Deciding who owns the inquiry
A corporate internal investigation can be run by management, by in-house counsel, by outside counsel reporting to a board committee, or by a special committee of directors with no stake in the outcome. Which of those fits depends on who might be implicated. When senior executives are part of the story, findings produced by investigators who report to those same executives tend to be discounted later by regulators, auditors, and shareholders. The reporting line also affects privilege, because protection for interviews and analysis depends heavily on counsel directing the work for the purpose of giving legal advice. Settling the scope in writing at the start, and revisiting it as facts emerge, keeps the inquiry from drifting into areas nobody authorized or stopping short of the ones that matter.
Holding onto the record without making it worse
Once a credible concern surfaces, a legal hold usually goes out to the people and systems likely to hold relevant material, including chat platforms, shared drives, and phones used for work. Routine deletion schedules may need to be suspended for those sources. Employees should leave what they have where it is; collection works better when the investigation team does it in a way that can later be explained, rather than individuals forwarding files to themselves or to personal accounts. If outside forensic help is needed, how it is engaged, and through whom, can affect whether its work stays protected.
Interviews, findings, and the decisions after
Interviewees are generally told at the outset that counsel represents the company rather than them, and that the company controls the privilege and may choose to share what they say with the government. Employees who may be personally exposed sometimes need their own lawyer, and many companies address that through indemnification or advancement provisions in their bylaws or agreements. At the end, the company faces decisions about remediation, discipline, reporting to auditors, and whether to approach a regulator or prosecutor voluntarily. Those decisions carry consequences of their own, and some disclosure obligations run on their own timing whether or not the investigation is finished. Our first discussion with a company covers what triggered the concern, who is potentially involved, and which reporting line and scope make sense for this company.
