Workplace Investigations

It is an important consideration as to whether any of the employees involved in the investigation should be suspended, stood down or asked to undertake alternative duties for the period of the investigation. This decision will need to be made taking into consideration the nature of the complaint, any further damage to workplace relationships that could be caused by employees continuing to interact with each other, and potential work, health and safety issues.

It should not be automatic that the respondent is suspended as the employer will need to consider whether this is necessary in the circumstances. However, a period of suspension should be considered where:

• the allegations involve serious misconduct;
• there is a risk that the conduct will continue throughout the investigation;
• the respondent’s presence could exacerbate the situation; or
• the respondent’s presence could be disruptive to the investigation.

As an alternative to suspension, other options include working from home, performing amended duties or moving to a different workspace.

If an employee is suspended then they should ordinarily receive their full pay for this period. There are some exceptions to this, for example, if the employee is a casual employee or if a policy, employment contract or other industrial instrument allows the employee to be suspended without pay.

Generally, there is no minimum or maximum period a suspension should last, as this will depend on the length of the investigation.

Yes. An employer may always, and without legal restrictions, temporarily suspend an employee during an internal investigation, provided he or she continues to be paid.

However, suspending the employee does not release the employer from an obligation to terminate employment without notice. It must be clear to the employee that the suspension is a temporary measure in preparation for dismissal. A suspension does not entitle the employer to postpone the reasons for dismissal for any length of time. The longer the suspension lasts, the more likely it is that the employer intends to keep the employee.

In principle, you cannot unilaterally suspend an employee during a workplace investigation, as there is a risk of constructive dismissal (ie, wrongful termination of the employment contract by the unilateral modification of one of its essential elements). Consequences could include the payment of an indemnity in lieu of notice based on seniority as foreseen by the Employment Contracts Act, plus possible damages (three to 17 weeks remuneration if an unreasonable dismissal, plus alternative or additional damages based on real prejudice suffered). The parties can nevertheless agree on a suspension of the employment contract. In this scenario, the remuneration will still have to be paid. Furthermore, a suspension could be a sanction that follows the outcome of the investigation, but even then it will only be possible for a limited time (and a suspension without pay is usually only allowed by the courts for a maximum of three days). However, if the complaint is about sexual harassment, bullying or violence at work, the prevention advisor (see question 4) can recommend that the employer take certain actions, which in grave circumstances could lead to employee suspension. The suspended employee should continue to receive his pay if this occurs.

Yes, an employee can be suspended during or before a workplace investigation. However, suspending an employee is not a legal requirement in Brazil. It is also not standard business practice and entails legal risk, as detailed below.

While internal policies in line with a company’s global investigation approach may determine whether investigated employees are suspended during an investigation, the suspension of an accused employee is not recommended. The only exception is when the accused employee, upon becoming aware of the existence of the investigation, poses a clear and imminent risk of physical danger to other employees or interfering with the investigation.

The suspension of an employee during an investigation makes it difficult for the company to keep the investigation confidential, because the absence of the investigated employee will have to be explained to his or her colleagues and business contacts. As a result, the investigated employee may be exposed to the stigma of being associated with potential misconduct.

Even if the accusation is confirmed and the individual is terminated with cause, the employer cannot disclose the reason for the termination or that the contract was terminated for a cause or violation in the employee’s employment records. Also, if the employer shares such information with prospective employers they may be liable for damages.

Termination for cause on the grounds of dishonest conduct, if not upheld by the labour court, usually leads to liability for damages to the former employee due to the accusation and the stigma associated with it. 

Therefore, if the company decides to suspend the employee during the investigation and terminate his or her employment at the end of the investigation, the suspension will be associated with wrongdoing, and the individual will have grounds to claim damages for the association between the termination, the investigation and wrongdoing, which will likely be presumed by a labour court (damage in re ipsa).

On the other hand, if the accusation is deemed groundless, the connection between the employee and potential wrongdoing resulting from his or her suspension can be used as grounds for damages because of the resulting environment at the workplace or the development of mental health conditions such as depression or anxiety by the investigated employee due to the investigation and uncertainty about the negative effect of it on his or her reputation. 

Because suspension during an investigation is not a disciplinary measure, if the company decides to suspend, the employee’s salary cannot be affected. Also, the suspension period must be as short as possible, and can in no circumstance be longer than 30 days. If it exceeds 30 days, it would trigger termination for cause by the company, which increases the amount of statutory severance due to the employee.

When an employer is found to have engaged in misconduct of an employee, whether it has the right to suspend the employee from his/her duties and subject him/her to investigation, there are no explicit provisions in the existing labor law. Generally speaking, suspension of investigation arranged internally by an employer is within the scope of autonomous management of the employer. However, such suspension of investigation is subject to certain restrictions, and the basic rights and interests of the employee must be guaranteed. For example, the employer should continue to pay social insurance fund for the employee.

Suspension investigation shall generally be specified in advance in the labor contract or rules and regulations, and the duration of suspension investigation should be within the necessary and reasonable period. Indefinite suspension or the suspension of obviously long time will not be supported by arbitral tribunals and courts.

Generally annual leave may be taken preferentially by the employees during suspension period. The annual leave period shall be deemed as normal attendance, and the salary shall remain unchanged. Under the circumstance that the annual leave has been used up, in judicial practice, there are few cases supporting the claim that the employer can fully deduct the employee's salary during the suspension period. It is generally believed that the employer shall at least guarantee the basic living needs of the employee during the suspension period (i.e. the salary shall not be lower than the local minimum salary standard) or pay the employee as per the original salary standard. However, in judicial practice, some arbitrators and judges hold the view that an employer may use its discretion to reduce employees' salary if all of the following conditions are met:

• it is stipulated in its rules and regulations or a contract that it is entitled to suspend employees from their duties and reduce salaries if their fraudulent behaviour harms the employer's interests;
• the rules and regulations are stipulated in its rules and regulations, and are publicly announced and accepted by the employees; and
• there is evidence showing the corresponding fraudulent behaviour of the employees.

There is no legislation on temporary suspension in the event of a workplace investigation or similar. In some situations, the employer may relieve the employee from their working obligation with pay for a short period.

An employee may be suspended or relocated during a workplace investigation by:

• suspending the employee as a precautionary measure (eg, pending a confirmation of dismissal);
• temporarily assigning the employee to another site; or
• exempting the employee from having to work while continuing to pay them their salary.

The employee can be suspended as a precautionary measure, pending confirmation of dismissal, but this implies that disciplinary proceedings have already begun and that the investigation is therefore at a relatively advanced stage and that there is sufficient evidence to suggest the need for disciplinary action. It should be made clear to the employee that the suspension is a provisional measure (in the absence of specifying this, the suspension could be interpreted as a disciplinary layoff constituting a sanction and, in some jurisdictions, as depriving the employer of the possibility of dismissing the employee for the same facts).

