Internal investigations in Aboriginal and Torres Strait Islander corporations. - A practical guide to governance complaints, workplace matters, witnesses and workers’ compensation claims
- Brian AJ Newman LLB
- 3 days ago
- 23 min read
By NATSIC-AS — Employment, Human Rights and Governance Advocates Current as at 3 August 2026
When an allegation arises inside an Aboriginal and Torres Strait Islander corporation, the corporation may need to protect people, preserve evidence, comply with its rule book, meet employment and work health and safety duties, notify an insurer, and maintain confidence among members all at the same time.
Those responsibilities overlap, but they are not the same process. A governance investigation asks whether directors, officers or decision-makers complied with the corporation’s governing rules and duties. A workplace investigation determines facts relevant to employment policies and possible disciplinary action. A work health and safety response controls risks to health and safety. A workers’ compensation insurer decides whether a statutory claim is accepted under the applicable scheme. Police, the Office of the Registrar of Indigenous Corporations (ORIC), a safety regulator or another external body may have yet another role.
Confusing these functions creates risk. A corporation should not use an internal investigation to decide a workers’ compensation claim, and it should not use an insurer’s decision as a substitute for deciding whether workplace conduct occurred. Equally, the existence of a claim does not remove the corporation’s duty to investigate serious conduct or control an ongoing safety risk.
This guide sets out a fair, culturally safe and defensible approach for corporations, directors, employees, members, complainants, respondents and witnesses.
Important: “WorkCover” is used here as a familiar general expression. Australia does not have one national WorkCover system. There are separate state, territory and Commonwealth workers’ compensation schemes, with different rules about notification, claims, rehabilitation, confidentiality and employment protection. The corporation must identify the applicable scheme before acting. This article is general information, not legal advice.
The first task: separate the connected processes
One event may activate several legal and organisational processes. They should be mapped at the outset, assigned to authorised people and coordinated without being improperly merged.
Process | Central question | Proper decision-maker | Typical outcome |
Governance | Were the CATSI Act, rule book, delegations or directors’ duties breached? | The unconflicted board, members where the rule book requires, ORIC or a court | Governance action, rectification, member resolution, referral or regulatory action |
Human resources | Did workplace conduct or performance breach a lawful direction, contract, policy or expected standard? | An authorised, unconflicted employer representative | No action, restorative action, training, management action or discipline |
Work health and safety | Is there a physical or psychosocial hazard, and what controls are reasonably practicable now? | The corporation as the person conducting a business or undertaking, with officers exercising due diligence | Immediate and longer-term risk controls, consultation, notification or review |
Workers’ compensation | Is the worker entitled to statutory compensation under the applicable scheme? | The insurer, scheme agent or statutory authority—not the internal investigator | Acceptance, rejection, review, benefits, rehabilitation and return-to-work arrangements |
Criminal or regulatory | Is there suspected criminal conduct or a reportable contravention? | Police, ORIC, a safety regulator or another competent authority | External investigation, enforcement or no further action |
Internal dispute resolution | How should a member or internal governance dispute be addressed under the rule book? | The people and process identified in the rule book | Resolution, mediation, meeting or escalation |
The streams may use some of the same evidence, but each has its own test, purpose and confidentiality limits. Use separate files, clearly identify who may see each file, and record every lawful transfer of information between streams.
Start with the corporation’s legal identity and sources of authority
Not every Indigenous organisation is governed by the same legislation. It may be registered under the Corporations (Aboriginal and Torres Strait Islander) Act 2006 (Cth) (CATSI Act), the Corporations Act, state or territory associations legislation, or another framework. It may also be a registered charity, government contractor, registered native title body corporate, health service or housing provider with additional obligations.
For a CATSI corporation, the investigation must be consistent with:
the current CATSI Act;
the corporation’s rule book;
valid board and member resolutions;
delegations to the chief executive officer, managers or committees;
employment contracts, enterprise agreements and workplace policies;
applicable Fair Work, discrimination, privacy, work health and safety, workers’ compensation and records laws; and
funding, professional, child-safety or sector-specific requirements.
