In our previous contributions to the 2015, 2016, 2017 and 2018 editions of The European, Middle Eastern and African Investigations Review, we gave an overview of how to conduct an internal investigation in Switzerland or with a Swiss angle (2015), provided an overview of three of the key issues that need to be taken into account in a Swiss investigation at its very early stages (2016), and summarised most recent developments on the aforementioned topics (2017). In the 2018 edition we rendered an updated overview of new developments. This year’s chapter shall continue the discussion of our previous contributions. We will emphasise: (i) an internal investigation’s key objectives, (ii) the limitations on gathering of information and (iii) the attorney–client privilege.
Continuing highly challenging disruptions: key objectives of internal investigations
The vast majority of the numerous internal investigations conducted within approximately 150 Swiss-domiciled banks as a result of the Department of Justice (DOJ) Swiss Bank Program have been completed, often resulting in payments of the affected banks to the US authorities. However, further international disruptions involving Swiss financial institutions and other industries have occurred, again resulting in internal investigations, some of which are ongoing.
One may consider (mostly global) disruptions such as: 1MDB; Petrobras; the LIBOR scandal; the Swiss Post scandal regarding PostAuto; the US-imposed sanctions on Venezuela’s state-owned oil company, PDVSA; the German car emission fraud scandal referred to as ‘Dieselgate’ (that since September 2015 has expanded from just Volkswagen to almost all major German carmakers); the disruptions related to Uzbek first daughter Gulnara Karimova; various Western primary and secondary sanctions against Russian oligarchs; the Danske Bank and the Swedbank AML scandals (involving illicit assets in incredible amounts of hundreds of billions of dollars); as well as many other regional and international corruption, AML and fraud schemes. All of these were broadly reported in digital and print media, and a number of them also led to investigations in Switzerland.
One of the consequences of such scandals is that, on an ever-increasing basis, not only Swiss and foreign governmental bodies, but also shareholders of Swiss corporates and their executive management, request the conduct of internal investigations in cases of suspicion of AML misconduct, fraud, tax offences or other misconduct within or by Swiss-domiciled entities. It is, therefore, in our view fair to say that public awareness in relation to internal investigations has increased even more in the past year or so, given the various scandals addressed in the media on an almost daily basis. Against this background, it should not only be re-emphasised what the important Swiss law aspects of an internal investigation are, as we have tried to explain in our previous contributions, but it should also be borne in mind what the most important objectives of an internal investigation shall be, how the respective information should be gathered and how complex the question of the applicability of the attorney–client privilege is under Swiss law today. We will focus on these three important topics.
When an internal investigation is about to be launched, it is highly recommendable to address a variety of questions to keep the investigation as efficient as possible. While the concept of an internal investigation is ultimately stemming from the United States and is, as such, not defined in Swiss law, over the past five or more years, a variety of best practice standards, soft law regulation and also some case law has addressed the topic in Switzerland. Before deciding, among other things, who shall be tasked with the investigation and, in the continuance of the investigation, determining the project structure (establishment of a steering committee or project board), the investigated entity is well advised to make clear the primary and key objectives of an internal investigation. These are (unless an internal investigation is imposed on a company by a regulator) usually dependent on whether a misconduct occurred or whether there is a suspicion of a misconduct (such as the determination of an AML scheme or the identification of fraud-related issues), or whether information needs to be gathered for litigation or claims (eg, against an insurance company). As a rule, the following first steps prove to be useful:
- the gathering of information of the background of an occurrence (subject matter, jurisdictions involved, individuals or entities involved);
- an urgent, yet thorough and comprehensive, assessment of the next steps following an occurrence;
- document and evidence preservation measures and data protection instruments;
- assessment of potential IA or other technical tools (which have seen a tremendous development over the past (approximately) three years) in support of the forthcoming investigation;
- a written schedule on the foregoing and further action (mandate and task, reporting lines, information of other stakeholders (board of directors), media and communication concept, work product); and
- determination of measures for the future avoidance of similar occurrences (business continuation) and minimisation of reputational exposure.
Data protection regulation and gathering of evidence
Internal investigations in Switzerland must take into consideration Swiss (business) secrecy and data protection regulations. Since May 2018, the European GDPR regulation has been a further major impact. The relevant data protection provisions are set forth in a variety of laws and regulations, and sometimes also foreign laws that may apply (such as the GDPR). They must be strictly observed when conducting an internal investigation, which regularly entails very complex legal questions, in particular in cross-border matters, so as not to render the investigation entity and its management subject to considerable risks and perhaps even rendering the findings non-admissible in court.
The gathering of evidence in the frame of an internal investigation is, as a rule, twofold: (i) document preservation, collection and review in the first instance, followed by (ii) the conduct of employee interviews. While, in particular, document preservation, collection and reviews are increasingly and heavily supported, if not almost entirely conducted, by technical means such as AI-supported specialised document analysis and review software, employee interviews should be held by specialised experts that, in Switzerland, as a rule will be external lawyers familiar with the conduct of such interviews (and their respective pitfalls).
