Workplace Investigations

Employers should be conscious that the investigation may have an impact on the complainant, respondent and witnesses. Employers will need to consider how to support their employees. The level of support provided will often depend on the size of the organisation and programmes already in place.

Many employers have an Employee Assistance Programme and employees should be reminded about this programme if further support or assistance is required. An employer’s HR team may also be able to assist if an employee has concerns about the progress of an investigation.

There is no additional support for the employees concerned. However, the employer may offer support measures to the employees to ensure better cooperation. The choice of support measures is at the employer's discretion. For example, the employer could offer to bear lawyer’s fees, if the employee is cooperative. Such decisions must always be made on a case-by-case basis.

There are no other mandatory support measures. However, an employer is free to offer additional support, for example, by granting leave from work. If tensions at the workplace are high, it may be a good idea to ask the employee under investigation to take some leave. Some companies also provide certain legal, moral or even psychological support. If the complaint concerns sexual harassment, bullying or violence at work, the prevention adviser can also recommend that the employer take additional measures to support certain employees.

Furthermore, under the whistleblower rules, an external reporting authority can grant any support measure (eg, legal advice or financial, technical, psychological or media-related, social support).

For complaints due to sexual harassment, violence or bullying at work, and if the facts are serious, the prevention adviser should, during the examination of the request and before giving his or her opinion to the employer, propose protective measures to the employer. These measures are necessary to avoid serious damage to the complainant's health or a significant deterioration in the situation (for example, causing opposing parties to commit criminal offences). The final decision on taking these measures rests with the employer. This means that the employer does not necessarily have to take the measures proposed by the prevention adviser. They may take other measures that provide an equivalent level of protection for the employee.

It is highly recommended that investigation interviews are conducted in the interviewed person’s native language, even if the individual speaks the language used for business within the company, to ensure that there is no miscommunication or loss of accuracy in the determination of the facts. Also, speaking their native tongue reduces the discomfort of participating in the interview and potential extra work due to post-interview correction or confirmation. Depending on the scope of the investigation, the company can have attorneys who speak both the individual’s language and the company’s business language conducting interviews.

The relevant laws and regulations in the PRC have not made explicit requirements regarding the supports received by the employee involved in the investigation. In practice, the employer will usually prepare an internal time schedule before carrying out the investigation. Although the detailed time schedule will not be disclosed to the employee, the employer will usually inform the employee of each investigation in advance. In order to improve the transparency of the investigation, we recommend that employer should make positive and proper responses to employee who enquires about the progress of the investigation, so as to avoid employee's suspicion.

In addition, the Personal Information Protection Law of the PRC stipulates the rights of individuals in the process of personal information processing. In the scenario of internal investigation of an employer, the investigated party may, in accordance with such provisions, ask the employer for the right to review and even copy the personal information collected. Where the employee finds that the personal information collected by internal investigation is inaccurate or incomplete, he/she is entitled to request for correction or supplementation.

They can request assistance, for example, from an occupational health and safety representative, a shop steward or the occupational healthcare provider.

Apart from being informed of any facts and data concerning them being collected during the investigation, employees involved in the investigation do not have any specific rights. Some companies choose to use external firms specializing in psychosocial risk management, not only to conduct internal investigations, but also to provide additional psychological support for their employees, as part of the employer's safety obligation.

Generally, when employees may also use their devices for private purposes, the employer should ensure it allows its employees to tag their private data as "private". This tagging may facilitate the differentiation between business data (relevant for the investigation) and (non-usable) private data in the event of e-mail and electronic data screening.

In addition, the employer may, in appropriate cases, assure the employee that, if there is complete and truthful disclosure of facts to be clarified, the employer will refrain from imposing sanctions under labour and civil law (eg, a warning, termination of employment and the assertion of any claims for damages). In practice, assistance in finding a lawyer and the payment of legal fees is sometimes offered. However, such amnesty programmes are commonly only useful if there is a large number of cases that are particularly complex, poorly documented and difficult to resolve without amnesty offers.

