Disciplinary Action and Domestic Enquiry: An HR Guide
A step-by-step guide to running a defensible disciplinary action process in India, from the first complaint through charge sheet, domestic enquiry, findings, punishment and appeal.
Disciplinary Action and Domestic Enquiry: An HR Guide
Most Indian SMBs run a disciplinary action process two or three times a year — often enough to feel confident, nowhere near often enough to be good at it. The plant HR manager who has sat through forty enquiries knows the rhythm cold. The founder facing his first theft allegation is improvising, under pressure, with a WhatsApp group of managers demanding that "we just remove him tomorrow."
This guide is for the second group: telling misconduct from poor performance, the progressive discipline ladder, framing a charge sheet, running a domestic enquiry that survives scrutiny, deciding punishment proportionately, and the payroll and records work that keeps you from losing on a technicality.
Plainly: this is general HR guidance, not legal advice. The law here varies by state, by establishment type, by whether certified standing orders apply, and by the employee's category, and provisions change. Take advice from a competent employment lawyer before you suspend or terminate anyone, and verify the current law and your own standing orders and state rules rather than relying on any article, including this one.
---
Why the Disciplinary Action Process Matters as Much as the Facts
The pattern that costs Indian employers the most money is this: the employer was right on the merits and wrong on the procedure.
The employee did take the material. He did abuse the supervisor. And then the employer skipped the enquiry, or ran one where the complainant, the enquiry officer and the disciplinary authority were the same person, or dismissed first and issued the show cause notice afterwards to paper the file. In a challenge, the facts barely get argued. The procedure does. A reinstatement order with back wages, years later, is far worse than the misconduct ever was.
Process converts belief into evidence. Before an enquiry you have a manager's account, some CCTV nobody has reviewed, and a sense that "everyone knows what he did." The process turns that into dated statements, named witnesses, exhibits shown to the accused, and a written finding with reasons — a file that still speaks for itself when your key witness has resigned and moved to Pune.
It also protects you from your own certainty. Anyone who has run enough cases has been sure at the start and wrong by the end. The "theft" was an unrecorded stock movement; the "insubordination" was a supervisor who had been provoking the worker for weeks. An enquiry is a check on management's first instinct. A process built to produce only one answer is theatre, and your workforce will recognise it as theatre.
---
Misconduct at Work vs Poor Performance
Half the disciplinary messes in Indian SMBs start with a category error: someone who is simply not good at the job gets pushed into a disciplinary channel because it feels faster, and the case collapses because there is nothing to charge.
Misconduct at work is a breach of a rule or of the basic obligations of employment — an act, a choice. Falsifying a record, hitting a colleague, walking out with company property, refusing a lawful instruction, leaking confidential data. Poor performance is a shortfall in output, quality or capability: the person is not deliberately failing and is still not delivering.
Three tests separate them:
- Could the employee have chosen otherwise? Misconduct is a choice; incapability is not.
- Was a rule broken, or a standard not met? Rules give you misconduct; standards give you performance.
- What would fix it? Misconduct needs correction and deterrence; performance needs training, tools or clearer goals.
The messy middle is the employee who can do the work and does not — repeated carelessness after training and warnings. That can become misconduct, but only if you have documented the training, the instruction and the earlier corrections. Without that record, "wilful negligence" looks like an employer relabelling a performance problem to reach a faster exit.
When counselling or a PIP is the right answer
Choose the non-disciplinary route when it is a first, minor, out-of-character lapse; when the rule was unpublished or inconsistently enforced; when the root cause is capability, workload or unclear expectations; when the employee is dealing with illness or bereavement; or when the manager has never actually told the employee the behaviour is a problem — more common than anyone admits.
A documented counselling conversation costs fifteen minutes and usually ends the matter. A PIP — specific goals, defined support, a review period, an honest conversation about consequences — is the right instrument for capability problems. Neither is a penalty, so do not label a coaching conversation a "warning" to make it feel serious. The reverse error is worse: nobody improves their way out of stealing.
---
The Foundation: Code of Conduct and Standing Orders
You cannot enforce a rule you never wrote down and never told anyone about. This is the most common structural weakness in SMB discipline files.
Define misconduct in policy. Your code of conduct should list, in ordinary language, the acts that constitute misconduct, classified by seriousness: attendance and unauthorised absence; honesty and property, including theft, fraud and falsification of records; behaviour, including abuse, threats, violence and harassment; refusal of lawful instructions and insubordination; safety breaches; intoxication on duty; confidentiality and IT policy breaches; and integrity of the relationship, including false statements at hiring, conflict of interest and bribery. Include a catch-all such as "any other act subversive of discipline" — but never rest a serious charge on the catch-all alone, because a vague charge is a weak charge.
Read your standing orders. Where certified standing orders apply, they are the operating manual, not background reading. They typically specify what counts as misconduct, the penalties available, the enquiry procedure, and provisions on suspension pending enquiry and subsistence allowance — and they generally prevail over your internal handbook. Put them on the table before starting any case. Where applicability is unclear — common for mixed offices and newer units — get it clarified by counsel before, not during, a live case.
