I. Overview

Intentional damage to company property is a serious workplace offense in the Philippines. It may give rise to several remedies for the employer, depending on the facts: disciplinary action, termination for just cause, recovery of damages, withholding or set-off in limited cases, insurance claims, civil action, criminal complaint, and preventive workplace measures.

The employer’s response must be grounded on evidence and must comply with due process. Even when the employee clearly caused damage, the employer should avoid impulsive deductions, summary dismissal, public shaming, coercive admissions, or actions that may later expose the company to illegal dismissal, money claims, unfair labor practice allegations, or criminal liability.

This article discusses the legal framework, employer options, limits, procedure, and practical considerations under Philippine law.

II. What Counts as Intentional Damage to Company Property?

Intentional damage means the employee deliberately damaged, destroyed, impaired, misused, or caused loss to property belonging to the employer, a client, a co-employee, or a third party connected with company operations.

Examples include:

Deliberately breaking company equipment, tools, furniture, vehicles, machines, computers, or inventory.
Sabotaging production lines, systems, databases, software, or security devices.
Destroying documents, files, records, goods, or supplies.
Damaging company property in retaliation for disciplinary action, salary dispute, transfer, or termination.
Tampering with devices or machinery to cause breakdown or loss.
Intentionally deleting, corrupting, or disabling company data or systems.
Pouring liquid on electronics, cutting wires, puncturing tires, smashing locks, or vandalizing company premises.
Damaging property during a workplace altercation or outburst.
Removing parts, components, or accessories to render equipment unusable.
Intentionally mishandling company property despite knowing that damage will result.

The key element is intent. The employer must distinguish intentional damage from negligence, accident, ordinary wear and tear, poor training, defective equipment, or operational risk.

III. Relevant Sources of Law

Employer remedies may arise from several legal sources:

Labor Code of the Philippines, especially provisions on just causes for termination.
Civil Code of the Philippines, especially obligations, damages, and liability for wrongful acts.
Revised Penal Code, if the act constitutes a crime such as malicious mischief, theft, qualified theft, estafa, arson, or damage to property.
Company rules and regulations, employee handbook, code of conduct, or policies.
Employment contract, accountability agreement, equipment issuance form, vehicle policy, IT policy, or property custody receipt.
Collective bargaining agreement, where applicable.
Data Privacy Act, if the property involved includes data, devices, customer information, or employee records.
Cybercrime Prevention Act, if the act involves unauthorized system interference, data interference, hacking, deletion, or destruction of electronic data.
Occupational safety rules, if the damage created safety risks.
Insurance contracts, if the property is insured.

IV. Employer’s Main Remedies

An employer may consider the following remedies:

Administrative discipline.
Termination for just cause.
Suspension, demotion, reprimand, or other proportionate penalties.
Preventive suspension.
Civil recovery of damages.
Criminal complaint.
Limited salary deduction or set-off, only when legally permissible.
Recovery through bond, accountability agreement, or final pay, subject to limitations.
Insurance claim.
Workplace protection measures, such as access revocation, asset recovery, or security intervention.

These remedies are not always mutually exclusive. An employer may discipline the employee internally and also pursue civil or criminal remedies, provided the employer follows the correct process and avoids double recovery or unlawful coercion.

V. Disciplinary Action Under Labor Law

A. Intentional Damage as a Just Cause for Termination

Under Philippine labor law, an employer may terminate an employee for just cause. Intentional damage to company property may fall under one or more just causes, depending on the circumstances.

The most relevant grounds are:

1. Serious Misconduct

Serious misconduct is improper or wrongful conduct that is grave, connected with the employee’s work, and shows that the employee is unfit to remain employed.

Intentional destruction of company property may be serious misconduct if it is deliberate, work-related, and grave enough to undermine the employment relationship.

Examples:

An employee angrily destroys company equipment after being reprimanded.
A warehouse worker intentionally damages inventory.
A driver deliberately damages a company vehicle.
An IT employee deletes company files in retaliation against management.

2. Willful Disobedience

Intentional damage may also involve willful disobedience if the employee deliberately violated a lawful and reasonable company rule, order, or policy.