Temporary reassignment can also be considered. However, this contractual change must not apply for long and the measure taken must be temporary. The employer must act promptly – the measure is only valid for as long as the investigation continues. Failing this, and because of the absence of concurrent disciplinary proceedings, there is considerable risk that the temporary reassignment may be reclassified by a judge as an illegal modification of the employment contract or as a disciplinary sanction preventing the employee from subsequently being dismissed.

Finally, paid exemption from work is also possible and consists of temporarily suspending, by mutual agreement, the obligation of the employer to provide work for the employee and the employee’s obligation to work, without affecting their remuneration. Such a measure must generally be taken with the consent of the employee, because it implies a suspension (and therefore a modification) of the employment contract. This measure may be useful in temporarily removing an employee with whom the employer maintains a good relationship. This may be an employee who is or feels they are a victim of harassment, especially when the employee is not on sick leave.

Generally, under German employment law, an employee has a right to perform his[1] work and, therefore, suspending an employee would only be possible with the employee's consent. If an employer decided to suspend an employee without his consent, the employee could then claim his right to employment has been affected and seek a preliminary injunction before the competent labour court.

Unilaterally suspending an employee is, in principle, not permissible. Exceptions are made in cases where the employer has a legitimate interest. Typically, such legitimate interest exists after the employer has issued a notice of termination. During a workplace investigation, the employer may have a legitimate interest in suspending the employee, for example, if there is a risk that evidence may be destroyed, colleagues may be influenced, or the employee's presence may otherwise have a detrimental effect on the investigation or employer. Whether or not there is a legitimate interest must be assessed in each case. In practice, it is rare for employees to take legal action against a suspension.

In any event, during a suspension, the employee would be entitled to further payment of his salary without the employer receiving any services in return.

Internal labour regulations may allow for the suspension of an employee when there is reasonable suspicion that a disciplinary offence has been committed. Given that under Greek law employees have the right to receive wages and to be employed, suspension without a specific provision in the internal labour regulation may only be imposed in an extreme case where the offence and the risk of keeping the employee employed during an investigation is obvious.

Payment of remuneration during suspension should not be withheld, otherwise, the suspension could be considered a disciplinary penalty not provided in law and imposed without completion of the disciplinary procedure, thus illegally harming the employee.

In any case, suspension is one of the ultimate measures that may be taken, in contrast to, for example, a change of work position.

It may be appropriate to suspend an employee during a workplace investigation, for instance, where the investigation has revealed misconduct on his or her part (even on a preliminary basis), or his or her continued presence in the business would hinder the progress of the investigation. However, the employer will have to consider the relevant legislative provisions and the terms of the employment contract before making any decision on suspension.

Under section 11 of the EO, an employer may suspend an employee without pay pending a decision as to whether the employee should be summarily dismissed (up to 14 days) or pending the outcome of any criminal proceedings against the employee arising out of his or her employment (up to the conclusion of the criminal proceedings). If an employee is suspended as above, however, the employee may terminate his or her employment without notice or payment in lieu of notice.

It is more common for an employer to suspend an employee with pay during an investigation concerning his or her conduct rather than exercising its statutory right as mentioned above. This could avoid an unnecessary dispute with the employee concerned. Indeed, it is common for employers to include in employment contracts specific provisions to give themselves the right to suspend an employee with pay in certain circumstances. The provisions normally set out the circumstances in which the employer may exercise the right, the maximum period of suspension and other arrangements during the suspension period (eg, how the employee’s entitlements under the employment contract are to be dealt with).

Yes, an employee can be suspended or placed on administrative leave during an investigation if the circumstances warrant it. It is recommended to include the right to suspend in employee-facing policies. The employee should be informed about the suspension in writing, by issuing a suspension letter. In practice, a suspension is used when the charges against the employee are serious or if the employee’s presence at the workplace is likely to prejudice the investigation in any manner (eg, where there are concerns that evidence may be tampered with or witnesses pressurised). The requirement to suspend the employee should be assessed on a case-by-case basis and should not be exercised in every instance. If an employee is suspended, the investigation and inquiry should be completed as quickly as possible.

Further, concerning payment during the period of suspension, the law varies depending on the state and the category of employee. Generally, Indian law requires that individuals who are “workmen” be paid a subsistence allowance during the period of suspension, usually at the rate of 50% of their regular wages during the first 90 days of the suspension, and at varying rates thereafter. The exact rates at which subsistence allowance is paid will vary from state to state. In our experience, many companies choose to suspend employees with full salary even if there is an applicable subsistence allowance statute. This helps take some pressure off of the timeline within which the investigation and subsequent disciplinary inquiry can be completed.

Workplace suspensions in Ireland are a contentious issue and can result in an employer defending injunction proceedings in the High Court before an investigation has started.

In the case of Governor and Company of the Bank of Ireland v Reilly, the judge stated: “The suspension of an employee, whether paid or unpaid, is an extremely serious measure which can cause irreparable damage to his or her reputation and standing."

In the 2023 case of O’Sullivan v HSE, the Supreme Court held that the Health Service Executive acted fairly and reasonably as an employer in suspending a consultant doctor after he had performed experiments on patients without their consent. This ruling overturned the Court of Appeal's earlier decision that previously found the suspension to be unlawful, as the consultant did not represent an immediate threat to the health of patients.

The Supreme Court considered whether the employer's decision to place the consultant on administrative leave met the test set out in the English case of Braganza v BP Shipping Limited & Anor. In that case, the court held that the decisionmaker's discretion would be limited "by concepts of good faith, honesty and genuineness and the need for absence of arbitrariness, capriciousness, perversity and irrationality."

In relying on the principles set out in the Braganza case, the Irish courts have reinforced the right of a decision-maker in an employment context to have discretionary power when implementing a suspension and that any decision to do so must be made honestly and in good faith. Employers should obtain legal advice when considering whether to suspend an employee in any circumstance.

In general, from an Italian employment law perspective, there is no specific legal rule governing the suspension of an employee during a workplace investigation.

However, it should be noted that:

• certain National Collective Bargaining Agreements (NCBAs) may provide, in particular circumstances, for the possibility of suspending (with pay) an employee (eg, when the employee is under criminal proceedings – as stated, for example, in the NCBA for executives of credit, financial and investment companies);
• according to well-established case law, the employer may suspend the employee from work (with pay) in the framework of a disciplinary procedure (which, according to Italian law, must be followed before applying any disciplinary sanction, including dismissal[1]), where the facts behind the procedure are sufficiently serious;

• certain case-law decisions have also stated that – even in the absence of a disciplinary procedure – the employer may suspend (with pay) the employee when it has very serious suspicions of an employee’s unlawful conduct, and for the time that is strictly necessary to ascertain his or her liability.

