Workplace Investigations
How Long Should a Workplace Investigation Take?
An employer guide to planning, monitoring and defending the duration of a workplace investigation once fact-finding has been chosen as the pathway.

Key points
- No generally applicable Australian statute fixes how long a workplace investigation must take, but a policy, contract, enterprise agreement, public-sector direction or statutory scheme may prescribe a period.
- The standard to work to is proceeding without undue delay while allowing enough time for a fair and reliable process.
- Plan against milestones — scope, evidence preservation, particularised allegations, interviews, response to adverse material, report, decision — rather than a single end date.
- Complexity justifies time; under-resourcing, inactivity and unexplained gaps do not, and the difference is what a later reader will look for.
- Interim measures, including suspension, are risk controls that need lawful authority, neutral framing and review at every extension.
- Delay is not automatically fatal to findings or to a later decision, but its length, explanation and effect on the parties all matter.
The short answer
There is no fixed answer to how long a workplace investigation should take, because no generally applicable Australian statute fixes the number of days in which every workplace investigation must be completed. A defensible workplace investigation timeframe is set by the matter itself. The duration that is appropriate depends on what is being investigated, who has to be spoken to, what records exist and what decision the findings will support. The workable standard is to proceed without undue delay while allowing enough time for a fair and reliable process — a formulation the Australian Human Rights Commission uses when it describes an efficient internal complaint process as one conducted without undue delay, because information deteriorates and unresolved complaints keep affecting the workplace.
That general position does not mean no timetable ever binds an employer. A matter-specific period may come from an enterprise agreement, a contract of employment, a disciplinary policy the employer has committed to follow, a public-sector direction or code, a regulator's requirement, or a statutory scheme applying to the particular subject matter. Before setting any timetable, check the instruments that actually govern the matter. A binding statutory, contractual or industrial-instrument requirement must be complied with. For policies, codes and similar frameworks, assess whether departure is permitted and, if you depart, record the contemporaneous reason and obtain any approval or make any communication required.
This guide assumes triage is finished and a fact-finding investigation has been chosen as the pathway. The first 24 to 72 hours are dealt with in our guide to early triage of workplace complaints, the wider case-management framework in managing workplace complaints fairly, and the choice between internal, external and hybrid delivery in when to appoint an external workplace investigator.
What "timely" means in practice
Timeliness is proportionality, not speed. The same fortnight that is generous for a single disputed exchange between two people is plainly inadequate for eight allegations spanning three years across two states. Plan the duration against the work the matter actually requires:
- Seriousness, number and age of the allegations, and whether historical events can still be tested against surviving records.
- The number of witnesses, their location, and their genuine availability rather than their theoretical availability.
- The volume and accessibility of documents, messaging, rosters, CCTV and system logs, and whether retrieval needs IT or third-party assistance.
- Whether central facts are disputed, whether credibility must be assessed, and whether answers will generate follow-up enquiries.
- Language, disability, accessibility and other reasonable participation needs, including interpreters and adjusted interview formats.
- Illness, carer's leave, annual leave and the availability of a support person or representative where the process allows one.
- Multi-site, cross-border or multi-jurisdictional issues, including differing WHS/OHS, privacy and public-sector obligations.
- Police or regulator involvement, and any real risk of prejudicing another process.
- The investigator's conflicts, capability and available capacity — an investigator with two days a fortnight will not deliver a four-week matter.
- Continuing health, safety and psychosocial risk to participants and bystanders while the matter runs.
- The seriousness of the decision the findings may support, and the level of procedural fairness that decision actually attracts.
Complexity is not the same as drift
Complexity earns time. Under-resourcing does not. Nor do unexplained gaps, an investigator pulled onto other work for a month, an interview schedule nobody chased, or a report sitting unread on a decision-maker's desk. The distinction matters because it is the one an outside reader will draw later. A matter that took four months with a documented reason for each stage reads very differently from a matter that took four months with nothing recorded between June and August.
It is worth being clear internally about what "finished" means. The investigator's fact-finding ends when the report is delivered. The employer's decision on outcome — disciplinary, remedial, systemic or none — is a separate step with its own timetable and its own fairness requirements. Conflating the two produces both rushed findings and outcome decisions that appear predetermined.
An illustrative timetable
The sequence below is an illustration only for a moderate matter with one respondent, three or four witnesses and a contained document set. It is not a benchmark, a standard or a commitment, and it should be rebuilt for each matter. Stages routinely overlap, and the plan must be revised whenever new evidence, new allegations or participation problems appear.
- Days 1–3: scope and terms of reference settled in writing; investigator appointed and conflicts checked; case owner nominated.
- Days 1–5: evidence preservation notices issued; retention cycles suspended; initial document and data collection begun.
