Workplace Investigations

A workplace investigation will generally be triggered by an employee making a complaint; however, issues may also be brought to the attention of an employer through an anonymous tip, by suppliers or contractors, from customers or because of observations and hearsay.

Complaints can be made directly to Human Resources (HR), anonymously, by email to a line manager or a third party. While complaints do not need to be written and can be informal, brief or verbal, complaints of this nature can make the process harder and more information may be required.

The receipt of a complaint does not necessarily mean that an employer needs to undertake an investigation immediately. A grievance policy ordinarily contains a multi-step approach to dealing with complaints, starting with internal resolution options such as informal discussions, conciliation and mediation. However, an investigation should be commenced where:

• the complaint alleges serious misconduct or unlawful conduct;
• the employer is required to conduct a workplace investigation as per an employment contract, policy, procedure or industrial instrument; or
• the complaint is complex and requires clarity on what has occurred to establish the facts.

In general, an internal investigation is only initiated if there is suspicion of a violation. The decision to commence an internal investigation is up to the company, and it has to weigh the pros and cons. For limited liability companies, which are subject to the Association Responsibility Act, an internal investigation may exempt them from criminal liability. Disadvantages may include investigation costs, disruption of operations, discovery of information requiring later disclosure, possible negative media coverage and increased risk of exposure to external parties.

Investigations can relate to specific individuals, departments, or the entire company. An investigation may include various measures, such as obtaining and analysing files and documents, conducting questionnaires and employee interviews, monitoring internet use, video or telephone surveillance of employees and setting up whistleblowing hotlines. Not all measures are acceptable without restrictions. The provisions of labour law and data protection law must always be complied with.

To avoid wasting resources, the objectives of the investigation should be defined in advance. In addition, the selection and sequence of instruments to be used should be determined. A legal assessment of the chosen measures is essential to avoid legal complications.

First, the employer should appoint an investigator or investigative team that will be responsible for conducting the investigation. Next, the employer or the investigators might think about communicating with the involved employees. It depends on the situation if this is a good idea or not. In general, it can be recommended that the employer is transparent towards the involved employees and openly communicates about the (start of the) investigation process. This is definitively the case if it is already clear that the involved employees are under scrutiny because of their actions. In this case, the actual investigation can begin with a hearing of the involved employees. However, if there is a risk that employees will hide or destroy evidence or will collude to prevent the employer from finding the truth, the investigation can also start without any communication. In this case, it would be better to start collecting evidence before hearing from the employees involved.

Workplace investigations usually commence on the receipt of an allegation, which can be presented orally or in writing to an assigned member of the company (usually, within the HR, Compliance or Legal Departments, or to a direct supervisor) or via an external channel, as determined by the company’s policy.

The employer will generally obtain clues of employees' misconduct, actively or passively, through such means as internal audit, employee whistleblowing, whistleblowing from suppliers or partners, regular or irregular compliance management assessment of the employer and management concerns, and carry out investigation based on such clues. Meanwhile, the employer will further investigate whether the employees involved have committed other acts of misconduct.

The investigation is usually carried out from outside to inside and from the macro level to the specific level. That is to first interview the provider of the clues and other insiders for verification and obtaining further information. Then to conduct internal and external system and written documents review based on the investigation clues. Preliminary evidence will be formed after the basic verification of facts. Finally, the employer will interview the employees involved and listen to their explanations, and finally determine the subsequent handling method.

When the employer becomes aware of possible misconduct, the employer must commence an investigation immediately, in practice within about two weeks. The information may come to the employer's knowledge via, for example, the employer's own observations, from the complainant or their colleagues or an employee representative.

When a report of wrongdoing is brought to the employer's attention, whether through a whistleblower or another channel, and an internal investigation is expected, it may be either mandatory or optional, depending on the facts of the alleged wrongdoing.

The investigation will be mandatory when the alleged wrongdoing relates to an ethical issue according to anti-corruption regulations, the employer’s duty of due diligence regarding, for example, human rights or environmental matters, or where the works council has issued an alert relating to a “serious and imminent danger” (or to “fundamental human rights”), but also whenever it relates to the employer's obligation to ensure employee safety (eg, moral or sexual harassment).

If the investigation is not mandatory, it is up to the employer to decide whether or not to carry out the investigation. Several key questions can help the employer determine whether or not it is appropriate to carry out an investigation, such as:

• What are the benefits of doing nothing? The company will have to draw up a list of the pros and cons of an investigation, bearing in mind that in some cases a poorly conducted investigation could make the situation worse;
• What is the priority (eg, obtaining or securing evidence, or correcting the irregularity)?
• What rules or codes of ethics must the company comply with?
• Should external legal counsel only advise the company or should they play a major role in the investigation process by becoming an investigator?

Typical triggers for a workplace investigation may be internal hints (eg, from employees), internal audits, compliance or the legal department. However, investigations by the public prosecutor or other authorities can also lead to a workplace investigation.

There are no strict guidelines for the course of the investigation. The measures to be taken and the sequence in which they will be carried out to clarify the facts must be decided on a case-by-case basis. However, the first step should be to secure evidence. All relevant documents and records (eg, e-mails, hard disks, text messages, data carriers, copies) should be collected and employees may be interviewed. The second step should be to evaluate the evidence and the third step is to decide how to deal with the results (eg, whether any disciplinary measures should be taken or the intended procedures should be adjusted).

Irrespective of how a workplace investigation is commenced, when it comes to severe breaches of duty by an employee, a two-week exclusion period for issuing a termination for cause must be observed at all stages. This two-week period starts when the employer becomes aware of the relevant facts but is suspended as long as the employer is still investigating and collecting information, provided that the investigation is carried out swiftly.

Internal investigations can be initiated either upon a complaint or report by an employee, (or other persons providing services or seeking employment, etc) in the workplace or by the employer as part of their managerial right.