The above may be done by the employer, for instance, if keeping the employee in service may cause a risk of tampering with evidence or a risk of damage to the physical safety of other employees or company property.

Normally, in the above-mentioned circumstances, the suspension is with pay and with job security.

Court precedent states that a valid requirement for a stay-at-home order is it “would not be considered to put employees at a legal disadvantage (deprive them of their rights and imposes obligations on them), except in exceptional cases where employees are legally entitled to request work, unless there are special circumstances such as discrimination in salary increases and the like." (Tokyo High Court decision 25 January 2012, All Japan Mariners' Union). Therefore, it is considered possible to order the employee to stay at home during the investigation period if necessary. Some companies stipulate in their work rules that they may order employees to take special leave or stay at home when an incident occurs that could be the subject of disciplinary action.

In principle, the payment of salary in full during the stay-at-home period is required. However, work rules may stipulate that an employee will not be paid during the investigation period, and in cases where the employee is clearly responsible and it is inappropriate to allow the employee to work (eg, where it is almost certain that the employee has embezzled money on the job), the employee may be ordered to stay at home without pay. In addition, if the work rules stipulate that an absence allowance under the Labour Standards Law (60% or more of wages) must be paid for the stay-at-home period, such an allowance may be paid under the said rules.

Suspension is usually a disciplinary measure. The employer may, for example, suspend an employee if it is necessary that the employee doesn't work during the investigation into their actions or omissions. Suspension has no specific legal basis in Dutch law, but several conditions can be derived from case law or collective labour agreements.

Overriding interest

The measure may only be taken if the employee's presence at work would cause considerable harm to the employer's business or if, due to other compelling reasons that do not outweigh the employee's interests, the employer cannot reasonably be expected to tolerate the employee's continued presence at work. If there is a well-founded fear that the employee will (among other things) frustrate the investigation into their actions, the employer may proceed to suspend the employee.

Procedural rules

The principle of acting in line with good employment practice (section 7:611 DCC) plays an essential role in the question of the admissibility of the suspension. The principle of due care leads, among other things, to a duty of investigation for the employer and means the employer must enable the employee to respond adequately to any accusations.

Contractual arrangements

Many collective agreements or staff handbooks contain regulations on suspension and deactivation. The regulation may concern the grounds, the duration or the procedure to be followed. The latter includes rules on hearing both sides of the argument, the right to assistance, how the decision must be communicated to the person concerned, and the possibility of “internal appeal” and rehabilitation. Under good employment practice, the employer must proceed swiftly with the investigation and allow the employee to respond to the results. If the employee hinders the investigation in any way, it can be a reason to continue the suspension during the investigation.

Pay

In 2003, the Supreme Court ruled that suspension is a cause for non-performance of work that must reasonably be borne by the employer according to section 7:628 DCC. The employee has a right to be paid in nearly all circumstances, with limited exceptions (eg, if the employee is in detention and the employer suspended the employee in response to that).

Duration

The duration of the suspension during a workplace investigation is not legally pre-determined. However, the suspension of an employee must be a temporary measure. The relevant collective agreement often stipulates how long the suspension may last.

Yes, an employee can be suspended during an investigation to allow the employer to investigate the allegations against the employee unhindered and without undue interference by that employee. A suspension under the law merely prevents the employee from discharging the ordinary functions of his or her role without any deprivation of his rights during the period of the suspension. Thus, unless there is an express provision in the contract of employment or employee’s handbook stating that the employee can be suspended with or without half pay, the employee would be entitled to a full salary.

Further, the duration for which the employee may be suspended should be as contained in the employee’s contract, employee’s handbook, or letter of suspension.

In the recent case of GLOBE MOTORS HOLDINGS NIGERIA LIMITED v. AKINYEMI ADEGOKE OYEWOLE (2022), the court held, “Since suspension is not a termination of the employment contract nor a dismissal of the employee, the implication is that the employee is still in continuous employment of the employer until he is recalled or formally terminated or dismissed. Pending his recall or dismissal, a suspended employee is entitled to his wages or salary during the period of suspension, unless the terms of the contract of employment or the letter of suspension itself is specific that the suspended employer will not be paid salaries during the period of suspension”.

A preventive suspension pending investigation is allowed under the law, provided that the continued employment of the subject of the investigation poses a serious and imminent threat to the life or property of the employer or other employees. Additionally, the period of preventive suspension pending investigation should not last longer than 30 days. However, should the employer wish to extend this period, the employer must pay the employee’s wages and other benefits. The employee is under no obligation to reimburse the amount paid to them during the extension if the employer should, later on, decide to dismiss the employee after the completion of the process.

In practice, the notice of preventive suspension is issued simultaneously with the first notice or the notice to explain after the employer has conducted its fact-finding investigation and has reason to believe that the employee must be held accountable for his or her actions.

Since placing an employee under preventive suspension requires the existence of a serious and imminent threat to the life or property of the employer or other employees, some employers opt to place the employee or employees involved on agreed paid leave. This will allow the employer to conduct an unhampered workplace investigation while the investigated employee is still able to receive his or her full salary during this period. The exact period of paid leave may be agreed upon by the employer and the employee, but ideally it should not last for more than thirty days.

Polish law does not provide for the suspension of an employee. Instead, an employer may agree with an employee that he or she will be released from the obligation to perform work during a relevant period of investigation (with the right to remuneration). The employer may not do this unilaterally, unless the employee is in a notice period. As an alternative, which is more common in practice, the employer may force the employee to use outstanding holiday leave (subject to limitations provided by law) or the parties may mutually agree on the use of holiday leave or unpaid leave (if the employee has already used his or her holiday entitlement in full).

After the employee is notified of the accusation, the employer may decide on a preventive suspension of the employee if the employee’s presence on company premises is deemed problematic. In this case, the employee’s salary will continue to be paid.

As per article 330(5) of the Portuguese Labour Code, a preventive suspension may also be determined during the 30 days before the accusation is made, provided that the employer, in writing, justifies why is necessary (eg, for interfering with the inquiry) and why the accusation cannot be served at that moment.

Yes. Section 14(1) read with 14(8) of the Employment Act 1968 provides that an employee can be suspended during a workplace investigation

However, pursuant to section 14(8) of the Employment Act 1968, the employer:

• may suspend the employee from work for:
  • a period not exceeding one week; or
  • such longer period as the Commissioner for Labour may determine on an application by the employer; but
• must pay the employee at least half the employee’s salary during the period the employee is suspended from work.

Section 14(9) of the Employment Act 1968 further states that if the inquiry does not disclose any misconduct on the employee’s part, the employer must immediately restore to the employee the full amount of the withheld salary.

In addition to the above legislative requirements, the company is required to also comply with its policies relating to such suspensions.

