An employer in the Philippines may conduct an internal investigation when there is a workplace incident, complaint, audit finding, or suspected violation of company rules. But if the investigation has reached the point where you are being asked to explain, defend yourself, attend a disciplinary conference, or face possible suspension or dismissal, the employer generally cannot keep the accusation vague. You have the right to be informed of the specific acts or omissions being charged against you so you can answer intelligently and fairly.

This matters because many employees receive messages like: “You are under investigation for misconduct,” “Please explain within 24 hours,” or “Do not report to work while we investigate,” without dates, documents, names, policies, or details. Under Philippine labor law, that can be a serious due process problem, especially if the employer later uses the investigation to suspend, discipline, or terminate the employee.

This article explains when an employer may investigate, what details must be given, what a proper Notice to Explain should contain, what to do if the notice is vague, and how this issue is handled in real labor cases before DOLE, the NLRC, and the courts.

Can an employer investigate you without giving details?

Yes, but only up to a point.

An employer has the right to manage its business. This includes the right to investigate workplace issues such as:

Alleged theft, fraud, dishonesty, or cash shortages
Harassment, bullying, or workplace violence
Data breach, confidentiality breach, or misuse of company systems
Absence without leave, tardiness, or abandonment concerns
Poor performance, neglect of duty, or safety violations
Customer complaints or complaints from co-workers
Violations of company policies or the Code of Conduct

This is part of the employer’s management prerogative, meaning the employer has authority to run the business and enforce reasonable workplace rules.

But management prerogative is not unlimited. It must be exercised in good faith, without abuse, discrimination, bad faith, or violation of the employee’s right to due process.

So the practical answer is:

Situation	Can the employer withhold details?	Why
Initial fact-finding or audit	Usually yes	The employer may still be gathering facts
Asking you general questions as a witness	Sometimes	You may not be the person being charged yet
Issuing a Notice to Explain against you	Generally no	You must know the specific charge and facts
Placing you under preventive suspension	Details should be given	You must know why your presence is supposedly a serious threat
Terminating or disciplining you	No	Dismissal or discipline requires due process

The key question is not simply “Am I under investigation?” The better question is: Has the employer already accused me of a violation that may lead to discipline or termination?

If yes, the employer should give enough details for you to prepare a meaningful explanation.

Your basic right: you must know what you are accused of

In Philippine labor law, an employee cannot be validly dismissed just because the employer “conducted an investigation.” The employer must prove both:

Substantive due process — there is a valid legal or company-rule basis for discipline or dismissal; and
Procedural due process — the employee was given proper notice and a real opportunity to be heard.

For termination based on an employee’s fault, the main legal basis is Article 297 of the Labor Code, which lists just causes for dismissal, including serious misconduct, willful disobedience, gross and habitual neglect of duties, fraud or willful breach of trust, commission of a crime against the employer or the employer’s family/representatives, and analogous causes. The current Labor Code text is available through the DOLE Bureau of Working Conditions Labor Code publication.

For procedure, Article 292(b) of the Labor Code states that an employer must furnish the worker whose employment is sought to be terminated with a written notice containing a statement of the causes for termination, and must give the worker ample opportunity to be heard and defend himself or herself.

The Supreme Court has repeatedly explained this through the twin-notice rule:

The first written notice tells the employee the specific charge and asks the employee to explain.
The second written notice tells the employee the employer’s decision after considering the employee’s explanation and the evidence.

In King of Kings Transport, Inc. v. Mamac, G.R. No. 166208, June 29, 2007, the Supreme Court emphasized that the first notice must contain the specific causes or grounds for termination and must give the employee a reasonable opportunity to submit a written explanation. A vague or general accusation is not enough.

DOLE’s Department Order No. 147-15, Series of 2015, which amended the rules on termination of employment, also requires that the first written notice contain:

The specific causes or grounds for termination;
A detailed narration of the facts and circumstances that will serve as basis for the charge;
A directive giving the employee an opportunity to submit a written explanation within a reasonable period.