If from an employee, the complaint or report may fall within the scope of an internal disciplinary procedure, if any, or may concern an alleged workplace violence or harassment incident, or fall within the scope of L.4990/2022 on the protection of persons who report breaches of Union law.  

Reports by whistleblowers are submitted to the manager with responsibility for receiving and monitoring reports, a person appointed for that purpose under L.4990/2022. Complaints for incidents and harassment in the workplace can also be submitted, according to L.4808/2022, to the person or internal body specifically assigned to receive such complaints. Both laws require the employer to define the persons competent for receiving and monitoring complaints or reports and notifying the employees stricto sensu and any other persons falling within the scope of the respective provisions.

The circumstances in which an employer commences a workplace investigation may vary. However, it is common that an employer will consider it necessary to commence a workplace investigation upon receipt of a complaint concerning a fellow employee. Sometimes, the complaint may be made anonymously. If the employer considers there to be substance in the complaint, it may commence an investigation to find out the truth of the matter, resolve the complaint and, if necessary, improve its systems and controls to prevent the reoccurrence of any misconduct.

A workplace investigation may be warranted if the employer receives an enquiry from a regulator concerning its affairs or an employee’s conduct. The investigation findings could enable the employer to respond to the regulator (which could be a mandatory obligation) and at the same time assess its risk exposure.

As a precursor to the actual disciplinary process, investigations are usually initiated when the employer becomes aware of an allegation or complaint of misconduct, or observes any acts or omissions by an employee constituting workplace misconduct. The employer (or investigating committee – which could also be an outside agency like an auditor or law firm appointed by the employer) would generally commence the investigation by speaking with the complainant (or whistleblower) to gather as many details as possible (relevant facts, evidence, list of witnesses, etc) concerning the allegations, so that the next steps and approach can be determined upfront.

Investigations can start in multiple ways. They usually stem from an employee raising a grievance, a bullying complaint, or a possible protected disclosure. Investigations may also stem from the employer in a disciplinary context, or indeed can be commenced if an external complaint or issue is raised by a third party of the organisation.

The first thing the employer must consider is whether an investigation is necessary. It may be that the issue at hand can be resolved informally or is of such a nature that it cannot be investigated, either through a lack of detail or simply because the subject of the complaint is no longer an employee. Any such decision to investigate or not should be carefully documented.

The next step to determine is the nature of the investigation. It should be clear at the outset whether the investigation is simply a fact-gathering exercise or if the investigator will be tasked with making findings on the evidence. The distinction is significant as a fact-gathering investigation can proceed without prompting the full panoply of rights, but the basic principles of fairness should still be applied. A fact-gathering investigation should determine whether there is or is not, a case to answer. If a disciplinary hearing follows then the rights outlined in question 1 will apply at that stage. If it is a fact-finding investigation, the rights apply from the outset of the process. The employee who is required to respond to the issues (the respondent) should be fully aware of the extent of the investigation. The investigator appointed to do the investigation should be clear about what is expected of them.

If the employer believes an investigation is necessary, it should be acknowledged and started without delay. In particular, according to the Protected Disclosures legislation, a report should be acknowledged within seven days.

An employer should consider and identify the scope of the investigation and establish who will investigate the matter. Terms of reference under which the investigation will be carried out should be established by the employer and shared with the employee raising the issue (the complainant). An employer should not seek agreement on the terms, but invite commentary to ensure that the full scope of the investigation is captured within the terms of reference. Robust terms of reference that lay down the clear parameters of the investigation will assist the investigator and all parties involved in the process.

Generally speaking, a workplace investigation can commence either as a consequence of facts reported by employees or third parties (either anonymous or not), for instance within a whistleblowing procedure or as part of normal and periodical activity carried out by internal auditing.

The trigger for an investigation in the workplace may be:

• when an employee makes a report (eg, a report of harassment, a report of misconduct by another employee, etc);
• when an investigation is conducted by the Labour Standards Inspection Office or another regulatory agency;
• when a criminal or illegal act is discovered in the workplace; or
• when an internal audit conducted by the company reveals a problem.

The workplace investigation can be exercised by an internal (ad hoc) investigation department of the company itself, for example under the direction of the internal audit department or compliance department. This is possible if there is sufficient manpower with the necessary independence, knowledge and experience. Case law, however, shows that courts tend to be more critical of internal investigations than external investigations. For more complex and sensitive investigations, a forensic accountant or lawyer is often involved. The advantage of involving a lawyer is that the investigation and its outcome are covered by privilege. This guarantees the confidentiality of the investigation, also regarding supervisors and investigating authorities. Yet, at the same time, there is increasing debate about the role of lawyers as investigators, given their inherent bias to work in the interests of their client (the employer).

The investigation starts with a plan of approach that must be signed by the contractor. This plan of approach outlines the legal framework of the investigation, such as the scope, the means to be used, how it will deal with data, the use of experts, how the interviews will be conducted, the way of reporting and confidentiality. Furthermore, there must be a protocol for how the investigator conducts the investigation and that applies to all parties involved.

Gathering information can be done in various ways. For example:

• An inventory can be made of the household effects of a company. In the event of theft, an inventory can be an appropriate means of establishing exactly what has been stolen.
• An investigation of the books: this is an investigation of all documents of the company. These are not private documents of employees, but documents of the company itself. For an investigator, an interview can be a good way to gather more information, for example by interviewing witnesses. In practice, there are almost always several interviews with the suspects, the employer and other people involved.
• Open source research, which often involves researching a person's social media, or public documents relevant to the research. In principle, “open sources” refers to all public documents in the world; nowadays, many public documents are digitised.
• A workplace search, which includes everything present in the workplace: diaries, computer files, e-mails, letters, and even the contents of a wastebasket.
• A digital data investigation: this is a frequently used tool in fraud investigations. Most communication and documents are digital nowadays. It is, therefore, very likely that evidence can be found in digital data. Each of these means of investigation must respect the principles of an internal investigation and comply with the GDPR principles .

