When is an Internal Investigation Necessary?
An internal investigation is a proactive measure taken by a business to identify and assess regulatory breaches or potential criminal conduct before they are discovered by external enforcement agencies. A well-conducted investigation allows the business to understand its own position, decide how to respond, and take control of the process — rather than responding reactively to an external investigation.
Investigations are most commonly triggered by whistleblowing reports, serious incidents, internal audit findings, or the identification of anomalies in financial or compliance data. Where a potential issue is identified, acting promptly and in a structured way is far preferable to a delayed or piecemeal response.
Pre-empting Regulatory Intervention
One of the principal benefits of an internal investigation is that it allows the business to assess whether self-reporting to an external authority — such as the Serious Fraud Office, the FCA, or the NCA — is appropriate. Organisations that identify misconduct, investigate it thoroughly, and then self-report in a timely and transparent way are generally treated more favourably by regulators than those in which misconduct is discovered through external enforcement.
Self-reporting is not without risk: it requires the disclosure of information that might not otherwise have come to the regulator's attention. The decision to self-report, and the timing and terms on which it is done, requires careful legal advice.
The Complexity of Legal Privilege
One of the most significant risks in conducting an internal investigation is the inadvertent loss of legal professional privilege over investigation documents. If documents produced during an internal investigation are not properly privileged, they may be subject to disclosure in subsequent criminal or regulatory proceedings.
- Legal Advice Privilege: Protects confidential communications between a client and their lawyer for the purpose of seeking or giving legal advice. This privilege arises automatically and does not require litigation to be anticipated.
- Litigation Privilege: Protects communications between a party and third parties — such as forensic accountants or expert witnesses — created for the dominant purpose of existing or reasonably anticipated litigation. This privilege depends on the reasonable anticipation of adversarial proceedings.
The structure and governance of the investigation must be designed from the outset to preserve privilege over relevant documents. Where legal advisers are not in control of the process, materials created during the investigation may not attract privilege.
Informing External Strategy
The findings of an internal investigation will directly inform the strategy adopted in any subsequent external proceeding. They determine how staff are prepared for regulatory interviews, what representations can be made to enforcement authorities, and what expert evidence may be needed to challenge the prosecution's case.
Where an external investigation is already underway, the internal investigation must be carefully coordinated with it — to avoid inadvertently prejudicing privileged material, to ensure that the evidence gathered externally is properly understood, and to identify at the earliest stage any witnesses or documents that may be significant.
Scope, Proportionality, and Policy Reform
An effective internal investigation is scoped proportionately to the issue under review. A narrow issue does not require a broad review of all business activities; equally, a systemic issue may require a wider examination than initially anticipated. The scope should be defined at the outset and kept under review as the investigation progresses.
The investigation should also result in specific, actionable recommendations for procedural improvement. Where an organisation can demonstrate that it has identified the root cause of the issue and implemented robust measures to prevent recurrence, this is a significant factor in regulatory and prosecutorial decision-making.