Acknowledgement is the whole point. An unacknowledged policy is decorative. Issue the code at joining with the appointment letter and capture a signed or system-logged acknowledgement. Re-issue and re-acknowledge on every material revision, because a five-year-old signature does not cover a rule added last year. Provide it in the local language where the workforce needs it, and record that you did. When your HRMS holds a timestamped acknowledgement against a specific policy version, this stops being an argument.
---
The Progressive Discipline Ladder
Penalties should escalate with repetition and seriousness. That is fairer and far more defensible than a single leap to dismissal.
- Verbal counselling. Private conversation, behaviour named, no penalty — but the manager writes a short dated file note, which is what makes step 2 possible.
- Documented counselling. Written record shared with the employee, framed as guidance rather than punishment.
- Written warning. A formal penalty stating the conduct, the rule breached, the correction required and the consequence of repetition, acknowledged by the employee.
- Final warning. For repetition, or a serious first offence short of dismissal. States explicitly that further breach may lead to termination for misconduct.
- Suspension as punishment, withheld increment, demotion, where your policy or standing orders provide for them. Note carefully: punitive suspension is a penalty imposed after enquiry, and is a different thing from suspension pending enquiry, which is not a punishment at all. Never blur the two in your letters.
- Termination for misconduct, after a proper enquiry and a proportionate decision.
When to skip rungs. The ladder is a default, not a straitjacket. Go straight to enquiry — and if proved, to dismissal — for theft or fraud; violence or credible threats; sexual harassment (via the Internal Committee); sabotage; safety breaches endangering life; falsification of records with intent to gain; bribery; and serious data theft. The test is not how angry management is, but whether the act, if proved, is so serious that the relationship cannot reasonably continue.
Decide in policy how long a warning stays "live" for escalation — many employers use six or twelve months — and state it in the letter. Otherwise someone gets dismissed on the strength of a warning issued four years ago by a manager who has left.
Minor and major misconduct, with indicative responses
Illustrative only. Build your own classification from your code of conduct and applicable standing orders, and apply it consistently.
| Category | Example conduct | Typical first response | Enquiry needed? |
|---|---|---|---|
| Minor | Occasional late arrival | Verbal counselling, file note | Only if disputed and a penalty is proposed |
| Minor | Single unauthorised absence | Counselling; leave adjusted per policy | No |
| Moderate | Habitual lateness after warning | Written warning, then final warning | Advisable if disputed |
| Moderate | Refusal of a reasonable instruction | Show cause notice; written or final warning | Yes if facts disputed |
| Moderate | Aggressive language to a colleague | Show cause notice; final warning if proved | Yes |
| Moderate | Repeated negligence causing loss | Show cause notice, enquiry | Yes |
| Major | Theft, fraud, misappropriation | Charge sheet; consider suspension pending enquiry | Yes, always |
| Major | Physical assault at the workplace | Charge sheet; suspension usually appropriate | Yes, always |
| Major | Falsifying attendance or statutory records | Charge sheet | Yes, always |
| Major | Safety breach endangering others | Charge sheet; removal from the task | Yes, always |
| Major | Sexual harassment | Route to the Internal Committee | IC process, not a normal enquiry |
| Major | Data theft or confidentiality breach | Charge sheet; preserve digital evidence | Yes, always |
Do not treat the third column as a tariff. It is a starting point; the facts always move it.
---
The Disciplinary Action Process, Stage by Stage
Not every case needs every stage — but skip a stage consciously, not by drift.
Stage 1: Complaint intake
Capture who is reporting and when; what is alleged, specifically ("he was rude" is not a complaint — "on 14 August at about 3 pm in the packing bay he shouted [words] at the line supervisor in front of six workers" is); who else was present; and what evidence exists and where. Then preserve evidence the same day, in writing to IT and security, because CCTV overwrites in days and a reissued laptop is gone. And stop the reporting manager investigating on his own, before he interrogates people in the corridor and contaminates the case.
Stage 2: Preliminary fact-finding
A short, quiet check answering one question: is there enough here to justify formal proceedings? It is not the enquiry and not a finding of guilt — days, not weeks. Review the documents and evidence, take short written statements from the complainant and obvious witnesses, and produce a note on what is established, what is disputed and what you recommend. Never pressure anyone to sign a statement or extract an "admission" from someone cornered in a room with three managers; coerced confessions destroy cases.
Stage 3: Deciding whether to proceed
Is the act actually a breach of a written rule? Is there evidence beyond a bare assertion? Is it serious enough for formal discipline, or is counselling proportionate? Have we treated similar cases the same way — inconsistency is one of the fastest ways to lose. Does this belong in another channel entirely, such as the Internal Committee or the police? Record the decision and reasons either way; a file showing you considered and rejected formal action beats a file that is silent.
Stage 4: Framing the charge sheet or show cause notice
This is where cases are most often broken, and it is entirely within your control. A show cause notice puts the alleged conduct to the employee and asks for an explanation — usually the lighter instrument. A charge sheet formally initiates proceedings in a serious matter, setting out the charges, the facts relied on and the rules alleged to have been breached. Either way:
- Be specific. Date, time, place, act, and the rule or standing order clause. "Misbehaviour and indiscipline over a period of time" is unusable.
- One allegation per charge, numbered. Do not bundle five incidents into one paragraph.
- Do not pre-judge. Write "it is alleged that," not "you committed."
- Give a real deadline. Absurdly short windows look designed to defeat the response.
