AUSTRALIA Law and Practice Contributed by: Kathy Dalton, Jonathan Wright, Gella Rips and Mirna Oghanna, Workdynamic Australia
7. Data Protection 7.1 Collecting Personal Data
6.9 Other Measures Employers may take other measures after an inves - tigation – regardless of whether allegations are sub - stantiated – to help address broader underlying issues, prevent future complaints and rebuild trust in the workplace. At the team, individual or interpersonal level, this may include: • counselling or mentoring; • facilitated discussions or mediation to reset expec - tations around communication and behaviour, or to clarify roles and responsibilities; • refresher training on respectful workplace behav - iour; and • leadership training for supervisors on managerial responsibilities. At the organisational level, this may include: • updating or improving workplace policies; and • strengthening supervision, reporting channels and communication processes. If broader cultural or systemic issues are identified, employers may also undertake a cultural review to assess patterns, behaviours or contributing factors. Such reviews are increasingly used post‑investigation to support psychological safety and proactive cultur - al management. They are typically conducted by an external lawyer, investigator or other specialist with investigative or organisational culture expertise, to ensure that employees feel comfortable with speak - ing openly. A cultural review may involve: • anonymous staff surveys; • focus groups or interviews; • review of policies, leadership practices and team dynamics; and • recommendations for cultural improvement.
Employers may collect personal information for the purposes of an investigation, provided that such col - lection complies with privacy law requirements. In practice, employers should only collect informa - tion that is directly relevant to the investigation and proportionate to the seriousness and scope of the allegations. “Sensitive information” such as information about an individual’s political opinions, criminal record or health information, can only be collected with the individual’s consent, unless an exemption applies. Individuals must generally be notified: • that their information is being collected; • about the purpose of collection; • about who it may be disclosed to; and • about the consequences of not providing it. Employers must: • restrict access to those with a need to know; • store investigation material securely; and • not retain data longer than necessary once the investigation and any related proceedings con - clude. 7.2 Specific Rules Employers must comply with the specific personal data collection rules outlined in 7.1 Collecting Per- sonal Data . It is often beneficial for employers to have a docu - mented framework (such as a standard investigation protocol or dedicated privacy policy) to govern how personal information is collected, used and handled during workplace investigations. When well designed, such framework helps to ensure that investigations are conducted consistently, law - fully and transparently, while managing employee expectations about confidentiality, data access and information sharing.
25 CHAMBERS.COM
Powered by FlippingBook