Workplace Investigations

No specific rules directly govern a workplace investigation in the event of employee misconduct. However, several rules, both legal and administrative, affect the conduct of such an investigation. In addition, codes of conduct, internal regulations or guidelines may also exist within companies.

A new law (No. 2022-401) came into effect on 1 September 2022 and constitutes one of the cornerstones for future regulation of workplace investigations. This law transposes into French law the European directive relating to whistleblower protection. It does not, however, constitute a revolution, as a previous French law dated 9 December 2016 (the so-called Sapin 2 Law) already provided the whistleblower with a specific status and protection. These laws are fundamental when considering an internal investigation as the rules protecting the whistleblower and requiring the establishment of an internal whistleblowing channel (eg, a dedicated email or hotline) affect the degree of flexibility available to companies in conducting the investigation.

A new decree has been adopted (No. 2022-1284), dated 3 October 2022, for application of these new provisions. This decree sets out several obligations relating to the internal whistleblowing reporting process. The reporting channel will necessarily contribute to shape the internal investigation triggered by situations which have been reported by that channel. Companies subject to this decree may define the reporting procedure using the supporting tool of their choice (company collective agreement, internal memorandum, etc.), as long as the employee representative bodies are duly consulted on the matter. The decree also specifies that an acknowledgement of receipt of the alert must be provided to the author of the alert in writing within seven days from the company receiving the alert. The author of the alert must also be informed in writing, within a reasonable period not exceeding three months from acknowledgement of receipt of the alert, of the measures envisaged or taken to assess the accuracy of the allegations and, where appropriate, to remedy the situation which had been reported, as well as the reasons for these measures and, finally, the closure of the case.

More generally, not only do all the “pure” labour law rules relating to the protection of the human rights of employees need to be complied with (right to privacy, data protection under the GDPR, etc), but also the disciplinary rules and regulations that protect employees from unfounded sanctions imposed by their employer. For example, an employer can only sanction an employee's misconduct if the disciplinary procedure begins within two months of when the misconduct was committed or when the employer becomes aware of it. In this respect, an internal investigation can be necessary for the employer to obtain full knowledge of the facts alleged to have been committed by the employee. It is nonetheless recommended that the internal investigation be completed within these two months to avoid the risk of the disciplinary action being time-barred.

Administrative rules produced by the French anti-corruption agency should also be taken into consideration (good practice, guidelines and recommendations relating to senior management’s commitment to implement anti-corruption measures, corruption risk mapping, corruption risk management measures and procedures), as well as the guidelines produced by the French Ministry of Employment relating to the prevention of sexual harassment and gender-based violence or the recommendations of the Human Rights Defender, which is a French special institution aimed at protecting fundamental rights.

When the investigation in question concerns moral or sexual harassment or violence in the workplace, the national interprofessional agreement of 26 March 2010 should be <referred to. This text stipulates that in the event of an investigation procedure, it should be based on, but not limited to, the following guiding principles:

• it is in everyone's interest to act with the discretion necessary to protect everyone's dignity and privacy;
• no information, unless it is anonymized, should be divulged to parties not involved in the case in question;
• complaints must be investigated and dealt with without delay;
• all parties involved must be listened to impartially and treated fairly;
• complaints must be supported by detailed information;
• deliberate false accusations must not be tolerated, and may result in disciplinary action;
• external assistance may be useful, notably from occupational health services.

Many are calling for the adoption of legislative rules governing such investigations, and their coordination with general whistleblower protection measures.

Finally, a company must take its own rules and regulations into account. Every company with at least 50 employees has the legal obligation to draw up internal rules and regulations, which notably set out the disciplinary sanctions applicable to employees, as well as a reminder of certain employees' rights.

The Employment Ordinance (EO), which is the primary legislation governing employment relationships in Hong Kong, does not provide for a statutory workplace investigation procedure.

The Labour Department of Hong Kong has, however, published a Guide to Good People Management Practices[1] which recommends that employers lay down rules of conduct, grievance and disciplinary procedures. Such rules should be simple and clear, logical and fair, and in line with the provisions in the EO.

As part of risk management and internal controls, Hong Kong-listed companies are expected by The Stock Exchange of Hong Kong Limited (SEHK) to establish whistleblowing policies and systems for employees to raise concerns about possible improprieties with independent board members. Listed companies are also expected to establish policies for the promotion and support of anti-corruption laws and regulations. Such policies and systems may include workplace investigation procedures.[2] If a listed company chooses to not establish such policies and systems, it is required to explain how it could achieve appropriate and effective risk management and internal controls.

There is no specific legal regulation for internal investigations in Switzerland. The legal framework is derived from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights. Depending on the context of the investigation, additional legal provisions may apply; for instance, additional provisions of the Swiss Federal Act on Data Protection or the Swiss Criminal Code.

When a report of wrongdoing is brought to the employer's attention, whether through a whistleblower or another channel, and an internal investigation is expected, it may be either mandatory or optional, depending on the facts of the alleged wrongdoing.

The investigation will be mandatory when the alleged wrongdoing relates to an ethical issue according to anti-corruption regulations, the employer’s duty of due diligence regarding, for example, human rights or environmental matters, or where the works council has issued an alert relating to a “serious and imminent danger” (or to “fundamental human rights”), but also whenever it relates to the employer's obligation to ensure employee safety (eg, moral or sexual harassment).

If the investigation is not mandatory, it is up to the employer to decide whether or not to carry out the investigation. Several key questions can help the employer determine whether or not it is appropriate to carry out an investigation, such as:

• What are the benefits of doing nothing? The company will have to draw up a list of the pros and cons of an investigation, bearing in mind that in some cases a poorly conducted investigation could make the situation worse;
• What is the priority (eg, obtaining or securing evidence, or correcting the irregularity)?
• What rules or codes of ethics must the company comply with?
• Should external legal counsel only advise the company or should they play a major role in the investigation process by becoming an investigator?

The circumstances in which an employer commences a workplace investigation may vary. However, it is common that an employer will consider it necessary to commence a workplace investigation upon receipt of a complaint concerning a fellow employee. Sometimes, the complaint may be made anonymously. If the employer considers there to be substance in the complaint, it may commence an investigation to find out the truth of the matter, resolve the complaint and, if necessary, improve its systems and controls to prevent the reoccurrence of any misconduct.

A workplace investigation may be warranted if the employer receives an enquiry from a regulator concerning its affairs or an employee’s conduct. The investigation findings could enable the employer to respond to the regulator (which could be a mandatory obligation) and at the same time assess its risk exposure.

Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).

For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]

An employee may be suspended or relocated during a workplace investigation by:

• suspending the employee as a precautionary measure (eg, pending a confirmation of dismissal);
• temporarily assigning the employee to another site; or
• exempting the employee from having to work while continuing to pay them their salary.

