Nominations for the 2027 HRTally Choice Awards close December 15. Every winner is chosen by verified user reviews, never by sponsorship. See how it works
Compliance

Workplace harassment prevention: policies, training, and investigations

What the law covers, the policy and training you need, and how to investigate a complaint fairly.

HRTally Research Team
Updated October 14, 2026 · 7 min read · Fact-checked against primary sources
Harassment preventionCOMPLIANCE

Key takeaways

  • Harassment based on a protected characteristic is a form of discrimination under federal law.
  • A clear policy, multiple complaint channels, and prompt action are an employer's strongest protection.
  • California, New York, Illinois, and Connecticut are among the states that require harassment training.
  • Investigations should be prompt, impartial, documented, and followed by appropriate action.
  • Retaliation against someone who complains is illegal and often easier to prove than the original claim.
In plain terms

Workplace harassment is unwelcome conduct based on a protected characteristic, such as race, sex, religion, national origin, age, disability, or genetic information, that becomes a condition of employment or creates a hostile work environment. Employers are responsible for preventing it and responding promptly when it happens.

A junior analyst tells her manager that a senior colleague keeps making comments about her appearance and messaging her late at night. The manager, who likes both of them, suggests she try to ignore it because "that's just how he is." Two months later she resigns and files a charge. The company had a policy. It had even done training. But the first person she told did nothing, and that single response became the heart of the case.

Harassment prevention isn't just a policy and an annual video. It is what happens in the moment someone speaks up. This guide covers the policy, the training, and above all the response.

What the law covers

Federal law, including Title VII, the Age Discrimination in Employment Act, the Americans with Disabilities Act, and the Genetic Information Nondiscrimination Act, prohibits harassment based on race, color, religion, sex including pregnancy, sexual orientation, and gender identity, national origin, age (40 and over), disability, and genetic information. State and local laws often protect additional characteristics and cover smaller employers.

Harassment becomes unlawful in two main ways. Quid pro quo harassment happens when submitting to unwelcome conduct, usually sexual, is made a condition of employment decisions. A hostile work environment exists when conduct is severe or pervasive enough that a reasonable person would find the workplace intimidating, hostile, or abusive. A single serious incident can be enough. So can a pattern of smaller ones.

Your policy should set a higher bar than the legal minimum. Waiting until conduct is severe or pervasive before acting is how small problems become lawsuits.

When employers are liable

Employers are generally liable for harassment by supervisors that results in a tangible employment action, such as a firing or demotion. When no tangible action occurs, employers can often defend themselves by showing they took reasonable care to prevent and promptly correct harassment, and that the employee unreasonably failed to use the complaint procedures provided. For harassment by coworkers, customers, or other non-supervisors, employers are liable if they knew or should have known about it and failed to take prompt, appropriate action.

In practice, that means your policy, your complaint channels, your training, and above all your response determine your exposure.

Writing an effective harassment policy

A strong policy is clear and easy to find. It should:

  • Describe prohibited conduct in plain language, with examples, including conduct in chat, email, and social media.
  • Cover everyone: employees, managers, contractors, customers, and vendors.
  • Offer more than one way to complain, so no one has to report to the person harassing them. Include HR, a senior leader, and ideally an anonymous hotline.
  • Promise prompt, impartial investigation and confidentiality as far as possible.
  • State clearly that retaliation is prohibited.
  • Explain that managers must report concerns they learn about, even informally.
  • Describe possible consequences, up to and including termination.

Distribute it at hire, include it in the handbook, and collect acknowledgments. Some states require specific policy content or distribution. New York, for example, requires employers to adopt a policy meeting state standards.

Training requirements and what good training looks like

Several states require harassment prevention training. California requires employers with five or more employees to train supervisors and non-supervisory employees every two years, with longer training for supervisors. New York requires annual interactive training for all employees. Illinois requires annual training for all employees. Connecticut requires training for employers with three or more employees. Other states and some cities have their own rules, so check each location.

Good training goes beyond legal definitions. It uses realistic scenarios, teaches bystanders how to step in or report, and gives managers specific instructions on what to do when someone tells them about a problem. Manager training matters most, because managers are usually the first to hear.

How managers should respond in the moment

When an employee raises a concern, the manager's first response sets the tone for everything after. Train managers to listen without judging or minimizing, thank the employee for speaking up, avoid promising complete confidentiality, which they can't guarantee, and report the concern to HR the same day, even if the employee asks them not to.

The phrases to avoid are the ones the manager in our story used: "try to ignore it," "that's just how he is," or "are you sure you want to make this official?" Each one can turn a manageable situation into a legal claim.