Document preservation, collection and review
The documents possibly relevant for fact-finding in the frame of an internal investigation are myriad. For example, the Email Statistics Report 2018–2022 of the Radicati Group Inc states that, despite social media and instant messaging, email ‘remains the most pervasive form of communication’. According to the report’s executive summary, in 2018, the total of business and consumer emails sent and received per day was expected to exceed 281 billion (and forecast to grow to over 333 billion by 2022). It is therefore likely that in mid-size to major internal investigations, millions of documents are to be retained, collected, clustered and reviewed. While the number documents to be assessed is ever-increasing, the evolution of the capabilities of supportive IT solutions to bear with the load of data over the past years is evenly impressive. It is therefore highly recommended to bring in IT experts familiar with current IT capabilities at an early stage of every complex internal investigation.
Following the conduct of the document preservation, collection, clustering and review, the information gathered from such undertaking may be used for the conduct of witness interviews, be it to remedy inconsistencies resulting from the review, further investigate crucial findings or confront employees with potential wrongdoing. In our experience, very often such witnesses will be employees and former employees of the entity performing the internal investigation. According to the Report to the Nations 2018 of the Association of Fraud Examiners, ACFE, occupational fraud (ie, fraud committed by company-internal resources, ‘is likely the largest and most prevalent threat’ among the various kinds of fraud that organisations might be faced with. Consequently, it seems likely that employees will not only be the most important witnesses to approach when conducting interviews, but also likely suspects. This seems to be even more true when taking into consideration that, according to the aforementioned report, tips are ‘by far the most common initial detection method’ and that employees ‘provide over half of the tips’.
When conducting employee interviews, in a nutshell, the following should be considered:
- the general reluctance of employees to attend interviews because of the threat of disciplinary sanctions;
- the employee’s duty to participate in interviews and provide truthful and complete information, however limited, to employment-related matters, the employer’s duty to safeguard the employee’s personal rights, and the nemo tenetur concept (however, the latter exception is disputed among scholars);
- in cross-border internal investigations, the observance of article 271 of the Swiss Criminal Code;
- although this is mostly soft law and best practice, the application of common interview standards (introduction, description of background and representation, nemo tenetur rule, etc); and
- drafting a report on interview findings as work product and deciding whether the interview should be minuted or not.
It should be established at the very beginning of an investigation whether the company wishes the investigation results to be subject to Swiss attorney–client privilege. Such protection has been somewhat confined by recent decisions of the Federal Supreme Court of September 2016 and of March 2018; however, if an investigation is set up properly, a company can still benefit from the attorney–client privilege being applicable.
Attorney–client privilege is governed by article 13 of the Swiss Federal Act on Attorneys (an attorney licensed to practise in Switzerland must keep confidential all information entrusted to him or her by a client; breaches lead to professional sanctions), by the contractual obligations of the attorney and by article 321 of the Swiss Criminal Code (breach of professional secrecy renders the attorney subject to a monetary penalty or a custodial sentence of up to three years). Furthermore, according to Swiss procedural laws governing civil, criminal and administrative proceedings, a party to proceedings has the right to refuse to produce attorney–client correspondence, provided the correspondence relates to the attorney’s typical professional activity (ie, legal advice and legal representation). Please note that in-house counsels cannot claim professional secrecy rights and the said procedural privileges do not apply to correspondence of the management with its in-house counsel.
Therefore, for the results and findings of an internal investigation to be protected by attorney–client privilege, the investigation should first be headed by a Swiss attorney organising and supervising the investigation and supporting it by providing legal advice. If that is the case, that attorney may, for example, employ as support an auditing firm or other support staff and the work products of that support staff will also fall under the attorney–client privilege.
Such protection has been somewhat confined by the decision of the Federal Supreme Court of September 2016 relating to a case of insufficient observance of AML duties by the sanctioned financial institution. In summary, the Federal Supreme Court upheld the unsealing of attorney work products stemming from an outside legal counsel-led internal investigation upon request by the Federal Prosecutor with the reasoning that certain aspects of outside counsel’s work went far beyond regular legal advice – that is, it was deemed an assignment of extensive fact-finding exercises to external counsel that the entity itself or service providers not being attorneys would have been capable of collecting. In short, the court held that the findings were not ‘the attorney’s typical professional activity, i.e. legal advice and legal representation’. However, the final investigation report (containing not only a legal assessment of the facts but also the facts established by the investigation) will continue to be subject to Swiss legal privilege, and both the Appeals Chamber of the Swiss Federal Criminal Court (in 2017) and the Swiss Federal Supreme Court in further decisions rendered in 2016 and 2017 clarified the criteria to determine when the privilege applies. In particular, the courts stressed that a waiver should not be granted lightly.
However, if the internal legal department of a company is charged with rendering the report, the findings of the internal investigation will not be subject to attorney–client privilege, regardless of whether the legal department employs fully qualified attorneys or not. Thus, in cases where confidentiality is a key issue for the investigated entity, in order to establish privilege (and to make sure the investigation is made free of any conflicts of interest), we would recommend to have outside legal counsel lead the internal investigation. Finally, any correspondence between a Swiss company and attorneys only licensed to practise in a country outside the EFTA or the European Union is not considered to be privileged by the Swiss Competition Commission. As US courts tend to grant legal privilege to correspondence and documents held with foreign companies only when such documents enjoy legal privilege in the country where they are located, this may also lead to the loss of legal privilege of such documents in US proceedings and the US court will ask the company to deliver those documents.
Therefore, any Swiss internal investigation or international internal investigation with a Swiss angle needs to carefully assess at the outset the requirement for confidentiality and the scope of the legal privilege under available Swiss law and structure the investigation accordingly.