A harassment complaint lands on your desk. What happens next determines your liability.

Most employers understand that harassment is illegal. Far fewer understand the precise legal framework that determines whether the employer — not just the harasser — is liable for it. That framework, built from Title VII of the Civil Rights Act of 1964 and refined through decades of Supreme Court precedent, draws a sharp line: employers who take reasonable care to prevent and promptly correct harassment get legal protection. Employers who do not get sued, and lose.

The stakes are not abstract. In fiscal year 2025, the EEOC secured over $660 million in monetary relief for workers who reported employment discrimination, with harassment among the most frequently raised issues in agency litigation. The Columbia University settlement alone — $21 million for harassment based on national origin, religion, and race — was the largest EEOC public settlement in nearly 20 years. And those figures capture only the federal enforcement pipeline. State-level actions, private lawsuits, and the indirect costs of turnover, absenteeism, and productivity loss push total employer exposure from workplace harassment well into the billions annually.

This guide covers the full arc of a defensible anti-harassment program: the legal framework that creates employer liability, the policy elements that satisfy it, the training requirements that vary by state, the investigation procedures that courts scrutinize, the bystander and culture-building strategies that research shows actually reduce incidence, and the documentation discipline that holds the entire program together.

Key Takeaways

  • Employer liability for harassment turns on the Faragher-Ellerth defense: whether the employer exercised reasonable care to prevent and correct harassment, and whether the employee unreasonably failed to use the employer's complaint process.
  • A compliant anti-harassment policy must cover all protected characteristics (race, color, religion, sex, national origin, age, disability, genetic information — plus state-specific categories), define prohibited conduct with examples, provide multiple reporting channels, and include an unequivocal anti-retaliation statement.
  • Eight states currently mandate harassment prevention training for private-sector employers, each with different frequency, duration, and content requirements. Multi-state employers must comply with the most restrictive applicable law.
  • The EEOC's 2024 Enforcement Guidance on Harassment was rescinded in January 2026, but the underlying federal laws, Supreme Court precedent, and the EEOC's 2017 "Promising Practices" guidance remain fully in effect.
  • Prompt, thorough, and impartial investigation of every complaint is not optional — it is the single most scrutinized element when courts evaluate the Faragher-Ellerth defense.
  • Bystander intervention training and workplace civility programs show greater effectiveness at reducing harassment incidence than traditional compliance-only training, according to the EEOC's Select Task Force report.

Understanding employer liability requires distinguishing between two categories of harassment, two types of harassers, and one affirmative defense.

Two categories of unlawful harassment

Quid pro quo harassment occurs when a person in authority conditions an employment benefit (hiring, promotion, continued employment) on submission to unwelcome conduct, or threatens an employment detriment for refusing. By definition, only someone with authority over the victim's employment can commit quid pro quo harassment — a supervisor, a manager, or anyone who exercises tangible employment authority.

Hostile work environment harassment occurs when unwelcome conduct based on a protected characteristic is severe or pervasive enough to alter the conditions of employment and create an abusive working environment. The standard, established in Harris v. Forklift Systems, Inc., 510 U.S. 17 (1993), is both subjective (the victim must perceive the environment as hostile) and objective (a reasonable person in the victim's position would agree). Important: a single incident of extreme severity can create a hostile environment; the law does not require a pattern.

The Faragher-Ellerth defense

In 1998, the Supreme Court decided Burlington Industries, Inc. v. Ellerth and Faragher v. City of Boca Raton on the same day, establishing the framework that governs employer vicarious liability for supervisor harassment to this day.

When a supervisor's harassment results in a tangible employment action — firing, demotion, undesirable reassignment, a significant change in benefits — the employer is strictly liable. No defense is available. The logic is straightforward: the supervisor used the employer's own authority to harm the employee.

When a supervisor's harassment does not result in a tangible employment action, the employer may assert the Faragher-Ellerth affirmative defense by proving two elements:

  1. The employer exercised reasonable care to prevent and promptly correct any harassing behavior.
  2. The employee unreasonably failed to take advantage of the preventive or corrective opportunities the employer provided, or to otherwise avoid harm.

Both prongs must be satisfied. In practice, this means an employer who has a policy but never trains anyone on it, or who has a complaint process but investigates slowly or not at all, will fail the first prong. An employer with an excellent program may still succeed on the second prong if the employee waited months to report without justification — but courts are increasingly skeptical of this argument when the employee can show a reasonable fear of retaliation.

