Building a misconduct reporting process: what should happen after a complaint?

‍Australian workplace law distinguishes misconduct from serious misconduct according to the nature and severity of the behaviour. Fair Work guidance treats unacceptable workplace behaviour and failures to follow workplace policies, rules or procedures as conduct issues. Serious misconduct has a higher threshold: it includes wilful or deliberate behaviour inconsistent with continued employment, or conduct creating a serious and imminent risk to a person's health or safety or to the employer's reputation, viability or profitability. Examples under the Fair Work Regulations include theft, fraud, assault, sexual harassment and refusing a lawful and reasonable instruction.

When a report of possible workplace misconduct reaches your organisation, your first job is to establish a robust process for dealing with it.

You may eventually need an investigation. You may also discover that the information supplied does not support an allegation at all. What matters from the outset is that you can show what was reported, what enquiries you made, who made each decision and why.

That requires a formal reporting process and a reliable case record from the moment information is received.

Acknowledge the report

Confirm receipt promptly and explain what happens next.

The acknowledgement should identify that there will be an initial assessment, when the reporter can expect further contact and how confidentiality will be managed. You should also give them a route for raising concerns about safety or retaliation.

Avoid describing the report as a proven complaint or allegation at this stage. You have received information that needs to be assessed.

Where somebody has reported anonymously, your reporting system should allow you to continue communicating with them without requiring their identity. Secure two-way communication is particularly useful when the original report leaves factual gaps. You can of course explain limitations as part of this exercise as well. 

Assess immediate risks

Before deciding whether an investigation is required, consider whether you need to take immediate action.

Could relevant records be deleted? Could witnesses be influenced? Is somebody at risk of harm or retaliation? Does the subject of the report have access to systems or information that could affect subsequent enquiries?

You may need to preserve records, alter reporting arrangements or restrict access to particular information. More significant interim action may sometimes be justified, although any decision should be proportionate to the risk identified.

Document the assessment and your reasoning. If the organisation is later challenged on its response, you should be able to show what risks were considered and why particular measures were taken.

Decide what skills and experience are needed for this particular complaint

The person who normally manages employee complaints will not necessarily be the right person for every report.

Consider the subject matter, the seniority of the people involved and the expertise needed to assess the information properly. A payroll concern may require employment relations and remuneration expertise. Suspected fraud could require forensic accounting skills. Harassment allegations may require an investigator experienced in sensitive workplace interviews.

Seniority creates a particular problem.

If a report concerns a chief executive, director or another senior employee, asking somebody within their management structure to assess it can create an obvious conflict. The same applies where your internal HR, legal or compliance team works closely with the person concerned.

This is where you should consider appointing an independent expert, such as a lawyer or factual investigator. External handling can give you an independent route for receiving information, conducting enquiries and deciding whether the matter should proceed to a formal investigation.

The decision to keep a case internal or outsource it should itself form part of the record. You should be able to demonstrate that the person handling the report had the independence and expertise appropriate to the case.

Clarify the report

Someone who submits a report is not necessarily making an allegation.

They may be passing on something they observed. They may have received information from another employee. They may suspect wrongdoing without having enough information to say that a particular person committed it.

Treating every initial report as a formal allegation can distort the process before you understand what happened.

Start with further enquiries. Ask what the reporter saw or heard directly, when events occurred, who else may have relevant information and whether documents or other evidence exist. Gather enough information to understand what the report actually concerns.

Keep these enquiries documented and neutral.

Once you have gathered sufficient information, decide whether there is a specific allegation that should be formally investigated. If there is, record the allegation clearly, define its scope and identify the policy, obligation or expected standard of conduct that may have been breached.

That distinction gives you a cleaner workplace misconduct process. You can show how raw information became an allegation rather than retrospectively treating the first report as if it contained conclusions it never made.

Preserve relevant evidence

Once relevant evidence has been identified, secure it.

Depending on the case, this could include emails, messages, access logs, expenses, meeting records, documents or CCTV. Routine deletion processes may need to be suspended for relevant material.

Record when evidence was collected, where it came from and who handled it. Keep it linked to the case rather than spread between individual inboxes, shared drives and personal notes.

You also need to avoid collecting information simply because it is available. Evidence gathering should remain connected to the matters you are assessing.

A secure reporting system can help from the beginning by allowing reporters to submit documents with their report and keeping subsequent material connected to the same case.

Appoint the right investigator or legal representative

If your initial enquiries result in a formal allegation, decide who should investigate it; in some instances, this may require a legal representative on both sides..

The investigator needs the appropriate expertise and enough independence to make objective findings. Check for relationships with the people involved, previous involvement in the events and reporting lines that could create a conflict.

For senior or sensitive cases, an external investigator or legal advisor can provide additional separation from internal management.

The investigator's role is to establish the facts. They should consider evidence that supports and challenges each allegation and record any limitations that affect their findings.

Keep the parties informed

Communication should continue throughout the case.

The person who raised the report should know that it is being dealt with and receive appropriate updates. The subject of a formal allegation should receive enough information to understand and respond to it fairly, subject to legitimate evidence-preservation, confidentiality and safety considerations.

If the process is delayed, record why and provide an appropriate update.

These communications are part of your case evidence. A later review of your response should show when people were contacted, what they were told and how concerns such as retaliation were managed.

Record the investigation and decision

A final investigation report should clearly connect the allegation, evidence, factual findings and any limitations on the investigation.

The decision-maker can then determine the appropriate next step. That could include no further action, additional enquiries, management action or a formal disciplinary process.

Keep the investigation finding separate from any subsequent employment decision. A finding that conduct occurred does not automatically determine the disciplinary outcome.

The same discipline applies to communication. The reporter can usually be told that the matter has been addressed, although privacy obligations may restrict what you can disclose about action taken against another employee.

Keep one complete case record

This is where many otherwise reasonable processes become difficult to defend.

Evidence sits in one inbox. Interview notes sit in another folder. Somebody records a decision in a spreadsheet while an important conversation remains in Teams or email. Six months later, reconstructing what the organisation knew and when becomes unnecessarily difficult.

Veremark's independent reporting channel gives you one encrypted place to manage reports, evidence, communication, enquiries and outcomes.

You can receive anonymous reports, communicate with reporters through a secure two-way message board and maintain the follow-up record against the original submission. The platform also provides board-ready reporting, giving senior decision-makers visibility of cases and trends without relying on manual case summaries.

The purpose is practical: you need evidence that your workplace misconduct process actually operated as intended.

Review what the case tells the organisation

Closing an individual case should not close your assessment of the underlying risk.

One report may identify a wider control failure. Several reports concerning the same manager, function or location may reveal a pattern that would be invisible if each case were stored separately.

Our guidance on complaint management and resolution explains how a structured case process can turn individual reports into useful management information.

Boards should have appropriate visibility of serious matters, overdue cases and recurring themes. They should also be able to see whether reports involving senior people were handled independently.

That is part of making a whistleblower policy defensible. A policy has limited value if you cannot demonstrate what happened after somebody used it.

Make the reporting process provable

A formal process gives you consistency. A reliable evidence trail gives you accountability.

For each report, you should be able to show what information was received, what immediate risks were assessed, what further enquiries were made, why an allegation was or was not established, who investigated it and how the final decision was reached.

Veremark gives you the platform to maintain that record from initial report through to resolution and board reporting.

When a serious workplace misconduct issue is questioned months or years later, that record is what allows you to demonstrate that the organisation responded properly.