For this ground to apply, the employer must usually show:

The order or rule was lawful and reasonable.
The employee knew or should have known the rule.
The rule was related to work.
The employee intentionally violated it.

Examples:

The company has a written rule prohibiting unauthorized tampering with equipment, and the employee deliberately disables the equipment.
An employee disregards a direct instruction not to operate or dismantle machinery and causes intentional damage.

3. Gross and Habitual Neglect

This usually applies to negligence rather than intentional damage. However, if the facts show repeated reckless handling of property despite warnings, the employer may consider this ground. Intentional damage is usually better analyzed as misconduct, fraud, breach of trust, or willful disobedience.

4. Fraud or Willful Breach of Trust

If the employee occupies a position of trust and intentionally damages or disposes of property entrusted to him, the act may constitute breach of trust.

This may apply to:

Cashiers.
Inventory custodians.
Warehouse personnel.
IT administrators.
Company drivers.
Asset custodians.
Managers.
Employees handling confidential data, funds, tools, keys, or systems.

The employer must show that the employee’s position involved trust and confidence and that the employee committed an act that justifies loss of trust.

5. Commission of a Crime or Offense Against the Employer

If the damage constitutes a crime against the employer, the employer’s representative, or immediate family member, termination may be justified under this ground.

Possible crimes include malicious mischief, theft, qualified theft, estafa, arson, grave coercion, unjust vexation, or cybercrime-related offenses, depending on the facts.

6. Analogous Causes

Some acts may not neatly fit into the listed grounds but may be considered analogous if they are similarly serious and recognized by company policy, employment contract, or jurisprudential principles.

Intentional sabotage, deliberate destruction of digital assets, or malicious system interference may be treated as analogous to serious misconduct, fraud, or breach of trust.

VI. Due Process Before Discipline or Dismissal

Even if the employee intentionally damaged company property, the employer must observe procedural due process.

For termination based on just cause, Philippine labor law generally requires:

First written notice, also called notice to explain.
Opportunity to be heard, usually through written explanation and, when appropriate, an administrative hearing or conference.
Second written notice, stating the employer’s decision and reasons.

Failure to observe procedural due process may expose the employer to nominal damages even if the dismissal is substantively valid.

A. First Notice or Notice to Explain

The notice should clearly state:

The specific acts complained of.
Date, time, place, and manner of the alleged damage.
Property damaged.
Estimated value of damage, if known.
Company rule or policy violated.
Possible penalty, including dismissal if applicable.
Deadline to submit a written explanation.
Schedule of administrative hearing, if one will be held.
Right to submit evidence, witnesses, or documents.

A vague notice such as “Explain why you should not be disciplined for damaging company property” may be insufficient. The employee must understand the accusation well enough to defend himself.

B. Opportunity to Be Heard

The employee must be given a meaningful chance to respond.

This may include:

Written explanation.
Administrative hearing.
Submission of evidence.
Presentation of witnesses.
Clarificatory questioning.
Assistance from a representative, if company policy or CBA allows it.

A formal trial-type hearing is not always required, but it is advisable when the facts are disputed, the penalty may be dismissal, or credibility must be assessed.

C. Second Notice or Decision Notice

After evaluating the evidence, the employer should issue a written decision stating:

Findings of fact.
Evidence relied upon.
Rule or legal ground violated.
Penalty imposed.
Effective date of penalty or dismissal.
Treatment of final pay, property accountability, and clearance.
Reservation of the company’s right to pursue civil or criminal remedies, when appropriate.

The employer should avoid conclusory language. The decision must show that management considered the employee’s explanation and evidence.

VII. Preventive Suspension

Preventive suspension may be used when the employee’s continued presence poses a serious and imminent threat to the life or property of the employer, co-workers, or the workplace.

Intentional damage cases may justify preventive suspension if the employee may:

Cause further damage.
Tamper with evidence.
Intimidate witnesses.
Access systems, tools, vehicles, inventory, or records.
Disrupt operations.
Pose safety or security risks.

Preventive suspension is not a penalty. It is a temporary protective measure while the investigation is ongoing.

Under Philippine labor standards, preventive suspension should generally not exceed 30 days. If the employer extends it beyond the allowable period, the employer may be required to pay wages for the excess period, depending on the circumstances.

