Quick answer

Philippine labor law does not set a universal number of hours or days within which HR must issue a Notice to Explain (NTE) after receiving an ordinary incident report.

HR should generally issue the NTE promptly after a fair preliminary review establishes specific facts that require the employee’s explanation. HR need not issue it immediately upon receiving an unverified or incomplete report, but it should not allow an unexplained delay that prejudices the parties, weakens the evidence, violates company rules or a collective bargaining agreement (CBA), or suggests that the complaint was ignored or the alleged offense condoned.

The frequently cited five-calendar-day rule concerns the employee’s time to answer the NTE—not HR’s time to issue it. When dismissal for a just cause is being considered, the employee should receive at least five calendar days from actual receipt of a sufficiently detailed NTE to prepare a response.

An incident report is also not automatically an NTE. Unless it contains the required particulars, identifies the possible rule or legal violation, and clearly gives the employee a reasonable opportunity to respond, a separate written NTE is ordinarily necessary.

The practical rule: investigate enough to give proper notice, then act without unnecessary delay

HR should perform a short preliminary assessment immediately or as soon as reasonably possible after receiving the report. The purpose is not to decide guilt. It is to determine:

whether the report is credible enough to warrant a formal response;
who may have been involved;
what conduct, date, place, transaction, or omission is at issue;
which company policy, contractual duty, or possible just cause may apply;
what evidence must be secured before it disappears; and
whether temporary safety or evidence-protection measures are necessary.

Once HR has enough reliable information to describe the charge fairly, it should issue the NTE. Waiting for every possible detail or completing the entire investigation before notifying the employee can be unfair because the employee must have a meaningful chance to participate before a conclusion is reached.

On the other hand, sending a vague NTE within hours of a report merely to appear prompt can also violate due process. The notice must be specific enough for the employee to understand and answer the actual accusation.

A sound working standard is therefore:

Issue the NTE as soon as reasonably practicable after the preliminary fact-check, subject to any shorter deadline in the company code, CBA, employment contract, or a law governing the particular complaint.

Why there is no automatic “24-hour,” “48-hour,” or “three-day” issuance rule

The Labor Code and the general termination rules do not prescribe a fixed period between an incident report and the first notice in an ordinary private-sector disciplinary case. The appropriate interval depends on such matters as:

the seriousness and urgency of the allegation;
whether people, property, records, or operations remain at risk;
the number and availability of witnesses;
whether electronic records must be preserved;
whether the report is complete or requires clarification;
whether the employee is absent or difficult to serve;
the complexity of an audit or fraud inquiry;
confidentiality and data-privacy considerations; and
deadlines contained in the employer’s own rules or CBA.

An internal policy may validly establish a shorter process. If the handbook says that an NTE must be issued within a stated period after discovery or reporting, HR should follow that commitment unless a legally supportable exception applies.

A CBA may also provide that an offense is deemed condoned if the company does not issue a show-cause memorandum within a specified time. In PLDT v. Domingo, the Supreme Court examined such a CBA provision and treated the employee’s refusal to cooperate with the investigation as material to the delay. The case illustrates why HR must check the actual CBA and document the cause of any delay; it does not create a general two-year period for all employers. See the Supreme Court decision in G.R. No. 197402.

An incident report and an NTE serve different purposes

An incident report records an event or allegation. It may come from a supervisor, security officer, customer, co-worker, audit team, or complainant. It starts fact-finding but does not by itself prove misconduct.

An NTE is the first formal due-process notice to the employee whose discipline or dismissal is being considered. Its function is to disclose the specific accusation and invite a meaningful defense before management decides the case.

Calling a document an “incident report,” “memorandum,” “charge sheet,” “request for explanation,” or “show-cause order” is not controlling. Its contents and the opportunity it actually provides matter more than its label.

The Supreme Court has ruled that a general irregularity report is not enough when it does not clearly state the relevant circumstances, company rule, or possible just cause. A verbal discussion is likewise not a substitute for the required written first notice. See King of Kings Transport, Inc. v. Mamac, G.R. No. 166208.

