Workplace Investigations

Managing the outcome of the investigation is an important part of the process. The respondent must be informed of the outcome of the investigation as soon as possible after the investigation is completed and the decision-maker has decided how to proceed.

The investigator must decide whether the claims have been substantiated on the balance of probabilities and the decision-maker must decide what disciplinary action, if any, will be taken. Any disciplinary action should be proportionate to the seriousness of the misconduct. Disciplinary action could include a warning, counselling, monitoring of behaviour or termination of employment.

Ideally, the outcome of the investigation should be communicated to the respondent and complainant in writing, setting out the allegations that have been substantiated, unsubstantiated or whether there is insufficient evidence to make a finding.

The employee has no general right to be informed of the results of an investigation. However, if the employer is considering consequences under labour law based on the result of the investigation, such as termination or dismissal, the employee must be informed accordingly.

It is highly recommended to inform the employee under investigation of the outcome. If disciplinary measures are imposed upon him or her, the legal procedure must be followed and the sanction must be imposed or communicated the day after the employer or his delegate has established the wrongdoing of the employee.

There is no legal obligation to inform them of the outcome. Any obligation would come from the company's policies.

There is no explicit stipulation in the laws and regulations in the PRC on this issue. In practice, given the confidentiality of any investigation into a violation, the employer usually will not disclose the investigation result or submit the investigation report to the investigated employee, unless it is explicitly provided in its rules and regulations that the employer is obliged to inform the employee of the investigation result. However, according to the Employment Contract Law of the PRC and the opinions of the mainstream arbitration tribunals and courts, if an employer decides to take disciplinary action against an employee (in particular, termination of employment contract) according to the investigation result, it is generally required to inform the employee of the investigation result. In other words, the employer generally needs to inform the employee of the specific facts based on which the disciplinary action is taken. Failure to do so may result in the generalization of serious violation of the employer's rules and regulations and lead the arbitration tribunals and courts to regard the termination as illegal.

The employer's conclusions from the investigation.

The employee under investigation, like the other employees interviewed and the whistleblower, must be informed that the investigation has been completed. However, there is no obligation to provide them with the report and, for reasons of confidentiality, it is very often best not to do so.

The employer has no general obligation to proactively inform the employee about the outcome of an investigation. However, if personal data was collected, the employee has the right to request certain information: the purpose of the data collection, type of data, recipients of the data, the planned storage period of the data, his right to have the data corrected or deleted, his right to complain to a supervisory authority, and information on the source of the data.

The employer has an obligation, towards the alleged victim but also the alleged perpetrator, to carefully investigate the report and any existing evidence before making decisions. The employee under investigation must be informed about the outcome of the procedure and any measures adopted in this regard. The respective decision must have due justification.

The employer is generally not obliged under Hong Kong law to inform the employee under investigation of the outcome of the investigation absent any express obligation under the employment contract, even where the investigation has led to a decision to terminate the employee. However, to avoid any unnecessary claim of unlawful dismissal or dismissal without a valid reason, the employer should inform the employee of the reason for his or her termination, even if the investigation results may not be shared in full with the employee.

Concerning SH cases, the IC must supply a copy of the preliminary findings to the complainant and accused (where both are employees of the organisation) to allow them to make their representations before final findings and recommendations are shared. The IC's final report with recommendations for disciplinary action, if any, must also be shared with both parties.

For other forms of misconduct, it is not mandatory to share the details of the fact-finding investigation itself. However, if disciplinary action is contemplated and a disciplinary inquiry is necessary against the employee under investigation, the relevant details of the evidence gathered against the individual will need to be shared with him or her as part of the charge sheet. On the other hand, where no disciplinary inquiry is being conducted after an investigation (eg, if there is no merit in the allegations), the employer may choose to not share the investigative findings and only inform the individual that no further action is being taken.

The employee whose actions are the subject of the investigation must be advised of the outcome of the investigation. They are usually provided with a copy of the investigator's report.

If the outcome of the investigation does not lead to a disciplinary procedure, there is no specific obligation for the employer regarding this.

However, to a certain extent, under privacy laws, the employee may exercise his or her right of access to information strictly related to him or her, arising from the investigation (which is, however, a wider privacy issue to be assessed under the GDPR.)