A workplace investigation is conducted to verify alleged misconduct within a workplace.[1]  Once a complaint is made regarding wrongdoing, misconduct or unethical behaviour by an employee or group of employees within a workplace, an investigation is required to confirm the complaint and if it is confirmed, the body in charge of supervising the employees (usually the HR specialist, disciplinary committee or line managers) determine and implement necessary corrective or disciplinary actions.

Workplace investigations are normally commenced either through a complaint filed by other employees in the workplace or by HR or other representatives of management.

Under the Safe Spaces Act, employers are required to commence an investigation and decide on complaints regarding gender-based sexual harassment, within ten days of the complaint being brought to their attention. For other workplace misconduct, management is given wide discretion regarding the means and method by which the workplace investigation may be carried out.

There are no legal requirements in this respect – it depends on the internal policies or practices at a given working establishment. Based on our experience – an internal investigation usually commences with a preliminary assessment of a reported irregularity. If the preliminary assessment leads to a conclusion that a reported situation may be an irregularity, an investigation is launched by appointing a commission or team that conducts the investigation or selecting an investigator. Then, a plan of investigation is established. Depending on the circumstances, the investigation plan may involve a collection of documents or files, their analysis, and interviews with a victim, witnesses or a subject (although the procedure depends on the type of case, internal rules and practice). At the end of the process, the report is prepared by the commission or team with facts established during the process, recommendations, and other suggestions as to the investigated issue.

Having been informed of an alleged infraction committed by an employee, the employer must prepare a detailed written accusation and notify the employee.

Moreover, if the alleged infraction constitutes gross misconduct and the employer is considering dismissal, a formal statement of the employer’s intention to dismiss the employee should accompany the accusation. If this is not expressly done, the employer will be unable to dismiss the employee and may only apply one of the conservatory sanctions. A copy of these documents must be sent to the works council, if any, and, should the employee be a union member, to the respective trade union.

Notwithstanding this, if before preparing the accusation the employer needs to further investigate the facts and circumstances, it may open a preliminary investigation aimed at collecting all the facts and circumstances and conclude if there are grounds to bring an accusation against the employee.

The preliminary investigation must start within 30 days of the employer becoming aware of the facts, be diligently carried out (but with no maximum period laid down by law) and concluded within 30 days of the last investigatory act. Furthermore, the preliminary investigation will suspend the relevant statutory deadlines and statutes of limitations (ie, 60 days from the date of acknowledgment, by the employer or a supervisor with disciplinary power, of the facts to enforce disciplinary action against the employee and one year from when the facts occurred, regardless of the employer’s acknowledgment, unless the infraction also constitutes a criminal offence, in which case the longer statutes of limitation established in criminal law will apply).

A workplace investigation usually commences with the receipt of feedback, a complaint or a grievance, by named or anonymous persons, in respect of a work-related matter or event, or the conduct of an employee.

There are many different ways a workplace investigation concerning employee misconduct could commence. Below are some key examples from our experience:

• an employee reports allegations concerning another employee’s misconduct through an ethics hotline or other means (eg, email, phone call);
• an outsider such as a former employee or a vendor reports allegations concerning employee misconduct to a company officer;
• an internal audit reveals potential employee misconduct;
• media reports raise allegations of employee misconduct; and
• an external investigation begins (eg, by criminal authorities or administrative agencies) concerning alleged employee misconduct.

Given that Spain lacks legislation in this area (see question 1), each company commences workplace investigations following its internal guidelines, policies or practices, if any. In our experience, investigations begin with a formal decision to commence the enquiry, which is set out in writing for record-keeping purposes.

This decision will normally mention:

• the facts that will be investigated;
• the reasons to investigate the facts (eg, they could be a breach of company policies);
• how the investigation will be conducted; and
• the individuals who will conduct the enquiry.

Depending on the company, the decision to initiate the investigation may take the form of a decision by the competent employee or officer (ethics or compliance officer) or the minutes of the relevant corporate body (board of directors or compliance committee).

An investigation can be initiated in several ways. It is usually as a result of whistleblowing or a report on work environment deficiencies, or through other channels (eg, HR, the police, media coverage).

Internal investigations are usually initiated after reports about possible violations of the employer's code of conduct, applicable laws or regulations have been submitted by employees to their superiors, the human resources department or designated internal reporting systems such as hotlines (including whistleblowing hotlines).

For an internal investigation to be initiated, there must be a reasonable suspicion (grounds).[1] If no such grounds exist, the employer must ask the informant for further or more specific information. If no grounds for reasonable suspicion exists, the case must be closed. If grounds for reasonable suspicion exist, the appropriate investigative steps can be initiated by a formal investigation request from the company management.[2]

Usually, a complainant submitting a grievance to the company would be a trigger for proceeding with a workplace investigation. The LPA does not specify when a workplace investigation should commence but it is subject to the employer’s work rules and regulations, including the whistleblowing policy, as the investigation usually commences after an employee or a whistle-blower has filed a complaint to the employer. In some cases, there might be a whistleblower and the start of the workplace investigation would be subject to the whistleblowing policy and the employer’s discretion. Also, if a questionable transaction or activity is detected, fiscal audits may be the source that triggers a voluntary workplace investigation.

The need to initiate an internal investigation may arise from the receipt of information from various sources. Reporting is one of the most common sources and can be in different forms. In Turkey, while conventional methods such as reporting to a direct supervisor, human resources or executives is quite common, whistleblowers also use reporting mechanisms such as web-based forms, telephone hotlines or e-mail, if such mechanisms exist. It is critical to obtain as much information as possible from the complainants at this initial contact, to make a sound decision on whether or not to commence an investigation. There is no requirement to decide to start an investigation and it can be commenced through a corporate resolution (eg, ethics committee resolution or board resolution) of a decision-making body or a decision of the body or person who has such authority under the company policies. The investigation team who will conduct the process may also be approved by the company's decision-making body. It is also advisable to have a preliminary inquiry for the complaints, before commencing a fully-fledged investigation.