In plain English: you cannot properly defend yourself if the employer does not tell you what you supposedly did wrong.

What details should the employer give in a Notice to Explain?

A proper Notice to Explain, often called an NTE or show-cause memo, should not simply say:

“You are under investigation for misconduct. Explain within 24 hours.”

That is usually too vague.

A legally safer and fairer NTE should include the basic facts that answer:

Who was involved?
What exactly happened?
When did it happen?
Where did it happen?
How did the employee allegedly violate the rule?
Which company rule, policy, contract provision, or Labor Code ground was allegedly violated?
What possible penalty may be imposed, especially if dismissal is being considered?
How much time the employee has to respond;
Where and how the employee should submit the explanation;
Whether a hearing or conference will be scheduled.

The Supreme Court has said that the notice must contain a detailed narration of the facts and circumstances that will serve as the basis of the charge. A general description does not suffice because the employee must be able to intelligently prepare a defense.

Example of a vague notice

You are hereby required to explain why no disciplinary action should be taken against you for violation of company policy. Submit your written explanation within 24 hours.

This is problematic because it does not say what policy was violated, what act was committed, when it happened, or what evidence is being relied upon.

Example of a more proper notice

Based on the incident report dated 10 June 2026 and CCTV review covering 8 June 2026 at approximately 7:45 p.m. near the warehouse dispatch area, you were allegedly seen removing two boxes of company inventory without an approved gate pass. This may constitute dishonesty, serious misconduct, and violation of Section 4.2 of the Company Code of Conduct. You are directed to submit your written explanation within five calendar days from receipt of this notice. You may attach supporting documents and identify witnesses. A clarificatory conference may be scheduled after receipt of your explanation.

This second notice gives enough information for the employee to understand the charge and respond.

Is the employer required to show all evidence immediately?

Not always.

The employer does not always have to give you every document, CCTV file, witness statement, audit report, screenshot, or system log at the very first stage. However, the employer should give enough information about the accusation so you can answer it meaningfully.

For example, it may be acceptable for the employer to summarize the evidence in the NTE, such as:

“Based on the cashier reconciliation report dated…”
“Based on the complaint submitted by…”
“Based on the attendance logs for…”
“Based on the email sent from your company account on…”

But if the employer refuses to identify the transaction, date, policy, incident, amount, complainant, or alleged act, then the employee may argue that the notice is too vague.

A good practical approach is to request copies or access politely and in writing.

For example:

I respectfully request copies of, or reasonable access to, the documents, reports, CCTV screenshots, system logs, or other evidence being relied upon in the Notice to Explain, so I can prepare a complete and accurate response.

If the employer refuses, you should still submit a response within the deadline, but state that your explanation is limited because the notice lacks details or because supporting documents were not provided.

How much time should the employer give you to answer?

For termination cases based on just causes, the employee should generally be given at least five calendar days from receipt of the first notice to submit a written explanation.

This five-day period is important because it gives the employee time to:

Study the accusation;
Review records, messages, schedules, logs, payslips, or company policies;
Gather documents and witnesses;
Consult a union officer, lawyer, or trusted adviser;
Prepare a clear written explanation.

A 24-hour deadline may be too short in serious cases, especially where dismissal is possible or the accusation involves documents, multiple dates, audit findings, or technical evidence.

However, not every workplace memo automatically requires five days. For minor administrative inquiries or routine fact-finding, employers sometimes ask for a quick explanation. The stricter five-day standard becomes especially important when the process may lead to termination or serious discipline.

Does the employer need to hold a formal hearing?

Not always.

Philippine labor law requires an opportunity to be heard, but this does not always mean a trial-type hearing with lawyers, cross-examination, and formal rules of evidence.

In Perez v. Philippine Telegraph and Telephone Company, G.R. No. 152048, April 7, 2009, the Supreme Court explained that a formal hearing or conference is not mandatory in every case, as long as the employee is given a fair and reasonable opportunity to explain his or her side.

