Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Step-By-Step: How To Conduct An Investigation At Work
- Step 1: Clarify What You’re Investigating (And What You’re Not)
- Step 2: Appoint An Appropriate Investigator
- Step 3: Consider Immediate Risk Management (Including Suspension)
- Step 4: Plan The Evidence You Need
- Step 5: Invite People To Investigation Meetings (And Set Expectations)
- Step 6: Run Interviews And Take Reliable Notes
- Step 7: Write An Investigation Report
- Key Takeaways
When something goes wrong at work - a serious complaint, a suspected policy breach, missing stock, or a performance issue that’s starting to look like misconduct - it’s tempting to “sort it out quickly” and move on.
But for small businesses, moving too fast can create bigger problems later. A rushed or poorly handled process can damage morale, lead to grievances, and (in the worst cases) increase the risk of an employment tribunal claim.
Conducting a workplace investigation properly is one of the most practical ways to protect your business. It helps you make fair decisions based on evidence, not assumptions - and shows you followed a reasonable process if your decision is challenged.
Below, we’ll walk you through a clear, step-by-step approach to conducting an investigation at work in the UK, including what to document, how to handle witnesses, and what to do once the facts are in.
Why Conducting An Investigation Matters (Even For “Small” Issues)
Workplace investigations aren’t just for headline-grabbing allegations. In reality, many investigations are triggered by day-to-day issues, such as:
- customer complaints about staff behaviour
- bullying or harassment allegations
- timekeeping or attendance irregularities
- suspected theft or fraud
- health and safety concerns
- data or confidentiality breaches
So what’s the point of a formal-ish investigation?
It Helps You Make A Decision You Can Defend
Even if you’re confident you “know what happened”, you still need to be able to show how you reached your decision. A fair investigation is often what separates a sensible management decision from a risky one.
It Supports Fair Process (Which Protects Your Business)
In many cases, the legal risk isn’t just the outcome - it’s the process. If an employee argues you didn’t investigate properly, didn’t listen to their side, or relied on shaky evidence, you may be on the back foot.
A good benchmark here is the ACAS Code of Practice on disciplinary and grievance procedures. While it doesn’t cover every scenario in detail, following it (and your own policies) is often central to showing you acted reasonably.
That’s why your Employment Contract and workplace policies should work alongside a consistent process, so everyone understands what to expect.
It Can Stop Problems Escalating
Handled well, investigations can resolve issues early. Handled badly, they can create a culture where people feel unsafe reporting concerns - or feel management has “already decided” the outcome.
Step-By-Step: How To Conduct An Investigation At Work
Every business is different, and every allegation has its own context. But in most cases, conducting an investigation can be broken into a practical sequence.
Step 1: Clarify What You’re Investigating (And What You’re Not)
Start by writing down a short investigation scope. This should include:
- the allegation/issue (what is said to have happened)
- who is involved (complainant, respondent, witnesses)
- dates/times (as specifically as possible)
- policies potentially relevant (conduct, IT usage, harassment, etc.)
- what outcome this stage is for (fact-finding, not deciding guilt)
This matters because investigation scope creep is common in small businesses. You start looking into one incident, and suddenly you’re trying to fix every historic workplace problem at once. Keeping the scope tight makes the process fairer and easier to manage.
Step 2: Appoint An Appropriate Investigator
The investigator doesn’t have to be legally trained, but they should be:
- as impartial as possible (not personally involved)
- capable of taking clear notes and handling sensitive conversations
- available to run the process without undue delay
In a small business, true independence can be tricky (especially if the people involved report directly to you). If you’re too close to the issue, consider bringing in an external HR consultant or getting legal support to reduce risk.
Step 3: Consider Immediate Risk Management (Including Suspension)
Before interviews begin, think about whether you need interim steps to protect people, evidence, or operations.