- List the documents relied on and supply copies. If you rely on CCTV, let the employee view it.
- Serve it properly. Hand delivery against acknowledgement is best; if refused, record the refusal with witnesses and also send it by registered post and email, keeping the receipt.
- Sign at the right level — a competent authority under your policy, and not the person who will later sit as enquiry officer.
Stage 5: The employee's explanation
Read it properly. If it satisfies you, close the matter in writing and leave no unresolved stain on the record. If the employee admits the charge you may not need a full enquiry — but take advice, and make sure the admission is unambiguous, freely given and covers the whole charge, not "I was late that day" against a charge of falsifying a record. Do not treat silence as an admission: record the non-reply and proceed with notice.
Stage 6: Deciding whether a domestic enquiry is needed
A domestic enquiry is an internal quasi-judicial proceeding in which charges are tested through evidence, with the employee given a fair opportunity to defend. Hold one when the facts are disputed and the penalty is serious, when dismissal is on the table, when your standing orders require it, or when the case turns on a credibility contest. An unnecessary enquiry costs a few weeks; a skipped necessary one is measured in years of back wages.
Stage 7: Appointing the enquiry officer and presenting officer
The enquiry officer conducts the enquiry, records evidence and submits findings. The essential qualification is independence: not the complainant, not a witness, not the fact-finder, and not the disciplinary authority who decides the penalty. In a small company, use a senior manager from a different function or location, or engage a retired IR professional externally — common, and often cleanest. Do not appoint the aggrieved department head because he "knows the background"; knowing the background is exactly the disqualification.
The presenting officer leads management's witnesses, produces documents and cross-examines the defence. This keeps the enquiry officer from doubling as prosecutor, the single most common structural defect in SMB enquiries. If the enquiry officer is asking all the accusatory questions, it is not a hearing — it is an interrogation with minutes.
Stage 8: Notice of hearing
State the date, time and venue with adequate lead time; the charges; and the employee's rights — to be present, to inspect the documents relied on, to cross-examine management witnesses, to lead evidence and call witnesses, and to be assisted by a representative to the extent your standing orders permit (often a co-worker, or a union office bearer; whether an external lawyer is allowed depends on your rules, so check before refusing). State that the enquiry may proceed ex parte if the employee does not attend, and serve it with proof.
Stage 9: Conducting the enquiry
Strict rules of evidence do not apply as in court, but the structure matters: opening, with attendance confirmed and a plea taken on each charge; management's evidence led by the presenting officer, documents marked as exhibits; cross-examination by the employee or the representative; defence evidence and witnesses; cross-examination of the defence; closing arguments. Rules that keep enquiries clean:
- Minute contemporaneously. Read the record back each session and get every page signed by the employee, the presenting officer, the deposing witnesses and the enquiry officer. Where the employee refuses to sign, record the refusal on the page.
- Give the employee a copy of each day's proceedings. No secret record.
- Adjourn reasonably but not endlessly. Refusing a first reasonable request looks like haste; granting a fifth looks like drift.
- Keep the room neutral, and use a language the employee understands, or a translator, recording that you did.
- If the employee stays away without cause, issue a further notice, allow reasonable time, record your efforts and proceed ex parte — but management must still prove its case.
Stage 10: The enquiry report and findings
The report should contain the charges verbatim; the procedural history of notices, dates and attendance; a summary of management's evidence witness by witness and of the defence; the exhibits; analysis and reasoning — why one version was preferred, what the documents showed, which contradictions mattered; and a separate finding on each charge: proved, not proved, or partly proved. The enquiry officer should not recommend punishment; that is the disciplinary authority's job. The report goes to that authority, with a copy to the employee, who gets to make a representation on the findings before the penalty is decided.
Stage 11: The decision on punishment, and proportionality
The disciplinary authority reads the report, the representation and the record, then decides. If it disagrees with the findings it may differ, but must record reasons and give the employee notice of the proposed disagreement and a chance to respond. Silently flipping a "not proved" into a dismissal is indefensible.
Proportionality is where an otherwise clean case still goes wrong. Weigh and record the gravity of the proved misconduct and the harm; whether it was deliberate, reckless or careless; length of service and past record; live prior warnings; the trust the role carries; provocation or mitigation; consistency with comparable cases; and whether trust can survive. A shockingly disproportionate penalty invites interference even where misconduct is proved — dismissing a fifteen-year employee with a clean record for a first minor lapse is the classic example.
Stage 12: Second show cause, final order and appeal
Under some frameworks and standing orders, a second show cause notice issues before a major penalty: here are the findings, here is the proposed penalty, show cause why it should not be imposed. Whether it is mandatory for you depends on your standing orders, your policy and the current legal position for your category of employee — verify it. Where it is not required, many careful employers still hear the employee on quantum.
The final order states the charges and the finding on each; that an enquiry was held and the employee participated, or the circumstances of ex parte proceedings; that the representation was considered; the penalty and its effective date; the proportionality reasoning; and the appeal route, authority and window. Serve it with acknowledgement, registered post and email, and keep the proof.
The appeal should lie to an authority senior to and independent of the disciplinary authority, with a clear filing window and a reasoned decision. An appeal decided in a day by someone who signed off on the original decision is worse than no appeal — it documents that the process was hollow.
