Workplace Investigations: How Employers Can Reduce Legal Risk

When allegations of misconduct, harassment, fraud or other workplace wrongdoing arise, employers must decide how to respond. Acting too quickly without establishing the facts can expose a business to legal disputes, reputational damage and claims of unfair treatment.

A workplace investigation helps an employer understand what happened, assess the available evidence and decide what action, if any, is appropriate. In South Africa, investigations should be conducted fairly, consistently and in line with applicable labour legislation.

A well-managed investigation does more than identify wrongdoing. It can also help protect employees, strengthen workplace policies and reduce the risk of costly disputes.

1. Establish Clear Reasons for the Investigation

Before beginning an investigation, the employer should identify the concern that needs to be examined.

This may involve allegations of theft, fraud, harassment, discrimination, bullying, breaches of company policy or serious performance concerns. The employer should establish what is alleged, when the incident may have occurred and which workplace rules or legal obligations may be relevant.

A clear scope helps prevent an investigation from becoming unnecessarily broad or turning into a search for reasons to discipline a particular employee.

Employers should also distinguish between an allegation and an established fact. A complaint should be taken seriously, but the person accused should not be treated as guilty before the evidence has been assessed.

2. Appoint an Impartial Investigator

The person conducting an investigation should be capable of examining the allegations objectively and handling sensitive information appropriately.

Where possible, the investigator should not have a personal interest in the outcome or be directly involved in the incident. If a complaint concerns a senior manager, for example, assigning the investigation to someone who reports directly to that manager may create concerns about independence.

Depending on the seriousness and complexity of the matter, an employer may use an appropriately trained internal investigator, an external specialist or a legal professional.

The investigator’s role is to establish the facts and report the findings. The person responsible for deciding on disciplinary action should consider the evidence fairly and avoid treating the investigation report as an automatic instruction to dismiss an employee.

3. Collect and Preserve Relevant Evidence

An investigation should be based on relevant evidence rather than assumptions, workplace rumours or personal opinions.

Evidence may include:

* Written complaints and incident reports.

* Emails, messages and relevant business records.

* CCTV footage, access logs or system records, where lawfully obtained.

* Interviews with the complainant, the employee concerned and witnesses.

* Relevant workplace policies, contracts and previous records.

* Documents showing the sequence of events.

Employers should preserve relevant evidence promptly, particularly where electronic records may be deleted or overwritten.

Records should be handled securely, and investigators should document how evidence was obtained and who had access to it. Information should not be altered or selectively presented in a way that distorts the findings.

4. Give Employees a Fair Opportunity to Respond

Procedural fairness is an important part of managing workplace misconduct.

The Code of Good Practice: Dismissal, which took effect on 4 September 2025, provides guidance on fair dismissal procedures under the Labour Relations Act 66 of 1995. It recognises that investigations and enquiries do not always need to be formal, and that the appropriate process depends on the circumstances, including the nature and size of the employer.

Where disciplinary action is being considered, the employee should generally be informed of the allegations in sufficient detail and given a reasonable opportunity to respond before a decision is made.

Employers should avoid making a final decision before hearing the employee’s explanation. They should also consider relevant information that supports the employee’s account, rather than collecting evidence only to prove the original allegation.

A fair process can help an employer identify misunderstandings, distinguish between deliberate misconduct and genuine mistakes, and reach a better-informed decision.

5. Protect Confidentiality and Personal Information

Workplace investigations often involve sensitive information about employees, complainants and witnesses. Poor handling of that information can create additional legal and reputational risks.

Employers should limit access to investigation records to people who need the information for a legitimate purpose. Findings should not be shared widely or discussed informally with staff who have no role in the matter.

The Protection of Personal Information Act 4 of 2013 (POPIA) may apply when personal information is collected, used, stored or shared during an investigation. Employers should consider the lawfulness and purpose of processing, the security of the records and any applicable retention requirements.