In terms of the threshold to be crossed before a suspension can take place, the Singapore Courts have highlighted that suspending an employee quickly as part of a “knee-jerk” reaction to an unclear or unspecific allegation with dubious credibility is arguably a breach of the implied term of mutual trust and confidence that exists in all employment relationships ([56] of Dong Wei v Shell Eastern Trading (Pte) Ltd and another [2021] SGHC 123). The employer would need to have proper and reasonable cause to suspend an employee for disciplinary purposes ([56(d)] of Cheah Peng Hock v Luzhou Bio-Chem Technology Ltd [2013] 2 SLR 577; [2013] SGHC 32), for example, where multiple credible sources claimed that they had been sexually harassed by an employee, and the employer had strong grounds to believe that if the employee was not suspended, the safety and wellbeing of the other employees in the organisation would be threatened.

In contrast, an employer is not entitled to suspend an employee during a workplace investigation where the employer has only received one complaint that has not been properly described or substantiated with sufficient details from an unverified or unreliable source against an employee who has a good track record with the organisation. This is especially so if the complaint is so unclear that further inquiries should be made before the allegation can be properly ascertained and characterised (see also [51] of Dong Wei v Shell Eastern Trading (Pte) Ltd and another [2021] SGHC 123).

The company may place an employee who is subject to a workplace investigation under administrative leave if this seems necessary or appropriate to ensure the integrity of the workplace investigation. While administrative leave can take different forms, one way is to issue a “standby order” to the relevant employee, instructing him or her not to come into work and prohibiting contact with other employees or customers while the workplace investigation is ongoing.

Administrative leave is not a disciplinary action, but rather an exercise of the company’s authority to take personnel management measures. This authority is generally subject to a “reasonableness” test, with the Korean courts balancing the employer’s business necessity in placing the employee on administrative leave with the inconvenience caused to the employee. In conducting the balancing test, the Korean courts have considered whether the employee receives pay during the leave and the duration of the leave, among other things. In general, if the duration of the leave is not excessive and is with full pay and benefits, the employer’s management prerogative is likely to be recognised.

The company doesn't need to obtain the employee’s consent but, in practice, a company should consider getting the employee’s acknowledgement that they have received the administrative leave notice.

In addition to Korean labour law, other factors such as the company’s rules of employment or a collective bargaining agreement (if any) may affect the company’s ability to place the employee on administrative leave, by providing for prescribed procedures for placing an employee on administrative leave or requiring the company to obtain the union’s consent if a union leader or executive is involved.

Yes, a company may suspend an employee if it has valid grounds to believe that keeping an employee under investigation in his or her position during the enquiry could obstruct the investigation or become an obstacle to it (for example, the employee could try to conceal facts or influence other employees within the organisation).

The decision to suspend the employee must be communicated in writing. This will usually take the form of a suspension letter that explains the reasons that have led to the suspension, its expected duration and that the suspension is not a disciplinary measure. Since the suspension is not a disciplinary measure, the employee would be entitled to continue collecting his or her standard remuneration during the suspension.

In Spain, employees have the right to be effectively occupied during their employment. Therefore, the duration of the suspension should be limited in time to what is strictly necessary to avoid what led to the suspension in the first place.

In general, an employee in the private sector may be temporarily suspended for a short period with pay and other benefits during a workplace investigation. The room for suspension without pay is, by contrast, very limited. An applicable collective bargaining agreement may impose additional restrictions on the right to temporary suspend an employee. The suspension should be limited in time and only be in force during the investigation, but can be repeated for (multiple) additional short periods if necessary to conclude the investigation. An assessment needs to be made on a case-by-case basis as suspension in some cases may be considered unlawful. If not executed with sufficient consideration of the employee’s interests, it may be considered a constructive dismissal or a breach of the employer’s work environment obligations. If the employee is unionised, trade unions sometimes request that the employer initiates consultations as part of a decision to suspend an employee.

In the public sector, the right to suspension is limited. There are also special regulations regarding the suspension of certain employees, for example, employees who are employed as permanent judges.

It is possible to suspend an employee during a workplace investigation.[1] While there are no limits on duration, the employee will remain entitled to full pay during this time.

While an employee is being investigated by the employer, the LPA permits the employer to suspend that employee from work for the duration of the investigation, provided that the suspension can only be made when permitted by the work rules or an agreement related to the conditions of employment. Also, a suspension order must be made in writing and specify the offence and period of the suspension, which may not exceed seven days. Note that the employer must give a written suspension order in advance to the employee before the work suspension.

As aforementioned, the LPA only permits the employer to suspend the employee under investigation from work only for seven days. During the interim period of the suspension, the employer must pay the employee at the rate indicated in the work rules or the agreement reached between the employer and the employee, which must not be less than half of the employee's wages for a working day before his or her suspension. If the employer determines that the employee subject to investigation is not guilty following the outcome, the employer must compensate the employee for outstanding wages from the date of suspension with 15% interest per annum.

In some complicated cases, a workplace investigation does not conclude within seven days, and, in which case the employer should consult with a legal advisor.

An employee can be suspended during a workplace investigation provided his or her prior written consent is obtained to this effect during or immediately before the investigation. Obtaining a generic written consent from the employee regarding suspension, which is not tied to a specific event, will not be valid. If there is a suspension of employment due to the workplace investigation, the obligations of the parties arising from the employment relationship continue, except for the employer’s obligation to pay a salary (and provide benefits, if any) and the employees’ duty to perform work.

There is no provision or established court decision setting forth the rules regarding the length of the suspension period; however, as a general rule, this period should be as brief as possible, so as not to cause any impression that the employment relationship has been terminated by the employer. Suspension of an employee on full pay during a workplace investigation, which is also known as garden leave, is a commonly used alternative to a conventional suspension method described above. During the garden leave period, an employee can be banned from entering the workplace and performing any of his or her duties either partially or entirely while continuing to be paid his or her regular salary, along with fringe benefits. Garden leave is not a concept regulated under Turkish employment legislation, but rather developed in practice, mostly by the Turkish subsidiaries of multinational companies. An ideal approach for the implementation of garden leave would be to obtain the written consent of the employees either at the commencement of employment or during the investigation.

In the UK, suspension is not seen as a neutral act, so should not be a default approach at the start of an investigation. It may be appropriate if, for example, there is a risk to the health and safety of the employee in question (or any other employee), a risk that their continued presence in the business could prejudice the investigation, or risk of continued wrongdoing.

The employer should always check the individual’s employment contract to see if it contains the power to suspend. Suspension should generally always be with pay to avoid any breach of contract. It should also be regularly reviewed and kept to a minimum duration.

Employers should not suspend employees under investigation as a knee-jerk reaction to bare allegations. There must be at least some evidence to support the need for suspension (which may require a preliminary investigation before deciding to suspend). Alternatives to suspension should always be considered, such as a temporary transfer to a different area of work, if the employee agrees or it is otherwise permitted by their contract.