The employee can be suspended as a precautionary measure, pending confirmation of dismissal, but this implies that disciplinary proceedings have already begun and that the investigation is therefore at a relatively advanced stage and that there is sufficient evidence to suggest the need for disciplinary action. It should be made clear to the employee that the suspension is a provisional measure (in the absence of specifying this, the suspension could be interpreted as a disciplinary layoff constituting a sanction and, in some jurisdictions, as depriving the employer of the possibility of dismissing the employee for the same facts).

Temporary reassignment can also be considered. However, this contractual change must not apply for long and the measure taken must be temporary. The employer must act promptly – the measure is only valid for as long as the investigation continues. Failing this, and because of the absence of concurrent disciplinary proceedings, there is considerable risk that the temporary reassignment may be reclassified by a judge as an illegal modification of the employment contract or as a disciplinary sanction preventing the employee from subsequently being dismissed.

Finally, paid exemption from work is also possible and consists of temporarily suspending, by mutual agreement, the obligation of the employer to provide work for the employee and the employee’s obligation to work, without affecting their remuneration. Such a measure must generally be taken with the consent of the employee, because it implies a suspension (and therefore a modification) of the employment contract. This measure may be useful in temporarily removing an employee with whom the employer maintains a good relationship. This may be an employee who is or feels they are a victim of harassment, especially when the employee is not on sick leave.

It may be appropriate to suspend an employee during a workplace investigation, for instance, where the investigation has revealed misconduct on his or her part (even on a preliminary basis), or his or her continued presence in the business would hinder the progress of the investigation. However, the employer will have to consider the relevant legislative provisions and the terms of the employment contract before making any decision on suspension.

Under section 11 of the EO, an employer may suspend an employee without pay pending a decision as to whether the employee should be summarily dismissed (up to 14 days) or pending the outcome of any criminal proceedings against the employee arising out of his or her employment (up to the conclusion of the criminal proceedings). If an employee is suspended as above, however, the employee may terminate his or her employment without notice or payment in lieu of notice.

It is more common for an employer to suspend an employee with pay during an investigation concerning his or her conduct rather than exercising its statutory right as mentioned above. This could avoid an unnecessary dispute with the employee concerned. Indeed, it is common for employers to include in employment contracts specific provisions to give themselves the right to suspend an employee with pay in certain circumstances. The provisions normally set out the circumstances in which the employer may exercise the right, the maximum period of suspension and other arrangements during the suspension period (eg, how the employee’s entitlements under the employment contract are to be dealt with).

It is possible to suspend an employee during a workplace investigation.[1] While there are no limits on duration, the employee will remain entitled to full pay during this time.

In determining who is to conduct a workplace investigation, the main objective is to ensure that the team is independent or at least that it is perceived as being independent. The key people in the investigation team can be identified in a pre-established procedure. It is good practice to give decision-makers the possibility to set up, on a case-by-case basis, the team most appropriate to the situation.

There are no statutory or regulatory requirements regarding the choice of investigator in workplace investigations. However, it is good practice to have the investigation conducted by persons who have been trained to do so as investigations may involve intricate issues. It is also important that the investigators are perceived to be impartial and fair. For that reason, the investigators should be individuals who are not involved in the matter under investigation.

Complex cases or cases that involve a senior employee may require someone more senior within the company to lead and oversee the conduct of the investigation. This also applies where it is foreseeable that the investigation may lead to disciplinary action, summary dismissal of the employee or a report to an authority.

Engagement of external parties or professional advisors may be necessary if the conduct under investigation is serious or widespread and may lead to regulatory consequences, or if the employer does not have the requisite expertise to handle the investigation. Lawyers (whether in-house counsel or external lawyers) may be the best fit to conduct a workplace investigation to ensure that legal professional privilege attaches to documents and communications created during the investigation (please see question 14).

The examinations can be carried out internally by designated internal employees, by external specialists, or by a combination thereof. The addition of external advisors is particularly recommended if the allegations are against an employee of a high hierarchical level[1], if the allegations concerned are quite substantive and, in any case, where an increased degree of independence is sought.

An internal investigation is not a police enquiry or a judicial instruction; there is no legal provision enabling an employee to stop the investigation. At the same time, there is no legal provision enabling the employer to force an employee to be interviewed. Interviewing an employee within the context of an internal investigation is also not a disciplinary matter. Therefore, the employee has no right to be assisted by another employee or an employee representative. The employee could, however, lawfully request the presence of their lawyer, especially if the company’s lawyer is part of the investigation team.

If the investigation is conducted in a manner that is contrary to an express term of the employment contract or the implied obligation of trust and confidence of the employer under common law (please see question 11), the employee may have a claim for breach of contract and possible remedies may include declaratory and injunctive relief against the investigation.

The accused could theoretically request a court to stop the investigation, for instance, by arguing that there is no reason for the investigation and that the investigation infringes the employee's personality rights. However, if the employer can prove that there were grounds for reasonable suspicion and is conducting the investigation properly, it is unlikely that such a request would be successful.

Co-workers can spontaneously act as witnesses and provide statements to superiors before, during or after the interviews. Co-workers can also be interviewed as witnesses at the investigator’s request, although they are not under any obligation to answer the questions and they cannot be compelled to do so. The investigators have an absolute obligation of discretion during the investigation and cannot reveal any details of the information gathered.

Certain employees may benefit from whistleblower status, which implies that they may be exempt from potential criminal and civil liability relating to their report or testimony and they are protected from any retaliatory measures from the employer. “Facilitators” who helped the whistleblower and the individuals connected with the whistleblower and risk retaliatory measures by testifying as a witness may also benefit from this status, as of 1 September 2022.

Under Hong Kong law, the employee has an implied duty to obey lawful instructions from his or her employer and to serve the employer with fidelity and good faith during the term of his or her employment. A lawful instruction from an employer may include a reasonable request for the employee to participate and provide information in the workplace investigation. If the employee refuses to comply with such instruction or is obstructive or provides untrue or misleading information, it could constitute a ground for summary dismissal under the EO and at common law.

That said, in general terms, an employer should not compel any employee to testify against a co-worker, particularly if such a co-worker is a senior colleague, as evidence provided under compulsion may not be helpful to the investigation.

Employees who act as witnesses must be treated as per their contractual and statutory rights, including the right against self-incrimination. If the investigation involves allegations of discrimination on the ground of sex, race or disability, the employer should ensure that the witnesses will not be victimised or treated less favourably than other employees.

Due to the employee's duty of loyalty towards the employer and the employer's right to give instructions to its employees, employees generally must take part in an ongoing investigation and comply with any summons for questioning if the employer demands this (article 321d, Swiss Code of Obligations). If the employees refuse to participate, they generally are in breach of their statutory duties, which may lead to measures such as a termination of employment.

