Workplace Investigations

There is no codified law in India on conducting workplace investigations, so they largely depend on the internal policies of the employer. Certain requirements and best practice measures have evolved through judicial precedent, and these are codified through internal policies.

For claims involving sexual harassment, however, investigations can only be undertaken by the Internal Committee (IC), which an employer needs to constitute under the Prevention of Sexual Harassment of Women and Workplace (Prevention, Prohibition and Redressal) Act 2013 (SH Act).  

The general principle laid down by the courts is that any action against an employee for misconduct should be taken after conducting a disciplinary inquiry as per the principles of natural justice (PNJ). Whether or not a disciplinary inquiry can be done away with in any circumstances is a very fact-specific assessment and depends on various factors, including but not limited to the seniority and location of employment of the employee, and the nature and circumstances of the alleged misconduct.

The PNJ broadly require:

• that the accused employee should be issued with a written charge sheet or notice setting out the allegations against him or her along with a reasonable opportunity to respond;
• appointment of an independent inquiry officer to assess whether the allegations are proven or not; and
• that action must be taken based on the outcome of the inquiry, any punishment ordered should be proportionate to the gravity of the misconduct, and also take into account the service history (eg, prior warnings) of the individual.

The charge sheet or notice issued to the employee has to set out the evidence used by the employer to support the allegations in sufficient detail. Therefore, gathering necessary information and evidence is usually a critical precursor for any disciplinary process that an employer may eventually initiate against an employee.

There is no specific legal regulation for internal investigations in Switzerland. The legal framework is derived from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights. Depending on the context of the investigation, additional legal provisions may apply; for instance, additional provisions of the Swiss Federal Act on Data Protection or the Swiss Criminal Code.

In India, the collection, disclosure, transfer and storage of personal data is regulated by the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPD Rules). Accordingly, if during an investigation any sensitive personal information (such as information relating to passwords; financial information such as a bank account, credit or debit card or other payment instrument details; a physical, physiological or mental health condition; sexual orientation; medical history; and biometric information) is collected, then the requirements under the SPD Rules will need to be complied with. This would include obtaining an individual’s “informed consent” before collecting any sensitive personal data if such information is intended to be collected or stored in an electronic format.

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.