Although there is no legal obligation to report the results of the investigation to the employee, when taking disciplinary action it is generally necessary, from a due process point of view, to explain the facts of the disciplinary action and the results of the investigation, and to allow the employee to explain him or herself. Particularly in the case of serious disciplinary actions such as dismissal, failure to provide an adequate opportunity for an explanation is a possible ground for denying the validity of the disciplinary action.

There are no statutory requirements as to employee feedback in internal investigations. The principle of due care requires an employer to typically confront implicated persons with any allegations that concern them; and provide a draft report on their interviews for feedback, if the investigative findings will form the basis of disciplinary measures. It is good practice to also inform an employee under investigation once the investigation is closed.

The employee under investigation must be informed of the outcome of the investigation as soon as a decision is reached.

The employee under investigation should be informed of the results of the investigation and the basis of the conclusion. It should be included in the first notice or the notice to explain.

He or she must be given feedback about follow-up actions that were undertaken, or reasons why the follow-up actions were not undertaken.

In any case – the feedback must be adapted to the circumstances of each case so as not to reveal too many details or infringe the other interested parties’ rights.

If, further to the conclusion of the investigation, the employer concludes that there are no grounds to enforce disciplinary action against the employee, the employee does not even have to know that they were the subject of an investigation.

However, if the employer does decide to accuse the employee, the employee will be entitled to all the sources of information obtained during the preliminary investigation.

The employee under investigation should be told of the findings that have been made against the employee, the disciplinary action (if any) that will be taken against the employee and any avenue or timeline for the employee to appeal the outcome of the investigation.

There is no legal obligation for a company to disclose the outcome of an investigation to the employee who was subject to it. Having said that, if the company wishes to take disciplinary action against the employee based on the outcome of an investigation, it is required to disclose sufficient detail on the employee’s wrongdoing that is subject to disciplinary action. This information should be provided to the employee before the disciplinary action committee (DAC) hearing to provide the employee with sufficient time to present and defend his or her position during the DAC hearing.

Employees under investigation are not entitled to be informed about the investigation or its outcome. As set out above (see question 11), an employee would have a right to be informed about the outcome of an investigation if the employer takes any disciplinary actions as a consequence of the enquiry.

The reason to disclose the details of the investigation is to allow the employee to adequately defend him or herself from the alleged breaches.

This depends on the outcome of the investigation and the applicable rules.

If the outcome of the investigation leads to termination, the employer will have to disclose some information regarding the reason for termination. If the employee questions the termination, the employer may have to disclose more information in a subsequent dispute. If the outcome of the investigation leads to less invasive measures, such as a warning, there are less extensive requirements to provide information.

If the Swedish Whistleblowing Act applies, the duty of confidentiality and the restrictions on access to and disclosure of personal data must be considered (see question 10). If the investigation is based on the rules in the Swedish Discrimination Act, there are also feedback requirements concerning the involved parties.

Workplace investigations often result in an investigation report that is intended to serve as the basis for any measures to be taken by the company's decisionmakers.

The employee's right to information based on article 8, Swiss Federal Act on Data Protection also covers the investigation report, provided that the report and the data contained therein relate to the employee.[1] In principle, the employee concerned is entitled to receive a written copy of the entire investigation report free of charge (article 8 paragraph 5, Swiss Federal Act on Data Protection and article 1 et seq, Ordinance to the Federal Act on Data Protection). Redactions may be made where the interests of the company or third parties so require, but they are the exception and must be kept to a minimum.[2]

There is no mandatory information on the outcome of an investigation that must be disclosed to an employee. However, disclosure of the outcome should, at a minimum, include whether an employee did or did not commit a violation. In addition, an employee who has committed a violation should be informed of any disciplinary action, and the grounds for such a decision (such as a violation of the company’s work rules). This enables the employee under investigation to appeal the outcome if it is applicable under the work rules or whistleblowing policy.

In general, the employee under investigation should be adequately informed about the allegations and findings to be able to defend him or herself. If no legal action will be taken against the employee under investigation as a result of the investigation, the employee may be notified regarding the findings and the outcome of the investigation. If the employee will be subject to a legal or administrative action (ie, warning, reprimand, or termination of employment), the formal requirements stemming from the Labour Law will need to be followed.   

