Workplace Investigations

Contributing Editors


Workplace investigations are growing in number, size and complexity. Employers are under greater scrutiny as of the importance of ESG rises. Regulated industries such as finance, healthcare and legal face additional hurdles, but public scrutiny of businesses and how they treat their people across the board has never been higher. Conducting a fair and thorough workplace investigation is therefore critical to the optimal operation, governance and legal exposure of every business.

IEL’s Guide to Workplace Investigations examines key issues that organisations need to consider as they initiate, conduct and conclude investigations in 29 major jurisdictions around the world.  

Learn more about the response taken in specific countries or build your own report to compare approaches taken around the world.

Choose countries

 

Choose questions

Choose the questions you would like answering, or choose all for the full picture.

22. What must the employee under investigation be told about the outcome of an investigation?

22. What must the employee under investigation be told about the outcome of an investigation?

Flag / Icon

Australia

  • at People + Culture Strategies
  • at People + Culture Strategies
  • at People + Culture Strategies

Managing the outcome of the investigation is an important part of the process. The respondent must be informed of the outcome of the investigation as soon as possible after the investigation is completed and the decision-maker has decided how to proceed.

The investigator must decide whether the claims have been substantiated on the balance of probabilities and the decision-maker must decide what disciplinary action, if any, will be taken. Any disciplinary action should be proportionate to the seriousness of the misconduct. Disciplinary action could include a warning, counselling, monitoring of behaviour or termination of employment.

Ideally, the outcome of the investigation should be communicated to the respondent and complainant in writing, setting out the allegations that have been substantiated, unsubstantiated or whether there is insufficient evidence to make a finding.

Last updated on 15/09/2022

Flag / Icon

Austria

  • at GERLACH
  • at GERLACH Rechtsanwälte

The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.

Last updated on 29/09/2023

Flag / Icon

Belgium

  • at Van Olmen & Wynant

It is highly recommended to inform the employee under investigation of the outcome. If disciplinary measures are imposed upon him or her, the legal procedure must be followed and the sanction must be imposed or communicated the day after the employer or his delegate has established the wrongdoing of the employee.

Last updated on 15/09/2022

Flag / Icon

Brazil

  • at CGM
  • at CGM

There is no legal obligation to inform them of the outcome. Any obligation would come from the company's policies.

Last updated on 14/09/2023

Flag / Icon

China

  • at Jingtian & Gongcheng
  • at Jingtian & Gongcheng
  • at Jingtian & Gongcheng
  • at Jingtian & Gongcheng

There is no explicit stipulation in the laws and regulations in the PRC on this issue. In practice, given the confidentiality of any investigation into a violation, the employer usually will not disclose the investigation result or submit the investigation report to the investigated employee, unless it is explicitly provided in its rules and regulations that the employer is obliged to inform the employee of the investigation result. However, according to the Employment Contract Law of the PRC and the opinions of the mainstream arbitration tribunals and courts, if an employer decides to take disciplinary action against an employee (in particular, termination of employment contract) according to the investigation result, it is generally required to inform the employee of the investigation result. In other words, the employer generally needs to inform the employee of the specific facts based on which the disciplinary action is taken. Failure to do so may result in the generalization of serious violation of the employer's rules and regulations and lead the arbitration tribunals and courts to regard the termination as illegal.

Last updated on 29/11/2023

Flag / Icon
Finland

Finland

  • at Roschier
  • at Roschier

The employer's conclusions from the investigation.

Last updated on 15/09/2022

Flag / Icon

France

  • at Bredin Prat
  • at Bredin Prat

The employee under investigation, like the other employees interviewed and the whistleblower, must be informed that the investigation has been completed. However, there is no obligation to provide them with the report and, for reasons of confidentiality, it is very often best not to do so.

Last updated on 15/09/2022

Flag / Icon

Germany

  • at Hengeler Mueller
  • at Hengeler Mueller
  • at Hengeler Mueller

The employer has no general obligation to proactively inform the employee about the outcome of an investigation. However, if personal data was collected, the employee has the right to request certain information: the purpose of the data collection, type of data, recipients of the data, the planned storage period of the data, his right to have the data corrected or deleted, his right to complain to a supervisory authority, and information on the source of the data.