What a legally adequate NTE should contain

When dismissal for a just cause may result, the NTE should ordinarily state:

The particular acts or omissions charged. Include material dates, approximate times, places, transactions, records, or events when known.
A detailed factual narration. Avoid bare labels such as “dishonesty,” “insubordination,” “negligence,” or “policy violation” without explaining what the employee allegedly did or failed to do.
The applicable company rule or duty. Identify the relevant handbook provision, code of conduct, contract term, lawful order, or job responsibility.
The possible Labor Code ground, when dismissal is under consideration. Just causes under Article 297 include serious misconduct or willful disobedience, gross and habitual neglect, fraud or willful breach of trust, commission of a crime or offense against the employer or specified representatives or immediate family members, and analogous causes. The label alone is insufficient; the supporting facts must fit the legal elements.
A clear directive to explain. State where and how the response may be submitted and to whom it should be addressed.
At least five calendar days from receipt to answer. The employee needs adequate time to study the accusation, seek assistance, collect records, identify witnesses, and prepare defenses.
The possible consequence. If termination is genuinely being considered, the notice should make that clear without declaring that guilt or dismissal has already been decided.
An opportunity to request clarification or a conference. A formal trial-type hearing is not always indispensable, but the employee must have a real opportunity to be heard.

The governing standards appear in DOLE Department Order No. 147-15 and have repeatedly been applied by the Supreme Court. In G.R. No. 216599, the Court found a 48-hour response period inadequate and emphasized the minimum five-calendar-day opportunity.

Count the response period from receipt, not from the date on the letter

The five-calendar-day period generally begins when the employee actually receives the NTE, not when HR drafts or dates it.

HR should preserve reliable proof of service, such as:

a signed receiving copy;
a delivery record identifying the recipient, date, and time;
an authorized courier’s proof of delivery;
documented service at the employee’s last known address when personal service is unsuccessful; or
verifiable electronic delivery if company rules, established practice, and the circumstances make that method effective and the employee can access the notice.

If the employee refuses to receive or sign, HR should document the attempt through witnesses, a written service report, photographs where lawful and appropriate, or another reliable delivery method. A refusal should not be casually assumed.

If the employee receives the notice late, cannot access attachments, is hospitalized, or reasonably needs essential records to answer, HR should evaluate a request for extension in good faith. Mechanical reliance on a deadline despite a known service problem may defeat the purpose of due process.

What HR should do before issuing the NTE

Secure evidence immediately

Preserve relevant material without altering it:

the original incident report and attachments;
CCTV footage before automatic deletion;
access-control and attendance logs;
emails, messages, and business-system records;
audit trails and transaction histories;
damaged items or physical evidence;
relevant policies and the version effective on the incident date;
witness names and signed, dated statements; and
service and investigation records.

Preservation must comply with the Data Privacy Act, legitimate-access controls, and applicable company policies. Access should be limited to people who need the information for the inquiry.

Check the governing documents

Before choosing a deadline or charge, review:

the employee handbook or code of discipline;
the employment contract;
the CBA, if any;
past disciplinary practice in comparable cases;
sector-specific regulations; and
special laws applicable to the complaint.

Consistency matters. Unexplained selective enforcement can undermine the credibility and fairness of the process.

Separate preliminary review from final judgment

The investigator should determine whether an explanation is needed, not assume that the report is true. Phrases such as “you committed fraud” are risky before the employee has been heard. A neutral formulation is that records or statements “indicate” or “allege” specified conduct and that the employee is being asked to explain.

When immediate action is required

Some reports cannot safely remain in an ordinary queue. HR should act at once when the allegations involve:

violence, threats, stalking, or an immediate safety risk;
ongoing harassment or retaliation;
possible destruction or manipulation of evidence;
continued unauthorized access to funds, systems, confidential records, or dangerous equipment;
child abuse, trafficking, or another matter carrying separate reporting duties;
serious workplace accidents requiring regulatory reporting; or
gender-based sexual harassment covered by the Safe Spaces Act.