Stage-by-stage summary
Timelines are indicative planning targets, not legal deadlines. Your standing orders, policy or a court may require otherwise.
| Stage | Owner | Output document | Timing |
|---|---|---|---|
| Complaint intake | HR / manager | Incident report; evidence preservation request | Day 0–1 |
| Preliminary fact-finding | Nominated investigator | Fact-finding note | Day 1–7 |
| Decision to proceed | HR head with business head | Decision note with reasons | Day 5–8 |
| Charge sheet / show cause notice | Competent authority | Charge sheet, served with proof | Day 7–10 |
| Suspension pending enquiry, if warranted | Competent authority | Suspension order; payroll instruction | Same day |
| Employee's explanation | Employee | Written explanation | 3–7 days |
| Appoint enquiry and presenting officers | Disciplinary authority | Appointment letters | Within 3 days |
| Notice of hearing | Enquiry officer | Notice listing the employee's rights | 5–7 days before |
| Enquiry hearings | Enquiry officer | Signed proceedings, exhibits | 2–6 weeks |
| Enquiry report | Enquiry officer | Findings on each charge | 7–10 days after |
| Copy to employee | HR | Employee's representation | 5–7 days |
| Punishment decision | Disciplinary authority | Note on proportionality | Within 7 days |
| Second show cause, if applicable | Disciplinary authority | Notice and reply | 3–7 days |
| Final order | Disciplinary authority | Order with appeal route | Within 5 days |
| Appeal | Appellate authority | Reasoned appellate order | 15–30 days |
| Records and payroll closure | HR and payroll | F&F, attendance regularisation, archive | Per statute |
Do not rush — compressed timelines look like a foregone conclusion. Do not drift either: a case limping along for eight months with a suspended employee starts to look like punishment by delay.
---
Suspension Pending Enquiry and Subsistence Allowance
Suspension pending enquiry is an interim administrative measure keeping the employee away from the workplace while the enquiry runs. The employment relationship continues. It is not a penalty and must not be described as one in your letters.
Suspend only for a real reason: risk of tampering with evidence or influencing witnesses; serious dishonesty allegations in a role handling cash, stock or sensitive data; risk to safety; intimidation of the complainant. Not as a signal, and not as pressure. Record the reason. Often better and cheaper: transfer to another shift or location, removal of system access or approval authority, or assignment to non-sensitive duties.
The concept of subsistence allowance. Where an employee is suspended pending enquiry, the law and applicable standing orders generally require payment of a subsistence allowance for the period, so the employee is not left destitute while an unproved charge is investigated. It is typically expressed as a proportion of wages, and that proportion commonly changes if suspension extends beyond a defined period.
The rates, defined periods and attached conditions vary by statute, by state rules and by your certified standing orders, and they change over time. Do not rely on a number you remember. Confirm the current position with counsel before issuing the suspension order, and state the basis in the order.
Non-payment or short payment is a serious defect, treated as undermining natural justice on the reasoning that an employee starved of income cannot properly defend himself. Pay it on the normal payroll cycle with a payslip, never in undocumented cash. And the final order must say how the suspension period is treated and how the difference between wages and subsistence allowance is settled.
---
Principles of Natural Justice, in Plain Language
The principles of natural justice get cited constantly and explained rarely. Stripped of the Latin, there are three.
1. Tell the person what they are accused of
Do: "On 3 September at approximately 11:20 you removed two cartons of finished goods from the dispatch bay and loaded them into a private vehicle without a gate pass, contrary to Clause X of the Standing Orders. CCTV from Camera 4 and the gate register are relied on; copies are enclosed."
Don't: "You have been indulging in activities detrimental to the company's interests." Don't rely at the enquiry on an audit report the employee has never seen.
2. Give a genuine opportunity to be heard
Do give reasonable notice, supply documents in advance, allow cross-examination and defence witnesses, allow a representative where permitted, and adjourn for a genuine reason.
Don't schedule the hearing for the day after the charge sheet is handed over. Don't refuse cross-examination because "the witnesses are afraid" without exploring a protective alternative. Don't take a statement privately and use it in the findings without putting it to the employee. Don't hold the hearing while the employee is in hospital and record it as a refusal to attend.
3. Nobody judges their own case, and the decision must be reasoned
Do keep the complainant, the investigator, the enquiry officer and the disciplinary authority as four different people wherever possible, and write findings that give reasons.
Don't let the department head who caught the employee sit as enquiry officer. Don't announce the outcome in a management meeting before the enquiry ends — it happens more often than you would think, and it is fatal. Don't issue a one-line order: "The charges are proved and your services are terminated." An order without reasons is an order without a defence.
Treat consistency as a fourth principle. If two employees commit the same act and one is warned while the other is dismissed, you will be asked why. Have the answer in writing at the time, or do not create the disparity.