But a hearing or conference becomes more important when:

The employee requests it in writing;
There are factual disputes that cannot be resolved from documents alone;
The company rules require a hearing;
The penalty may be dismissal;
The accusation depends heavily on witness statements;
The employee needs to clarify evidence or confront inconsistencies;
Similar circumstances make a conference fair and reasonable.

If you want a hearing, request it in writing before the deadline.

Can you be placed on preventive suspension without details?

An employer may place an employee under preventive suspension during an investigation, but only under limited circumstances.

Preventive suspension is not supposed to be a punishment. It is a temporary measure used when the employee’s continued presence at work poses a serious and imminent threat to:

The life or safety of the employer, co-workers, customers, or other persons;
Company property;
Evidence or records relevant to the investigation;
The integrity of the investigation.

Under the Omnibus Rules Implementing the Labor Code and DOLE rules, preventive suspension should generally not exceed 30 days. If the employer extends the suspension beyond 30 days, the employee should generally be paid wages and benefits during the extended period, unless a different lawful arrangement applies.

The employer should also explain why preventive suspension is necessary. It is not enough to say:

“You are suspended pending investigation.”

The notice should ideally state:

The charge or incident being investigated;
Why your continued presence supposedly creates a serious threat;
The start and end dates of the preventive suspension;
Whether you are required to remain available for investigation;
Whether company property, access cards, laptops, or accounts must be surrendered;
Who to contact for investigation-related communications.

Preventive suspension vs. disciplinary suspension

These two are often confused.

Type of suspension	Purpose	When imposed	Is it a penalty?
Preventive suspension	To protect people, property, evidence, or the investigation	While investigation is pending	No
Disciplinary suspension	To punish a proven violation	After due process and decision	Yes

If the employer calls it “preventive suspension” but uses it to punish you before hearing your side, that may be challenged.

What if HR says the details are confidential?

Sometimes HR refuses to give details because the complaint involves confidentiality, harassment, data privacy, whistleblowers, or sensitive company information.

Confidentiality may justify limiting some information, but it does not justify denying the employee a meaningful chance to answer.

For example, in a sexual harassment or workplace harassment complaint, the employer may need to protect the complainant from retaliation. But the respondent still needs to know the substance of the accusation, such as the alleged conduct, approximate date or period, location or platform, and policy violated.

A balanced notice may avoid unnecessary personal details while still giving enough information to respond.

For example:

The complaint alleges that during the team call on 15 May 2026, you made repeated comments about a co-worker’s physical appearance despite being asked to stop. This may violate the company’s Anti-Sexual Harassment and Respectful Workplace Policy.

That gives the respondent a fair chance to answer without oversharing irrelevant confidential information.

What if you are only a witness, not the accused?

If you are being interviewed only as a witness, the employer may not need to give you the full details of the case. HR or management may ask what you saw, heard, received, approved, processed, or documented.

But you should be careful if the questions start sounding accusatory.

Warning signs include:

You are asked to explain your own conduct;
You are asked to sign a statement admitting fault;
You are asked why you should not be disciplined;
You are told not to speak to others;
You are asked to surrender company property;
You are placed on suspension;
You are told the matter may affect your employment.

If that happens, you may ask politely:

May I clarify if I am being interviewed as a witness or as a respondent to a disciplinary charge? If I am being charged, may I request a written Notice to Explain stating the specific allegations?

What should you do if the notice has no details?

Do not ignore the notice. Silence can hurt you.

Even if the NTE is vague, submit a written response before the deadline, or ask for an extension in writing. Labor tribunals often look at whether the employee took the opportunity to explain.

Here is a practical step-by-step approach.

1. Read the notice carefully

Check if it states:

The specific act or omission;
The date, time, and place;
The rule or policy allegedly violated;
The possible penalty;
The deadline to answer;
The person or office receiving your reply.

If these are missing, note the gaps.

2. Request clarification in writing

Keep your tone professional. Do not insult HR or management.

