Handling a suspected false medical certificate and employer obligations in Australia

A medical certificate is the standard way an employee backs up a personal leave claim, and under the Fair Work Act 2009 (Cth), an employee who takes paid personal/carer's leave must give evidence that would satisfy a reasonable person the leave was genuine if the employer asks. Most certificates are legitimate, and the law expects you to treat them seriously. But when something does not add up, a forged date, a clinic that cannot be found, an altered signature, you have obligations, not just options.

The law requires you to investigate fairly, protect the employee's health information, and keep any disciplinary response within lawful bounds. Skip those duties and a genuine case of fraud can turn into an unfair dismissal claim or a privacy complaint against your business. This guide sets out the five duties that apply when you suspect a false medical certificate, what happens if you breach them, and the practical steps to stay compliant.

Who these obligations apply to and what triggers them

Most private sector employers in Australia are national system employers covered by the Fair Work Act, including companies, partnerships, sole traders and trading corporations. The obligations described here apply to that group, which covers nearly every small to medium business operating through a registered company.

The trigger is an employee claiming paid personal/carer's leave. Under s 97 of the Fair Work Act, that leave is available where the employee is unfit for work because of personal illness or injury, or needs to care for an immediate family member who is sick. The evidence requirement in s 107 kicks in when you ask the employee to substantiate the claim, and your suspicions arise because the certificate supplied looks false: fabricated, altered, backdated, or issued by someone who is not a registered health practitioner.

One threshold matters for how you can end the employment. If you had fewer than 15 employees at the time of dismissal, you are a small business employer, and the Small Business Fair Dismissal Code under s 388 applies. Complying with the Code is part of avoiding an unfair dismissal finding. Most of the duties below apply to you regardless of size.

Duty 1: Establish the facts through a fair investigation

The concept of serious misconduct is defined in reg 1.07 of the Fair Work Regulations 2009 (Cth). It includes wilful or deliberate behaviour inconsistent with the continuation of the employment contract, conduct that causes serious and imminent risk to the health or safety of a person or to the reputation, viability or profitability of the business, and engaging in theft, fraud, assault or sexual harassment in the course of employment. Knowingly submitting a false medical certificate to obtain paid leave can sit within that definition, either as fraud or as deliberate conduct inconsistent with the contract.

But the label is not automatic. The High Court recognised in Blyth Chemicals Ltd v Bushnell (1933) 49 CLR 66 that an employer may dismiss without notice where an employee's conduct is inconsistent with the trust and confidence the employment relationship depends on. That principle only operates where the conduct is actually established, not assumed. An investigation that is fair, proportionate and documented is what turns suspicion into a defensible finding.

A fair investigation generally involves these steps:

Preserve the evidence: Secure the certificate, rosters, timesheets, emails and any other records that bear on the absence.
Pinpoint the concern: Identify specifically what appears wrong, such as inconsistent dates, an unlocatable clinic or an edited document, and keep the inquiry focused on authenticity rather than the employee's medical condition.
Put the concern to the employee: Give the employee the allegation in writing with enough detail to respond meaningfully, allow a reasonable time to reply, and offer a support person for any meeting.
Decide on the evidence: Reach a finding on the balance of probabilities, consider the employee's explanation, length of service and prior record, and record the reasoning and evidence you relied on.

Procedural fairness is not a courtesy. It is the foundation of any later decision to discipline or dismiss, and it is the first thing the Fair Work Commission examines if the matter ends up in a hearing.

Duty 2: Only ask for evidence a reasonable person would accept

Section 107(3) of the Fair Work Act lets you require evidence that would satisfy a reasonable person that the leave was taken for a genuine reason. In practice that means a medical certificate or a statutory declaration. You can ask for clarifying detail, such as the practitioner's provider number or clinic details, to verify that a certificate was genuinely issued.

What you cannot do is demand more than the circumstances warrant. A certificate is evidence of the practitioner's opinion that the employee was unfit, and you are not entitled to a diagnosis, clinical notes or a second medical opinion as the price of approving the leave. If the certificate is genuine on its face, that ordinarily satisfies the reasonable person test. The purpose of the rule is to let you verify the leave was legitimate, not to interrogate the employee's health.

Where the concern is not authenticity but fitness to return to work, that is a different inquiry with its own limits, and it should be handled separately and with proper consent rather than folded into a fraud investigation.

Duty 3: Protect the employee's health information

Health information is sensitive, and the way you handle it during an investigation is regulated. The Privacy Act 1988 (Cth) exempts employee records under s 7B(3), so the Australian Privacy Principles generally do not apply where an employer's act is directly related to the employment relationship and an employee record. Most small businesses are also outside the Act entirely. That does not mean health information is free for the taking. Some states have dedicated health records legislation that still applies to employers, you owe the employee a duty of confidence at general law, and overreaching can support a privacy complaint or damage the credibility of your investigation.

The practical rule is to verify authenticity within narrow limits:

Seek written consent before contacting a clinic: Make clear you are only confirming whether the certificate was issued and by whom, not seeking medical details.
Never ask for diagnosis or clinical notes: That is sensitive health information and generally out of bounds without explicit consent and a clear legal basis.
If consent is refused, work with what you have: Inconsistencies, document analysis and admissions may be enough. Be cautious about treating a refusal to consent as proof of wrongdoing, since the employee may have legitimate reasons.
Keep the inquiry proportionate: The more you pry beyond the certificate itself, the greater the privacy and trust damage if the concern turns out to be unfounded.