Under the CATSI Act, directors and other officers have individual duties. ORIC summarises these as duties of care and diligence, good faith and proper purpose, proper use of position and information, disclosure and management of material personal interests, and prevention of insolvent trading. These are not displaced by family, community, cultural or political pressure. See ORIC’s legal duties of directors and other officers.
The board governs; it does not ordinarily perform day-to-day management. It sets direction, oversees the chief executive officer, manages significant risk and remains accountable to members. The chief executive officer manages operations within delegated authority. ORIC’s guidance on board responsibilities and separating governance and management is especially important when a complaint involves a director, senior manager or relative of a decision-maker.
Before an investigation begins, the corporation should answer in writing:
Who has legal authority to commission the investigation?
Who has authority to receive the report?
Who will decide findings, employment consequences and governance action?
Does anyone in that chain have an actual, potential or perceived conflict—including a kinship, family, community, business or factional relationship?
Does the rule book reserve any question for members or require a particular dispute process?
Are there matters that must be reported externally now, rather than after the internal process?
A conflicted director should disclose the interest promptly. Depending on the law and rule book, the director may need to be excluded from papers, discussions and decisions and leave the meeting. The disclosure, recusal and quorum consequences should be properly recorded. ORIC provides practical guidance on managing conflicts of interest.
The non-negotiable principles
A sound investigation should be:
authorised: commissioned and decided by people with valid authority;
independent and impartial: free from prejudgment and unmanaged conflicts;
safe: immediate physical and psychosocial risks are controlled without waiting for the final report;
culturally safe: the process recognises cultural authority, kinship, language, gender, Country, community dynamics and restricted cultural information without stereotyping anyone;
procedurally fair: a person facing an adverse finding knows the substance of the case and has a genuine opportunity to answer it before the decision is made;
evidence-based: findings rest on relevant, reliable evidence, not rumour, status, factional alignment or community pressure;
confidential on a need-to-know basis: information is protected, but nobody is promised secrecy that cannot lawfully or fairly be maintained;
prompt but not rushed: timeframes are communicated, delay is explained, and urgent risks are acted on immediately;
proportionate: the process and any response match the seriousness and complexity of the matter; and
documented: authority, conflicts, evidence, interviews, reasoning, decisions and implementation are recorded.
The Australian Human Rights Commission identifies fairness, confidentiality, transparency, accessibility and efficiency as core features of a good internal complaint process. Its good-practice guidelines also stress impartiality, protection from victimisation and proper records.
Who does what?
The board or commissioning authority
The board’s role is to create a legitimate process, not to prove a preferred result. An unconflicted board or properly authorised committee should:
assess immediate risk and mandatory-reporting obligations;
pass a valid resolution or use an existing delegation to commission the work;
approve clear terms of reference;
appoint a suitably skilled, independent investigator;
ensure conflicted directors and staff do not control the process;
provide access to relevant records and people;
approve neutral interim measures where necessary;
identify the decision-maker and any review mechanism;
protect all participants from retaliation; and
receive governance-level reporting and monitor implementation.
Board members should not privately interview witnesses, lobby the investigator, demand confidential material for an improper purpose or negotiate witness accounts.
They should not circulate the report through family or community networks. Minutes should record the authority, declarations of interest, recusals, resolutions and implementation decisions, but should avoid unnecessary sensitive detail.
The chair
The chair manages proper board procedure. The chair does not automatically possess unilateral power to commission, stop or decide an investigation; that authority must come from the Act, rule book, a board resolution or a valid delegation. If the chair is implicated or conflicted, another authorised and unconflicted person should perform the role.
The chief executive officer and human resources staff
The chief executive officer and HR personnel ordinarily manage logistics within delegation. They may preserve records, organise interviews, maintain contact with parties, implement safety controls and liaise with the insurer. They must not screen out evidence, coach witnesses, rewrite allegations, influence findings or brief the decision-maker selectively.
If the chief executive officer, HR manager or their close associate is involved in the allegations, their access and role should be restricted. An external investigator and an unconflicted board contact may be necessary.
