Can an Employer Sue an Employee for Deleting Company Data?

Your trusted Finance Manager resigns after eight years with the company.

The handover goes smoothly. She returns her company laptop before leaving, shakes everyone's hand, and starts her new job the following week.

A few days later, your IT department powers up the laptop.

Thousands of files are gone.

Customer databases. Financial reports. Quotations. Years of emails documenting negotiations, commercial decisions and customer communications.

Your first reaction is probably the same as most business owners.

"We'll sue."

It sounds like a straightforward case.

After all, the laptop belongs to the company. Surely everything stored on that laptop belongs to the company too.

Surprisingly, Malaysian courts have shown that the answer is not always that simple.

Can an Employer Sue an Employee for Deleting Company Data?

The short answer is yes.

But deleting company data alone does not automatically mean the employer will win.

Over the past few years, Malaysian courts have heard several disputes involving employees who allegedly deleted company files, copied confidential information, retained customer databases or joined competitors after leaving their employment.

At first glance, many of these cases appear remarkably similar.

Employees resigned. Company data lost. The employer sued.

Yet the outcomes were very different. Some employers succeeded. Others did not.

The difference often came down to something much more fundamental than whether files had been deleted.

The real questions were:

• Did the employer prove the information belonged to the company?

• Was the information confidential?

• Did the employee actually breach any legal obligation?

• Could the employer prove the losses it claimed?

  
  

Let's look at two Malaysian cases that illustrate the difference.

Why Did One Employer Lose Despite 9,245 Deleted Company Files?

If someone told you that an employee deleted more than 9,000 company files before resigning, most people would probably predict an easy victory for the employer.

That was not what happened in Indadi Utama (M) Sdn Bhd v Kwah Peng Kun [Civil Appeal No. BA-12BNCvC-49-08/2024].

The employer alleged that its former employee had deleted 9,245 files from a company-issued laptop before leaving the company.

The allegation certainly sounded serious.

However, the Court looked beyond the sheer number of deleted files and asked a more fundamental question:

Could the employer actually prove that those files belonged to the company and that the employee had acted wrongfully by deleting them?

Although the Court held that the employee owed the employer a duty of care and a duty of fidelity in relation to the files stored on the company-issued laptop, it ultimately found that the employer had failed to prove that the employee breached those duties.

The Court relied on several reasons:

1. The employer could not prove that the deleted files and folders rightfully belonged to the company.

2. The employer focused solely on the deleted files without addressing the fact that numerous other files and folders remained on the laptop when it was returned.

3. The Employee Handbook did not expressly state that all files stored on a company laptop belonged to the company and therefore must not be deleted.

   
   

In other words, deleting thousands of files was not enough on its own. The employer still had to establish ownership of those files and show that the employee's conduct amounted to a legal breach.

What Can Businesses Learn from the Indadi Utama Case?

This case offers several practical lessons for employers.

First, the Employment Contract and Employee Handbook should clearly state that:

• all files, documents, emails, databases, software, folders and other information created, stored or saved on company devices belong exclusively to the company;

• company devices are provided primarily for business purposes, with any personal use being subject to company policy;

• employees must not delete, destroy, alter or permanently remove company data without prior written authorisation; and

• upon resignation or termination, employees must return company devices without deleting any files unless expressly instructed by the company.

  
  

Secondly, businesses should implement clear IT and exit procedures, including:

• creating a forensic backup before laptop handover;

• using a documented handover checklist; and

• obtaining written confirmation that no company data has been deleted or transferred.

  
  

Finally, employers should ensure they can prove ownership of important electronic records through proper document management systems, file naming conventions, access controls and backup records.

The evidential weakness in this case was not merely the absence of clear policy wording. More importantly, the employer could not establish that the deleted files actually belonged to the company.

Now consider another case where the employer adopted a much stronger evidential position.

When the Employer Successfully Sued a Former Employee for Deleting Company Data

In FP Stencil Sdn Bhd v Ng Siew Phei [2025] 11 CLJ 615, the outcome was very different.