You may write:

I respectfully request clarification of the specific acts or omissions being charged, including the relevant dates, transactions, policy provisions, and documents being relied upon. I want to submit a complete and accurate explanation, but the notice does not yet provide enough details for me to address the allegation properly.

3. Ask for documents or access to evidence

Request what you need, such as:

Incident report;
Audit findings;
Attendance logs;
CCTV footage or screenshots;
Emails or chat messages;
Customer complaint;
Company policy allegedly violated;
Inventory, cashier, delivery, or system records.

If the employer cannot give copies, ask for supervised access or a summary.

4. Ask for more time if needed

If the deadline is too short, ask for an extension before it expires.

For example:

Because the matter involves several transactions and supporting records, I respectfully request an extension of five calendar days from receipt of the requested documents or clarification.

The employer is not always required to grant every extension, but a reasonable request helps show that you acted in good faith.

5. Submit a protective explanation

If management does not clarify, still submit a response. State that you deny any wrongdoing and that your answer is limited because the notice is vague.

Example:

I respectfully deny any misconduct. The notice does not identify the specific date, transaction, complainant, policy provision, or act allegedly committed. Because of this, I cannot fully respond to the charge. Subject to this reservation, I state that I have performed my duties in good faith and in accordance with company procedures. I am willing to answer specific allegations once properly identified and supported by relevant documents.

6. Keep copies and proof of receipt

Save:

The NTE;
Your written reply;
Email timestamps;
HR acknowledgments;
Screenshots of submission;
Courier receipts;
Meeting invites;
Minutes of conference;
Suspension notices;
Termination notice, if any.

These documents are often crucial if the case reaches DOLE or the NLRC.

What should a written explanation include?

Your written explanation should be calm, factual, and organized. Avoid emotional attacks, threats, or long irrelevant stories.

A good structure is:

Opening statement State that you received the notice and are submitting your explanation.
Due process reservation, if needed If the notice is vague, politely state what details are missing.
Factual response Answer the allegations one by one.
Supporting evidence Attach documents, screenshots, approvals, schedules, medical records, gate passes, receipts, or messages.
Witnesses Identify people who can confirm your side, if necessary.
Good faith explanation If there was a mistake, explain context, lack of intent, prior approval, unclear instructions, or corrective action.
Request for dismissal of charge or lesser action Ask management to consider your explanation and evidence.

Practical tips when writing your explanation

Use dates and names accurately.
Do not admit facts you are unsure of.
Do not sign a prepared admission unless you fully understand it.
Do not alter documents or delete messages.
Do not harass the complainant or witnesses.
Do not rely only on verbal explanations; put your side in writing.
If the accusation is serious, consider getting advice before submitting.

Common real-life scenarios

“HR said I am under investigation but refuses to tell me why.”

If HR is only doing initial fact-finding, they may not disclose everything yet. But once they require you to explain your alleged misconduct, they should issue a written notice with specific details.

You can ask whether you are a witness or respondent. If you are a respondent, request a written NTE.

“The NTE says loss of trust and confidence but gives no facts.”

“Loss of trust and confidence” is not a magic phrase. For it to justify dismissal, the employer must show a basis for the loss of trust, usually involving a position of trust and a willful breach. The notice should identify the acts that supposedly caused the loss of trust.

A vague statement like “management has lost trust in you” is usually not enough.

“I was suspended immediately but no charge was explained.”

This may be questionable. Preventive suspension should be tied to an investigation and a serious threat. Ask for the written basis, period of suspension, and specific allegations.

If the suspension exceeds 30 days or appears punitive, preserve your documents and consider filing a labor complaint.

“They asked me to explain within 24 hours.”

For serious disciplinary cases, especially those involving possible dismissal, a 24-hour deadline may be too short. Request a reasonable extension in writing and explain why you need time.

“They will not give me the CCTV footage.”

The employer may refuse to give you a personal copy for security or privacy reasons, but you can request supervised viewing, screenshots, or a written summary of the relevant portion. If the case reaches the NLRC, evidence can be required and evaluated during proceedings.