- Days 3–7: allegations settled and put to the respondent with sufficient particulars — what is said to have happened, when, where and to whom.
- Weeks 2–3: interviews with the complainant, respondent and witnesses, with reasonable notice and any adjustments the participants need.
- Weeks 3–4: document review, follow-up enquiries and any second interviews arising from what the first round produced.
- Week 4: the substance of credible adverse material put to the respondent, with a reasonable opportunity to answer it, where fairness requires.
- Weeks 5–6: factual analysis, draft report, quality review and final report to the appointing authority.
- Following week: the employer considers the report, decides whether to act, and runs any disciplinary or remedial process as a separate step.
- Throughout and afterwards: status updates to the parties at agreed intervals, welfare support, and follow-up on systemic issues identified.
Planning and governance that keeps a matter moving
Most overruns are governance failures rather than investigative ones. A few arrangements prevent the common ones. Nominate a case owner who is not the investigator and not the decision-maker, and give that person responsibility for the schedule, communications and interim controls. Identify the critical path at the outset — usually witness availability and data retrieval — and start those items on day one rather than in sequence.
Keep a live chronology and action log recording what was requested, from whom, when, and what came back. Set decision gates at which the plan is reviewed rather than simply extended: after interviews, and again when the draft report is produced. Where an extension is needed, record the cause and the reason in writing at the time, not retrospectively.
Be careful with expectations. Give participants an indicative timeframe and a next review point rather than a date you cannot control. Telling a complainant they will have an answer by the end of the month, and then missing it twice without explanation, costs more confidence than never having named a date.
What delay actually risks
Delay does not automatically invalidate findings, prove predetermination, create liability or render a later dismissal unfair. The relationship is fact-sensitive: what matters is the length of the delay, the explanation for it, whether anyone was prejudiced by it, and the fairness of the process taken as a whole. The Fair Work Commission's unfair dismissals benchbook collects the criteria in s 387 of the Fair Work Act 2009 (Cth), which direct attention to notification of the reason, the opportunity to respond and other relevant matters — considerations that delay can affect, but does not decide.
The practical exposures are worth naming:
- Recollections fade and shift; records, rosters and messaging may be overwritten by ordinary retention cycles.
- Psychosocial risk continues, and delay may create or aggravate psychosocial hazards or risks, so it must be considered under the applicable <a href="https://www.legislation.gov.au/C2011A00137/latest">WHS legislation</a> and guidance such as the Safe Work Australia <a href="https://www.safeworkaustralia.gov.au/doc/model-code-practice-managing-psychosocial-hazards-work">model Code of Practice on managing psychosocial hazards</a>, noting Safe Work Australia is a national policy body and adoption differs by jurisdiction.
- Complainants and respondents suffer distress, reputational harm and, in long matters, disengagement from the process entirely.
- Interim restrictions or suspension stretch well past the period for which they were justified when imposed.
- Circumstances change — participants resign, roles are restructured, and the conduct in question becomes harder to address proportionately.
- Policy, contractual or industrial-instrument timeframes are breached, creating a separate dispute about process.
- Where disciplinary action follows, the length and explanation of the delay may be examined alongside the other statutory considerations.
- Depending on the facts, general protections, discrimination and victimisation exposures can be aggravated by a process that leaves an employee in limbo after raising a complaint.
- Workers' compensation claims and long absences may intersect with the investigation, complicating both.
- Confidence in the process erodes, and people escalate externally because internal silence gave them no alternative.
Interim measures while the clock runs
Interim measures are risk controls, not findings and not punishment. Choose the least disruptive option that manages the identified risk, apply it neutrally, give it a review date, and record why it was necessary. Adjusted reporting lines, changed rosters, remote work, a direction limiting contact between participants, or reallocation of specific duties will often manage the risk without removing anyone from work.
Where the complainant is the one moved, rostered differently or asked to work from home, examine that carefully. A control that disadvantages the person who raised the concern can look like a consequence of having raised it, and can create its own exposure.
Suspension needs a lawful basis, which may arise from the contract, statute, an applicable industrial instrument or policy, or in some circumstances a lawful and reasonable direction; its availability and limits should be checked in the circumstances. Paid suspension is not automatically benign. It is a significant intervention, it is rarely reasonable indefinitely, and it should carry a stated review interval and neutral language that does not describe the person as suspended pending disciplinary action when no finding has been made. Reassess every interim measure whenever the timetable is extended.
Support and welfare matter throughout, for everyone affected. On support persons, avoid overstating the position: s 387(d) of the Fair Work Act concerns whether an employer unreasonably refused to allow a support person to be present to assist in discussions relating to dismissal. It is not a general statutory right to a support person at every investigative interview. Broader entitlements can arise from policy, contract or an industrial instrument, and allowing a support person is usually sound practice in any event.