Harassment by co-workers and third parties

When the harasser is a co-worker (not a supervisor), the employer is liable under a negligence standard: the employer knew or should have known about the harassment and failed to take prompt and appropriate corrective action. The Faragher-Ellerth affirmative defense does not apply.

Third-party harassment — by customers, clients, vendors, or contractors — follows a similar negligence analysis. If the employer knows an employee is being harassed by a customer and does nothing, the employer can be liable. This is particularly relevant in retail, hospitality, healthcare, and any industry with significant customer-facing roles.

Protected characteristics under federal law

Federal anti-harassment protection covers race, color, religion, sex (including pregnancy, sexual orientation, and gender identity per Bostock v. Clayton County, 590 U.S. 644 (2020)), national origin, age (40 and older, under the ADEA), disability (under the ADA), and genetic information (under GINA). The EEOC enforces these protections for employers with 15 or more employees (20 or more for age discrimination).

State and local expansions

Many states extend harassment protections to additional characteristics — marital status, military/veteran status, political affiliation, personal appearance, arrest or conviction records, and others — and lower the employee-count threshold. California, for example, applies its Fair Employment and Housing Act to employers with five or more employees. New York State applies its Human Rights Law to all employers regardless of size for sexual harassment claims. Employers must comply with the most protective applicable law.

The 2024 EEOC guidance — and its 2026 rescission

In April 2024, the EEOC published its first comprehensive Enforcement Guidance on Harassment in the Workplace since 1999. The guidance consolidated and modernized prior materials, presented over 70 examples of prohibited conduct, and addressed emerging issues including virtual and online harassment, AI-related bias, and — controversially — extended Bostock's reasoning to harassment claims involving gender identity.

On January 22, 2026, the EEOC voted 2-1 to rescind that guidance, following legal challenges and Executive Order 14168 directing agencies to review policies interpreting sex beyond a binary framework.

What this means for employers: The rescission removes EEOC's official interpretive position, but it does not change the underlying law. Title VII, the ADA, the ADEA, GINA, Bostock, and all other Supreme Court precedent remain fully in effect. EEOC Chair Andrea Lucas stated explicitly that rescinding the guidance "does not give employers license to engage in unlawful harassment." The EEOC's 2017 "Promising Practices for Preventing Harassment" technical assistance document also remains in effect and continues to serve as the agency's de facto guidance on prevention program design.

Practical recommendation: Do not weaken your anti-harassment program in response to the rescission. The legal obligations have not changed, state laws continue to expand protections, and the Faragher-Ellerth defense still requires demonstrating reasonable preventive care.

Building a compliant anti-harassment policy

The policy is the foundation of the Faragher-Ellerth defense. If you cannot produce a current, comprehensive, well-distributed policy, you have already lost the first prong. The EEOC's "Promising Practices" guidance and federal case law together establish what a defensible policy includes.

Required elements

1. Scope statement. The policy applies to all employees at every level — executives, managers, supervisors, hourly workers — as well as applicants, interns, volunteers, contractors, vendors, and customers on company premises or interacting with employees.

2. Prohibited conduct definition. List every protected characteristic covered by applicable federal, state, and local law. Provide concrete examples of prohibited behavior for each category: slurs, jokes, derogatory comments, stereotyping, unwelcome physical contact, display of offensive images, quid pro quo propositions, denial of opportunities based on protected status, and conduct that creates an intimidating or hostile environment.

3. Multiple reporting channels. Employees must be able to report to someone other than their direct supervisor — this is critical when the supervisor is the alleged harasser. Best practice: provide at least three channels (direct supervisor, HR, a dedicated hotline or online portal) and identify specific individuals by name and contact information. Include an avenue for reporting harassment by senior leaders.

4. Anti-retaliation statement. An unequivocal commitment that no employee will face adverse action for reporting harassment, participating in an investigation, or opposing conduct they reasonably believe violates the policy. Define retaliation with examples: termination, demotion, schedule changes, exclusion from meetings, social ostracism, negative performance reviews timed to a complaint.

5. Investigation commitment. A statement that the employer will conduct a prompt, thorough, and impartial investigation of every complaint.

6. Confidentiality statement. Information will be kept confidential to the extent possible and consistent with a thorough investigation and applicable law. Do not promise absolute confidentiality — you cannot keep that promise and conduct a proper investigation.

