the situation, have to postpone certain investigative measures, such as interviewing the employee in question. The investigation may even have to be completed without the employee participating.
21. How do you handle a parallel criminal and/or regulatory investigation?
21. How do you handle a parallel criminal and/or regulatory investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
There are circumstances of misconduct in the workplace that can also constitute criminal conduct and be subject to a criminal or regulatory investigation. This can include physical or sexual assault, theft, fraud, illegal drug use or stalking.
An employer can proceed with an investigation to determine whether the respondent engaged in misconduct on the balance of probabilities. The employer can terminate an employee’s employment before the outcome of any criminal investigation. However, the employer must keep in mind that procedural fairness must be afforded to the employee, particularly in circumstances where an employee is awaiting the outcome of a court proceeding.
Alternatively, an employer may decide to suspend the employee pending the outcome of the criminal investigation. If a criminal act has been committed, then the employer may decide to terminate the employee’s employment.
Co-operation with the police and regulatory authorities is sensible and evidence can be compelled by the police or regulators by, for example, a subpoena, search warrant or an order for production.
Japan
Japan
- at Mori Hamada & Matsumoto
It is possible to proceed with an investigation of a company even if there are concurrent criminal proceedings. It is up to the company to decide whether or not to proceed. The company may submit collected evidence collected to the police. The police will rarely disclose or provide the company with evidence they have collected. Usually, upon request by the police or regulator, the workplace investigation would be stayed. The police or regulator has to take legally required steps if compelling the employer to share evidence.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Handling a parallel investigation will have to be assessed on a case-by-case basis depending on the applicable rules. For instance, an investigation under the Swedish Discrimination Act is subject to certain timing requirements with which the employer must comply. In other cases, it may be more appropriate to hold off the workplace investigation while awaiting the outcome of the parallel investigation.
The police or regulator can, depending on the matter at hand, request an employer to share evidence. The police or the regulator may also, under certain circumstances, retain evidence in a search.
22. What must the employee under investigation be told about the outcome of an investigation?
22. What must the employee under investigation be told about the outcome of an investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Managing the outcome of the investigation is an important part of the process. The respondent must be informed of the outcome of the investigation as soon as possible after the investigation is completed and the decision-maker has decided how to proceed.
The investigator must decide whether the claims have been substantiated on the balance of probabilities and the decision-maker must decide what disciplinary action, if any, will be taken. Any disciplinary action should be proportionate to the seriousness of the misconduct. Disciplinary action could include a warning, counselling, monitoring of behaviour or termination of employment.
Ideally, the outcome of the investigation should be communicated to the respondent and complainant in writing, setting out the allegations that have been substantiated, unsubstantiated or whether there is insufficient evidence to make a finding.
Japan
Japan
- at Mori Hamada & Matsumoto
Although there is no legal obligation to report the results of the investigation to the employee, when taking disciplinary action it is generally necessary, from a due process point of view, to explain the facts of the disciplinary action and the results of the investigation, and to allow the employee to explain him or herself. Particularly in the case of serious disciplinary actions such as dismissal, failure to provide an adequate opportunity for an explanation is a possible ground for denying the validity of the disciplinary action.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
This depends on the outcome of the investigation and the applicable rules.
If the outcome of the investigation leads to termination, the employer will have to disclose some information regarding the reason for termination. If the employee questions the termination, the employer may have to disclose more information in a subsequent dispute. If the outcome of the investigation leads to less invasive measures, such as a warning, there are less extensive requirements to provide information.
24. What next steps are available to the employer?
24. What next steps are available to the employer?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
Employers must take steps to deal with the findings of the investigation and implement any recommendations promptly. This may involve commencing disciplinary action.
The complainant and respondent need to be informed of the outcome of the investigation. All witnesses who participated in the investigation should also be thanked for their contribution and advised that the investigation has been completed. All participants in an investigation should be reminded of their ongoing obligations concerning confidentiality and victimisation.
If an employer decides that it may be appropriate to terminate a respondent’s employment, the employee must be provided with the opportunity to respond and to “show cause” as to why their employment should not be terminated.
The investigation report along with any other materials produced during the investigation should be kept in a separate confidential file.
Employers should also consider whether action should be taken at an organisational level to prevent future misconduct. In particular, employers are required to take a proactive approach to addressing systemic workplace cultural issues in relation to sex discrimination, sexual harassment and victimisation.
Japan
Japan
- at Mori Hamada & Matsumoto
In an investigation into an employee's misconduct, based on the results of the investigation, disciplinary action will be considered if there are grounds for disciplinary action, and dismissal will also be considered. Personnel actions (eg, dismissal, reassignment) may also be taken.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
An investigation may result in employment law measures (eg, support, training, relocation, warning, termination or dismissal). An investigation may also be inconclusive and not result in any action.
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
25. Who can (or must) the investigation findings be disclosed to? Does that include regulators/police? Can the interview records be kept private, or are they at risk of disclosure?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
The outcome of the investigation must be disclosed to the complainant and respondent. If there is a concurrent police or regulatory investigation, they may request a copy of the investigation report. Employers should generally cooperate with regulatory authorities, but should be careful about disclosing the investigation report as this may be privileged and privacy obligations must be considered. Employers should consider only disclosing the investigation findings and interview records if compelled to do so by regulators or police.