The employee would usually get a copy of the investigation report (which would typically have the relevant evidence considered by the investigator annexed to the report, unless the report is privileged). It is not usual practice to allow the employee to make representations on the report before it is finalised.

The report will set out what facts the investigator was able to establish by reference to the available evidence. The investigator’s role is to gather and consider evidence about what did or did not happen, so the employer can understand if there is a case to answer. This is distinct from determining culpability, which is something for the manager conducting the disciplinary hearing (not the investigator) to determine, in addition to deciding any disciplinary sanction.

In general, it is often helpful to provide the complainant and subject of the complaint with a short written communication or verbal communication at the end of an investigation to advise that the investigation has concluded. Where the allegations are unsubstantiated, the communication should convey that no evidence of misconduct or unlawful conduct was found. Where the allegations are substantiated, the results and proposed communication should be reviewed with the legal function, together with potential disciplinary and remedial action, before it is communicated to the complainant and the subject of the complaint.

Where the misconduct alleged poses a high risk to the company from a reputational, operational or legal perspective, and especially where an investigation is conducted by outside counsel, outside counsel should determine, in consultation with the relevant individuals at the company, for example the general counsel, how and with whom to share investigation results and if and how to communicate the outcome to the complainant and the subject of the complaint. This is the case regardless of whether the allegations are found to be substantiated or unsubstantiated.

It is recommended that the employer informs the employee under investigation of the outcome and provides information on a need-to-know basis. Consequently, the employer has the discretion to proceed with any labour disciplinary procedure or actions against the employee based on the outcome of the investigation.

The investigator should prepare a written report setting out whether the allegations are substantiated, unsubstantiated or cannot be determined due to insufficient evidence. This report should be used for internal purposes only. Accordingly, the report should not be shared with the complainant, respondent or witnesses unless required by law, the employer’s policies or another industrial instrument. It is particularly important not to share the investigation report should the employer wish to maintain privilege in respect of the report.

The employer should determine the intended recipients and format of the report in advance. In many cases, it may be advisable to publish only the results of the investigation to protect the privacy and reputation of the individuals concerned, as this may help to minimise any potential negative impact on them.

However, under certain circumstances or due to legal requirements, full disclosure of the investigation report may be required, especially if transparency and disclosure are necessary to maintain public or investor confidence.

It is recommended to limit the communication to the findings and details of the report that are necessary for the employee to fully understand the outcome. This is especially true if the investigation is bound by a duty of confidentiality (eg, under the whistleblowing rules), as the employee should not be allowed access to the full report.

There is no legal requirement or recommendation for the company to share the full or partial report or findings. It is also not a recommended measure. Therefore, unless the internal rules determine that the company must do it, any answer to queries should be limited to the fact that the investigation was concluded, and the company took the appropriate action.

For the employee: As mentioned in our response to question 22, the relevant laws and regulations in the PRC do not impose any obligation on an employer to share investigation report (including the findings) with its employee, unless otherwise expressly provided in its internal rules and regulations that the employer may share with its employee any investigation report or findings that do not involve trade secrets or another person's privacy or personal information. Therefore, the employer has the discretion to decide whether and to what extent to share the investigation report based on its business management needs.

For the police/regulatory authorities: In general, an employer shall provide a complete report according to the law as required by the authority handling the case. It is recommended that the employer should conduct a detailed review of the investigation authority and the information contained in the evidence collection documents issued by the authority, and communicate with the authority to specify the scope of assistance and evidentiary materials to be provided. Although the employer cannot refuse to provide relevant evidentiary materials to the investigation authority on the grounds that such evidentiary materials involve trade secret or personal privacy, it still needs to carefully assess the relevance of the evidentiary materials to the facts of the case and timely communicate with the authority to confirm and narrow the scope of providing evidence as much as possible. If necessary, the employer can consult professional lawyers to provide professional opinions. In addition, we suggest that the employer may also try to require the investigation officer to sign a confidentiality letter, and file the investigation materials involving trade secret or personal privacy, the reasons thereof, etc., for the purpose of reducing legal risks faced by the employer.

The employee under investigation may only be informed of the conclusions.

There is no obligation to share the investigation report. The findings, or a summary of them without revealing any confidential information, may be disclosed, but it is the employer’s responsibility to keep the identity of every person interviewed confidential.