“They already decided before asking for my explanation.”

That is a common due process issue. If the NTE, meeting, or HR statements show that management had already made a final decision before hearing your side, you may argue that the process was a mere formality.

What happens if the employer gives no details and later dismisses you?

If the employer dismisses you after a vague investigation, several outcomes are possible depending on the facts.

Situation	Possible legal effect
No valid cause and no proper procedure	Illegal dismissal; possible reinstatement, backwages, and other monetary awards
Valid cause exists but procedure was defective	Dismissal may stand, but employer may be ordered to pay nominal damages
Procedure was proper but cause was not proven	Illegal dismissal
Employee ignored a proper NTE	Employer may proceed based on available evidence
NTE was vague and employee objected in writing	Employee has stronger due process argument

In Agabon v. NLRC, G.R. No. 158693, November 17, 2004, the Supreme Court recognized that where there is a valid cause for dismissal but procedural due process was not observed, the dismissal may still be upheld, but the employer may be ordered to pay nominal damages.

In later cases, the Supreme Court continued to distinguish between the existence of a valid cause and compliance with the required procedure. The practical lesson is important: even if the employer believes the employee committed a violation, it must still follow due process.

Where can you file a complaint?

If the issue cannot be resolved internally, the usual government forum is the National Labor Relations Commission (NLRC), often through the Single Entry Approach (SEnA) process.

SEnA is a mandatory 30-day conciliation-mediation mechanism handled by DOLE or labor agencies to encourage settlement before a full labor case proceeds. Many employment disputes start there, especially illegal dismissal, unpaid wages, suspension issues, final pay, and other monetary claims.

You may also check the official DOLE website and NLRC website for current procedures, regional offices, and filing information.

Usual documents to prepare

Document	Why it matters
Employment contract or appointment letter	Shows position, salary, status, and terms
Company ID, payslips, payroll records	Helps prove employment and compensation
Notice to Explain	Shows the charge and whether details were given
Written explanation	Shows that you answered or objected properly
Preventive suspension notice	Shows basis, dates, and duration
Hearing notices or minutes	Shows whether you were heard
Termination notice	Shows final decision and stated ground
Company handbook or Code of Conduct	Shows whether the alleged rule exists
Emails, chats, screenshots	May support your timeline or defense
Clearance, final pay computation, quitclaim	Important if separation already occurred

Practical timeline

Timelines vary by region, caseload, complexity, and whether parties settle early.

Stage	Typical practical timeframe
Internal NTE response period	Usually at least 5 calendar days in serious cases
Internal investigation	A few days to several weeks, depending on evidence
Preventive suspension	Generally up to 30 days
SEnA conciliation	Usually intended to be completed within 30 days
NLRC case if no settlement	Several months or longer, depending on pleadings, hearings, appeals, and enforcement

Special notes for OFWs, remote workers, and foreigners

Filipino employees working abroad

If you are an Overseas Filipino Worker, the applicable process may involve your employment contract, the Migrant Workers Office, the Department of Migrant Workers, the Philippine Overseas Employment Administration legacy rules, the foreign employer, and sometimes the labor laws of the host country.

However, if the employer or recruitment agency is covered by Philippine jurisdiction, Philippine remedies may still be relevant. Keep copies of your contract, deployment documents, messages, termination notice, salary records, and any investigation papers.

Remote workers hired by Philippine companies

If you are working remotely for a Philippine employer, due process still matters. Notices may be sent by email or company systems, but the employer should still clearly state the charge and give you a real chance to respond.

Save copies immediately. Some employees lose access to company email or Slack after suspension, making it difficult to retrieve evidence.

Foreigners employed in the Philippines

Foreign employees in the Philippines generally have labor rights too, assuming there is an employer-employee relationship. However, foreign workers may also have immigration and work-permit concerns, such as an Alien Employment Permit or visa status.

