Conducting a Workplace Investigation: A Practical Checklist

Labor and Employment > HR Policies | Published 15 January 2024 - Updated 11 March 2025 | UpLaw - uplaw.us

A workplace complaint is a fork in the road. Handle it promptly, thoroughly, and fairly, and you have likely cured the problem and earned a defense. Handle it slowly, sloppily, or with a thumb on the scale, and you have manufactured the plaintiff's best exhibit.

Keywords: workplace investigation, harassment complaint, Faragher/Ellerth defense, prompt remedial action, Weingarten rights, NLRA Section 7, Stericycle, credibility findings, preponderance standard, investigation report, anti-retaliation, interim measures

---

How to use this checklist

A workplace investigation is not a trial, and it is not therapy. It is a structured factual inquiry that an employer runs to answer three questions: What, if anything, happened? Does it violate our policies or the law? And what should we do about it? Do it well and you protect the people involved, resolve the underlying problem, and generate the contemporaneous record that will decide any later lawsuit in your favor. Do it badly and you convert a manageable HR matter into punitive damages.

This document is organized into eight sequential phases, each with real check items and a short "Why it matters, and the traps" note. A running hypothetical, Cedar & Bloom (a fictional 140-employee home and garden retailer), threads the phases together: a sales associate has complained that her store manager has been making unwelcome comments and lingering too close. Use the consolidated checklist near the end as your one-glance field guide, and route to the deeper UpLaw resources linked throughout when a phase needs a full treatment. The policies that trigger and govern these investigations should already live in your handbook — see Building a Legally Sound Employee Handbook and Drafting an Employee Handbook That Holds Up: A Practical Checklist — and this checklist assumes you have one.

---

Phase 1 — Why the investigation matters: the Faragher/Ellerth affirmative defense

• [ ] Understand that a prompt, adequate investigation is not optional courtesy — it is a legal defense with dollars attached.
• [ ] Confirm the conduct category (harassment, discrimination, retaliation, safety, theft, policy violation) because the legal stakes differ.
• [ ] For supervisor harassment claims, identify whether a "tangible employment action" (firing, demotion, pay cut) occurred — that determines whether any defense is even available.
• [ ] Treat every complaint as if it will be read aloud to a jury.

Why it matters, and the traps. Under Faragher v. City of Boca Raton, 524 U.S. 775 (1998), and Burlington Industries, Inc. v. Ellerth, 524 U.S. 742 (1998), an employer is vicariously liable when a supervisor's harassment culminates in a tangible employment action. But where the harassment created a hostile environment without a tangible action, the employer can escape liability by proving a two-part affirmative defense: (1) it exercised reasonable care to prevent and promptly correct the harassing behavior, and (2) the employee unreasonably failed to use the employer's complaint procedure. The investigation is the beating heart of prong one. A good policy plus a prompt, thorough, well-documented investigation and effective remedial action is what "reasonable care to correct" looks like in practice. Skip it or botch it and the defense collapses, exposing the employer to compensatory and punitive damages under Title VII, 42 U.S.C. § 2000e et seq. For what those numbers look like, see Damages in Employment Litigation: Back Pay, Statutory Caps, and Punitive Awards.

The trap is treating the defense as automatic. Courts scrutinize whether the response was actually reasonable and prompt, not whether the employer merely went through motions. A three-week delay, a "friend of the accused" as investigator, or a foreordained conclusion all pierce the defense. Note too that the same rigor protects against age and pregnancy claims — see Age Discrimination Law: A Worker's and Employer's Overview and Pregnancy Discrimination and Accommodation After the PWFA.

Cedar & Bloom. The associate, Priya, tells an assistant manager about the manager's comments. Because no one has fired or demoted Priya, no tangible employment action has occurred — the Faragher/Ellerth defense is on the table. Whether Cedar & Bloom keeps it depends entirely on what happens next.