If authorities such as regulators or prosecutorial agencies are involved in the investigation, they may have an opinion about an employee’s suspension, particularly if they wish to conduct interviews. Consider whether or not to involve the authorities in the suspension discussions at an early stage.

ACAS have produced a guide to suspension during investigations (last updated Sept 2022) which gives further guidance on these issues.

Yes. An employer may suspend the subject of an internal investigation with full pay pending the outcome of an investigation. However, this measure should be used sparingly, for example in cases where an employee has been accused of gross misconduct or where it is the only means of separating the alleged victim of harassment from the accused to prevent continued harassment. As an alternative means of separating the victim from the accused, an employer can consider interim measures such as a schedule change, transfer or leave of absence for the alleged victim with his or her consent (employers should take care not to take any action that could be perceived as retaliatory against the complainant – even if well-intentioned – including involuntarily transferring him or her or forcing a leave of absence).

Where an employer does determine that suspending the subject of an investigation is warranted while the company carries out its investigation, it should provide him or her with a written statement briefly outlining the reason for the suspension and the estimated date the employee will be advised of the investigation outcome and his or her final employment status.

Article 128 of the 2019 Labor Code explicitly states that an employer has the right to temporarily suspend an employee who is being investigated for committing an alleged act of misconduct in breach of the labour rules, if the following conditions are met:

• the misconduct committed is complex in nature, and any further work carried out by the employee may jeopardise the ongoing investigation. The law does not clearly define “complex nature”; it may be open to various interpretations by the employer. In practice and from our experience, allegations of sexual harassment may be considered complex misconduct and, therefore, can be a ground for suspension;
• the employer has consulted with (and effectively obtained the approval of) the grassroots-level representative organisation of the employee. No formal process is stipulated under the law for such consultation with this organisation. From our experience, the consultation can be in the form of a meeting between the management of the employer and the executive committee of the organisation. However, the organisation should require the employee to acknowledge their consent in writing by signing the meeting minutes;
• the period of suspension cannot exceed 15 days or 90 days in “special circumstances”. The law does not define what falls under “special circumstances”. In our view, this will be subject to the interpretation and discretion of the employer after consulting with the grassroots-level representative organisation of the employee; and
• the employee must be paid 50% of his or her wage that would be due during the period of the temporary suspension in advance. When the temporary suspension ends, if no disciplinary measure is imposed on the employee, the employer must pay the full wage for the period of the suspension by paying the remaining 50%.

As part of an investigation, the investigator may want to collect evidence such as camera footage from CCTV, swipe card records, computer records, telephone records or recordings and GPS tracking. There are state-based workplace surveillance laws that operate in each jurisdiction in Australia. The laws recognise that employers are justified in monitoring workplaces for proper purposes, but this is balanced against employees’ reasonable expectations of privacy.

The Privacy Act 1988 (Cth) (Privacy Act) also regulates how certain organisations handle personal information, sensitive personal information and employee records. The Privacy Act contains 13 privacy principles that regulate the collection and management of information. Employers should familiarise themselves with the privacy principles before conducting any investigation to ensure they are not in breach when gathering evidence.

All data processing must comply with the principles of article 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity). Personal data may only be collected and processed for specific, lawful purposes.

The admissibility of data processing depends on whether the suspicion relates to a criminal offence or another violation of the law. If the data processing is relevant to criminal law, article 10 GDPR or section 4(3) of the Austrian Data Protection Act (DSG) applies. If the investigations are exclusively to clarify violations under civil or labour law, such as an assertion of claims for damages or if they are general investigations to establish a criminal offence, the permissibility of data processing is based on article 6 or, for data covered by article 9 GDPR, on this provision.

Here, the investigation “collides” with the right to privacy of the persons involved.

First, the rules and principles of the GDPR will apply if personal data is involved. Therefore, the employer will have to find a data-processing ground, which could be his or her legitimate interest or the fact that the investigation could lead to legal proceedings, etc. The data processing should also be limited to what is proportionate and the data subjects should be informed. Due to this obligation, it is arguable that the GDPR policy already provides the necessary information for the employees not to jeopardise the investigation. In any case, data subjects should not be able to use their right to access data to ascertain the preliminary findings of the investigation (which are confidential) or any confidential identities involved (eg, in the whistleblower procedure, the identity of the report should be protected at all times).

Also, the employer should follow the procedure of Collective Bargaining Agreement No. 81 on searching the e-mails or computer files and internet searches of employees. This CBA limits the purposes for searches and lays down a double-phase procedure that needs to be followed if private data is involved. Next to this, the employer should also take into account the case law of the European Court of Human Rights, which only allows e-mail and computer searches based on the following:

• whether the employee has been notified of the possibility that the employer might take measures to monitor correspondence and the implementation of such measures;
• the extent of the monitoring and the degree of intrusion into the employee’s privacy (including a distinction between the monitoring of the flow or the content of the communications);
• whether the employer has provided legitimate reasons to justify monitoring of the communications and accessing of their actual content; and
• whether it would have been possible to establish a monitoring system based on less intrusive measures, the consequences of the monitoring for the employee who is subject to it, and whether the employee had been provided with adequate safeguards.

Next, if the employer wants to use camera images, the rules of Collective Bargaining Agreement No. 68 should have been followed when installing cameras. If not, the images might have been collected illegally.

The Brazilian General Data Protection Law (LGPD) does not have specific rules or principles that apply to internal investigations conducted within private organisations. Despite that, the general principles and obligations set forth by the LGPD apply to any processing of personal data carried out within the context of such investigations. As a result, the company must ensure the transparency of such processing activities through a privacy notice addressed to the data subjects; only process the personal data that is necessary for the investigation; define the lawful basis that applies to such processing activities (especially for sensitive data); and apply any other obligations established by the LGPD.

The Civil Code of the PRC, the Personal Information Protection Law of the PRC and other laws provide for the protection of employees' personal information and privacy. Employers are often involved in checking the information and materials stored in the computers, hard disks and other electronic office equipment provided to employees in internal investigation and are likely to access the employees' personal information including personal privacy information, such as the communication records stored in instant communication software such as WeChat, QQ or other instant communication software or to and from private email boxes. According to the Personal Information Protection Law of the PRC, employers are required to perform the obligation of informing and obtain the individuals' consent prior to the processing of personal information, i.e. the principle of informing + consent. Moreover, the Civil Code of the PRC stipulates that no organization or individual may process any person's private information, except as otherwise provided by law or with the explicit consent of the right holder.

Therefore, the legitimacy of obtaining data evidence can be enhanced and guaranteed only if it is explicitly stated in the relevant rules and regulations that the employer shall have the right to the work equipment provided to the employees or obtains the employees' personal consent.