According to L.4990/2022, any form of retaliation against complainants is prohibited, including threats of retaliation[9]. The complainants have the right to cost-free legal advice about possible acts of retaliation as well as cost-free provision of psychological support (to be defined by Ministerial Decisions)[10]. In terms of other types of support, the complainants are not in principle liable for the acquisition of information or releasing the information they reported under specific conditions (eg, the acquisition or access does not independently constitute a criminal offence, if they had reasonable grounds for believing that a report was necessary to reveal the violation)[11].

L. 4808/2021 states that the dismissal or termination of the legal relationship of employment and any other discrimination that constitutes an act of revenge or retaliation is prohibited and invalid[12].

It could be stressful for employees to be involved in a workplace investigation, whether as the victim, the subject of an investigation or a witness. More transparency in the process would help reduce stress. This could be achieved by providing the relevant employees with the timeline for different stages of the investigation and regular updates.

The employer may also consider providing mental health support to the employees concerned, for example in the form of counselling services or medical consultations. Where appropriate, the employer may also consider making reasonable adjustments to the employee’s workload and work schedule to facilitate his participation in the investigation.

Every workplace investigation is unique and varies based on the facts and circumstances of each case. As a result, the nature or type of support to be given to an employee would also vary from case to case. The bare minimum should be an assurance that there will be no retaliation against them for participating in the investigation. Other measures may include:

• changing the reporting relationship if the accused is the reporting manager or boss of the complainant;
• conducting investigations and interviews virtually or through videoconferencing in cases where parties or witnesses may not be able to physically appear before the investigating authorities; and
• allowing witnesses to be cross-examined virtually or through a written questionnaire where there is a fear of intimidation or retaliation from the parties.

The employer should be mindful that any interim measures or support it extends does not prejudice any particular party.

Under the SH Act, employers are legally required to assist the complainant if he or she chooses to file a complaint about workplace sexual harassment with the police under the Indian Penal Code or any other law that is in force. Further, the complainant can also seek interim protective measures from the IC, such as a request for transfer for the accused or the complainant or to grant leave to the complainant for three months. 

If an employee assistance programme is in place, an employee irrespective of their role in the investigation should be directed to the programme and encouraged to avail of the services. Investigations can become protracted and employees should be kept informed as to progress and what is required of them regarding participation. Regular checks of the health and well-being of employees should also be made. Even if such a programme is not in place, occasionally and depending on the issues giving rise to the investigation, it may be appropriate for the employer to cover the cost of counselling to a certain extent.

According to the law, there is no other specific kind of support other than what is mentioned above.  

There is no legally established assistance programme.

The employer can offer employees to be accompanied by another person, or by legal counsel, especially if the outcomes of the investigation could have consequences for their employment.

An employee being investigated has a right to be heard before a decision being made by the employer. Further, the body responsible for investigating the employee must be independent, so as not to be considered biased.

Since the conduct of an investigation is different from the administrative disciplinary process, management is given wide latitude for the exercise of the same.

After the employer determines that there are sufficient grounds to support the conduct of a formal administrative process, employees that are the subject of an administrative hearing should be allowed to present evidence to support his or her statements. Further, the employee may also provide affidavits of his or her co-employees consistent with his or her testimony.

They may be supported by, for example, allowing an alternative work environment (eg, remote work to avoid direct contact with people involved in the case). Depending on circumstances of the case, this solution will be offered to the subject or the victim. However, it is important that such actions do not infringe the rights of other people (eg, the subject itself).

Employees may also be sent on leave (by a unilateral decision of the employer – if possible under currently binding law provisions) or the parties to an employment contract may mutually agree to use such leave. Moreover, if they employer thinks it is necessary, they may assign the employee to another job for a period not exceeding three months (only if it does not result in a reduction in the employee’s remuneration and corresponds to the employee’s qualifications).

Also, depending on the employer’s decision – psychological or even legal assistance can be provided by the employer to a whistleblower or a victim.

Employees are usually assisted by lawyers when they are subject to an investigation or disciplinary procedure.

Employers may provide support, such as:

1. offering counselling for its employees to encourage open discussions and communication on any issues that they may be facing or clarify any questions they may have in respect of the investigation process;
2. reminding its employees of its zero-retaliation policy; and, if need be
3. making the necessary work arrangement to minimise potential interaction that would further aggravate the conflict or situation between the employees involved. 

