Employee Rights When Accused of Theft: Fair Process in Australia

Discovering a potential theft at work is stressful. You want to protect your business, your team and your customers - fast.

But moving too quickly (or skipping steps) can backfire. If you don’t respect employee rights when accused of theft, you risk unfair dismissal claims, general protections claims, reputational damage, and a demoralised workplace.

In this guide, we’ll walk you through a fair, defensible process that safeguards your business while complying with Australian employment laws. You’ll learn what employee rights you must respect, what steps to take (and in what order), and how to deal with suspension, evidence, dismissal and recovery of losses.

Why Theft Allegations Are High-Risk For Employers

Theft allegations trigger multiple legal risks for small businesses. The main ones are:

• Unfair dismissal exposure if you terminate without a fair process or reliable evidence.
• General protections and adverse action risks if you disadvantage someone for a prohibited reason (for example, a complaint they made) while investigating.
• Privacy and surveillance breaches if evidence is gathered unlawfully (think covert recordings that breach state surveillance laws).
• Defamation if accusations are discussed beyond those who need to know.
• Payroll errors if you make unlawful deductions or withhold pay to “offset” loss.

The safest path is a structured, documented process that respects employee rights, balances confidentiality, and reaches a reasonable, evidence-based outcome.

Employee Rights You Must Respect During A Theft Investigation

Even if the allegation seems obvious, employees have rights throughout any workplace investigation. As an employer, keep these principles front of mind:

• Procedural fairness: Put the allegation to the employee in clear terms, share the key evidence you rely on, and give them a real chance to respond before any decision is made.
• Support person: If an investigative or disciplinary meeting could lead to dismissal or other action, allow the employee to bring a support person if they request it.
• Impartial decision-making: Where possible, separate the investigator from the decision-maker to avoid bias.
• Confidentiality: Limit information to those who need to know. This reduces risks like defamation and protects the integrity of your investigation.
• Timeliness and clarity: Act promptly, but not hastily. Communicate next steps and timeframes so the process is transparent and fair.

These rights aren’t just “nice to have”. They directly affect whether a dismissal is considered fair under the Fair Work Act (and whether it would withstand scrutiny by the Fair Work Commission). For context, considerations such as whether the employee knew the case against them and was given an opportunity to respond are key factors under section 387.

A Fair Process: Step-By-Step Handling Of Allegations

Here’s a practical, defensible workflow you can follow when an allegation of theft arises.

1) Secure Your Business And Preserve Evidence

• Secure stock, cash, or systems immediately to prevent further loss.
• Preserve potential evidence (CCTV, POS logs, access logs, emails) - don’t alter it.
• Limit internal discussions to key people only.

2) Plan The Investigation

• Decide who will conduct the investigation and who will make the final decision (ideally different people).
• Map out what evidence you need to collect and who needs to be interviewed.
• Consider whether temporary suspension or stand down is appropriate to protect evidence or the workplace (more on this below).

3) Put The Allegation In Writing And Invite A Response

• Send a clear allegation letter (often called a show cause letter) outlining:
  • The specific conduct alleged (dates, times, items, amounts).
  • The evidence you’re relying on (provide copies or reasonable details).
  • The possible outcomes (including termination) and a deadline for response.
  • The employee’s right to a support person for any meeting.

4) Interview And Collect Evidence (Fairly)

• Meet with the employee (and their support person, if any). Ask open questions, listen, and take notes.
• Interview any relevant witnesses and document each interview.
• Review documents and footage objectively. Keep an evidence log.

5) Consider The Response And Make A Decision

• Assess all evidence (including the employee’s explanation). Ask: Is it more likely than not that the conduct occurred?
• Weigh mitigating factors (length of service, prior record, training, clarity of policies).
• Choose a proportionate outcome: no action, training/counselling, warning, or termination.

6) Communicate The Outcome And Next Steps

• Confirm your decision in writing, with reasons and any consequences (e.g. final warning or dismissal).
• If dismissing, cover practicalities such as notice or summary dismissal (if justified), return of property and final pay.
• Recordkeeping matters: keep all letters, emails, notes and evidence securely.

Suspension, Evidence, Dismissal And Recovering Losses: What’s Lawful In Australia?

Several tricky legal boundaries often arise in theft investigations. Here’s how to approach them confidently.

Can You Suspend Or Stand Down An Employee?

Suspension is usually possible if your contract or policies allow it, and it’s reasonable in the circumstances (for example, to prevent interference with evidence or protect staff). Ensure the suspension is on pay unless your contract or an industrial instrument says otherwise, and keep it as short as reasonably necessary.