Managing an unavoidable extension
Extensions are ordinary. Unmanaged extensions are the problem. A workable protocol has seven steps: identify the actual cause; test whether the extension is genuinely necessary or whether resequencing, narrowing the issues or adding resources would avoid it; reassess interim measures and health and safety risks for the longer period; set a revised provisional date or, if that is not possible, a next review point; tell the affected parties what can be shared without breaching confidentiality; record the decision and the reasons in the file; and confirm the revised plan with the investigator and the case owner.
One thing should not be traded. Do not compress a respondent's opportunity to answer sufficiently particularised allegations, or to respond to the substance of credible adverse material, in order to meet a date chosen for administrative convenience. The date is an internal target. The opportunity to answer goes to the reliability of the findings and to the fairness of anything built on them.
Police, regulators and other external processes
External involvement changes sequencing but does not automatically stop an internal investigation. Police involvement, a regulator's inquiry, a workers' compensation claim, court or tribunal proceedings, an insurer's requirements or a participant's medical condition each raise different questions, and the answer is rarely a blanket pause.
The sensible approach is to obtain advice, ask police or the regulator whether particular steps would prejudice their process, and then decide what can safely continue. Frequently a great deal can: securing documents, mapping the chronology, addressing safety risks, and investigating allegations that sit outside the criminal or regulatory conduct. A workplace investigation is not a criminal investigation and applies the balance of probabilities. Where serious allegations are involved, the Briginshaw approach calls for appropriate care before reaching reasonable satisfaction; it does not create a third standard or lift the civil standard.
Where a genuine pause is unavoidable, treat it as an extension: record the reason, set a review interval, tell the parties what you can, and keep interim measures under active review rather than letting them run on unexamined.
Two matters, two timetables
A contained matter. A team member alleges a supervisor spoke to her dismissively in front of colleagues on two identified occasions. Both were witnessed. There is no safety risk requiring separation, no data set beyond a short email chain, and the supervisor does not dispute that the conversations occurred, only how they were expressed. Terms of reference are settled in two days, allegations are put by day four, four interviews run in week two, the supervisor answers the adverse material in week three, and the report is delivered in week four. No interim measure beyond a temporary rostering change is needed. The pace is proportionate because the issues are narrow and the evidence is small.
A complex matter. A whistleblower report alleges favouritism in procurement by a senior manager, together with intimidating conduct towards two staff who raised it. There are eleven potentially relevant people, three years of email and messaging, a supplier relationship, and a parallel finance review. Two witnesses are on extended leave and one is medically unfit to be interviewed. The employer appoints an external investigator, changes reporting lines rather than suspending anyone, and plans on ten to twelve weeks. At the week-six gate, forensic retrieval is incomplete and a further allegation surfaces. The employer documents the cause, extends by four weeks, expands the terms of reference in writing, re-reviews the interim arrangements and the psychosocial risk to the two complainants, and writes to all participants with a revised review date. Neither timetable is a rule; each is defensible because the reasoning behind it was recorded at the time.
Delay-risk matrix
| Cause of delay | Principal risk | Management response |
|---|---|---|
| Witness unavailable (leave, illness) | Open-ended drift; recollection loss | Reorder interviews; seek written answers where suitable; set a review date rather than waiting indefinitely |
| Respondent medically unfit | Fairness challenge; prolonged interim measures | Obtain guidance on fitness to participate; consider adjustments; review suspension or restrictions |
| Data retrieval or forensic backlog | Records overwritten; incomplete findings | Issue preservation notices immediately; escalate with IT; narrow the search parameters |
| Scope expands mid-investigation | Unparticularised allegations; unfair surprise | Vary the terms of reference in writing; re-particularise; reset the timetable |
| Investigator capacity | Unexplained inactivity | Protect time, reallocate, or co-source an external fact-finder |
| Police or regulator involvement | Prejudice to another process; blanket stoppage | Ask what would prejudice their work; continue safe workstreams; document the reasons for any pause |
| Decision-maker inaction after report | Findings age; outcome appears predetermined or abandoned | Set a decision deadline at the outset; brief the decision-maker before the report lands |
Employers who want a wider framework for resolving disputes at work may find the Fair Work Ombudsman's effective dispute resolution best practice guide useful, and Commonwealth employers can consult Comcare's psychosocial hazards guidance on managing the risks that persist while a matter is open.
Where AWS assists
Australian Workplace Strategies conducts workplace investigations, supervises and quality-reviews internal ones, and helps employers build investigation plans, terms of reference and interim-measure frameworks that hold up when timing is questioned. Our psychosocial risk team advises on managing hazards while a matter remains open. Contact us to discuss a current matter. This article is general information and is not legal advice.