The trigger could come from several sources, such as a grievance from a current or former employee, a complaint from external sources, a whistleblowing disclosure, or as the result of internal governance measures.

In each case, the employer will need to decide if an investigation is warranted. It may be required by internal policies or regulatory requirements in some circumstances. Consideration must be given to whether an investigation is feasible; for example, is the evidence still in existence and accessible? Are key witnesses still employed or contactable?

If the employer concludes that an investigation is warranted, it should start without unreasonable delay. The first step would usually be to set terms of reference, which outline the purpose and remit of the investigation. These should be closely drafted and continually referred to, to avoid the investigation’s scope expanding when new points arise (as they almost always will). An investigator will also need to be appointed (see question 4).

A workplace investigation is often, although not always, prompted by a complaint of workplace misconduct, usually made directly by the employee who was harmed by the conduct, a third party who witnessed the conduct, or a manager or supervisor who was made aware of the issue and has reporting obligations as a result of his or her role in the organisation. 

It is best practice – and often a legal requirement depending on the applicable state law – for companies to clearly outline a complaint process in their policies and to provide employees who experience, have knowledge of, or witness incidents they believe to violate the company’s policies with one or more options for making a report. Although the specific complaint procedure may vary depending on the size of the organisation, the nature of the business and the type of complaint at issue, many companies provide for (or require) making a report through one of the following channels:

• a company-managed hotline or online equivalent;
•  human resources;
• an affected employee’s supervisor or manager; or
• a member of the legal or compliance department.    

The circumstances in which an employer commences a workplace investigation may vary, either through a whistleblower, through an internal system, email or phone call; complaints from suppliers, contractors, or customers; or accounts from observations and hearsay. Sometimes, it comes from anonymous complaints. However, it is common for an employer to verify whether the report or complaint is substantiated, partially substantiated, or unsubstantiated, which is sufficient to initiate and commence a workplace investigation.

If a respondent raises a grievance during the investigation this should be dealt with under any employment contract, grievance policy or industrial instrument. This may involve investigating and responding accordingly. The content of the grievance should be carefully considered, but in many circumstances it is appropriate for the initial investigation to continue. Multiple investigations can be run simultaneously.

Provided the employer complies with labour law and data protection regulations, internal investigations are lawful and are not regarded as administrative or judicial proceedings. If legal consequences for not cooperating, such as dismissal, are threatened by the employer or his investigators, the offence of coercion under section 105 of the Austrian Criminal Code could be fulfilled.

This will depend on where the employee raises a grievance and the content of the grievance. If it is against the employer, the investigation can take this into account and continue from there. If the grievance is raised against the authorities, it will depend on the steps taken by the authorities.

If the object of the grievance is connected to the ongoing investigation, the investigator may pursue that grievance within the same procedure or open a separate matter, under the company’s rules governing such a situation.

If the object of the grievance is not connected to the investigation, the employee must report the matter, or the investigator can do it, if the company’s policies allow it.

There is no specific provision on this in relevant laws and regulations in the PRC. In practice, the employer will usually stipulate the relevant grievance procedure and process in its internal rules and regulations, and provide the employee with the relevant grievance rights in accordance with the grievance regulations. Alternatively, even if there is no provision on grievance procedure and process in their internal rules and regulations, from the perspective of fairness and rationality, we recommend that the employer should review and evaluate the grievance raised by the employee. If it is confirmed that irregularities exist in the investigation, which may directly affect the conclusions of the investigation (e.g. a past conflict between the employee and the investigator or the employee was unfairly treated in the investigation), the employer shall suspend the investigation and resume the investigation after timely resolution of such complaint. If the grievance does not affect the normal conduct of the investigation, the employer can still proceed with the investigation.

If the nature of the grievance relates to the employer's obligations to handle such matters in general, the grievance will be investigated either separately or as a part of the ongoing investigation.

The grievance may also have to be investigated (eg, moral/sexual harassment reported by an employee under investigation).

As seen in question 6, the employee must participate in interviews requested by the employer under certain circumstances. Generally, the employee must provide truthful information even if it is incriminating.

The raising of a grievance by the employee does not directly affect the workplace investigation (ie, the investigation does not have to be stopped and the employee's obligation to provide truthful information continues). This may change, however, once the court decides that certain measures were conducted unlawfully and must, therefore, cease.

Employees under investigation frequently raise grievances during investigation procedures that are dealt with on a case-by-case basis. The grievances raised by the employee under investigation are examined by the employees responsible for the investigation. They may either pause the relevant proceedings and review the grievance, especially if the claims of the employee under investigation are linked to a breach of his or her data or hearing rights, or they may continue the investigation.

As discussed in question 11, an employer owes an implied obligation of trust and confidence towards its employees under common law. This means that an employer cannot disregard a genuine complaint made by an employee even if the employee is under internal investigation. The employer may have put in place an employee grievance handling policy, which should be followed when handling the employee’s grievance.

If the grievance raised relates to how the workplace investigation is being conducted (for example, it is alleged that the investigator has a conflict of interest or is biased), the employer should consider suspending the investigation until this grievance is properly addressed to ensure fairness. However, if the grievance is nothing but an attempt to delay or hinder the investigation, the employer may be entitled to proceed with the investigation regardless. The employer should therefore carefully assess the nature and validity of any grievance raised in each case. The employer should also consider its rights under the employment contract if the employee is being uncooperative or obstructive.

Indian labour statutes do not prescribe any particular process to be followed if the accused raises any grievances during the investigation and such situations would need to be dealt with on a case-by-case basis. For example, if the grievances relate to the fairness of the investigation or inquiry process, the lack of impartiality of the investigators or the inquiry officer, those may need to be addressed upfront before proceeding further. Where grievances may be unrelated to the investigation or inquiry at hand (and potentially also a method to distract the employer from the core issues or delay or confuse the main investigative proceedings), it may be advisable to communicate to the employee that such grievances will have to be dealt with separately and other safeguards adopted to avoid calling the main investigation or inquiry proceedings into question (eg identifying an independent team to review the grievances).   