VIII. Proportionate Penalty

The penalty must be proportionate to the offense.

Not every instance of property damage justifies termination. The employer should consider:

Intent.
Value of the damaged property.
Nature of the property.
Safety risks created.
Operational disruption.
Employee’s position and trust reposed.
Length of service.
Prior disciplinary record.
Whether the act was isolated or repeated.
Whether the employee admitted, concealed, or aggravated the act.
Whether there was provocation, mental distress, or mitigating context.
Whether company rules classify the offense as dismissible.
Whether the property involved was critical to operations.
Whether customers, patients, passengers, students, or the public were endangered.

Termination is more defensible when the damage was deliberate, substantial, malicious, dangerous, repeated, or involved sabotage, dishonesty, or breach of trust.

IX. Evidence Needed by the Employer

The employer bears the burden of proving that the dismissal or disciplinary action is valid.

Evidence may include:

CCTV footage.
Photos or videos of damage.
Incident reports.
Witness statements.
Security logs.
Access logs.
IT audit logs.
Vehicle GPS records.
Inventory records.
Repair estimates.
Purchase receipts.
Asset issuance forms.
Custody receipts.
Written admissions.
Chat messages, emails, or texts.
Prior warnings.
Expert or technician reports.
Police blotter, if applicable.
Insurance inspection report.
Chain-of-custody documentation for digital evidence.

For digital damage, the employer should preserve logs, backups, timestamps, user access records, file deletion history, device images, and administrator reports.

X. Standard of Proof in Labor Cases

In labor cases, the employer does not need proof beyond reasonable doubt. The usual standard is substantial evidence, meaning relevant evidence that a reasonable mind might accept as adequate to support a conclusion.

This is lower than the criminal standard. Therefore, an employer may validly discipline or dismiss an employee based on substantial evidence even if a criminal case is not filed, is dismissed, or does not result in conviction.

However, weak evidence, speculation, rumor, or mere suspicion is not enough.

XI. Civil Liability for Damages

Intentional damage to company property may give rise to civil liability. The employer may demand payment for:

Cost of repair.
Replacement cost.
Depreciated value, where appropriate.
Lost inventory.
Cost of restoration.
Business interruption losses, if provable.
Cost of data recovery.
Losses caused by downtime.
Penalties paid to clients due to the employee’s act.
Attorney’s fees and litigation expenses, if legally recoverable.
Other actual damages supported by receipts or competent proof.

The employer should distinguish between actual loss and speculative loss. Courts generally require competent proof of damages.

A. Civil Code Basis

Under the Civil Code, a person who causes damage to another through fault, negligence, bad faith, or wrongful act may be liable. Intentional destruction of property may support claims for actual damages and, in proper cases, moral, exemplary, or nominal damages.

The employer may file a civil action independently or together with a criminal action, depending on the nature of the case and procedural choices.

B. Demand Letter

Before filing a case, the employer may issue a demand letter stating:

Facts of the incident.
Property damaged.
Basis for holding the employee liable.
Amount claimed.
Supporting documents.
Deadline for payment or response.
Reservation of rights.

A demand letter should not threaten unlawful action or force the employee to waive labor rights. It should be factual, measured, and documented.

XII. Can the Employer Deduct the Cost from the Employee’s Salary?

This is one of the most sensitive issues.

As a rule, employers should be careful about unilateral salary deductions. Philippine labor law protects wages, and deductions are allowed only in specific situations authorized by law, regulation, or the employee’s valid written consent.

An employer should not automatically deduct the cost of damaged property from wages merely because management believes the employee is responsible.

A. When Deductions May Be Allowed

Deductions may be possible when:

The employee gave clear, voluntary, written authorization.
The deduction is for a lawful purpose.
The amount is reasonable, specific, and supported by proof.
The deduction does not violate minimum wage rules or labor standards.
The deduction is not used as a penalty without due process.
The deduction is allowed by law, company policy, contract, or accountability agreement.
The employee’s liability has been established through a fair process.

Written authorization should not be obtained through intimidation, threat, or coercion.