Generally, general data protection regulations apply. This means that, after the investigation, the information described in question 22 must only be provided if the employee requests it.

Whether, in the context of such a request, the full report needs to be shared is disputed in Germany. Some legal scholars and labour courts argue that a summary of the content of the report is sufficient. Others state that the employee should be presented with the full report, whereby passages that do not concern him should be redacted. In practice, it is highly uncommon to share the full report with the employee.

There is no explicit legal provision stating the whole report must be communicated with the employee under investigation. The legal framework (L.4990/2022 and L.4808/2021) is governed by strict confidentiality obligations and obligations to protect the complainant’s data. From a data protection regulation perspective, it could be argued that the right of the person under investigation to know the identity of the complainant, witnesses or sources of information should be limited to protect the rights of such persons.

However, if the outcome of the investigation leads to the imposition of disciplinary measures, the right of the employee under investigation to request the whole investigation report, to aid in their defence is enhanced. Moreover, if a complaint is made in bad faith or is unfounded, it may be supported that the employee under investigation is entitled to receive full documentation so he or she can seek adequate legal protection or file an action before the courts.

The employer is generally not obliged to share the investigation report or the findings with the employee under Hong Kong law, absent any express obligations under the employment contract.

However, according to the PDPO, the content of the investigation report or meeting minutes related to the employee (including any findings and opinions expressed in such documents) are likely to constitute the personal data of the employee under investigation. In that case, the employee may have a right under the PDPO to obtain a copy of such documents by making a statutory data access request after the workplace investigation is completed. The employer’s obligation to comply with such request is subject to certain exemptions under Part 8 of the PDPO, which include (among others) an exemption on the provision of personal data held for the prevention, preclusion or remedying of unlawful or seriously improper conduct, and the disclosure of which would be likely to prejudice the said purpose or directly or indirectly identify the person who is the source of the data.[1] Therefore, where there is a parallel criminal proceeding or investigation that has not been concluded, the employer may reject an employee’s data access request on the basis that the requested disclosure may prejudice the prevention and remedy of the unlawful conduct. Further, any information protected by legal privilege is also exempt from disclosure under Part 8 of the PDPO.[2]

If the requested documents also contain the personal data of any other third parties (such as other co-workers of the employee who have also participated in the investigation), the employer should always redact or erase such data before providing the requested documents to the employee under investigation, unless the relevant third parties have consented to the disclosure of the data.

Please see question 22.

The investigation report should be shared in full, unless there is some specific reason for not doing so. One example is where there is a possibility of a criminal investigation; in that instance, it may be appropriate not to share the full report. Occasionally, there may be several respondents involved in the complaint, and each respondent may only be entitled to the report that relates to them.

There is no general obligation of the employee to share an investigation report with the employee: only if and when disciplinary action is brought against the employee, the latter must be informed precisely of the allegations (but, once again, without being entitled to review the investigation report). In court, employees may ask for an exhibition of documents, including the investigation report, if not already filed by the employer, to use in its defence (but such request is not necessarily automatically granted by the court, as certain requirements must be met.

There is no legal obligation to share reports of findings. Therefore, the company may share only the summary or the entire report at its discretion.

Employers are typically not required to share the investigation report with implicated persons or other employees involved in an investigation. Depending on the nature and subject of the investigation, the principle of due care may require an employer to share (draft) investigative findings before concluding on such findings.

The employer needs to balance the interests of the employee investigated, and the interests of other persons involved in the investigation such as the complainant and witnesses. Thus, the employer may either share the findings of the investigation or the full investigation report, provided that the identities of all other persons involved in the investigation are kept confidential.

The employer is not compelled to share its investigation report with the employee. However, it would be ideal for the company to keep in its records a comprehensive report that details the findings of the investigation. This would be useful during the administrative disciplinary process when the employee requests to be informed of the substantive grounds for his or her eventual termination.

It does not need to be shared with the employees at all. It may be shared only to the extent such a disclosure will not violate any law, including personal data protection law or personal rights.

If the employee is accused by the employer, they will be entitled to consult the entire investigation report and not just the findings, as well as the witnesses' depositions, which should be in writing, and any other sources of information that were used by the employer

Even though the law is silent in this respect, courts have ruled that if this is not complied with, the employee’s right of defence would be deemed to be disrespected.

