Investigations Integrity

Why Process Discipline and Evidence Chain of Custody Determine Organisational Liability

Internal investigations are routine. Evidence contamination, however, carries consequences that extend far beyond the original misconduct. A single procedural misstep, mishandled documentation, broken chain of custody, shortcuts in evidence collection, or failure to afford natural justice, can render months of investigation legally indefensible and expose the organisation to liability that eclipses the original breach.

Introduction

Organisations routinely conduct internal investigations into fraud, misconduct, and policy violations. The assumption is that process and rigour will follow as a matter of course. In practice, they often do not. The gap between the perception of procedural discipline and its actual execution is where governance risk concentrates.

The Australian Government Investigations Standard (AGIS) 2022, developed by the Attorney-General’s Department in conjunction with the Australian Federal Police, establishes the framework against which investigative quality is measured. AGIS applies to Australian Government entities, but the principles it enshrines, evidence preservation, chain of custody discipline, natural justice, and documented decision-making, reflect universal standards of investigative integrity that courts, tribunals, and regulators now expect across all organisations when investigations carry employment, disciplinary, or legal consequences.

The cost of procedural failure is substantial and takes multiple forms. Findings that cannot survive legal challenge undermine the organisation's position entirely. Evidence rendered inadmissible due to contamination or improper handling removes the factual foundation upon which decisions rest. Wrongful dismissal claims expose the organisation to compensation liability that frequently exceeds the cost of conducting the investigation properly in the first instance. Regulatory scrutiny of the investigation process itself compounds reputational and legal risk. Organisations that take shortcuts during investigations routinely discover that those shortcuts, not the original misconduct, become the primary source of liability.

The Problem: Procedural Integrity as Governance Discipline

Three specific failures characterise investigations that do not withstand scrutiny.

Failure One: Evidence Contamination and Chain of Custody Breakdown

AGIS 2022 explicitly requires that entities maintain chain of custody discipline across all investigation stages, including the recording of property and seizures as evidence, chain of custody documentation, and disposal of evidence. Chain of custody refers to the chronological documentation that records the sequence of custody, control, transfer, analysis, and disposition of physical or electronic evidence, establishing a clear and unbroken timeline of who handled the evidence, when, and under what conditions.

When chain of custody is undocumented, evidence integrity cannot be demonstrated. A document seized during a workplace investigation, an email, a financial record, a digital file, must have continuity from point of collection through examination and preservation. If that chain is broken, the evidence cannot be relied upon. More critically, if the matter proceeds to a court or tribunal, evidence that has not been properly handled may be ruled inadmissible or its probative weight so diminished as to be operationally useless.

Under Australian evidence law, courts may exclude improperly obtained or contaminated evidence entirely, or may significantly discount its weight in determining facts. The Evidence Act 1995 (Cth) provides courts with broad discretion to exclude evidence where its admission would be unfairly prejudicial or where it was obtained in circumstances that undermine its reliability.

Failure Two: Denial of Procedural Fairness

Procedural fairness, also known as natural justice, requires that a person subject to an investigation be given a fair and reasonable opportunity to know the allegations against them and to respond before any adverse decision is made. This principle is foundational to Australian administrative and employment law and is explicitly embedded in the obligations of investigating entities under AGIS 2022.

The Fair Work Commission has consistently found that investigations which deny procedural fairness, whether through failure to interview relevant witnesses, inadequate opportunity for the subject to respond, or decision-makers who fail to critically assess investigation findings, undermine the integrity of the investigation itself and render subsequent disciplinary decisions vulnerable to challenge.

In documented Fair Work Commission decisions, investigations have been found procedurally defective where:

• The investigator failed to interview the person subject to the investigation before making findings
• The person was not provided with investigation findings before disciplinary action was taken
• Relevant witnesses were not interviewed, preventing a complete factual picture from being established
• The decision-maker failed to critically review the investigation report and form their own independent conclusion
• The timeframe provided for response was unreasonably compressed

Procedural fairness is not administrative inconvenience. It is the mechanism by which organisations demonstrate that investigations were conducted objectively and that decisions reflect genuine deliberation rather than predetermined outcomes.