If the subject of the grievance relates to the subject of the investigation, the employee should be reassured that all the matters that they wish to raise concerning the matter under investigation will be dealt with in full as part of the investigation.

If the employee raises a grievance that is unrelated to the matter under investigation, then that can be dealt with concurrently, albeit by a separate investigator.

The initial investigation does not automatically need to be halted upon receipt of a grievance. Frequently, grievances are submitted in the hope that they derail or delay the original investigation. Careful consideration should be given as to the nature of the grievance and the appropriate course of action adopted.

Generally speaking, grievances from the employee do not per se automatically entail an interruption of the investigation. This conclusion, however, should be double-checked on a case-by-case basis, depending on what kind of grievance the employee under investigation raises, and on the potential effect of that grievance (if grounded): for example, should the grievance concern alleged unlawful processing of personal data, the employer could consider suspending the investigation while checking if the grievance has grounds, to avoid collecting data that cannot be used.

Grievances may be raised “internally” vis-à-vis the employer, possibly through procedures regulated by internal policies or codes (including, for example, whistleblowing procedures), if any, or brought to external authorities (which, depending on the kind of issue, could be a labour court, the Data Privacy Authority, law enforcement authorities, etc).

Whether or not an investigation should be suspended when an employee under investigation files a complaint depends on the specific circumstances. There is no legal requirement to suspend the investigation.

There are a lot of possibilities for grievances that employees can raise during an investigation. A grievance, for instance, could be that a certain person is not interviewed, while the employee wanted this person to be interviewed in order to have a thorough investigation. In such a case the investigator needs to assess this grievance.

There is no general rule how to react to a grievance and there is also no general obligation to respond to a grievance. There needs to be a case by case assessment based on which further action is or isn't needed.

It is not unusual for an employee under investigation to raise a grievance during the investigation. This grievance may be on the same subject matter as the complaint being investigated or may disclose new facts outside the scope of the matter being investigated.

Where the issue discloses new facts, the employer is required to investigate those facts without suspending the investigation. However, where the grievance relates to the same subject matter as the complaint being investigated, the employer may either suspend the investigation to allow the investigation to recognise the grievance and the complaint against the employer or proceed with the investigation while noting that the matter disclosed is being or will be investigated.

If an employee under investigation raises a grievance during an ongoing investigation, the employer must ensure that the employee under investigation is treated reasonably and fairly. Thus, the employer must also give attention to the complaint made by the employee and determine if there are reasonable grounds for the concern of the employee. If the employer determines the validity of the grievance raised, the employer may conduct a separate investigation for it.

It depends on the internal policies in force in the organisation. Most often, it constitutes the basis for separate proceedings.

Grievance procedures are not specifically provided for under Portuguese law. There is no formal procedure for an employee to raise a complaint against the employer. Nonetheless, a potential claim brought by the employee under investigation and subject to a disciplinary procedure should not have any impact.

The employer should require the employee to raise the grievance under the company’s existing grievance reporting, disciplinary and investigation processes so that the grievance, to the extent that it is relevant to the current investigation, can be investigated together. Otherwise, the grievance can be dealt with separately and independently of the existing investigation.

It is not uncommon for an employee under investigation to raise grievances during or after the investigation. Below are some examples of claims an employee may raise:

• that the company reviewed the employee’s electronic data without obtaining the requisite consent;
• that witnesses or the company committed defamation in violation of the Criminal Code;
• that the employee was coerced to comply with the investigation in violation of the Criminal Code;
• that the employee was disciplined without just cause; or
• that the employee was harassed by other employees for providing information during the investigation.

The actions the company should take would vary depending on the grievance raised.

Spanish law does not regulate grievance processes and most companies do not have an internal grievance procedure. The only way in which an employee can formally challenge an investigation is by filing a lawsuit or lodging a claim with the Labour Inspectorate (see question 5).

To the extent that the company can show that the investigation is unrelated to the complaint (ie, that the investigation is not retaliation for filing the complaint), the claim should be seen as neutral from the perspective of the enquiry.

There are no formal rules or processes for handling grievances in Sweden. Depending on the nature of the grievance, such a complaint may also have to be investigated (unless the grievance is deemed to be trivial). This could, for example, be the case if the grievance concerns new or other work environment issues that the employer is obliged to investigate.

In the context of private internal investigations, grievances initially raised by the employee do not usually have an impact on the investigation.

However, if the employer terminates the employment contract due to a justified legal complaint raised by an employee, a court might consider the termination to be abusive and award the employee compensation in an amount to be determined by the court but not exceeding six months’ pay for the employee (article 336 paragraph 1 (lit. b) and article 337c paragraph 3, Swiss Code of Obligations). Furthermore, a termination by the employer may be challenged if it takes place without good cause following a complaint of discrimination by the employee to a superior or the initiation of proceedings before a conciliation board or a court by the employee (article 10, Federal Act on Gender Equality).

The investigator should guide the employee who has raised the grievance to properly raise their concerns through the grievance protocols or whistleblowing policy (if any). It is acceptable to preliminarily hear their concerns, but the investigation should be initiated separately and subject to the employer’s discretion.

If, during the investigation, the employee under investigation raises a grievance, the investigator will be expected to temporarily stop the investigation to assess the situation. The investigation team will evaluate whether the employee is raising a grievance as a defence mechanism or in good faith and with sincere concerns. If the subject of the grievance is related to the pending investigation, the investigation may be extended to cover this new item. Otherwise, a new investigation can be initiated by the investigation team.

This is a relatively common tactic. The employer will need to decide whether to suspend the investigation to deal with the grievance, or conclude the investigation first, depending on the circumstances. It would usually be difficult to deal with both the grievance and the investigation concurrently, unless the facts overlap significantly.