It would suffice for a summary of the investigation’s findings to be shared with the complainant and the respondent employees.

As discussed in question 22, when taking disciplinary action against an employee based on the outcome of an investigation, the company would need to disclose sufficient detail on the employee’s wrongdoing. However, this does not mean that the full investigation report would need to be shared with the employee to be disciplined. Key details of the investigation findings that apply to the relevant employee due to be disciplined should be shared, and not other findings concerning other persons.

There is also no requirement under Korean law for a company to disclose the investigation report or investigation findings to the whistleblower. If the company discloses the personal identity of the target employees, such disclosure could constitute a violation of the PIPA , libel or defamation under the Criminal Code. If the whistleblower strongly requests that the company share the investigation report or the findings, the company may consider providing a summary of the key findings concerning the allegations that the whistleblower raised, without disclosing personal information.

Since workplace investigations are not regulated in Spain, there are no clear rules as to the amount of information on the investigation that would need to be shared with an employee if the company was compelled to disclose the enquiry (see questions 11 and 22). A good rule of thumb is that an employee should have access to all the information that is relevant to be in a position to oppose the alleged breaches.

Moreover, if the disciplinary measures taken were challenged before a Labour Court – employees in Spain tend to challenge these types of measures – the plaintiff could request the Labour Court to order the company to produce all of the investigation details, including the findings and the full investigation report.

Finally, companies will normally have an interest in producing a report that clearly states the moment in which the fact-finding exercise was concluded and the company had a full picture of the facts. This is because the statute of limitations to sanction employment breaches, which ranges from 10 to 60 days depending on the seriousness of the misconduct, starts to count when the company has a comprehensive view of the events (which would coincide with the date the investigation report was issued).

There is no obligation to share the investigation report, neither in full nor key findings, with the involved parties. An assessment needs to be made in each case of what is appropriate to share and with whom.

When sharing an investigation report, certain data protection considerations must be made. A purpose and legal basis for the sharing must be established and, in principle, documented.

If the Swedish Whistleblowing Act applies, the duty of confidentiality and the restrictions on access to and disclosure of personal data must be considered (see question 10).

In principle, there is no obligation to disclose the final investigation report. Disclosure obligations may arise based on data protection law vis-à-vis the persons concerned (eg, the accused). Likewise, there is no obligation to disclose other documents, such as the records of interviews. The employee should be fully informed of the final investigation report, if necessary, with certain redactions (see question 22). The right of the employee concerned to information is comprehensive (ie, all investigation files must be disclosed to him).[1] Regarding publication to other bodies outside of criminal proceedings, the employer is bound by its duty of care (article 328, Swiss Code of Obligations) and must protect the employee as far as is possible and reasonable.[2]

It depends on with whom the investigation report should be shared. If there is a court case or criminal case to be further investigated by police, the investigation report should be shared in full as this would be used as documentary evidence to make a case stronger. On the contrary, if the investigation report is requested by the employee under investigation, employers are entitled to use their discretion as to what information to share.

There is no legal requirement for the disclosure of the investigation report in full. If the investigation report needs to be submitted to the court, public institutions or other third parties, measures may need to be taken to protect confidentiality or to comply with the confidentiality requests of the persons participating in the investigation.

The answer to this depends on whether or not privilege attaches to the report, as well as whether criminal proceedings are contemplated – if so, there may be a danger of waiver of privilege, or witness evidence being contaminated if they have an opportunity to read each other’s evidence as part of the report. This could inhibit the fairness of any subsequent criminal trial.

Only the findings should be shared with the complainant and the subject of the complaint.

There is no obligation to share the investigation report or the findings unless the employer and employee agree to do so.

However, under Decree No. 13/2023/ND-CP on personal data protection, the contents of the investigation report or findings related to the employee are likely to constitute the personal data of the employee under investigation. In that case, the employee may have a right under the said Decree to obtain copies of such documents by making a statutory data access request after the workplace investigation is completed. Where the employer is required to provide such documents to the employee under Decree No. 13/2023/ND-CP but the requested documents also contain the personal data of any other third parties (such as the employee’s co-workers who participated in the interview during the investigation), the employer should first redact or erase such data before providing the requested documents, unless the relevant third parties have consented to the disclosure of their personal data.