Last updated on 15/09/2022

Flag / Icon

Greece

  • at Karatzas & Partners
  • at Karatzas & Partners
  • at Karatzas & Partners
  • at Karatzas & Partners

The employer has an obligation, towards the alleged victim but also the alleged perpetrator, to carefully investigate the report and any existing evidence before making decisions. The employee under investigation must be informed about the outcome of the procedure and any measures adopted in this regard. The respective decision must have due justification.

Last updated on 03/04/2023

Flag / Icon

Hong Kong

  • at Slaughter and May
  • at Slaughter and May
  • at Slaughter and May

The employer is generally not obliged under Hong Kong law to inform the employee under investigation of the outcome of the investigation absent any express obligation under the employment contract, even where the investigation has led to a decision to terminate the employee. However, to avoid any unnecessary claim of unlawful dismissal or dismissal without a valid reason, the employer should inform the employee of the reason for his or her termination, even if the investigation results may not be shared in full with the employee.

Last updated on 15/09/2022

Flag / Icon

India

  • at Trilegal
  • at Trilegal
  • at Trilegal

Concerning SH cases, the IC must supply a copy of the preliminary findings to the complainant and accused (where both are employees of the organisation) to allow them to make their representations before final findings and recommendations are shared. The IC's final report with recommendations for disciplinary action, if any, must also be shared with both parties.

For other forms of misconduct, it is not mandatory to share the details of the fact-finding investigation itself. However, if disciplinary action is contemplated and a disciplinary inquiry is necessary against the employee under investigation, the relevant details of the evidence gathered against the individual will need to be shared with him or her as part of the charge sheet. On the other hand, where no disciplinary inquiry is being conducted after an investigation (eg, if there is no merit in the allegations), the employer may choose to not share the investigative findings and only inform the individual that no further action is being taken.

Last updated on 15/09/2022

Flag / Icon
Ireland

Ireland

  • at Ogier
  • at Ogier

The employee whose actions are the subject of the investigation must be advised of the outcome of the investigation. They are usually provided with a copy of the investigator's report.

Last updated on 11/10/2023

Flag / Icon

Italy

  • at BonelliErede
  • at BonelliErede

If the outcome of the investigation does not lead to a disciplinary procedure, there is no specific obligation for the employer regarding this.

However, to a certain extent, under privacy laws, the employee may exercise his or her right of access to information strictly related to him or her, arising from the investigation (which is, however, a wider privacy issue to be assessed under the GDPR.)

Last updated on 15/09/2022

Flag / Icon

Japan

  • at Mori Hamada & Matsumoto

Although there is no legal obligation to report the results of the investigation to the employee, when taking disciplinary action it is generally necessary, from a due process point of view, to explain the facts of the disciplinary action and the results of the investigation, and to allow the employee to explain him or herself. Particularly in the case of serious disciplinary actions such as dismissal, failure to provide an adequate opportunity for an explanation is a possible ground for denying the validity of the disciplinary action.

Last updated on 15/09/2022

Flag / Icon

Netherlands

  • at De Brauw Blackstone Westbroek
  • at De Brauw Blackstone Westbroek
  • at De Brauw Blackstone Westbroek

There are no statutory requirements as to employee feedback in internal investigations. The principle of due care requires an employer to typically confront implicated persons with any allegations that concern them; and provide a draft report on their interviews for feedback, if the investigative findings will form the basis of disciplinary measures. It is good practice to also inform an employee under investigation once the investigation is closed.

Last updated on 27/11/2023

Flag / Icon
Nigeria

Nigeria

  • at Bloomfield LP

The employee under investigation must be informed of the outcome of the investigation as soon as a decision is reached.

Last updated on 15/09/2022

Flag / Icon

Philippines

  • at Villaraza & Angangco

The employee under investigation should be informed of the results of the investigation and the basis of the conclusion. It should be included in the first notice or the notice to explain.

Last updated on 26/01/2023

Flag / Icon

Poland

  • at WKB Lawyers
  • at WKB Lawyers
  • at WKB Lawyers

He or she must be given feedback about follow-up actions that were undertaken, or reasons why the follow-up actions were not undertaken.

In any case – the feedback must be adapted to the circumstances of each case so as not to reveal too many details or infringe the other interested parties’ rights.

Last updated on 20/04/2023

Flag / Icon

Portugal

  • at Uría Menéndez - Proença de Carvalho

If, further to the conclusion of the investigation, the employer concludes that there are no grounds to enforce disciplinary action against the employee, the employee does not even have to know that they were the subject of an investigation.

