Workplace Investigations

Mainly, the Occupational Safety and Health Act (738/2002). In addition, the following also have relevance in connection to a workplace investigation: the Employment Contracts Act (55/2001), the Criminal Code (39/1889), the Act on Occupational Safety and Health Enforcement and Cooperation on Occupational Safety and Health at Workplaces (44/2006), the Act on Equality between Women and Men (609/1986) and the Non-discrimination Act (1325/2014). In addition, the employer's own policies must be taken into consideration while conducting a workplace investigation.

No specific rules directly govern a workplace investigation in the event of employee misconduct. However, several rules, both legal and administrative, affect the conduct of such an investigation. In addition, codes of conduct, internal regulations or guidelines may also exist within companies.

A new law (No. 2022-401) came into effect on 1 September 2022 and constitutes one of the cornerstones for future regulation of workplace investigations. This law transposes into French law the European directive relating to whistleblower protection. It does not, however, constitute a revolution, as a previous French law dated 9 December 2016 (the so-called Sapin 2 Law) already provided the whistleblower with a specific status and protection. These laws are fundamental when considering an internal investigation as the rules protecting the whistleblower and requiring the establishment of an internal whistleblowing channel (eg, a dedicated email or hotline) affect the degree of flexibility available to companies in conducting the investigation.

A new decree has been adopted (No. 2022-1284), dated 3 October 2022, for application of these new provisions. This decree sets out several obligations relating to the internal whistleblowing reporting process. The reporting channel will necessarily contribute to shape the internal investigation triggered by situations which have been reported by that channel. Companies subject to this decree may define the reporting procedure using the supporting tool of their choice (company collective agreement, internal memorandum, etc.), as long as the employee representative bodies are duly consulted on the matter. The decree also specifies that an acknowledgement of receipt of the alert must be provided to the author of the alert in writing within seven days from the company receiving the alert. The author of the alert must also be informed in writing, within a reasonable period not exceeding three months from acknowledgement of receipt of the alert, of the measures envisaged or taken to assess the accuracy of the allegations and, where appropriate, to remedy the situation which had been reported, as well as the reasons for these measures and, finally, the closure of the case.

More generally, not only do all the “pure” labour law rules relating to the protection of the human rights of employees need to be complied with (right to privacy, data protection under the GDPR, etc), but also the disciplinary rules and regulations that protect employees from unfounded sanctions imposed by their employer. For example, an employer can only sanction an employee's misconduct if the disciplinary procedure begins within two months of when the misconduct was committed or when the employer becomes aware of it. In this respect, an internal investigation can be necessary for the employer to obtain full knowledge of the facts alleged to have been committed by the employee. It is nonetheless recommended that the internal investigation be completed within these two months to avoid the risk of the disciplinary action being time-barred.

Administrative rules produced by the French anti-corruption agency should also be taken into consideration (good practice, guidelines and recommendations relating to senior management’s commitment to implement anti-corruption measures, corruption risk mapping, corruption risk management measures and procedures), as well as the guidelines produced by the French Ministry of Employment relating to the prevention of sexual harassment and gender-based violence or the recommendations of the Human Rights Defender, which is a French special institution aimed at protecting fundamental rights.

When the investigation in question concerns moral or sexual harassment or violence in the workplace, the national interprofessional agreement of 26 March 2010 should be <referred to. This text stipulates that in the event of an investigation procedure, it should be based on, but not limited to, the following guiding principles:

• it is in everyone's interest to act with the discretion necessary to protect everyone's dignity and privacy;
• no information, unless it is anonymized, should be divulged to parties not involved in the case in question;
• complaints must be investigated and dealt with without delay;
• all parties involved must be listened to impartially and treated fairly;
• complaints must be supported by detailed information;
• deliberate false accusations must not be tolerated, and may result in disciplinary action;
• external assistance may be useful, notably from occupational health services.

Many are calling for the adoption of legislative rules governing such investigations, and their coordination with general whistleblower protection measures.

Finally, a company must take its own rules and regulations into account. Every company with at least 50 employees has the legal obligation to draw up internal rules and regulations, which notably set out the disciplinary sanctions applicable to employees, as well as a reminder of certain employees' rights.

There is no specific legislation, guidance or policies covering investigations in the workplace. Issues such as the Personal Data Protection Law, invasion of privacy, and infringement of freedoms may arise regarding the related parties, subjects, methods, and results of investigations. In addition, court decisions have stated that "when there has been a violation of corporate order, an investigation of the facts may be conducted to clarify the nature of the violation, issue business instructions or orders necessary to restore the disturbed order or take disciplinary action against the violator as a sanction”. The investigation or order must be reasonable and necessary for the smooth operation of the enterprise, and the method and manner of the investigation or order must not be excessive or restrain an employee's personality or freedom. In such a case, the investigation may be considered to be illegal and may constitute a tort.

The Labour Protection Act B.E. 2541 (1998) (LPA) is the key legislation governing the relationship between employer and employee in Thailand. The LPA set out a minimum standard for the protection of employees’ rights, as well as a mechanism for suspension from work for an investigation.