Ten-point checklist for keeping an investigation moving fairly
- Check any policy, contract, enterprise agreement, public-sector direction or statutory scheme that prescribes a timetable before setting your own.
- Settle written terms of reference and appoint a conflict-checked investigator within the first few days.
- Nominate a case owner separate from the investigator and the decision-maker to own the schedule and communications.
- Issue evidence-preservation instructions immediately and suspend routine deletion cycles.
- Put sufficiently particularised allegations to the respondent early, not at the end of the process.
- Identify the critical path — usually witness availability and data retrieval — and start those items first.
- Maintain a live chronology and action log so the reason for every gap is recorded as it happens.
- Review interim measures, including any suspension, at fixed intervals and again at every extension.
- Update the parties at agreed intervals with what can properly be shared, even when there is nothing new.
- Set a decision deadline for the employer's outcome step, and keep it separate from the investigator's findings.
Frequently asked questions
- Is there a legal deadline for completing a workplace investigation?
- There is no generally applicable Australian statute setting a fixed period for every workplace investigation. That said, a matter-specific timetable can come from an enterprise agreement, a contract, a disciplinary policy the employer has committed to follow, a public-sector direction, a regulator's requirement or a statutory scheme. Check the instruments that govern the particular matter before setting a timetable, and record a reason for any departure from a prescribed period.
- Is 30 days a reasonable investigation timeframe?
- For a contained matter with one respondent, a few witnesses and a small document set, four to six weeks is often achievable. It is not a standard. A matter with many allegations, historical events, forensic data retrieval, unavailable witnesses or parallel processes may reasonably take considerably longer. Treat any number as a provisional plan to be justified by the work required, not as a target that overrides fairness.
- What should an employer do if the investigation is delayed?
- Identify the actual cause, test whether the delay is genuinely necessary or whether resequencing, narrowing the issues or adding resources would avoid it, reassess interim measures and safety risks for the longer period, set a revised provisional date or next review point, tell the affected parties what can properly be shared, and record the decision and reasons in the file at the time rather than afterwards.
- How often should the parties receive progress updates?
- Agree an interval at the outset — commonly fortnightly for a matter of ordinary length — and keep to it even when there is nothing substantive to report. Updates should confirm the stage reached and the next review point without disclosing evidence, witness accounts or provisional views. Unexplained silence is one of the most common reasons participants escalate a matter externally.
- Can an employee remain suspended while the investigation continues?
- Sometimes, but suspension needs a lawful basis, which may arise from the contract, statute, an applicable industrial instrument or policy, or in some circumstances a lawful and reasonable direction, and its availability and limits should be checked in the circumstances. It must remain a proportionate risk control rather than a sanction. Paid suspension is not automatically benign, is a significant intervention and is rarely reasonable indefinitely. Set a review interval, reconsider less disruptive alternatives at each review and at every extension, and avoid language that implies a finding has already been made.
- What if a witness or respondent is on leave or medically unfit?
- Reorder the work so the investigation continues where it can, and consider whether written questions or adjusted interview arrangements are suitable. Where a respondent's capacity to participate is in question, obtain appropriate guidance on fitness to participate and consider reasonable adjustments. Do not leave the matter open indefinitely without review — set a next review point and reassess any interim measures affecting the person.
- Must an internal investigation stop if police or a regulator becomes involved?
- Not automatically. Obtain advice, and ask the police or regulator whether particular steps would prejudice their process. Often significant work can safely continue: preserving records, building the chronology, managing safety risks, and examining allegations outside the criminal or regulatory conduct. Where a pause is genuinely required, document the reason, set a review interval and keep interim measures under active review.
- Can delay make a later dismissal unfair?
- Delay does not automatically make a dismissal unfair or invalidate findings. The Fair Work Commission considers the criteria in s 387 of the Fair Work Act 2009 (Cth) and the overall fairness of what occurred. Length of delay, the explanation for it, whether the employee was prejudiced by it and whether they still had a genuine opportunity to respond are all relevant. Unexplained delay is far harder to defend than documented delay.
Discuss this matter with AWS
Briefings can be scoped on a confidential basis. We respond within two business days.
Contact AWSRelated briefings
Workplace Investigations
Managing a workplace complaint: the employer's guide after triage
What employers should do once a complaint has been received and triaged: confirming the pathway, interim measures, scope, procedural fairness, findings, communication and follow-through.
Read briefing →Workplace Investigations
When should an employer appoint an external workplace investigator?
A decision guide for choosing between an internal investigator, an external appointment or a hybrid model — external is not automatically the safer choice.
Read briefing →Workplace Investigations
Early triage of workplace complaints: the first 24–72 hours
Before allegations are framed or a process begins, someone has to decide who owns the matter, what needs preserving and which pathway fits. This guide sets out that early assessment.
Read briefing →