Interview reports, the investigation report and communications about the investigation should be kept in a separate file. The file should be marked confidential and access to the file should be restricted.
If proceedings are commenced, the investigation materials may be subject to disclosure unless legal professional privilege can be asserted, see above.
Japan
Japan
- at Mori Hamada & Matsumoto
If it is information related to a crime, and if it is necessary to report it to the supervisory authority, it is necessary and possible to report it even if the content relates to personal information. There is no obligation to report to the police even if one is aware of a criminal fact. However, it is possible to use the results of an investigation to file a complaint or charge with the police. It is also possible to use the results of the investigation to realise the company's rights (eg, to claim damages based on tortious behaviour).
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Findings may have to be handed over to the police or the regulator – there is no separate legal protection for material in employer investigations related to authorities. If the investigation has been carried out by a law firm, see question 14 on attorney-client privilege.
26. How long should the outcome of the investigation remain on the employee’s record?
26. How long should the outcome of the investigation remain on the employee’s record?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
There are legal requirements related to the time you must keep certain employee records in Australia, such as pay slips and time sheets. However, there are no laws concerning disciplinary records.
Employers can rely on previous misconduct to justify an employee’s termination of employment where it can be shown it is part of a course of conduct. Accordingly, if complaints have been substantiated, and disciplinary action has been taken, these records should be maintained. However, if a significant period has elapsed since the misconduct, an employer should carefully consider whether it is appropriate to rely on this past behaviour to justify future disciplinary action for similar conduct.
Japan
Japan
- at Mori Hamada & Matsumoto
Records related to responses to whistleblowing must be kept for an appropriate period, but there is no legal stipulation on the retention period. Each entity is required to set an appropriate period after considering the need for evaluation and inspection, and the handling of individual cases. There is no legally stipulated retention period for other investigation results.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Under the GDPR personal data may not, according to the general principle on storage limitation, be retained for longer than is necessary for the purposes for which the personal data are processed. The GDPR does not stipulate a generally applicable storage limitation period. Such a regulation is, on the other hand, included in the Swedish Whistleblowing Act. If the Swedish Whistleblowing Act applies, the outcome of the investigation and all personal data should be retained for as long as necessary, but not for longer than two years after the investigation has been closed.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Australia
Australia
- at People + Culture Strategies
- at People + Culture Strategies
- at People + Culture Strategies
It is important for employers to conduct procedurally fair investigations that result in a fair outcome. Failure to do so may expose the employer to various claims by an employee. The most common type of claim following an investigation is an unfair dismissal claim. If a respondent’s employment is terminated because of an investigation, they may be eligible to bring an unfair dismissal claim in the FWC alleging their dismissal was harsh, unjust or unreasonable.
An employee may also bring a bullying, discrimination or general protections claim. These claims may be made even where the investigation does not result in the employee’s dismissal.
If an employer has departed from the procedures set out in their policies, or they have not followed the terms of an employee’s employment contract or another applicable industrial instrument then an employee may bring a claim for breach of contract.
Australia has also recently introduced the “Respect@Work” legislation which places a positive obligation on employers to take reasonable and proportionate measures to eliminate sex discrimination, sexual harassment and victimisation, as far as possible. Accordingly, an employer who is not perceived to have taken a proactive and fair approach to these workplace issues faces significant legal exposure.
Failure to conduct an investigation properly (or a failure to conduct an investigation in circumstances where it is needed) can also cause significant reputational and financial risk.
Japan
Japan
- at Mori Hamada & Matsumoto
If the company deviates from appropriate social rules in its investigative methods and means, it will be liable for tortious behaviour. If disciplinary action or dismissal is taken based on erroneous investigation results, the validity of such action or dismissal will be denied, the employee will be able to claim for back wages, and, in some cases, claim for compensation.
Sweden
Sweden
- at Mannheimer Swartling
- at Mannheimer Swartling
- at Mannheimer Swartling
Errors resulting in terminations can be unlawful and, if they lead to employees terminating their employment as a result of the employer’s missteps, could be seen as constructive dismissal. Constructive dismissal is generally equivalent to an unlawful dismissal. Unlawful terminations generally result in an obligation to pay financial and general damages to the affected employees.
Failure to fulfil the obligations under the Swedish Discrimination Act may lead to an obligation to pay financial and general damages.
If an employer does not fulfil its obligations according to work environment legislation, there is a risk that the Swedish Work Environment Authority will issue injunctions or prohibitions against the employer. If an employer omits to meet its work environment related obligations, and that in turn results in a work related accident, e.g. self-harm in connection with an internal investigation, it may also, in a worst case scenario, lead to criminal liability.
The Swedish Work Environment Authority is also responsible for monitoring compliance with the provisions of the Swedish Whistleblowing Act. The Swedish Work Environment Authority may, if necessary to ensure compliance with the Swedish Whistleblowing Act, order an operator to comply with the obligations and requirements of the Swedish Whistleblowing Act. Employers violating the Swedish Whistleblowing Act may also be liable to pay damages to the affected employees.
If personal data is processed in a way that violates the GDPR, the authorised supervisory authority may issue warnings or reprimands to the data controller, order the controller to comply with the GDPR, impose a ban on processing, or impose an administrative fine on the controller. Companies violating the GDPR may also be liable to pay damages to data subjects.