The question of whether employees may refuse to testify if they would have to incriminate themselves is disputed in legal doctrine.[1] However, according to legal doctrine, a right to refuse to testify exists if criminal conduct regarding the questioned employee or a relative (article 168 et seq, Swiss Criminal Procedure Code) is involved, and it cannot be ruled out that the investigation documentation may later end up with the prosecuting authorities (ie, where employees have a right to refuse to testify in criminal proceedings, they cannot be forced to incriminate themselves by answering questions in an internal investigation).[2]

GDPR principles fully apply to data gathering, as well as case law protecting the right to respect one’s private life and the secret of correspondence.

If physical evidence contains data relating to an individual, from which the identity of the individual can be ascertained,[1] the data would constitute personal data under the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO). The PDPO sets out several data protection principles that the employer must comply with while processing personal data, including:[2]

• personal data must be collected for a lawful purpose related to a function or activity of the employer and should not be excessive for this purpose. An internal investigation would be regarded as a lawful purpose;
• personal data must be accurate and not kept longer than is necessary;
• personal data must not be used for a purpose other than the internal investigation (or other purposes for which the data was collected) unless the employee consents to a new use or the new use falls within one of the exceptions provided in the PDPO;
• personal data must be safeguarded against unauthorised or accidental access, processing or loss; and
• the employee whose personal data has been collected has the right to request access to and correction of his or her personal data retained by the employer.

If an employer wants to gather evidence through employee monitoring, it should ensure that the act of monitoring complies with the data protection principles of the PDPO if the monitoring activity would amount to the collection of personal data. The Privacy Commissioner for Personal Data has issued guidelines to employers on the steps they can take in assessing whether employee monitoring is appropriate for their businesses.[3] As a general rule, employee monitoring should be conducted overtly. Further, those who may be affected should be notified in advance of the purposes the monitoring is intended to serve, the circumstances in which the system will be activated, what personal data (if any) will be collected and how the personal data will be used.

Covert surveillance of employees should not be adopted unless it is justified by relevant special circumstances. Employers should consider whether there is reason to believe that there is an unlawful activity taking place and the use of overt monitoring would likely prejudice the detection or collection of evidence.[4] Even if covert monitoring is justified, it should target only those areas in which an unlawful activity is likely to take place and be implemented for a limited duration of time.

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.

In internal investigations, the fundamental rights and freedoms of employees are at stake,  including the right to privacy, respect for the privacy of home life and correspondence, freedom of expression, and the obligation of loyalty in searching for evidence.

In principle, work emails and files can be reviewed, even without the employee's consent, prior knowledge or warning. This includes: work email accounts; files stored on a work computer or a USB key connected to a work computer; and SMS messages and files stored on a work mobile phone and documents stored in the workplace unless they are labelled as “personal”. On the other hand, it is not permissible for an employer (or an investigator) to review “personal” emails and files, such as documents or emails identified as “personal” by the employee, or personal email accounts (Gmail, Yahoo, etc), even if accessed from a work computer.

There are certain exceptions to the above principle. An employer is allowed to check “personal” emails or data in any of the following cases:

• if the employee is present during the review;
• if the employee is absent, but was duly notified and invited to be present;
• if there is a particularly serious “specific risk or event”;
• if the review is authorised by a judge (this means having to prove a legitimate reason justifying not informing the employee).

When documents or emails are not marked as “personal” but contain information of a personal nature, the employer may open and review the data but may not use such documents or emails to justify applying disciplinary measures to the employee or use such documents or emails as evidence in court if they indeed relate to the employee’s private life.

Special attention must be given to employee representatives who must be entirely free to carry out their duties.

As part of an investigation, an employer may search objects or files that are the company’s property (eg, electronic devices given by the employer for business purposes and emails or messages stored on the company’s server) without prior notice and the employee’s consent is not needed. The employer, however, has no right to search an employee’s possessions (eg, a private smartphone) without the employee’s consent.

To avoid arguments as to who a particular object belongs to, employers may specify in internal policies what is to be regarded as a corporate asset and could be subject to a search in a workplace investigation.

Concerning an employee’s possessions, even if he or she consents to a search, it is good practice for the employer to conduct the search in the presence of the employee or an independent third party who can act as a witness to the search. If the employer suspects that a criminal offence has been committed and that a search of the employee’s possessions would reveal evidence, the employer should consider reporting its suspicion to the police, as they have wider legal powers to search.[1]

The basic rule is that the employer may not search private data during internal investigations.

If there is a strong suspicion of criminal conduct on the part of the employee and a sufficiently strong justification exists, a search of private data may be justified.[1] The factual connection with the employment relationship is given, for example, in the case of a criminal act committed during working hours or using workplace infrastructure.[2]

Evidence obtained in the context of an investigation must specify who provided it and the date it was provided. No retaliatory measures may be taken against the whistleblower for the act of whistleblowing.

In certain cases, the whistleblower report must be forwarded to the judicial authorities (eg, when there is an obligation to assist persons in imminent danger, for serious offences or a disclosure that a vulnerable person is in danger (ie, minors under 15 or a person who is unable to protect themselves)).

Hong Kong does not have a comprehensive legislative framework relating to whistleblowing. Therefore, in general, employers are free to establish whistleblowing policies and procedures and confer such protections on whistleblowers as they see fit. That said, companies listed on the Main Board of the SEHK are expected to establish a whistleblowing policy and system for employees to voice concerns anonymously about possible improprieties in the companies’ affairs. If a listed issuer deviates from this practice, it must explain the deviation.[1]

When an investigation involves whistleblowing, the employer needs to comply with the relevant policy and system and provide the whistleblower with such protections as stated in the policy. The employer should not ignore a complaint simply because it was made anonymously, and should ascertain the substance of the complaint to decide whether a full-blown investigation is warranted.

In addition, the employer should seek to establish a secure communication channel with the whistleblower to gather more information about the complaint or misconduct while maintaining the confidentiality of his or her identity. If the complaint is serious, the employer may consider referring the complaint to a law enforcement agency or regulator as they would be better placed in protecting the anonymity of the whistleblower while proceeding with the investigation. That said, employers generally have no obligation to report internal wrongdoing to any external body (please see question 25 for exceptions). The employer may assess whether it is appropriate to do so on a case-by-case basis.

If an employee complains to his or her superiors about grievances or misconduct in the workplace and is subsequently dismissed, this may constitute an unlawful termination (article 336, Swiss Code of Obligations). However, the prerequisite for this is that the employee behaves in good faith, which is not the case if he or she is (partly) responsible for the grievance.

Interviewers, investigators, interviewees or any others involved in the investigation are often bound by a reinforced confidentiality obligation, particularly when the internal investigation is triggered by a whistleblower alert. In addition, every person that comes to know of the investigation, facts or people involved is bound by an obligation of discretion. Furthermore, investigators should specifically be trained for interviews and be reminded of their obligations relating to the investigation.