The investigator
The investigator is a neutral fact-finder. The investigator should:
disclose all actual, potential and perceived conflicts, including relevant community and kinship connections;
confirm the source and limits of their authority;
translate the terms of reference into specific factual allegations or questions;
prepare an investigation plan and evidence map;
collect evidence that supports and contradicts each allegation;
conduct respectful, non-leading interviews;
provide sufficient particulars and adverse material for a meaningful response;
make credibility assessments for stated, evidence-based reasons;
apply the civil standard—the balance of probabilities;
make a separate finding on each allegation; and
report evidence, reasoning, limitations and findings accurately.
The usual findings are substantiated, not substantiated or unable to determine/inconclusive, with each term defined in the terms of reference. “Not substantiated” means the available evidence did not establish the allegation on the applicable standard. It does not, without more, mean the complaint was fabricated or malicious.
The more serious the allegation and potential consequence, the more careful the fact-finder must be about the quality and cogency of the evidence. That does not create a criminal standard of proof for an employment investigation.
Unless separately authorised, the investigator does not decide compensation liability, dismiss an employee, impose board sanctions, give medical opinions or determine criminal guilt.
The decision-maker
Where practicable, the person deciding consequences should be different from the investigator. The decision-maker must consider the report independently, identify any gaps, give the affected person a chance to respond to proposed adverse findings or action where fairness requires it, and consider consistency, proportionality, mitigation and alternatives.
A decision-maker must not merely rubber-stamp the report. If dismissal is contemplated, the Fair Work Commission considers whether there was a valid reason, whether the employee was notified of it, whether they had an opportunity to respond, and whether an unreasonable request for a support person was refused, among other factors. See the Commission’s guidance on what makes a dismissal unfair, valid reasons and investigations and the opportunity to respond.
The complainant or person making a report
The complainant should be treated with respect, heard without prejudgment and protected from retaliation. They can reasonably expect:
an explanation of the process, likely timeframes and limits of confidentiality;
a safe way to provide information;
a support person, interpreter or reasonable adjustment where appropriate;
updates when there is material delay;
the opportunity to provide documents and identify witnesses;
a chance to correct their interview record; and
a meaningful, privacy-respecting account of the outcome.
The complainant is expected to be honest, distinguish what they directly experienced from what others told them, preserve relevant records, identify uncertainties, correct material errors promptly, comply with reasonable confidentiality directions and avoid approaching witnesses to align accounts.
A complainant may ask for action, but does not control the investigation, finding or penalty. The corporation should not promise a particular outcome or a complete copy of the report.
The respondent
The respondent has not been found to have done anything merely because an allegation was made. They should receive:
allegations expressed with enough detail to understand the conduct in issue—ordinarily including the substance, approximate date or period, place, relevant rule or policy, and alleged impact;
the substance of credible adverse information that may be relied upon, subject to lawful and necessary protections;
reasonable time and facilities to respond;
the opportunity to provide records, explanations and witness names;
access to a support person or representative where policy, agreement, fairness or law provides it;
reasonable adjustments for disability, health, language or cultural needs;
an unbiased decision-maker; and
notice of findings and any proposed disciplinary action, with an appropriate opportunity to respond.
Fairness does not always require disclosure of every document, the complete report or every witness’s identity. It does require enough reliable detail for a real, not merely symbolic, answer to the case.
The respondent must preserve evidence, answer honestly, comply with lawful and reasonable interim directions, avoid retaliation and not contact, intimidate, coach or bargain with witnesses. They should identify any conflict, health issue or inability to respond within the requested time as early as possible.
The support person or representative
The role must be agreed before the interview. A support person ordinarily provides emotional or practical support, takes notes, requests breaks and helps the participant understand the process. A representative or advocate may have a broader role, such as making submissions or assisting with answers, if a law, industrial instrument, policy or the investigator permits it.
Under the unfair dismissal provisions, the Fair Work Commission’s specific statutory consideration concerns an unreasonable refusal of an employee’s request for a support person in a dismissal-related discussion; it is not a general statutory requirement that an employer offer one in every meeting. A contract, enterprise agreement, policy, disability adjustment or fair-process requirement may provide broader rights. The Commission explains the distinction in its support-person guidance.
The support person should not answer factual questions for the participant, disrupt the interview, relay messages among witnesses or later disclose sensitive information improperly.
Members
Members are the accountability base of the corporation, but membership does not turn every member into an investigator or give automatic access to a confidential employee file, witness statement or directors’ minutes.