If the employee becomes uncooperative and refuses to take part in the investigation, they should be told that the investigator may need to make a decision in the absence of their account based on all the other evidence available. The employer may decide to treat it as failure to comply with a reasonable management instruction and take disciplinary action on that basis.

Where an employee who is the subject of a workplace investigation raises his or her grievance during the investigation, the investigator should follow the same steps outlined above to triage new issues or claims. The investigator should also discuss with in-house counsel whether any particular steps should be taken to avoid the perception that any disciplinary measures taken against the employee (in the event the original claims are substantiated) were retaliatory.

The employer should require the employee to raise any grievance under the company’s existing policy on grievance reporting, disciplinary, and investigation processes, so that it can determine if the grievance is relevant to the current investigation. The grievance can be investigated together with the ongoing investigation. It can also be dealt with separately and independently from the existing investigation.

Employers must take steps to deal with the findings of the investigation and implement any recommendations promptly. This may involve commencing disciplinary action.

The complainant and respondent need to be informed of the outcome of the investigation. All witnesses who participated in the investigation should also be thanked for their contribution and advised that the investigation has been completed. All participants in an investigation should be reminded of their ongoing obligations concerning confidentiality and victimisation.

If an employer decides that it may be appropriate to terminate a respondent’s employment, the employee must be provided with the opportunity to respond and to “show cause” as to why their employment should not be terminated.

The investigation report along with any other materials produced during the investigation should be kept in a separate confidential file.

Employers should also consider whether action should be taken at an organisational level to prevent future misconduct. In particular, employers are required to take a proactive approach to addressing systemic workplace cultural issues in relation to sex discrimination, sexual harassment and victimisation.

The employer may impose consequences under labour law. Consequences may include verbal or written warnings, transfers or other disciplinary measures. The employer may also implement training or educational measures if the issue is due to the employee's lack of knowledge. In serious cases, besides dismissal without notice – for example. if the employer seeks damages –legal action (civil or criminal) may be taken against the employee.

If the investigation leads to the establishment of grave errors by the employee, this can lead to sanctions. The employer must follow the procedure laid down in the internal work rules of the company and can only impose sanctions that are included in the internal work rules. In general, these are: a verbal warning; a written warning; a suspension (remunerated or not); a fine (capped to one-fifth of daily remuneration); and dismissal. If there are very serious errors leading to an immediate inability to continue the employment relationship with the employee, the employer can dismiss the employee with urgent cause without any notice period or indemnity in lieu of notice (following the specific procedure for these types of dismissals). In less serious cases, the employer could still dismiss the employee with a notice period or indemnity in lieu of notice. In principle, the employer has a right to dismiss the employee, even if this sanction is not included in the internal work rules.

As said previously, disciplinary sanctions (included in the internal work rules) must be communicated to the sanctioned employee the day after the employer or his delegate has established fault. The sanction must be registered in a sanction register, with the name of the employee, the date, the reason and the nature of the sanction. If there is a fine, the amount of the fine should be mentioned. The proceeds of the fines must be used for the benefit of employees. Where a works council exists, the use of the proceeds of the fines must be determined after consultation with it.

If investigators conclude that a breach has occurred, the company may determine the appropriate response, which may include verbal or written warnings; the suspension of employment without payment (for up to 29 days) or termination of employment without or with cause; a review of policies or operational protocols; and new training modules or the updating of training modules.

If the investigators conclude that a breach has not occurred but determine that the report was made in good faith, the case must be set aside. If the investigators determine that the report was made in bad faith, the employer must determine how to respond to the bad-faith reporter.

The employer may take disciplinary actions against the employee based on the investigation result and pursue their civil, administrative and even criminal liabilities. To be specific: 1) the employer may criticize and educate the employee, or take disciplinary actions such as warning, demotion and removal according to the internal rules and regulations of the employer. If the misconduct of the employee constitutes one of the circumstances stipulated in Article 39 of the Employment Contract Law of the PRC, the employer is entitled to take the most severe disciplinary action, namely termination of employment contract; 2) if the employee has caused economic loss to the employer, the employer may lawfully initiate a civil litigation recourse procedure; 3) if the employee violates the Law on Administrative Penalties for Public Security Administration of the PRC, the employer may deliver the case to the administrative department for corresponding administrative penalties; 4) if the employee is suspected of a crime, the employer should deliver the case to the public security authority and pursue his/her corresponding criminal liabilities according to the law.

The employer decides whether misconduct has taken place or not. Depending on the case, the employer may recommend a workplace conciliation in which the parties try to find a solution that can be accepted by both sides. The employer may choose to give an oral reprimand or a written warning. If the legal conditions are met, the employer may also terminate the employment agreement.

The employer can decide to sanction the person who was under investigation or to close the case. The employer may also need to protect any victims, witnesses and whistleblowers. If, during the investigation, it is discovered that a supplier or other commercial partner is implicated, the relevant contract may be terminated. The employer can take legal action , file a complaint (if the company is a direct victim of a criminal offence) or report the offence to the public prosecutor’s office. The employer must archive the file or ensure its lawful preservation after a certain period.

Depending on the results of the investigation, different steps may have to be taken by the employer. Specifically, the following should be considered:

• in certain cases, there may be an obligation (or at least good reason) to share the results of the workplace investigation with the authorities (see question 25);
• filing of a criminal complaint against the employee;
• disciplinary measures against the employee such as a warning, ordinary termination or termination for cause;
• assessing and asserting claims for damages against the employee;
• offering compliance training to the relevant employees or introducing additional measures to prevent further violations;
• if there is a risk that the company itself is exposed to investigative proceedings at some point and may have to defend itself, investigation materials should be stored at the company's external attorney's office; and
• depending on the individual circumstances of the case and to mitigate potential reputational damage, proactively informing the public (eg, by issuing a press release) may be beneficial.

For workplace violence and harassment investigations, depending on the outcome of the internal investigation, the employer may adopt certain measures including, for example, recommendations to the employee under investigation, changes to the employee’s working hours and transfer to another department.