B. Deductions from Final Pay

Employers often attempt to recover losses from final pay. This is possible only with caution.

The employer may withhold or deduct amounts from final pay when there is a lawful and documented basis, such as:

Unreturned company property.
Cash advances.
Loans.
Accountability covered by written agreement.
Employee-authorized deductions.
Established liability for damage.

However, final pay should not be indefinitely withheld. The employer should compute final pay, document accountabilities, and release undisputed amounts.

If there is a disputed claim, the safer approach is to release undisputed final pay and pursue the disputed amount separately, unless a clear legal basis exists for set-off.

C. Waivers and Quitclaims

If the employee agrees to pay or settle the damage, the employer may execute a settlement agreement, waiver, release, or quitclaim.

To be enforceable, it should be:

Voluntary.
Written.
Supported by reasonable consideration.
Clear as to the amount and claims covered.
Not contrary to law, morals, public policy, or labor standards.
Not grossly disadvantageous to the employee.

Quitclaims are generally looked upon with caution in labor disputes, especially where there is unequal bargaining power.

XIII. Criminal Remedies

Intentional damage to company property may constitute a criminal offense.

The employer may file a complaint with law enforcement, the prosecutor’s office, or the appropriate cybercrime authorities, depending on the act.

Possible offenses include:

A. Malicious Mischief

Malicious mischief generally involves deliberately causing damage to another’s property. This is the most common criminal characterization for intentional property damage.

Examples:

Smashing company equipment.
Vandalizing company premises.
Destroying furniture, fixtures, or inventory.
Damaging vehicles.
Breaking locks or doors.
Defacing walls or signage.

The penalty depends on the value of the damage and the circumstances.

B. Theft or Qualified Theft

If the employee took company property, parts, supplies, inventory, equipment, or money, the offense may be theft or qualified theft.

Qualified theft may apply when the offender is an employee who had access to property because of trust or confidence. This is common in cases involving cash, inventory, tools, devices, supplies, or property entrusted to the employee.

Damage may accompany theft, such as removing parts from a machine or stripping a company vehicle.

C. Estafa

Estafa may arise when property was received in trust, on commission, for administration, or under an obligation to return or deliver it, and the employee misappropriated, converted, or denied receiving it.

This may apply to entrusted property, collections, company assets, or items issued for a specific purpose.

D. Arson

If the employee intentionally sets fire to company premises, vehicles, warehouses, equipment, or inventory, the act may constitute arson. This is a very serious offense, especially if lives are endangered.

E. Cybercrime or Computer-Related Offenses

If the damage involves data, systems, networks, software, servers, accounts, databases, or electronic files, possible legal issues may arise under cybercrime laws.

Examples:

Unauthorized deletion of company files.
Disabling company systems.
Introducing malware.
Destroying backups.
Tampering with databases.
Locking company accounts.
Sabotaging access credentials.
Altering source code or production systems.
Damaging digital infrastructure.
Unauthorized access followed by data interference.

The employer should preserve digital evidence carefully and avoid altering logs.

F. Criminal Case and Employment Case Are Separate

A criminal complaint and an administrative employment case may proceed separately.

The employer may dismiss an employee based on substantial evidence even without a criminal conviction. Conversely, a criminal case requires proof beyond reasonable doubt.

The dismissal should not simply rely on the fact that a criminal complaint was filed. The employer must still conduct its own administrative process.

XIV. Police Blotter and Incident Reporting

A police blotter may be useful to document the incident, especially if there is physical damage, violence, trespass, theft, vandalism, or threats.

However, a police blotter is not conclusive proof. It merely records a report. The employer still needs evidence.

For workplace incidents, the company should also prepare an internal incident report containing:

Date and time of discovery.
Date and time of incident, if known.
Location.
Persons involved.
Witnesses.
Description of damage.
Immediate action taken.
Photos or videos.
Estimated cost.
Security or safety implications.
Recommendations.

XV. Handling Company Property After the Incident

The employer should immediately secure property and evidence.

