How to Collect and Preserve Workplace Evidence
The employee who documents wins. The employee who does not, loses.
Content last verified against official statutes: March 30, 2026
Why Evidence Wins Cases
Your employer has an HR department, a legal team, and access to every internal system, email server, and policy document. They are documenting everything. If you are not doing the same, you are walking into a fight unarmed.
Every complaint you file, whether internal (to HR) or external (to the CIRB, CHRC, or OPC), will be evaluated on one thing: what can you prove? Not what you felt. Not what you believe happened. What you can demonstrate with dates, documents, and facts.
Evidence is what separates “I was treated unfairly” from “On October 8, 2024, my manager commenced selective monitoring of my work, one day after I escalated a complaint to HRBP. No other team member was subjected to this monitoring. This constitutes reprisal under CLC s.246.1.”
The first statement is an opinion. The second is a case.
Types of Evidence You Should Collect
Written Communications
- Emails (to, from, CC, BCC — with full headers if possible)
- Instant messages (Microsoft Teams, Slack, Webex, Google Chat)
- Text messages and WhatsApp messages related to work
- Letters, memos, or written directives from management
- HR ticket confirmations and case numbers
Company Documents
- Employee handbook and workplace policies (harassment, attendance, WFH, monitoring)
- Your employment contract and any amendments
- Performance reviews, PIPs (Performance Improvement Plans), and written warnings
- Job descriptions (yours and comparable roles, if differential treatment is alleged)
- Organizational charts showing reporting structure
Digital Records
- Calendar entries showing meeting invitations, cancellations, or schedule changes
- Access card or badge logs (if you can lawfully obtain them)
- Screenshots of system dashboards, monitoring tools, or access restrictions
- Webex/Teams meeting recordings (if company records meetings)
- IT tickets or system change logs affecting your access or tools
Financial Records
- Pay stubs showing hours worked vs. hours paid
- Overtime records or time-tracking system exports
- Expense reports and reimbursement records
- Benefits enrollment or denial documentation
Medical and Accommodation Records
- Sick leave requests and approvals or denials
- Accommodation requests and employer responses
- Medical notes (only what you provided to the employer, not your full medical file)
- Return-to-work agreements
Witness Information
- Names and roles of anyone who witnessed relevant incidents
- Dates and locations of witnessed events
- Note: You do not need witness statements at this stage. Just document who saw what and when.
How to Build a Timeline
A timeline is the backbone of every workplace complaint. It transforms scattered incidents into a visible pattern.
Format for Each Entry
Date | What Happened | Who Was Involved | Evidence Reference | Law/Policy Violated
Example Entries
| Date | What Happened | Who Was Involved | Evidence Reference | Law/Policy Violated |
|---|---|---|---|---|
| 2024-04-02 | Manager issued directive requiring video of home office setup. No company policy requires this. No other employee received this directive. | Manager: [Name], HR: [Name] | Email dated April 2, 2024; HR Connect Ticket HRC0624006 | Differential treatment — CHRA s.7 |
| 2024-10-08 | Selective monitoring of work commenced. Only applied to me, not other team members. Began one day after HRBP escalation on Oct 7. | Manager: [Name] | Monitoring notification email Oct 8; HRBP escalation email Oct 7 | Reprisal — CLC s.246.1 |
Timeline Rules
- Use exact dates, never “around that time” or “sometime in October”
- One row per incident. Do not combine multiple events.
- Include the evidence reference for every entry. If you have no evidence for an incident, note “No documentary evidence — verbal only” so you know what gaps exist.
- Update your timeline as events occur. Do not try to reconstruct months of incidents from memory later.
Digital Evidence — How to Capture and Preserve
Screenshots
- Include the full screen showing the date, time, sender, and content
- For emails: screenshot the full header (To, From, CC, Date, Subject) plus the body
- For chat messages: capture the conversation thread, not just one message out of context
- Save as PNG (not JPEG — JPEG compression can degrade text quality)
Email Exports
If your email client allows it, export emails as .EML or .MSG files. These preserve metadata (headers, timestamps, routing) that screenshots do not.
Forward important emails to your personal email as a backup, but know that your employer's IT department can see forwarding activity. Use BCC to your personal address if company policy does not prohibit it.
Check your company's data handling policy before forwarding. Some organizations monitor outbound email.
Chat and Messaging Exports
- Microsoft Teams: Use the export feature if available, or screenshot conversation threads
- Slack: Use the export function or screenshot with timestamps visible
- Webex: Screenshot or export chat logs from meeting recordings
- Always capture the full thread, not isolated messages. Context matters.
Metadata Preservation
- Do not edit, crop, or annotate original evidence. Save the original as-is.
- If you need to highlight something, make a copy and annotate the copy. Keep the original untouched.
- File properties (date created, date modified) can be relevant. Do not open and re-save files unnecessarily as this changes the “modified” date.
What NOT to Do
Do Not Record Conversations Without Understanding the Law
Canada is a one-party consent jurisdiction for private communications (Criminal Code s.184). This means you can legally record a conversation you are part of without telling the other person. However, your employer's internal policy may prohibit recording in the workplace, and violating that policy could give them grounds for disciplinary action. Know your company's policy before recording.
