GDPR[1] together with increasingly stringent data protection legislation in many jurisdictions presents a major headache for companies conducting investigations[2]. There are now significant challenges in lawfully reviewing employee data and doing so requires careful consideration and management of data privacy risks (and documentation of this process). Many organisations do not adequately manage these risks when conducting investigations but failure to do so may create new regulatory issues. Why is this an issue?…