---
Where the Disciplinary Action Process Goes Wrong: Common Procedural Errors
| Error | Why it happens | Likely consequence |
|---|---|---|
| No written, acknowledged code of conduct | Informal culture | No rule to hang the charge on; enforcement looks arbitrary |
| Vague charge sheet ("indiscipline") | Drafted in a hurry | Charge unprovable; findings unsafe |
| Enquiry officer is also complainant or fact-finder | "We don't have enough senior people" | Set aside for bias; whole process wasted |
| No presenting officer; enquiry officer prosecutes | Nobody knew the role existed | Looks like an interrogation; bias inferred |
| Cross-examination not offered or refused | Rushed hearing; witness discomfort | Violation of natural justice; findings unusable |
| Documents relied on but never shown | Confidentiality anxiety | Findings based on unseen material are set aside |
| Unreasonably short notice periods | Pressure to close fast | Opportunity to be heard held illusory |
| Termination first, paperwork later | A manager acting alone | Almost impossible to defend |
| Subsistence allowance unpaid or short-paid | Payroll not informed; order silent | Denial of fair opportunity; outcome challenged |
| No reasons recorded in the punishment order | "The reasons are obvious" | No defensible basis on review |
| Penalty grossly disproportionate | Emotional decision-making | Set aside despite proved misconduct |
| Inconsistent treatment of similar cases | No central case record | Discrimination and mala fide arguments |
| POSH complaint run as a normal enquiry | Ignorance of the statutory route | Serious exposure; process invalid |
| WhatsApp threats by the reporting manager | No manager training | Evidence of victimisation and pre-judgment |
| F&F paid out mid-enquiry by reflex | Payroll on autopilot | Suggests the relationship already ended |
| Experience letter with editorialised remarks | Manager writing from emotion | Defamation and unfair-practice exposure |
---
Special Situations
POSH complaints go to the Internal Committee
An allegation of sexual harassment at the workplace must be routed to the Internal Committee constituted under the applicable law. Do not treat it as an ordinary disciplinary matter, do not appoint an enquiry officer, and do not have HR "look into it" informally first.
The IC has its own composition requirements — a woman presiding officer, a required proportion of women members, an external member from a relevant background — and its own procedure, timelines and strict confidentiality obligations. Its recommendations feed into the employer's action, which is where your disciplinary machinery re-enters, but the enquiry itself is the IC's. Retaliation against a complainant or witness is itself a serious matter. If a complaint that arrived as general misconduct turns out to contain harassment allegations, stop and redirect.
Absconding employees
An employee who stops coming to work is a discipline case, not an automatic resignation, and treating unexplained absence as "abandonment" without process is a frequent and expensive shortcut. A defensible sequence: log every contact attempt; send a letter to the last recorded address by registered post and email requiring the employee to report by a stated date or explain, warning that failure may lead to disciplinary action; send a second and if needed a third; then issue a charge sheet for unauthorised absence and proceed, ex parte if necessary. Keep the postal receipts — they are the backbone of the file. And keep an open mind: people who vanish are sometimes in hospital, in custody, or dealing with a family emergency.
Theft or fraud, and when to involve the police
Your internal process and a criminal complaint are separate tracks that can run in parallel. A criminal case is not a precondition for disciplinary action, and the standard of proof in an internal enquiry is generally lower than in a criminal trial, so you need not wait for a verdict. Nor does an acquittal automatically undo a disciplinary finding — but it is a fact to consider, and you should take advice on its effect.
Involve the police where the loss is material, where there is a pattern, or where insurance requires it — as a considered decision at a senior level, not an angry manager marching someone to the station. Never use the threat of a police complaint to extract a resignation or confession; it converts a strong case into a weak one. And do not detain anyone: private confinement is not something an employer can do, whatever the provocation.
Misconduct by a senior leader
The higher the accused sits, the more your normal process breaks down, because the enquiry officer reports to the accused and the disciplinary authority is a friend. Escalate ownership to the board, the promoter or a committee above the accused, and use an external enquiry officer as a matter of course. Suspend system access and delegated authorities early, given the greater capacity to influence witnesses and alter records. Hold the same standard — seniority usually raises culpability — and check the governance overlays: notice provisions, directorships, statutory filings, signatory changes, banking mandates.
Remote employees and digital evidence
Common allegations here are falsified work logs, moonlighting where the contract prohibits it, data misuse and expense fraud. Export evidence from the source system with metadata, not as a phone photo of a screen, and record who exported it and when; preserve mailbox and chat data before deactivating an account. Cross-check your monitoring against your own policy and privacy commitments — evidence gathered by means you never disclosed is a problem. A hearing can run over video with care, but still keep signed written proceedings, and serve notices to the recorded personal email and postal address, not only the company email you may have disabled. Prefer system exports and audit logs to screenshots, which are easily fabricated and easily challenged.
Misconduct during notice period
An employee serving notice is still an employee, and the full disciplinary action process applies. If the notice period will end before the enquiry concludes, take advice; the answer depends on your contract, your policy and the charge. Where the conduct involves data or customers, act fast on access revocation and evidence preservation. Do not hold the full and final settlement indefinitely as leverage: withholding dues needs a defined, lawful basis, so get advice on what you can hold and for how long.
---
The Payroll and Records Interlock
This is where a good case quietly develops holes, because payroll runs on a monthly cycle whether or not your enquiry is going well.
Suspension and payroll. Issue a written payroll instruction the same day the suspension order is served; do not leave payroll to interpret the order. Configure a distinct, auditable pay treatment rather than manually adjusting a salary line. Confirm the subsistence allowance basis with counsel and reference it in the order. Document the treatment of attendance-linked allowances, and confirm the position on statutory contributions with your consultant — it is fact-specific.