“Immediate action” does not mean immediate dismissal. It means prompt protection, evidence preservation, preliminary assessment, and commencement of a fair process.

Special rule for workplace gender-based sexual harassment

Under Section 17 of the Safe Spaces Act, Republic Act No. 11313, the employer’s independent internal mechanism or Committee on Decorum and Investigation must investigate and decide the complaint within 10 days or less from receipt, while observing due process, protecting the complainant against retaliation, and preserving confidentiality to the greatest extent possible.

That ten-day requirement applies to the investigation and decision on a covered complaint; it is not a general NTE deadline for every workplace incident. Because the entire process must fit within that period, the initial notice and protective measures should be undertaken immediately.

For sexual harassment covered by Republic Act No. 7877, an informed employer that fails to take immediate action may also face solidary liability for damages under the statute. In LBC Express-Vis, Inc. v. Palco, the Supreme Court held that an unexplained 41-day wait before issuing an NTE, followed by further delay, showed indifference to the employee’s safety and contributed to a hostile work environment and constructive dismissal. See G.R. No. 217101.

May HR investigate first?

Yes—but only to the extent reasonably needed to understand and frame the allegation.

A preliminary review may include securing records, interviewing the reporting person for clarification, checking whether the alleged employee could have been involved, and identifying the relevant policy. HR should not complete a one-sided prosecution and settle on dismissal before issuing the NTE.

For a complex fraud, cybersecurity, procurement, or accounting matter, a longer preliminary review may be reasonable. HR should maintain a dated investigation log explaining:

what was done;
when it was done;
what information was still missing;
why the delay was necessary; and
what measures preserved fairness and evidence.

Silence or undocumented inactivity is much harder to justify than a demonstrably active investigation.

Can HR issue an NTE on the same day as the incident report?

Yes, if the report and available records already provide enough specific, reliable facts to frame a fair charge. Same-day issuance may be appropriate for a witnessed safety violation, a clear attendance event, or a documented transaction.

It is not automatically proper merely because it is fast. If the notice simply copies an accusation without checking obvious inconsistencies, omits critical details, or declares guilt, speed will not cure the defect.

Can HR wait for a police case, audit, or external investigation?

Usually, an internal administrative inquiry does not have to await the outcome of a criminal case or another external proceeding. The issues, evidence standards, and purposes may differ.

HR should nevertheless avoid interfering with law-enforcement activity, contaminating evidence, compelling disclosure that violates a legal right, or making unsupported criminal accusations. Coordination with counsel is advisable where fraud, theft, violence, data breaches, regulated activity, or possible criminal liability is involved.

An acquittal or dismissal of a criminal complaint does not automatically decide the employment case, but HR must still prove any just cause for dismissal by substantial evidence and comply with procedural due process.

Preventive suspension is not automatic

An NTE does not automatically authorize preventive suspension. Under the implementing rules and Supreme Court decisions, preventive suspension is permitted when the employee’s continued presence poses a serious and imminent threat to the life or property of the employer or co-workers.

It is a protective measure, not a penalty. The employer should document the concrete threat and consider less restrictive alternatives, such as temporary reassignment, access restrictions, schedule changes, paid leave, or a no-contact direction, when suitable.

Preventive suspension generally may not exceed 30 days. After that, the employee must be reinstated to the former or a substantially equivalent position, or the employer may extend the suspension while paying wages and benefits. The governing rule and safeguards are discussed in G.R. No. 227718.

An indefinite or unjustified preventive suspension can expose the employer to a constructive-dismissal claim.

What happens after the employee answers?

HR should objectively evaluate:

the incident report;
the employee’s explanation;
supporting documents from both sides;
witness accounts and their reliability;
applicable rules in effect at the time;
comparable past cases;
the employee’s role and disciplinary history, where lawfully relevant; and
whether the evidence reaches the substantial-evidence standard.