---

Phase 2 — Intake and triage: assessing the complaint and interim measures

• [ ] Log the complaint immediately: date received, who reported, to whom, and the substance in the complainant's own words.
• [ ] Assess urgency and safety — is there a threat of violence, self-harm, evidence destruction, or ongoing harm?
• [ ] Decide whether interim measures are needed now (schedule changes, reassignment, remote work, a no-contact directive) and impose them without punishing the complainant.
• [ ] Confirm the complaint states a potential policy or legal violation that warrants investigation (not every grievance does).
• [ ] Check external reporting deadlines — an EEOC charge, an internal SLA, a collective-bargaining grievance clock.
• [ ] Preserve relevant evidence at once with a litigation-hold instinct (see Phase 6).

Why it matters, and the traps. Promptness is judged from the moment the employer knew or should have known. The intake clock starts when any management-level employee learns of the conduct, not when the complaint reaches HR's inbox a week later. Interim measures are the delicate part: you must protect the complainant without imposing a de facto punishment that itself becomes an adverse action. Moving the complainant to a worse shift or a distant store while leaving the accused untouched can be retaliation. Where separation is needed, prefer moving or adjusting the accused, or offer the complainant a genuinely neutral or preferred option and document that it was voluntary.

The classic triage traps are (1) prejudging severity — dismissing "he just compliments people" without inquiry; (2) letting the accused's seniority slow the response; and (3) failing to preserve evidence during the "we're still deciding whether to investigate" limbo, by which time text threads and camera footage are gone.

Cedar & Bloom. HR imposes an interim no-contact directive and quietly shifts the manager's floor coverage so he and Priya are not scheduled alone together — leaving Priya's shifts, pay, and station untouched. HR sends an evidence-preservation note to IT the same afternoon. Total elapsed time from report to interim measures: under 24 hours.

---

Phase 3 — Choosing an investigator and defining scope; privilege considerations

• [ ] Select an investigator who is impartial, competent, and has no stake in the outcome or reporting line to the accused.
• [ ] For high-stakes or executive-level matters, consider outside counsel or a professional investigator.
• [ ] If you use a third-party investigator, comply with the Fair Credit Reporting Act, 15 U.S.C. § 1681, as amended — misconduct investigations are exempt from the notice/consent rules, but adverse-action disclosure rules can still apply.
• [ ] Define the scope in writing: the specific allegations, the policies at issue, the time period, and the individuals to interview.
• [ ] Decide up front whether the investigation is being conducted for legal advice (potentially privileged) or as a routine business function (generally not privileged) — and act consistently with that choice.
• [ ] Give the investigator authority, access, and a realistic timeline.

Why it matters, and the traps. Impartiality is the attribute plaintiffs attack first. An investigator who reports to the accused, is friends with the accused, or has already voiced an opinion cannot deliver a defensible result. Competence matters too: the investigator must know how to interview, weigh credibility, and write. Scope discipline keeps the inquiry focused and prevents "investigation creep" that never ends and never remediates.

Privilege is a genuinely hard, often-misunderstood area. An investigation conducted in the ordinary course of business to comply with anti-harassment obligations is generally not privileged — and if the employer intends to rely on the adequacy of the investigation to prove its Faragher/Ellerth defense, it will typically waive privilege over the investigation anyway. Do not slap "Attorney-Client Privileged" on every page and assume protection; label reflexively and you may mislead your own people while gaining nothing. Decide the purpose deliberately. The FCRA wrinkle catches employers who hire an outside firm and forget that the statute reaches "investigative consumer reports"; the 2003 FACT Act amendments (codified at 15 U.S.C. § 1681a(y)) carve out workplace-misconduct investigations from the up-front consent requirement, but you should still confirm current compliance before engaging a vendor.

Cedar & Bloom. Because the accused is a store manager, the district HR business partner — two levels removed and in a different reporting chain — runs the investigation, with a short written scope: the specific comments and physical-proximity allegations from the past six months, measured against the anti-harassment policy. The company decides this is a routine business investigation it may need to disclose, and does not route it through counsel for privilege.

