Types of Workplace Harassment: The Complete Guide for Small Businesses

The first harassment complaint I received as a business owner came from someone I considered a friend, and I handled it badly. This guide is here so you handle yours better: it shows you how to recognize the conduct in front of you and how to build the paper trail that protects your business once an employee comes forward.

An employee told me that a coworker, someone I personally hired and trusted, was making comments about her appearance that made her uncomfortable. My instinct was to pull the coworker aside and tell him to knock it off. That instinct, I later learned, was exactly the wrong response.

What I should have done was document the complaint, conduct a formal investigation, take remedial action, and follow up at scheduled intervals. Instead, I had an informal conversation, did not document anything, and assumed the problem was solved. Two months later, the employee went to the Equal Employment Opportunity Commission and filed an EEOC charge that included both the original harassment and the employer's failure to investigate properly. That charge cost more in legal fees than our annual revenue from that employee's work.

Below you will find the 11 types of workplace harassment a small business is most likely to encounter, the four traditional categories trainers use to group conduct, and the legal definition the EEOC applies. You will also see why the "3 types" and "4 types" frameworks differ, which states require harassment training and by when, what records the Faragher/Ellerth affirmative defense depends on, and what to do in the first 24 hours after a report. FirstHR handles the documentation workflow (policy acknowledgments, training tracking, complaint records), but this guide is about understanding the types and building the processes.

What Is Workplace Harassment, Legally?

Workplace harassment under federal law is unwelcome conduct based on a protected characteristic that either (1) is severe or pervasive enough to create a work environment that a reasonable person would consider intimidating, hostile, or abusive, or (2) results in an adverse employment decision (firing, demotion, schedule change).

The EEOC enforces harassment prohibitions under Title VII of the Civil Rights Act, the Americans with Disabilities Act (ADA), the Age Discrimination in Employment Act (ADEA), and the Genetic Information Nondiscrimination Act (GINA).

Two legal standards determine whether conduct rises to the level of harassment. "Severe" means a single incident that is extreme enough to alter the conditions of employment (a physical assault, an explicit threat tied to a protected characteristic).

"Pervasive" means a pattern of less severe incidents that, taken together, create a hostile environment (daily offensive jokes, repeated use of slurs, ongoing unwelcome comments). Most harassment claims at small businesses involve pervasive conduct rather than single severe incidents, because the pattern builds over time in a close working environment where the harasser and victim interact daily.

The protected characteristics covered by federal law are race, color, religion, sex (including pregnancy and, since Bostock v. Clayton County was decided on June 15, 2020, sexual orientation and gender identity), national origin, age (40 and older under ADEA), disability (under ADA), and genetic information (under GINA). Many states add more protected categories, including marital status, military status, citizenship status, and political affiliation.

What Is Intersectional Harassment?

Intersectional harassment is harassment aimed at a combination of protected characteristics rather than any one of them alone. A Black woman targeted with stereotypes specific to Black women is covered on both race and sex grounds, even when her white colleagues and her Black male colleagues are treated perfectly well.

That last detail is what makes intersectional claims hard to investigate at a small company. The instinctive defense, that other women were fine and other Black employees were fine, does not answer the allegation. Combined claims are not a niche problem: from FY2020 through FY2023 the EEOC received over 15,000 charges from women workers alleging both sex and age discrimination (EEOC).

Harassment vs Bullying vs Discrimination: The Confusion

Harassment, bullying, and discrimination are three different things, even though small business owners frequently confuse them. The difference matters because each carries different legal exposure and calls for a different response.

The practical distinction: a manager who yells at all employees equally is a bully. A manager who yells only at employees of a specific race or religion is harassing. A manager who promotes only employees of a specific gender is discriminating, which is a disparate treatment claim rather than a harassment claim.

All three are bad management, but only harassment and discrimination create federal legal liability. That said, bullying aimed at one person after they engage in a protected activity (filing a complaint, requesting leave) can constitute retaliatory harassment, which is illegal.

The 4 Traditional Categories of Workplace Harassment

Ask "what are the 4 types of workplace harassment" and the usual answer is four broad categories that organize the spectrum of harassing conduct: verbal, physical, psychological, and sexual. These categories are not statutory definitions (no law says "there are exactly four types"), but they are a framework many employment attorneys and training providers use to classify workplace harassment.