However, if the employer does decide to accuse the employee, the employee will be entitled to all the sources of information obtained during the preliminary investigation.

Last updated on 15/09/2022

Flag / Icon
Singapore

Singapore

  • at Rajah & Tann Singapore
  • at Rajah & Tann Singapore
  • at Rajah & Tann

The employee under investigation should be told of the findings that have been made against the employee, the disciplinary action (if any) that will be taken against the employee and any avenue or timeline for the employee to appeal the outcome of the investigation.

Last updated on 15/09/2022

Flag / Icon

South Korea

  • at Kim & Chang
  • at Kim & Chang
  • at Kim & Chang
  • at Kim & Chang

There is no legal obligation for a company to disclose the outcome of an investigation to the employee who was subject to it. Having said that, if the company wishes to take disciplinary action against the employee based on the outcome of an investigation, it is required to disclose sufficient detail on the employee’s wrongdoing that is subject to disciplinary action. This information should be provided to the employee before the disciplinary action committee (DAC) hearing to provide the employee with sufficient time to present and defend his or her position during the DAC hearing.

Last updated on 15/09/2022

Flag / Icon

Spain

  • at Uría Menéndez
  • at Uría Menéndez

Employees under investigation are not entitled to be informed about the investigation or its outcome. As set out above (see question 11), an employee would have a right to be informed about the outcome of an investigation if the employer takes any disciplinary actions as a consequence of the enquiry.

The reason to disclose the details of the investigation is to allow the employee to adequately defend him or herself from the alleged breaches.

Last updated on 15/09/2022

Flag / Icon

Sweden

  • at Mannheimer Swartling
  • at Mannheimer Swartling
  • at Mannheimer Swartling

This depends on the outcome of the investigation and the applicable rules.

If the outcome of the investigation leads to termination, the employer will have to disclose some information regarding the reason for termination. If the employee questions the termination, the employer may have to disclose more information in a subsequent dispute. If the outcome of the investigation leads to less invasive measures, such as a warning, there are less extensive requirements to provide information.

If the Swedish Whistleblowing Act applies, the duty of confidentiality and the restrictions on access to and disclosure of personal data must be considered (see question 10). If the investigation is based on the rules in the Swedish Discrimination Act, there are also feedback requirements concerning the involved parties.

Last updated on 15/09/2022

Flag / Icon

Switzerland

  • at Bär & Karrer
  • at Bär & Karrer

Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.

The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]

 

[1] Arbeitsgericht Zürich, Entscheide 2013 No. 16; Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 393 et seq.

[2] Roger Rudolph, Interne Untersuchungen: Spannungsfelder aus arbeitsrechtlicher Sicht, SJZ 114/2018, p. 394.

Last updated on 15/09/2022

Flag / Icon

Thailand

  • at Chandler MHM
  • at Chandler MHM

There is no mandatory information on the outcome of an investigation that must be disclosed to an employee. However, disclosure of the outcome should, at a minimum, include whether an employee did or did not commit a violation. In addition, an employee who has committed a violation should be informed of any disciplinary action, and the grounds for such a decision (such as a violation of the company’s work rules). This enables the employee under investigation to appeal the outcome if it is applicable under the work rules or whistleblowing policy.

Last updated on 15/09/2022

Flag / Icon

Turkey

  • at Paksoy
  • at Paksoy
  • at Paksoy
  • at Paksoy

In general, the employee under investigation should be adequately informed about the allegations and findings to be able to defend him or herself. If no legal action will be taken against the employee under investigation as a result of the investigation, the employee may be notified regarding the findings and the outcome of the investigation. If the employee will be subject to a legal or administrative action (ie, warning, reprimand, or termination of employment), the formal requirements stemming from the Labour Law will need to be followed.   

Last updated on 15/09/2022

Flag / Icon

United Kingdom

  • at Slaughter and May
  • at Slaughter and May

The employee would usually get a copy of the investigation report (which would typically have the relevant evidence considered by the investigator annexed to the report, unless the report is privileged). It is not usual practice to allow the employee to make representations on the report before it is finalised.

The report will set out what facts the investigator was able to establish by reference to the available evidence. The investigator’s role is to gather and consider evidence about what did or did not happen, so the employer can understand if there is a case to answer. This is distinct from determining culpability, which is something for the manager conducting the disciplinary hearing (not the investigator) to determine, in addition to deciding any disciplinary sanction.