The investigators will need to determine the order of the tasks to be carried out in the investigation, as this will have a significant impact on confidentiality management. Should they start with the hearings or a review of documents? The answer may depend on the subject matter of the investigation. It is advisable to first review the documentation before organising interviews, particularly to avoid the destruction of certain documents by employees acting in bad faith or by those wishing to erase the traces of alleged wrongdoing. Sometimes, however, it is possible to start with the interviews, especially in the case of harassment, as there may be no documents to review. If the decision is taken to conduct the documentation review after the interviews, it could be useful to ask the employees involved to sign a document stating that they must preserve and retain documents, meaning that if they delete or destroy documents, they would be acting against the company and in breach of the law.

Workplace investigations should usually be conducted on a confidential basis to preserve the integrity of the investigation, avoid cross-contamination of evidence and maintain the confidentiality of the employee under investigation. This means that those involved in the investigation (ie, the subject employee and any material witnesses) should be made aware of the fact and substance of the investigation on a need-to-know basis.

While the extent of the confidentiality obligations are usually governed by the employer’s internal policies and the employment contract, there are circumstances where the employer has a statutory duty to keep information unearthed in the investigation confidential. For instance, if it is found that certain property represents proceeds of an indictable offence[1] or drug trafficking[2], or is terrorist property[3], the employer should report its knowledge or suspicion to the Joint Financial Intelligence Unit (JFIU) as soon as is reasonably practicable and avoid disclosure to any other person as such disclosure may constitute “tipping off”. Another example is if a workplace investigation is commenced in response to a regulatory enquiry, the employer may be bound by a statutory secrecy obligation and may not be at liberty to disclose anything about the regulatory enquiry to anyone including those who are subject to the workplace investigation. For example, section 378 of the Securities and Futures Ordinance (SFO) imposes such a secrecy obligation on anyone who is under investigation or assists the Securities and Futures Commission (SFC) in an investigation.[4]

Besides the employee's duty of performance (article 319, Swiss Code of Obligations), the employment relationship is defined by the employer's duty of care (article 328, Swiss Code of Obligations) and the employee's duty of loyalty (article 321a, Swiss Code of Obligations). Ancillary duties can be derived from the two duties, which are of importance for the confidentiality of an internal investigation.[1]

In principle, the employer must respect and protect the personality (including confidentiality and privacy) and integrity of the employee (article 328 paragraph 1, Swiss Code of Obligations) and take appropriate measures to protect the employee. Because of the danger of pre-judgment or damage to reputation as well as other adverse consequences, the employer must conduct an internal investigation discreetly and objectively. The limits of the duty of care are found in the legitimate self-interest of the employer.[2]

In return for the employer's duty of care, employees must comply with their duty of loyalty and safeguard the employer's legitimate interests. In connection with an internal investigation, employees must therefore keep the conduct of an investigation confidential. Additionally, employees must keep confidential and not disclose to any third party any facts that they have acquired in the course of the employment relationship, and which are neither obvious nor publicly accessible.[3]

According to the French data protection authority, the employee under investigation must be informed of the name of the person in charge of the investigation, the alleged facts that have led to the whistleblowing alert and their rights to access and rectify data collected about them. This information must be given as soon as the data collection starts, before the interviews, as per GDPR principles.

An employer’s internal policies or the employment contract may provide that an employee under investigation should be given certain information concerning the allegations raised against him or her. Such policies or terms should be followed and failure to do so may result in a claim for breach of contract or constructive dismissal by the employee. Even where there are no express provisions, the employer still owes an implied obligation of trust and confidence towards the employee at common law, which requires the employer not to, without reasonable and proper cause, conduct itself in a manner calculated and likely to destroy or seriously damage the relationship of confidence and trust between itself and the employee.[1] In the context of an internal investigation, the implied duty would require the employer to conduct the investigation and reach its findings reasonably and rationally following the evidence available and in good faith. This would normally require that sufficient information about the allegations made against the employee be provided to him or her such that he or she has the opportunity to properly respond to the allegations before any disciplinary action is taken or any decision about his or her employment is made.

As a result of the employer's duty of care (article 328, Swiss Code of Obligations), employees under investigation have certain procedural rights. These include, in principle, the right of the accused to be heard. In this context, the accused has the right to be informed at the beginning of the questioning about the subject of the investigation and at least the main allegations and they must be allowed to share their view and provide exculpatory evidence.[1] The employer, on the other hand, is not obliged to provide the employee with existing evidence, documents, etc, before the start of the questioning.[2]

Covert investigations in which employees are involved in informal or even private conversations to induce them to provide statements are not compatible with the data-processing principles of good faith and the requirement of recognisability, according to article 4 of the Swiss Federal Act on Data Protection.[3]

Also, rights to information arise from the Swiss Federal Act on Data Protection. In principle, the right to information (article 8, Swiss Federal Act on Data Protection) is linked to a corresponding request for information by the concerned person and the existence of data collection within the meaning of article 3 (lit. g), Swiss Federal Act on Data Protection. Insofar as the documents from the internal investigation recognisably relate to a specific person, there is in principle a right to information concerning these documents. Subject to certain conditions, the right to information may be denied, restricted or postponed by law (article 9 paragraph 1, Swiss Federal Act on Data Protection). For example, such documents and reports may also affect the confidentiality and protection interests of third parties, such as other employees. Based on the employer's duty of care (article 328, Swiss Code of Obligations), the employer is required to protect them by taking appropriate measures (eg, by making appropriate redactions before handing out copies of the respective documents (article 9 paragraph 1 (lit. b), Swiss Federal Act on Data Protection)).[4] Furthermore, the employer may refuse, restrict or defer the provision of information where the company’s interests override the employee’s, and not disclose personal data to third parties (article 9 paragraph 4, Swiss Federal Act on Data Protection). The right to information is also not subject to the statute of limitations, and individuals may waive their right to information in advance (article 8 paragraph 6, Swiss Federal Act on Data Protection). If there are corresponding requests, the employer must generally grant access, or provide a substantiated decision on the restriction of the right of access, within 30 days (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 paragraph 4, Ordinance to the Federal Act on Data Protection).

The identity of the complainant must be kept confidential and cannot be disclosed. There are two exceptions: if the complainant consents to the disclosure; or if the employer is asked for this information by the judicial authorities.

Subject to any internal policies and terms of the employment contract, an employer would have discretion as to whether the identity of the complainant, witnesses or sources of information for the investigation should be kept confidential. In general, the employer should consider how the confidential treatment or its absence would affect the conduct and outcome of the investigation. The disclosure of the identity of the complainant in some cases may be necessary for the employee under investigation to respond in a meaningful way. On the other hand, both the complainant and witnesses may be more forthcoming in providing information if he or she is assured that his or her identity will not be made known to the person under investigation (especially if the latter is senior management personnel). A balance should be struck between the interests of the complainant or witnesses in maintaining confidentiality and the need for the employee under investigation to make a proper response to the allegations made. In any case, the employer should follow its whistleblowing policy if there is one (as discussed in question 9), and take into account practical and statutory considerations relating to confidentiality (as discussed in question 10).