Members should use the rights in the CATSI Act and rule book: raise matters with the board, use the internal dispute-resolution clause, request a general meeting where the legal requirements are met, propose resolutions and report appropriate CATSI Act or rule-book concerns to ORIC. ORIC explains these pathways in its guidance on reporting concerns as a member or director and internal disputes.
Members should expect governance-level assurance: that a proper process occurred, conflicts were managed, the organisation acted on material risks and required referrals were made. They should not expect identifying medical information, raw witness evidence or all disciplinary detail. A de-identified outcome report is often the appropriate balance.
Members must not harass participants, publish allegations as fact, pressure directors to predetermine an outcome, use community meetings to cross-examine employees or circulate confidential material on social media.
The insurer, claims manager and rehabilitation participants
The insurer or statutory scheme decides workers’ compensation liability. It may obtain statements and information from the worker, employer, witnesses and treating practitioners under the applicable law. The employer must meet the scheme’s reporting and cooperation duties and should provide factual, objective information, not advocacy dressed up as evidence.
Treating practitioners address health, capacity and treatment. Rehabilitation and return-to-work professionals assist with safe and durable work participation. They are not substitutes for a workplace misconduct investigator and should not be pressured to decide who is telling the truth about contested conduct.
Witnesses: role, rights and responsibilities
Witnesses are often placed under the greatest community pressure while having the least control over the process. Their role must be explained carefully.
What is a witness there to do?
A witness is an independent source of information, not a member of the complainant’s or respondent’s “team.” A witness should give the best account they can of:
what they personally saw, heard, said, did or recorded;
when and where it occurred;
who was present;
the exact words used, where they can genuinely recall them;
what happened immediately before and after;
any contemporaneous email, text, diary note, photograph, roster, access record, meeting paper or other record;
what another person told them, clearly identified as second-hand information; and
what they cannot remember or are uncertain about.
A witness should separate observation from inference. “I heard the manager say, ‘Do not return tomorrow’” is an observation. “The manager wanted to destroy her career” is an inference unless the witness can identify evidence supporting it.
What can a witness expect?
A witness should be told, in plain language:
who the investigator is and who authorised the process;
the broad subject and purpose of the interview;
whether participation is required and the source of that requirement;
how the interview will occur and approximately how long it will take;
whether a support person, interpreter or cultural support is available;
whether notes, an audio recording or a written statement will be made;
who may receive or be told the substance of their evidence;
that confidentiality has limits and anonymity cannot be guaranteed;
how to raise safety, retaliation, health or conflict concerns;
how they can review and correct their statement or interview summary; and
who to contact if they later remember something important.
The corporation should not promise that the respondent will never learn a witness’s identity. Sometimes procedural fairness makes the substance—or source—of evidence apparent. Lawful reporting, litigation, regulator action or disclosure obligations may also require production.
Where a genuine safety risk exists, the investigator should consider protective methods: limiting identifying detail, controlled communication, separate interview arrangements, changed reporting lines, a no-contact direction or another proportionate measure.
Protection must not make the process so opaque that the respondent cannot fairly answer the allegation.
What is a witness obliged to do?
An employee may be required to participate under a contract, policy, statutory obligation or lawful and reasonable direction. Whether a direction is lawful and reasonable depends on its purpose, the person’s role, safety, notice, health, cultural needs and other circumstances. Participation should ordinarily occur in paid work time.
A member, former employee, contractor or community witness is not automatically compellable by an internal investigator. Any obligation must come from a statute, contract, rule book or valid legal process. An internal investigator does not possess the compulsory powers of a court, police, ORIC or a safety regulator.
A participating witness is expected to:
tell the truth and not deliberately omit a material fact;
preserve original records and provide authentic copies;
avoid changing, deleting or creating retrospective records without clearly labelling them;
keep the matter within the legitimate need-to-know group;
avoid group statements, rehearsed accounts and comparing evidence with other witnesses;
review the interview record carefully, make corrections and sign or acknowledge only an accurate version;
disclose any relationship or interest that may affect, or appear to affect—their evidence;
comply with lawful safety and no-contact directions; and
report threats, pressure, inducements or retaliation immediately.
