FirstHR

Written Warning to an Employee: How to Do It Right

A written warning records a specific problem, a required change, and a consequence. The six elements, when to issue one, and what if they refuse to sign.

TL;DR
A written warning records a specific problem, the standard it breaches, the change required, a deadline, and the consequence of failing. No law sets a number of warnings before termination; your handbook does. Specificity is what makes it useful: dates and observable facts, not impressions. A refusal to sign does not invalidate it, and the review date must be held.
Category
Updated
Oct
27
2026
Reading time
13min

I have read a lot of written warnings and almost all of the bad ones share a single sentence: some version of “needs to improve their attitude.” It feels like it says something. Read back a year later, in a room where somebody is disputing a termination, it says nothing at all.

A written warning is not really a punishment. It is a piece of evidence you are creating on purpose, and its entire value depends on whether a person who was not there could read it and understand exactly what happened.

This guide covers when a warning is the right tool, the six elements it needs, the difference between describing an event and recording an impression, what to do when somebody refuses to sign, and the timing traps that turn a reasonable document into a liability.

I build the people and records tooling for businesses without an HR department at FirstHR. This is general information rather than legal advice.

My TeamPam BeeslyFull-timeJim HalpertFull-timeRyan HowardPart-time
Core HR
Your team's records in one place
A profile and documents for each person, and the org chart built from them.
Start free trial7-day free trial, no credit card

What a Written Warning Is

A written warning is a formal record of a performance or conduct problem, issued to the employee, stating what has to change and what happens if it does not. It does two jobs at once: it tells the employee what has to change, and it records that you said so. The second job is the reason to take care over it.

Definition
Written warning
A dated document issued to an employee recording a specific performance or conduct shortfall, identifying the standard or policy concerned, describing any prior discussion, setting out the specific improvement required and the timeframe for it, and stating the consequence of failing to improve. It is signed by the manager and offered to the employee for acknowledgment of receipt. It functions simultaneously as a communication to the employee and as contemporaneous evidence supporting any later decision.

The dual purpose is why the tone matters. Written purely as evidence it reads as a threat and the employee stops listening. Written purely as a conversation it lacks the specifics that make it useful later. The document that works does both: it is precise enough to stand up and human enough to be heard.

When to Issue One, and When Not To

A warning is the right tool for something the employee can change by choosing to. Several situations look similar and need a completely different response.

SituationWritten warning?What it actually needs
Repeated lateness after a verbal conversationYesThe standard case for a written warning
A specific conduct breach against a clear policyYesPossibly a final warning depending on severity
Performance below standard, never previously raisedNot yetA verbal conversation first, with a note to file
Struggling since a medical issue was disclosedNoAn accommodation conversation, not discipline
Performance drop right after a discrimination complaintPauseCheck the file and take advice before issuing anything
A skills gap the employee was never trained forNoTraining, and possibly a look at how they were hired
Gross misconduct such as theft or violenceNoInvestigation, then a decision on termination

The fourth and fifth rows are where small employers create real exposure, usually with entirely good intentions. Issuing a warning to somebody who has just disclosed a disability or just made a complaint is not automatically unlawful, but it creates a timing inference you will have to answer, and the answer has to be a record that existed beforehand.

Which is the argument for running the check before you write anything rather than after somebody questions it. This is the screen, not the warning itself: it records what you looked at and what you decided, and it is worth keeping in the file even when the answer is that no warning is issued.