Generally, the basic principles set out by the GDPR and the Finnish Data Protection Act apply to data processing in connection with investigations, including evidence gathering: there must be a legal basis for processing, personal data may only be processed and stored when and for as long as necessary considering the purposes of processing, etc.

Additionally, if physical evidence concerns the electronic communications (such as emails and online chats) of an employee, gathering evidence is subject to certain restrictions based on Finnish ePrivacy and employee privacy laws. As a general rule, an employee’s electronic communications accounts, including those provided by the employer for work purposes, may not be accessed and electronic communications may not be searched or reviewed by the employer. In practice, the employer may access such electronic correspondence only in limited situations stipulated in the Act on Protection of Privacy in Working Life (759/2004), or by obtaining case-specific consent from the employee, which is typically not possible in internal investigations, particularly concerning the employee suspected of wrongdoing.

However, monitoring data flow strictly between the employee and the employer's information systems (eg, the employee saving data to USB sticks, using printers) is allowed under Finnish legislation, provided that employee emails, chats, etc, are not accessed and monitored. If documentation is unrelated to electronic communications, it also may be reviewed by the employer. Laptops, paper archives and other similar company documentation considered "physical evidence" may be investigated while gathering evidence on the condition that any private documentation, communications, pictures or other content of an employee are not accessed.

GDPR principles fully apply to data gathering, as well as case law protecting the right to respect one’s private life and the secret of correspondence.

When collecting data (in physical or digital form), the employer must ensure compliance with the data protection principles according to the General Data Protection Regulation (DSGVO) and the German Data Protection Act (BDSG). These principles include, among other things, that data collection must be carried out lawfully (principle of legality) and transparently (transparency principle) and must be comprehensively documented – specifically concerning the purpose of the workplace investigation – to be able to prove compliance with data protection.

The principle of legality states that data may only be collected on a legal basis (ie, there must either be a law authorising this or the employee must have consented to the collection of his data).

The transparency principle may constitute a special challenge during workplace investigations. Under the transparency principle, the employee must be generally informed about the collection of his data. This includes information on who processes the data, the purposes for which it is processed and whether the data is made available to third parties. However, there may be a risk of collusion, particularly when electronic data has to be reviewed, and thus the success of the investigation may be jeopardised if the relevant employee is comprehensively informed in advance. Accordingly, the employer should check, with the assistance of the data protection officer, whether the obligation to provide information may be dispensed with. This may be the case if providing the information would impair the assertion, exercise or defence of legal claims and the interests of the employer in not providing the information outweigh the interests of the employee. The respective circumstances and employer's considerations should be well documented in each case.

Regardless of whether the employee is informed about the investigation, to prevent data loss, the employee should be sent a so-called hold notice (ie, a prohibition to delete data). Additionally, to prevent automatic deletion, blocking mechanisms should also be implemented.

When gathering evidence by searching the employee's possessions or files, the employee's privacy rights also need to be observed (see question 8).

GDPR and the provisions of L. 4624/2019 regulate the gathering of physical evidence from a data protection perspective, providing, among other things, that personal data should be processed with transparency and to the extent necessary for the investigation.

L.4990/2022 on the protection of persons who report breaches of Union law regulates data protection issues in the context of whistleblowing investigations, mainly to safeguard confidentiality throughout the investigations.  

If physical evidence contains data relating to an individual, from which the identity of the individual can be ascertained,[1] the data would constitute personal data under the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO). The PDPO sets out several data protection principles that the employer must comply with while processing personal data, including:[2]

• personal data must be collected for a lawful purpose related to a function or activity of the employer and should not be excessive for this purpose. An internal investigation would be regarded as a lawful purpose;
• personal data must be accurate and not kept longer than is necessary;
• personal data must not be used for a purpose other than the internal investigation (or other purposes for which the data was collected) unless the employee consents to a new use or the new use falls within one of the exceptions provided in the PDPO;
• personal data must be safeguarded against unauthorised or accidental access, processing or loss; and
• the employee whose personal data has been collected has the right to request access to and correction of his or her personal data retained by the employer.

If an employer wants to gather evidence through employee monitoring, it should ensure that the act of monitoring complies with the data protection principles of the PDPO if the monitoring activity would amount to the collection of personal data. The Privacy Commissioner for Personal Data has issued guidelines to employers on the steps they can take in assessing whether employee monitoring is appropriate for their businesses.[3] As a general rule, employee monitoring should be conducted overtly. Further, those who may be affected should be notified in advance of the purposes the monitoring is intended to serve, the circumstances in which the system will be activated, what personal data (if any) will be collected and how the personal data will be used.

Covert surveillance of employees should not be adopted unless it is justified by relevant special circumstances. Employers should consider whether there is reason to believe that there is an unlawful activity taking place and the use of overt monitoring would likely prejudice the detection or collection of evidence.[4] Even if covert monitoring is justified, it should target only those areas in which an unlawful activity is likely to take place and be implemented for a limited duration of time.

In India, the collection, disclosure, transfer and storage of personal data is regulated by the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPD Rules). Accordingly, if during an investigation any sensitive personal information (such as information relating to passwords; financial information such as a bank account, credit or debit card or other payment instrument details; a physical, physiological or mental health condition; sexual orientation; medical history; and biometric information) is collected, then the requirements under the SPD Rules will need to be complied with. This would include obtaining an individual’s “informed consent” before collecting any sensitive personal data if such information is intended to be collected or stored in an electronic format.

Under the GDPR (General Data Protection Regulation), personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject. The Data Protection Commission published Data Protection in the Workplace: Employer Guidance in April 2023, which is a useful guide.

Employers should exercise caution when gathering physical evidence that may involve the use of CCTV or other surveillance practices. The Irish Court of Appeal in the case of Doolin v DPC examined the use by an employer of CCTV footage for disciplinary purposes and found such use constituted unlawful further processing. The original reason for processing the CCTV footage was to establish who was responsible for terrorist-related graffiti that was carved into a table in the staff tearoom. It subsequently transpired Mr Doolin, who was in no way connected to the graffiti incident, had accessed the tearoom for unauthorised breaks and a workplace investigation followed. The original reason for viewing the CCTV related to security, but further use of the CCTV footage in the disciplinary investigation was not related to the original reason. This case confirms that employers must have clear policies in place in compliance with both GDPR and the Data Protection Act 2018 specifying the purpose for which CCTV or any other monitoring system is being used. Not only that, but these policies must be communicated to employees specifying the use of such practices.

It is not only data about the investigation that must be processed fairly, but any retention of the data, which can only be further processed with good reason. It is a legitimate business reason to retain data to deal with any subsequent requests or appeals under various internal or statutory processes, provided employees have been advised of the relevant retention period.