If the employer decides to terminate the employment relationship, without having previously followed existing corporate policies regarding reporting procedures or without having provided the alleged perpetrator with the right to be heard, the dismissal could be deemed invalid. In any case, the measures adopted should be appropriate and proportional to the act committed.

If the outcome of the investigation reveals that misconduct has been committed by the employee, the employer may consider whether it should allow the employee to defend him or herself against such findings. If the employment contract or relevant internal policies specify a right to be heard on the part of the employee through a disciplinary hearing before any actions can be taken against him or her, such procedures should be followed.

Assuming the employer maintains its findings that the employee has committed misconduct after the conclusion of the disciplinary hearing (if any), the employer may consider taking one of the following disciplinary actions against the employee depending on the nature and severity of the misconduct:

• Verbal or written warning – this is a common form of disciplinary action. The employer may consider including the nature of the misconduct and the potential consequences of repeating such misconduct (for example, termination of employment) in the warning to be given to the employee;
• Termination with notice – the EO allows employers and employees to terminate the employment with notice. It is not necessary to give reasons for the termination unless the employee concerned has been employed for at least 24 months, in which case the employer shall demonstrate a valid reason for the termination as defined under the EO;
• Suspension – the employer may suspend the employee without pay for up to 14 days in circumstances where the misconduct concerned justifies a summary dismissal, or where a decision on summary dismissal is pending. The employee may also be suspended where there is a criminal proceeding against him or her relevant to the investigation, until the conclusion of the criminal proceeding (as discussed in question 3);[1] and
• Summary dismissal – the employer may terminate an employment contract without notice if the employee is found to have:
  • wilfully disobeyed a lawful and reasonable order;
  • failed to duly and faithfully discharge his duties;
  • committed fraud or acted dishonesty; or
  • been habitually neglectful in his duties.[2]

In misconduct cases, the next steps for an employer would depend on the outcome of the investigation. If the investigation reveals that the employee has violated the terms of employment and the employer wishes to take disciplinary action (which may include dismissal, depending on the gravity of the misconduct), it would normally be necessary to conduct a disciplinary inquiry as per the principles of natural justice before any actual punishment is meted out. Such a disciplinary inquiry would normally require the issuance of a charge sheet, the appointment of an independent inquiry officer (who should not have been involved in the investigation or otherwise in a position of bias vis-a-vis the parties involved),  and conducting disciplinary hearings, etc.

With SH complaints, once the investigation is concluded by the IC, the employer will be provided with a copy of the final report by the IC along with recommendations (ie, the disciplinary measures to be taken against the accused) for the employer to implement. The employer would then be required to act upon the recommendations shared by the IC within 60 days.

The investigator will usually set out recommendations within their report. It will then be up to the employer to act on those recommendations and to accept or reject the findings (if it were a fact-finding investigation). If, for example, a recommendation is made that the matter should proceed to a disciplinary hearing, the employer should then arrange such a hearing and nominate an impartial member of management to carry out the disciplinary hearing. In some instances, recommendations are made by investigators to provide training or update policies and such recommendations should be acted upon without delay. It may also be appropriate to notify a specific regulator of the outcome of the investigation.

Upon completion of the investigation, the employer – if misconduct by the employee emerges – may bring disciplinary action against him or her (which may be either dismissal or a “conservative” measure such as an oral or written warning, a fine, or a suspension, within the limits provided under the law and possibly the applicable NCBA).

If a criminal offence by the employee emerges, the employer may also decide to report the crime to the public authorities (see question 25).

In an investigation into an employee's misconduct, based on the results of the investigation, disciplinary action will be considered if there are grounds for disciplinary action, and dismissal will also be considered. Personnel actions (eg, dismissal, reassignment) may also be taken.

A distinction can be made between a non-public reprimand and a public reprimand. A non-public reprimand is a warning from the employer to the employee that certain behaviour by the employee may not be repeated. This is a relatively light measure. The employer can apply this measure to behaviour for which a verbal warning is insufficient or has already been given (more than once). The employer should confirm the reprimand to the employee in writing, so that it forms part of the employee's personnel file. It is important to have an acknowledgement so there is no dispute as to whether the reprimand has reached the employee. Often, the letter will also mention the consequences if the employee continues to behave in this way, so that the employee is aware of them. The employer then has reasonable grounds to apply a more severe disciplinary measure, such as suspension or dismissal, should the behaviour be repeated.

For a public reprimand, the warning is also made known to third parties. This is, therefore, a more severe measure than a non-public reprimand, as the honour and reputation of the employee are affected. A public reprimand must, therefore, be proportionate to the seriousness of the behaviour and will only be possible in the event of a serious offence, for which a non-public warning will not suffice. A public reprimand is also more likely if it is necessary to prevent other employees from engaging in the same behaviour (deterrent effect). Given the impact on the employee, it is important that the employer carefully investigates the facts and allows the employee to tell their side of the story (hearing both sides of the argument). A public reprimand is rarely given.

If the outcome of the investigation is that the employee is culpable, the employer can request that the court dissolves the employment agreement for that reason. The employer will have to show that continuation of the employment agreement is no longer possible. If the court rules that the employee is culpable, the employment agreement will be dissolved, observing the relevant notice period and paying the statutory transition payment. Only if the court rules that the employee has shown serious culpable behaviour, will the notice period not be taken into account and the transition payment will not be due.

If the employee has come into contact with the judicial authorities or is suspected of a criminal offence, but has not been convicted or detained (yet), the employer – when requesting the dissolution of the employment contract – will have to make a plausible case that, based on this suspicion alone, it can no longer be reasonably expected that the employment contract is upheld. This may be the case in a situation where the offence the employee is suspected of has repercussions on the employer, colleagues or customers and relations of the employer. In this situation, the court will assess whether a less drastic measure than dismissal, such as suspension, is sufficient to the interests of the employer.

If there is still no conviction but the employee is unable to perform his or duties due to being detained, the court reviews a request for dissolution in the same way as above. In this case, if the employee's payment of wages is discontinued, justice may already have been done to the employer's interests.