Last updated on 15/09/2022

Flag / Icon

United States

  • at Cravath, Swaine & Moore
  • at Cravath, Swaine & Moore
  • at Cravath, Swaine & Moore

In general, it is often helpful to provide the complainant and subject of the complaint with a short written communication or verbal communication at the end of an investigation to advise that the investigation has concluded. Where the allegations are unsubstantiated, the communication should convey that no evidence of misconduct or unlawful conduct was found. Where the allegations are substantiated, the results and proposed communication should be reviewed with the legal function, together with potential disciplinary and remedial action, before it is communicated to the complainant and the subject of the complaint.

Where the misconduct alleged poses a high risk to the company from a reputational, operational or legal perspective, and especially where an investigation is conducted by outside counsel, outside counsel should determine, in consultation with the relevant individuals at the company, for example the general counsel, how and with whom to share investigation results and if and how to communicate the outcome to the complainant and the subject of the complaint. This is the case regardless of whether the allegations are found to be substantiated or unsubstantiated.

Last updated on 15/09/2022

Flag / Icon

Vietnam

  • at Le & Tran Law Corporation
  • at Le & Tran Law Corporation

It is recommended that the employer informs the employee under investigation of the outcome and provides information on a need-to-know basis. Consequently, the employer has the discretion to proceed with any labour disciplinary procedure or actions against the employee based on the outcome of the investigation.

Last updated on 25/09/2023

26. How long should the outcome of the investigation remain on the employee’s record?

26. How long should the outcome of the investigation remain on the employee’s record?

Flag / Icon

Australia

  • at People + Culture Strategies
  • at People + Culture Strategies
  • at People + Culture Strategies

There are legal requirements related to the time you must keep certain employee records in Australia, such as pay slips and time sheets. However, there are no laws concerning disciplinary records.

Employers can rely on previous misconduct to justify an employee’s termination of employment where it can be shown it is part of a course of conduct. Accordingly, if complaints have been substantiated, and disciplinary action has been taken, these records should be maintained. However, if a significant period has elapsed since the misconduct, an employer should carefully consider whether it is appropriate to rely on this past behaviour to justify future disciplinary action for similar conduct.

Last updated on 15/09/2022

Flag / Icon

Austria

  • at GERLACH
  • at GERLACH Rechtsanwälte

Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.

Last updated on 29/09/2023

Flag / Icon

Belgium

  • at Van Olmen & Wynant

According to the GDPR, personal data should only be stored for a proportionate amount of time. Usually, this means that it can be stored as long as it is relevant for the employment contract, and even afterwards, if there is a risk of legal proceedings (ie, regarding the dismissal of the employee).

Last updated on 15/09/2022

Flag / Icon

Brazil

  • at CGM
  • at CGM

The existence of the investigation should be kept on file for at least five years from the date of its conclusion. All information related to the investigation should be kept on file for the same period, but not on the employee’s record, to avoid the risk of accidental access by unauthorised individuals.

Last updated on 14/09/2023

Flag / Icon

China

  • at Jingtian & Gongcheng
  • at Jingtian & Gongcheng
  • at Jingtian & Gongcheng
  • at Jingtian & Gongcheng

The relevant laws and regulations in the PRC have not clarified the retention period of the investigation findings. According to Article 19 of the Personal Information Protection Law of the PRC, unless otherwise required by laws or administrative regulations, the retention period of personal information shall be the shortest period necessary to achieve the purpose of handling the information. Since the employee's personal information is very likely to be involved in the investigation findings, such report should be retained for the shortest period necessary to achieve the purpose of handling the information. In general, once the investigation is completed, the purpose of the internal investigation has been achieved or it is no longer necessary to achieve the purpose, and the employer may, in accordance with Article 22 of the Administrative Regulations of the PRC on Network Data Security (Draft for Comments), delete or anonymize the personal information within fifteen (15) working days. If it is technically difficult to delete the personal information, or it is difficult to do so within fifteen (15) working days due to business complexity or other reasons, the employer shall not conduct any processing other than storing the personal information and adopting necessary security measures, and shall give reasonable explanations to the employee.

Last updated on 29/11/2023

Flag / Icon
Finland

Finland

  • at Roschier
  • at Roschier

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

Last updated on 15/09/2022

Flag / Icon

France

  • at Bredin Prat
  • at Bredin Prat

If the outcome of the internal investigation has led to the sanctioning of an employee, this sanction may no longer be invoked to support a new sanction after three years. Moreover, under the GDPR principles, the duration of retention must be proportional to the use of the data. Therefore, the data must be retained only for a period that is “strictly necessary and proportionate”. If the employer wants to keep information about the investigation in the longer term, it is possible to archive the employee’s record even though the employer will no longer be able to use it against the employee after three years.