Conducting a fair investigation

  1. Act promptly. Start within days, not weeks.
  2. Take interim steps if needed, such as changing schedules or reporting lines, without penalizing the person who complained.
  3. Choose an impartial investigator. Use someone without a conflict of interest. For senior leaders or complex cases, consider an outside investigator.
  4. Plan the investigation. Identify the allegations, witnesses, and documents, such as messages and emails.
  5. Interview the complainant, the accused, and witnesses separately, with open-ended questions. Document each interview.
  6. Weigh the evidence and reach a conclusion, usually on whether it is more likely than not that the conduct occurred and violated policy.
  7. Take appropriate action proportionate to the findings, from coaching to termination.
  8. Close the loop with the complainant and the accused, sharing what is appropriate, and follow up later to make sure the conduct has stopped and no retaliation has occurred.

Preventing retaliation

Retaliation is the most frequently alleged basis in charges filed with the EEOC, year after year. It includes firing, demoting, reducing hours, changing shifts, excluding someone from meetings, or giving unjustified poor reviews because they complained or took part in an investigation. Retaliation claims can succeed even when the original harassment claim doesn't.

Remind everyone involved that retaliation is prohibited, monitor how the complainant is treated in the following months, and review any employment decisions about them with HR before they are made.

Harassment by customers, vendors, and contractors

Employers can be responsible for harassment of employees by people who don't work for them, such as customers, patients, clients, or vendors, when the employer knew or should have known and failed to take reasonable steps. That matters most in customer-facing roles like retail, hospitality, healthcare, and field service.

Give employees a clear way to report harassment by outsiders, and give managers the authority to act: banning a customer, reassigning an account, changing a service route, or ending a vendor relationship. Train frontline supervisors that "the customer is always right" never extends to harassment of staff.

Prevention is mostly culture

Policies and training are necessary, but the strongest predictor of harassment is the culture around it. Workplaces where leaders model respectful behavior, where people feel safe raising concerns, and where misconduct by high performers is dealt with the same way as misconduct by anyone else see far fewer problems. Engagement survey questions about psychological safety and fair treatment can serve as early warning signs, and our engagement guide covers how to ask them.

Harassment in remote and hybrid workplaces

Harassment doesn't stop when people work from home. It moves to chat messages, video calls, texts, and social media. Make sure your policy explicitly covers digital communication and off-hours contact between colleagues, train people that the same standards apply online, and keep records that make investigations possible, such as message retention in workplace chat tools, consistent with your data policies.

HR case management tools keep investigations confidential and documented. See our HR help desk and case management guide and our LMS guide for training tools.

Harassment prevention checklist

Work through this list with your team. The printable PDF version has space to tick each item off.

  • Write a policy with plain-language examples, including digital conduct
  • Offer several complaint channels, including one outside the reporting line
  • Include a clear prohibition on retaliation
  • Require managers to report concerns to HR the same day
  • Distribute the policy at hire and collect acknowledgments
  • Check state and city training requirements for every location
  • Train managers on how to respond when someone raises a concern
  • Use realistic scenarios and bystander guidance in training
  • Start investigations promptly with an impartial investigator
  • Document interviews, evidence, findings, and actions
  • Take proportionate action based on findings
  • Follow up with the complainant to check for retaliation
  • Retain records in line with legal requirements

Get the printable PDF

Where to go from here

Wherever you are in the process, there is a next step that fits.

Free email templates

Email templates for this topic

Ready-to-edit emails with subject lines, compliance notes, and a free PDF.

Browse all 74 HR email templates

Frequently asked questions

What makes harassment illegal?
Unwelcome conduct based on a protected characteristic that becomes a condition of employment or is severe or pervasive enough to create a hostile work environment.
Which states require harassment training?
California, New York, Illinois, and Connecticut are among the states that require it, each with different rules on who, how often, and what content.
Do managers have to report harassment they hear about?
Your policy should require it. Employers can be liable when they knew or should have known about harassment and failed to act.
How quickly should a complaint be investigated?
Promptly, typically starting within days of the complaint.
What counts as retaliation?
Any adverse action, such as firing, demotion, schedule changes, or exclusion, taken because someone complained or took part in an investigation.

Sources

We checked the facts in this guide against these primary sources. Laws and thresholds change, so confirm current rules before you act.

Written by the HRTally Research Team

Our guides are written and reviewed by people with hands-on US HR, payroll, and HR technology experience. Legal and tax facts are checked against primary sources, such as the Department of Labor, IRS, EEOC, and USCIS, and linked at the end of each guide. Vendors never review or pay for our editorial content.

Get guides like this every other Tuesday

Join HR leaders who read The HR Tech Brief for practical guides, law changes, and software news.

Subscribe free