As mentioned under Question 10, the employer’s duty of care (article 328, Swiss Code of Obligations) also entails the employer’s duty to respect and protect the personality (including confidentiality and privacy) and integrity of employees (article 328 paragraph 1, Swiss Code of Obligations) and to take appropriate measures to protect them.

However, in combination with the right to be heard and the right to be informed regarding an investigation, the accused also has the right that incriminating evidence is presented to them throughout the investigation and that they can comment on it. For instance, this right includes disclosure of the persons accusing them and their concrete statements. Anonymisation or redaction of such statements is permissible if the interests of the persons incriminating the accused or the interests of the employer override the accused’ interests to be presented with the relevant documents or statements (see question 11; see also article 9 paragraphs 1 and 4, Swiss Federal Act on Data Protection). However, a careful assessment of interests is required, and these must be limited to what is necessary. In principle, a person accusing another person must take responsibility for their information and accept criticism from the person implicated by the information provided.[1]

Most of the time, the legal protection afforded by the legally prescribed confidentiality obligation that applies to whistleblowing is sufficient. This is all the more so given every person involved is bound by an obligation of discretion. However, there is no legal obstacle to the creation of an NDA between the employer and the people involved.

NDAs setting out a strict and reinforced obligation of confidentiality and discretion during the investigation should be signed by any external parties involved (eg, translation agency, IT expert) or when the internal investigation is outside the scope of whistleblowing regulations.

In general terms, NDAs can be used and indeed are commonly used to keep the fact and substance of a workplace investigation confidential. However, NDAs will not be effective in preventing the disclosure of information which is in the public interest or is important for safeguarding public welfare in matters of health and safety. Further, several laws in Hong Kong provide that disclosures as a result of compliance with a requirement made by the relevant authorities will not be treated as a breach of any restriction imposed by contract or otherwise by law.[1]

In addition to the above-mentioned statutory confidentiality obligations, separate non-disclosure agreements can be signed. In an internal investigation, the employee should be expressly instructed to maintain confidentiality.

Privilege does not generally apply to internal investigation materials as the investigation does not constitute a relationship between a lawyer and their client, and even less so a judicial investigation. However, if a lawyer is appointed as an investigator, privilege may apply to materials exchanged between the lawyer and that client.

Legal professional privilege may attach to investigation materials if they are generated for the sole or dominant purpose of giving or obtaining legal advice (legal advice privilege); or created with the sole or dominant purpose of either obtaining or giving advice about or obtaining evidence to be used in an actual or reasonably contemplated litigation (litigation privilege).[1] Legal advice privilege applies to confidential communications between lawyers and their clients, whereas litigation privilege may extend to communications between lawyers, clients and third parties. The employer may withhold disclosure of any materials that are subject to either legal advice or litigation privilege.

In the context of a workplace investigation, internal interview records are protected by legal advice privilege if the dominant purpose of creating those records is to seek legal advice on potential disciplinary action against the employee. Such interview records are protected by litigation privilege if they are created to obtain evidence in an actual or reasonably contemplated litigation.

It should be noted that the point in time at which the sole or dominant purpose is judged is when the document is created. In other words, a document is not covered by litigation privilege if it was not created for litigation purposes but was subsequently used to obtain legal advice for litigation.[2] On a practical point, if the employer would like to minimise disclosure of the investigation by claiming privilege over relevant materials, it may wish to limit the number of documents created and persons to which they are circulated to avoid potential waiver of privilege.

As outlined above, all employees generally have the right to know whether and what personal data is being or has been processed about them (article 8 paragraph 1, Swiss Federal Act on Data Protection; article 328b, Swiss Code of Obligations).

The employer may refuse, restrict or postpone the disclosure or inspection of internal investigation documents if a legal statute so provides, if such action is necessary because of overriding third-party interests (article 9 paragraph 1, Swiss Federal Act on Data Protection) or if the request for information is manifestly unfounded or malicious. Furthermore, a restriction is possible if overriding the self-interests of the responsible company requires such a measure and it also does not disclose the personal data to third parties. The employer or responsible party must justify its decision (article 9 paragraph 5, Swiss Federal Act on Data Protection).[1]

The scope of the disclosure of information must, therefore, be determined by carefully weighing the interests of all parties involved in the internal investigation.

The employee under investigation has the right to be assisted by a lawyer during the interviews and, if the employee chooses to be so, the lawyer must also always be present. The employee may not, however, be accompanied by anyone other than a legal representative (ie, another employee cannot attend the interview).

Absent any right conferred by the employment contract or the relevant internal policy, employees do not have a right under Hong Kong law to be accompanied or have legal representation during an investigation meeting or interview. While the employee being investigated is entitled to seek his or her own legal advice during the investigation, employers have discretion on whether to allow the employee to be accompanied or represented by his or her legal adviser in an investigation meeting or interview. That said, to ensure fairness in the process and to avoid unnecessary allegations of undue influence, the employer may consider allowing the employee to have legal representatives present, especially if serious allegations are made against the employee and the outcome of the investigation could have a significant impact on the employee’s future.

In the case of an employee involved in an internal investigation, a distinction must be made as to whether the employee is acting purely as an informant or whether there are conflicting interests between the company and the employee involved. If the employee is acting purely as an informant, the employee has, in principle, no right to be accompanied by their own legal representative.[1]

However, if there are conflicting interests between the company and the employee involved, when the employee is accused of any misconduct, the employee must be able to be accompanied by their own legal representative. For example, if the employee's conduct might potentially constitute a criminal offence, the involvement of a legal representative must be permitted.[2] Failure to allow an accused person to be accompanied by a legal representative during an internal investigation, even though the facts in question are relevant to criminal law, raises the question of the admissibility of statements made in a subsequent criminal proceeding. The principles of the Swiss Criminal Procedure Code cannot be undermined by alternatively collecting evidence in civil proceedings and thus circumventing the stricter rules applicable in criminal proceedings.[3]

In general, it is advisable to allow the involvement of a legal representative to increase the willingness of the employee involved to cooperate.

Neither the works council nor the trade unions have any right to be informed or involved in the investigation. It is the employer who is responsible for carrying out the investigation. However, when the investigation is triggered due to a works council issuing an alert relating in particular to a “serious and imminent danger”, one member of the works council must be involved in the investigation process.

Unless the employment contract or the relevant internal policies specify otherwise, there is no automatic right under Hong Kong law for a works council or trade union to be informed or involved in a workplace investigation.

In general, works councils and trade unions are not very common in Switzerland and there are no statutory rules that would provide a works council or trade union a right to be informed or involved in an ongoing internal investigation. However, respective obligations might be foreseen in an applicable collective bargaining agreement, internal regulations or similar.

Apart from being informed of any facts and data concerning them being collected during the investigation, employees involved in the investigation do not have any specific rights. Some companies choose to use external firms specializing in psychosocial risk management, not only to conduct internal investigations, but also to provide additional psychological support for their employees, as part of the employer's safety obligation.