Failure Three: Inadequate Documentation and Decision-Making Rigour

AGIS 2022 requires that all investigative activity be recorded, encompassing decisions made, activities undertaken, conversations held, correspondence exchanged, and meetings conducted. This requirement is not bureaucratic excess. Documentation creates an auditable record that demonstrates process discipline and provides the evidentiary foundation for defending investigation decisions if they are later challenged.

Organisations frequently fail at this point. Investigators conduct interviews without contemporaneous documentation. Findings are reached without clear articulation of the evidence that supports them. Decision makers accept investigation reports without independent critical review or documented reasoning. When challenged, the organisation cannot reconstruct how conclusions were reached or what evidence supported them. The absence of contemporaneous documentation is consistently read by courts and tribunals as an absence of process discipline.

The Case: When Procedural Failure Becomes Organisational Liability

The risks of procedurally deficient investigations are well illustrated by documented Fair Work Commission decisions. In cases involving TAFE NSW, the Commission found that prolonged investigations, failure to interview the persons subject to the allegations, and inadequate information and support provided to the subjects during the investigation, deprived those individuals of a real opportunity to respond to the allegations. The Commission found that the integrity of the investigation report was undermined and procedural fairness was not afforded, rendering the subsequent dismissals harsh, unjust, or unreasonable.

A further pattern identified across Fair Work Commission decisions involves investigations conducted by persons without relevant investigative experience or expertise. In one documented instance, a worker was terminated for serious misconduct following an investigation conducted by a person who had never undertaken an investigation before and lacked the experience to assess conflicting witness accounts. The resulting findings were challenged and the termination overturned.

These cases illustrate a consistent pattern. The misconduct that prompted the investigation may have been real and serious. However, procedural failures during the investigation itself, denial of natural justice, inadequate witness engagement, absence of documented reasoning, created liability that eclipsed the original conduct. The investigation, designed to protect the organisation, became the source of its exposure.

The Solution: AGIS-Aligned Investigative Practice

AGIS 2022 establishes clear standards for investigation governance. Organisations that structure investigations around these standards position themselves to produce defensible findings and withstand legal challenge. Four pillars are central:

Pillar One: Governance and Accountability

Investigation responsibility must be assigned to a person with documented competency in investigation methodology, evidence handling, and natural justice principles. AGIS 2022 specifies that investigators must have the competency appropriate to the complexity and sensitivity of the investigation. This role should not be delegated to junior or inexperienced staff.

Formal terms of reference must be established before the investigation commences. These should document the scope of the allegations under investigation, the authority of the investigator, the applicable timeframe, and the standard to which findings will be made (balance of probabilities for employment matters; beyond reasonable doubt for criminal referral). This documentation creates accountability from the outset.

Pillar Two: Evidence Collection and Preservation

Chain of custody discipline must be implemented from the moment evidence is collected. Each item of evidence, documents, emails, digital files, physical items,  must be identified, labelled, and recorded at point of collection. Documentation must capture who collected the evidence, when, from where, and under what conditions. As the evidence moves through examination and analysis, each person who handles it and the actions they take must be recorded.

For digital evidence specifically, AGIS 2022 requires that investigative case management systems support chain of custody recording, including the recording of property as evidence and the documentation of disposal. The methodology used to preserve and examine digital evidence should be documented to demonstrate that the examination process did not alter the evidence.

Witness statements must be documented contemporaneously, either recorded with consent or detailed notes prepared immediately following the interview and, where practicable, confirmed by the witness. Reliance on memory or delayed documentation is not consistent with AGIS standards and creates avoidable evidentiary risk.

Pillar Three: Natural Justice and Procedural Fairness

The person subject to the allegations must be given a genuine opportunity to respond. This requires that they be provided with the specific allegations against them, the evidence or information that supports those allegations, and adequate time to prepare and deliver a response. A formal interview or written submission opportunity should be provided.