Confidentiality should not be used to prevent a person from exercising a legal right or making a protected disclosure. Employers should also avoid promising absolute secrecy where information may need to be disclosed as part of a fair process or legal obligation.

6. Avoid Retaliation Against Complainants and Witnesses

Employees may be reluctant to report misconduct if they fear being punished, threatened or treated unfairly for speaking up.

Employers should take reasonable steps to prevent retaliation against people who raise concerns in good faith or participate in an investigation. Depending on the circumstances, this may include monitoring workplace interactions, addressing intimidation and ensuring that employment decisions are not used to punish someone for making a protected complaint.

At the same time, allegations must be assessed objectively. A complaint that cannot be substantiated is not automatically a malicious or dishonest complaint.

Where an employer believes that a complaint was deliberately fabricated, that allegation should be examined separately and supported by evidence before disciplinary action is considered.

7. Keep Accurate Records of the Investigation

A properly documented investigation allows an employer to explain how it reached its conclusions if the decision is later challenged.

The investigation file should record the complaint, the scope of the enquiry, evidence considered, interviews conducted, relevant findings and the reasons for any recommended action.

Employers should distinguish clearly between established facts, disputed accounts and matters that could not be verified. Where evidence is insufficient to reach a reliable conclusion, the report should say so rather than presenting speculation as fact.

Records should be stored securely and retained in accordance with applicable legal requirements and the organisation’s lawful retention policy.

8. Choose a Proportionate and Lawful Response

The purpose of an investigation is not necessarily to secure a dismissal. Its findings may indicate that no further action is needed, that workplace procedures should be improved, that additional training is appropriate or that disciplinary action should be considered.

Where misconduct is established, the employer should assess the seriousness of the conduct, the relevant workplace rules, the employee’s circumstances and the appropriate sanction.

The 2025 Code of Good Practice: Dismissal emphasises that fairness depends on the circumstances of each case. Employers should not assume that every breach warrants dismissal or that a particular outcome is justified simply because an investigation took place.

Where the allegations concern possible criminal conduct, an internal investigation and a criminal investigation are separate processes. An employer should not present its internal findings as a criminal conviction.

9. Review Policies and Prevent Future Problems

An investigation can reveal weaknesses in workplace systems as well as individual conduct.

For example, a fraud allegation may expose inadequate financial controls, while a harassment complaint may reveal unclear reporting procedures or insufficient staff training.

After the matter has been addressed, employers should consider whether they need to:

* Clarify workplace policies and disciplinary procedures.

* Improve reporting channels for complaints.

* Provide training to managers and employees.

* Strengthen access controls and recordkeeping.

* Address gaps in supervision or internal controls.

* Review whether similar concerns have arisen before.

Taking reasonable corrective steps can help prevent recurring problems and demonstrate that the employer takes workplace responsibilities seriously.

10. When Should an Employer Seek Legal Advice?

Some investigations involve particularly high risks. These may include allegations of sexual harassment, discrimination, fraud, whistleblowing, senior management misconduct or possible criminal activity.

Legal advice may be appropriate where the facts are disputed, the investigation could lead to dismissal, personal information is especially sensitive, or the matter may result in litigation or regulatory action.

An employer should also seek guidance where there is uncertainty about the applicable disciplinary procedure, the rights of the employee concerned or the preservation and disclosure of evidence.

Obtaining advice early can help identify procedural risks before they affect the investigation or the final decision.

Conclusion

Workplace investigations are an important tool for identifying wrongdoing, resolving disputes and improving organisational accountability. However, an investigation can create additional legal risk if it is biased, poorly documented, unnecessarily intrusive or conducted without appropriate procedural safeguards.

Employers can reduce that risk by defining the scope of the investigation, appointing an impartial investigator, preserving relevant evidence, respecting confidentiality and giving affected employees a fair opportunity to respond.

A fair and evidence-based approach supports better decisions and helps protect both the organisation and the people who work within it.