If a question may expose the witness to criminal liability, breach a legal professional privilege or conflict with a binding confidentiality obligation, the witness should seek independent advice before answering. Health-related limitations and requests for adjustment should be addressed rather than treated automatically as non-cooperation.
No participant should secretly record an interview without first checking the law of the relevant state or territory and the corporation’s policy. Recording, surveillance and later use or publication of a recording are regulated differently across Australia.
A defensible investigation from start to finish
1. Receive, record and triage the concern
Record the allegation in the words of the person raising it. Determine whether anyone is in immediate danger, needs medical assistance or requires separation from an alleged hazard. Consider urgent police, child-safety, safety-regulator, insurer, funding-body or ORIC notification.
Triage is not a finding. The threshold for taking an immediate protective step is different from the threshold for substantiating misconduct.
2. Control current health and safety risks
The corporation must not wait for the investigation to finish before controlling a reasonably foreseeable risk. Under model work health and safety principles, a person conducting a business or undertaking must identify physical and psychosocial hazards, eliminate or minimise risks so far as reasonably practicable, consult workers and health and safety representatives, and review controls. Safe Work Australia summarises these PCBU duties for psychosocial hazards.
Interim measures may include a temporary reporting-line change, paid alternative duties, remote work, a no-contact protocol, additional supervision, culturally appropriate support, leave agreed with the worker or temporary paid suspension where authorised and justified.
Interim action must be neutral, proportionate and regularly reviewed. It must not be described as punishment, used to force a complainant out, or imposed in a way that signals a predetermined result. Do not assume the respondent must always be moved; choose the control that best reduces risk with the least unfair impact.
3. Identify each legal and organisational stream
Prepare a short issues map covering governance, employment, WHS, workers’ compensation, discrimination, privacy, crime, regulatory reporting and rule-book dispute resolution. Identify separate decision-makers, deadlines and records. Decide how the streams will exchange only necessary information.
If the concern involves sexual harassment, sex discrimination, sex-based harassment, a hostile workplace environment on the ground of sex or related victimisation, the investigation is only one part of the response. Employers and persons conducting a business or undertaking have a positive duty under the Sex Discrimination Act to take reasonable and proportionate measures to eliminate that conduct as far as possible. The corporation should therefore examine systemic prevention, leadership, workplace culture, knowledge, risk controls, support and reporting—not only whether one historical allegation can be substantiated. See the Australian Human Rights Commission’s positive-duty guidance.
4. Establish authority and manage conflicts
Document the resolution or delegation. Check quorum after recusals. Select an investigator with the necessary employment, governance, trauma-informed and cultural capability. Use an external investigator when senior leaders are implicated, internal independence is not credible, the allegations are serious or the community conflict is entrenched.
An external investigator is not independent merely because they are external. Check previous work, personal connections, current retainers and any relationship with directors, staff, families, factions or funders.
5. Set precise terms of reference
The terms should state:
the person or body commissioning the investigation;
each allegation or factual question;
the relevant period, policies, rules, duties and definitions;
matters expressly outside scope;
the applicable standard of proof;
the investigator’s access to records and people;
the expected method and timeframe;
confidentiality, privacy and records arrangements;
how new allegations will be authorised;
whether recommendations are requested;
who receives the report; and
who makes the final decision.
Avoid vague instructions such as “investigate the culture” or “find out who is responsible.” If systemic culture is genuinely in scope, define the questions and evidence required.
6. Preserve evidence lawfully
Issue a targeted preservation direction. Relevant material may include emails, messaging-platform records, text messages, rosters, payroll data, access logs, CCTV, phone records, meeting agendas and minutes, policies, prior complaints, training records, contracts, incident reports, claim correspondence and contemporaneous notes.
Preserve originals and metadata where possible, record the source and date of collection, maintain an evidence register, and suspend routine deletion for relevant material. Do not access a private account or device merely because it might contain useful evidence; confirm the legal and policy authority first.
7. Give process notices
Provide tailored written notices to the complainant, respondent and witnesses. Explain purpose, stages, expected timeframe, contact person, support options, confidentiality limits, protection against retaliation, records handling and how to raise a conflict or adjustment request.