Stand down without pay is a different concept with strict legal rules. It’s only permitted in limited circumstances, typically where an employee can’t be usefully employed due to a stoppage of work or reasons outside your control. Always check your instrument/contract and the Fair Work Act before taking this step. You can read more about both options here: suspension pending investigation and stand down.

What Evidence Can You Rely On (CCTV, Recordings, Emails)?

Evidence needs to be obtained lawfully. That means complying with state and territory surveillance laws and your own policies.

• CCTV: If you use security cameras, ensure signage, notification and use align with surveillance laws and your policies. A quick overview is in our guide to security camera laws.
• Audio recordings: Secretly recording a workplace conversation can be illegal in many states without consent. Be cautious about relying on unsolicited recordings from anyone.
• Accessing emails and systems: Access only in line with your IT policies and law. If you plan to review employee emails or device logs, ensure your policies allow it, notify employees appropriately, and limit access to the scope of the investigation.

If in doubt, get advice before using or sharing sensitive footage or data. Unlawfully obtained evidence can undermine your case and create regulatory risk.

When Is Summary Dismissal For Serious Misconduct Appropriate?

Theft can constitute serious misconduct, which may justify termination without notice (summary dismissal). However, it’s not automatic. You still need to conduct a fair process and reach a reasonable, evidence-based conclusion. The Fair Work Commission will consider whether you had a valid reason and followed a fair process under section 387 if the decision is challenged.

Key considerations include:

• Was the employee clearly informed of the allegation and evidence?
• Were they given a genuine chance to respond (with a support person if requested)?
• Was the decision-maker impartial and did they consider the response and all evidence?
• Was summary dismissal proportionate? In some cases, a warning or notice-period termination may be more defensible.

Can You Deduct Losses From Wages Or Withhold Final Pay?

Generally, you can’t unilaterally deduct money from wages to cover a suspected loss unless a lawful basis applies (for example, a permitted deduction under the Fair Work Act or a written, specific, and valid authorisation). Getting this wrong can lead to underpayment claims and penalties. Our guide to withholding pay explains the rules in plain English.

Practically, most employers recover losses through one or more of the following:

• Internal outcomes (warnings or termination) where justified, plus HR and security steps to prevent recurrence.
• Negotiated repayment agreements (in writing), if appropriate.
• Police reports or civil recovery if the loss is significant and evidence supports it.

If you do decide to involve the police, keep your internal process professional, objective and evidence-focused. Avoid public accusations or statements that could create defamation risk.

Documents And Policies That Protect Your Business

The best time to prepare for a theft allegation is before it happens. Having the right contracts and policies in place will make your investigation smoother and your outcomes more defensible.

• Employment Contract: Clearly sets expectations, misconduct definitions, suspension provisions, and termination processes. If you don’t already have robust templates, consider updating your employee termination documents at the same time.
• Workplace Policies: A suite covering conduct, disciplinary procedures, confidentiality, IT and surveillance, investigations, and evidence handling. A clear Workplace Policy framework ensures everyone knows the rules.
• Investigation Procedure: A simple, step-by-step framework for receiving reports, preserving evidence, interviewing, assessing and determining outcomes. This aligns practice with procedural fairness.
• Show Cause Letter Template: Standardises how you put allegations and evidence to employees and invite their response. Our overview of show cause letters covers what to include.
• Privacy and Surveillance Policy: Explains how you collect and use CCTV and system logs, and what employees can expect.
• Post-Employment Clauses: Where appropriate, ensure confidentiality and property return clauses are airtight to help you recover property and protect sensitive information.

When these documents work together, you can move quickly without cutting corners. You’ll know what to say, what to collect, and when to escalate - and your team will trust the process.

Key Takeaways

• Theft allegations are high-risk for employers - handle them with a fair, documented process to protect your business.
• Respect core employee rights when accused of theft: procedural fairness, a chance to respond, a support person if requested, confidentiality, and impartial decision-making.
• Follow a clear workflow: secure evidence, plan the investigation, issue a show cause letter, interview, assess, decide, and confirm the outcome in writing.
• Be careful with suspension and stand down, and make sure evidence (like CCTV or system logs) is obtained and used lawfully under surveillance and privacy rules.
• Summary dismissal for serious misconduct may be justified, but only after a fair process and evidence-based findings consistent with section 387.
• Don’t make unlawful deductions or withhold pay - seek lawful recovery options and use written agreements where appropriate.
• Put strong foundations in place now: Employment Contracts, workplace policies, investigation procedures and the right templates make your response faster and safer.

If you’d like a consultation on managing employee theft allegations or setting up your policies and contracts the right way, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.