If a disciplinary investigation may lead to termination, foreign employees should also consider how it affects:

Work visa sponsorship;
Alien Employment Permit status;
Company-provided housing or benefits;
Repatriation arrangements, if any;
Tax and final pay documentation.

Practical checklist if you are under investigation with no details

Use this checklist before responding.

Do I have a written Notice to Explain?
Does it state the exact act or omission?
Does it state the date, time, place, transaction, or incident?
Does it identify the company rule or Labor Code ground?
Does it say dismissal or suspension is possible?
Was I given at least five calendar days to respond if dismissal is possible?
Have I asked for clarification or documents in writing?
Have I requested a hearing if facts are disputed?
Have I prepared evidence and witnesses?
Have I kept proof of submission?
Was I placed on preventive suspension? If yes, does the notice explain why my presence is a serious threat?
Has the suspension exceeded 30 days?
Did the employer issue a second written notice explaining its final decision?

Frequently Asked Questions

Can my employer say I am under investigation but not tell me the reason?

For initial fact-finding, yes, the employer may sometimes investigate quietly. But if you are being required to explain a possible violation or face discipline, the employer should tell you the specific accusation and facts. A vague notice may violate procedural due process.

Is a Notice to Explain valid if it only says “misconduct”?

Usually, that is not enough. The notice should explain what you allegedly did, when and where it happened, what rule was violated, and why discipline or dismissal is being considered. “Misconduct” is a legal label, not a factual explanation.

Can I refuse to answer until they give details?

Be careful. Completely refusing to answer may be used against you. A safer approach is to respond in writing, request clarification and documents, and state that you cannot fully answer because the notice lacks specific details.

How many days should I be given to answer an NTE?

For serious disciplinary cases involving possible dismissal, the standard is generally at least five calendar days from receipt of the first notice. This gives you time to study the accusation, gather evidence, and seek advice.

Can I bring a lawyer or union representative to the hearing?

You may request assistance from a lawyer, union officer, or representative, especially in serious cases. A full trial-type hearing is not always required, but you should be given a meaningful opportunity to explain and defend yourself.

Can my employer suspend me while investigating?

Yes, but preventive suspension is allowed only when your continued presence poses a serious and imminent threat to life, property, evidence, or the investigation. It should not be used as punishment before your side is heard.

Is preventive suspension paid?

Preventive suspension is generally not paid if validly imposed within the allowed period. However, if it exceeds 30 days, if company policy provides payment, or if the suspension is later found invalid or baseless, wage consequences may arise depending on the facts.

What if I was dismissed after a vague investigation?

You may challenge the dismissal before the appropriate labor forum. If there was no valid cause, it may be illegal dismissal. If there was a valid cause but the employer failed to observe due process, the employer may still face liability such as nominal damages.

Can HR hide the complainant’s name?

Sometimes HR may protect a complainant’s identity for privacy, safety, or anti-retaliation reasons. But the employer should still give enough details about the alleged conduct so you can respond meaningfully. Confidentiality cannot erase your right to due process.

Should I sign an investigation report or admission?

Read it carefully first. Do not sign anything that says you admit wrongdoing unless it is true and you understand the consequences. If asked to acknowledge receipt only, write “received” with the date and signature, and avoid language that admits liability.

Key Takeaways

An employer may conduct an internal investigation, but once you are being charged or required to explain, you should be given specific details.
A proper Notice to Explain should state the facts, dates, acts complained of, rules violated, possible penalty, and deadline to respond.
For serious cases involving possible dismissal, employees should generally be given at least five calendar days to submit a written explanation.
A formal hearing is not always required, but you must be given a meaningful opportunity to be heard.
Preventive suspension is allowed only when your continued presence poses a serious threat, and it should generally not exceed 30 days.
Do not ignore a vague notice. Respond in writing, request clarification, ask for documents, and keep proof of everything.
If a vague investigation leads to suspension or dismissal, the lack of details may become an important due process issue before DOLE, the NLRC, or the courts.