Pre-Issue Check for a Written Warning
PRE-ISSUE CHECK: WRITTEN WARNING

Company: [Company Name]
Employee: Job title:
Manager completing this check:
Date completed:
This is not the warning. It is the five minutes before the warning, and it is
the record that answers the questions somebody asks later. Keep it with the
file whether or not you go ahead.
1. IS A WARNING THE RIGHT TOOL HERE

•The issue is conduct or performance the employee can change by choosing to
•It is not a skills gap for training the employee never received
•It is not connected to a disability, an accommodation request, or a medical
disclosure
•It is not serious enough that an investigation should come first
Any of the above that does not hold, and what you are doing instead:
2. THE FACTS, WRITTEN AS EVENTS RATHER THAN IMPRESSIONS

Incident 1. Date: What was observed:
Incident 2. Date: What was observed:
Incident 3. Date: What was observed:
Anyone else present:
Where the supporting record is kept:
3. THE STANDARD IT FALLS SHORT OF

Policy, job description, or standard:
How and when the employee received it:
4. WHAT WAS ALREADY DISCUSSED

Date of the prior verbal conversation:
Held by:
Is there a note to file recording it: [ ] Yes [ ] No
If no, write that note before going any further. Date written:
5. CONSISTENCY CHECK

Anyone else who did the same thing recently:
What response they received:
If it was lighter, the difference is explained by:
6. TIMING CHECK

Has this employee recently raised a complaint, requested an accommodation,
reported a safety concern, or asked for leave? [ ] No [ ] Yes
If yes, date of that event:
The record supporting this warning that pre-dates it:
7. YOUR OWN PUBLISHED PROCESS

The step your handbook says comes next:
This warning is that step: [ ] Yes [ ] No
If no, the reason for departing from it:
8. THE SPECIFICITY TEST

Read every sentence you plan to write and ask whether somebody who was not
there could tell what happened. Strike anything that describes an impression.
Words you removed from the draft:
9. WHAT YOU ARE PREPARED TO DO

The change required, stated as something observable:
The date it has to happen by:
What happens if it does not:
This is a consequence you will actually apply: [ ] Yes [ ] No
Review date, entered in the calendar today:
DECISION

•Proceed with a written warning
•Verbal conversation and a note to file instead
•Investigate first
•Something else:
Decided by: Date:
Everyone in one list, with who they report to
Position, department, type, manager and status for each person. People who have left move to a separate list.

The Six Elements

A written warning needs six elements, and all six fit on one page. Each one closes off a question the employee, or anyone reading the file later, would otherwise raise.

What happened, specifically
Dates, times, and observable facts: “Arrived at 9:40 on the fourth, the eleventh, and the eighteenth.” Not “has a pattern of lateness,” which is a conclusion rather than a fact and is the first thing an employee disputes.
Which standard it falls short of
Point at the policy, the job description, or the standard that applies. A warning that describes conduct without connecting it to an expectation invites the reasonable answer that nobody said so.
What was already discussed
Any prior verbal conversation, with its date. This is what turns an isolated document into a sequence, and it is the field managers most often leave blank because they cannot remember when the conversation was.
What change is required, and by when
A specific, observable improvement with a date attached. “Improve your attitude” is unmeasurable and unenforceable. “Arrive by 9:00 for the next sixty days” is neither.
What happens if it does not change
Say it plainly, and say something you are actually prepared to do. A warning threatening termination from an employer who will not terminate teaches the employee that the document means nothing.
Signatures, and a place to disagree
Manager signature, date, and a line for the employee to acknowledge receipt. Give them space to write a response, because an employee who can record their disagreement in the document is far less likely to need somewhere else to record it.
Six fields, one page. A warning longer than a page is usually a manager arguing with the employee in writing, which is the one thing this document should never do.

The third element does the most work. Without a dated reference to the earlier conversation, the written warning is the first thing in the file, and the employee's account that this came out of nowhere is difficult to contradict.

The fifth element requires honesty with yourself. Write down only the consequence you are genuinely prepared to apply, because the whole team judges the process by whether a stated consequence ever arrives.

Specific, Not Impressionistic

A specific warning describes events with dates; an impressionistic one describes how the manager feels. That difference decides whether the document protects a decision or undermines it, and it comes down to how each sentence is written.