---

Phase 4 — Confidentiality, and its NLRA Section 7 limits after Stericycle

• [ ] Ask for discretion, but do not issue a blanket, indefinite gag order on all participants.
• [ ] Tailor any confidentiality request to the specific investigation and its legitimate needs (protecting evidence, witnesses, and integrity).
• [ ] Make confidentiality time-limited where possible — e.g., "while the investigation is ongoing."
• [ ] Never tell employees they may not discuss the matter, their own working conditions, or the underlying conduct with coworkers, a union, or outside agencies.
• [ ] Expressly preserve employees' right to file charges with the EEOC, NLRB, or other agencies.

Why it matters, and the traps. Confidentiality protects witnesses and prevents story-shaping, but it collides with Section 7 of the National Labor Relations Act, 29 U.S.C. § 157, which protects employees' right to engage in "concerted activities" — including discussing wages, hours, and working conditions (harassment very much included) with one another. In Stericycle, Inc., 372 NLRB No. 113 (2023), the NLRB adopted a stricter standard: a work rule is presumptively unlawful if a reasonable employee could interpret it to chill Section 7 activity, and the employer must prove the rule advances a legitimate interest that cannot be achieved by a narrower rule. A blanket "do not discuss this investigation with anyone" instruction is exactly the kind of overbroad rule Stericycle targets.

Note the tension with EEOC guidance, which encourages confidentiality to protect investigation integrity. The reconciliation is tailoring: request confidentiality for legitimate, articulated reasons, limited in scope and time, applied case by case rather than as a standing blanket rule. The trap is the reflexive script — "everything said here is confidential and you may not discuss it with anyone" — which is now a labor-law liability, and applies to non-union workplaces too, because Section 7 rights are not limited to unionized employees.

Cedar & Bloom. The investigator tells each witness: "Please keep what we discuss confidential while the investigation is ongoing, so we can gather everyone's independent account and protect the people involved. You remain free to talk about your own working conditions, and nothing here limits your right to contact the EEOC or NLRB." That sentence, not a blanket gag, is the compliant version.

---

Phase 5 — Interview sequence and technique (complainant, respondent, witnesses; Weingarten rights)

• [ ] Interview the complainant first: get the full narrative, specifics (who, what, when, where, how often), witnesses, and documents; ask what outcome they seek.
• [ ] Identify and interview witnesses early enough that memories are fresh but strategically enough to test both accounts.
• [ ] Interview the respondent with fair notice of the allegations and a genuine opportunity to respond, explain, and identify their own witnesses and evidence.
• [ ] Honor Weingarten rights: in a unionized workplace, an employee who reasonably believes an interview may lead to discipline is entitled to a union representative if requested.
• [ ] Ask open-ended, non-leading questions; separate what a witness personally observed from what they heard secondhand.
• [ ] Take detailed contemporaneous notes; have witnesses review and, where practical, adopt their statements.
• [ ] Re-interview as needed to resolve conflicts and follow new leads.

Why it matters, and the traps. Sequence is strategy. Starting with the complainant defines the scope and identifies evidence; interviewing the respondent before you understand the allegations wastes the one clean shot at their unrehearsed account. Give the respondent real due process — fair notice and a chance to respond — because a lopsided process is both unfair and legally fragile. Under NLRB v. J. Weingarten, Inc., 420 U.S. 251 (1975), a unionized employee compelled to an investigatory interview they reasonably believe could result in discipline may request a union representative; the employer can then proceed with the representative present, offer the employee the choice of continuing without one, or forgo the interview — but it cannot deny a valid request and press on. Weingarten does not, under current Board law, extend to non-union private-sector workplaces, and the complainant and pure fact-witnesses generally are not entitled to it because they do not face discipline.

The technique traps are legion: leading questions ("He grabbed you, right?") that taint the record; failing to lock down specifics that make credibility assessable; promising the complainant an outcome you cannot guarantee; and interviewing the accused so aggressively that the session reads as a pre-decided ambush. Keep notes clean, factual, and free of editorializing — they are discoverable.