The employee resigned, joined a competitor and was found to have engaged in a series of wrongful acts before and around the time of her departure, including:

• deleting almost all emails, customer lists and business information from her work computer;

• deleting quotations, order forms, vendor registration documents and other files from the company's shared network folder;

• transferring and retaining company files using USB drives;

• retaining customer contact information instead of returning it to the company;

• failing to carry out a proper handover; and

• using the retained customer information after joining a competitor to solicit the employer's customers.

  
  

The employer sued for breach of the Employment Contract, breach of confidentiality, breach of fiduciary duty, unlawful interference with its business and damages arising from the employee's misconduct.

The employee argued that the customer contacts had been accumulated through her own efforts over 17 years and therefore belonged to her rather than the employer.

The Court was not persuaded.

Instead, it ruled partly in favour of the employer and held that the employee:

• owed an implied duty of confidentiality to her employer;

• breached her Employment Contract; and

• unlawfully used that confidential information to benefit a competitor.

  
  

As a result, the Court granted, among others:

• a declaration that the employee had breached her Employment Contract;

• a mandatory injunction requiring her to return all remaining company property;

• RM19,950 for IT forensic costs;

• RM99,000 in general damages (equivalent to approximately 18 months' salary); and

• RM50,000 in costs.

  
  

However, the Court also refused to:

• grant an overly broad injunction preventing future use of confidential information because it was insufficiently defined and would effectively restrain trade; and

• award the employer's claim for loss of profits because there was insufficient evidence establishing a causal link between the employee's conduct and the alleged reduction in sales.

What Can Businesses Learn from the FP Stencil Case?

The FP Stencil decision offers several practical lessons for employers seeking to protect their company data and confidential information.

(1) Confidentiality obligations do not depend entirely on written clauses

Even if an employer cannot prove that an employee acknowledged the latest Employee Handbook, the Court recognised that employees owe implied duties of confidentiality, good faith and fidelity under Malaysian law.

Nevertheless, having clear confidentiality clauses in an Employment Contract remains highly advisable. They define expectations from the outset, reduce disputes over scope and make enforcement significantly easier.

(2) Customer contact lists can be confidential business information

A departing employee cannot justify retaining or using confidential business information simply because they personally developed the customer relationships or accumulated the information over many years.

If the information was obtained during the course of employment and later used to benefit a competitor, the employee may be liable for breach of confidence, breach of the Employment Contract and unlawful interference with the former employer's business.

(3) Digital evidence can determine the outcome

The employer succeeded largely because it engaged an IT forensic expert, who established that:

• files had been deliberately deleted;

• USB drives had been used to transfer company data; and

• the timing of the deletions coincided with the employee's resignation.

  
  

Without that forensic evidence, many of the employer's allegations would have been considerably harder to prove.

(4) Courts distinguish between protecting confidential information and restraining competition

Although the Court protected the employer's confidential information, it refused to grant an injunction that was too broad and insufficiently defined.

This demonstrates an important principle. Employers cannot simply ask the Court to prohibit a former employee from using "any confidential information."

They must identify, with reasonable precision, the confidential information they seek to protect. Otherwise, the Court may regard the order as an unlawful restraint of trade.

(5) An Employment Contract alone is not enough

The employer succeeded not merely because contractual obligations existed.

It succeeded because it could also produce persuasive evidence showing:

• deliberate deletion of company files;

• retention of customer information;

• subsequent use of that information; and

• resulting interference with its business.

  
  

The case illustrates that successful litigation usually requires both legal rights and compelling evidence.

(6) Proving wrongdoing does not automatically mean you recover all your losses

Although the employer successfully established that the employee had breached her Employment Contract, breached her duty of confidence and unlawfully interfered with its business, the Court did not simply award every dollar that was claimed.

The employer sought more than RM2 million in loss of profits. The Court rejected that claim because there was insufficient evidence establishing a causal link between the employee's conduct and the alleged reduction in sales.

Instead, the Court awarded the IT forensic costs, general damages and other relief that were properly supported by the evidence.

The lesson is an important one. Successfully proving liability is only half the battle. If an employer intends to recover substantial damages, it must also prove what loss was actually suffered and how that loss was caused by the employee's misconduct. Courts will not award speculative or unsupported figures simply because wrongdoing has been established.