Employers may also inform employees of the external resources available to them if they require any assistance in respect of the investigation provided by external parties such as TAFEP, the Singapore National Employers Federation, National Trade Union Congress, and Legal Aid Bureau.

There could be some instances where an employee involved in an investigation may be entitled to support from the company. To give an example, there have been some cases where a whistleblower claimed they suffered workplace harassment or their employer took retaliatory action (eg, wrongful transfer) and they sought damages or other relief.

For the reasons outlined in question 15, companies sometimes choose to voluntarily provide support to employees involved in the investigation (to ensure that evidence was lawfully obtained during the interview and is valid).

For investigated employees, one available support mechanism is for the company to cover the legal fees of an external counsel during the investigation or to offer to involve employee representatives. Reassurance may be provided to witnesses by guaranteeing, in writing, that their involvement in the investigation will be kept confidential and will not result in a detriment.

The employer is responsible for the work environment and must ensure that employees are not at risk of mental (or physical) illness due to an investigation. If an employee, in connection with an investigation, requires support or if risk of ill health is otherwise anticipated, the employer is obliged to assess the situation and provide said employee with sufficient support (eg, counselling or work adjustments).

The employer does not generally need to provide specific support for employees that are subject to an internal investigation. The employer may, however, allow concerned employees to be accompanied by a trusted third party such as family members or friends.[1] These third parties will need to sign separate non-disclosure agreements before being involved in the internal investigation.

In addition, a company may appoint a so-called lawyer of confidence who has been approved by the employer and is thus subject to professional secrecy. This lawyer will not be involved in the internal investigation but may look after the concerned employees and give them confidential advice as well as inform them about their rights and obligations arising from the employment relationship.[2]

The employees may then file a complaint with the labour inspection officer of the Labour Protection and Welfare Department to investigate the situation if they view that the conduct of the employer in the investigation violates the LPA. For example, if the employer issues a written order for suspending an employee for more than seven days. The labour inspection officer may issue an order requesting compliance, where failure to comply with such an order would result in a criminal penalty.

The employees involved in the investigation should be granted their personal needs (such as refreshments or access to the bathroom), as well as translation services or transportation, if needed. A breach of these rights or needs during the process may constitute a violation of the law and adversely affect the validity of the results to be obtained from the investigation.

The employer needs to consider the health and wellbeing of all staff involved in the investigation, since this can be a very stressful process. The employer and investigator can assist by ensuring that all parties are aware of what is expected of them. Timings are also important; having a clear and expeditious timetable and providing updates if the timetable slips will help. Regular catch-ups by managers can be used to monitor how employees are coping. They should be reminded about any resources to help support them, such as employee helplines or employee assistance programmes.

Where an employer has particular concerns about an employee’s health, a referral to occupational health can assist. The employer may also wish to consider whether employees should be given additional time off, or whether any other adjustments can be made to the investigation process. For particularly serious allegations, the employer may consider facilitating the provision of independent legal advice for the employee, or making a contribution towards legal fees.

The employer’s counsel should provide an Upjohn warning at the start of any interview, and delivery of the warning should be documented by a note-taker. An Upjohn warning is the notice an attorney (in-house or outside counsel) provides a company employee to inform the employee that the attorney represents only the company and not the employee individually.

It is quite stressful for an employee, whether as the victim, the subject of an investigation, or a witness, to be involved in a workplace investigation. Thus, transparency in the investigation process would alleviate the employees’ stress and anxiety. This could be achieved by providing involved and concerned employees with the timeline for different stages of the investigation and regular updates. Further, the employer can make necessary work arrangements to minimise potential interaction with other involved employees so that it would not further aggravate the conflict or situation, (eg, days off or temporary suspension of work).

There are legal requirements related to the time you must keep certain employee records in Australia, such as pay slips and time sheets. However, there are no laws concerning disciplinary records.

Employers can rely on previous misconduct to justify an employee’s termination of employment where it can be shown it is part of a course of conduct. Accordingly, if complaints have been substantiated, and disciplinary action has been taken, these records should be maintained. However, if a significant period has elapsed since the misconduct, an employer should carefully consider whether it is appropriate to rely on this past behaviour to justify future disciplinary action for similar conduct.