The LPA requires any employer having ten or more employees to prepare work rules in the Thai language and the work rules require an employer to prescribe a procedure for the submission of grievances that would normally include the process for investigations in the workplace. Therefore, the work rules are the main guidance and policy that govern a workplace investigation. In some cases, an employer may have a whistleblowing policy allowing whistle-blowers to submit complaints of illegal or improper activities to the employer. The whistleblowing policy will also prescribe the procedures for investigating in workplace reflecting the complaints submitted by whistle-blowers.

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

When a report of wrongdoing is brought to the employer's attention, whether through a whistleblower or another channel, and an internal investigation is expected, it may be either mandatory or optional, depending on the facts of the alleged wrongdoing.

The investigation will be mandatory when the alleged wrongdoing relates to an ethical issue according to anti-corruption regulations, the employer’s duty of due diligence regarding, for example, human rights or environmental matters, or where the works council has issued an alert relating to a “serious and imminent danger” (or to “fundamental human rights”), but also whenever it relates to the employer's obligation to ensure employee safety (eg, moral or sexual harassment).

If the investigation is not mandatory, it is up to the employer to decide whether or not to carry out the investigation. Several key questions can help the employer determine whether or not it is appropriate to carry out an investigation, such as:

• What are the benefits of doing nothing? The company will have to draw up a list of the pros and cons of an investigation, bearing in mind that in some cases a poorly conducted investigation could make the situation worse;
• What is the priority (eg, obtaining or securing evidence, or correcting the irregularity)?
• What rules or codes of ethics must the company comply with?
• Should external legal counsel only advise the company or should they play a major role in the investigation process by becoming an investigator?

The trigger for an investigation in the workplace may be:

• when an employee makes a report (eg, a report of harassment, a report of misconduct by another employee, etc);
• when an investigation is conducted by the Labour Standards Inspection Office or another regulatory agency;
• when a criminal or illegal act is discovered in the workplace; or
• when an internal audit conducted by the company reveals a problem.

Usually, a complainant submitting a grievance to the company would be a trigger for proceeding with a workplace investigation. The LPA does not specify when a workplace investigation should commence but it is subject to the employer’s work rules and regulations, including the whistleblowing policy, as the investigation usually commences after an employee or a whistle-blower has filed a complaint to the employer. In some cases, there might be a whistleblower and the start of the workplace investigation would be subject to the whistleblowing policy and the employer’s discretion. Also, if a questionable transaction or activity is detected, fiscal audits may be the source that triggers a voluntary workplace investigation.

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

An employee may be suspended or relocated during a workplace investigation by:

• suspending the employee as a precautionary measure (eg, pending a confirmation of dismissal);
• temporarily assigning the employee to another site; or
• exempting the employee from having to work while continuing to pay them their salary.

The employee can be suspended as a precautionary measure, pending confirmation of dismissal, but this implies that disciplinary proceedings have already begun and that the investigation is therefore at a relatively advanced stage and that there is sufficient evidence to suggest the need for disciplinary action. It should be made clear to the employee that the suspension is a provisional measure (in the absence of specifying this, the suspension could be interpreted as a disciplinary layoff constituting a sanction and, in some jurisdictions, as depriving the employer of the possibility of dismissing the employee for the same facts).

Temporary reassignment can also be considered. However, this contractual change must not apply for long and the measure taken must be temporary. The employer must act promptly – the measure is only valid for as long as the investigation continues. Failing this, and because of the absence of concurrent disciplinary proceedings, there is considerable risk that the temporary reassignment may be reclassified by a judge as an illegal modification of the employment contract or as a disciplinary sanction preventing the employee from subsequently being dismissed.

Finally, paid exemption from work is also possible and consists of temporarily suspending, by mutual agreement, the obligation of the employer to provide work for the employee and the employee’s obligation to work, without affecting their remuneration. Such a measure must generally be taken with the consent of the employee, because it implies a suspension (and therefore a modification) of the employment contract. This measure may be useful in temporarily removing an employee with whom the employer maintains a good relationship. This may be an employee who is or feels they are a victim of harassment, especially when the employee is not on sick leave.

Court precedent states that a valid requirement for a stay-at-home order is it “would not be considered to put employees at a legal disadvantage (deprive them of their rights and imposes obligations on them), except in exceptional cases where employees are legally entitled to request work, unless there are special circumstances such as discrimination in salary increases and the like." (Tokyo High Court decision 25 January 2012, All Japan Mariners' Union). Therefore, it is considered possible to order the employee to stay at home during the investigation period if necessary. Some companies stipulate in their work rules that they may order employees to take special leave or stay at home when an incident occurs that could be the subject of disciplinary action.

In principle, the payment of salary in full during the stay-at-home period is required. However, work rules may stipulate that an employee will not be paid during the investigation period, and in cases where the employee is clearly responsible and it is inappropriate to allow the employee to work (eg, where it is almost certain that the employee has embezzled money on the job), the employee may be ordered to stay at home without pay. In addition, if the work rules stipulate that an absence allowance under the Labour Standards Law (60% or more of wages) must be paid for the stay-at-home period, such an allowance may be paid under the said rules.

