Direct answer

Hold the file, follow the handbook, respect PIPL, and give the employee a chance to answer.

Before a for-cause dismissal, the employer should preserve emails, access logs and CCTV, interview in a controlled way, and match facts to a specific publicised rule. Personal WeChat and devices are not an open hunting ground — the WeChat-review Quick Answer and PIPL constrain that step. Do not announce guilt in a group chat. Document the allegation, the evidence, the employee’s explanation, and why the sanction is proportionate. A general internal-investigation page exists for dawn raids and company-wide probes; this page is the employment-misconduct track.

The classification screen

4 questions before you choose the route.

This page identifies the right question and evidence. It does not determine the legal outcome on a reader’s facts.

01

What rule or statutory item is alleged?

Name it before you collect everything ‘just in case’.

Charge
02

What can you lawfully collect?

Company systems vs personal devices vs WeChat.

PIPL
03

Who interviews, and is the employee heard?

Two-person interviews, notes, and a chance to respond.

Hearing
04

Is the likely outcome Art. 39, a warning, or nothing?

Do not investigate as theatre if you already decided to fire.

Outcome

Working rule: Map the regulated role before marketing or launch in China.

What changes the answer

The signal ledger.

These facts move the question beyond a label and into a product, money-flow and control analysis.

Signal
Ask the operating question
Why it changes the route
Personal device grab
Are you imaging a personal phone without a lawful basis?
PIPL and labour process both fail, and the evidence may be unusable.
No rule on file
Is there no handbook clause that actually describes this act?
The investigation cannot invent a standard after the fact.
Public shaming
Was the allegation sent to the whole company WeCom?
Defamation and labour-process problems stack on the original issue.
Prepare before you escalate

Bring a compact evidence docket—not a pitch deck.

Give a compliance team or counsel the operating facts that reveal the perimeter.

01Allegation noteWhat, when, which rule, and who reported it.
02Hold listAccounts, CCTV windows and devices preserved.
03Interview notesEmployee explanation and witness notes, signed if possible.
04PIPL basisWhy each personal-data access was necessary.
Common confusions

Questions people ask before they build.

Short answers for orientation. The right result can change with the service model and current rules.

Can we read the employee’s WeChat?

Work WeCom and company devices are a different analysis from personal WeChat. Use the live WeChat-review Quick Answer; do not assume a global forensic playbook applies.

Do we need outside counsel before interviewing?

For theft, bribery, or a likely Art. 39 firing, yes if the file will be tested in arbitration. Ordinary attendance issues may be handled in HR with a clean note.

Primary authorities

Reviewed sources support orientation, not a fact-specific assessment.