Last updated on 15/09/2022

Flag / Icon

Germany

  • at Hengeler Mueller
  • at Hengeler Mueller
  • at Hengeler Mueller

If there is no special statutory storage period (which is the case for investigative reports and findings), personal data may only be stored for as long as is necessary for the purposes for which they are collected. As soon as the data is no longer required, it must be deleted. In connection with workplace investigations, the question arises as to how this obligation to delete personal data relates to the company's corporate interests. From the company's perspective, there may well be legitimate interests that speak in favour of retaining existing data for as long as possible. Under the data protection regulations of the DSGVO and the BDSG, data can be stored for as long as it is required for the assertion, exercise or defence of (civil) legal claims. This means that the data can, in any event, be saved at least as long as any measures related to the workplace investigation have not yet been completed and any legal disputes have not yet been concluded.

Last updated on 15/09/2022

Flag / Icon

Greece

  • at Karatzas & Partners
  • at Karatzas & Partners
  • at Karatzas & Partners
  • at Karatzas & Partners

Under the General Data Protection Regulation, employees’ personal details and information must be kept in the business records for as long as is necessary for the purposes of the employment relationship. Otherwise, stored data must be deleted. However, under L.4990/2022[14], reports remain in the relevant record for a reasonable and necessary time, and in any case until the completion of investigations or proceedings before the courts that have been initiated as a consequence of a complaint against the employee under investigation, the complainant or any third parties.

 

[14] L.4990/2022 art.16 par.1

Last updated on 03/04/2023

Flag / Icon

Hong Kong

  • at Slaughter and May
  • at Slaughter and May
  • at Slaughter and May

There is no legal requirement in Hong Kong on this. However, since the investigation records will likely contain personal data, employers should be mindful of the requirement under the PDPO that personal data should not be kept for longer than necessary.[1]

According to the Code of Practice on Human Resources Management published by the Privacy Commissioner for Personal Data, generally, employment data about an employee can be kept for the entire duration of his or her employment, plus a recommended period of no more than seven years after the employee leaves employment unless there is a subsisting reason that justifies a longer retention period. A longer retention period may be justified where there is ongoing litigation or a parallel investigation. Even where it is deemed necessary to retain the outcome of the investigation concerning a departed employee, the employer should ensure that other personal data on the employee’s record (that is unrelated to the purpose of retention) are erased after the expiry of the recommended retention period.

 

[1] DPP2 (in Sch. 1) and PDPO section 26.

Last updated on 15/09/2022

Flag / Icon

India

  • at Trilegal
  • at Trilegal
  • at Trilegal

There is no statutory guidance on this. It is common for employers to retain details of disciplinary proceedings on an employee's record for the entire duration of their employment.

It is also advisable to retain the details of any investigations or disciplinary proceedings for at least three years after an individual has been dismissed on account of such proceedings, as this is the general limitation period for raising claims of unfair dismissal. In labour matters, courts in India often allow delays in filing suit after the limitation period, meaning organisations sometimes make a practical call to retain details of investigations and disciplinary proceedings for longer.

Last updated on 15/09/2022

Flag / Icon
Ireland

Ireland

  • at Ogier
  • at Ogier

Irrespective of the outcome of the investigation, the fact that an employee was subject to an investigation is not the key issue. The key concern is whether any further action was taken as a result of the investigation. If a disciplinary process ensued, then it is the outcome of that disciplinary record and any subsequent appeal that would or would not be noted on an employee's record. If a disciplinary sanction were imposed then the length of time the sanction remains on the employee's record would depend on what is specified in the disciplinary policy.

Last updated on 11/10/2023

Flag / Icon

Italy

  • at BonelliErede
  • at BonelliErede

The employer would normally keep the outcomes of the investigation for the entire duration of the employment relationship with the involved employee.

After the termination of the employment relationship, it appears reasonable to conclude that the employer would be entitled to retain this information for the time necessary to exercise its defence rights in litigation (taking into account that 10 years is the statute of limitations for contractual liability). Further requirements or restrictions under general privacy laws (and particularly the GDPR) should also be checked.