7. Corrective action. A statement that appropriate disciplinary action will be taken when harassment is substantiated, up to and including termination.

8. Responsibility statement. Every employee has a duty to refrain from harassment and to report it. Supervisors and managers have an affirmative obligation to report all complaints or observed conduct, even if the affected employee has not filed a formal complaint.

Distribution and accessibility

A policy that sits in a binder no one reads does not satisfy the Faragher-Ellerth defense. Courts look for evidence that the policy was actually communicated to employees. Best practices include distributing the policy at hire with a signed acknowledgment, posting it on the company intranet and in break rooms, including it in the employee handbook, translating it into all languages commonly used by the workforce, and redistributing it annually with required re-acknowledgment.

State-by-state training mandates

Federal law does not explicitly require harassment prevention training, but the Faragher-Ellerth defense effectively makes it a practical necessity. Eight states and several localities go further and mandate training by statute.

States with mandatory private-sector training

California (SB 1343, Gov. Code § 12950.1): Two hours for supervisors, one hour for all other employees, within six months of hire or promotion to a supervisory role. Repeat every two years. Must be interactive. Must include content on harassment based on gender identity, gender expression, and sexual orientation.

Connecticut (Conn. Gen. Stat. § 46a-54): Two hours for all employees of employers with three or more employees. Supervisors receive additional content. Within six months of hire. Repeat every ten years (supervisors: every three years as of recent amendments; verify current statute).

Delaware (Del. Code tit. 19, § 711A): Employers with 50 or more employees must provide interactive training within one year of hire. Supervisors receive additional content. Repeat every two years.

Illinois (775 ILCS 5/2-109): All employers must provide annual sexual harassment prevention training. No minimum duration specified, but content must meet IDHR model standards. Additional restaurant and bar industry requirements include one hour for employees and two hours for managers.

Maine (26 M.R.S. § 807): Employers with 15 or more employees must train all new employees within one year of hire. Supervisors receive additional training within one year of assuming supervisory responsibilities.

New York State (Lab. Law § 201-g): Annual interactive training for all employees. Must include examples of prohibited conduct, information about federal and state remedies, the complaint process, supervisors' responsibilities, and bystander intervention content. The state provides a free model training that satisfies the requirement.

New York City (NYC Admin. Code § 8-107(30)): Employers with 15 or more employees must provide annual interactive training. Overlaps with state requirements but adds content on bystander intervention and specific NYC Human Rights Law protections.

Washington (RCW 49.60.515): Specifically targets property services contractors (janitorial, security, etc.) and long-term care workers. Employees in covered industries must receive training. The mandate does not cover all private-sector employers.

Multi-state compliance strategy

Employers operating in multiple jurisdictions must comply with each applicable law. In practice, this means building a training program to the most restrictive requirements — annual delivery, two-hour supervisor track, interactive format, covering all protected characteristics including state-specific categories, with signed acknowledgments — and then adding state-specific content modules where required.

The phrase courts use is "prompt, thorough, and impartial." Each word carries specific meaning, and failure on any one can defeat the Faragher-Ellerth defense.

Prompt

An investigation should begin within 24–48 hours of receiving a complaint. "Prompt" does not mean rushing to a conclusion — it means taking immediate action to acknowledge the complaint, assess whether interim measures are needed, and initiate fact-finding. Delays of weeks or months have been cited by courts as evidence that the employer did not take reasonable corrective care.

Thorough

A thorough investigation includes interviewing the complainant in detail, interviewing the accused, interviewing all relevant witnesses, reviewing documentary evidence (emails, texts, surveillance footage, personnel files, prior complaints), and following up on all leads that surface during the investigation. Cutting the investigation short — deciding credibility before speaking to witnesses, failing to review electronic communications — exposes the employer.

Impartial

The investigator must have no stake in the outcome and no relationship to either party that could bias the investigation. Using a supervisor who is friendly with the accused, or an HR generalist who reports to the accused, fails this standard. For complaints involving senior leaders, an external investigator is strongly recommended.

Step-by-step investigation framework

1. Intake and documentation. Receive the complaint, document the initial report verbatim, and explain the investigation process and anti-retaliation protections to the complainant. Do not ask the complainant to confront the harasser directly.