Attendance coding. Create specific codes — "suspension pending enquiry," "absent pending enquiry outcome," "leave: enquiry adjournment" — rather than coding these days as ordinary absence or leave. Never back-date attendance records; a back-dated entry, once discovered, destroys the credibility of the whole file. Regularise the period in one documented action referencing the final order.
Holding the full and final settlement. Stop the standard F&F workflow from firing automatically while a case is live, with the hold, the reason, the approver and a review date recorded. Any recovery from dues needs a lawful, documented basis — take advice before deducting anything for alleged loss, one of the most commonly overreached areas. Statutory dues have their own timelines and generally cannot be held hostage to a disciplinary dispute; gratuity treatment on termination for misconduct is a technical area with statutory conditions, so do not decide it from memory.
Experience and relieving letters. State facts, not opinions: dates of employment, designation and, if your policy is to state it, the fact and date of separation. Do not editorialise — a line calling the person dishonest, added by an angry manager, is a lawsuit invitation. Keep one owner and one approved format.
Document checklist for the case file
| Document | Why it matters |
|---|---|
| Appointment letter, contract, acknowledged code of conduct (each version) | Proves the rule reached this person |
| Policy acknowledgements with timestamps | Defeats "I was never told" |
| Prior counselling notes and warning letters | Supports escalation and proportionality |
| Complaint or incident report | Origin of the case, with dates |
| Evidence preservation request and IT confirmation | Shows evidence integrity |
| Preliminary fact-finding note | Shows a considered decision to proceed |
| Charge sheet or show cause notice, with proof of service | Central to the case |
| Employee's explanation | Central to the case |
| Enquiry and presenting officer appointment letters | Shows separation of roles |
| Hearing notice with proof of service | Natural justice evidence |
| Signed daily proceedings and exhibit list | The spine of the enquiry |
| Enquiry report and the employee's representation | Basis for the decision |
| Decision note with proportionality reasoning | Defends the quantum |
| Final order with proof of service; appeal papers and order | The operative documents |
| Payroll, subsistence, attendance and F&F records | Links the case to money |
Set retention by policy with legal input, and hold the case file for at least the applicable limitation period for a challenge — longer than most people assume. Warning letters stay even after they lapse for escalation, because they are part of the employment history. Restrict access: a disciplinary file is sensitive personal data.
---
How to Write the Documents
The outlines below are illustrative skeletons showing what each document should cover — not legal templates. Have your actual documents drafted or reviewed by counsel and aligned with your applicable standing orders.
Skeleton outline: warning letter
Illustrative outline only — to be reviewed by counsel.
- Letterhead, reference number, date, employee name, code, designation, department.
- Subject line identifying it as a written warning or final warning.
- The conduct: what happened, with date, time and place, in factual terms.
- The rule: the clause of the code of conduct or standing orders breached.
- The history: prior counselling or warnings, with dates and reference numbers.
- A fair, brief summary of what the employee said when the matter was discussed.
- The decision, and how long the warning stays live for escalation.
- The expectation: what must change, by when, and any support offered.
- The consequence of repetition, stated plainly and without threats.
- Acknowledgement block, with a note on the procedure if the employee declines to sign.
A warning letter should read as calm and factual; sarcasm and moral commentary weaken it.
Skeleton outline: show cause notice
Illustrative outline only — to be reviewed by counsel.
- Header, reference details and the subject line "Show cause notice."
- The allegation: specific conduct with date, time, place and people involved — framed as an allegation, not a finding.
- The rule allegedly breached, by clause, and the material relied on, with copies enclosed.
- The requirement: show cause in writing why disciplinary action should not be taken, within a stated and reasonable period.
- Consequence of non-response: the matter may be decided on the record available.
- Any interim measure, cross-referring to a separate suspension or redeployment order.
- A contact point for questions or document copies.
- Issuing authority — name, designation, signature — being the competent authority under your policy.
- Service record: acknowledgement of receipt, or the record of refusal plus registered post and email details.
Skeleton outline: charge sheet
Illustrative outline only — to be reviewed by counsel.
- Header and reference details; clearly titled as a charge sheet or statement of charges.
- Preamble: engagement details and the applicability of the code of conduct or standing orders.
- Articles of charge, numbered separately, one allegation each, in specific terms.
- Statement of imputations for each charge: the facts relied on to support it.
- The rule or standing order clause breached, per charge.
- List of documents relied on, with how copies may be obtained or inspected, and the witnesses management proposes to examine.
- Call for a written explanation within a stated period, stating whether each charge is admitted or denied.
- Notice that a domestic enquiry will follow if the explanation is unsatisfactory or the charges are denied.
- The employee's rights: inspection, hearing, cross-examination, leading evidence, and assistance by a representative to the extent permitted.
- Consequence of non-response; issuing authority and signature; service record.
Across all three: short sentences, the language the employee actually understands, no adjectives in the factual sections, and nothing you would be embarrassed to read aloud.
---
Illustrative Case Walkthrough
This is a fictional example created for this article. It is not a real case; timelines and outcomes are for teaching purposes only.
Setting. A 240-employee auto components unit with certified standing orders and an acknowledged code of conduct. "R" is a store assistant, six years' service, one written warning eighteen months ago for unauthorised absence, otherwise clean. On a Saturday evening the security supervisor reports that R left carrying an unchecked bag; a stock count later shows a shortfall of moderate value.