While an employee is being investigated by the employer, the LPA permits the employer to suspend that employee from work for the duration of the investigation, provided that the suspension can only be made when permitted by the work rules or an agreement related to the conditions of employment. Also, a suspension order must be made in writing and specify the offence and period of the suspension, which may not exceed seven days. Note that the employer must give a written suspension order in advance to the employee before the work suspension.

As aforementioned, the LPA only permits the employer to suspend the employee under investigation from work only for seven days. During the interim period of the suspension, the employer must pay the employee at the rate indicated in the work rules or the agreement reached between the employer and the employee, which must not be less than half of the employee's wages for a working day before his or her suspension. If the employer determines that the employee subject to investigation is not guilty following the outcome, the employer must compensate the employee for outstanding wages from the date of suspension with 15% interest per annum.

In some complicated cases, a workplace investigation does not conclude within seven days, and, in which case the employer should consult with a legal advisor.

The employer must conduct the investigation, but the actual work can be done either by the employer's personnel or by an external investigator, for example, a law firm. Either way, there are no formal criteria for the persons executing the investigation; however, impartiality is required from the person conducting the investigation

In determining who is to conduct a workplace investigation, the main objective is to ensure that the team is independent or at least that it is perceived as being independent. The key people in the investigation team can be identified in a pre-established procedure. It is good practice to give decision-makers the possibility to set up, on a case-by-case basis, the team most appropriate to the situation.

There are no specific qualifications or requirements for an investigator. In many cases, the investigation is handled by a department or employee as deemed appropriate by the company. In some cases, an outside attorney may be asked to handle the investigation. Also, when it is a serious matter for the company, a third-party committee may be formed and commissioned to conduct an investigation.

However, under the revision of the Whistleblower Protection Act, which came into effect in June 2022, entities employing 300 or more employees must designate a person (whistleblower response service employee) in charge of accepting internal whistleblowing reports, investigating internal whistleblowing reports, or taking corrective measures as a whistleblower response service provider. Entities with less than 300 employees must also make an effort to do the same.

The person designated as a whistleblower response service provider must not divulge the name, employee ID number, or other information that would enable whistleblower identification without a justifiable reason. Criminal penalties (fines of up to 300,000 yen) have been established for violations of this confidentiality obligation.

The employer should conduct a workplace investigation on its own; however, an outside firm experienced in interviewing witnesses and assessing the credibility of evidence may also be appointed to assist with the workplace investigation.

There is no minimum qualification or criteria provided under Thai laws. It is worth noting that anyone who has been accused of misconduct or potentially has a conflict of interest should be excluded from any role in the investigation. This is to avoid a challenge from the subject employee that the investigation was not conducted fairly.

The employee does not have a legal right to stop the investigation. The employer must fulfil its obligation to investigate the alleged misconduct.

An internal investigation is not a police enquiry or a judicial instruction; there is no legal provision enabling an employee to stop the investigation. At the same time, there is no legal provision enabling the employer to force an employee to be interviewed. Interviewing an employee within the context of an internal investigation is also not a disciplinary matter. Therefore, the employee has no right to be assisted by another employee or an employee representative. The employee could, however, lawfully request the presence of their lawyer, especially if the company’s lawyer is part of the investigation team.

There are very few cases in which an employee subject to an investigation can file a legal proceeding to have the investigation stopped. Theoretically, an employee may be able to file a lawsuit or a provisional disposition to stop the investigation if he or she has a legal right to request that the company stop the investigation, but usually a lawsuit or a petition for a provisional disposition alone will not stop an investigation from proceeding. Although a provisional injunction would conclude in a relatively short period, such a provisional injunction would be unlikely to be issued if the investigation is conducted properly.

There is no mechanism in place to take legal action to halt an investigation. The investigation is an internal process of the employer.

There is no legislation on a witness's role in investigations. However, the legislation on occupational safety requires that employees must report any irregularities they observe. Depending on the situation, participating in the investigation may also be part of the person's work duties, role or position, in which case the employer may require the employee to contribute to clarifying the situation. However, there is no formal obligation to act as a witness, and there is no legislation regarding the protection of witnesses. If a witness wishes, they may have, for example, an employee representative as a support person during the hearing. 

Co-workers can spontaneously act as witnesses and provide statements to superiors before, during or after the interviews. Co-workers can also be interviewed as witnesses at the investigator’s request, although they are not under any obligation to answer the questions and they cannot be compelled to do so. The investigators have an absolute obligation of discretion during the investigation and cannot reveal any details of the information gathered.

Certain employees may benefit from whistleblower status, which implies that they may be exempt from potential criminal and civil liability relating to their report or testimony and they are protected from any retaliatory measures from the employer. “Facilitators” who helped the whistleblower and the individuals connected with the whistleblower and risk retaliatory measures by testifying as a witness may also benefit from this status, as of 1 September 2022.

Interviewing co-workers is often conducted in internal investigations. Company employees are generally required to cooperate with company investigations, especially those who are in a position to instruct and supervise employees, or those who are responsible for maintaining corporate order, since cooperation with an investigation is itself the fulfilment of their duty to the company. Other employees are not compelled to cooperate with such an investigation unless it is deemed necessary and reasonable. No specific legal protection is provided for testifying in an investigation.