2. Assess interim measures. Determine whether temporary actions are needed to protect the complainant and prevent further harassment during the investigation: schedule changes, reporting-line adjustments, no-contact directives. Never relocate or disadvantage the complainant — doing so can constitute retaliation.

3. Develop an investigation plan. Identify the allegations, the witnesses to interview, the documents and electronic records to collect, and the timeline. Complex investigations should be planned with the assistance of employment counsel.

4. Interview the complainant. Ask open-ended questions. Document specific dates, times, locations, exact words used, physical conduct, and the complainant's response. Ask about any witnesses and whether the complainant has any documentary evidence.

5. Interview the accused. Present the allegations factually without revealing the complainant's identity if possible (though in many cases the identity will be apparent). Give the accused a full opportunity to respond. Ask for their account of the events, any witnesses, and any evidence they wish to provide. Do not make premature credibility determinations.

6. Interview witnesses. Interview each witness separately. Ask what they observed, heard, or were told. Avoid leading questions. Document each interview.

7. Collect and review evidence. Gather emails, text messages, chat logs, surveillance footage, access records, prior complaints in personnel files, and any other relevant documentation. Preserve all evidence — failure to preserve electronic evidence can result in spoliation sanctions.

8. Analyze findings and make credibility determinations. Weigh the totality of the evidence. Consider consistency, corroboration, plausibility, and any motive to fabricate. Apply the preponderance-of-the-evidence standard (more likely than not).

9. Reach a conclusion and determine corrective action. If the investigation substantiates the complaint, impose disciplinary action proportionate to the severity of the conduct — up to and including termination for serious offenses. Document the rationale. If the complaint is not substantiated, document that finding and the basis for it. Regardless of outcome, assess whether systemic changes are needed.

10. Close the loop. Inform the complainant that the investigation is complete and that appropriate action has been taken (without disclosing specific discipline imposed on the accused, if any). Inform the accused of the determination. Check in with the complainant periodically afterward to confirm no retaliation has occurred.

Training that actually changes behavior

The EEOC's 2016 Select Task Force on the Study of Harassment in the Workplace found that traditional compliance training — a once-a-year slide deck focused on legal definitions and what not to do — has limited effectiveness at reducing harassment incidence. The task force identified two complementary approaches with stronger evidence: workplace civility training and bystander intervention training.

Compliance training: necessary but insufficient

Compliance training teaches employees what harassment is, what the employer's policy says, how to report, and what the consequences are. It satisfies legal requirements and establishes the employer's due diligence under the Faragher-Ellerth framework. But research consistently shows that training focused solely on legal definitions and prohibitions does little to change underlying behavior or workplace culture.

Workplace civility training

Civility training reframes the goal from "don't harass" to "treat everyone with respect." Rather than focusing on a narrow band of illegal conduct, it teaches positive behavioral norms — active listening, constructive disagreement, professional communication, inclusive meeting practices — that create an environment where harassment is less likely to occur. Research by Dr. Lilia Cortina at the University of Michigan demonstrated that workplace civility interventions reduced incivility and harassment complaints simultaneously while improving job satisfaction and teamwork.

Bystander intervention training

Bystander training equips employees who witness potentially harassing behavior with practical strategies to intervene safely. The model draws from campus sexual assault prevention programs and has been adapted for workplace settings. It teaches the "5 Ds": Direct (address the behavior), Distract (interrupt the situation), Delegate (get help from someone with authority), Delay (check in with the target afterward), and Document (record what you observed).

A 2025 Frontiers in Psychology scoping review of bystander intervention programs found that training using workshops and role-playing exercises showed greater potential for increasing prosocial bystander behavior than passive learning approaches. Multi-component interventions with diverse content delivery strategies outperformed single-session training. The review also emphasized the importance of tailoring interventions to specific workplace contexts rather than using generic off-the-shelf programs.

Training delivery best practices

Effective training programs share several characteristics identified in the EEOC's "Promising Practices" guidance:

  • Championed by senior leaders. A CEO or site leader opening the session signals that the organization takes it seriously.
  • Delivered live and interactively where possible. Scenario-based discussion, role-playing, and Q&A are more effective than passive video or slide presentations.
  • Tailored to the specific workplace. Use examples drawn from the company's industry and work environment. Manufacturing scenarios differ from office scenarios differ from retail scenarios.
  • Separate tracks for supervisors and employees. Supervisors need additional content on their duty to report, how to respond when they observe or receive a complaint, and how to avoid retaliation.
  • Delivered in the languages employees speak. A training program that excludes non-English-speaking employees fails both the compliance and the effectiveness tests.
  • Repeated regularly. Annual refresher training at minimum; quarterly micro-trainings (toolbox talks, team meeting discussions) reinforce the message between formal sessions.