Should Employees Sign an NDA or Confidentiality Agreement?

An NDA, also known as a Non-Disclosure Agreement or Confidentiality Agreement, can be an important part of an employer's protection strategy.

Its value is not distrust. Its value is clarity.

A carefully drafted NDA can:

• identify what constitutes confidential information;

• restrict unauthorised disclosure or use;

• address ownership of work product and company data;

• require the return or deletion of authorised copies; and

• preserve appropriate obligations after employment ends.

  
  

For many employees, these obligations can be incorporated into the Employment Contract through well-drafted confidentiality clauses.

A separate NDA may be more appropriate where the information is particularly sensitive, disclosure begins before employment, different categories of people require the same protection, or the transaction requires more detailed confidentiality controls.

The appropriate document depends on the nature of the business.

A software company may focus on source code and proprietary technology.

A distributor may be more concerned about customer databases, supplier arrangements, pricing structures and commercial strategies.

Generic clauses that simply require employees to "keep information confidential" often fail to answer the questions that matter when a dispute arises.

What information is confidential?

How may it be used?

When must it be returned?

Can copies be retained after resignation?

A well-drafted NDA or confidentiality clause addresses these questions before they become expensive disputes.

An NDA does not guarantee victory. It does something more fundamental: it helps define the boundary before anyone is accused of crossing it.

How Can Employers Protect Company Data Before an Employee Leaves?

The best time to protect company data is not after an employee resigns.

It is when access to that data is first given.

The Employment Contract, confidentiality provisions and internal policies should reflect how the business actually operates. If employees use cloud storage, personal devices, messaging platforms or removable storage devices, the company's policies should address those realities rather than describing an office that no longer exists.

Businesses should clearly identify:

• who owns work created during employment;

• what constitutes confidential information;

• whether personal use of company devices is permitted; and

• what employees must return or preserve when their employment ends.

  
  

Any restrictions should be reasonable, proportionate and appropriate to the employee's role.

The exit process is equally important.

Access rights should be reviewed promptly.

Company devices, credentials and access cards should be collected through a documented handover process.

Relevant business records should be backed up before devices are returned.

Employees should also confirm that company information has been returned and that unauthorised copies have not been retained.

The wider point is this: confidentiality is not simply a clause buried inside an Employment Contract.

It is a system made up of contracts, technology, access controls, internal procedures, employee communication and, ultimately, evidence.

What Evidence Does an Employer Need If Company Data Is Deleted?

When company data disappears, the employer should be prepared to answer several fundamental questions.

What information existed?

Who had access to it?

What changed?

When did it change?

Why did the information matter to the business?

Useful evidence may include access logs, system backups, email records, version histories, device inventories, signed company policies, handover documents and properly obtained forensic reports.

Where possible, the original device should be preserved and every intervention properly documented.

Just as importantly, the employer must prove its losses.

IT forensic costs or data recovery expenses are often relatively straightforward to establish.

Claims for lost profits are far more difficult. The employer must demonstrate a clear causal connection between the employee's conduct and the financial loss suffered.

The two cases discussed above illustrate this point remarkably well.

Documentation without evidence may leave a breach unproved.

Evidence without clearly defined legal rights may leave the Court uncertain about what it is being asked to protect.

Even where liability has been established, damages may still be limited if the employer cannot prove its losses.

Good contracts establish the boundary.

Good evidence proves that the boundary was crossed.

Protect Your Business Before Problems Arise

Most disputes involving confidential information do not begin in court. They begin long before an employee resigns.

A well-drafted Non-Disclosure Agreement, carefully considered confidentiality clause in Employment Contract, and sensible internal procedures can significantly reduce the risk of costly disputes later.

If you would like to review your existing documents or strengthen your business's protection strategy, our team at LAWENCO would be happy to assist!

Written by,

Lawrence Tan 

Registered Trademark, Patent and Design Agent

LL.B (HONS), CLP

Advocate & Solicitor

Disclaimer: This article is intended for general informational purposes only and does not constitute legal advice. As every situation is different, you should seek professional legal advice before acting or relying on any information contained in this article.