Normally, the work rules prescribe requirements for cooperation with investigations. An employer may instruct co-workers to give statements as witnesses as this would be a fair and legitimate order of the employer, because investigations are conducted to maintain a good working environment.

Witness protection measures in a workplace can vary as no minimum standard has been set and they are generally subject to work rules and regulations. However, some legislation, which may not relate to a workplace investigation conducted by an employer, also protects the witnesses who are helping authorities investigate violations under the relevant acts. For example, the Labor Relation Act B.E. 2518 (1975) prohibits an employer from terminating an employee or conducting any action that may result in the employee being unable to work because of filing a complaint or being a witness for the authorities, or providing information on issues related to labour protection laws to the authorities.

The employer may have a policy of non-retaliation for the protection of witnesses who have given statements and evidence for a workplace investigation.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

GDPR principles fully apply to data gathering, as well as case law protecting the right to respect one’s private life and the secret of correspondence.

When collecting physical evidence that contains personal information, the Personal Information Protection Law and its related guidelines apply. In addition, when collecting physical evidence that contains privacy information or an employee's photograph, care must be taken to ensure that the right to privacy and the image rights are not violated.

The basic premise is that all evidence is admissible unless it violates the law of admissibility and production of evidence, which may vary depending on the jurisdiction. In a criminal court, for example, evidence gathered in violation of the fruit of the poisonous tree doctrine would be typically inadmissible, yet in a civil court, this doctrine would not be an exclusionary rule.

The Personal Data Protection Act, BE 2562 (2019) (PDPA), which is the main data protection law in Thailand, applies when collecting, using, and disclosing pieces of evidence containing the personal data of employees. If the investigation requires sensitive information of the employee under investigation, for example, race, ethnic origin, political opinion, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, genetic data and biometric data, consent from the employee should be obtained.

Only the police can search employees' possessions (assuming that the prerequisites outlined in the legislation are met).

In internal investigations, the fundamental rights and freedoms of employees are at stake,  including the right to privacy, respect for the privacy of home life and correspondence, freedom of expression, and the obligation of loyalty in searching for evidence.

In principle, work emails and files can be reviewed, even without the employee's consent, prior knowledge or warning. This includes: work email accounts; files stored on a work computer or a USB key connected to a work computer; and SMS messages and files stored on a work mobile phone and documents stored in the workplace unless they are labelled as “personal”. On the other hand, it is not permissible for an employer (or an investigator) to review “personal” emails and files, such as documents or emails identified as “personal” by the employee, or personal email accounts (Gmail, Yahoo, etc), even if accessed from a work computer.

There are certain exceptions to the above principle. An employer is allowed to check “personal” emails or data in any of the following cases:

• if the employee is present during the review;
• if the employee is absent, but was duly notified and invited to be present;
• if there is a particularly serious “specific risk or event”;
• if the review is authorised by a judge (this means having to prove a legitimate reason justifying not informing the employee).

When documents or emails are not marked as “personal” but contain information of a personal nature, the employer may open and review the data but may not use such documents or emails to justify applying disciplinary measures to the employee or use such documents or emails as evidence in court if they indeed relate to the employee’s private life.

Special attention must be given to employee representatives who must be entirely free to carry out their duties.

Since inspections of personal belongings may potentially undermine employees' fundamental human rights, they would not become lawful simply because they are conducted under employment regulations.

Inspections of personal belongings must be conducted uniformly among employees in the workplace based on reasonable grounds, in a generally reasonable manner and to a generally reasonable degree, and based on the work rules, etc.

When inspections of personal belongings are conducted under employment regulations, etc, employees must agree to the inspection except in special circumstances, such as the method or degree of the inspection being unreasonable.

On the other hand, an investigation of information stored on a company network system may constitute an infringement of the right to privacy. If there is a provision in the employment regulations regarding the use of the internet and monitoring, it is possible to investigate under such a provision. A Japanese court case on the illegality of reading e-mails in the absence of a monitoring provision stated that private use of e-mails also carries a certain right to privacy, but also stated that "considering the fact that the system is maintained and managed by the company, the protection of the employee's privacy can only be expected within a reasonable range according to the specific circumstances of the system," and that the act of reading e-mails was not illegal because the extent of private use of e-mails was beyond the limit, which was outside the reasonable range of socially accepted ideas. The court also ruled that the monitoring of the employee's abusive private use of e-mail, which was discovered in the course of an investigation of slanderous e-mails within the company, was not illegal because even if the monitoring was conducted without notice, there was suspicion of a violation of the duty of devotion to duty and corporate order. The court also stated that the investigation was necessary and that the scope of the investigation did not exceed its limit.

Electronic information created during employment would generally be owned by the employer and would be the employer’s assets. If an employee is given a computer or laptop to use for work, the employer has the right to log into that device and take any data that is stored therein, provided that the data does not contain sensitive information of that employee and PDPA requirements are met.

To avoid any potential issues regarding physical data such as documents on the employee’s desk, it is advisable to search those areas with the subject employee to show good faith. In practice, the employee normally agrees to search those areas with the employer, or allows the employer to search alone.

In respect of data protection, the processing of personal data in whistleblowing systems is considered by the Finnish Data Protection Ombudsman (DPO) as requiring a data protection impact assessment (DPIA).