Data protection law requires that personal data should not be kept longer than necessary for the purpose it was collected. Once the purpose of the internal investigation is fulfilled and the data is no longer needed, it should be deleted or anonymised. Regulations regarding this matter may also be subject to WCAs or internal policies. In any case, it is advisable to keep the results for as long as they may be needed in possible subsequent administrative or judicial proceedings.

According to the GDPR, personal data should only be stored for a proportionate amount of time. Usually, this means that it can be stored as long as it is relevant for the employment contract, and even afterwards, if there is a risk of legal proceedings (ie, regarding the dismissal of the employee).

The existence of the investigation should be kept on file for at least five years from the date of its conclusion. All information related to the investigation should be kept on file for the same period, but not on the employee’s record, to avoid the risk of accidental access by unauthorised individuals.

The relevant laws and regulations in the PRC have not clarified the retention period of the investigation findings. According to Article 19 of the Personal Information Protection Law of the PRC, unless otherwise required by laws or administrative regulations, the retention period of personal information shall be the shortest period necessary to achieve the purpose of handling the information. Since the employee's personal information is very likely to be involved in the investigation findings, such report should be retained for the shortest period necessary to achieve the purpose of handling the information. In general, once the investigation is completed, the purpose of the internal investigation has been achieved or it is no longer necessary to achieve the purpose, and the employer may, in accordance with Article 22 of the Administrative Regulations of the PRC on Network Data Security (Draft for Comments), delete or anonymize the personal information within fifteen (15) working days. If it is technically difficult to delete the personal information, or it is difficult to do so within fifteen (15) working days due to business complexity or other reasons, the employer shall not conduct any processing other than storing the personal information and adopting necessary security measures, and shall give reasonable explanations to the employee.

Please see question 7. The outcome of the investigation involving personal data may be retained only for as long as is necessary considering the purposes of the processing. In general, the retention of investigation-related data may be necessary while the investigation is still ongoing and even then the requirements of data minimization and accuracy should be considered. The data concerning the outcome of an investigation should be registered to the employee's record merely to the extent necessary in light of the employment relationship or potential disciplinary measures. In this respect, the applicable retention time depends on labour law-related rights and limitations, considering eg, the applicable periods for filing a suit.

If the outcome of the internal investigation has led to the sanctioning of an employee, this sanction may no longer be invoked to support a new sanction after three years. Moreover, under the GDPR principles, the duration of retention must be proportional to the use of the data. Therefore, the data must be retained only for a period that is “strictly necessary and proportionate”. If the employer wants to keep information about the investigation in the longer term, it is possible to archive the employee’s record even though the employer will no longer be able to use it against the employee after three years.

If there is no special statutory storage period (which is the case for investigative reports and findings), personal data may only be stored for as long as is necessary for the purposes for which they are collected. As soon as the data is no longer required, it must be deleted. In connection with workplace investigations, the question arises as to how this obligation to delete personal data relates to the company's corporate interests. From the company's perspective, there may well be legitimate interests that speak in favour of retaining existing data for as long as possible. Under the data protection regulations of the DSGVO and the BDSG, data can be stored for as long as it is required for the assertion, exercise or defence of (civil) legal claims. This means that the data can, in any event, be saved at least as long as any measures related to the workplace investigation have not yet been completed and any legal disputes have not yet been concluded.

Under the General Data Protection Regulation, employees’ personal details and information must be kept in the business records for as long as is necessary for the purposes of the employment relationship. Otherwise, stored data must be deleted. However, under L.4990/2022[14], reports remain in the relevant record for a reasonable and necessary time, and in any case until the completion of investigations or proceedings before the courts that have been initiated as a consequence of a complaint against the employee under investigation, the complainant or any third parties.

There is no legal requirement in Hong Kong on this. However, since the investigation records will likely contain personal data, employers should be mindful of the requirement under the PDPO that personal data should not be kept for longer than necessary.[1]

According to the Code of Practice on Human Resources Management published by the Privacy Commissioner for Personal Data, generally, employment data about an employee can be kept for the entire duration of his or her employment, plus a recommended period of no more than seven years after the employee leaves employment unless there is a subsisting reason that justifies a longer retention period. A longer retention period may be justified where there is ongoing litigation or a parallel investigation. Even where it is deemed necessary to retain the outcome of the investigation concerning a departed employee, the employer should ensure that other personal data on the employee’s record (that is unrelated to the purpose of retention) are erased after the expiry of the recommended retention period.