Days 0–5. HR emails IT and security the same evening to preserve and export the CCTV, and secures the stock register. An HR executive with no connection to stores reviews the footage and pulls the week's issue slips. The footage shows R carrying a bag out but not its contents. A store colleague says R had asked him the previous week to "adjust the register," which he refused. The fact-finding note records: shortfall established, bag established, contents not established, register request disputed and resting on one witness.
Days 6–7. Because the alleged register request suggests a risk of influencing a witness inside the department, HR head and plant head conclude suspension pending enquiry is justified, record that reasoning, and confirm the current subsistence allowance position with their labour law consultant first. Two documents are hand-delivered against acknowledgement with copies by registered post: a charge sheet with three numbered charges — unauthorised removal of property, the resulting shortfall, and attempting to induce a colleague to falsify a store record — each citing the standing order clause and listing documents and proposed witnesses; and a separate suspension order stating it is not a punishment and setting out the subsistence allowance basis. Payroll gets a written instruction the same day.
Days 13–16. R denies everything, says the bag held his lunch box, says the colleague has a grievance from a shift-allocation dispute, and asks to see the CCTV. The facts are disputed, so a full enquiry is required. A retired IR manager is engaged externally as enquiry officer; the quality manager, unconnected to stores or security, is appointed presenting officer.
Days 22–45. Notice of hearing issues eight days ahead, setting out R's rights including assistance by a co-worker as the standing orders permit. Over three sittings, cross-examination establishes that the security supervisor never opened the bag, never stopped R and did not record the incident in the gate register at the time; that the store colleague maintains his account while conceding the shift dispute; and that the store had a known reconciliation lag with three prior unattributed shortfalls. Every page is signed; copies go to R each day.
Days 54–66. Charges 1 and 2 are not proved — the footage does not show contents, nothing was recovered, and the shortfall is real but unconnected to R. Charge 3 is proved, with reasons: the colleague held up under cross-examination and had reported the request contemporaneously to the stores in-charge, who confirmed it. R receives the report and represents. The plant head, uninvolved in the fact-finding, records his proportionality reasoning: two charges fail and R gets the full benefit; the proved charge goes to record integrity but was a refused attempt causing no loss; six years' service and one lapsed, unrelated warning. Dismissal would be disproportionate. The penalty is a final warning live for twelve months plus transfer out of stores, and the order directs that the suspension period be treated as duty with arrears paid next cycle.
What it shows. The company did not get the outcome its security supervisor wanted. It got a defensible one — the weak charges collapsed because the process surfaced the evidence gaps rather than burying them, and the surviving charge was punished proportionately. If R challenges this, the company is defending a record, not a hunch.
---
Training Line Managers So They Stop Poisoning Cases
More cases are damaged by well-meaning managers than by clever employees. A two-hour annual session pays for itself many times over.
What managers actually do wrong
- Threaten on WhatsApp. "Come tomorrow with a resignation letter or I'll make sure you never work in this city again." That message ends up in the employee's reply, and it converts your case into a victimisation story.
- Investigate on their own — cornering witnesses, dictating statements, promising protection.
- Decide and announce. Telling the team the person is "as good as gone" before the enquiry starts is direct evidence of pre-judgment.
- Document nothing until it is serious — two years of tolerated behaviour, then a sudden charge sheet. The obvious question is why now.
- Document dishonestly. Back-dated warning letters are the worst of all: often detectable, and they destroy the credibility of everything else in the file.
- Apply rules unevenly, and delete things — even innocent deletion looks like concealment.
What to train them to do
- Report, don't investigate. Write down what you saw, with dates, send it to HR the same day, then stop.
- Preserve, don't collect. Tell HR what evidence exists and where; do not forward copies outside the process.
- Say it once, clearly, in the moment. Most behaviour problems end at a calm conversation. Write three lines afterwards.
- Keep it in the system, not in a notebook or a WhatsApp thread — the record should survive your resignation.
- No threats, no promises, no deals — not about the police, not about references, not about settling it quietly.
- Stay neutral in public, and escalate the same day anything that might be harassment, safety, theft or fraud.
- Know your role. A manager can be a witness or a complainant, never the judge in his own department's case.
Run the training on real, anonymised examples of cases that went wrong. Abstract principles do not stick; the story of the WhatsApp message that cost the company a reinstatement order does.
---
Governance Checklist for the Disciplinary Action Process
- [ ] A written code of conduct listing acts of misconduct, classified by seriousness, acknowledged by every employee with a retrievable timestamp.
- [ ] Certified standing orders, where applicable, current and actually read by HR.
- [ ] Policy names the disciplinary authority, the appellate authority and the available penalties, and states how long warnings stay live.
- [ ] The Internal Committee properly constituted, trained and publicised.
- [ ] An external enquiry officer and an employment lawyer identified before you need them.
- [ ] Every complaint logged centrally with date, owner and status; evidence preservation triggered in writing on day one.
- [ ] Fact-finding separated from the enquiry; the fact-finder never becomes the enquiry officer.
- [ ] Charge sheets specific, numbered, non-prejudging and reviewed before issue; service of every document proved and filed.
- [ ] Enquiry officer, presenting officer, complainant and disciplinary authority are four different people.
