Workplace Investigations

Some companies require an employee subject to investigation to sign an NDA or other similar documents (eg, a pledge of confidentiality) agreeing not to disclose information relating to the investigation to outside parties.

NDAs can be used for some investigations carried out in the private sector. However, under the Swedish Whistleblowing Act, a contract is void to the extent it retracts or restricts a person’s rights under the Swedish Whistleblowing Act. An NDA that restricts the right to report irregularities to authorities or the media would, therefore, typically be void.

In addition to the above-mentioned statutory confidentiality obligations, separate non-disclosure agreements can be signed. In an internal investigation, the employee should be expressly instructed to maintain confidentiality.

As discussed in question 22, when taking disciplinary action against an employee based on the outcome of an investigation, the company would need to disclose sufficient detail on the employee’s wrongdoing. However, this does not mean that the full investigation report would need to be shared with the employee to be disciplined. Key details of the investigation findings that apply to the relevant employee due to be disciplined should be shared, and not other findings concerning other persons.

There is also no requirement under Korean law for a company to disclose the investigation report or investigation findings to the whistleblower. If the company discloses the personal identity of the target employees, such disclosure could constitute a violation of the PIPA , libel or defamation under the Criminal Code. If the whistleblower strongly requests that the company share the investigation report or the findings, the company may consider providing a summary of the key findings concerning the allegations that the whistleblower raised, without disclosing personal information.

There is no obligation to share the investigation report, neither in full nor key findings, with the involved parties. An assessment needs to be made in each case of what is appropriate to share and with whom.

When sharing an investigation report, certain data protection considerations must be made. A purpose and legal basis for the sharing must be established and, in principle, documented.

If the Swedish Whistleblowing Act applies, the duty of confidentiality and the restrictions on access to and disclosure of personal data must be considered (see question 10).

In principle, there is no obligation to disclose the final investigation report. Disclosure obligations may arise based on data protection law vis-à-vis the persons concerned (eg, the accused). Likewise, there is no obligation to disclose other documents, such as the records of interviews. The employee should be fully informed of the final investigation report, if necessary, with certain redactions (see question 22). The right of the employee concerned to information is comprehensive (ie, all investigation files must be disclosed to him).[1] Regarding publication to other bodies outside of criminal proceedings, the employer is bound by its duty of care (article 328, Swiss Code of Obligations) and must protect the employee as far as is possible and reasonable.[2]