There is no statutory guidance on this. It is common for employers to retain details of disciplinary proceedings on an employee's record for the entire duration of their employment.

It is also advisable to retain the details of any investigations or disciplinary proceedings for at least three years after an individual has been dismissed on account of such proceedings, as this is the general limitation period for raising claims of unfair dismissal. In labour matters, courts in India often allow delays in filing suit after the limitation period, meaning organisations sometimes make a practical call to retain details of investigations and disciplinary proceedings for longer.

Irrespective of the outcome of the investigation, the fact that an employee was subject to an investigation is not the key issue. The key concern is whether any further action was taken as a result of the investigation. If a disciplinary process ensued, then it is the outcome of that disciplinary record and any subsequent appeal that would or would not be noted on an employee's record. If a disciplinary sanction were imposed then the length of time the sanction remains on the employee's record would depend on what is specified in the disciplinary policy.

The employer would normally keep the outcomes of the investigation for the entire duration of the employment relationship with the involved employee.

After the termination of the employment relationship, it appears reasonable to conclude that the employer would be entitled to retain this information for the time necessary to exercise its defence rights in litigation (taking into account that 10 years is the statute of limitations for contractual liability). Further requirements or restrictions under general privacy laws (and particularly the GDPR) should also be checked.

According to Art. 14 WB Decree, internal and external whistleblowing reports (including related documents) must be kept for as long as necessary for report processing, but no more than five years from the date of transmission of the procedure's final outcome.

Records related to responses to whistleblowing must be kept for an appropriate period, but there is no legal stipulation on the retention period. Each entity is required to set an appropriate period after considering the need for evaluation and inspection, and the handling of individual cases. There is no legally stipulated retention period for other investigation results.

The outcomes are usually kept in the records until termination of the employment agreement and only deleted when personal records are deleted.

The law does not provide for the time the outcome of the investigation may remain on the employee’s record. However, this will depend on the employer’s record-retention policies, which must comply with applicable data protection laws.

The outcome of the investigation should only remain on the employee’s record for as long as is necessary, but shall not be less than three years as this is the record-keeping requirement under the Philippine Labor Code. If circumstances deem that such a report ceases to have any purpose whatsoever, it should be struck out of the employee’s record.

Neither Polish law nor the Draft Law specifically provide for a mandatory period during which the outcome of the investigation should be kept on the employee’s record.

At the same time, the Draft Law indicates that the register of whistleblowing reports, which should also contain information about follow-up actions undertaken as a result of the report, should be kept for 15 months starting from the end of the calendar year in which the follow-up actions have been completed, or the proceedings initiated by those actions have been terminated.

Also, while determining how long the outcome of an internal investigation should be kept, additional legal considerations can be taken into account, especially data privacy.

The GDPR does not specify precise storage time for personal data. The employer must assess what will be an appropriate time for storage of the data, taking into consideration the necessity of keeping personal data concerning the purpose of the processing in question. Employees' personal data should be kept for the period necessary for the performance of the employment relationship and may be kept for a period appropriate for the statute of limitations for claims and criminal deeds. A longer retention period may result from applicable laws. Following the Regulation of the Minister of Family, Labour and Social Policy on employee documentation, the employer may keep a copy of the notice of punishment and other documents related to the employee’s incurring of disciplinary responsibility in the employee record.

There are different retention periods for the data contained in employee files:

• 10 years if the employee was hired on or after 1 January 2019;
•  if the employment relationship began between 1 January 1999 and 1 January 2019, the retention period is 50 years, but may be reduced to 10 years if the employer provides the Polish Social Insurance Institution with certain mandatory information; and
•  for 50 years if the employee was hired before 1 January 1999. It does not matter whether the person is still working or not.

There are no specific rules in the Portuguese Labour Code on this matter.

However, article 332 of the PLC states that the employer should keep an updated record of disciplinary sanctions, so the competent authorities can easily verify compliance with applicable provisions. Accordingly, it is advisable to maintain a record of disciplinary sanctions during the entire employment relationship.