Common interim actions include:
- changing shifts or reporting lines
- separating employees who work closely together
- restricting access to systems or certain areas
- temporary suspension (in some cases)
Suspension should not be an automatic response, and it should not be treated as a punishment. If you do suspend, it’s usually safest to do so on full pay, document your reasons, confirm it’s a neutral act, and keep it under review. If you’re unsure what’s reasonable, it’s worth reading up on suspension pending investigation before you act.
Step 4: Plan The Evidence You Need
A strong investigation usually follows a simple principle: gather evidence first, form conclusions second.
Depending on the situation, evidence might include:
- witness statements
- emails, Slack/Teams messages, or CRM notes
- CCTV (if you have it and it’s compliant)
- clock-in/clock-out records
- expense claims and receipts
- training records and relevant policies
- customer complaints and call logs
Keep a clear record of what you reviewed, when you reviewed it, and where it came from. If you later need to justify a decision, this paper trail is invaluable.
Step 5: Invite People To Investigation Meetings (And Set Expectations)
Investigation meetings are usually informal fact-finding conversations - but they still need structure and fairness.
When inviting an employee or witness to a meeting, you should generally:
- explain the purpose (fact-finding)
- confirm the time and place (and whether it’s remote or in person)
- outline the general topic (without leading them)
- tell them they should keep the matter confidential
If the process may lead into disciplinary action, be careful not to blur stages. You can later invite them to a separate disciplinary meeting if needed - and that invite should be handled properly. (If you’re approaching that point, it’s worth checking you’re inviting employees to a disciplinary meeting in a compliant way.)
Step 6: Run Interviews And Take Reliable Notes
In interviews, your job is to gather facts, not argue the case.
A helpful structure is:
- Start open: “Talk me through what happened from your perspective.”
- Clarify specifics: times, dates, exact words used, who else was present.
- Test consistency: gently explore any gaps or contradictions.
- Close properly: ask if there’s anything else relevant and whether they have supporting evidence.
Keep notes clear, dated, and as close to verbatim as possible for key statements. Where appropriate, ask the interviewee to confirm your notes are accurate (either by signing them or confirming by email).
Step 7: Write An Investigation Report
Your investigation report doesn’t need to be a novel - but it should be detailed enough that someone else could follow your reasoning.
A good investigation report usually includes:
- the allegation and scope
- who conducted the investigation and when
- the evidence gathered (documents, interviews, CCTV etc.)
- a summary of each witness account
- areas of agreement and disagreement
- findings of fact (what is more likely than not to have occurred)
- recommendation on next steps (e.g. no further action, disciplinary, training, mediation)
Try to separate facts from opinions. If you include opinions (for example, credibility observations), explain what they’re based on.
Handling Common Workplace Investigation Scenarios
Not every investigation looks the same. Here are some common situations small businesses face - and what to watch for.
Misconduct And Potential Gross Misconduct
If allegations could amount to gross misconduct (such as theft, serious harassment, violence, or deliberate data misuse), you need to be extra careful about:
- preserving evidence
- avoiding “pre-judging” the outcome
- following a fair disciplinary process after the investigation
It may help to pressure-test your next steps against a gross misconduct checklist before you move to any dismissal decision.
Poor Performance (Where A PIP Might Be More Appropriate)
Sometimes an “investigation” is triggered because you suspect an employee isn’t doing their job properly. But not every issue is misconduct - it could be capability or training.
If the evidence points to lack of skill, understanding, or support (rather than intentional wrongdoing), a structured performance process may be more appropriate than disciplinary action. Many employers deal with this using Performance Improvement Plans.
Getting this distinction right matters, because capability and conduct issues are usually managed differently.
Grievances Raised During (Or Instead Of) An Investigation
It’s common for an employee to raise a grievance once an investigation begins - for example, alleging bias, bullying, or unfair treatment.
Don’t ignore it. Consider whether:
- the grievance is directly linked to the investigation (and needs to be addressed first), or
- it can run separately without undermining fairness
Either way, you should manage it carefully and consistently - especially timelines, confidentiality, and note-taking. Many small businesses trip up here, so it’s worth being aware of common grievance meeting pitfalls.
