Workplace Investigations

Non-disclosure agreements, also known as confidentiality agreements, can be used to maintain the confidentiality of the investigation. In this agreement, the employee will be directed to maintain confidentiality concerning the investigation and matters that are the subject of the investigation, and not speak to anyone outside the investigation team about the investigation without authorisation.

Confidentiality agreements are legal documents. Employees should be informed that a breach of the confidentiality agreement could result in disciplinary action being taken against them, up to and including termination of their employment.  

According to section 6(1) of the DSG, employees who have access to personal data in the course of their professional activities must maintain data confidentiality and continue to do so even after termination of their employment.

Non-disclosure agreements can generally be used to achieve this but are subject to certain restrictions. They may not be used to conceal criminal activity, violate the privacy rights of individuals, circumvent legal disclosure obligations, prevent the exercise of legal rights or contain clauses that violate existing laws, in particular data protection regulations.

In principle this is possible. However, these NDAs do have their limits and cannot prevent involved persons from, for example, bringing a legal claim or filing a report if they are legally entitled to do so. Under whistleblower rules, a reporter can even publish his or her complaint under certain circumstances.

Yes, NDAs may be executed to reinforce the confidentiality obligations outlined in the company's policies and reinforced in interviews.

Yes. In practice, before conducting a compliance investigation, we recommend that the employer and the investigator enter into a confidentiality agreement to require the investigator to keep confidential the facts and the substance of the investigation. This will not only better protect the personal information of the complainant, the witness and the investigated employee, but also help the investigation to proceed smoothly.

Yes, however, the need for an NDA is assessed always on a case-by-case basis.

Most of the time, the legal protection afforded by the legally prescribed confidentiality obligation that applies to whistleblowing is sufficient. This is all the more so given every person involved is bound by an obligation of discretion. However, there is no legal obstacle to the creation of an NDA between the employer and the people involved.

NDAs setting out a strict and reinforced obligation of confidentiality and discretion during the investigation should be signed by any external parties involved (eg, translation agency, IT expert) or when the internal investigation is outside the scope of whistleblowing regulations.

In principle, it is possible to conclude non-disclosure agreements with external consultants of the investigation or with employees involved in the investigation. However, regarding external lawyers, a non-disclosure agreement is not necessary since lawyers are already subject to professional confidentiality. Concerning employees, it is rare in Germany to conclude confidentiality agreements in connection with a workplace investigation.

NDAs are an option, especially to outline in detail the obligations of the persons conducting the investigation, which is also provided for in law. On the other hand, NDAs will not prevent persons involved from providing information to the competent authorities in the context of criminal or other similar procedures, where they must do so by law. Moreover, they may not protect confidentiality if persons who report breaches of Union law decide to make an external or public report, according to the provisions of L. 4990/2022.

In general terms, NDAs can be used and indeed are commonly used to keep the fact and substance of a workplace investigation confidential. However, NDAs will not be effective in preventing the disclosure of information which is in the public interest or is important for safeguarding public welfare in matters of health and safety. Further, several laws in Hong Kong provide that disclosures as a result of compliance with a requirement made by the relevant authorities will not be treated as a breach of any restriction imposed by contract or otherwise by law.[1]

Yes. While it is common for employees to be bound by general confidentiality obligations at the beginning of employment, it is advisable to reiterate such confidentiality obligations through NDAs during an investigation.

There is no legislation regarding NDAs, but there is a Bill before the legislature proposing to “restrict the use of non-disclosure agreements as they relate to incidents of workplace sexual harassment and discrimination”. It is currently at the report stage. Whether it passes remains to be seen, but there has in recent times been strong criticism of the use of NDAs to cover up matters that ought to be fully investigated and dealt with in an organisation.

Settlement agreements, however they arise, may include confidentiality clauses which may, depending on the terms of the agreement, extend to the fact and substance of an investigation, but as in the UK an employee's right to make a protected disclosure or report a criminal offence cannot be waived by signing an NDA.

Yes, in principle, NDAs can be used to keep the fact and substance of an investigation confidential, even if it is not strictly necessary (and not often done in our experience).

It is possible to use NDAs in investigations.

Yes, NDAs can be used for this purpose. However, employers in the Netherlands often rely on general confidentiality obligations that the relevant employee already has to adhere to vis-à-vis their employer, for example in the employment agreement or collective labour agreement, if applicable. It is good practice to reiterate the confidential nature of any interview and its contents, and the existence of the investigation as such, to avoid any alleged confusion as to the confidential nature of investigative procedures later on.

NDAs are usually part of an employee’s contract and, as such, create a contractual obligation between the parties privy to it. However, where the subject matter of an investigation borders on matters of a criminal nature, it might be impossible for parties to the NDA to continually uphold the obligation under the NDA because the parties have an obligation to the state to disclose facts of a criminal nature.