It could be stressful for employees to be involved in a workplace investigation, whether as the victim, the subject of an investigation or a witness. More transparency in the process would help reduce stress. This could be achieved by providing the relevant employees with the timeline for different stages of the investigation and regular updates.

The employer may also consider providing mental health support to the employees concerned, for example in the form of counselling services or medical consultations. Where appropriate, the employer may also consider making reasonable adjustments to the employee’s workload and work schedule to facilitate his participation in the investigation.

The employer does not generally need to provide specific support for employees that are subject to an internal investigation. The employer may, however, allow concerned employees to be accompanied by a trusted third party such as family members or friends.[1] These third parties will need to sign separate non-disclosure agreements before being involved in the internal investigation.

In addition, a company may appoint a so-called lawyer of confidence who has been approved by the employer and is thus subject to professional secrecy. This lawyer will not be involved in the internal investigation but may look after the concerned employees and give them confidential advice as well as inform them about their rights and obligations arising from the employment relationship.[2]

Unrelated matters revealed during the investigation do not necessarily mean that another investigation will be opened. Nevertheless, if reprehensible acts unrelated to the current investigation are revealed, the employer will need to take action and sanction the perpetrator (after checking the facts). Sometimes the only way to check the facts is to carry out another investigation on a separate matter. However, the investigation team may also consider if there is enough connection between the matters to widen the scope of the current internal investigation.

If unrelated matters are revealed during the investigation, the employer should consider whether an investigation is needed. If yes, the employer should decide whether it is appropriate to incorporate the new matters into the scope of the existing investigation by expanding the terms of reference. However, it may not be appropriate to do so if different individuals are concerned or such inclusion would unduly complicate or delay the progress of the existing investigation. If that is the case, the employer should commence a separate investigation.

There are no regulations in this regard in the Swiss employment law framework. However, in criminal proceedings, the rules regarding accidental findings apply (eg, article 243, Swiss Criminal Procedure Code for searches and examinations or article 278, Swiss Criminal Procedure Code for surveillance of post and telecommunications). In principle, accidental findings are usable, with the caveat of general prohibitions on the use of evidence.

The grievance may also have to be investigated (eg, moral/sexual harassment reported by an employee under investigation).

As discussed in question 11, an employer owes an implied obligation of trust and confidence towards its employees under common law. This means that an employer cannot disregard a genuine complaint made by an employee even if the employee is under internal investigation. The employer may have put in place an employee grievance handling policy, which should be followed when handling the employee’s grievance.

If the grievance raised relates to how the workplace investigation is being conducted (for example, it is alleged that the investigator has a conflict of interest or is biased), the employer should consider suspending the investigation until this grievance is properly addressed to ensure fairness. However, if the grievance is nothing but an attempt to delay or hinder the investigation, the employer may be entitled to proceed with the investigation regardless. The employer should therefore carefully assess the nature and validity of any grievance raised in each case. The employer should also consider its rights under the employment contract if the employee is being uncooperative or obstructive.

In the context of private internal investigations, grievances initially raised by the employee do not usually have an impact on the investigation.

However, if the employer terminates the employment contract due to a justified legal complaint raised by an employee, a court might consider the termination to be abusive and award the employee compensation in an amount to be determined by the court but not exceeding six months’ pay for the employee (article 336 paragraph 1 (lit. b) and article 337c paragraph 3, Swiss Code of Obligations). Furthermore, a termination by the employer may be challenged if it takes place without good cause following a complaint of discrimination by the employee to a superior or the initiation of proceedings before a conciliation board or a court by the employee (article 10, Federal Act on Gender Equality).

The investigation will likely be able to continue with the other employees and, as soon as the employee under investigation returns from sick leave, they will be able to be interviewed.

However, as disciplinary sanctions are time-barred after two months from the moment the misconduct was committed or from when the employer becomes aware of it, if the sick leave lasts for the whole of that period, the investigation must be conducted anyway. In this instance, the investigator can ask the employee to attend the interview despite being on sick leave or arrange for the interview to take place using other means (eg, conference call). As a last resort, a questionnaire can be sent to the employee, but the pros and cons must be assessed as this is a way of information gathering that carries a certain amount of risk, could be less reliable and is of less probative value.

If the employee under investigation goes off sick, the employer should ascertain the medical condition of the employee and when he or she is likely to return to fitness. If the employee is unlikely to return to work for a reasonable time, the employer should consider what adjustments can be made to the investigation process to continue with the investigation. If the employee’s input is necessary for the conclusion of the investigation, the employer may invite the employee to provide information by way of a written questionnaire or to attend a virtual meeting. However, the employee may not necessarily agree to these proposals, especially if he or she is unwell. In such circumstances, the employer may not be able to conclude the investigation in the absence of the employee.

The time spent on the internal investigation by the employee should be counted as working time[1]. The general statutory and internal company principles on sick leave apply. Sick leave for which the respective employee is not responsible must generally be compensated (article 324a paragraph 1 and article 324b, Swiss Code of Obligations). During certain periods of sick leave (blocking period), the employer may not ordinarily terminate the employment contract; however, immediate termination for cause remains possible.

The duration of the blocking period depends on the employee's seniority, amounting to 30 days in the employee's first year of service, 90 days in the employee's second to ninth year of service and 180 days thereafter (article 336c paragraph 1 (lit. c), Swiss Code of Obligations).

A criminal investigation always takes precedence over other investigations. However, this does not mean that the internal investigation has to stop. It can and should continue, and the report drawn up upon completion of the investigation could be used by the authorities in the criminal investigation. In some cases, especially when privilege does not apply, police or regulatory authorities may request that the employer share such evidence. However, even when privilege does apply, there is no certainty that the evidence would not have to be communicated to certain authorities.

Some administrative authorities often challenge the application of legal privilege or try to reduce its scope. For example, the French financial markets authority (AMF) regularly puts forward its view of legal privilege, according to which an email where a lawyer is only copied (and is not one of the main recipients) in from one of their clients is not confidential and can therefore be disclosed in proceedings. However, if the AMF investigators impose disclosure of privileged documents, this should result in the annulment of the investigation procedure. By way of exception, legal privilege cannot be invoked against certain other authorities, such as the URSSAF (authority in charge of collecting social security contributions) or the DGCCRF (directorate-general for competition, consumer protection and anti-fraud investigations). Where legal privilege is enforceable, the judge must first determine whether the documents constitute correspondence relating to defence rights and, second, must cancel the seizure of documents that they find to be covered by legal privilege due to the principle of professional secrecy of relations between a lawyer and their client and the rights of defence.

Where there is a parallel criminal or regulatory investigation, the employer should handle the workplace investigation with extra care and ensure that it complies with all applicable legal requirements or lawful requests made by the relevant authorities concurrently. While there may be reasons why the employer wants to progress with its investigation as soon as possible, the employer should not take any steps that hinder or obstruct the parallel investigations. Therefore, it may be appropriate for the employer to stay its workplace investigation if its continuation may prejudice the parallel investigations.