Evidence obtained in the context of an investigation must specify who provided it and the date it was provided. No retaliatory measures may be taken against the whistleblower for the act of whistleblowing.

In certain cases, the whistleblower report must be forwarded to the judicial authorities (eg, when there is an obligation to assist persons in imminent danger, for serious offences or a disclosure that a vulnerable person is in danger (ie, minors under 15 or a person who is unable to protect themselves)).

See question 4 regarding amendments to the Whistleblower Protection Act.

The person designated as a whistleblower response service employee must not divulge the name, employee ID number, or other information that would allow a whistleblower to be identified without a justifiable reason, and there is a criminal penalty of up to 300,000 yen for violating this duty of confidentiality.

It is down to the employer’s discretion and subject to the whistleblowing policy (if any) to commence the investigation resulting from a complaint from a whistleblower. Whistleblowers and those who cooperate with an investigation should be protected. Normally the employer would not try to identify the whistleblowers. Also, it is best not to reveal the identity of the witness or the source of information; otherwise, they may feel uncomfortable giving information or raising their concerns next time. Any allegations of retaliation that surface during the investigation should be treated as a new report of possible misconduct that could be subject to additional investigation.

Concerning a workplace investigation, there is no specific legislation in force at the moment regarding confidentiality obligations. All normal legal confidentiality obligations (eg, obligations outlined in the Trade Secrets Act (595/2018)), and if using an external investigator, the confidentiality obligations outlined in the agreement between the employer and the external investigator, apply. Attorneys-at-law always have strict confidentiality obligations as per the Advocates Act (496/1958).

Interviewers, investigators, interviewees or any others involved in the investigation are often bound by a reinforced confidentiality obligation, particularly when the internal investigation is triggered by a whistleblower alert. In addition, every person that comes to know of the investigation, facts or people involved is bound by an obligation of discretion. Furthermore, investigators should specifically be trained for interviews and be reminded of their obligations relating to the investigation.

The investigators will need to determine the order of the tasks to be carried out in the investigation, as this will have a significant impact on confidentiality management. Should they start with the hearings or a review of documents? The answer may depend on the subject matter of the investigation. It is advisable to first review the documentation before organising interviews, particularly to avoid the destruction of certain documents by employees acting in bad faith or by those wishing to erase the traces of alleged wrongdoing. Sometimes, however, it is possible to start with the interviews, especially in the case of harassment, as there may be no documents to review. If the decision is taken to conduct the documentation review after the interviews, it could be useful to ask the employees involved to sign a document stating that they must preserve and retain documents, meaning that if they delete or destroy documents, they would be acting against the company and in breach of the law.

See question 9 for the confidentiality obligations of a whistleblower response service employee.

Other than the above, there is no specific legal obligation to maintain confidentiality for persons in charge of investigations, etc. However, if the information falls under the category of confidential information obtained by employees in the course of their work, compliance is required as an obligation attached to a labour contract, and many employment regulations stipulate a duty to keep information obtained in the course of work confidential.

Unless the investigation is handled by a qualified professional (eg, attorney or auditor) where certain privileges apply, confidentiality obligations are generally subject to the contractual arrangement between the parties involved in the investigation. The employers need to inform any persons, including the investigators, to respect confidentiality obligations because a leak of the information gathered from the investigations could cause damage to relevant parties.

The process must be transparent and impartial, and therefore all the information that may influence the conclusions made during the investigation should be shared with the employee.

According to the French data protection authority, the employee under investigation must be informed of the name of the person in charge of the investigation, the alleged facts that have led to the whistleblowing alert and their rights to access and rectify data collected about them. This information must be given as soon as the data collection starts, before the interviews, as per GDPR principles.

There are no specific legal stipulations or requirements regarding information, etc, that must be provided to employees who are the subject of an investigation.

The subject employee(s) should be informed of the details of the allegations, such as the details of wrongdoing or violations, made against them. This creates a fair opportunity for them to clarify themselves and defend against such allegations properly. Also, if there is any evidence that needs clarification from the employee, it should be shown to the employee.

See question 11, there is no protection of anonymity as the process must be transparent to the parties involved.

The identity of the complainant must be kept confidential and cannot be disclosed. There are two exceptions: if the complainant consents to the disclosure; or if the employer is asked for this information by the judicial authorities.

For whistleblowing investigations, whistleblower protection is required (see question 9).

Witnesses and other sources of information are not protected by the Whistleblower Protection Act.

In addition, as a response to a report of harassment, the Ministry of Health, Labour and Welfare guidelines require that necessary measures be taken to protect the privacy of the reporter, the offender, and others, and that these measures be announced to the company.

It is generally possible to keep the identity of the complainant, witnesses, or information sources confidential. There is no mandatory rule to disclose the identity of a complainant, witnesses, or sources of information. If the complainant, witnesses, or sources of information for the investigation know that their identities would not be disclosed, they will be more confident in cooperating with and supporting the investigations.

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

Most of the time, the legal protection afforded by the legally prescribed confidentiality obligation that applies to whistleblowing is sufficient. This is all the more so given every person involved is bound by an obligation of discretion. However, there is no legal obstacle to the creation of an NDA between the employer and the people involved.