A conference should be provided when the employee requests one in writing, when substantial factual disputes require clarification, or when company rules or a CBA requires it. A trial-type hearing and formal cross-examination are not invariably required, but the employee must receive a genuine and ample opportunity to present a defense.

If no violation is established, HR should close the case and document the result. If a penalty short of dismissal is imposed, HR should follow the handbook, CBA, contract, and standards of proportionality and consistency.

If dismissal for just cause is found warranted, HR must issue a second written notice stating that the employee’s explanation and all relevant circumstances were considered and specifying the established ground for termination. The decision notice should not simply repeat the accusation.

Delay does not automatically erase an offense—but it creates legal risk

A delayed NTE is not automatically void solely because several days or weeks passed after the incident report. The legal effect depends on the reason for the delay, the governing rules, prejudice to the employee, the nature of the complaint, and the employer’s conduct.

Delay becomes especially risky when:

the handbook, contract, or CBA contains a deadline or condonation clause;
management knew the material facts but took no documented action;
records or witnesses became unavailable;
the accused employee can no longer reconstruct events fairly;
management continued treating the conduct as acceptable;
the delay was selective or retaliatory;
a complainant remained exposed to danger, harassment, or retaliation;
preventive suspension continued beyond lawful limits; or
a special law required immediate action or a fixed resolution period.

HR should never backdate a notice or alter an incident report to conceal delay.

Consequences of an invalid dismissal process

A lawful dismissal requires both:

substantive due process—a valid just or authorized cause supported by substantial evidence; and
procedural due process—the required notices and meaningful opportunity to be heard.

If there is no valid cause, the dismissal may be illegal even if HR followed a perfect procedure. Depending on the case, remedies can include reinstatement, backwages, separation pay in lieu of reinstatement, and other appropriate damages or fees.

If a valid just cause exists but the employer fails to observe the required procedure, the dismissal may remain valid, but the employer may be ordered to pay nominal damages. The amount and other relief depend on the applicable facts and controlling jurisprudence; HR should not treat procedural noncompliance as a minor administrative defect.

Practical checklist for HR

Date-stamp and preserve the original report.
Acknowledge receipt without promising an outcome.
Assess immediate safety, retaliation, and evidence risks.
Secure records before they are overwritten or altered.
Review the handbook, contract, CBA, and special laws.
Conduct only the preliminary fact-check needed to frame the issue.
Record every investigative step and reason for any delay.
Draft a specific, neutral NTE.
Give at least five calendar days from actual receipt when dismissal for just cause is contemplated.
Document valid service and any refusal to receive.
Consider reasonable requests for records, clarification, representation, or extension.
Evaluate all evidence, including exculpatory material.
Hold a conference when required or reasonably necessary.
Issue a reasoned written decision only after considering the defense.
Protect confidentiality and prohibit retaliation throughout the process.

What employees should preserve after receiving an NTE

An employee should keep:

the NTE, envelope, email headers, and proof of the actual receipt date;
the incident report or attachments provided;
the relevant handbook, policy, contract, and CBA;
schedules, time records, approvals, messages, and emails;
original electronic files and metadata where available;
names and contact details of witnesses;
prior instructions from supervisors;
proof of attempts to submit the explanation;
requests for clarification, documents, a conference, or an extension;
records of preventive suspension or access restrictions; and
any evidence of retaliation or inconsistent treatment.

The written explanation should answer each allegation directly, identify inaccurate or missing facts, attach available support, and state what additional evidence is needed. The employee should avoid deleting messages, coaching witnesses, signing an inaccurate admission, or ignoring the notice.

If the NTE allows fewer than five calendar days and dismissal is possible, the employee should promptly submit a written request for adequate time while preparing the best response possible. Silence can permit HR to decide on the available evidence, although it does not relieve the employer of proving a valid cause.