In practice, these categories overlap. A coworker who makes sexual comments (verbal and sexual), follows the employee to their car (physical), and then denies it happened (psychological) has touched all four categories in a single pattern.

You do not need to classify the exact category to respond. You need to recognize the conduct, document it, and take action. The category matters more for training and policy writing than for investigation and response.

The "3 Types of Harassment" Framing and Why It Varies

There is no single agreed list of "3 types." The answer depends on jurisdiction and on who is doing the framing. Even California's own civil rights regulation names verbal, physical, and visual forms and then adds sexual favors as a fourth.

For US small businesses, the most useful framing is the first one: verbal, physical, and visual/written. It maps cleanly to policy language ("Harassment may take the form of verbal conduct, physical conduct, or visual and written materials") and covers the three channels through which harassment is delivered.

The 4-category framing sorts the same conduct differently, with psychological and sexual conduct as categories of their own, which gives training more nuance. Both frameworks are valid, so use whichever one your training program covers.

11 Types of Workplace Harassment a Small Business Encounters in Practice

The 11 types below organize harassment by protected characteristic and context: why it happens and who it involves. That is a different cut from the four categories and the "3 types" framings above, which sort conduct by delivery method, or how it happens.

Each type includes the federal law that prohibits it, a realistic scenario at a small business, and the documentation you need to defend against a claim. The EEOC small business fact sheet provides additional guidance on employer obligations.

The documentation listed under each type is not optional. It is the evidence that proves your business took harassment seriously and acted when it occurred. Without it, every type of harassment results in the same outcome: the employer cannot demonstrate that it fulfilled its duty to prevent and correct the conduct.

Quid Pro Quo vs Hostile Work Environment: The Two Legal Frameworks

Sexual harassment in particular (but not exclusively) falls under two distinct legal frameworks: quid pro quo and hostile work environment. The difference matters because the employer's liability is different for each.

Quid pro quo harassment (Latin: "this for that") occurs when a person with authority over an employee's job demands or implies that sexual favors are a condition of employment, promotion, continued employment, or favorable treatment.

The critical elements are that the harasser has actual authority over the victim's employment and that a tangible employment action occurs (the employee is fired, demoted, denied a raise, or otherwise concretely affected). At a small business, quid pro quo almost always involves the owner or the most senior manager, because they are the only people with employment decision-making authority.

Hostile work environment harassment occurs when unwelcome conduct based on a protected characteristic is severe or pervasive enough to alter the conditions of employment and create a work environment that a reasonable person would find intimidating, hostile, or abusive.

Unlike quid pro quo, a hostile work environment can be created by anyone: coworkers, subordinates, customers, vendors, or contractors. The conduct must be more than a minor annoyance; it must be objectively hostile and subjectively perceived as hostile by the victim.

For small businesses, hostile work environment claims are far more common than quid pro quo claims. The close working environment, the limited number of people, and the difficulty of avoiding the harasser make it easier for a pattern of conduct to become pervasive.

Quid Pro Quo Harassment Examples

Quid pro quo harassment occurs when someone with authority over an employee's job ties a benefit or a penalty to a sexual demand. It typically involves an implication rather than a stated bargain: a joke that is not a joke, an invitation extended in a setting where refusing it has an obvious professional cost.

The last row is the distinction people miss. A coworker can make a workplace hostile but cannot commit quid pro quo harassment, because they cannot deliver or withhold the job benefit. At a small business, that concentrates the exposure on the owner and on whoever else signs off on pay, shifts, and promotions.

What Is a Hostile Work Environment? The 5 Legal Elements

A hostile work environment exists when unwelcome conduct based on a protected characteristic is severe or pervasive enough that a reasonable person would consider the work environment intimidating, hostile, or abusive. The term has a specific legal meaning that is narrower than how most people use it.

A bad boss, a stressful job, or a rude coworker does not automatically create a hostile work environment in the legal sense. The conduct must meet all five elements that courts evaluate.

For small businesses, element five is the most critical. In a company that size, it is difficult for the employer to argue it did not know about conduct that was happening daily in a shared workspace. The close working environment that makes small businesses productive also makes ignorance nearly impossible to claim.

Proactive policies, training, and complaint procedures matter more for small employers than for large ones for exactly that reason: you cannot rely on "we did not know" when everyone sits in the same room. And when the person employees would need to complain about is the owner, an anonymous reporting channel closes the gap.