According to Art. 14 WB Decree, internal and external whistleblowing reports (including related documents) must be kept for as long as necessary for report processing, but no more than five years from the date of transmission of the procedure's final outcome.

Last updated on 10/01/2024

Flag / Icon

Japan

  • at Mori Hamada & Matsumoto

Records related to responses to whistleblowing must be kept for an appropriate period, but there is no legal stipulation on the retention period. Each entity is required to set an appropriate period after considering the need for evaluation and inspection, and the handling of individual cases. There is no legally stipulated retention period for other investigation results.

Last updated on 15/09/2022

Flag / Icon

Netherlands

  • at De Brauw Blackstone Westbroek
  • at De Brauw Blackstone Westbroek
  • at De Brauw Blackstone Westbroek

The outcomes are usually kept in the records until termination of the employment agreement and only deleted when personal records are deleted.

Last updated on 15/09/2022

Flag / Icon
Nigeria

Nigeria

  • at Bloomfield LP

The law does not provide for the time the outcome of the investigation may remain on the employee’s record. However, this will depend on the employer’s record-retention policies, which must comply with applicable data protection laws.

Last updated on 15/09/2022

Flag / Icon

Philippines

  • at Villaraza & Angangco

The outcome of the investigation should only remain on the employee’s record for as long as is necessary, but shall not be less than three years as this is the record-keeping requirement under the Philippine Labor Code. If circumstances deem that such a report ceases to have any purpose whatsoever, it should be struck out of the employee’s record.

Last updated on 26/01/2023

Flag / Icon

Poland

  • at WKB Lawyers
  • at WKB Lawyers
  • at WKB Lawyers

Neither Polish law nor the Draft Law specifically provide for a mandatory period during which the outcome of the investigation should be kept on the employee’s record.

At the same time, the Draft Law indicates that the register of whistleblowing reports, which should also contain information about follow-up actions undertaken as a result of the report, should be kept for 15 months starting from the end of the calendar year in which the follow-up actions have been completed, or the proceedings initiated by those actions have been terminated.

Also, while determining how long the outcome of an internal investigation should be kept, additional legal considerations can be taken into account, especially data privacy.

The GDPR does not specify precise storage time for personal data. The employer must assess what will be an appropriate time for storage of the data, taking into consideration the necessity of keeping personal data concerning the purpose of the processing in question. Employees' personal data should be kept for the period necessary for the performance of the employment relationship and may be kept for a period appropriate for the statute of limitations for claims and criminal deeds. A longer retention period may result from applicable laws. Following the Regulation of the Minister of Family, Labour and Social Policy on employee documentation, the employer may keep a copy of the notice of punishment and other documents related to the employee’s incurring of disciplinary responsibility in the employee record.

There are different retention periods for the data contained in employee files:

  • 10 years if the employee was hired on or after 1 January 2019;
  •  if the employment relationship began between 1 January 1999 and 1 January 2019, the retention period is 50 years, but may be reduced to 10 years if the employer provides the Polish Social Insurance Institution with certain mandatory information; and
  •  for 50 years if the employee was hired before 1 January 1999. It does not matter whether the person is still working or not.
Last updated on 20/04/2023

Flag / Icon

Portugal

  • at Uría Menéndez - Proença de Carvalho

There are no specific rules in the Portuguese Labour Code on this matter.

However, article 332 of the PLC states that the employer should keep an updated record of disciplinary sanctions, so the competent authorities can easily verify compliance with applicable provisions. Accordingly, it is advisable to maintain a record of disciplinary sanctions during the entire employment relationship.

Also, please note that some collective bargaining agreements state that the disciplinary register must be deleted from the employee’s record periodically.

Last updated on 15/09/2022

Flag / Icon
Singapore

Singapore

  • at Rajah & Tann Singapore
  • at Rajah & Tann Singapore
  • at Rajah & Tann

This depends on the company’s internal disciplinary policy and the severity of the offence. For instance, a written warning issued against an employee for minor misconduct is usually kept in the respondent employee’s file for one year and if the employee does not commit any further breaches during this time, the written warning will be expunged. However, if there is a finding of serious misconduct, particularly if such a determination results in the dismissal of the employee, these records are generally kept in the employee’s file for the duration of time such records are statutorily required to be maintained.  