Several legal and case-law principles may be relevant depending on the kind of investigation, including the following:

• gathering evidence through employee “physical inspections and inspections on the employee’s belongings”: according to article 6 of the Workers’ Statute, these inspections are generally prohibited. They are permitted only where necessary to protect company assets (in such cases, corporal inspections may be carried out, subject to trade union agreement or National Labour Inspectorate authorisation, provided that, for example, they are carried out outside the workplace, that employees are selected with an automatic selection tool, and that the dignity and confidentiality of employees are protected);
• gathering evidence through “audiovisual equipment and other instruments from which the possibility of remote control of employees’ activities arises”: according to article 4 of the Workers’ Statute, remote systems cannot be directly aimed at controlling employees’ activity, but can only be put in place for organisational, production, work safety or asset-protection needs (which may result in an indirect control over employees’ activity), and may be installed before a trade union agreement or with previous authorisation from the National Labour Inspectorate; however, these rules do not apply to working tools in an employee’s possession (see question 8) and, in any case, employees must be informed of the possibility of remote control;
• gathering physical evidence through so-called defensive controls: according to the most recent case law, “defensive controls” can be defined as investigations carried out by the company where it has a suspicion of unlawful conduct by its employees. These controls can be carried out within certain limits and restrictions provided by case law – even in the absence of the guarantees provided for in article 4 of the Workers’ Statute.

In addition, when gathering physical evidence, there may be other provisions of law not strictly related to employment law that must be followed, for example, regarding privacy regulations (eg, minimisation of the use of personal data, collection of data only for specific purposes, and adoption of safety measures).

When collecting physical evidence that contains personal information, the Personal Information Protection Law and its related guidelines apply. In addition, when collecting physical evidence that contains privacy information or an employee's photograph, care must be taken to ensure that the right to privacy and the image rights are not violated.

Dutch data protection rules are based on the EU Data Protection Directive. The employer has to notify the Dutch Data Protection Authority when processing personal data as part of an internal investigation. Given that the notification can be accessed publicly, it is recommended that the employer give a sufficiently high-level description of the case. In addition, the description should be sufficiently broad to include the entire investigation, and any future expansions of the scope of the investigation. Often companies make filings for all future internal investigations, without referring to specific matters.

The employer has to notify employees whose personal data is being processed about – among other things – the purposes of the investigation and any other relevant information. According to the Dutch Data Protection Act, this information obligation may only be suspended on restricted grounds, i.e. if the purpose of the investigation is the prevention, detection and prosecution of crimes and postponement is necessary for the interests of the investigation (e.g., because there is a risk of losing evidence, or collusion by individuals coordinating responses before being interviewed)). These exceptions on the duty to inform involved persons must be interpreted very restrictively. As soon as the reason for postponement is no longer applicable (e.g., because the evidence has been secured), the individuals need to be informed.

Dutch data protection law does not require the consent of employees. Consent given by employees, however, also cannot compensate for a lack of legitimate purpose or unnecessary or disproportionate data processing, as the consent given by an employee to its employer is not considered to be voluntary given the inequality of power between them.

Furthermore, internal company policies may contain specific data protection rules.

When gathering evidence, the person being investigated is protected by the Constitution, the Freedom of Information Act and the Nigerian Data Protection Regulation (NDPR), among others.

The Constitution, particularly section 37, guarantees the right of a person to privacy.

The NDPR is the main data protection regulation in Nigeria. It regulates the processing and transfer of personal data.

Further, the Freedom of Information Act, 2011 prohibits the disclosure of information gathered during an investigation to the public.

The procedure for gathering physical evidence is governed primarily by company policy. Nevertheless, the Data Privacy Act of the Philippines protects all data subjects from unlawful processing of their personal information without consent.

If personal data is involved – the rules and principles of the GDPR will apply. If the physical evidence includes e-mail correspondence, files, or an employee’s equipment and possessions, the Labour Code will apply (ie, as a general rule, to monitor it, a monitoring policy must be implemented at that working establishment). Such a policy must strictly determine the aim of the surveillance and an employer must only apply surveillance in situations that reflect this aim. Also, when it comes to monitoring correspondence, it must not infringe on the secrecy of the correspondence, which in practice means that the employer should not check employees’ private correspondence when checking their business mailboxes.

Whenever employers process personal data in the course of an investigation, they need to comply with Regulation (EU) 2016/679 (the GDPR) and Law 58/2019, which implements the GDPR in Portugal (jointly the Data Protection Regulations). If the gathering of physical evidence includes the collection and processing of sensitive data (eg, related to the employee’s health or any other category outlined in article 9 of the GDPR), additional safety measures should be in place to safeguard the adequate and confidential nature of such information.

The employer may collect the personal data of an individual without the individual’s consent or from a source other than the individual, where it is necessary for any investigation according to section 17(1) read with paragraph 4 of Part 3 of the Third Schedule of the Personal Data Protection Act 2012 (PDPA). Under section 2(1) of the PDPA, “investigation” means an investigation relating to:

• a breach of an agreement;
• a contravention of any written law, or any rule of professional conduct or other requirement imposed by any regulatory authority in the exercise of its powers under any written law; or
• a circumstance or conduct that may result in a remedy or relief being available under any law.

Under the Banking Act 1970, a bank and its officers cannot disclose customer information to third parties, subject to certain exceptions. An employer carrying out a workplace investigation does not fall within any of the exceptions.

It may be difficult for a company to search and collect physical items that personally belong to the employee.

While the company may search and gather electronic data, such as emails or files stored in work laptops or company servers, there are requirements and restrictions under the Criminal Code, the Personal Information Protection Act (PIPA), and the Act on Promotion of Information and Communications Network Utilisation and Information Protection, etc (Network Act), among other laws. 

Article 316(2) of the Criminal Code states that accessing the contents of another person’s documents, pictures, special media records, etc, that are sealed or designated as secret using technical means may constitute the crime of accessing electronic records.

Under the PIPA, consent must be obtained from the information owner to collect or use personal information, or to provide such information to a third party. Consent must be separately obtained for sensitive information or unique identification information. There are strict requirements as to the format and contents of the consent forms under the PIPA.

The Network Act prohibits accessing an information and communications network without rightful authority or any intrusion that goes beyond the permitted authority for access. Although this may not be an issue if a company directly manages the email accounts at issue, if an employee’s email account is protected by a password or through other means, accessing emails from that account without obtaining the employee’s consent could constitute unlawful intrusion under the Network Act as well as under the Criminal Code as discussed above.

The General Data Protection Regulation and the Spanish Data Protection Law apply when gathering any type of evidence, including physical evidence. This means that companies may only process personal data when they have lawful grounds to do so and within the limits set forth for special categories of personal data (health, union affiliation, criminal records, etc.).