Recommended steps:

Photograph and video the damage.
Preserve CCTV footage.
Secure the area.
Retrieve company-issued assets.
Disable access cards if necessary.
Suspend system access where justified.
Preserve logs and backups.
Obtain witness statements.
Request technician assessment.
Avoid repairing or discarding damaged property before documentation, unless necessary for safety or operations.
Maintain chain of custody for evidence.
Notify insurance provider if insured.
Notify clients or regulators if required.

XVI. Digital Property and Data Damage

Company property is not limited to physical assets. Digital assets may include:

Files.
Databases.
Source code.
Designs.
Customer data.
Trade secrets.
System configurations.
Emails.
Cloud accounts.
Software licenses.
Backups.
Access credentials.
Internal documents.
Financial records.
Operational logs.

Intentional deletion, corruption, encryption, disabling, unauthorized transfer, or sabotage of digital property can be serious misconduct, breach of trust, and possibly a cybercrime.

The employer should involve IT, legal, and data protection personnel early.

A. Data Privacy Considerations

If the damaged or accessed property contains personal information, the employer must consider data privacy obligations.

Possible issues include:

Was personal data accessed, altered, deleted, disclosed, or lost?
Was there a security incident or personal data breach?
Are customers, employees, or third parties affected?
Is notification to the National Privacy Commission required?
Is notification to data subjects required?
Were logs preserved?
Were access credentials revoked?
Were affected systems secured?

The employer should avoid over-collecting personal data during the investigation and should restrict access to investigation records.

XVII. Preventing Retaliatory or Constructive Dismissal Claims

When investigating intentional damage, the employer should avoid acts that could be viewed as harassment, retaliation, or constructive dismissal.

Avoid:

Publicly accusing the employee before investigation.
Humiliating the employee in front of co-workers.
Forcing resignation.
Threatening imprisonment to compel payment.
Confiscating personal belongings without lawful basis.
Locking the employee out without notice unless justified by security needs.
Withholding all wages indefinitely.
Making unauthorized deductions.
Issuing a certificate of employment with negative remarks.
Publishing the employee’s name or photos online.
Coercing a confession.
Imposing penalties before hearing the employee’s side.

Management should act firmly but procedurally.

XVIII. Resignation During Investigation

An employee may resign while under investigation. This does not automatically erase liability.

The employer may:

Accept the resignation.
Continue the administrative investigation if company policy allows.
Document the pending case.
Demand return of property.
Compute final pay subject to lawful deductions or accountabilities.
Pursue civil or criminal remedies.
Issue a certificate of employment limited to service information.

However, if the employer wants to terminate for just cause, it should be careful where resignation has already taken effect. The legal characterization of separation may become disputed.

XIX. Employee Admission or Confession

An admission may be useful evidence, but it should be handled carefully.

A valid admission should be:

Voluntary.
Written.
Specific.
Free from threats or coercion.
Preferably witnessed.
Supported by independent evidence.

The employer should avoid making the employee sign a statement under pressure, detention, intimidation, or threat of immediate criminal prosecution. A coerced admission may be challenged and may create liability for the employer or its officers.

XX. Settlement With the Employee

Settlement may be practical when the employer’s primary goal is recovery rather than prosecution.

A settlement agreement may include:

Acknowledgment of facts.
Amount of damage.
Payment schedule.
Mode of payment.
Return of property.
Confidentiality clause.
Non-disparagement clause.
Reservation or waiver of civil claims.
Treatment of employment status.
Clearance and final pay provisions.
Consequences of default.
Statement that the agreement was voluntary.

Settlement should not waive minimum labor standards or statutory rights unless legally permissible and supported by fair consideration.

XXI. Insurance and Third-Party Recovery

If company property is insured, the employer should review the policy.

Possible coverage may include:

Property insurance.
Fire insurance.
Fidelity bond.
Employee dishonesty coverage.
Vehicle insurance.
Cyber insurance.
Business interruption insurance.
Equipment breakdown coverage.

The employer should notify the insurer promptly, preserve evidence, and comply with policy requirements.

If the insurer pays the claim, subrogation may allow the insurer to pursue the responsible employee or third party.

XXII. Employer’s Right to Recover Company Property

The employer may demand return of company-issued property, such as:

Laptop.
Mobile phone.
ID card.
Access card.
Keys.
Uniform.
Vehicle.
Tools.
Documents.
Storage devices.
Credit card.
Cash advance.
Inventory.
Confidential materials.