Hostile Work Environment vs Toxic Workplace vs Bullying

People frequently use "hostile work environment," "toxic workplace," and "bullying" interchangeably, but they are legally distinct concepts. Knowing the difference helps you avoid overreacting to complaints that carry no legal weight and underreacting to the ones that do.

For small business owners, the practical takeaway: when an employee says "this is a hostile work environment," do not dismiss it and do not panic. Ask what specific conduct they are describing and whether it targets them because of a characteristic (race, sex, age, disability, religion). If yes, investigate as a potential harassment claim. If no, address it as a management or culture issue. Both deserve attention, but only one creates federal legal liability.

Why Small Businesses Face Higher Harassment Risk

Small businesses are not more likely to have harassers. They are more likely to have harassment go unaddressed because the structural safeguards that prevent it in larger organizations do not exist in a company that small. Every structural gap increases the time between when harassment starts and when it is corrected, and time is what turns an isolated incident into a pervasive pattern.

According to the EEOC Select Task Force on the Study of Harassment in the Workplace (June 2016), roughly three out of four people who experienced harassment never raised it with a supervisor, manager, or union representative, and only 6% to 13% filed a formal complaint (EEOC). That silence is heavier at a small company, because the person who would hear the complaint usually eats lunch with the person it is about.

EEOC Harassment Data: What the Numbers Show

Harassment was alleged in 37,397 of the 88,201 discrimination charges the EEOC processed in FY2025, and that count has climbed every year since FY2021. The numbers matter for small business owners because they show where enforcement attention sits and which claim types keep growing.

Two trends matter for small businesses. First, harassment charges keep climbing: 21,270 in FY2021, 35,774 in FY2024, and 37,397 in FY2025, a 76% rise across four years.

Second, the federal guidance many employers leaned on has been pulled out from under them. A federal judge in the Northern District of Texas vacated the sexual orientation and gender identity portions of the EEOC's 2024 harassment guidance on May 15, 2025 (State of Texas v. EEOC), and on January 22, 2026 the Commission voted 2 to 1 to rescind that guidance in full (EEOC).

Read the second trend carefully, because it is easy to misread as permission. Rescinding a guidance document withdraws the agency's interpretation, not the statute or the case law underneath it.

Title VII, the ADA, the ADEA, and Bostock v. Clayton County all still stand, and the EEOC's own harassment page still lists sexual orientation and transgender status among the characteristics harassment can be based on, with a notice that the page is itself under review. What changed is that you can no longer point at a current EEOC document and call it your policy's authority.

The practical implication: write your anti-harassment policy against the statutes and the Supreme Court decisions rather than against whichever guidance document happens to be in force. Name every protected characteristic, name the digital channels, and put the review on a fixed annual date instead of waiting for the news to prompt it.

Sexual Harassment in the Workplace: What the Charge Data Shows

Sexual harassment is a form of sex discrimination under Title VII, so the EEOC counts it inside the same charge system rather than as a separate offense, and publishes a breakout of those charges (EEOC). That breakout bottomed out in FY2021 and has risen in every year since.

Two numbers there matter for a small employer. The four-year recovery works out to about $37,000 per person before your own legal fees, which is real money against a small-business payroll. And roughly one charge in five was filed by a man, so a policy or a training deck written as though only women are targets is describing a workplace that does not exist.

State Training Mandates That Apply to Small Businesses

Six states require employers generally to provide harassment training, and several of those mandates reach down to very small companies. If you have employees in any of them, training is not optional, and in most of them it is a compliance deadline tied to each new hire's start date.

Check each rule at its source before you build a training calendar, because the clocks differ more than the summaries suggest. California Government Code 12950.1 fixes 2 hours for supervisors and 1 hour for everyone else on a 6-month clock.

Connecticut General Statutes Section 46a-54(15) gives every employee at an employer with 3 or more employees the same 2 hours within 6 months of hire, then asks for supplemental training of supervisory and nonsupervisory employees alike not less than every 10 years.

Delaware is the one small employers get wrong. Under Title 19, Section 711A, the interactive training requirement starts at 50 employees, not at the 4-employee threshold that triggers the information sheet, and it repeats every 2 years.