All relevant witnesses must be interviewed, not only those convenient to management or those whose accounts support a particular conclusion. The investigator’s duty is to establish facts objectively. Restricting witness access to produce a predetermined outcome is a procedural failure that courts and tribunals have consistently identified and penalised.

Pillar Four: Documentation and Decision Making Discipline

The entire investigation must be documented, decisions made, evidence examined, interviews conducted, findings reached, and the reasoning that connects evidence to conclusions. When the investigation is complete, the decision maker, the person who will make the disciplinary or governance decision, must independently review the investigation file, consider the evidence, and form their own conclusion. This review must be documented.

The decision maker should record their reasoning:

• what findings are accepted,
• what weight is given to different evidence,
• what decision is being made, and on what basis.



This documentation serves two purposes. It protects the organisation by demonstrating process rigour if the decision is later challenged. It also prevents organisations from accepting investigation conclusions on face value without the scrutiny that defensible decisions require.

Conclusion

Investigations are an inevitable feature of organisational life. Process discipline determines whether those investigations protect organisations or create new liability. The Australian Government Investigations Standard 2022 provides a proven, documented framework built on principles of evidence integrity, chain of custody discipline, natural justice, and rigorous decision-making. These are not obligations confined to government entities. They represent the standard against which investigation conduct is increasingly measured across all sectors when investigations have employment, disciplinary, or legal consequences.

Boards should satisfy themselves that formal, documented investigation procedures, aligned to AGIS standards, are established and operational before an investigation becomes necessary. When investigations are underway, governance oversight should focus on procedural discipline:

• Has chain of custody been established and maintained?
• Has the person subject to the allegations been given a genuine opportunity to respond?
• Has the decision-maker independently reviewed the evidence and documented their reasoning?

These questions matter because investigations that fail procedurally create liability that the original misconduct rarely generates on its own.

Governance in Practice

Organisations seeking to strengthen investigative discipline can engage Khanterin Partners and its specialist advisors, professionals with a senior law enforcement background with the AFP, who bring specialist investigative and intelligence capability.

Khanterin Partners, working alongside these specialists, offers investigation process audits designed to assess whether existing investigation frameworks align with AGIS 2022 standards and natural justice principles. These audits examine investigation procedures, evidence handling protocols, chain of custody discipline, and decision-making governance. The outcome is a detailed assessment of procedural strengths and gaps, together with prioritised recommendations for remediation.

This approach allows organisations to build confidence in their investigative capability before investigations are needed and to identify procedural vulnerabilities while there is still time to address them.

References

Attorney-General’s Department (Cth), Australian Government Investigations Standards 2022 (AGD, October 2022) ('AGIS 2022').

Commonwealth Fraud Prevention Centre, 'Australian Government Investigations Standards' (Australian Government, 2022) <https://www.ag.gov.au/integrity/fraud-prevention/australian-government-investigations-standards>.

AGIS 2022 (n 1) s 6 (Property/Seizures — recording property as evidence, chain of custody, disposal of seizure).

Emutare, 'Digital Evidence Handling: Chain of Custody' (2024); see also NIH/StatPearls, 'Chain of Custody' (National Library of Medicine, 2024).

Evidence Act 1995 (Cth) s 138 (Exclusion of improperly or illegally obtained evidence).

Australian Law Reform Commission, 'Uniform Evidence Law' (ALRC Report 102, 2006).

National Anti-Corruption Commission, 'Procedural Fairness' (NACC, 2024) <https://www.nacc.gov.au>; Fair Work Commission, 'Other Relevant Matters — Procedural Fairness' (FWC, 2024).

Clayton Utz, 'Workplace Investigations Refresher Part 9: Procedural Fairness' (Clayton Utz, 2024).

AGIS 2022 (n 1) s 6 (Investigative Activity Recording — recording of decisions, activities, conversations, correspondence, and meetings).

HR Legal, 'When Workplace Investigations Go Wrong' (2024), citing Fair Work Commission decision involving TAFE NSW.

WorkLegal, 'Workplace Investigations Lawyers Australia' (2024) <https://www.worklegal.com.au>.

AGIS 2022 (n 1) s 6 (Information Capture and Management; Property/Seizures).