A confidentiality direction should be no broader than necessary. People may need to speak with a support person, representative, treating practitioner, regulator or professional adviser. A blanket gag can undermine safety and may interfere with protected workplace rights.
8. Interview and test the evidence
A common sequence is complainant, relevant witnesses, respondent and then follow-up interviews. The sequence can change where evidence preservation, safety or fairness requires it.
Use open questions first, then test detail. Ask how the person knows, what record exists, what else could explain the event and who may contradict the account. Put significant inconsistencies to the person where fairness requires. Do not treat demeanour, eye contact, silence, delayed disclosure or emotional presentation as a reliable shortcut to truth; culture, trauma, disability, language and stress can all affect presentation.
Provide the respondent with sufficiently precise allegations and the substance of material adverse evidence. Keep an open mind. A response opportunity given after the outcome has already been decided is not genuine procedural fairness.
9. Assess each allegation
Assess relevance, reliability, consistency, contemporaneity, corroboration, opportunity to observe, plausible alternative explanations and any demonstrated motive to misstate. Hearsay is not automatically excluded from an internal investigation, but its weight must be assessed carefully.
There is no rule that an allegation cannot be substantiated without an eyewitness or document. Equally, consistency among people who discussed their accounts is not necessarily independent corroboration.
Apply the balance of probabilities: is the alleged fact more likely than not? Give reasons that connect the evidence to the conclusion. Do not use “guilty” or “innocent,” which belong to criminal proceedings.
10. Report, decide and provide a further response opportunity
The report should contain the authority and scope, process, evidence considered, limitations, credibility reasoning, finding on every allegation and the evidentiary basis. Separate facts from recommendations.
Before serious disciplinary action, give the employee clear notice of the proposed basis and a genuine chance to respond. Consider that response before deciding. Record who decided, the delegated authority, factors considered, outcome and reasons.
11. Communicate proportionately
Tell the respondent the findings relevant to them and any action or review right. Tell the complainant whether the concern was addressed and enough about the outcome to give meaningful closure, while protecting employment and medical privacy. Tell witnesses only what they need for safety, implementation or follow-up.
Members may receive a de-identified governance assurance: for example, that an independent process concluded, conflicts were managed, recommendations were accepted and systemic controls are being implemented. Avoid publishing the report or naming participants unless lawfully required and carefully justified.
12. Implement, review and monitor
An investigation is incomplete if nothing changes. Allocate every accepted action, deadline and accountable person. Review workplace controls, delegations, policies, board practices, training, staffing and reporting lines. Monitor retaliation and health impacts. Coordinate rehabilitation and return to work without disclosing unnecessary clinical information. Offer an internal review where the rule book, policy or fairness requires it.
Managing a WorkCover or workers’ compensation claim alongside the investigation
The insurer decides the claim
The corporation should report and cooperate as required, but should not tell the worker or membership that the internal investigator will determine whether the injury is “real” or compensable. That is a statutory decision for the insurer or scheme authority, subject to review rights.
Safe Work Australia’s 2025 comparison of workers’ compensation arrangements confirms that Australia has multiple schemes with materially different requirements. Use the national return-to-work gateway to identify the correct jurisdiction and authority.
As a Queensland example only, an employer must report an injury that may be compensable even if the worker has not lodged a claim or the employer disagrees with it; the insurer decides acceptance. WorkSafe Queensland states that the employer report is generally due within eight business days. Other jurisdictions have different rules. See reporting injuries in Queensland.
Keep the purposes and files distinct
Maintain a workers’ compensation file for the claim, capacity information, insurer communications and rehabilitation. Maintain a separate investigation file for allegations, witness material, findings and employment decisions. Access should be role-based. If information passes between files, record why the transfer was necessary and lawful.
Give the insurer factual, objective material requested under the scheme. Distinguish direct knowledge from opinion. Do not ask witnesses to use loaded descriptions, exaggerate performance issues or speculate about diagnosis or motivation. Comcare’s current employer guidance similarly tells employers to provide factual and objective information and to keep unrelated personal or medical information separate; see claims information for employers.
Ask for capacity information, not an unrestricted medical history
For return-to-work planning, the employer ordinarily needs information about current capacity, restrictions, likely duration, safe duties and adjustments—not every diagnosis, consultation note or unrelated health condition. Collect only information that is necessary and authorised, explain its purpose, restrict access and store it securely.