The final stage involves the conviction and detention of the employee. Although the dissolution of the employment contract under section 7:669 (3) under h DCC – which includes conviction and detention – is the most obvious option, it is still necessary to assess whether termination of the employment contract is reasonable because of the employee's conviction and detention. Although the seriousness of the offence, the duration of the detention and how this reflects on the employer are important factors, the court also takes the age, duration of the employment contract and the position of the employee on the labour market into account.

The most far-reaching dismissal method that can be considered is instant dismissal for an urgent reason (section 7:678 paragraph 1 in conjunction with section 7:677 paragraph 1 DCC). According to the case law of the Dutch Supreme Court, the question of whether there are compelling reasons must be answered based on all the circumstances of the case – to be considered together – including the nature and seriousness of what the employer considers to be compelling reasons, the nature and duration of the employment, how the employee performed their duties and the personal circumstances of the employee, such as age and the consequences for the employee of an instant dismissal.

Mere suspicion of a criminal offence will not easily qualify as an urgent reason, as follows from jurisprudence. At the same time, an employer can, instead of criminal suspicion as grounds for dismissal, also base its claim on the behaviour that underlies it. If the behaviour of the employee is already factually established, for example, because the employee has disclosed it to their employer or the employer has established it, the employer does not have to wait for the criminal proceedings before dismissing the employee.

Upon the completion and receipt of the findings of the investigation, the employer may affirm the employee’s innocence or take disciplinary action against them.

After the investigation has been concluded, the next steps of the employer will depend on the result of the investigation. If there are reasonable grounds to hold the employee for an administrative hearing, the employer may issue a Notice To Explain containing the charges against him or her and allowing the employee to explain his or her side. Otherwise, the employer may terminate the investigation immediately.

It depends on the outcome of the investigation: imposing penalties; reporting to a regulator; notifying a suspected offence or civil claim; termination of an employment contract with or without notice; and changes to the work organisation. Following the investigation, the employer must make some legal, business or HR corrective actions.

Once the preliminary investigation ends, the employer must decide whether or not, in its view, there are grounds to bring an accusation against the employee and enforce disciplinary action or if it should be dismissed due to a lack of evidence.

When the employer decides to enforce disciplinary action, the following sanctions may be applied:

• verbal warning;
• written warning;
• financial penalty;
• loss of holiday;
• suspension with loss of pay and length of service;
• dismissal with cause and without compensation.

The first five penalties are usually called conservatory sanctions, enabling the continuity of the employment relationship, as opposed to dismissal, which is deemed a measure of last resort.

The employer should take any follow-up steps required and keep track of whether any appeal against the outcome of the investigation is lodged. If any appeal is lodged, the employer should handle this appeal following its internal procedure. To the extent necessary, any disciplinary measures against the respondent employee should be stayed pending the outcome of the appeal.

After completing an investigation, the company may consider the following measures, among others:

1. taking disciplinary action against the relevant employees;
2. taking legal action (eg, criminal action, civil action) against the relevant employees; and
3. taking appropriate remedial measures (eg, strengthening existing policies and establishing new policies, and conducting training).

The company may also consider making a voluntary report to the relevant authorities as discussed in question 25.

After the conclusion of the enquiry, a company may choose to:

• close the investigation without taking any additional action; or
• adopt disciplinary measures against the employee.

These could range from a verbal or written warning to the suspension of work and pay for a set period. Disciplinary dismissals are also possible, but they are reserved for very serious offences.

Note that any disciplinary measure will have to follow the procedures that might be established in the applicable collective bargaining agreement, such as informing employee representatives or following a grievance procedure before adopting the measure.

An investigation may result in employment law measures (eg, support, training, relocation, warning, termination or dismissal). An investigation may also be inconclusive and not result in any action.

If the investigation uncovers misconduct, the question arises as to what steps should be taken. Of course, the severity of the misconduct and the damage caused play a significant role. Furthermore, it must be noted that the cooperation of the employee concerned may be of decisive importance for the outcome of the investigation. The possibilities are numerous, ranging, for example, from preventive measures to criminal complaints.[1]

If individual disciplinary actions are necessary, these may range from warnings to ordinary or immediate termination of employment.

Upon completion of the investigation, the employer can decide to take proper disciplinary action against the employee if it is found that the employee committed an offence or violated the work rules. An employer may also file a report with the police if the findings of the investigation amount to a criminal offence.

The employer may take various legal remedies against the employee whose infringement is discovered as a result of the internal investigation. Depending on the outcome of the investigation, the employer:

• may provide the employee with a written warning requesting him or her not to repeat the same conduct;
• terminate the employment relationship based on either just cause, without paying any compensation immediately, or valid reason by observing statutory notice periods or making payment in lieu of notice and paying severance compensation if applicable; or
• not take any action if the investigation concludes that no fault is attributable to the employee.

The investigator may recommend further action, but should not decide whether allegations are true, or suggest a possible sanction or prejudge what the outcome of any subsequent disciplinary process would be.

The employer will need to consider whether it is necessary to commence disciplinary proceedings. For regulated businesses, there may be an obligation to inform their regulator of the investigation outcome. In some circumstances, the employer may feel the need to make an internal or external announcement about the outcome, and any action it intends to take to implement any recommendations made by the investigator. There may also need to be certain updates to policies or procedures as a result of the investigation.

Where the misconduct alleged is substantiated in whole or in part by an internal investigation, the human resources function, potentially in consultation with in-house or outside counsel, should agree on disciplinary or remedial action to be implemented.

After the completion of the investigation, the employer may:

• take the appropriate labour disciplinary action against the employee;
• proceed with legal action against the employee (eg, reporting the criminal violations of the employee to the proper authority or filing a civil lawsuit against the employee before the court); or
• adopting preventive or remedial measures on how to avoid these violations and to mitigate the damage to the company (eg, reviewing internal policies and conducting employee training).