If the employee refuses to return property, the employer may consider civil demand, criminal complaint, or deduction from final pay where lawful and documented.

The employer should not forcibly search the employee’s person, bag, home, or vehicle without lawful basis or consent.

XXIII. Workplace Searches and Inspections

Company policy may allow reasonable inspection of company premises, lockers, devices, or company-issued equipment.

However, searches must be reasonable, non-discriminatory, and respectful of privacy.

Relevant considerations:

Was there a written policy?
Did the employee consent to inspection as part of employment?
Is the property company-owned?
Is there a legitimate business reason?
Is the search limited in scope?
Are witnesses present?
Is personal data protected?
Is there documentation?

Company-owned devices may generally be inspected for legitimate business or investigation purposes, especially if the company has an IT policy limiting expectation of privacy. Personal devices are more sensitive and should not be accessed without consent or lawful authority.

XXIV. Special Cases

A. Company Vehicle Damage

For intentional damage to a company vehicle, the employer should gather:

Trip ticket.
GPS data.
Dashcam footage.
Photos.
Repair estimate.
Vehicle assignment form.
Accident or incident report.
Police report, if applicable.
Insurance documents.
Driver’s explanation.

If the damage resulted from drunk driving, road rage, unauthorized use, deliberate collision, or vandalism, termination and criminal remedies may be considered.

B. Damage to Inventory or Goods

For warehouses, retail, logistics, manufacturing, and food businesses, evidence should include:

Inventory count.
Stock movement records.
CCTV.
Delivery receipts.
Warehouse logs.
System records.
Witness statements.
Valuation documents.
Spoilage or disposal reports.
Chain-of-custody records.

Intentional contamination, spoilage, destruction, or concealment of inventory may justify serious discipline.

C. Damage to Customer Property

If the employee intentionally damages customer property, the employer may face contractual, reputational, and civil exposure.

The employer should:

Investigate immediately.
Notify the customer appropriately.
Preserve evidence.
Assess liability.
Consider insurance.
Discipline the employee if warranted.
Seek reimbursement from the employee if legally justified.
Review service contracts and indemnity provisions.

The employee’s intentional act may still expose the employer to claims, especially if committed in connection with work. The employer may later seek recovery from the employee.

D. Damage During Labor Disputes or Union Activity

If property damage occurs during a strike, picket, protest, or labor dispute, the employer should be careful to distinguish between protected concerted activity and unlawful acts.

Peaceful union activity is protected. Violence, coercion, threats, vandalism, sabotage, obstruction, and intentional destruction of property are not protected.

The employer should document individual participation and avoid blanket discipline against union members without specific evidence.

E. Probationary Employees

A probationary employee may be disciplined or terminated for intentional damage, provided the employer observes due process and bases the action on just cause or failure to meet reasonable standards made known at the time of engagement.

Intentional destruction of property is usually a just-cause issue, not merely a standards issue.

F. Managers and Confidential Employees

For managerial employees and employees occupying positions of trust, intentional damage or sabotage may more readily justify loss of trust and confidence.

However, loss of trust must still be based on clearly established facts, not mere suspicion.

XXV. Relation to Company Rules

A strong company policy should classify intentional damage to property as a major offense.

The policy should define:

Covered property.
Prohibited acts.
Examples of intentional damage.
Reporting procedure.
Investigation process.
Possible penalties.
Restitution rules.
Treatment of digital assets.
Access control.
Inspection of company-owned devices.
Return of assets upon separation.
Data protection obligations.
Consequences of refusal to return property.
Authority to impose preventive suspension.

A written rule helps prove that the employee knew the conduct was prohibited.

XXVI. Sample Policy Clause

Intentional Damage to Company Property

“Employees are prohibited from intentionally damaging, destroying, defacing, disabling, tampering with, misusing, sabotaging, deleting, corrupting, concealing, or rendering unusable any property, equipment, tool, vehicle, inventory, document, record, system, data, software, or facility owned, leased, possessed, or used by the Company, its clients, suppliers, co-employees, or business partners. Violation of this policy shall be treated as a major offense and may result in disciplinary action, including dismissal for just cause, without prejudice to the Company’s right to recover damages and pursue civil, criminal, administrative, or other lawful remedies.”