NDAs setting out a strict and reinforced obligation of confidentiality and discretion during the investigation should be signed by any external parties involved (eg, translation agency, IT expert) or when the internal investigation is outside the scope of whistleblowing regulations.

It is possible to use NDAs in investigations.

Non-disclosure agreements can be made between an employer and employees who are involved in an investigation. This may include investigators and witnesses, apart from the employee under investigation. This minimises the risk of information being leaked, which can affect all parties related to the workplace investigation. However, an NDA is not absolute means to prevent the disclosure of confidential information, as the court has the authority to compel disclosure.

The privilege of investigation materials concerns a rather limited amount of cases. In practice, materials may be considered privileged in connection with the litigation process under the Procedural Code (4/1734). For example, communications between a client and an attorney may attract protection against forcible public disclosure.

Privilege does not generally apply to internal investigation materials as the investigation does not constitute a relationship between a lawyer and their client, and even less so a judicial investigation. However, if a lawyer is appointed as an investigator, privilege may apply to materials exchanged between the lawyer and that client.

There are no specific laws or rules for the provision of confidentiality privileges other than that provided by the Fair Trade Commission Rules, which allow companies that are the subject of investigations into cartels, bid rigging, etc, to treat communications with their lawyers as confidential. However, when a motion for an order to produce documents is filed in a court proceeding, if the requested documents are "documents exclusively for the use of the possessor of the documents", the obligation to produce the documents is not recognised. If the investigation materials fall under this category, it is possible to exclude them from the scope of the court order to produce documents.

Client-attorney privilege between qualified attorneys and the client (ie, an employer) begins once information is made available to the attorney, regardless of the form it takes.

The employee under investigation has a right to have a support person present (eg, a lawyer or an employee representative) during the hearings and a right to assistance in preparing written statements.

The employee under investigation has the right to be assisted by a lawyer during the interviews and, if the employee chooses to be so, the lawyer must also always be present. The employee may not, however, be accompanied by anyone other than a legal representative (ie, another employee cannot attend the interview).

There is no legal right to have a legal representative present or appointed during the investigation.

Unless the work regulations provide otherwise, an employee has the right to request legal representation during an investigation. If legal representation is requested, it is an opportunity for the employer to confirm and verify that an investigation is being conducted fairly, as the employee under investigation can bring his or her lawyer to attend the investigation.

A works council or a trade union does not have a role in the investigation.

Neither the works council nor the trade unions have any right to be informed or involved in the investigation. It is the employer who is responsible for carrying out the investigation. However, when the investigation is triggered due to a works council issuing an alert relating in particular to a “serious and imminent danger”, one member of the works council must be involved in the investigation process.

A labour union has no legal right to be involved in the investigation. However, if there is a provision in the collective bargaining agreement between the company and the labour union that allows the labour union to be involved in an investigation conducted by the company or to receive disclosure of the results of an investigation, then such a provision should be followed.

Thai labor laws do not require a workplace investigation to involve participation from trade unions or labour unions. However, it is possible for labour unions established under the Labor Relation Act BE. 2518 (1975) to submit a demand for a collective bargaining agreement (CBA) with employers to get a seat at the table. There was a case where a management union made a CBA with the employer wherein the president of the management union would be involved in any investigation of any manager, who is a union member, under investigation. In that case, the employer must comply with the CBA by informing the president and allowing the president to participate in the investigations.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

Apart from being informed of any facts and data concerning them being collected during the investigation, employees involved in the investigation do not have any specific rights. Some companies choose to use external firms specializing in psychosocial risk management, not only to conduct internal investigations, but also to provide additional psychological support for their employees, as part of the employer's safety obligation.

There is no legally established assistance programme.

The employees may then file a complaint with the labour inspection officer of the Labour Protection and Welfare Department to investigate the situation if they view that the conduct of the employer in the investigation violates the LPA. For example, if the employer issues a written order for suspending an employee for more than seven days. The labour inspection officer may issue an order requesting compliance, where failure to comply with such an order would result in a criminal penalty.

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

Unrelated matters revealed during the investigation do not necessarily mean that another investigation will be opened. Nevertheless, if reprehensible acts unrelated to the current investigation are revealed, the employer will need to take action and sanction the perpetrator (after checking the facts). Sometimes the only way to check the facts is to carry out another investigation on a separate matter. However, the investigation team may also consider if there is enough connection between the matters to widen the scope of the current internal investigation.

Even if a matter arises that is not subject to the investigation, it can be used as an opportunity to conduct another investigation.

Subject to the grievance protocol in place, any matter that emerges during the investigation should be handled separately as a fresh report of potential misconduct that needs further investigation.

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

The grievance may also have to be investigated (eg, moral/sexual harassment reported by an employee under investigation).

Whether or not an investigation should be suspended when an employee under investigation files a complaint depends on the specific circumstances. There is no legal requirement to suspend the investigation.

The investigator should guide the employee who has raised the grievance to properly raise their concerns through the grievance protocols or whistleblowing policy (if any). It is acceptable to preliminarily hear their concerns, but the investigation should be initiated separately and subject to the employer’s discretion.