Last updated on 15/09/2022

Flag / Icon

South Korea

  • at Kim & Chang
  • at Kim & Chang
  • at Kim & Chang
  • at Kim & Chang

There is no legal requirement on how long the records of the investigation (eg disciplinary action) should be maintained by the company. Many companies maintain a record of disciplinary action throughout the employment period.

Last updated on 15/09/2022

Flag / Icon

Spain

  • at Uría Menéndez
  • at Uría Menéndez

The outcome of the investigation will contain personal data of the affected employee. For this reason, this information should only be kept for as long as a legal obligation or liability in connection with the information could arise for the company. Since the general statute of limitations for employment liability is one year, this is a good guideline.

In addition to the above, two specific rules apply:

  • once the information becomes irrelevant for the purpose for which it was obtained and processed, the information should no longer be stored on the employee’s record or elsewhere; and
  • the employees’ information (including those of the reporter and the affected employees) should only be stored in whistleblower systems during the time that is necessary to decide on whether the facts need to be investigated or not and, in any case, for a maximum period of three months.
Last updated on 15/09/2022

Flag / Icon

Sweden

  • at Mannheimer Swartling
  • at Mannheimer Swartling
  • at Mannheimer Swartling

Under the GDPR personal data may not, according to the general principle on storage limitation, be retained for longer than is necessary for the purposes for which the personal data are processed. The GDPR does not stipulate a generally applicable storage limitation period. Such a regulation is, on the other hand, included in the Swedish Whistleblowing Act. If the Swedish Whistleblowing Act applies, the outcome of the investigation and all personal data should be retained for as long as necessary, but not for longer than two years after the investigation has been closed.

Last updated on 15/09/2022

Flag / Icon

Switzerland

  • at Bär & Karrer
  • at Bär & Karrer

From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.

From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]

 

[1] Wolfgang Portmann/Isabelle Wildhaber, Schweizerisches Arbeitsrecht, 4. Edition, Zurich/St. Gallen 2020, N 473.

Last updated on 15/09/2022

Flag / Icon

Thailand

  • at Chandler MHM
  • at Chandler MHM

There is no period required by law for keeping the outcome of the investigation on the employee’s record. However, if termination of employment is the outcome of the investigation, an employer should keep details of the investigation for at least 10 years, in line with the prescribed period for an employee to file an unfair dismissal claim against an employer. An employer may use the details of an investigation to defend such a claim. For other disciplinary action, the retention of investigation details on the employee’s record is at the employer’s discretion.

Last updated on 15/09/2022

Flag / Icon

Turkey

  • at Paksoy
  • at Paksoy
  • at Paksoy
  • at Paksoy

There is no provision in the legislation setting forth a specific duration for keeping the outcome of the investigation findings in personnel files. However, based on general principles, the outcome of the investigation can remain on the employee’s personnel files as long as the employer has a lawful interest in such processing without unnecessarily harming the privacy rights of the employee.

Last updated on 15/09/2022

Flag / Icon

United Kingdom

  • at Slaughter and May
  • at Slaughter and May

The investigation outcome may not need to be noted on the accused employee’s record at all. Usually only the outcome of any subsequent disciplinary or grievance process would be noted, rather than the prior investigation.

The employer should keep the investigation report for as long as it remains relevant. This would usually be no longer than six years, unless regulatory obligations dictate otherwise. The report along with all documentation and witness statements gathered during the investigation should be retained securely and confidentially but for no longer than is absolutely necessary under the requirements of the DPA 2018 and the employer's data protection policies and procedures. There may be additional retention requirements in a regulated context; the position for each particular business and employee should be checked.

Last updated on 15/09/2022

Flag / Icon

United States

  • at Cravath, Swaine & Moore
  • at Cravath, Swaine & Moore
  • at Cravath, Swaine & Moore

There is no requirement for the results of a workplace investigation to remain on an employee’s record for any specific period. It is often helpful, however, for information relating to the outcome of such an investigation (regardless of whether the allegations are substantiated) to be accessible to the human resources or legal functions such that during the initial complaint intake process described above, any prior complaints and investigations relating to the same individual or group of individuals can be taken into account to identify any recurring issues or systemic violations.

Last updated on 15/09/2022

Flag / Icon

Vietnam

  • at Le & Tran Law Corporation
  • at Le & Tran Law Corporation

Vietnamese law does not provide for a period during which the outcome of the investigation should remain on the employee’s records and files. However, this will depend on the employer’s record-retention policies, which must comply with applicable data protection laws.

Last updated on 25/09/2023