Sickness fraud investigations sit at the intersection of employment law, data protection, and investigatory regulation. An employer who commissions an investigation without understanding the legal framework within which it must operate risks gathering evidence that cannot be used, exposing themselves to claims by the employee, or conducting an investigation that produces findings only to have them excluded in tribunal proceedings because the process was flawed.
This article sets out the legal framework applicable to sickness fraud investigations in England and Wales. It is written for HR directors, in-house legal counsel, and managers who need to understand the constraints within which an investigation must be conducted to be legally sound. It should be read alongside specific legal advice in relation to any individual case.
UK Legal Framework
The legal framework applicable to sickness fraud investigations is a composite of several distinct legislative and regulatory regimes, each of which applies to a different aspect of the investigation. The most important are UK GDPR and the Data Protection Act 2018, the Human Rights Act 1998, the Investigatory Powers Act 2016, and the employment law framework under the Employment Rights Act 1996 and the Equality Act 2010.
These regimes do not prohibit sickness fraud investigations. They establish the conditions under which such investigations must be conducted to be lawful. An investigation that is proportionate to a genuine concern, that processes personal data on a lawful basis, that does not conduct surveillance in prohibited ways, and that respects the employee’s procedural rights in the disciplinary process that follows is both lawful and effective. An investigation that cuts corners on any of these requirements creates a vulnerability that an employment lawyer will identify and exploit.
Data Protection Considerations
The processing of personal data gathered in the course of a sickness fraud investigation must comply with UK GDPR. The key requirements are:
Lawful basis: processing must have a lawful basis. Legitimate interests is the basis most commonly applicable to employment investigations: the employer has a legitimate interest in investigating suspected fraud, that interest is proportionate to the intrusion involved, and it is not overridden by the employee’s own rights and interests. Where the investigation involves sensitive categories of personal data — health data is always sensitive — an additional condition under Schedule 1 of the Data Protection Act 2018 must be met. The most relevant conditions are employment law obligations and the prevention or detection of an unlawful act.
Data minimisation: only personal data that is necessary for the specific purpose of the investigation should be gathered. An investigation into sickness absence fraud should not gather data about the employee’s family, financial situation, or other personal matters unless those matters are directly relevant to the investigation’s specific concern.
Transparency: in most cases, the employer will have provided a general privacy notice to employees that covers data processing in the context of employment matters, including investigations. A specific transparency notice for a covert investigation is not appropriate during the covert phase, but the employee should be informed of the processing once the investigation becomes overt.
Retention: investigation data should be retained only for as long as is necessary for the purpose for which it was gathered, including any disciplinary proceedings and any subsequent tribunal claims. Specific retention periods should be established in the employer’s data retention policy.
Data Protection Impact Assessment: where the investigation involves significant intrusion into the employee’s private life — covert surveillance, for example — a DPIA should be conducted before the investigation begins.
Employment Law Issues
The employment law framework creates specific procedural requirements that apply throughout the investigation and the disciplinary process that follows. The most important are:
Equality Act 2010: where the employee’s absence is related to a disability, the employer’s duty to make reasonable adjustments applies and must be considered alongside any investigation findings. An investigation that establishes that an absence was not genuine in the specific sense alleged may still not support dismissal if the underlying condition is a disability and the employer has not fulfilled its adjustment obligations.
ACAS Code of Practice: the Code applies to any disciplinary process arising from an investigation, and tribunals will take unreasonable non-compliance into account in assessing any compensation award. The Code requires, in summary, that the employee be informed of the allegation in writing, given a genuine opportunity to respond, offered accompaniment at any formal hearing, and informed of their right to appeal.
Whistleblowing protections: if the employee has previously made a protected disclosure, any investigation and disciplinary action that coincides with that disclosure will be scrutinised for a potential detriment claim. This does not prevent a genuine investigation but requires that the employer can demonstrate that the investigation is based on an independent legitimate concern rather than on the disclosure.
Surveillance Regulations
Covert surveillance of an employee during a sickness investigation must comply with the applicable regulatory framework. The key points for employers and investigators are:
Public place surveillance: observation of an employee in a public place — a street, a public park, a shopping centre, a sports ground — does not require any authorisation and does not engage the most restrictive provisions of the Investigatory Powers Act 2016. The employee has a limited expectation of privacy in a public space.
Private place surveillance: observation that intrudes into a space where the employee has a reasonable expectation of privacy — their home, their car, a private social event — raises more significant legal concerns and requires specific justification.
Proportionality: the surveillance must be proportionate to the specific concern that has given rise to it. Blanket covert surveillance of an employee against whom there is no specific concern, or surveillance extended beyond the period and scope justified by the concern, is not proportionate and may give rise to claims.
ICO guidance: the Information Commissioner’s Office guidance on the use of monitoring in employment contexts is not legally binding but sets out the standard that is likely to be applied in any regulatory assessment or tribunal claim. Following the guidance is the most reliable way to ensure that the surveillance is conducted lawfully.
Admissibility of Evidence
Evidence gathered in a sickness fraud investigation is admissible in employment tribunal proceedings even if it was gathered through means that would not meet the standards of a criminal investigation. Employment tribunals are not bound by strict rules of evidence and will admit relevant evidence if it is probative. The question is not whether the evidence was gathered correctly in an absolute sense, but whether the manner of gathering it was so improper that admitting it would be unjust.
In practice, evidence gathered within the framework described in this article — by a professional investigator, in public places, with appropriate documentation, and in compliance with UK GDPR — will be admitted in virtually all cases. The tribunal will then assess the weight to be given to it, taking account of any procedural challenges the employee raises about the investigation. A well-conducted investigation produces evidence that is both admissible and highly weighted. A poorly conducted investigation may produce evidence that is admitted but discounted.
Need legally compliant sickness fraud investigation services? Contact iSpy Detectives for professional investigation support.