XXVII. Employer’s Investigation Checklist

When intentional damage is suspected, the employer should:

Secure the area or system.
Prevent further access if necessary.
Preserve evidence.
Identify witnesses.
Document damage.
Estimate loss.
Review CCTV, logs, and access records.
Check relevant company policies.
Determine whether preventive suspension is justified.
Issue a notice to explain.
Conduct hearing or conference when appropriate.
Evaluate the employee’s explanation.
Decide based on substantial evidence.
Issue written decision.
Process final pay and accountabilities lawfully.
Consider civil demand.
Consider criminal complaint.
Notify insurer if applicable.
Review controls to prevent recurrence.

XXVIII. Common Employer Mistakes

Employers commonly make the following mistakes:

Dismissing the employee immediately without notice.
Deducting repair cost from wages without consent or legal basis.
Relying only on suspicion.
Failing to preserve CCTV before it is overwritten.
Issuing vague notices.
Failing to identify the violated rule.
Treating accidental damage as intentional damage.
Ignoring the employee’s explanation.
Imposing inconsistent penalties.
Publicly accusing the employee.
Failing to prove actual cost of damage.
Confusing preventive suspension with disciplinary suspension.
Extending preventive suspension without pay beyond lawful limits.
Filing criminal complaints without evidence.
Forcing the employee to sign a quitclaim.
Withholding final pay indefinitely.
Failing to recover company access credentials.
Mishandling digital evidence.
Violating data privacy rules during investigation.
Overlooking insurance notice requirements.

XXIX. Employee Defenses

An employee accused of intentional damage may raise defenses such as:

Accident.
Lack of intent.
Ordinary wear and tear.
Defective equipment.
Lack of training.
No proof of authorship.
No access to the property.
CCTV or logs are inconclusive.
Damage occurred before custody.
Another person caused the damage.
Forced or coerced admission.
Inconsistent enforcement of rules.
Disproportionate penalty.
No due process.
No written policy.
Retaliatory accusation.
Mental health episode or emergency context.
No actual damage or exaggerated valuation.
Invalid wage deduction.
Illegal dismissal.

The employer should anticipate these defenses and address them through evidence and procedure.

XXX. Administrative Case Versus Criminal Case Versus Civil Case

Remedy	Purpose	Standard	Result
Administrative discipline	Protect workplace and enforce rules	Substantial evidence	Warning, suspension, dismissal, other penalty
Civil action	Recover monetary loss	Preponderance of evidence	Damages, reimbursement, attorney’s fees where proper
Criminal complaint	Punish public offense	Proof beyond reasonable doubt	Fine, imprisonment, restitution, civil liability

The employer should not assume that winning one automatically guarantees winning another. Each has different procedures and standards.

XXXI. Practical Strategy for Employers

A balanced employer strategy should usually proceed in this order:

Secure property and evidence.
Protect operations and safety.
Temporarily restrict access if justified.
Determine whether preventive suspension is necessary.
Issue a clear notice to explain.
Conduct a fair investigation.
Assess whether intent is proven.
Choose a proportionate penalty.
Document the decision.
Compute damages accurately.
Seek voluntary settlement or reimbursement where appropriate.
Avoid unlawful wage deductions.
File civil or criminal action only when supported by evidence.
Review policies and controls.

XXXII. Sample Notice to Explain

Subject: Notice to Explain – Alleged Intentional Damage to Company Property

Dear [Employee Name]:

The Company has received a report that on [date], at approximately [time], at [location], you allegedly [describe act in detail], resulting in damage to [identify property].

Initial findings indicate that [summarize evidence, such as CCTV footage, witness report, access log, or incident report]. The estimated damage is [amount], subject to final assessment.

Your alleged act may constitute a violation of [specific company rule/policy] and may amount to serious misconduct, willful disobedience, breach of trust, or other just cause under applicable labor laws. If proven, this may result in disciplinary action, including dismissal.