Support recovery while liability is being decided
Early contact, suitable duties, respectful communication and practical adjustments should not be made conditional on the worker “winning” the claim. Work health and safety controls apply regardless of compensation liability. Safe Work Australia describes effective return to work as timely, safe, durable and coordinated among the worker, employer, insurer, treating practitioner and rehabilitation provider.
Do not retaliate because a claim or complaint was made
Making or pursuing a claim, exercising a benefit under workplace law, participating in a lawful process, or making a complaint or inquiry about employment may engage the Fair Work Act’s general protections. Adverse action can include dismissal, injury in employment, prejudicial alteration of a position or discriminatory treatment. The factual reason for an action matters. See the Fair Work Ombudsman’s current overview of protections at work and the Fair Work Commission’s general protections guidance.
This does not prevent reasonable, evidence-based management action or investigation. It means the corporation must be able to show the lawful reason for its action, separate it from the claim or protected complaint, use an authorised fair process and retain reliable contemporaneous records.
Do not assume that employment can or cannot be ended while a worker receives compensation. Scheme-specific employment-protection periods, Fair Work protections, discrimination law, contract terms and capacity evidence must all be checked before action.
Confidentiality, privacy and information access
Confidentiality means controlled, purpose-based disclosure, not absolute secrecy. Information may need to be disclosed to provide procedural fairness, manage safety, obtain advice, decide the claim, comply with a regulator or defend a legal proceeding.
At the beginning, tell each participant:
what will be collected;
why it is being collected;
who will ordinarily see it;
the circumstances in which it may be disclosed;
where it will be stored and for how long;
how they may seek access or correction; and
the consequences of improper disclosure or retaliation.
Do not assume all employee information is exempt from privacy law. The Office of the Australian Information Commissioner explains that the private-sector employee-records exemption is limited to handling directly related to the current or former employment relationship. It does not automatically cover prospective employees, contractors or volunteers, and an outsourced investigator or insurer does not inherit the employer’s exemption. See the OAIC’s employee records exemption guidance.
Health-record, public-sector, surveillance and privacy obligations also vary by jurisdiction. Even where a technical exemption applies, necessity, transparency, access control, secure storage and limited disclosure are sound minimum practice.
For CATSI corporations, directors’ meeting minutes are generally confidential to directors, while members have statutory access to certain general meeting records.
ORIC explains the distinction in its guidance on minutes of meetings. Membership is not a licence to inspect a sensitive HR investigation file.
Cultural safety without compromising fairness
Cultural safety strengthens evidence quality and trust; it does not alter the standard of proof or excuse unfairness. A culturally safe process should:
distinguish cultural authority from corporate authority and explain which “hat” each person is wearing;
identify kinship, family, community, traditional-owner, factional and business relationships during conflict checks;
ask participants, not assume, whether they prefer a particular gender of interviewer, interpreter, support person, place or method;
account for Country, distance, community events, cultural obligations and Sorry Business when setting timeframes;
use plain language and explain technical terms such as allegation, procedural fairness, substantiated and confidentiality;
protect restricted cultural knowledge and agree how it can be described or stored;
obtain informed consent before involving an Elder or cultural authority, and check that person’s independence and role;
avoid treating eye contact, directness, silence, delay, family loyalty or communication style as proof of credibility or dishonesty;
prevent community shaming, lateral violence, online publication and pressure through family networks; and
provide the respondent with a fair opportunity to answer even when information is culturally sensitive.
Where restricted information cannot be disclosed in full, seek a fair alternative: an agreed neutral description, a culturally authorised intermediary, redaction, a closed session or another method that conveys the substance necessary for response.
CATSI Act whistleblower protections: important but not universal
Part 10-5 of the CATSI Act protects certain disclosures about suspected contraventions when statutory conditions are met. Broadly, an eligible discloser includes an officer or contact person, employee, supplier, or employee of a supplier; the disclosure must be made to a specified recipient such as ORIC, an auditor or certain senior people in the corporation, and other conditions apply. Protections can include immunity in relation to the disclosure, confidentiality and remedies for victimisation.