As a general rule, sick leave does not prevent an investigation from progressing. Depending on the nature of the sickness, the employee can attend hearings and take part in the procedure. If the sickness prevents the employee from participating, the employer can put the process on hold temporarily.

The investigation will likely be able to continue with the other employees and, as soon as the employee under investigation returns from sick leave, they will be able to be interviewed.

However, as disciplinary sanctions are time-barred after two months from the moment the misconduct was committed or from when the employer becomes aware of it, if the sick leave lasts for the whole of that period, the investigation must be conducted anyway. In this instance, the investigator can ask the employee to attend the interview despite being on sick leave or arrange for the interview to take place using other means (eg, conference call). As a last resort, a questionnaire can be sent to the employee, but the pros and cons must be assessed as this is a way of information gathering that carries a certain amount of risk, could be less reliable and is of less probative value.

The company will seek a physician's diagnosis and opinion and determine whether to proceed with the investigation. If an employee’s mental health suffers because of the investigation, the company may be charged with a violation of its duty of care.

If the absence is anticipated to be brief, the employer may wait until the employee's return before concluding the investigation. If the employee's absence is expected to be prolonged, the investigator may alter the time of meetings or request that the employee submits a witness statement. The key point would be that all necessary measures should be taken to give the employee a chance to participate.

Regardless of a possible criminal investigation, the employer must run its internal workplace investigation without unnecessary delay. A workplace investigation and a criminal investigation are two separate processes and can be ongoing simultaneously, so the criminal process does not require the workplace investigation to be stayed. Thus, parallel investigations are to be considered as two separate matters. The police may only obtain evidence or material from the company or employer if strict requirements for equipment searches are met after a request for investigation has been submitted to the police.

A criminal investigation always takes precedence over other investigations. However, this does not mean that the internal investigation has to stop. It can and should continue, and the report drawn up upon completion of the investigation could be used by the authorities in the criminal investigation. In some cases, especially when privilege does not apply, police or regulatory authorities may request that the employer share such evidence. However, even when privilege does apply, there is no certainty that the evidence would not have to be communicated to certain authorities.

Some administrative authorities often challenge the application of legal privilege or try to reduce its scope. For example, the French financial markets authority (AMF) regularly puts forward its view of legal privilege, according to which an email where a lawyer is only copied (and is not one of the main recipients) in from one of their clients is not confidential and can therefore be disclosed in proceedings. However, if the AMF investigators impose disclosure of privileged documents, this should result in the annulment of the investigation procedure. By way of exception, legal privilege cannot be invoked against certain other authorities, such as the URSSAF (authority in charge of collecting social security contributions) or the DGCCRF (directorate-general for competition, consumer protection and anti-fraud investigations). Where legal privilege is enforceable, the judge must first determine whether the documents constitute correspondence relating to defence rights and, second, must cancel the seizure of documents that they find to be covered by legal privilege due to the principle of professional secrecy of relations between a lawyer and their client and the rights of defence.

It is possible to proceed with an investigation of a company even if there are concurrent criminal proceedings. It is up to the company to decide whether or not to proceed. The company may submit collected evidence collected to the police. The police will rarely disclose or provide the company with evidence they have collected. Usually, upon request by the police or regulator, the workplace investigation would be stayed. The police or regulator has to take legally required steps if compelling the employer to share evidence.

Employers are not required to wait until the police or regulatory investigations are finished before conducting their disciplinary investigations, but it is necessary to ensure that such internal proceedings do not compromise the integrity of an investigation or result in misrepresentation or a miscarriage of justice. The level of proof for internal disciplinary action is less than the level of proof for criminal proceedings.

The employer's conclusions from the investigation.

The employee under investigation, like the other employees interviewed and the whistleblower, must be informed that the investigation has been completed. However, there is no obligation to provide them with the report and, for reasons of confidentiality, it is very often best not to do so.

Although there is no legal obligation to report the results of the investigation to the employee, when taking disciplinary action it is generally necessary, from a due process point of view, to explain the facts of the disciplinary action and the results of the investigation, and to allow the employee to explain him or herself. Particularly in the case of serious disciplinary actions such as dismissal, failure to provide an adequate opportunity for an explanation is a possible ground for denying the validity of the disciplinary action.

There is no mandatory information on the outcome of an investigation that must be disclosed to an employee. However, disclosure of the outcome should, at a minimum, include whether an employee did or did not commit a violation. In addition, an employee who has committed a violation should be informed of any disciplinary action, and the grounds for such a decision (such as a violation of the company’s work rules). This enables the employee under investigation to appeal the outcome if it is applicable under the work rules or whistleblowing policy.

The employee under investigation may only be informed of the conclusions.

There is no obligation to share the investigation report. The findings, or a summary of them without revealing any confidential information, may be disclosed, but it is the employer’s responsibility to keep the identity of every person interviewed confidential.

There is no legal obligation to share reports of findings. Therefore, the company may share only the summary or the entire report at its discretion.