You are directed to submit a written explanation within [reasonable period] from receipt of this notice. You may attach supporting documents and identify witnesses, if any.

An administrative conference is scheduled on [date and time] at [place/platform], where you will be given an opportunity to explain your side.

Failure to submit an explanation or attend the conference without valid reason shall be deemed a waiver of your opportunity to be heard, and the Company may decide based on available evidence.

This notice is issued without prejudice to the Company’s right to pursue civil, criminal, or other lawful remedies.

Sincerely, [Authorized Representative] [Position]

XXXIII. Sample Preventive Suspension Notice

Subject: Preventive Suspension Pending Investigation

Dear [Employee Name]:

Pending investigation of the incident involving alleged intentional damage to [property] on [date], you are placed under preventive suspension effective [date] until [date], not exceeding the period allowed by law.

This measure is not a disciplinary penalty. It is imposed because your continued presence in the workplace may pose a serious and imminent threat to company property, evidence, operations, or personnel, particularly because [state specific reason].

During the preventive suspension, you are directed to remain available for the administrative investigation and to refrain from accessing company premises, systems, records, or property unless authorized in writing.

This is without prejudice to your right to submit an explanation and participate in the administrative process.

Sincerely, [Authorized Representative] [Position]

XXXIV. Sample Decision Notice

Subject: Decision on Administrative Case

Dear [Employee Name]:

After review of the incident report, evidence, your written explanation dated [date], and the administrative conference held on [date], the Company finds that you intentionally damaged [property] on [date] by [specific act].

The finding is supported by [summarize evidence]. Your explanation that [summarize defense] was considered but found insufficient because [reason].

Your act violated [specific rule/policy] and constitutes [serious misconduct / willful disobedience / breach of trust / other applicable ground]. Considering the intentional nature of the act, the value and importance of the property, the disruption caused, and [other factors], the Company imposes the penalty of [dismissal/suspension/etc.].

Accordingly, your employment is terminated effective [date], for just cause, without prejudice to the Company’s right to recover damages and pursue other lawful remedies.

Your final pay, less lawful and documented accountabilities if any, shall be processed in accordance with applicable law and company procedure. You are directed to return all company property in your possession, including [list items], on or before [date].

Sincerely, [Authorized Representative] [Position]

XXXV. Limits on Employer Remedies

Even when the employee is at fault, the employer must observe legal limits.

The employer may not:

Dismiss without due process.
Impose arbitrary penalties.
Deduct wages without lawful basis.
Detain the employee.
Confiscate personal property without consent or lawful authority.
Force a confession.
Threaten baseless criminal prosecution.
Publicly shame the employee.
Refuse to release all final pay indefinitely.
Discriminate or retaliate.
Fabricate evidence.
Ignore company procedures.
Violate privacy rights.
Prevent the employee from seeking legal assistance.
Use settlement to evade minimum labor standards.

XXXVI. Best Practices for Employers

Employers should adopt preventive and remedial safeguards:

Maintain a clear code of conduct.
Require signed property accountability forms.
Use equipment issuance and return checklists.
Implement CCTV and access controls lawfully.
Maintain IT access logs.
Enforce least-privilege access.
Disable access promptly upon separation or suspension.
Conduct exit clearance.
Train supervisors on due process.
Document all incidents.
Preserve evidence immediately.
Apply penalties consistently.
Obtain written consent for lawful deductions where appropriate.
Keep insurance updated.
Protect personal data during investigations.
Avoid emotional or retaliatory management actions.
Use settlement agreements carefully.
Consult counsel before termination, major deductions, or criminal filing.

XXXVII. Conclusion

In the Philippine setting, intentional damage to company property may justify strong employer action, including dismissal for just cause, civil recovery, and criminal complaint. However, the employer’s remedies are not unlimited. The company must prove intent through substantial evidence, observe procedural due process, impose a proportionate penalty, and respect wage, privacy, and labor protections.

The safest approach is evidence-first and process-driven: secure the property, preserve proof, issue proper notices, give the employee a real opportunity to respond, decide based on documented facts, and pursue recovery through lawful means. A well-handled case protects the company’s assets while reducing exposure to illegal dismissal, money claims, privacy complaints, and other legal risks.