Privacy, Confidentiality, And Data Protection During An Investigation
Workplace investigations often involve sensitive personal data - sometimes even special category data (like health information) - and that means you need to think about privacy as well as HR fairness.
Limit Access To Information
As a rule, only share information on a “need to know” basis. For example:
- witnesses usually don’t need to see all evidence
- line managers may need outcomes, but not every detail
- staff shouldn’t be encouraged to “talk about it” informally
Set expectations early: confidentiality helps protect everyone involved and reduces the risk of retaliation or gossip.
Be Careful With Emails, Devices, CCTV, And Monitoring
Small businesses often rely on practical tools like CCTV or work systems to confirm what happened. That can be legitimate - but you should make sure your monitoring is lawful, proportionate, and consistent with what staff have been told.
If your business uses cameras, for example, ensure your approach aligns with your privacy obligations and workplace transparency, especially if cameras are in sensitive areas. It may help to sense-check what’s allowed with workplace cameras before relying heavily on CCTV as evidence.
Plan For A Subject Access Request (SAR)
It’s also worth assuming that, once an investigation becomes contentious, you might receive a subject access request for emails, notes, or messages relating to the employee.
This doesn’t mean you should avoid writing things down - it means your notes should be factual, professional, and relevant.
What Happens After The Investigation?
Once the investigation report is done, you need to decide next steps. The key is to keep decisions proportionate and consistent with your policies and past practice.
Possible Outcomes
Typical post-investigation outcomes include:
- No further action (e.g. allegation not substantiated)
- Informal management action (coaching, reminders, extra supervision)
- Training (where misunderstanding or skill gaps are the issue)
- Mediation (for relationship conflict, where appropriate)
- Disciplinary process (where there’s a case to answer)
A common mistake is treating the investigation report as “the decision”. It’s not. The investigation informs the next step - usually a separate disciplinary meeting where the employee can respond to the allegations with the evidence put to them in a fair way.
At the disciplinary stage, employees will usually have the right to be accompanied at the meeting by a colleague or a trade union representative (and you should make this clear in the invite letter).
Be Consistent With Warnings And Records
If the outcome involves a warning, ensure you document:
- what the warning is for
- what improvement is required
- the review period
- what happens if there’s no improvement
- the employee’s right to appeal
Consistency matters. If one employee is dismissed for conduct that another employee only received a warning for, you’ll want to be able to explain why (different facts, different history, different impact, etc.).
Don’t Forget Appeals
If your process results in disciplinary action, the right to appeal is an important fairness safeguard. Ideally, the appeal should be heard by someone not previously involved, where possible.
In a small business, you may not always have a clean separation - but you should still take reasonable steps to review the decision objectively and document the appeal outcome.
Key Takeaways
- Conducting an investigation helps you make fair, evidence-based decisions and reduces legal risk if the outcome is challenged.
- Start by clearly defining the scope, appointing an impartial investigator, and considering interim risk management steps (like temporary changes to duties or suspension where appropriate).
- Gather evidence methodically, run structured interviews, and keep clear notes - your documentation is often what protects you later.
- Separate the investigation stage (fact-finding) from the disciplinary stage (decision-making), and follow a compliant process (including ACAS guidance) for any disciplinary meeting.
- Manage confidentiality and privacy carefully, especially if you rely on CCTV, monitoring, or sensitive personal information.
- After the investigation, choose proportionate next steps (no action, training, PIP, or disciplinary) and keep records consistent, including appeal rights.
If you’d like help conducting a workplace investigation, managing a disciplinary process, or updating your contracts and workplace policies, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.
Business legal next step
When should you formalise this?
If you collect customer data, sell online or run marketing campaigns, your public terms and privacy documents should match the real customer journey.








