Handling Workplace Theft: Applying Preventive Suspension During Administrative Investigations in the Philippines

Introduction: why preventive suspension matters in workplace theft cases

Workplace theft allegations require quick, lawful action. Employers often need to restrict an employee’s access to money, inventory, source code, documents, or other assets while an internal investigation is ongoing. In Philippine labor law, preventive suspension is a permitted management measure—but only under strict conditions, and only for a limited time. Misuse (especially indefinite or over-30-day suspension without proper pay or reinstatement) can lead to liability for constructive dismissal.

Governing rules: where preventive suspension is found in Philippine labor law

The employer’s authority to impose preventive suspension comes from management prerogative, but it is regulated by the Labor Code’s implementing rules and Supreme Court doctrine.

Primary rule (general employment): Under the Omnibus Rules Implementing the Labor Code, the employer may place a worker under preventive suspension only if the worker’s continued employment poses a serious and imminent threat to the life or property of the employer or co-workers (Omnibus Rules Implementing the Labor Code, 1989, Book V, Rule XIV, Section 3; see also the Supreme Court’s restatement of the same standard in Lagamayo v. Cullinan Group, Inc., 2021).

30-day cap and extension concept (Supreme Court doctrine): The Supreme Court consistently applies the rule that preventive suspension must not exceed 30 days. After 30 days, the employer must reinstate the employee (actual or payroll reinstatement) or validly extend the suspension with pay; otherwise, the suspension can ripen into constructive dismissal (ENLI v. Dela Cruz, 2020; Agcolicol, Jr. v. Casiño, 2016; Philam Homeowners Association, Inc. v. De Luna, 2021; Pepsi-Cola Products Phils., Inc. v. Pacana, 2021).

Special rule (security guards): For security personnel, DOLE Department Order No. 14-01 (2001) expressly recognizes preventive suspension, repeats the serious and imminent threat standard, and restates the 30-day limit, allowing extension only if wages and benefits are paid during the extension.

What preventive suspension is—and what it is not

Preventive suspension is not a penalty. It is a temporary measure to protect the employer’s (or co-workers’) life or property while investigating an alleged infraction (Sillano v. JGC Philippines, Inc., 2025; Lafuente v. Davao Central Warehouse Club, Inc., 2021; ENLI v. Dela Cruz, 2020).

Because it is not meant to punish, preventive suspension must be anchored on a real protective need. Employers should avoid treating it as an automatic step whenever an employee is accused of wrongdoing.

When preventive suspension may be imposed in workplace theft situations

Preventive suspension may be imposed only when the employee’s continued presence at work poses a serious and imminent threat to life or property. In workplace theft investigations, this usually means there is a credible risk of:

• further loss of cash, inventory, raw materials, tools, or company equipment;
• tampering with records, receipts, CCTV, logs, audit trails, or booking documents;
• influencing, intimidating, or pressuring witnesses (especially subordinates); or
• blocking access to or withholding company property (including digital assets like source code).

Illustrative Supreme Court examples show how the “serious and imminent threat” test is applied:

• Access to sensitive documents/receipts tied to the charge: Preventive suspension was upheld where the employee had access to documents and receipts that were the subject of the investigation (Pepsi-Cola Products Phils., Inc. v. Pacana, 2021).
• Risk to property even where ownership is disputed: Preventive suspension was upheld where the employer viewed the employee’s refusal to turn over source codes as a serious and imminent threat to property, even while ownership issues were pending (Sillano v. JGC Philippines, Inc., 2025).
• Control over branch finances/records: Preventive suspension was considered justified for a branch manager with broad access to finances, property, and records (ENLI v. Dela Cruz, 2020).

Legal requirements checklist (what managers must satisfy)

To reduce legal risk, managers should ensure each of the following is satisfied:

Requirement	What it means in a workplace theft investigation	Main authority
Serious and imminent threat	Explain why continued presence creates a near-term risk of further loss, concealment, tampering, or obstruction.	Omnibus Rules Implementing the Labor Code (1989), Book V, Rule XIV, Sec. 3; Lagamayo v. Cullinan Group, Inc. (2021); Sillano v. JGC Philippines, Inc. (2025)
Not a punishment	Use it only to protect property/life pending investigation, not as an “early penalty.”	ENLI v. Dela Cruz (2020); Lafuente v. Davao Central Warehouse Club, Inc.(2021)
30-day maximum (default)	Track the 30th day; decide whether to (a) reinstate (actual or payroll) or (b) extend with pay (if extension is chosen).	ENLI v. Dela Cruz (2020); Agcolicol, Jr. v. Casiño (2016); Philam Homeowners Association, Inc. v. De Luna (2021); Sillano v. JGC Philippines, Inc. (2025)
Pay consequences	When justified (within the initial period), the employee is generally not entitled to wages/benefits during suspension; but if the suspension extends beyond 30 days, the excess period must be paid if the employer chooses extension rather than reinstatement.	Lagamayo v. Cullinan Group, Inc.(2021); Philam Homeowners Association, Inc. v. De Luna (2021)
No indefinite suspension	Never suspend “until further notice” without compliance with the 30-day rule; this may become constructive dismissal.	Agcolicol, Jr. v. Casiño (2016)