The Spanish Statute of Workers specifically states that employees and their possessions may be registered when it is necessary to protect the companies’ property (or the property of other co-workers). This registration must:

• be conducted in the workplace and during working hours;
• respect the employee’s privacy and dignity; and
• be performed in front of an employee representative or, if not possible, in the presence of another employee of the company.

To the extent the gathering of physical evidence includes the processing of personal data, please see question 1.

The Swiss Federal Act on Data Protection applies to the gathering of evidence, in particular such collection must be lawful, transparent, reasonable and in good faith, and data security must be preserved.[1]

It can be derived from the duty to disclose and hand over benefits received and work produced (article 321b, Swiss Code of Obligations) as they belong to the employer.[2] The employer is, therefore, generally entitled to collect and process data connected with the end product of any work completely by an employee and associated with their business. However, it is prohibited by the Swiss Criminal Code to open a sealed document or consignment to gain knowledge of its contents without being authorised to do so (article 179 et seq, Swiss Criminal Code). Anyone who disseminates or makes use of information of which he or she has obtained knowledge by opening a sealed document or mailing not intended for him or her may become criminally liable (article 179 paragraph 1, Swiss Criminal Code).

It is advisable to state in internal regulations that the workplace might be searched as part of an internal investigation and in compliance with all applicable data protection rules if this is necessary as part of the investigation.

The basic premise is that all evidence is admissible unless it violates the law of admissibility and production of evidence, which may vary depending on the jurisdiction. In a criminal court, for example, evidence gathered in violation of the fruit of the poisonous tree doctrine would be typically inadmissible, yet in a civil court, this doctrine would not be an exclusionary rule.

The Personal Data Protection Act, BE 2562 (2019) (PDPA), which is the main data protection law in Thailand, applies when collecting, using, and disclosing pieces of evidence containing the personal data of employees. If the investigation requires sensitive information of the employee under investigation, for example, race, ethnic origin, political opinion, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, genetic data and biometric data, consent from the employee should be obtained.

The conditions applicable to gathering physical evidence mainly stem from the precedents of the Turkish Constitutional Court about employment disputes and the rules set forth under Turkish Law No. 6698 on the Protection of Personal Data (DPL). It is generally accepted that employers can gather physical evidence for certain legitimate purposes, such as disciplinary investigations, the prevention of bribery and corruption, fraud or theft, money laundering, and employee performance monitoring and compliance. In doing so, employers must, however, comply with the fundamental principles of the Turkish Constitutional Court as briefly described below:

• The grounds for the gathering of evidence must be legitimate. The definition of the legitimate interests of the employer may change depending on the characteristics of the business, workplace and employee job description, as well as the specific circumstances of the case. Therefore, it is advisable to carry out a balancing test between the legitimate interest the employer is seeking to protect and the employee’s interest in the protection of their privacy.
• The collection activities must be proportionate, in the sense that the measure implemented by the employer must be appropriate and reasonably necessary to achieve the legitimate purpose, without infringing upon the fundamental rights and freedoms of the employees. For instance, e-mail monitoring to collect evidence may not be proportionate if it is determined that e-mails that are not related to the incident subject to investigation are also accessed. To achieve this, certain keywords or algorithms can be used while monitoring e-mails during a disciplinary investigation.
• The collection process must be necessary to achieve the purpose. In other words, the collection of physical evidence must only be carried out to the extent there are no other measures allowing the employer to achieve its purpose, such as witness testimony, workplace records, or examining the results of projects. If the purpose can be achieved through less invasive means, the collection of physical evidence may not comply with the principles established by the decisions of the Constitutional Court.

Separately, depending on the type of physical evidence collected, the collection process may lead to the processing of the concerned employees’ personal data. Under the DPL, personal data collected in Turkey can only be processed if the explicit consent of the data subject is obtained; or the data is processed based on one of the exceptions to consent provided by the law. To the extent the data processing can be deemed to be based on the pursuit of a legitimate interest of the employer, it should also meet the following conditions:

• it should be the most convenient and efficient method to identify any employee wrongdoing to protect the legitimate interests of the company; and
• the data processing should not harm the fundamental rights and freedoms of the employees.

The employer should in any case comply with the obligation to inform employees before the processing of their data, through a privacy notice containing mandatory information required by the DPL.

In addition, as a general principle, the evidence-gathering process should always be conducted based on the assumption that the internal investigation can lead to litigation. Any evidence that will be used in litigation needs to have been gathered in compliance with the law. In both criminal and civil litigation, the courts will review each piece of evidence to confirm whether it was gathered through lawful methods and disregard any evidence that fails to comply with due process.

Most forms of workplace surveillance involve the processing of personal data that is regulated by the UK GDPR and DPA 2018. The UK GDPR requires that personal data must be processed lawfully, fairly and in a transparent manner; it also must be adequate, relevant and limited to what is necessary concerning the purposes for which it is processed.

Employers should ensure that they have undertaken a data protection impact assessment (DPIA) to document the lawful basis for processing data, and informed employees that their files may be searched before proceeding. They should also ideally have a clear policy on the use of electronic communications systems, detailing when, how and for what purpose they may be monitored by the employer. In Q3 2023 the ICO produced new guidance on monitoring workers (https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/) and on email and security (https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/email-and-security/) which employers should bear in mind during investigations. Employers should also be prepared to make the data collected through employee monitoring available to employees, should the employee submit a data subject access request under the DPA 2018.

The IPA 2016 makes it unlawful in certain circumstances to intercept a communication (such as one on an employer’s telephone or computer network) in the course of its transmission in the UK. The IPA Regs 2018 set out the circumstances where, in a business context, such interception will be lawful. These include monitoring or recording communications without consent to: establish the existence of facts; ascertain compliance with the regulatory or self-regulatory practices or procedures relevant to the business; ascertain or demonstrate standards which are or ought to be achieved by persons using the system; and prevent or detect crime.

Covert surveillance can lead to a breach of an employee's right to privacy under the HRA 1998. The employer will need to consider if covert surveillance is proportionate, which will depend on the facts of each case. Employers should be careful not to use the investigation as an excuse to undertake a "fishing expedition", and should avoid gathering material that is obviously personal, such as private messages and diary entries (see question 8).

Documents and instruments that set out a company’s policies (eg, employee handbooks, code of conduct or other written guidelines) often contain provisions regarding employee data and document collection, workplace searches, communication monitoring, privacy, and confidentiality. As discussed below, state and federal constitutional, statutory and common law – and in some cases foreign data privacy regimes – may provide additional protections to protect employees from an unwarranted or unreasonable invasion of privacy during an internal investigation.

Decree No. 13/2023/ND-CP on personal data protection is the main data protection regulation in Vietnam. It regulates the processing of personal data, including the collection or gathering of data. If the physical evidence contains personal data of an individual, the gathering of physical evidence must comply with this decree.