The employer may also find itself duty-bound to stay the workplace investigation if it is subject to statutory secrecy obligations vis-à-vis the relevant law enforcement agency or regulatory body. As mentioned in question 10, several laws in Hong Kong impose secrecy obligations on any person who has acquired confidential information about certain law enforcement agencies or regulatory bodies and the investigations being conducted. The employer should assess whether they could continue with the workplace investigation without breaching secrecy obligations. The employer should take a prudent approach and may discuss with the relevant authority before proceeding further with its workplace investigation.

Depending on the nature of the matter, authorities in Hong Kong handling a criminal or regulatory investigation may be empowered to seize, or compel persons who are the subject of an investigation or assisting in such an investigation (which may include the employer) to produce, documents or evidence that are relevant to the matters being investigated. For example:

• the police or the Independent Commission Against Corruption may, under a search warrant (or in certain circumstances, without a warrant), inspect and take possession of articles or documents inside the premise of the employer they reasonably suspect to be of value to the investigation of the suspected offence; and
• the SFC or the Competition Commission may, under the SFO or Competition Ordinance (as applicable), require the employee under investigation or the employer to produce documents, attend interviews, and, specifically for the SFC, provide the investigator with all assistance he or she ­­­can give. Both authorities may also obtain a warrant from the Hong Kong courts to search the premise of the employer and obtain documents or information it reasonably believes to be relevant to its investigation.

Documents created and evidence gathered by the employer during its workplace investigation (such as witness statements or investigation reports) may be subject to production requests of, or may be seized by, the authorities mentioned above (unless legal professional privilege is attached). The employer should ensure that it complies with all lawful requests from the authorities.

The actions of the employer may carry through to a subsequent state proceeding. First and foremost, any prohibitions on the use of evidence must be considered. Whereas in civil proceedings the interest in establishing the truth must merely prevail for exploitation (article 152 paragraph 2, Swiss Civil Procedure Code), in criminal proceedings, depending on the nature of the unlawful act, there is a risk that the evidence may not be used (see question 27 and article 140 et seq, Swiss Civil Procedure Code).

The employee under investigation, like the other employees interviewed and the whistleblower, must be informed that the investigation has been completed. However, there is no obligation to provide them with the report and, for reasons of confidentiality, it is very often best not to do so.

The employer is generally not obliged under Hong Kong law to inform the employee under investigation of the outcome of the investigation absent any express obligation under the employment contract, even where the investigation has led to a decision to terminate the employee. However, to avoid any unnecessary claim of unlawful dismissal or dismissal without a valid reason, the employer should inform the employee of the reason for his or her termination, even if the investigation results may not be shared in full with the employee.

Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.

The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]

There is no obligation to share the investigation report. The findings, or a summary of them without revealing any confidential information, may be disclosed, but it is the employer’s responsibility to keep the identity of every person interviewed confidential.

The employer is generally not obliged to share the investigation report or the findings with the employee under Hong Kong law, absent any express obligations under the employment contract.

However, according to the PDPO, the content of the investigation report or meeting minutes related to the employee (including any findings and opinions expressed in such documents) are likely to constitute the personal data of the employee under investigation. In that case, the employee may have a right under the PDPO to obtain a copy of such documents by making a statutory data access request after the workplace investigation is completed. The employer’s obligation to comply with such request is subject to certain exemptions under Part 8 of the PDPO, which include (among others) an exemption on the provision of personal data held for the prevention, preclusion or remedying of unlawful or seriously improper conduct, and the disclosure of which would be likely to prejudice the said purpose or directly or indirectly identify the person who is the source of the data.[1] Therefore, where there is a parallel criminal proceeding or investigation that has not been concluded, the employer may reject an employee’s data access request on the basis that the requested disclosure may prejudice the prevention and remedy of the unlawful conduct. Further, any information protected by legal privilege is also exempt from disclosure under Part 8 of the PDPO.[2]

If the requested documents also contain the personal data of any other third parties (such as other co-workers of the employee who have also participated in the investigation), the employer should always redact or erase such data before providing the requested documents to the employee under investigation, unless the relevant third parties have consented to the disclosure of the data.

In principle, there is no obligation to disclose the final investigation report. Disclosure obligations may arise based on data protection law vis-à-vis the persons concerned (eg, the accused). Likewise, there is no obligation to disclose other documents, such as the records of interviews. The employee should be fully informed of the final investigation report, if necessary, with certain redactions (see question 22). The right of the employee concerned to information is comprehensive (ie, all investigation files must be disclosed to him).[1] Regarding publication to other bodies outside of criminal proceedings, the employer is bound by its duty of care (article 328, Swiss Code of Obligations) and must protect the employee as far as is possible and reasonable.[2]

The employer can decide to sanction the person who was under investigation or to close the case. The employer may also need to protect any victims, witnesses and whistleblowers. If, during the investigation, it is discovered that a supplier or other commercial partner is implicated, the relevant contract may be terminated. The employer can take legal action , file a complaint (if the company is a direct victim of a criminal offence) or report the offence to the public prosecutor’s office. The employer must archive the file or ensure its lawful preservation after a certain period.

If the outcome of the investigation reveals that misconduct has been committed by the employee, the employer may consider whether it should allow the employee to defend him or herself against such findings. If the employment contract or relevant internal policies specify a right to be heard on the part of the employee through a disciplinary hearing before any actions can be taken against him or her, such procedures should be followed.

Assuming the employer maintains its findings that the employee has committed misconduct after the conclusion of the disciplinary hearing (if any), the employer may consider taking one of the following disciplinary actions against the employee depending on the nature and severity of the misconduct:

• Verbal or written warning – this is a common form of disciplinary action. The employer may consider including the nature of the misconduct and the potential consequences of repeating such misconduct (for example, termination of employment) in the warning to be given to the employee;
• Termination with notice – the EO allows employers and employees to terminate the employment with notice. It is not necessary to give reasons for the termination unless the employee concerned has been employed for at least 24 months, in which case the employer shall demonstrate a valid reason for the termination as defined under the EO;
• Suspension – the employer may suspend the employee without pay for up to 14 days in circumstances where the misconduct concerned justifies a summary dismissal, or where a decision on summary dismissal is pending. The employee may also be suspended where there is a criminal proceeding against him or her relevant to the investigation, until the conclusion of the criminal proceeding (as discussed in question 3);[1] and
• Summary dismissal – the employer may terminate an employment contract without notice if the employee is found to have:
  • wilfully disobeyed a lawful and reasonable order;
  • failed to duly and faithfully discharge his duties;
  • committed fraud or acted dishonesty; or
  • been habitually neglectful in his duties.[2]

If the investigation uncovers misconduct, the question arises as to what steps should be taken. Of course, the severity of the misconduct and the damage caused play a significant role. Furthermore, it must be noted that the cooperation of the employee concerned may be of decisive importance for the outcome of the investigation. The possibilities are numerous, ranging, for example, from preventive measures to criminal complaints.[1]

If individual disciplinary actions are necessary, these may range from warnings to ordinary or immediate termination of employment.