What managers write
Has a bad attitude. Is not a team player. Needs to show more initiative. Frequently late. Performance has been unsatisfactory. Does not communicate well. Attitude toward customers must improve.
What actually holds up
Arrived after the 9:00 start time on the fourth, eleventh, and eighteenth. Did not submit the weekly report on three of the last four Fridays despite a written reminder on the sixth. Raised voice to a customer on the twelfth, witnessed by two colleagues, contrary to the conduct policy.
The test is whether somebody who was not there could tell what happened. If the sentence describes an impression rather than an event, it will not survive being read back in a hearing.
6
elements a written warning needs to be useful
1
page, which is enough for all six
0
warnings federal law requires before an at-will termination
10
minutes, which is long enough to deliver one

Apply that test before you issue anything. “Has a bad attitude” fails it, because nobody who was not there could say what happened. “Raised their voice to a customer on the twelfth, witnessed by two colleagues” passes it.

Specificity matters for a second reason: fairness to the employee. “Improve your attitude” is not something anybody can act on, which means a warning built on it sets somebody up to fail and then documents the failure. A specific, observable requirement gives them a genuine chance, which is the point of issuing a warning rather than terminating.

Delivering It

Deliver it in person, briefly, with a second person present, and without negotiating the facts in the room.

1
Book it privately and keep it short
Ten minutes. This is a delivery, not a hearing, and the investigation should have happened before the document was written.
2
Have a witness present
A second manager or an owner. It protects both parties and produces a second account of what was said.
3
Read it, then hand it over
Reading the substance aloud removes any argument later that the employee did not understand what was being raised.
4
Let them respond, and record it
Give them the chance to say their side and write it in the space provided. An employee who can record disagreement in the document rarely needs to record it somewhere else.
5
Do not renegotiate the facts
If genuinely new information emerges, say you will consider it and come back rather than amending the document under pressure in the room.
6
Confirm the review date out loud
The specific date you will look at this again. It converts the warning from a punishment into a process with an end.

If They Refuse to Sign

The warning stands. A signature acknowledges receipt, not agreement, and no employee consent is required for the document to be valid or to be relied on later.

What to do is procedural: note on the form that the document was presented and the employee declined to sign, have the witness record the same with the date, and give the employee a copy anyway. That is a complete answer, and it is stronger than a signature obtained under pressure.

Tip
Most Refusals Are a Misunderstanding
People refuse to sign because they think a signature is an admission. Saying one sentence before you offer the pen resolves it most of the time: signing confirms you received this, not that you agree with it, and there is space here to write down your disagreement. That sentence turns a confrontation into a formality, and the written disagreement is genuinely useful to you as well, because it shows the process allowed a response.

What Happens Next

The review date is the part that separates a functioning process from a filing exercise, and it is the part almost everybody skips.

Hold the review on the date you set, whatever the outcome. If the change happened, say so, in writing, in the file. That closes the loop, tells the employee the process was real, and is the single most effective thing you can do to make the next warning you issue to anybody carry weight.

If it did not happen, the next step should be whatever the warning said it would be. Issuing a second identical warning because escalating felt uncomfortable teaches the employee that the stated consequence was not real, and it weakens every document in the file including the ones about other people.

How long you keep a warning is a separate question from how long it counts toward the next step.

For employers with 15 or more employees, federal regulation sets a floor for keeping a warning: personnel records must be kept for one year after the record was made or the action was taken, whichever came later. A charge of discrimination extends that, because every relevant record stays until final disposition (29 CFR 1602.14).

Final Written Warnings

A final written warning is the last step before termination, and the document says so in plain words. It carries the same six elements as any other warning, with two differences: it states plainly that the next step is dismissal, and it normally follows an earlier warning whose review date passed without the required change.

Issue one only where you mean it. A final warning that produces no consequence when the deadline arrives is more damaging than the first warning was, because it teaches the employee, and everyone watching, that the sequence has no end. Set the review date in the room, write it down, and hold it.

Departments
Dwight SchruteSales3 people
Darryl PhilbinWarehouse1 person
Kelly KapoorCustomer Service1 person
Core HR
Who works here and who does what
Profiles, departments and an org chart, with every change kept on record.

