A formal workplace policy that defines harassment, prohibits all forms of it, establishes reporting procedures, and outlines the consequences for violations to create a safe and respectful work environment.
Key Takeaways
An anti-harassment policy tells everyone in the organization that harassment won't be tolerated, what harassment looks like, how to report it, and what happens to people who do it. That sounds simple. It isn't. Harassment is one of the most common workplace complaints, one of the most expensive to litigate, and one of the hardest to prevent despite decades of policy-writing and training programs. The EEOC estimates that 61% of US workers have witnessed or experienced harassment. Most never report it. The gap between having a policy and having a workplace free of harassment is enormous. But the policy is still the foundation. Without it, employers have no legal defense, no reporting structure, and no basis for discipline. The best anti-harassment policies are specific about what counts as harassment, provide multiple reporting options (because the harasser is sometimes the person you'd normally report to), guarantee anti-retaliation protections, and apply equally to everyone from the newest hire to the CEO.
Harassment takes many forms beyond the stereotypical scenarios. An effective policy must address all of them.
| Type | Definition | Examples |
|---|---|---|
| Sexual Harassment (Quid Pro Quo) | Conditioning employment benefits on sexual favors | A manager implying that a promotion depends on agreeing to a date; conditioning a positive review on accepting sexual advances |
| Sexual Harassment (Hostile Environment) | Unwelcome sexual conduct that interferes with work | Repeated sexual jokes, displaying sexually explicit images, unwanted physical contact, persistent requests for dates after being told no |
| Racial/Ethnic Harassment | Unwelcome conduct based on race, ethnicity, or national origin | Racial slurs, mocking accents, displaying racist symbols, stereotyping comments about a person's background |
| Religious Harassment | Unwelcome conduct targeting religious beliefs or practices | Mocking religious clothing or dietary restrictions, pressure to participate in religious activities, derogatory comments about faith |
| Age-Based Harassment | Unwelcome conduct targeting someone's age | Calling older workers "dinosaurs," assuming younger workers aren't serious, jokes about retirement, excluding older employees from tech projects |
| Disability Harassment | Unwelcome conduct related to a person's disability | Mocking a disability, questioning whether someone "really" needs accommodations, imitating speech patterns, excluding people from activities |
| Bullying/General Harassment | Persistent hostile behavior not necessarily tied to a protected class | Yelling, public humiliation, deliberately withholding information needed to do the job, spreading rumors, social isolation |
An anti-harassment policy must include specific provisions to be legally defensible and practically effective.
Define harassment using both legal language and plain-language examples. Employees don't know what "unwelcome conduct based on a protected characteristic that creates a hostile work environment" means until you give them specific scenarios. Include examples of verbal, physical, visual, and digital harassment. Digital harassment (offensive emails, inappropriate messages on Slack or Teams, cyberbullying) needs explicit mention because many employees don't realize it counts.
Providing only one reporting option (usually the direct manager) fails when the manager is the harasser. The policy should list at least three to four channels: direct supervisor, HR department, a senior leader outside the chain of command, and an anonymous hotline or online reporting tool. Include specific names, titles, phone numbers, and email addresses. "Report to HR" isn't specific enough. "Report to Jane Smith, VP of People Operations, at jsmith@company.com or 555-0123" is.
Document the investigation process: who investigates (trained investigators, not the accused person's friends), how evidence is gathered, how confidentiality is maintained (to the extent possible), expected timelines, and how both the complainant and accused are informed of the outcome. The process must be the same regardless of who is accused. A C-suite executive should face the same investigation process as a junior employee.
This is the most important provision after the harassment prohibition itself. State explicitly that retaliation against anyone who reports harassment, participates in an investigation, or testifies as a witness is a separate, terminable offense. Define retaliation broadly: termination, demotion, schedule changes, assignment changes, exclusion from meetings, negative performance reviews that don't reflect actual performance, and social ostracism. Monitor reporters for adverse changes for at least 12 months.
The policy should cover all employees (full-time, part-time, temporary), contractors, vendors, clients, and visitors on company premises or at company events. Harassment at off-site company events, business trips, and virtual interactions (video calls, messaging platforms) must be included. If your policy doesn't cover the holiday party and the company Slack channel, you have a gap.
Anti-harassment requirements vary significantly across jurisdictions. Here's what employers need to know in major markets.