It depends on with whom the investigation report should be shared. If there is a court case or criminal case to be further investigated by police, the investigation report should be shared in full as this would be used as documentary evidence to make a case stronger. On the contrary, if the investigation report is requested by the employee under investigation, employers are entitled to use their discretion as to what information to share.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

The employer can decide to sanction the person who was under investigation or to close the case. The employer may also need to protect any victims, witnesses and whistleblowers. If, during the investigation, it is discovered that a supplier or other commercial partner is implicated, the relevant contract may be terminated. The employer can take legal action , file a complaint (if the company is a direct victim of a criminal offence) or report the offence to the public prosecutor’s office. The employer must archive the file or ensure its lawful preservation after a certain period.

In an investigation into an employee's misconduct, based on the results of the investigation, disciplinary action will be considered if there are grounds for disciplinary action, and dismissal will also be considered. Personnel actions (eg, dismissal, reassignment) may also be taken.

Upon completion of the investigation, the employer can decide to take proper disciplinary action against the employee if it is found that the employee committed an offence or violated the work rules. An employer may also file a report with the police if the findings of the investigation amount to a criminal offence.

In general, investigation materials, including findings, that includes personal data should only be processed by the personnel of the organisation who are responsible for internal investigations. However, it may in some situations be required by applicable legislation that findings are disclosed to competent authorities for the performance of their duties, such as conducting investigations in connection with malpractice and violations of the law.

The findings must be submitted to the employer or management, but there is no obligation to disclose them to anybody else. The only exception is if a judicial investigation has been opened. In this case, the entire report must be provided to the authorities if the judge requests this. Normally the investigators only take written notes and there is no audio or video recording, unless the employee consents. Whether or not to make a voluntary disclosure of wrongdoing is a tactical decision for companies. Disclosure may mitigate fines and penalties or even help the employer avoid liability entirely. However, the downsides of disclosure include increased costs, the possibility of a follow-on government investigation and exposure to penalties. Thus, most companies assess their options on a case-by-case basis to determine what steps would be in the best interests of the company.

If it is information related to a crime, and if it is necessary to report it to the supervisory authority, it is necessary and possible to report it even if the content relates to personal information. There is no obligation to report to the police even if one is aware of a criminal fact. However, it is possible to use the results of an investigation to file a complaint or charge with the police. It is also possible to use the results of the investigation to realise the company's rights (eg, to claim damages based on tortious behaviour).

The investigation findings should be disclosed to a limited group of persons who are involved in the investigation, and for which the findings are useful. For example, an HR manager who needs to record the findings in the employee’s record, the police if the employer decides to proceed further with a criminal claim, the court if requested by that court, or if there is a court case related to the violations of the employee.

Interview records should be kept confidential and private. There is a risk of disclosure because the information in the records may be beneficial to one but damaging to others. If the interview records are leaked to others who are not involved in the investigation, it may affect the work environment in the workplace and the protection of witnesses.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

If the outcome of the internal investigation has led to the sanctioning of an employee, this sanction may no longer be invoked to support a new sanction after three years. Moreover, under the GDPR principles, the duration of retention must be proportional to the use of the data. Therefore, the data must be retained only for a period that is “strictly necessary and proportionate”. If the employer wants to keep information about the investigation in the longer term, it is possible to archive the employee’s record even though the employer will no longer be able to use it against the employee after three years.

Records related to responses to whistleblowing must be kept for an appropriate period, but there is no legal stipulation on the retention period. Each entity is required to set an appropriate period after considering the need for evaluation and inspection, and the handling of individual cases. There is no legally stipulated retention period for other investigation results.

There is no period required by law for keeping the outcome of the investigation on the employee’s record. However, if termination of employment is the outcome of the investigation, an employer should keep details of the investigation for at least 10 years, in line with the prescribed period for an employee to file an unfair dismissal claim against an employer. An employer may use the details of an investigation to defend such a claim. For other disciplinary action, the retention of investigation details on the employee’s record is at the employer’s discretion.

There are no regulations regarding the actual investigation process. Therefore, the employer cannot be accused of procedural errors as such. However, once the matter has been adequately investigated, the employer must decide whether or not misconduct has taken place. If the employer considers that misconduct has taken place, the employer must take adequate measures for remedying the situation. Failure to adequately conduct the investigation could result in criminal sanctions being imposed on the employer as an organisation or the employer’s representative, or damages.

Within the context of an investigation following a whistleblower alert, any violation of the confidentiality obligation is punishable by two years’ imprisonment and a €30,000 fine.

If the employer fails to comply with its obligation to protect its employees’ safety, the employer will be liable for damages resulting from any failings during the investigation (eg, if sexual harassment is reported and no action is taken by the employer)

If the company deviates from appropriate social rules in its investigative methods and means, it will be liable for tortious behaviour. If disciplinary action or dismissal is taken based on erroneous investigation results, the validity of such action or dismissal will be denied, the employee will be able to claim for back wages, and, in some cases, claim for compensation.

The Thai Supreme Court has ruled that the termination of an employee was unfair due to an investigation being conducted contrary to requirements in the company’s work rules. As such, employers may be liable for damages to employees if there are errors made during investigations, or where investigations are not conducted properly.

The Supreme Court has also ruled that in cases of unfair termination, the underlying cause of the termination should be the determining factor, rather than other issues, including investigative procedures.