Preserving Evidence After a Workplace Complaint

Preserving Evidence After a Workplace Complaint

What Evidence Should Be Preserved After an Employee-Misconduct Complaint?

After an employee-misconduct complaint, an organization should promptly identify potentially relevant records, prevent routine deletion when appropriate, preserve original information and metadata where possible, and involve qualified counsel when legal duties, privacy, privilege, or anticipated litigation may be involved.

The precise scope depends on the allegations. The goal is not to collect every record the organization possesses; it is to prevent the loss or alteration of information that may reasonably help establish what occurred.

Start With the Allegations

Before identifying evidence, clarify:

• What conduct is alleged?
• Who was involved?
• When and where did it allegedly occur?
• How was it reported?
• Who may have observed it or learned about it contemporaneously?
• Which devices, systems, facilities, or accounts may contain relevant information?
• Have related complaints or incidents been identified?

These questions help establish a reasonable time period, participant list, and evidence map.

Categories of Potential Evidence

Depending on the matter, relevant information may include:

Complaint and intake records

• Written complaints
• Hotline or reporting-system entries
• Notes from the initial report
• Emails or messages reporting the concern
• Contemporaneous personal notes voluntarily provided by participants

Policies and organizational records

• Applicable workplace policies
• Employee acknowledgments
• Job descriptions
• Reporting charts
• Training records
• Prior corrective or performance documents when legitimately relevant

Communications

• Work email
• Text messages
• Collaboration-platform messages
• Voicemail
• Calendar invitations
• Authorized business communications on company devices

Collection must account for privacy, ownership, access rights, and applicable law. Employers should not assume that every communication may be accessed merely because it concerns work.

Time and location information

• Work schedules
• Timekeeping records
• Building-access information
• Visitor logs
• Vehicle or dispatch records
• Travel records
• Relevant location or device information obtained through lawful, authorized means

Images, audio, and video

• Security-camera recordings
• Photographs
• Meeting recordings
• Body-worn or vehicle video where applicable and lawfully accessible

Video systems may overwrite recordings quickly, making timely identification especially important.

Financial and operational records

• Expense reports
• Purchase orders
• Vendor records
• Inventory information
• Transaction logs
• Equipment-assignment records
• Audit trails

Publicly available information

Public social-media posts, websites, public filings, or other open sources may be relevant in some matters. Investigators must use lawful methods and document the source and date of collection.

Preserve Before Analyzing

Organizations sometimes focus on deciding what evidence means before ensuring that it will remain available. Preservation should generally come first. Avoid editing original files, forwarding material in ways that strip useful metadata, or relying only on screenshots when native information may be important.

Use working copies for review while maintaining originals according to the organization’s authorized process.

Avoid Overcollection

Collecting excessive personal or unrelated information can create privacy, security, and fairness concerns. The collection plan should remain connected to the allegations, relevant time period, participants, and legitimate investigative purpose.

Counsel or an appropriate specialist should guide the organization where special categories of information, personal devices, medical material, union issues, law-enforcement records, or regulated data are implicated.

Maintain a Clear Record

An evidence log can identify:

• What was collected
• The source
• The date and method of collection
• Who handled it
• Where the original is maintained
• Any relevant limitations
• Which allegation or issue it may address

The appropriate level of chain-of-custody documentation depends on the matter and potential use of the evidence.

Protect Against Retaliation and Unnecessary Disclosure

California’s Civil Rights Department explains that employees and applicants have protections against retaliation for certain protected activities, including speaking out about conduct they reasonably believe is unlawful and participating in investigations. Investigation planning should minimize unnecessary disclosure and ensure that preservation or interview steps are not used to punish participants.

How an Investigator Can Assist

A workplace investigator can help identify likely evidence sources, organize records, build a chronology, compare documentary information with interviews, identify gaps, and document the investigative process. Counsel should direct legal-hold, privilege, and legal-compliance decisions.

Contact TIG

The Investigative Group provides workplace-investigation services throughout California, with a focus on Sacramento, Folsom, Roseville, El Dorado Hills, and surrounding Northern California communities. Contact TIG at 916.934.4736 to discuss a workplace matter.

Sources

• California Civil Rights Department: Employment Discrimination
• California Civil Rights Department: Workplace Retaliation Fact Sheet
• U.S. Equal Employment Opportunity Commission: Employer Investigation Checklist

Related TIG Services

Learn more about TIG’s California Workplace Investigations and Sacramento Workplace Investigations services.

Disclaimer: This article provides general information and is not legal advice. Consult qualified counsel regarding preservation duties, privacy, privilege, and employment decisions.