The practice of stipulating matters to ensure adherence to confidentiality is not uncommon. As such, NDAs are executed as a means of added protection for both the company and the employees involved.

Yes, but it may not stop the disclosure of information at the request of relevant law enforcement authorities.

Please see question 12 above. NDAs are not admissible.

Yes, NDAs can be used to keep the fact and substance of an investigation confidential. There are no express prohibitions against such NDAs under Singapore law. However, information or evidence covered by the NDA may still be discoverable in court or arbitration proceedings; and may also be subject to disclosure requests or directions by the police or statutory authorities, including the MOM.   

Some companies require an employee subject to investigation to sign an NDA or other similar documents (eg, a pledge of confidentiality) agreeing not to disclose information relating to the investigation to outside parties.

Yes. NDAs are the preferred instrument to ensure that employees conducting the investigation, as well as those who participate as witnesses or collaborators, will keep the enquiry and its existence confidential.

NDAs can be used for some investigations carried out in the private sector. However, under the Swedish Whistleblowing Act, a contract is void to the extent it retracts or restricts a person’s rights under the Swedish Whistleblowing Act. An NDA that restricts the right to report irregularities to authorities or the media would, therefore, typically be void.

In addition to the above-mentioned statutory confidentiality obligations, separate non-disclosure agreements can be signed. In an internal investigation, the employee should be expressly instructed to maintain confidentiality.

Non-disclosure agreements can be made between an employer and employees who are involved in an investigation. This may include investigators and witnesses, apart from the employee under investigation. This minimises the risk of information being leaked, which can affect all parties related to the workplace investigation. However, an NDA is not absolute means to prevent the disclosure of confidential information, as the court has the authority to compel disclosure.

It is crucial to keep the events and facts of a workplace investigation confidential for the integrity of the process. It may be necessary to consider appropriate confidentiality measures to protect the complainant, mitigate risks, and preserve evidence. Damage to the confidentiality of the case can prevent the investigation team from bringing the case to a correct and complete conclusion. Although the labour legislation imposes a general confidentiality obligation on employees, NDAs can still be used as supplementary documents that may emphasise the confidentiality obligations of employees in workplace investigations and provide additional contractual protections such as penalties if there is a breach.

Only to a limited extent. As a matter of law, NDAs cannot prevent a worker from making a protected disclosure, or reporting a crime to the police. As a matter of the regulatory obligations of solicitors, NDAs should not be used in other ways, including as a means of influencing the content of disclosures, or by using warranties, indemnities and clawback clauses in a way that is designed to, or has the effect of, improperly preventing or inhibiting permitted reporting or disclosures (see the SRA’s warning notice on the use of NDAs).

This is a fact-specific inquiry that depends on the specific circumstances and laws of the relevant state. In general, NDAs are frowned upon but can be used to an extent to keep certain facts and the substance of an investigation confidential. NDAs can never prevent employees from assisting in official agency investigations, however. NDAs also cannot lawfully prohibit employees from officially reporting illegal conduct by their employer.

Generally, NDAs can be used to keep the facts and substance of a workplace investigation confidential. There are no express prohibitions against such NDAs. However, there are cases set out under Decree No. 13/2023/ND-CP on personal data protection where personal data is allowed or required to be disclosed without the data subject’s consent, in instances that are necessary to serve the public interest or to protect the life and health of the data subject.

During the investigation, unrelated matters can come to light, usually made by the complainant or a witness during the interview process. Unrelated matters may take the form of further complaints against the respondent (but on grounds that are outside the scope of the current investigation), or entirely different complaints.

An employer should first assess the nature of the new allegations. Entirely unrelated matters should be dealt with separately. However, if the matter relates to the respondent it may be appropriate to obtain consent from the respondent and complainant for the scope of the investigation to be widened. It is important to remember that all allegations must be put to the respondent and they must be given an opportunity to respond.

The employer must decide how to deal with this information. Possible options are to initiate separate and unrelated investigations or to extend the ongoing investigations.

If the investigation is not protected by confidentiality towards the employer (e.g. the prevention advisor cannot disclose confidential information to the employer), it could result in further measures taken by the employer or lead to a new investigation.

If unrelated matters are revealed as a result of the investigation, the company must be notified and must start a new investigation regarding them per the appropriate rules, without affecting the original investigation.

If any matter unrelated to this investigation is revealed during the investigation and the matter is suspected of violating regulations, the employer may comprehensively consider whether it is necessary to investigate the new matter. If the employer assesses that a combined investigation will seriously affect and hinder the progress of the investigation or complicate the investigation, the employer can handle the unrelated matters through separate investigations.

