Back to Intelligence
Investigations NSW, VIC, WA

Using External Investigators Lawfully: Licensing, Independence and Procedural Fairness in NSW, Victoria and Western Australia

July 2, 2026 7 min read
Share
An experienced workplace investigator in business attire preparing for interviews in a quiet office, with secure files, a recording device, and a neutral professional environment, no text visible

When a reportable conduct allegation is serious, sensitive or potentially conflicted, many organisations consider appointing an external investigator. That can be the right decision, but only if it is done lawfully and with a clear understanding of regulator expectations. In New South Wales, Victoria and Western Australia, the decision is not simply about independence. It also raises practical questions about private investigator licensing, scope of authority, procedural fairness, trauma-informed practice and how the organisation will remain accountable for the investigation outcome.

When an external investigator is appropriate

External investigators are often most useful where the matter is complex, senior staff are implicated, or the organisation’s internal processes may not command confidence. In child-related matters, they may also be appropriate where there is a need for specialised interviewing skills, careful evidence handling, or a visibly independent process to support regulator scrutiny.

Typical situations include:

  • allegations against a principal, chief executive, director or other senior leader
  • concerns about actual or perceived bias in the internal process
  • matters involving multiple child witnesses or historical allegations
  • allegations that may expose the organisation to significant reputational or governance risk
  • circumstances where internal staff do not have the capability, capacity or trauma-informed investigation skills required.

That said, appointing an external investigator does not transfer the organisation’s statutory responsibilities. Under a Reportable Conduct Scheme, the head of the entity remains responsible for notification, oversight, decision-making and reporting to the regulator. An external investigator may gather evidence and provide findings or recommendations, but the organisation must still ensure the process is compliant, timely and fair.

External appointment should also be considered alongside other obligations, including immediate risk management, mandatory reporting where required, and workforce management steps such as temporary redeployment or stand-down where justified.

Licensing rules in NSW and WA, and the practical position in Victoria

A common mistake is assuming that anyone with investigation experience can be engaged externally. In some jurisdictions, external investigators are subject to private investigator licensing requirements.

In NSW, external investigators require a Class 2E (Private Investigator) licence under the Security Industry Act 1997 (NSW). This is a significant compliance point for schools, charities, care providers and other in-scope entities. If you engage an external consultant to investigate reportable conduct allegations, you should check their licence status before appointment and keep a record of that verification in your file.

In WA, external investigators must be licensed under the Security and Related Activities (Control) Act 1996. As in NSW, this should be treated as a threshold due diligence issue, not an administrative afterthought.

For Victoria, the factual focus in this area is less about a specific private investigator licensing rule in the Reportable Conduct Scheme framework and more about regulator expectations for capable and fair investigations. The scheme sits under the Child Wellbeing and Safety Act 2005, and from 23 February 2026 responsibility transferred to the Social Services Regulator. In practice, Victorian organisations should still conduct careful due diligence on external providers, including qualifications, child-safe experience, interviewing capability and understanding of procedural fairness.

Across all three jurisdictions, regulators expect investigators to be appropriately qualified. A common benchmark is Certificate IV in Government Investigations together with experience in trauma-informed interviewing and workplace or safeguarding investigations. Qualifications alone are not enough. The investigator should understand child-related allegations, evidence assessment on the civil standard, and the interface between employment processes and regulator reporting.

How internal investigator exemptions usually work

Internal investigations are treated differently from externally contracted work. As a general rule, internal employees conducting investigations within the scope of their employment are exempt from private investigator licensing requirements. This is particularly important in NSW, where internal employees are exempt when acting within their employment role, while external commercial investigators require the Class 2E licence.

This distinction matters in practice. If an organisation uses:

  • an employee investigator from HR, employee relations, safeguarding or legal, acting as part of their role, the internal exemption will generally apply
  • an external consultant, sole trader or investigation firm, licensing requirements may apply depending on the jurisdiction
  • a labour-hire or seconded person, the analysis may be more complex and should be checked carefully against the worker’s status and the local legal framework.

Victoria’s scheme is especially relevant here because the definition of employee has expanded to capture labour-hire workers, secondees, and individual business directors or owners. That expansion affects scheme coverage and who may be the subject of reportable conduct processes. It also reinforces the need to be precise about role status, reporting lines and who is actually conducting the investigation.

A prudent organisation should document why it chose an internal or external pathway, confirm the investigator’s status, and record any licence checks or exemption basis.

Independence is not enough: procedural fairness must be built into the process

An external investigator is often seen as a way to strengthen independence. That can help, but independence alone will not make an investigation defensible. Regulators and tribunals are more likely to focus on whether the process was fair, proportionate and evidence-based.

In Victoria, there is a strong emphasis on procedural fairness. That means the respondent should ordinarily be told the substance of the allegations, given a genuine opportunity to respond, and have their response considered before findings are made. The process should avoid prejudgment and should separate fact-finding from assumptions about guilt.

Good practice in NSW, Victoria and WA includes:

  • settling clear written terms of reference
  • identifying the allegations with enough precision for a fair response
  • using the correct standard of proof: the balance of probabilities, guided by the Briginshaw principle for serious allegations
  • testing both inculpatory and exculpatory evidence
  • keeping careful records of interviews, documents reviewed, credibility assessments and reasons for findings
  • giving appropriate updates to the regulator within the applicable reporting timeframe
  • avoiding unnecessary multiple interviews of children and using trauma-informed methods.

Procedural fairness must also be balanced with child safety. There may be circumstances where details are withheld temporarily to protect a child or preserve another process, but those decisions should be carefully reasoned and documented.

Preserving defensibility in serious child-related matters

The strongest investigations are planned from the outset with defensibility in mind. That means the organisation should not simply “hand the matter over” to an external provider and step back. Instead, it should actively govern the process.

For NSW, the Office of the Children’s Guardian requires initial notification within 7 business days and a final report within 30 calendar days. For WA, notification to Ombudsman WA is required within 7 working days, with the final report provided on conclusion. For Victoria, notification is made to the Social Services Regulator within 3 days via the secure webform, with the final report provided as soon as practicable.

Those timeframes matter when selecting an external investigator. If the provider cannot start quickly, understand the scheme, and produce regulator-ready analysis, the appointment may create delay rather than reduce risk.

Defensibility also depends on role clarity. The organisation should decide:

  • who will liaise with the regulator
  • who will manage immediate child safety actions
  • whether legal advice is needed on process design
  • how witness support will be arranged
  • how findings will be reviewed and adopted by the entity head.

In child-related matters, trauma-informed practice is essential. Interview planning should minimise harm, avoid leading questions, and recognise that children, families and workers may all be affected by the process. Even where police or child protection are involved, the organisation may still need to conduct its own reportable conduct investigation, while taking care not to compromise external inquiries.

Key takeaways

  • External investigators are useful in serious, sensitive or conflicted matters, but the organisation remains responsible for compliance and reporting.
  • In NSW, external investigators need a Class 2E (Private Investigator) licence; internal employees acting within their role are generally exempt.
  • In WA, external investigators must be licensed under the Security and Related Activities (Control) Act 1996.
  • In Victoria, focus closely on investigator capability, scope, child-safe experience and procedural fairness expectations.
  • Independence helps, but a lawful and defensible investigation also requires clear terms of reference, fair process, proper evidence assessment and trauma-informed practice.
  • Always align investigator appointment and case planning with the relevant regulator’s notification and reporting timeframes.