The findings must be submitted to the employer or management, but there is no obligation to disclose them to anybody else. The only exception is if a judicial investigation has been opened. In this case, the entire report must be provided to the authorities if the judge requests this. Normally the investigators only take written notes and there is no audio or video recording, unless the employee consents. Whether or not to make a voluntary disclosure of wrongdoing is a tactical decision for companies. Disclosure may mitigate fines and penalties or even help the employer avoid liability entirely. However, the downsides of disclosure include increased costs, the possibility of a follow-on government investigation and exposure to penalties. Thus, most companies assess their options on a case-by-case basis to determine what steps would be in the best interests of the company.

As mentioned in questions 21, 22 and 23, under Hong Kong law, the employer is generally not obliged to actively disclose the findings of a workplace investigation to any party.

Having said that, the employer should be aware of certain statutory disclosure requirements that may become applicable as a result of the matters revealed during the workplace investigation. For example, if the investigation reveals or gives rise to any knowledge or suspicion that any property represents the proceeds of an indictable offence[1], drug trafficking[2], or terrorism[3], the employer is required to report its knowledge or suspicion, together with any matter on which that knowledge or suspicion is based, to the JFIU as soon as is reasonably practicable (even where the investigation has not yet been concluded). Employers who are licensed corporations must also provide the SFC with information about whether departing licensed employees were the subject of an internal investigation in the six months prior to his/her departure. If the internal investigation commences after the departure of the licensed employee, the licensed corporation should notify the SFC as soon as practicable[4].

In any event, as in question 14, if any documents related to the investigation are protected by legal professional privilege, they can generally be kept confidential and would not be subject to disclosure even if the employer is subject to a mandatory reporting or disclosure obligation.

The employer is generally not required to disclose the final report, or the data obtained in connection with the investigation. In particular, the employer is not obliged to file a criminal complaint with the police or the public prosecutor's office.

Exceptions may arise, for example, from data protection law (see question 22) or a duty to release records may arise in a subsequent state proceeding.

Data voluntarily submitted in a proceeding in connection with the internal investigation shall be considered private opinion or party assertion.[1] If the company refuses to hand over the documents upon request, coercive measures may be used under certain circumstances.[2]

If the outcome of the internal investigation has led to the sanctioning of an employee, this sanction may no longer be invoked to support a new sanction after three years. Moreover, under the GDPR principles, the duration of retention must be proportional to the use of the data. Therefore, the data must be retained only for a period that is “strictly necessary and proportionate”. If the employer wants to keep information about the investigation in the longer term, it is possible to archive the employee’s record even though the employer will no longer be able to use it against the employee after three years.

There is no legal requirement in Hong Kong on this. However, since the investigation records will likely contain personal data, employers should be mindful of the requirement under the PDPO that personal data should not be kept for longer than necessary.[1]

According to the Code of Practice on Human Resources Management published by the Privacy Commissioner for Personal Data, generally, employment data about an employee can be kept for the entire duration of his or her employment, plus a recommended period of no more than seven years after the employee leaves employment unless there is a subsisting reason that justifies a longer retention period. A longer retention period may be justified where there is ongoing litigation or a parallel investigation. Even where it is deemed necessary to retain the outcome of the investigation concerning a departed employee, the employer should ensure that other personal data on the employee’s record (that is unrelated to the purpose of retention) are erased after the expiry of the recommended retention period.

From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.

From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]

Within the context of an investigation following a whistleblower alert, any violation of the confidentiality obligation is punishable by two years’ imprisonment and a €30,000 fine.

If the employer fails to comply with its obligation to protect its employees’ safety, the employer will be liable for damages resulting from any failings during the investigation (eg, if sexual harassment is reported and no action is taken by the employer)

If the employer failed to comply with a requirement that is expressly stipulated in the employment contract or employee handbook (such as a procedural requirement to hold a disciplinary hearing or to provide certain information to the employee), the employer could be liable for breaching an express term in the employment contract.

Even where the employment contract does not contain express provisions for the conduct of an internal investigation, the employer is under an implied obligation of trust and confidence under common law (as discussed in question 11), which requires it to conduct the investigation and reach its findings reasonably and rationally in accordance with the evidence available and in good faith.[1] If the employer reached a decision that no reasonable employer would have reached, the conduct of the investigation may be in breach of the employer’s implied obligation of trust and confidence.

If the error in the investigation has led to a termination of employment (whether by way of summary dismissal or termination by notice), the employee may be able to bring a statutory claim for wrongful dismissal, unlawful dismissal or dismissal without a valid reason (as applicable).[2] If such a claim is successful, in addition to ordering the employer to pay monetary compensation, the court or tribunal may also make a reinstatement order (an order that the employee shall be treated as if he had not been dismissed) or re-engagement order (an order that the employee shall be re-engaged in employment on terms comparable to his or her original terms of employment) for the affected employee.

The employer may also be liable for unlawful discrimination under Hong Kong law if the investigation has been conducted in a discriminatory manner or the outcome of the investigation reflects differential and less favourable treatment of the employee concerned based on grounds of sex, marital status, disability, family status or race.

As there are no specific regulations for internal investigations, the usual legal framework within which the employer must act towards the employee derives from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights.

But, for example, unwarranted surveillance could conceivably result in criminal liability (article 179 et seq, Swiss Criminal Code) for violations of the employee's privacy. Furthermore, errors made by the employer could have an impact on any later criminal proceedings (eg, in the form of prohibitions on the use of evidence).[1]

Evidence obtained unlawfully may only be used in civil proceedings if there is an overriding interest in establishing the truth (article 152 paragraph 2, Swiss Civil Procedure Code). Consequently, in each case, a balance must be struck between the individual’s interest in not using the evidence and in establishing the truth.[2] The question of the admissibility of evidence based on an unlawful invasion of privacy is a sensitive one – admissibility in this case is likely to be accepted only with restraint.[3] Since the parties in civil proceedings do not have any means of coercion at their disposal, it is not necessary, in contrast to criminal proceedings, to examine whether the evidence could also have been obtained by legal means.[4]

Unlawful action by the employer may also have consequences on future criminal proceedings: The prohibitions on exploitation (article 140 et seq, Swiss Criminal Procedure Code) apply a priori only to evidence obtained directly from public authorities. Evidence obtained unlawfully by private persons (ie, the employer) may also be used if it could have been lawfully obtained by the authority and if the interest in establishing the truth outweighs the interest of the individual in not using the evidence.[5] Art. 140 paragraph 1 Swiss Criminal Procure Code remains reserved: Evidence obtained in violation of Art. 140 paragraph 1 Swiss Criminal Procure Code is subject to an absolute ban on the use of evidence (e.g. evidence obtained under the use of torture[6]).[7]