Building a culture that prevents harassment

Policy, training, and investigation procedures are the structural elements. Culture is what determines whether employees actually report, whether managers actually act, and whether harassment is treated as a fireable offense or a thing everyone knows about and no one addresses.

Leadership accountability

The EEOC's "Promising Practices" guidance identifies committed and engaged leadership as the "cornerstone" of harassment prevention. This means senior leaders who: publicly and repeatedly communicate zero tolerance; allocate budget and staff time to the prevention program; include anti-harassment performance metrics in supervisory evaluations; and personally model respectful behavior.

Accountability also means consequences for managers who fail to act. A supervisor who receives a complaint and does nothing — or who retaliates against the complainant — should face discipline as severe as the harasser. Courts have found that an employer's tolerance of managerial inaction is evidence of failure to exercise reasonable care.

Anonymous climate surveys

The EEOC recommends conducting anonymous employee surveys to assess whether harassment is occurring or is perceived to be tolerated. Survey data can reveal problems that the formal complaint process misses — employees who witness harassment but do not report, or who report to their supervisor but never reach HR. A relatively low complaint volume does not prove a harassment-free workplace; it may indicate a lack of trust in the complaint process.

Risk factor assessment

Certain workplace characteristics increase the risk of harassment: isolated work settings, significant power disparities, workforces that are homogeneous except for a small number of individuals from different backgrounds, workplaces where alcohol is consumed, environments with a culture of crude or sexualized humor, and decentralized operations with limited management oversight. The EEOC's Select Task Force identified these risk factors and recommended that employers assess and actively mitigate them.

Retaliation: the claim that accompanies almost every complaint

Retaliation charges have been the most frequently filed EEOC charge allegation for seventeen consecutive years. In FY 2024, 42,301 retaliation charges were filed — 47.8% of all charges. The message is clear: employers routinely punish employees for reporting discrimination and harassment, and the EEOC is aggressively pursuing these claims.

Retaliation includes any materially adverse action that would dissuade a reasonable person from making a complaint. Under Burlington Northern & Santa Fe Railway Co. v. White, 548 U.S. 53 (2006), retaliation is not limited to employment actions like termination or demotion. It can include: reassignment to a less desirable position, exclusion from meetings or projects, negative performance reviews, schedule changes, social ostracism or shunning, increased scrutiny, and even actions taken against the complainant's family members.

Prevention measures: Train all supervisors that any adverse action against a complainant or witness during or after an investigation triggers retaliation scrutiny. Require HR review of any employment decision affecting a complainant or witness for at least 12 months after a complaint. Document the legitimate business reasons for every such decision contemporaneously.

Documentation and recordkeeping

Every element of the anti-harassment program should be documented: policy distribution and acknowledgment records, training attendance and content, investigation files (intake, interview notes, evidence collected, findings, corrective action), climate survey results, and program evaluations. These records are the evidence that proves reasonable care under the Faragher-Ellerth defense. Retain investigation files for at least the applicable statute of limitations period (typically 300 days for EEOC charges plus the duration of any subsequent litigation; longer for state claims).

The cost of harassment extends well beyond legal settlements. Research consistently shows a 20% drop in productivity for victims. Over 60% of bullying victims ultimately resign, and replacing them costs an estimated 1.5 times their annual salary. Harassment-related turnover, absenteeism, disengagement, and reputational damage contribute to an estimated $550 billion in annual costs to U.S. employers. In fiscal year 2024 alone, the EEOC received 88,531 discrimination charges — a 9% increase over the prior year, representing the third consecutive year of rising filings.

A strong anti-harassment program is not just a legal shield. It is a competitive advantage in recruiting and retention, particularly in tight labor markets where employees have options and will leave environments they perceive as toxic.

OSHA and the workplace violence connection

While OSHA does not have a specific standard addressing workplace harassment, it regulates workplace violence under the General Duty Clause (Section 5(a)(1) of the OSH Act), which requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm. OSHA defines workplace violence broadly to include threats, intimidation, and harassment. Employers who are aware of harassment that escalates or could escalate to physical violence and fail to act can face OSHA citations.

