What this risk is, and why it matters
Badly-conducted internal investigations are a common amplifier of the very problems they were meant to contain. They create privilege-waiver exposure, retaliation claims, regulator findings of cover-up, and witness-credibility damage that compounds the underlying issue. The investigation itself becomes the second incident, and frequently the more expensive one. The most common failure is process design that prioritises speed over privilege protection.
Legal and regulatory framework
Lawyer-client privilege and work-product doctrine vary by jurisdiction. Recent case-law has narrowed privilege protection where investigations were not clearly under counsel direction. Regulator cooperation regimes (DOJ FCPA Corporate Enforcement Policy, equivalents) reward early disclosure and cooperation; the cost of mishandled investigations now includes loss of cooperation credit. Whistleblower-protection regimes catch retaliation against complainants and investigation participants.
Typical scenarios and impact
Documented outcomes include privilege-waiver findings forcing disclosure of investigation work-product to regulators and plaintiffs, retaliation-claim awards in the seven-figure range, loss of cooperation credit in DOJ settlements (raising criminal penalties materially), and reputational damage when investigation conduct reaches press coverage. Recent cases have produced personal-liability findings against in-house lawyers for investigation-handling failures.
Mitigation framework and when to engage an expert
Run investigations under external-counsel direction from intake. Maintain privilege-protection protocols with documented witness-warning scripts. Use independent investigators for any complaint involving senior officers or in-house counsel. Audit investigation quality post-closure. Engage external investigation counsel for any matter involving senior officers, regulator-disclosure exposure, or whistleblower-eligible disclosure; engage specialist investigation firms for complex evidence handling.