Do Not Access Systems You Are Not Authorized to Use
Accessing a colleague's email, HR systems you do not have authorized access to, or restricted databases to gather evidence can constitute unauthorized access. This can result in termination for cause and potentially criminal charges under the Criminal Code.
Do Not Alter or Fabricate Evidence
Editing timestamps, modifying email content, creating fake documents, or misrepresenting evidence is fraud. It will destroy your credibility and your case. One fabricated piece of evidence can invalidate everything else you present.
Do Not Destroy Evidence
If you have filed a complaint or anticipate litigation, you have a duty to preserve relevant evidence. Deleting emails, clearing chat history, or destroying documents after a complaint is filed can result in adverse inferences (the adjudicator assumes the destroyed evidence was unfavorable to you).
Do Not Share Evidence Publicly
Do not post workplace evidence on social media, share it with colleagues uninvolved in your complaint, or distribute it outside the complaint process. This can violate confidentiality obligations and weaken your position.
Storage and Organization
Where to Store Evidence
- Personal device only. Never store your evidence inventory on a company device. Employers can access, wipe, or restrict company devices at any time, including the day they terminate you.
- Cloud backup. Use a personal cloud storage account (Google Drive, iCloud, OneDrive with a personal account) as a backup. If your personal device fails, you need a second copy.
- USB backup. Keep one physical backup on a USB drive stored securely at home.
Naming Convention
YYYY-MM-DD_Type_Description.ext
Examples:
2024-04-02_Email_WFH_Video_Directive.png
2024-10-08_Email_Monitoring_Notification.eml
2024-10-07_Chat_HRBP_Escalation_Thread.png
Evidence Inventory
This inventory becomes your reference document when writing complaints, meeting with investigators, or instructing a lawyer.
| # | Date | Type | Description | File Name | Relevant To |
|---|---|---|---|---|---|
| 1 | 2024-04-02 | WFH video directive from manager | 2024-04-02_Email_WFH_Video_Directive.png | CHRA s.7 — differential treatment | |
| 2 | 2024-10-08 | Selective monitoring notification | 2024-10-08_Email_Monitoring_Notification.eml | CLC s.246.1 — reprisal |
Your Legal Right to Access Your Own Information
PIPEDA Principle 4.9 — Individual Access
Under the Personal Information Protection and Electronic Documents Act, you have the right to request access to your personal information held by your employer. This includes:
- Your personnel file
- Performance reviews and disciplinary records
- Emails and communications about you
- Monitoring data collected about your work activities
- Any records used to make decisions about your employment
How to Make an Access Request
Submit your request in writing to your employer's Privacy Officer or HR department. Cite PIPEDA Principle 4.9 specifically. The organization must respond within 30 days. If they refuse or provide incomplete information, you can file a complaint with the Office of the Privacy Commissioner of Canada (OPC). There is no statutory time limit specified in PIPEDA for filing a complaint with the OPC, but earlier is always better for evidence preservation.
CLC s.246.1 — Protection Against Reprisal
Your employer cannot retaliate against you for exercising your right to access your personal information. If adverse action follows your access request (termination, demotion, schedule changes, increased monitoring), this may constitute reprisal under CLC s.246.1, and the burden of proof shifts to the employer under s.246.1(4).
SOR/2020-130 — Investigation Documentation
Under the Workplace Harassment and Violence Prevention Regulations, employers are required to document investigations and maintain records. You have the right to be informed of the outcome of any investigation into your complaint.
When to Start Collecting Evidence
The answer is now. If you are reading this guide because something at work feels wrong, start documenting today. Do not wait until you are certain you will file a complaint. Do not wait until things get worse. Do not wait until you have “enough.”
The most common regret employees express after filing a complaint is: “I wish I had started documenting earlier.”
Every email you save today is one more fact in your timeline. Every screenshot you take today is one less gap in your evidence. Every entry in your log today is one more reason an adjudicator, investigator, or judge will take your complaint seriously.
You do not need a lawyer to start collecting evidence. You do not need to file a complaint first. You just need to start.
When Should You Contact a Lawyer?
This platform is designed to help you build your case independently — collecting evidence, documenting incidents, writing complaints in compliance language, and navigating the internal HR process. Many employees can handle these steps without a lawyer.
The most effective time to engage a lawyer is after you have completed the internal process and your employer has failed to resolve your complaint. At that point, a lawyer can review your complete file — your timeline, evidence, complaint, and the employer's response — and provide strategic advice before you file with an external body such as the CIRB, CHRC, or OPC.
By doing the groundwork yourself, your consultation becomes a focused strategic review rather than a costly fact-gathering session. This approach has been validated by employment lawyers who reviewed files prepared using this methodology and found the documentation thorough with nothing to add.
Did this help you?
MyWorkRights.ca is free for every Canadian worker. If this information helped you, consider supporting the project. Every dollar goes toward keeping this site updated and reaching more employees who need it.
Powered by Stripe
Cite This Page
MyWorkRights.ca, "How to Collect and Preserve Workplace Evidence," accessed 2026-04-01, https://myworkrights.ca/guides/evidence-collection
Written by the MyWorkRights.ca team, based on direct experience navigating the CIRB, OPC, and CHRC complaint processes and 500+ hours of employment law research.