Also, please note that some collective bargaining agreements state that the disciplinary register must be deleted from the employee’s record periodically.

This depends on the company’s internal disciplinary policy and the severity of the offence. For instance, a written warning issued against an employee for minor misconduct is usually kept in the respondent employee’s file for one year and if the employee does not commit any further breaches during this time, the written warning will be expunged. However, if there is a finding of serious misconduct, particularly if such a determination results in the dismissal of the employee, these records are generally kept in the employee’s file for the duration of time such records are statutorily required to be maintained.  

There is no legal requirement on how long the records of the investigation (eg disciplinary action) should be maintained by the company. Many companies maintain a record of disciplinary action throughout the employment period.

The outcome of the investigation will contain personal data of the affected employee. For this reason, this information should only be kept for as long as a legal obligation or liability in connection with the information could arise for the company. Since the general statute of limitations for employment liability is one year, this is a good guideline.

In addition to the above, two specific rules apply:

• once the information becomes irrelevant for the purpose for which it was obtained and processed, the information should no longer be stored on the employee’s record or elsewhere; and
• the employees’ information (including those of the reporter and the affected employees) should only be stored in whistleblower systems during the time that is necessary to decide on whether the facts need to be investigated or not and, in any case, for a maximum period of three months.

Under the GDPR personal data may not, according to the general principle on storage limitation, be retained for longer than is necessary for the purposes for which the personal data are processed. The GDPR does not stipulate a generally applicable storage limitation period. Such a regulation is, on the other hand, included in the Swedish Whistleblowing Act. If the Swedish Whistleblowing Act applies, the outcome of the investigation and all personal data should be retained for as long as necessary, but not for longer than two years after the investigation has been closed.

From an employment law point of view, there is no statute of limitations on the employee's violations. Based on the specific circumstances (eg, damage incurred, type of violation, basis of trust or the position of the employee), a decision must be made as to the extent to which the outcome should remain on the record.

From a data protection point of view, only data that is in the interest of the employee (eg, to issue a reference letter) may be retained during the employment relationship. In principle, stored data must be deleted after the termination of the employment relationship. Longer retention may be justified if rights are still to be safeguarded or obligations are to be fulfilled in the future (eg, data needed regarding foreseeable legal proceedings, data required to issue a reference letter or data in relation to a non-competition clause).[1]

There is no period required by law for keeping the outcome of the investigation on the employee’s record. However, if termination of employment is the outcome of the investigation, an employer should keep details of the investigation for at least 10 years, in line with the prescribed period for an employee to file an unfair dismissal claim against an employer. An employer may use the details of an investigation to defend such a claim. For other disciplinary action, the retention of investigation details on the employee’s record is at the employer’s discretion.

There is no provision in the legislation setting forth a specific duration for keeping the outcome of the investigation findings in personnel files. However, based on general principles, the outcome of the investigation can remain on the employee’s personnel files as long as the employer has a lawful interest in such processing without unnecessarily harming the privacy rights of the employee.

The investigation outcome may not need to be noted on the accused employee’s record at all. Usually only the outcome of any subsequent disciplinary or grievance process would be noted, rather than the prior investigation.

The employer should keep the investigation report for as long as it remains relevant. This would usually be no longer than six years, unless regulatory obligations dictate otherwise. The report along with all documentation and witness statements gathered during the investigation should be retained securely and confidentially but for no longer than is absolutely necessary under the requirements of the DPA 2018 and the employer's data protection policies and procedures. There may be additional retention requirements in a regulated context; the position for each particular business and employee should be checked.

There is no requirement for the results of a workplace investigation to remain on an employee’s record for any specific period. It is often helpful, however, for information relating to the outcome of such an investigation (regardless of whether the allegations are substantiated) to be accessible to the human resources or legal functions such that during the initial complaint intake process described above, any prior complaints and investigations relating to the same individual or group of individuals can be taken into account to identify any recurring issues or systemic violations.

Vietnamese law does not provide for a period during which the outcome of the investigation should remain on the employee’s records and files. However, this will depend on the employer’s record-retention policies, which must comply with applicable data protection laws.