Common mistakes

Mistakes by HR

treating the incident report as proof of guilt;
assuming the report itself satisfies the first-notice requirement;
using generic accusations without dates or factual details;
giving only 24 or 48 hours despite possible dismissal;
counting from the letter date instead of actual receipt;
withholding enough information to make a meaningful response impossible;
demanding a confession instead of an explanation;
deciding the penalty before considering the response;
automatically suspending the accused employee;
leaving a complainant exposed while an inquiry remains pending;
missing a handbook, CBA, or statutory deadline;
applying different standards to comparable employees; and
failing to document service, investigation steps, and reasons for delay.

Mistakes by employees

ignoring the NTE because it appears defective;
answering emotionally without addressing each factual allegation;
relying only on verbal explanations;
failing to request missing documents or additional time in writing;
altering, deleting, or fabricating records;
assuming resignation is the only response;
signing a prepared statement without reading it; and
waiting until dismissal before obtaining advice in a high-risk case.

When legal or government assistance is urgent

Seek prompt advice from a Philippine labor lawyer, union representative, or appropriate government office when:

dismissal is expressly threatened;
the response deadline is less than five calendar days;
HR refuses to disclose the acts or rules allegedly violated;
the employee is pressured to resign or sign an admission;
preventive suspension appears unjustified or is approaching 30 days;
there is violence, sexual harassment, retaliation, discrimination, or a serious safety risk;
the accusation may also produce criminal, professional, immigration, or regulatory liability;
important electronic evidence is about to be deleted;
a CBA grievance deadline is running; or
a termination notice has already been received.

An aggrieved worker or employer may seek conciliation-mediation through the Single Entry Approach. Requests for Assistance may be filed online through the official DOLE Assistance for Request Management System or onsite at identified DOLE, National Conciliation and Mediation Board, or National Labor Relations Commission offices.

Do not delay solely because an internal appeal or settlement discussion is ongoing. Different claims and grievance procedures can have different filing periods.

Frequently asked questions

Must HR issue an NTE within 24 or 48 hours of the incident report?

No general Philippine labor law imposes that deadline for ordinary private-sector disciplinary cases. A handbook, contract, CBA, or special law may impose one. HR should still act promptly and document any necessary delay.

Is five calendar days the deadline for HR to issue the NTE?

No. It is the minimum reasonable period generally given to the employee after receipt of the NTE to prepare an explanation when dismissal for just cause is contemplated.

Can an incident report serve as the NTE?

Only if its contents actually satisfy the first-notice requirements and it is served on the employee with a clear directive and reasonable opportunity to explain. A report that merely records an accusation normally does not suffice.

Can HR issue an NTE before the investigation is complete?

Yes. HR should have enough verified detail to state the charge fairly, but the employee’s explanation is itself part of the investigation. Guilt should not already have been determined.

Does an NTE mean the employee will be dismissed?

No. It should mean that management is seeking the employee’s side before deciding whether a violation occurred and what action, if any, is appropriate.

Is an administrative hearing always required?

Not always. A meaningful opportunity to submit an explanation and evidence can satisfy the hearing requirement. A conference becomes particularly important when requested, required by policy or CBA, or needed to resolve substantial factual disputes.

What if the employee refuses to receive the NTE?

HR should document the refusal and use another reliable method of service, commonly including delivery to the employee’s last known address. Refusal does not authorize backdating or an unsupported assumption that service occurred.

May HR proceed if the employee does not answer?

Generally, HR may evaluate the case using the available evidence after valid service and expiration of a reasonable response period. The employer must still prove a lawful cause and consider any timely explanation actually received.

Does a late NTE automatically make a dismissal illegal?

No. Delay is evaluated in context. It may nevertheless violate a company rule or CBA, prejudice the defense, support condonation or bad-faith arguments, or create liability where a special law requires immediate action.

How quickly must HR act on workplace gender-based sexual harassment?

The Safe Spaces Act requires the workplace internal mechanism or CODI to investigate and decide a covered complaint within ten days or less from receipt, while observing due process and protecting against retaliation.

Official legal references

This article provides general legal information, not legal advice or a prediction of any case. The proper deadline and procedure may depend on the actual notice, evidence, handbook, employment contract, CBA, industry rules, and nature of the complaint. Official sources were last checked on July 27, 2026.