Legal Traps

Five situations where an ordinary warning creates exposure, and none of them are about the wording.

Timing after protected activity is first and largest. A warning issued shortly after somebody complained about discrimination, requested an accommodation, or reported a safety issue invites a retaliation inference, and answering it requires a record that predates the complaint (EEOC retaliation guidance).

By the numbers
Retaliation Is the Most Common Charge
According to EEOC enforcement data for fiscal year 2025, retaliation was alleged in 54,350 of the 88,201 charges filed with the agency, which made it the most frequent allegation of the year (EEOC enforcement and litigation statistics). A warning issued three weeks after a complaint is read against that backdrop. The document is usually not the problem. The sequence is, and the only answer to a sequence is a file that already existed.

Inconsistency is second. If two people did the same thing and only one received a warning, the difference has to be explainable in a sentence.

The EEOC puts the underlying rule plainly. Where two employees commit a similar offense, an employer may not discipline them differently because of race, color, religion, sex, national origin, age (40 or older), disability, or genetic information (EEOC prohibited practices).

Comparator analysis is how that gets tested afterward: a reviewer lines up everyone who did the same thing and compares how each was treated.

Departing from your own handbook is third. Whatever the law permits, your published policy is a promise, and skipping steps you promised weakens your position more than the missing step ever helped.

Protected concerted activity is fourth, and it catches employers who have never seen a union. Section 7 of the National Labor Relations Act gives most private-sector employees the right to act together for mutual aid or protection, with no headcount floor (29 U.S.C. 157). Warning somebody for discussing pay with a colleague sits inside that protection (NLRB on concerted activity).

And an unpaid suspension attached to a warning is fifth, for exempt employees specifically, meaning salaried staff who are exempt from overtime pay.

Deductions from an exempt salary are permitted only in defined circumstances, one of which is an unpaid disciplinary suspension of one or more full days imposed under a written policy applicable to all employees for conduct rule infractions (29 CFR 541.602). A partial-day suspension puts the exemption at risk.

Where Small Employers Get This Wrong

Six patterns, and the first is present in most of the bad warnings I have read.

Writing impressions instead of events is first. Attitude, professionalism, and team fit are conclusions, and a warning built on them documents that somebody was unhappy rather than that a standard was breached.

Skipping the verbal conversation, or having it and never writing a note to file, is second. It makes the written warning look like it arrived from nowhere.

Omitting the deadline is third. Without a date, there is nothing to review and no point at which anything is resolved.

Never holding the review is fourth, and it is the quiet killer. A process nobody follows up teaches everybody that the documents are decorative.

Threatening a consequence you will not apply is fifth. It costs you credibility once and then every time afterward.

And issuing one during a period that is already sensitive is last: right after a complaint, an accommodation request, or a leave request. The warning may be entirely justified, and it still needs a file that predates the trigger, which is a reason to keep documentation current rather than a reason to hesitate.

What worked for me
The rule I eventually settled on was that I do not write a warning containing any word I could not point at a specific incident for. Attitude went first, then professionalism, then unreliable. What replaced them was longer to write and much harder to argue with, and the unexpected effect was on the conversations rather than the documents: it is very difficult to have a vague, unfair conversation with somebody when the paper in front of you contains three dates and a policy reference.
Nick AnisimovNick Anisimov, FirstHR founder
Invite your team to FirstHR
4.7 on G2
Ryan HowardActive
Jim HalpertOn Leave
Key takeaways
1A written warning records a specific problem, the standard it breaches, the required change, a deadline, and the consequence of failing to change.
2No law requires a number of warnings before termination. Your own handbook is what binds you, and departing from it weakens your at-will position.
3Specificity decides whether the document helps or hurts. Dates and observable facts hold up; impressions like attitude and professionalism do not.
4A refusal to sign does not invalidate anything. Note the refusal, have the witness confirm it, and hand over a copy regardless.
5Hold the review on the date you set, including when the employee improved, because closing the loop is what makes the process real.
6A warning issued shortly after a complaint, accommodation request, or safety report creates a retaliation inference that needs a pre-existing record.

