Are you thinking of a specific example? I don't recall ever seeing this apart from sometimes a short statement on an outcomes (which Coinbase has given us - they found the complaints baseless [0]).

> ...but they can certainly commission a new one that they can disclose.

I did mention law but this isn't fundamentally a legal argument. I was just saying I'd expect there to be a law, given what releasing a detailed report would entail about employee privacy. I'd be ropeable if someone did that to me after I complained to HR and the story got international attention.

Companies have no role at all in airing internal dirty laundry of employees to Hacker News. Coinbase's position is an employee made a baseless claim - in my book it would probably be a very poor precedent for them to start broadcasting details globally. Best case, utterly unfair because of the power imbalance between a company and an individual employee. Worst case, a smear campaign. All cases, unhelpful except for the enjoyment of pundits Hacker News comment threads.

[0] EDIT Rather than replying - "all of whom found no evidence of wrongdoing and concluded the claims were unsubstantiated" https://blog.coinbase.com/upcoming-story-about-coinbase-2012...