The Disciplinary Process
Where these cases are decided is procedure rather than facts. The steps that hold, and the three that are usually skipped.
Investigation · Procedure
General orientation, not legal advice.
Attendance dismissals are lost on process far more often than on the underlying facts.
The sequence
An investigation, separate from the decision.
Notice of the allegation, in writing, with the evidence attached — not summarised.
Time to prepare.
A meeting, with the right to be accompanied where that applies.
A decision by someone who did not investigate.
Written reasons.
A right of appeal, heard by someone more senior or at least different.
The three usually skipped
Sharing the actual records rather than a summary of them. A person cannot answer a conclusion, and withholding the data reads badly afterwards.
Separating investigation from decision. In small organisations this is hard and it is still the standard, and where it is impossible the fact should be acknowledged rather than ignored.
A genuine appeal. An appeal heard by the person who decided is not an appeal, and it is a common finding.
Consistency
The same conduct treated differently between people is the evidential core of most successful claims.
Which means the comparison matters: has anyone else done this and been treated more leniently?
Check before deciding, not after being asked.
And check who has been investigated at all, because selective investigation is the same problem one step earlier.
Proportionality of outcome
A few minutes, first occasion, with an explanation: a conversation.
Repeated after a stated expectation: a formal warning.
Deliberate, collusive, corroborated: potentially dismissal, and that is the narrow case.
Dismissal for a first instance of a few minutes is disproportionate in almost every framework, and describing it as theft does not change the analysis.
The word "theft"
Using it in a disciplinary letter raises the stakes considerably.
It implies dishonesty, which is a higher bar to establish and which affects the person's future employment.
Where the conduct is a few minutes of break overrun, calling it theft is both inaccurate and damaging, and it will be challenged.
Describe the conduct, not a characterisation of it.
What to keep
The full record: allegation, evidence provided, meeting notes, decision, reasons, appeal.
The checks that were run, including the system-fault check.
Comparators considered.
Because the file is the case, and a file assembled after a decision reads exactly like one.
Check comparators before deciding
The single most common ground of successful challenge.
Has anyone else done this?
What happened to them?
Who has been investigated at all, which is the same problem one step earlier.
Check before deciding rather than after being asked, and record that you checked — a check that is not recorded did not happen as far as any reader is concerned.
Follow the difficult record
Use a scope example to frame one representative case. The useful evidence is the record created when a value is corrected, approved and exported.
Independent reference
For a thematic point of reference, see ACAS guidance. Use this established source as an outside check before turning the principle into a system rule.