Cedar & Bloom. The investigator interviews Priya (detailed dates, two coworkers who saw the manager stand uncomfortably close, and a group-chat screenshot), then the two coworker witnesses, then the manager — who is told the specific allegations and given a full chance to respond. Cedar & Bloom is non-union, so Weingarten does not apply, but the investigator still offers the manager the chance to submit a written statement and name his own witnesses. He denies the comments and offers an alternative explanation for the proximity; the investigator follows up on it rather than dismissing it.

---

Phase 6 — Gathering and preserving documents, messages, and physical evidence

• [ ] Issue or confirm a preservation hold covering emails, chat/Slack/Teams messages, texts, HR files, schedules, access logs, and relevant video.
• [ ] Collect the specific documentary evidence the interviews surface (the group chat, the shift records, prior complaints, performance history).
• [ ] Check for prior complaints or a pattern involving the same respondent — a known pattern raises the stakes and the notice date.
• [ ] Preserve metadata and chain of custody; avoid altering originals.
• [ ] Respect privacy and monitoring limits — access company systems and lawfully obtainable data, not an employee's private accounts or recordings made in violation of law.
• [ ] Document what you looked for and what you found, including exculpatory material.

Why it matters, and the traps. Documents corroborate or contradict what people say, and they do not forget. The failure to preserve is a two-front risk: you lose the evidence that would have vindicated your findings, and you invite a spoliation inference if litigation follows. Treat the preservation instinct as reflexive — the same discipline UpLaw covers for litigation, applied earlier; if litigation is reasonably anticipated, formalize it exactly as you would a lawsuit hold, and see Issuing a Litigation Hold and Preserving ESI: A Practical Checklist. Pattern evidence is especially potent: a prior complaint about the same manager both strengthens the current finding and moves up the date the employer "should have known," which is why concealing or ignoring earlier reports is so damaging.

Traps include collecting only inculpatory evidence (which makes the investigation look like a prosecution), overreaching into private accounts or unlawful recordings, and losing ephemeral data — camera footage that overwrites in 14 days, chat logs on default deletion. If the matter touches departing-employee data or confidential information, coordinate with your trade-secret protocols; see Protecting Trade Secrets When Employees Leave: A Practical Checklist.

Cedar & Bloom. IT preserves the store's scheduling records and the point-of-sale camera footage before it overwrites. HR pulls the manager's personnel file and finds an informal comment from a former associate eight months earlier that was never investigated — a pattern signal that raises both the credibility calculus and the urgency.

---

Phase 7 — Reaching findings: preponderance standard, credibility, and the written report

• [ ] Apply the preponderance of the evidence standard: is it more likely than not that the conduct occurred? (Not "beyond a reasonable doubt.")
• [ ] Make explicit credibility determinations where accounts conflict, grounded in stated factors, not gut feeling.
• [ ] Use recognized credibility factors: plausibility, internal consistency, corroboration, motive to lie, demeanor, and past record.
• [ ] Reach a conclusion — investigations that end in a permanent "inconclusive" without genuine analysis fail the employer.
• [ ] Write a report that states the allegations, the process, the evidence, the credibility analysis, the findings, and the policy conclusion — and keep opinions on discipline separate.
• [ ] Have the decision-maker (not necessarily the investigator) determine remedial action based on the findings.

Why it matters, and the traps. The burden of proof in a workplace investigation is civil and modest: more likely than not. Employers who wrongly hold themselves to a criminal standard leave real misconduct unaddressed and forfeit the defense. When the evidence is "he said/she said," the investigator must actually weigh credibility rather than defaulting to "we can't tell." Anchor the assessment in articulable factors — Did one account stay consistent across retellings? Is it corroborated by the group chat and the schedule? Does one party have a motive to fabricate? Is there a prior pattern? A finding that recites these factors is defensible; "I just believed him" is not.

The report is the artifact that outlives everyone's memory. It should be factual, organized, and measured, resolving each allegation with a stated basis. Traps: editorializing, drawing legal conclusions the company is not qualified to make ("this constitutes actionable sexual harassment under Title VII" — usually better framed as a policy violation), burying the credibility analysis, and blending the finding with the discipline recommendation so a later reader cannot separate "what happened" from "what we did about it."

