An employee reports a back injury, requests protected leave, then appears in photos doing strenuous work for another business. Or a worker takes intermittent medical leave every Monday after a denied schedule request. These situations create a legitimate business concern, but they also carry real legal risk. So, can employers investigate leave abuse? Often, yes, when there is an objective reason to investigate and the process respects privacy, anti-retaliation rules, and applicable leave laws.

For California employers especially, the question is not simply whether suspected abuse exists. It is whether the employer can verify the facts without crossing a legal or ethical line. A careful, discreet investigation can protect the organization from fraud and operational disruption. A careless one can create claims of retaliation, discrimination, or unlawful surveillance.

Can Employers Investigate Leave Abuse Under the Law?

Employers generally have the right to address suspected misuse of sick leave, family and medical leave, disability-related leave, workers’ compensation leave, and other approved absences. Federal laws such as the Family and Medical Leave Act, as well as California protections including the California Family Rights Act and paid sick leave rules, do not require an employer to ignore credible signs of fraud.

The key distinction is between investigating misconduct and punishing an employee for taking protected leave. Protected leave cannot be treated as evidence of poor performance, disloyalty, or a reason to target someone. But if the employer has a factual basis to believe the employee is misrepresenting the reason for leave or engaging in activity inconsistent with stated restrictions, it may be appropriate to investigate.

A reasonable basis may include conflicting medical documentation, a credible report from a reliable source, public social media content, inconsistencies in the employee’s explanation, or observed conduct that appears incompatible with claimed limitations. A rumor alone is usually a poor foundation for intrusive action. The stronger the evidence supporting the concern, the easier it is to justify a measured investigation.

This area is highly fact-specific. An employee on leave for anxiety may be fully capable of attending a family event. A person recovering from a workplace injury may be able to perform certain activities outside work while still being unable to perform the essential functions of a physically demanding job. A photograph or brief observation is not automatically proof of abuse.

Start With Documentation, Not Surveillance

Before considering surveillance, employers should review the available records. This may include the leave request, certification forms, the employee’s job description, the stated work restrictions, attendance history, communications about leave, and relevant workplace policies. The purpose is not to build a case against an employee. It is to determine whether there is a legitimate, defined issue that warrants further inquiry.

Employers should also apply policies consistently. If one employee is investigated for a questionable absence while another employee with similar circumstances is ignored, the difference in treatment may become central in a later dispute. Consistency does not mean every situation requires the same response. It means the organization should be able to explain why its response was based on specific facts rather than bias, frustration, or the employee’s use of protected rights.

A private conversation may resolve some concerns. For example, an employer can ask the employee to clarify an apparent inconsistency or request appropriate recertification where the law permits it. Human resources and employment counsel should be involved before requesting additional medical information. Medical inquiries have strict limits, particularly when disability accommodation laws apply.

When Surveillance May Be Appropriate

Surveillance is sometimes appropriate when less intrusive measures cannot answer a legitimate question and the employer has specific reasons to suspect fraud. It is not a routine management tool, nor should it be used to pressure an employee to return from protected leave.

A properly scoped surveillance assignment focuses on conduct in public places. A licensed investigator may document whether an employee is performing physical activities that conflict with claimed restrictions, operating a competing business while on leave, or working elsewhere while representing that they cannot work. The investigator should not trespass, impersonate someone, access private accounts without authorization, place tracking devices on personal vehicles, or attempt to obtain protected medical information.

Public-facing social media may also provide relevant information, but employers should proceed carefully. A post can be old, misleading, staged, or unrelated to the employee’s claimed limitations. Investigators should preserve the date, context, and source of publicly available material rather than relying on screenshots stripped of context. Employers should never ask a supervisor, coworker, or investigator to gain access to a private account through deception.

In sensitive matters, professional discretion matters as much as the evidence itself. A trained, licensed investigator understands how to conduct lawful observation, maintain accurate reporting, and avoid conduct that could undermine the credibility of the investigation. Kay & Associates Investigations approaches workplace matters with the same confidentiality, factual discipline, and individualized planning required in any high-stakes case.

What Evidence Actually Supports a Leave Abuse Finding?

The most useful evidence is evidence that can be explained clearly and fairly. It should show a material inconsistency between the employee’s claimed reason for leave or restrictions and their actual conduct. It should also be considered alongside the medical information already provided, the essential duties of the employee’s position, and the employee’s explanation.

For instance, an employee who claims they cannot lift more than 10 pounds but is documented repeatedly lifting heavy construction materials may warrant further review. By contrast, an employee seen carrying a small grocery bag may not. The facts need to relate to the claimed limitation and the job at issue.

Evidence is stronger when it is corroborated. A single social media post may raise a question. Multiple dated observations, public posts, work records showing outside employment, and a documented policy violation may create a more reliable picture. Investigative reports should separate verified observations from assumptions. They should state what was seen, when it was seen, where it occurred, and how the observation was made.

Employers should avoid treating an investigator’s report as the final decision. The employee may have a credible explanation, updated medical clearance, or a restriction that was misunderstood. Giving the employee an appropriate opportunity to respond can improve fairness and reduce the risk of an incorrect conclusion.

Common Mistakes That Create Legal Exposure

The greatest risk often comes from overreach rather than the investigation itself. Employers can reduce exposure by avoiding several common errors:

• Launching surveillance based only on gossip, personal conflict, or annoyance with leave scheduling.
• Monitoring an employee inside a home, medical facility, or other setting where privacy expectations are high.
• Treating lawful off-duty activity as proof that medical leave is fraudulent without understanding the restriction.
• Asking for diagnoses or medical details beyond what leave laws allow.
• Disciplining an employee before reviewing all evidence and allowing a meaningful response.
• Singling out employees because of disability, pregnancy, age, protected complaints, union activity, or prior leave use.

California employers must also account for state-specific protections, local ordinances, collective bargaining agreements, and internal policies. Workers’ compensation claims, disability accommodations, pregnancy leave, and intermittent leave each raise different questions. What may be permissible in one context may be improper in another.

A Defensible Investigation Process

A defensible process begins with a narrow question: What fact does the employer need to verify? The organization should document the objective basis for concern, identify the applicable leave and employment laws, and decide whether clarification, recertification, or an internal review could resolve the issue before surveillance is considered.

If an outside investigator is retained, the assignment should be written, limited in scope, and focused on lawful public observation. The investigator should provide factual reports, supporting media when appropriate, and a clear chain of documentation. The employer should keep investigative materials confidential and share them only with those who have a legitimate need to know.

Before taking disciplinary action, decision-makers should consult employment counsel or qualified HR professionals. This is particularly prudent when the employee has requested an accommodation, filed a workers’ compensation claim, used protected leave, or previously raised concerns about discrimination or retaliation. A measured review may take more time, but it can prevent a costly decision based on incomplete facts.

The Bottom Line for Employers

Employers do not have to accept suspected leave fraud without question. They do, however, need a legitimate reason, a lawful method, and a fair process. The goal is not to catch an employee in a technicality. It is to establish the truth while protecting the organization, respecting employee rights, and preserving the integrity of the workplace.

When the facts are unclear, restraint is often a strength. A focused investigation conducted by experienced professionals can provide answers without turning a legitimate concern into a larger legal problem.