Frequently Asked Questions

What is a written warning?

A written warning is a formal document recording a specific performance or conduct problem, the standard it falls short of, the change required, a deadline for that change, and the consequence if it does not happen. It serves two purposes at once: it tells the employee clearly what has to be different, and it creates a contemporaneous record that a later decision can rest on. Its value depends almost entirely on specificity. A warning describing impressions rather than events documents that a manager was unhappy, not that a standard was breached.

How many written warnings before termination?

No law sets a number. The three-strikes idea is custom rather than statute, and in an at-will relationship an employer can terminate without any prior warning. What binds you is your own handbook: if your policy promises a progressive sequence, departing from it undermines your at-will position and hands the employee an argument you drafted yourself. The right number is whatever your published process says, applied consistently to everybody in comparable situations.

What should a written warning include?

Six things. What happened, stated as observable facts with dates rather than as conclusions. Which policy, standard, or expectation it falls short of. What was already discussed, including any prior verbal conversation and its date. What specific change is required and by when. What happens if the change does not occur. And signatures with a date, including space for the employee to record their own response. One page is usually enough, and a longer document is frequently a manager arguing in writing.

What if an employee refuses to sign a written warning?

The warning still stands. Signing confirms the employee received the document. It does not mean they agree with it, and the warning does not need their consent to be valid. If they decline, write on the form that you presented it and they chose not to sign, ask the witness in the room to add the same note and the date, and hand over a copy anyway. Explaining up front that signing confirms receipt, not agreement, usually prevents the standoff, since most refusals come from taking a signature to be an admission.

Should you give a verbal warning first?

Usually yes for performance issues, and not necessarily for serious misconduct. A verbal conversation gives somebody a chance to correct course before anything goes in the file, which is both fairer and frequently effective on its own. The critical step people miss is writing a note to file recording that the verbal conversation happened, with the date and what was said. Without it, the written warning that follows appears to come from nowhere, and the employee’s claim that nobody told them is difficult to answer.

Can a written warning be used against the employer?

Yes, in two ways. First, a warning that is vague, undated, or at odds with the reason you later give for a termination reads as pretext, a cover story, instead of backing the decision up. Second, timing: if the warning follows closely on an employee’s discrimination complaint, accommodation request, or safety report, you will have to show a record that existed before that event. Neither risk is a reason to skip documentation. Both are reasons to write specifically and to review the file before you issue anything.

Does a written warning stay in the file forever?

How long a warning counts against somebody and how long you keep the paper are two separate questions. How long a warning counts toward escalation is your call, and many employers treat one as spent after a set period of sustained improvement. How long you must retain the document is fixed by federal rule: 29 CFR 1602.14 requires an employer covered by Title VII or the ADA (15 or more employees) to keep personnel and employment records for one year after the record was created or the action was taken, whichever is later, and for one year after the termination date when an employee was dismissed involuntarily. A filed discrimination charge extends that, because every relevant record stays until the case reaches final disposition. Pick one approach, put it in the handbook, and apply it to everyone. Honoring an old warning for one person and ignoring it for another is exactly the inconsistency a comparator analysis exposes.

Can you issue a written warning to a salaried exempt employee?

Yes. For a salaried exempt employee the warning itself is not the problem. An unpaid suspension attached to it can be. Federal rules let you deduct from an exempt salary only in specific situations, and one of them is an unpaid disciplinary suspension of at least one full day, imposed under a written policy that applies to all employees and covers workplace conduct violations. Docking a partial day, or suspending without that written policy in place, puts the exemption at risk. If you are unsure, issue the warning without a suspension and the question never comes up.

Make HR the easy part of running your business

Onboarding, e-signatures, training and core HR in one place. Up and running in 5 minutes.

  • 7-day free trial
  • No credit card required
  • Cancel anytime
4.7 on G2300+ companies trust FirstHR