Duty 4: Keep any disciplinary response lawful and proportionate

If the investigation substantiates deliberate falsification, the response should be proportionate, consistent with past practice and aligned with your policies. The lawful range runs from counselling or a written warning, through a final warning, to dismissal for conduct that genuinely amounts to serious misconduct.

Dismissal without notice is only available where the employment is terminated because of serious misconduct. Section 123(1)(b) of the Fair Work Act removes the notice of termination requirements in that situation. That is why the investigation matters so much: summary dismissal depends on the conduct being established and falling within the serious misconduct definition, not on your level of suspicion.

Even a justified dismissal can be challenged. Under s 385 of the Fair Work Act, a dismissal is unfair if it was harsh, unjust or unreasonable, and the Commission can order reinstatement or compensation. If you are a small business employer, the Small Business Fair Dismissal Code provides a simpler path for summary dismissal where you believe on reasonable grounds the employee committed serious misconduct such as fraud. Where compensation is ordered, s 392 caps it at the lesser of 26 weeks of remuneration and half the high income threshold, and proven misconduct can reduce the amount awarded.

A separate question is whether to report the matter externally. If the practitioner rather than the employee appears to be at fault, a report to the relevant health regulator may be appropriate. If forgery or fraud may have occurred, a police report is an option. Both carry defamation, privacy and employment risks, so take legal advice before escalating.

Duty 5: Never dock pay or stand employees down on your own authority

A false certificate does not give you a licence to withhold wages. Under s 324 of the Fair Work Act, an employer may deduct from an employee's pay only where the deduction is authorised in writing by the employee and is principally for the employee's benefit, or authorised under an enterprise agreement, a modern award, an FWC order or a law. An unauthorised deduction is a contravention of the payment obligations in s 323 and can attract penalties.

Standing down without pay is equally constrained. Section 524 permits a stand down only where the employee cannot be usefully employed because of industrial action, a breakdown of machinery or a stoppage of work for which the employer is not responsible. Investigating suspected misconduct is not one of those circumstances. If you need the employee away from the workplace during the inquiry, suspension on full pay is the standard low-risk approach, subject to the employment contract and any applicable award or agreement.

Consequences of getting it wrong

The risks of mishandling a suspected false certificate are concrete:

Unfair dismissal orders: A dismissal that fails the fairness test in s 385 can lead to reinstatement or compensation up to the s 392 cap, even where the employee was in fact dishonest.
General protections claims: An employee could allege the dismissal or other adverse action was for a prohibited reason, which carries its own remedies and penalties.
Privacy complaints: Overreach into medical information can support complaints under state health records legislation and expose the business to reputational damage.
Penalties for unlawful deductions: Deducting pay without the s 324 authorisation is a contravention of a civil remedy provision with exposure to penalties.
Criminal exposure for the employee: Creating or altering a document to deceive can constitute forgery or fraud offences under state and territory criminal law, although criminal liability is a matter for police and prosecutors, not for you to decide or threaten.

Compliance checklist

Work through these steps to keep the process defensible:

Have a leave policy that states when evidence is required and what form it takes, and that false or misleading evidence is misconduct.
Preserve the certificate and related records as soon as a concern arises.
Put the specific allegation to the employee in writing and allow a genuine opportunity to respond.
Obtain written consent before contacting any medical practice, and verify only that the certificate was issued and by whom.
Decide on the balance of probabilities and document the evidence and reasoning.
Scale the outcome from counselling through to dismissal, and check the Small Business Fair Dismissal Code if you employ fewer than 15 people.
Never deduct pay or stand an employee down without pay on your own initiative.

Where a lawyer helps

A workplace lawyer can design the investigation so it survives scrutiny, draft the show cause letter and the dismissal decision, and advise on whether the facts meet the serious misconduct threshold in reg 1.07. Lawyers also manage the difficult calls: whether to contact a clinic and with what consent, whether a report to a health regulator or the police is appropriate, and how to respond if the employee disputes the finding or lodges a claim. If the certificate concern is entangled with a return-to-work question, medical assessment or a discrimination risk, advice before you act is usually the difference between a clean outcome and a costly one.

The investigation is what protects the dismissal

The duty employers most often miss is the one that looks like a delay: running the fair process before reaching for summary dismissal. When a certificate is plainly wrong, the instinct is to act on the fraud immediately. The Fair Work Commission's first question is not whether the employee lied, it is whether the process was fair, whether the employee had a chance to explain, and whether the finding was made on evidence rather than suspicion. Even where misconduct is proven, s 392(3) reduces compensation but does not automatically save a dismissal that was harsh in the circumstances.

The first action to take this week is simple. If a certificate is in question, write down precisely what is wrong with it, dates that contradict the roster, a clinic that cannot be located, a document that looks edited, and put that in writing to the employee before you do anything else. A documented, fair investigation is the single step that keeps every lawful option, including dismissal without notice, available to you.