In addition, Article 6 of the Personal Information Protection Law of the PRC requires that the processing of personal information shall be for a specific and reasonable purpose and shall be directly related to the purpose of the processing and shall adopt the method with minimum impact on individuals' rights and interests. If the result of the investigation reveals unrelated personal information, it means that the collection and storage of such personal information are unrelated to the purpose of the processing. According to paragraph 1 of Article 47 of the Personal Information Protection Law of the PRC, the employer as the personal information processor shall take the initiative to delete personal information. If the employer fails to delete such information, the employee is entitled to request for deletion.

If they are related to the work or workplace, the employer will handle the emerging matters separately. In internal investigations, the employer is allowed to use any material legally available.

Unrelated matters revealed during the investigation do not necessarily mean that another investigation will be opened. Nevertheless, if reprehensible acts unrelated to the current investigation are revealed, the employer will need to take action and sanction the perpetrator (after checking the facts). Sometimes the only way to check the facts is to carry out another investigation on a separate matter. However, the investigation team may also consider if there is enough connection between the matters to widen the scope of the current internal investigation.

There are no specific rules if unrelated matters are revealed during the investigation. If, in the course of the workplace investigation, new facts are discovered, the same principles apply as for the original reason for the investigation and the employer should consider whether to extend the investigation to the new matter too.

If any unrelated matters are revealed as a result of an investigation and are of legal importance, the applicable legal provisions must be implemented and any relevant policies or agreements between the involved parties should be taken into account. For example, if the reporting procedure sheds light on other criminal acts, criminal law procedure may be followed if the matter is reported to the competent authorities.

If these unrelated matters fall under the ambit of another company’s policies, the relevant procedures may also be followed separately. However, the employee under investigation must be allowed to defend him or herself, otherwise he or she may raise complaints relating to the procedural guarantees of the investigation.

If unrelated matters are revealed during the investigation, the employer should consider whether an investigation is needed. If yes, the employer should decide whether it is appropriate to incorporate the new matters into the scope of the existing investigation by expanding the terms of reference. However, it may not be appropriate to do so if different individuals are concerned or such inclusion would unduly complicate or delay the progress of the existing investigation. If that is the case, the employer should commence a separate investigation.

Where unrelated matters are revealed during, or because of, the investigation, the course to be adopted may depend on several factors. Normally, if additional instances of misconduct are revealed against the same accused employee, even if they are unrelated to the original investigation, it would be advisable to independently investigate those issues too, to ensure that there are comprehensive grounds for any future disciplinary inquiry or action. If unrelated matters are revealed against other stakeholders involved in the investigation – for example, a forensic review reveals that the complainant or some witnesses have themselves potentially engaged in some other form of policy breach – whether or not those issues are investigated (as well as the timing of such investigation) would need to be decided on a case-by-case basis. Issues to consider include whether these matters affect the credibility of their statements, point at some form of other conspiracy, or create the risk of retaliation claims at a later date.

In SH matters, however, if the complaint involves instances of sexual harassment as well as other forms of general harassment or misconduct, to the extent such other issues aren't linked to the instances of sexual harassment (eg, creation of a hostile work environment for the complainant), these other concerns should preferably not be investigated by the IC and instead should be referred to the employer to address, as per its general grievance-redressal mechanisms.

If an investigator finds other issues that are outside the scope of the terms of reference, these should not be ignored but equally should not be included as part of the investigation, as they are beyond the remit of the investigation that was established at the beginning. An investigator should identify the other matters that may require further action and report these to the employer separately so as not to conflate issues.

If further misconduct (unrelated to the investigation matters) is revealed, the company may start a new investigation.

Furthermore, even if the employee has a contractual duty to provide the information requested by the employer, one limit to this principle could be, for example, self-incriminating statements of the employee acting as a witness. However, if an employee nevertheless makes self-incriminating statements, the company could decide to start a new investigation.

Even if a matter arises that is not subject to the investigation, it can be used as an opportunity to conduct another investigation.

If the investigation yields unrelated matters, the employer will need to decide whether such matters should be followed up in the same or a separate investigation. If such matters include new allegations against an employee that are already involved in the investigation, the employer should, before interviewing (or at the start of such an interview) inform the implicated employees of the relevant new allegations that are the subject of the investigation.

Where unrelated matters are revealed as a result of the investigation, the body investigating the employee is expected to inform the employee of the new matters and give him adequate time to respond.

However, there are exceptional cases where a crime is revealed during an investigation. In such instances, the employer is required to report its findings to the police for investigation and possible prosecution.