Cedar & Bloom. The investigator finds, by a preponderance, that the comments occurred: Priya's account was specific and consistent, two coworkers corroborated the proximity, the group chat captured one comment in writing, and the eight-month-old prior report established a pattern. The manager's denial was general and his alternative explanation did not fit the schedule records. The report concludes the manager violated the anti-harassment policy and routes the discipline decision to the VP of HR.

---

Phase 8 — Remediation, discipline, and anti-retaliation obligations

• [ ] Take remedial action reasonably calculated to stop the conduct and prevent recurrence — the standard is effectiveness, not a fixed penalty.
• [ ] Calibrate discipline to severity and consistency with how comparable conduct was treated.
• [ ] Communicate the outcome appropriately: tell the complainant that action was taken (even if you cannot disclose specifics) and confirm the conduct will not recur.
• [ ] Deliver an express anti-retaliation instruction to the respondent and their chain of command, and monitor for retaliation afterward.
• [ ] Consider whether policy, training, or structural changes are warranted beyond the individual.
• [ ] Document the remedial action and close the file; calendar a follow-up check-in with the complainant.

Why it matters, and the traps. Prong one of the Faragher/Ellerth defense requires prompt and effective corrective action. The remedy must be reasonably calculated to end the harassment; a wrist-slap that leaves the harasser in daily contact with the complainant does not satisfy the standard, and if the conduct recurs, the earlier "remedy" is Exhibit A that it was inadequate. Consistency matters too — disciplining this manager far more or less harshly than others who did comparable things invites a discrimination or pretext claim.

Retaliation is the single most dangerous post-investigation risk. Retaliation claims are among the most common and most successful precisely because they are easy to prove and often committed by managers who feel wrongly accused. Title VII protects employees who complain or participate in an investigation, and an adverse action shortly after protected activity is a plaintiff's dream. Instruct everyone in writing that retaliation is prohibited, monitor the complainant's treatment (shifts, assignments, reviews) for months afterward, and treat any downstream discipline of the complainant with extra scrutiny. For the money at stake if this goes wrong, revisit Damages in Employment Litigation: Back Pay, Statutory Caps, and Punitive Awards. And feed lessons back into your written policies via Building a Legally Sound Employee Handbook.

Cedar & Bloom. The VP issues a final written warning, transfers the manager to a different store, mandates anti-harassment training, and permanently removes him from any scheduling authority over Priya. HR tells Priya action was taken and the conduct will not recur, delivers a written no-retaliation directive to the manager and his new district head, and calendars 30-, 60-, and 90-day check-ins. The prior unaddressed report becomes a training case for the whole management team.

---

Common mistakes to avoid

• Delay. The clock runs from when management first knew. A prompt response is half the defense; a slow one forfeits it.
• The conflicted investigator. Anyone who reports to, is close to, or has prejudged the accused cannot deliver a defensible result.
• The blanket gag order. Post-Stericycle, a standing "don't discuss this with anyone" rule chills Section 7 rights — even in non-union workplaces. Tailor and time-limit instead.
• Punishing the complainant to "separate" the parties. Move or adjust the accused, or get a genuinely voluntary choice from the complainant.
• Interviewing the respondent first, or ambushing them. You lose the clean account and manufacture an unfairness argument.
• Holding the wrong burden of proof. It is preponderance, not "beyond a reasonable doubt." A criminal standard leaves real misconduct unaddressed.
• The eternal "inconclusive." Weigh credibility using stated factors and reach a conclusion.
• Failing to preserve evidence. Ephemeral chat logs and overwriting camera footage vanish during the "should we investigate" limbo.
• Ignoring prior complaints. A known pattern raises both the finding's strength and the employer's notice date.
• Inadequate remedy. Corrective action must actually stop the conduct, not merely register disapproval.
• Retaliation. The most common and most winnable follow-on claim. Instruct against it, then monitor for it.
• Over-labeling privilege. Reflexive "privileged" stamps neither create privilege nor survive a Faragher/Ellerth reliance waiver.

