Workplace Investigations
Contributing Editors
Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.
IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.
Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.
Choose countries
Choose questions
Choose the questions you would like answering, or choose all for the full picture.
07. What data protection or other regulations apply when gathering physical evidence?
07. What data protection or other regulations apply when gathering physical evidence?
Hong Kong
Hong Kong
- at Slaughter and May
- at Slaughter and May
- at Slaughter and May
If physical evidence contains data relating to an individual, from which the identity of the individual can be ascertained,[1] the data would constitute personal data under the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO). The PDPO sets out several data protection principles that the employer must comply with while processing personal data, including:[2]
- personal data must be collected for a lawful purpose related to a function or activity of the employer and should not be excessive for this purpose. An internal investigation would be regarded as a lawful purpose;
- personal data must be accurate and not kept longer than is necessary;
- personal data must not be used for a purpose other than the internal investigation (or other purposes for which the data was collected) unless the employee consents to a new use or the new use falls within one of the exceptions provided in the PDPO;
- personal data must be safeguarded against unauthorised or accidental access, processing or loss; and
- the employee whose personal data has been collected has the right to request access to and correction of his or her personal data retained by the employer.
If an employer wants to gather evidence through employee monitoring, it should ensure that the act of monitoring complies with the data protection principles of the PDPO if the monitoring activity would amount to the collection of personal data. The Privacy Commissioner for Personal Data has issued guidelines to employers on the steps they can take in assessing whether employee monitoring is appropriate for their businesses.[3] As a general rule, employee monitoring should be conducted overtly. Further, those who may be affected should be notified in advance of the purposes the monitoring is intended to serve, the circumstances in which the system will be activated, what personal data (if any) will be collected and how the personal data will be used.
Covert surveillance of employees should not be adopted unless it is justified by relevant special circumstances. Employers should consider whether there is reason to believe that there is an unlawful activity taking place and the use of overt monitoring would likely prejudice the detection or collection of evidence.[4] Even if covert monitoring is justified, it should target only those areas in which an unlawful activity is likely to take place and be implemented for a limited duration of time.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]
It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).
It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.
Turkey
Turkey
- at Paksoy
- at Paksoy
- at Paksoy
- at Paksoy
The conditions applicable to gathering physical evidence mainly stem from the precedents of the Turkish Constitutional Court about employment disputes and the rules set forth under Turkish Law No. 6698 on the Protection of Personal Data (DPL). It is generally accepted that employers can gather physical evidence for certain legitimate purposes, such as disciplinary investigations, the prevention of bribery and corruption, fraud or theft, money laundering, and employee performance monitoring and compliance. In doing so, employers must, however, comply with the fundamental principles of the Turkish Constitutional Court as briefly described below:
- The grounds for the gathering of evidence must be legitimate. The definition of the legitimate interests of the employer may change depending on the characteristics of the business, workplace and employee job description, as well as the specific circumstances of the case. Therefore, it is advisable to carry out a balancing test between the legitimate interest the employer is seeking to protect and the employee’s interest in the protection of their privacy.
- The collection activities must be proportionate, in the sense that the measure implemented by the employer must be appropriate and reasonably necessary to achieve the legitimate purpose, without infringing upon the fundamental rights and freedoms of the employees. For instance, e-mail monitoring to collect evidence may not be proportionate if it is determined that e-mails that are not related to the incident subject to investigation are also accessed. To achieve this, certain keywords or algorithms can be used while monitoring e-mails during a disciplinary investigation.
- The collection process must be necessary to achieve the purpose. In other words, the collection of physical evidence must only be carried out to the extent there are no other measures allowing the employer to achieve its purpose, such as witness testimony, workplace records, or examining the results of projects. If the purpose can be achieved through less invasive means, the collection of physical evidence may not comply with the principles established by the decisions of the Constitutional Court.
Separately, depending on the type of physical evidence collected, the collection process may lead to the processing of the concerned employees’ personal data. Under the DPL, personal data collected in Turkey can only be processed if the explicit consent of the data subject is obtained; or the data is processed based on one of the exceptions to consent provided by the law. To the extent the data processing can be deemed to be based on the pursuit of a legitimate interest of the employer, it should also meet the following conditions:
- it should be the most convenient and efficient method to identify any employee wrongdoing to protect the legitimate interests of the company; and
- the data processing should not harm the fundamental rights and freedoms of the employees.
The employer should in any case comply with the obligation to inform employees before the processing of their data, through a privacy notice containing mandatory information required by the DPL.
In addition, as a general principle, the evidence-gathering process should always be conducted based on the assumption that the internal investigation can lead to litigation. Any evidence that will be used in litigation needs to have been gathered in compliance with the law. In both criminal and civil litigation, the courts will review each piece of evidence to confirm whether it was gathered through lawful methods and disregard any evidence that fails to comply with due process.