Do not assume every complaint, every disclosure to any person, or every statement by an ordinary member automatically qualifies. A member may qualify because they also hold an eligible role, but membership alone is not the whole test. The corporation should preserve possible protections, restrict identity disclosure and obtain appropriate advice before deciding that a report is outside the statutory regime.
ORIC deals with concerns within its CATSI Act and rule-book jurisdiction. It does not ordinarily investigate personal conflict, harassment, discrimination or employment practices merely because they occur in a CATSI corporation. ORIC’s report-a-concern guidance explains when another employment, human rights or safety body is the correct pathway.
Common failures that undermine an investigation
Corporations should stop and correct the process if they see any of these warning signs:
an implicated director, chief executive officer, HR manager or relative appoints and controls the investigator;
the outcome is announced before the respondent is interviewed;
board members or community leaders approach witnesses privately;
allegations are too vague to answer;
a witness statement is drafted collectively or copied across witnesses;
the complainant is moved, isolated, demoted or deprived of work as the default “solution”;
interim suspension is punitive, unpaid without lawful authority, indefinite or never reviewed;
the corporation demands an unrestricted medical history instead of relevant capacity information;
the HR investigation is designed to defeat a compensation claim;
an insurer’s acceptance or rejection is treated as proof that misconduct did or did not happen;
“not substantiated” is treated automatically as a dishonest complaint;
confidentiality is used to prevent access to a representative, clinician, regulator or lawful workplace right;
cultural protocol is invoked to conceal a conflict, silence a participant or deny procedural fairness;
a full report, witness identity or medical information is circulated to members or social media;
secret recordings or private-device searches occur without checking authority and local law;
delay causes lost CCTV, deleted messages, prolonged risk or avoidable illness; or
artificial-intelligence summaries or transcriptions are accepted without human checking against the original evidence.
A short board checklist before findings are accepted
The unconflicted decision-maker should be able to answer yes to each applicable question:
Was the process validly authorised under the law, rule book and delegations?
Were all actual, potential and perceived conflicts disclosed and managed?
Were immediate physical and psychosocial risks controlled and reviewed?
Were required external reports made on time?
Were governance, HR, WHS and workers’ compensation questions kept distinct?
Were the allegations and scope precise?
Was relevant supporting and contradictory evidence preserved and considered?
Did each affected person receive a safe and culturally appropriate process?
Did the respondent receive enough detail and a genuine opportunity to answer adverse material?
Were witness accounts assessed for source, reliability and independence rather than status or allegiance?
Does every finding state the evidence and reasoning under the balance-of-probabilities standard?
Were privacy, confidentiality, medical information and member access handled lawfully and proportionately?
Was proposed action considered separately from fact-finding, with a further response opportunity where required?
Is the outcome consistent, proportionate and supported by contemporaneous records?
Are implementation, return-to-work support, systemic reform, review and anti-retaliation monitoring assigned to named people with deadlines?
Final perspective
An internal investigation is not a contest between families, factions, directors and workers. It is a controlled process for establishing facts, protecting people and enabling authorised decisions. Its legitimacy comes from valid authority, impartiality, cultural safety, procedural fairness, reliable evidence and careful separation of legal functions.
For witnesses, the central responsibility is to provide an honest, independent account and preserve evidence, not to choose a side. For complainants and respondents, the expectation is respectful participation without retaliation or interference. For directors and executives, the obligation is more demanding: create a safe and lawful process, manage conflicts, keep an open mind, protect confidential information, act on risks and remain accountable for the outcome.
When the allegation intersects with a workers’ compensation claim, the simplest discipline is the most important: investigate workplace facts fairly, control health and safety risks immediately, support recovery, report and cooperate as the scheme requires, and leave statutory claim liability to the insurer or authority.
Need advocacy assistance? NATSIC-AS — National Aboriginal and Torres Strait Islander Corporation – Advocacy Service
www.natsic.org · gethelp@natsic.org · 1800 238 622
Disclaimer: This article provides general information current at 3 August 2026. It does not account for every corporation’s legal structure, rule book, industrial instrument or workers’ compensation jurisdiction and is not a substitute for advice from an appropriately qualified professional about specific facts.
Comments