---

Consolidated one-glance checklist

Phase 1 — Stakes

• [ ] Identify conduct category and whether a tangible employment action occurred
• [ ] Recognize the investigation as the core of the Faragher/Ellerth defense

Phase 2 — Intake and triage

• [ ] Log the complaint verbatim; start the promptness clock from first management knowledge
• [ ] Assess safety; impose interim measures without punishing the complainant
• [ ] Trigger evidence preservation immediately

Phase 3 — Investigator and scope

• [ ] Select an impartial, competent investigator; consider outside counsel for high-stakes matters
• [ ] Confirm FCRA compliance for any third-party investigator
• [ ] Write the scope; decide the privilege posture deliberately

Phase 4 — Confidentiality

• [ ] Request tailored, time-limited confidentiality — never a blanket gag
• [ ] Expressly preserve EEOC/NLRB and Section 7 rights

Phase 5 — Interviews

• [ ] Complainant first, then witnesses, then respondent with fair notice
• [ ] Honor Weingarten in union settings; ask open-ended questions; take clean notes

Phase 6 — Evidence

• [ ] Hold and collect emails, chats, texts, schedules, logs, video
• [ ] Check for prior complaints/pattern; preserve exculpatory material

Phase 7 — Findings and report

• [ ] Apply preponderance; make factor-based credibility determinations; reach a conclusion
• [ ] Write a factual report separating findings from discipline

Phase 8 — Remediation

• [ ] Take effective corrective action; communicate outcome to complainant
• [ ] Issue anti-retaliation directive; monitor; feed lessons into policy

---

Primary authority

• Title VII of the Civil Rights Act of 1964, 42 U.S.C. § 2000e et seq. — the core federal prohibition on workplace discrimination, harassment, and retaliation.
• Faragher v. City of Boca Raton, 524 U.S. 775 (1998) — establishing employer vicarious liability for supervisor harassment and the affirmative defense.
• Burlington Industries, Inc. v. Ellerth, 524 U.S. 742 (1998) — companion case defining the tangible-employment-action line and the two-prong defense.
• National Labor Relations Act § 7, 29 U.S.C. § 157 — protected concerted activity, including discussion of working conditions.
• Stericycle, Inc., 372 NLRB No. 113 (2023) — the Board standard for facially neutral work rules; limits on investigation confidentiality directives.
• NLRB v. J. Weingarten, Inc., 420 U.S. 251 (1975) — union employees' right to representation in investigatory interviews that may lead to discipline.
• Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq. — notice and consumer-report rules applicable to third-party workplace investigators (with the misconduct-investigation carve-out).
• EEOC Enforcement Guidance on harassment and employer liability — the agency's expectations for prompt, thorough, impartial investigations and effective corrective action.

---

Related UpLaw Resources

Related Guides & Articles

• Building a Legally Sound Employee Handbook
• Age Discrimination Law: A Worker's and Employer's Overview
• Pregnancy Discrimination and Accommodation After the PWFA
• Damages in Employment Litigation: Back Pay, Statutory Caps, and Punitive Awards
• Maternity and Parental Leave Policies: Five Things Employers Should Know Before Drafting
• The Future of Non-Competes: FTC Rulemaking and the State-Law Patchwork

Related Checklists

• Drafting an Employee Handbook That Holds Up: A Practical Checklist
• Classifying Workers: Employee or Independent Contractor — A Practical Checklist
• Accommodating Pregnancy and Nursing Under the PWFA and PUMP Act: A Practical Checklist
• Protecting Trade Secrets When Employees Leave: A Practical Checklist
• Issuing a Litigation Hold and Preserving ESI: A Practical Checklist

Related Toolkits

• The Employment Law Toolkit: From Hiring to Separation

---

This checklist is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. Statutes, rules, and agency standards change, and employment law varies by jurisdiction; verify current requirements and consult qualified counsel before acting.