California's SB 553, effective July 1, 2024, goes further by requiring virtually all California employers to maintain a written Workplace Violence Prevention Plan that includes procedures for identifying and responding to threats and harassment. Non-compliance penalties reach $25,000 for serious violations and up to $158,727 for willful violations.

Frequently asked questions

Workplace harassment is unwelcome conduct based on a protected characteristic (race, color, religion, sex, national origin, age, disability, or genetic information) that is either severe or pervasive enough to create a hostile or abusive work environment, or that results in a tangible employment action such as termination or demotion. The standard is both objective (a reasonable person would find the environment hostile) and subjective (the victim actually perceived it as hostile).

Does workplace harassment have to be sexual to be illegal?

No. While sexual harassment receives the most attention, harassment based on any protected characteristic — race, national origin, religion, disability, age, genetic information — is equally unlawful under Title VII and other federal statutes. Racial harassment, religious harassment, and disability-based harassment are all commonly litigated.

How many employees does a company need before harassment laws apply?

Title VII applies to employers with 15 or more employees. The ADEA (age discrimination) applies to employers with 20 or more. However, many state laws apply to smaller employers — New York's Human Rights Law covers all employers for sexual harassment claims, and California's FEHA covers employers with five or more employees. Some local ordinances go even lower.

Is a single incident enough to constitute harassment?

It can be, if the incident is sufficiently severe. A single instance of physical assault, a particularly egregious slur, or a quid pro quo demand can create a hostile environment on its own. For less extreme conduct, courts generally require a pattern of behavior that is pervasive enough to alter the conditions of employment.

Can an employer be liable for harassment it did not know about?

For supervisor harassment, the employer is vicariously liable regardless of knowledge — the Faragher-Ellerth defense applies only when there is no tangible employment action. For co-worker harassment, the employer is liable if it knew or should have known about the conduct. "Should have known" means the harassment was obvious enough that a reasonable employer would have been aware — open comments in common areas, complaints to a supervisor who failed to report them up, or a pattern visible to anyone paying attention.

What should an employee do if they experience harassment?

Report the conduct through the employer's complaint process — in writing if possible. If the direct supervisor is the harasser, report to HR, a higher-level manager, or use the company's hotline or online reporting system. Document the incidents with dates, times, locations, witnesses, and exact words or actions. File a charge with the EEOC or state equivalent within the applicable deadline (generally 180 or 300 days, depending on the state) if the employer fails to act.

What is the difference between the Faragher-Ellerth defense and negligence?

The Faragher-Ellerth defense is an affirmative defense to vicarious liability for supervisor harassment when no tangible employment action occurred. It requires the employer to prove it took reasonable preventive and corrective care and that the employee unreasonably failed to use the complaint process. Negligence applies to co-worker and third-party harassment: the employer is liable only if it knew or should have known and failed to take prompt corrective action. The practical result is that supervisor harassment creates a higher liability risk for employers.

How long should a harassment investigation take?

There is no fixed legal timeline, but the standard is "prompt." A straightforward complaint involving one complainant, one accused, and a few witnesses should be completed within two to four weeks. Complex investigations involving multiple complainants, extensive electronic evidence, or senior-level accused may take longer but should show continuous progress. Courts penalize unexplained delays, not complexity.

Are anti-harassment training requirements the same in every state?

No. Eight states mandate private-sector harassment training with varying requirements for frequency (annual in New York and Illinois, biennial in California and Delaware), duration (one to two hours), content, and covered employers. Federal law does not mandate training explicitly, but the Faragher-Ellerth defense effectively makes it a practical necessity for all employers.

Can harassment occur in remote or hybrid work settings?

Yes. Harassment through video calls, chat platforms, email, text messages, and social media is actionable. Examples include sending inappropriate images in a work chat, making derogatory comments during video meetings, repeated unwanted personal messages, or exclusion from virtual meetings based on a protected characteristic. The EEOC's 2016 Select Task Force noted that technology has created new vectors for harassment that employers must address.

What constitutes retaliation for reporting harassment?

Any materially adverse action that would dissuade a reasonable person from making or supporting a complaint. This extends beyond traditional employment actions to include social ostracism, increased scrutiny, reassignment to undesirable tasks, exclusion from opportunities, negative references, and even actions against the complainant's close family members who work for the same employer.