Title VII of the Civil Rights Act prohibits harassment based on race, color, religion, sex, and national origin for employers with 15+ employees. The ADA adds disability, the ADEA adds age (40+), and GINA adds genetic information. The key legal standard: harassment becomes unlawful when it's severe or pervasive enough to create a hostile work environment, or when enduring it becomes a condition of continued employment. The Faragher/Ellerth Supreme Court decisions (1998) established that employers can avoid vicarious liability for supervisor harassment if they had an anti-harassment policy with a reporting mechanism and the employee unreasonably failed to use it.
Many states go further than federal law. California (FEHA) requires sexual harassment prevention training for all employees, not just supervisors. New York requires annual interactive anti-harassment training. Illinois requires an annual disclosure of harassment settlements. Several states have banned non-disclosure agreements in harassment settlements. Check your state's specific requirements, because federal compliance alone isn't enough.
The Prevention of Sexual Harassment Act requires every employer with 10+ employees to have an anti-sexual harassment policy, constitute an Internal Complaints Committee (ICC), and conduct awareness programs. The ICC must include a senior woman employee as presiding officer and an external member from an NGO or legal background. Complaints must be resolved within 90 days. Failure to comply can result in fines of up to INR 50,000, and repeated violations can lead to license cancellation.
The EU Framework Directive on equal treatment (2006/54/EC) prohibits harassment related to sex. Member states implement this through national legislation with varying requirements. The UK Equality Act 2010 (post-Brexit) covers harassment related to all protected characteristics and introduced the Worker Protection Act 2023 requiring employers to take "reasonable steps" to prevent sexual harassment. GDPR applies to the personal data collected during harassment investigations.
Training is where policy meets practice. Several states mandate specific training requirements, and even where it isn't required by law, training is essential for the Faragher/Ellerth defense.
| Jurisdiction | Who Must Be Trained | Frequency | Minimum Duration |
|---|---|---|---|
| California (SB 1343) | All employees (5+ employee companies) | Every 2 years | 1 hour (employees), 2 hours (supervisors) |
| New York (State & NYC) | All employees | Annual | Interactive, no minimum specified |
| Illinois (SB 75) | All employees | Annual | Industry-specific content required |
| Connecticut | Supervisors (3+ employee companies) | Every 10 years | 2 hours |
| Delaware | All employees (50+ employee companies) | Every 2 years | Interactive, no minimum specified |
| Maine | All employees (15+ employee companies) | Within 1 year of hire | No minimum specified |
| India (POSH Act) | All employees (10+ employee companies) | Annual awareness programs | No minimum specified |
When a complaint comes in, the next 48 hours determine whether the organization handles it well or creates additional liability.
Acknowledge the complaint within 24 hours. Thank the reporter for coming forward. Don't promise specific outcomes. Do promise that the matter will be investigated fairly and that retaliation won't be tolerated. If the alleged behavior poses an immediate safety risk, implement interim protective measures (separation of parties, schedule changes, temporary remote work) before the investigation begins. Document everything from this point forward.
Assign a trained investigator who has no personal relationship with either party. Interview the complainant first (in detail), then the accused (who has the right to know the allegations, though not necessarily the complainant's identity in all jurisdictions), then witnesses. Collect documentary evidence: emails, messages, security footage, prior complaints. Maintain confidentiality to the extent possible, but don't promise absolute confidentiality, because that's not always achievable during an investigation.
Apply the "preponderance of evidence" standard (more likely than not). Evaluate credibility: consistency of statements, corroborating evidence, motive to fabricate, prior behavior patterns. Document the findings in a written report. If the allegation is substantiated, determine appropriate corrective action based on the severity of the behavior, whether it's a pattern, and the impact on the victim. If not substantiated, document why and monitor the situation.
Inform both parties of the outcome (the complainant doesn't need to know the specific discipline imposed, just that corrective action was taken). Check in with the complainant at 30, 60, and 90 days to ensure no retaliation has occurred. If the accused remains employed, monitor their behavior. Update training programs to address the type of behavior that was reported. Review whether the policy itself needs updates based on what the investigation revealed.
Data showing the scope of workplace harassment and the impact of prevention programs.
Practices that distinguish organizations with low harassment rates from those that simply have a policy on file.