If unrelated matters are revealed because of a workplace investigation, the employer may look into the new matter and then determine whether there are sufficient grounds to proceed with an administrative disciplinary process for the new matter.

It depends on the circumstances of the revealed issue and the employer’s compliance culture. Normally, if a new issue is revealed during the investigation, it should be analysed and investigated if appropriate.

If new facts arise as a result of the investigation and they are relevant, the employer may include them in the accusation. If, however, the new facts are revealed after the accusation has been served, the employer will have to prepare an addendum to the initial accusation and the employee will be able to use the same defence rights against that addendum.

If unrelated matters that require further investigation are revealed as a result of the investigation, the employer should take the necessary steps to investigate these matters, where relevant, under the employer’s grievance reporting, investigation and disciplinary processes. This should be done separately and independently from the existing investigation. Please note that section 424 of the Criminal Procedure Code imposes a legal duty on any person who is aware that another has committed certain specified offences to "immediately" report the matter to the police, "in the absence of reasonable excuse" not to do so. Failure to comply with this requirement is punishable with imprisonment for up to six months, and/or a fine.

Sometimes, the company discovers other potential misconduct in addition to the specific allegations that trigger a workplace investigation. No law limits the scope of the company’s investigation to the allegations that were initially raised.

The issue with revealing unrelated matters to the investigation is that it may jeopardise the entire enquiry. If the unrelated matters are private or the disclosure is construed as a breach of employees’ fundamental rights, then the materials gathered during the investigation could be considered to be unlawfully obtained and would not be admitted as evidence in court.

Moreover, the employee could seek damages and a fine could be imposed on the company for breaching its employee’s rights.

Finally, if unrelated matters are revealed, it could be a clear sign that the company has failed to conduct a diligent investigation and use the least intrusive means available to it (see question 1). One of the reasons to minimise the number of employees conducting the investigation (see question 4) is to reduce damages if matters unrelated to the investigation are revealed.

According to the GDPR, personal data can only be processed for specified, explicit and legitimate purposes and may not be further processed in a manner that is incompatible with those purposes. This imposes restrictions on the use of material from previous investigations in new investigations when the material was collected for other purposes. It is, therefore, necessary to ensure whether the new matter relates to the investigation and falls within the purpose of the investigation. If the new matter is unrelated to the investigation and does not fall within the purpose of the investigation, the identified information may not be processed under the GDPR.

Except for what is stated above, no regulation limits how the employer can use information regarding unrelated matters. Unrelated matters may be a myriad of different things, and could in some instances just be discarded, while in other situations the information may invoke a responsibility to act for the employer (eg, if the unrelated matters concern work environment issues or other severe misconduct by an employee who is not the target of the investigation). Furthermore, the employer may always use any revealed information (unrelated or not) as evidence in a court of law, since the principle of free examination of evidence applies.

There are no regulations in this regard in the Swiss employment law framework. However, in criminal proceedings, the rules regarding accidental findings apply (eg, article 243, Swiss Criminal Procedure Code for searches and examinations or article 278, Swiss Criminal Procedure Code for surveillance of post and telecommunications). In principle, accidental findings are usable, with the caveat of general prohibitions on the use of evidence.

Subject to the grievance protocol in place, any matter that emerges during the investigation should be handled separately as a fresh report of potential misconduct that needs further investigation.

If an unrelated matter is revealed during the investigation, an independent assessment needs to be made as to whether this new matter requires to be included in the same internal investigation, or a separate/new one should be commenced.  

These should typically be disregarded by the investigator. From a data protection perspective, the ICO’s position is that other information collected during an investigation should be disregarded and, where feasible, deleted unless it reveals information that no reasonable employer could be expected to ignore. In those circumstances, the employer should arrange for an independent third party to determine whether a separate investigation into unrelated matters is needed.

Where new issues or claims arise during an ongoing workplace investigation, the investigator should discuss with in-house counsel whether the new issues or claims should be separately investigated and if so, by whom, or if instead those new issues or claims are sufficiently related to the current review that they can be investigated in parallel and incorporated into the ongoing fact-gathering process. 

If unrelated matters are revealed during the investigation, the employer should consider whether an investigation is needed. If necessary, the employer should decide whether it is appropriate to incorporate the new matters into the scope of the existing investigation by expanding the terms of reference. However, such action may not be appropriate if different individuals are involved or the inclusion of a new unrelated matter would unduly complicate or delay the progress of the existing investigation. If that is the case, the employer should investigate that matter separately.

Also, as detailed in article 19 of the 2015 Criminal Code of Vietnam, there is a legal duty on any person who is aware that a certain violation is being committed or has been committed to report it to the police unless otherwise provided for under law. Failure to comply with this requirement may lead to criminal liability for the offender.