27. What legal exposure could the employer face for errors during the investigation?
27. What legal exposure could the employer face for errors during the investigation?
Hong Kong
Hong Kong
- at Slaughter and May
- at Slaughter and May
- at Slaughter and May
If the employer failed to comply with a requirement that is expressly stipulated in the employment contract or employee handbook (such as a procedural requirement to hold a disciplinary hearing or to provide certain information to the employee), the employer could be liable for breaching an express term in the employment contract.
Even where the employment contract does not contain express provisions for the conduct of an internal investigation, the employer is under an implied obligation of trust and confidence under common law (as discussed in question 11), which requires it to conduct the investigation and reach its findings reasonably and rationally in accordance with the evidence available and in good faith.[1] If the employer reached a decision that no reasonable employer would have reached, the conduct of the investigation may be in breach of the employer’s implied obligation of trust and confidence.
If the error in the investigation has led to a termination of employment (whether by way of summary dismissal or termination by notice), the employee may be able to bring a statutory claim for wrongful dismissal, unlawful dismissal or dismissal without a valid reason (as applicable).[2] If such a claim is successful, in addition to ordering the employer to pay monetary compensation, the court or tribunal may also make a reinstatement order (an order that the employee shall be treated as if he had not been dismissed) or re-engagement order (an order that the employee shall be re-engaged in employment on terms comparable to his or her original terms of employment) for the affected employee.
The employer may also be liable for unlawful discrimination under Hong Kong law if the investigation has been conducted in a discriminatory manner or the outcome of the investigation reflects differential and less favourable treatment of the employee concerned based on grounds of sex, marital status, disability, family status or race.
Switzerland
Switzerland
- at Bär & Karrer
- at Bär & Karrer
As there are no specific regulations for internal investigations, the usual legal framework within which the employer must act towards the employee derives from general rules such as the employer's duty of care, the employee's duty of loyalty and the employee's data protection rights.
But, for example, unwarranted surveillance could conceivably result in criminal liability (article 179 et seq, Swiss Criminal Code) for violations of the employee's privacy. Furthermore, errors made by the employer could have an impact on any later criminal proceedings (eg, in the form of prohibitions on the use of evidence).[1]
Evidence obtained unlawfully may only be used in civil proceedings if there is an overriding interest in establishing the truth (article 152 paragraph 2, Swiss Civil Procedure Code). Consequently, in each case, a balance must be struck between the individual’s interest in not using the evidence and in establishing the truth.[2] The question of the admissibility of evidence based on an unlawful invasion of privacy is a sensitive one – admissibility in this case is likely to be accepted only with restraint.[3] Since the parties in civil proceedings do not have any means of coercion at their disposal, it is not necessary, in contrast to criminal proceedings, to examine whether the evidence could also have been obtained by legal means.[4]
Unlawful action by the employer may also have consequences on future criminal proceedings: The prohibitions on exploitation (article 140 et seq, Swiss Criminal Procedure Code) apply a priori only to evidence obtained directly from public authorities. Evidence obtained unlawfully by private persons (ie, the employer) may also be used if it could have been lawfully obtained by the authority and if the interest in establishing the truth outweighs the interest of the individual in not using the evidence.[5] Art. 140 paragraph 1 Swiss Criminal Procure Code remains reserved: Evidence obtained in violation of Art. 140 paragraph 1 Swiss Criminal Procure Code is subject to an absolute ban on the use of evidence (e.g. evidence obtained under the use of torture[6]).[7]
[1] Cf. ATF 139 II 7.
[2] ATF 140 III 6 E. 3
[3] Pascal Grolimund in: Adrian Staehelin/Daniel Staehelin/Pascal Grolimund (editors), Zivilprozessrecht, Zurich/Basel/Geneva 2019, 3rd Edition, §18 N 24a.
[4] Pascal Grolimund in: Adrian Staehelin/Daniel Staehelin/Pascal Grolimund (editors), Zivilprozessrecht, Zurich/Basel/Geneva 2019, 3rd Edition, §18 N 24a.
[5] Decision of the Swiss Federal Court 6B_1241/2016 dated 17. July 2017 consid. 1.2.2; Decision of the Swiss Federal Court 1B_22/2012 dated 11 May 2012 consid. 2.4.4.
[6] Jérôme Benedict/Jean Treccani, CR-CPP Art. 140 N. 5 and Art. 141 N. 3.
[7] Yvan Jeanneret/André Kuhn, Précis de procédure pénale, 2nd Edition, Berne 2018, N 9011.
Turkey
Turkey
- at Paksoy
- at Paksoy
- at Paksoy
- at Paksoy
The nature of legal exposure is very much dependent on the legal action the employer has taken after the investigation. The employer may be subject to a wrongful termination lawsuit to be filed by the employee, which may result in the payment of compensation to the employee of between eight and 12 months’ salary, if the court concludes that the termination is wrongful. This may also include monetary and moral damages claims. If no termination has taken place, the employee may terminate his or her employment with just cause if the employer has erred in its neutral fact-finding mission and this affects the employee. The employee may also file a criminal complaint to the extent that the investigation findings incriminate the employee in error.