A lot of small business owners assume that having a sexual harassment policy on file is enough to protect them.

Under federal law, that assumption can be costly.

What the law actually expects

Title VII of the Civil Rights Act prohibits sexual harassment in the workplace and covers businesses with 15 or more employees.

But the legal standard goes beyond simply having a policy.

Under the Faragher-Ellerth affirmative defense, established by the U.S. Supreme Court, employers can reduce or avoid liability for harassment by a supervisor if they can show two things:

• They took reasonable steps to prevent and correct harassment.
• The employee unreasonably failed to use those prevention or reporting procedures.

However, this defense isn’t available if the harassment resulted in a tangible employment action, such as a firing, demotion or pay cut.

In plain terms, a policy nobody read and managers who were never trained will not protect you if a claim is filed.

Third-party harassment is also your problem

If a client, customer, contractor or vendor harasses one of your employees, you may be held responsible under federal law if you knew or should have known about it and failed to take prompt and appropriate action.

Think about your client-facing staff: anyone in sales, hospitality, events, on client sites or dealing with the public.

These roles carry real legal exposure if you haven’t looked at the risk.

What “reasonable steps” actually means in practice

This is what you need to have in place:

• A clear, current policy that employees have actually read and acknowledged
• Managers who have been trained and know what to do when something is reported
• Visible, accessible reporting channels that employees know how to use
• An assessment of the specific harassment risks in your business, particularly where staff interact with people outside of your organization
• Documentation showing that you acted on that assessment

That last point is key.

Federal law doesn’t specifically require a written risk assessment, but having one is a strong way to show that you took prevention seriously.

A policy that lives in a folder and changes nothing will not hold up if a claim is filed with the EEOC or ends up in court.

What it could cost you

Federal harassment claims can result in compensatory damages, punitive damages, back pay and attorney’s fees.

For businesses with fewer than 101 employees, compensatory and punitive damages are capped at $50,000 per claim under federal law, though state law may set higher limits depending on where your business operates.

That figure doesn’t include back pay, litigation costs or the time and disruption of an EEOC investigation.

And, if the EEOC finds that you didn’t take reasonable steps to prevent harassment, it weakens your ability to defend the claim entirely.

A quick checklist

Run through these and see where you land:

• Is your policy current and does it specifically cover third-party harassment?
• Do you have a record of employees reading and acknowledging it?
• Have your managers had actual training on recognizing and handling harassment complaints?
• Is there a documented reporting process that employees know how to use?
• Have you assessed the harassment risk for higher-risk roles or environments in your business?
• Could you pull all of that evidence together quickly if you needed to?

If any of those answers is no or “not sure,” you have work to do.

We can help

We carry out harassment prevention audits that assess where your business stands against the federal reasonable steps standard.

The audit covers your policy, your reporting process and your risk exposure in third-party environments.

We also deliver manager training so that when something is reported, it gets handled properly from the start.

Want to chat about where your business stands? Reach out and we’ll be happy to talk you through it.