Should employers use an internal or external investigator?

For routine complaints involving non-supervisory employees, a trained internal HR professional or compliance officer is appropriate. For complaints involving senior leaders, systemic or widespread allegations, potential criminal conduct, or situations where internal neutrality could be questioned, an external investigator provides greater defensibility.

What documentation should employers maintain for their anti-harassment program?

Maintain records of policy distribution and signed acknowledgments, training attendance logs and content summaries, investigation files (intake forms, interview notes, evidence, findings, corrective action), climate survey results, complaint-tracking data, and any program modifications. Retain investigation files for at least the longest applicable statute of limitations period. These records are the evidence courts examine when evaluating the Faragher-Ellerth defense.

How does the 2026 rescission of the EEOC's harassment guidance affect employers?

It removes the EEOC's formal interpretive position but does not change the underlying law. Title VII, the ADA, the ADEA, GINA, Bostock, and all Supreme Court precedent remain in effect. The EEOC's 2017 "Promising Practices" technical assistance document also remains active. Employers should not weaken their prevention programs in response to the rescission — doing so increases legal risk.

What role do bystanders play in preventing harassment?

Research shows that bystander intervention training — teaching employees to recognize potentially harassing behavior and providing practical strategies to intervene safely — is more effective at reducing harassment incidence than compliance-only training. The EEOC's Select Task Force described bystander intervention as showing "significant promise." Effective bystander training uses interactive methods (role-playing, scenario discussions) rather than passive instruction and is tailored to the specific workplace context.

Can customers or vendors harass employees?

Yes. Employers have a duty to protect employees from harassment by third parties — customers, clients, vendors, contractors, and delivery personnel — when the employer knows or should know about the conduct and fails to take prompt corrective action. Corrective action may include warning the customer, banning the customer from the premises, reassigning the employee to avoid contact (without disadvantaging the employee), or terminating the business relationship.

What penalties can employers face for failing to prevent harassment?

Under federal law, compensatory and punitive damages are capped based on employer size: $50,000 for employers with 15–100 employees, up to $300,000 for employers with more than 500 employees. However, back pay, front pay, and equitable relief have no cap. State laws frequently impose higher or uncapped damages. Beyond direct legal costs, employers face investigation expenses ($10,000–$50,000 per incident), increased insurance premiums, regulatory scrutiny, and reputational damage.

How often should an anti-harassment policy be reviewed and updated?

At minimum annually, and whenever there is a change in applicable law, a significant organizational change (merger, acquisition, new location in a new state), or a pattern of complaints suggesting the policy is not working. The EEOC recommends periodic review and update as a best practice, with re-distribution and re-acknowledgment after each revision.

What makes a harassment complaint system effective?

Multiple reporting channels so employees can bypass their supervisor if needed, accessibility in all languages used by the workforce, trained intake personnel who respond with sensitivity, clear timelines for investigation, confidentiality protections, anti-retaliation safeguards, and a follow-up process that checks on the complainant after the investigation closes. The EEOC specifically recommends periodically testing the complaint system to verify that complaints are actually received and processed.

VETTED's HR & Workplace Culture category includes modules specifically designed to build the skills covered in this guide:

  • Preventing Workplace Harassment: The foundational 16-minute module covering quid pro quo and hostile environment harassment, the bystander's role, recognition of harassing conduct, and the reporting process, with protection from retaliation.
  • Conflict Resolution & Difficult Conversations: An 8-minute module teaching interest-based negotiation, active listening, and de-escalation techniques — equipping supervisors to address interpersonal friction before it escalates to actionable conduct.
  • Unconscious Bias & an Inclusive Workplace: An 8-minute module on recognizing how unconscious bias shapes decisions and practicing inclusive behaviors that reduce the conditions where harassment takes root.
  • Code of Conduct & Business Ethics: A 15-minute module covering ethical decision-making and protected reporting channels — reinforcing the speak-up culture that supports effective harassment prevention.
  • Workplace Violence Prevention: A 16-minute HSE module on recognizing warning signs, de-escalation, and active threat response. Addresses the intersection of harassment and workplace violence, including OSHA's General Duty Clause and California's SB 553.

This article is published by VETTED — a workforce safety and compliance training platform delivering 122 expert-built modules across 10 categories. For more information on VETTED's HR & Workplace Culture training, visit vettedsafe.com/modules.