- [ ] Proceedings minuted, signed and copied to the employee each sitting.
- [ ] Enquiry report gives reasons and a separate finding per charge; the employee gets it and can represent before punishment.
- [ ] Proportionality reasoning written into the decision; the final order states the appeal route and window.
- [ ] Suspension orders trigger a same-day payroll instruction; subsistence allowance confirmed with counsel and paid on the normal cycle.
- [ ] Dedicated attendance codes for suspension and enquiry-related absence; nothing ever back-dated.
- [ ] Automatic F&F blocked while a case is live, with a documented hold and review date.
- [ ] The case file archived, access-restricted and retained; experience letters on one approved, factual format.
- [ ] Line managers trained annually; similar cases compared before a penalty is set; every termination reviewed by someone senior before the order issues.
---
Frequently Asked Questions
Do we always need a domestic enquiry before terminating for misconduct?
As a working rule, where you propose a major penalty such as dismissal and the facts are disputed, a proper domestic enquiry is the safe and expected route. There are limited situations where one may not be required — for example a clear, voluntary, unambiguous written admission covering the whole charge — but these are narrower than employers assume and are fact-specific. For an SMB, the safest approach is to hold the enquiry and take legal advice before any termination for misconduct.
Can we suspend an employee without pay while the enquiry is going on?
Suspension pending enquiry is an interim measure, not a punishment, and it generally carries an obligation to pay a subsistence allowance for the period. Withholding pay entirely is a serious risk and has been treated as undermining the fairness of the whole proceeding. Confirm the current applicable rate, period and conditions under the statute, your state rules and your certified standing orders before issuing the order, and state the basis in the order itself.
What if the employee refuses the charge sheet or does not attend the enquiry?
Record the refusal in writing with witnesses present, and also send the document by registered post and email to the last recorded address, keeping all proof. If the employee does not attend despite proper notice, issue a further notice, allow reasonable time, record your attempts, and then proceed ex parte. Even then, management must still lead evidence and prove the charges — the employee's absence does not shift the burden.
Can the same person be the investigator and the enquiry officer?
No, and this is one of the most common defects. Whoever conducted the preliminary fact-finding has already formed a view of the facts, which disqualifies them from sitting as an impartial enquiry officer. Keep the complainant, the fact-finder, the presenting officer, the enquiry officer and the disciplinary authority as distinct people; if you are too small for that, engage an external enquiry officer.
How do we handle a sexual harassment complaint that also looks like general misconduct?
Any allegation of sexual harassment at the workplace must go to the Internal Committee constituted under the applicable law, which follows its own procedure, timelines and confidentiality obligations. Do not run it as an ordinary domestic enquiry and do not let HR look into it informally first. If a complaint that arrived as general misconduct turns out to contain a harassment allegation, stop, redirect it to the IC, and take advice on how any genuinely unrelated charges should be handled.
An employee has stopped coming to work. Can we treat that as resignation?
Not automatically. Unauthorised absence is a form of misconduct and should go through the process: documented contact attempts, letters to the last recorded address by registered post and email with a clear reporting deadline, then a charge sheet if there is no response. A reasoned order after that sequence is far more defensible than an "abandonment of service" declaration, which employers frequently lose on.
Should we file a police complaint in a theft case, and must we wait for the outcome?
You can run the internal process and a criminal complaint in parallel; they are separate tracks with different standards of proof, and you generally need not wait for a criminal outcome to conclude your enquiry. Take the decision to involve the police at a senior level based on the value, the pattern and the need for recovery — not in the heat of the moment. Never use the threat of a police complaint to extract a resignation or confession.
How long should we keep disciplinary records?
Keep the complete case file — charge sheet, explanation, proceedings, report, orders, service proofs and payroll instructions — for at least the applicable limitation period for a challenge, and set the exact period in policy with legal input. Warning letters should stay in the file even after they lapse for escalation purposes, since they form part of the employment history and can matter for proportionality. Restrict access tightly, because a disciplinary file is sensitive personal data.
---
Conclusion
A disciplinary case is not won at the moment of decision. It is won months earlier, in the boring work: a code of conduct that was actually issued and actually acknowledged; a manager who wrote a three-line file note instead of sending a threatening message; an attendance record nobody touched after the fact; a charge sheet that named a date and a clause instead of gesturing at "indiscipline."
Get those right and the disciplinary action process stops being frightening. It becomes a sequence you can run calmly: find the facts, put them to the person, let them answer, test the evidence, decide with reasons, keep the punishment proportionate, and give a real appeal. You will sometimes conclude the manager was wrong — that is a feature of the system, not a failure of it. And when you do have to terminate, you will be defending a record rather than a hunch.
None of this replaces professional advice. Standing orders differ, state rules differ, statutes change, and every case has a fact that does not fit the template. Before you suspend anyone, and certainly before you terminate anyone, talk to a competent employment lawyer and confirm the current position for your establishment.
CozyHR is built to hold the boring, load-bearing parts of that file: acknowledged policy versions with timestamps, clean attendance and payroll records you never have to back-date, case notes and letter workflows with proper approvals, and a document trail still retrievable when the manager who witnessed everything has long since moved on. The judgement will always be yours. The audit trail that makes it defensible is something a system should be doing for you.