Step-by-step: a compliant process managers can follow

1) Document the risk before issuing the suspension

Prepare a short internal memo or incident report stating: (a) the alleged theft-related act, (b) the assets at risk (cash, inventory, tools, records, system access), and (c) the reasons the employee’s continued presence creates a serious and imminent threat. The Supreme Court’s decisions reflect that the validity of preventive suspension is anchored on the protective rationale, not on assumptions (Lagamayo v. Cullinan Group, Inc., 2021; Sillano v. JGC Philippines, Inc., 2025).

2) Issue a written preventive suspension notice

Provide a written notice specifying: the start date, the workplace restriction (e.g., barred from premises/systems), and that the suspension is preventive pending investigation. If feasible, specify the initial duration up to 30 days and confirm the schedule for the fact-finding process.

3) Conduct prompt fact-finding and administrative investigation

Proceed with the investigation without delay—gather audit logs, inventory counts, CCTV review, witness statements, and system access reports. For security guards/personnel, DOLE Department Order No. 14-01 (2001) expressly requires setting a day, time, and place for a fact-finding investigation during the suspension period, with notice to the employee and the option to be assisted by counsel or a representative.

4) Watch the 30-day deadline and decide on reinstatement vs. paid extension

Before the 30th day, management must choose one of these paths:

• Reinstate the employee (actual return to work, or payroll reinstatement), or
• Extend the suspension with pay for the extension period (if the employer determines extension is necessary).

Failure to reinstate or extend properly can lead to findings of constructive dismissal (ENLI v. Dela Cruz, 2020; Agcolicol, Jr. v. Casiño, 2016).

5) If dismissal is warranted, keep preventive suspension issues separate from the merits

Preventive suspension addresses workplace risk during investigation; it does not decide guilt. If evidence supports dismissal for just cause, employers must still comply with due process requirements for termination (DOLE Department Order No. 147-15, 2015, on due process standards for termination). Even where dismissal is ultimately valid, employers may still face liability if the preventive suspension exceeded 30 days without pay for the excess period (Philam Homeowners Association, Inc. v. De Luna, 2021).

Common compliance mistakes that create legal exposure

• Automatic suspension upon accusation without explaining the serious and imminent threat.
• Indefinite suspension (“until further notice”) without reinstatement or paid extension after 30 days (Agcolicol, Jr. v. Casiño, 2016).
• Ignoring the 30-day cap and treating the investigation timeline as the controlling factor (ENLI v. Dela Cruz, 2020).
• Failing to pay wages for the excess days when suspension extends beyond 30 days but the employee is not reinstated (Philam Homeowners Association, Inc. v. De Luna, 2021).
• Poor pleading/evidence discipline when disputes escalate: claims and defenses should be clearly stated and supported, as monetary awards and fees require proper basis (Sillano v. JGC Philippines, Inc., 2025).

Typical scenarios (examples) and how the rule applies

• Cashier suspected of skimming sales: Preventive suspension may be justified if the cashier still handles cash drawers or can alter POS records. The notice should cite risk of further loss and record tampering; investigation should be conducted quickly; reinstate or extend with pay after 30 days if needed.
• Warehouse employee accused of inventory pilferage: Suspension may be justified if the employee can access the stockroom, gate passes, or inventory logs. Secure access controls and complete inventory reconciliation during the suspension period.
• IT employee accused of copying proprietary code/data: Preventive suspension may be justified where continued access restricts the employer’s control of digital property, consistent with the Court’s recognition that property risk can justify suspension even if ownership issues are disputed (Sillano v. JGC Philippines, Inc., 2025).

Action points for managers and HR

• Tie suspension to a specific threat to life/property; write it down.
• Start and finish fact-finding promptly; delays increase risk of 30-day overrun.
• Use a calendar control to prevent accidental suspension beyond 30 days.
• Plan for reinstatement or paid extension before day 30; do not wait for investigation completion if it will exceed the limit.
• Keep records audit-ready: notices, investigation schedule, witness statements, access logs, and decision memos.

Conclusion: lawful use of preventive suspension in workplace theft investigations

Preventive suspension can be lawful and defensible in workplace theft cases when the employer can show a serious and imminent threat to property or safety, observes the 30-day maximum, and properly handles reinstatement or any paid extension. Employers who treat preventive suspension as an indefinite holding measure risk findings of constructive dismissal and wage liability for excess days, even if the employee is later dismissed for just cause (ENLI v. Dela Cruz, 2020; Agcolicol, Jr. v. Casiño, 2016; Philam Homeowners Association, Inc. v. De Luna, 2021).

About Nicolas and De Vega Law Offices

 Nicolas and de Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.