Maine Title 26 Section 807 starts at 15 employees, wants each new hire trained within a year, adds a session for supervisory and managerial employees, and requires the training records to be kept for at least 3 years.

Illinois and New York are the broadest, reaching every employer with employees in the state and asking for training every year. The clocks differ again: Illinois counts by calendar year, while New York sets no deadline for a new hire and simply urges employers to train as soon as possible, because liability attaches the day someone starts.

Washington adds a seventh mandate, but only for particular employers. RCW 49.60.515, on the books since 2019, has required hotels, motels, retail businesses, security guard firms, and property services contractors that employ isolated workers to train managers, supervisors, and those isolated employees on preventing sexual harassment and assault. If you run a hotel or a janitorial contract in Washington, that mandate is yours even though the state is not in the table above.

An amendment effective January 1, 2026 (2SHB 1524) added panic button use to the required training and added a duty to document completion of that training and produce the records on request. It also gave the Department of Labor and Industries power to investigate complaints and issue citations, at $1,000 for each willful violation and $2,000 to $10,000 for each repeat willful violation.

For small businesses that operate in multiple states, each state's mandate applies to the employees working in that state. If you have employees in both Texas (no mandate) and California (mandate at 5 employees), your California employees must receive training within 6 months of hire. California counts employees in every state toward its 5-employee threshold but requires training only for those located in California. Training everyone to the strictest standard you face, wherever they work, is simpler to run and puts every employee's training on record.

Even in states without a mandate, harassment training is a critical element of the Faragher/Ellerth affirmative defense (explained further down). An employer that provides training has a stronger legal defense than one that does not, regardless of whether the state requires it. The mechanics of running it, including who must be trained and what it costs, are covered in the harassment training guide.

How to Prevent Harassment in the Workplace

Preventing workplace harassment comes down to four things a small business actually controls: a policy people have read, more than one way to report, training that names protected characteristics, and a visible response to the first complaint. How you handle complaint number one sets the price of complaint number two.

The EEOC's harassment policy tips for small business are explicit about the second one: designate someone outside an employee's chain of command to receive complaints, and consider letting employees report to any manager. The table below breaks those four things into six concrete controls.

The EEOC's Select Task Force on the Study of Harassment in the Workplace (June 2016) recommended two additions to the standard compliance session: workplace civility training and bystander intervention training. Both are aimed at the conduct that precedes a legal violation.

Read the civility recommendation carefully, though. Civility training deliberately does not focus on protected characteristics; it promotes respect and conduct generally. That makes it a supplement to harassment training, never a replacement, because an employee cannot report conduct as unlawful if nobody ever told them which characteristics the law protects.

How to Prevent Sexual Harassment Specifically

Sexual harassment prevention is mostly about two settings: the after-hours event, and the one-on-one with the person who controls someone's schedule and pay. Both are structural, which means both can be designed differently rather than left to everyone's judgment on the night.

Three controls do most of the work at a small company. Nobody signs off alone on pay, promotion, or scheduling for a person they socialize with privately. Company events have a stated end time and one manager who is not drinking. And customer-facing staff get a written procedure for a customer who crosses the line, so nobody has to improvise alone at the counter.

Building the Faragher/Ellerth Affirmative Defense

The most important legal concept for small business owners to understand about harassment liability is the Faragher/Ellerth affirmative defense. Named after two Supreme Court cases (Faragher v. City of Boca Raton and Burlington Industries v. Ellerth, both 1998), this defense allows an employer to avoid liability for supervisor harassment that did not result in a tangible employment action, if the employer can prove two things:

First, the employer exercised reasonable care to prevent and promptly correct any harassing behavior. Second, the employee unreasonably failed to take advantage of the preventive or corrective opportunities the employer provided. The burden of proving both sits with the employer, which is what makes the defense "affirmative."

In practice, this means building a five-element paper trail that proves the employer did everything it should have done. If you have these five elements documented and can produce them when a claim is filed, your legal defense is dramatically stronger than that of an employer who has none of them.

The five steps above are not aspirational best practices. They are the specific evidence elements that employment attorneys look for when evaluating whether the affirmative defense is viable. An employer who has all five elements documented has a strong defense; an employer missing any one of them has a significant gap.

The most commonly missing element at small businesses is step 2 (signed acknowledgments), because the policy exists in the employee handbook but nobody collected signatures confirming employees received it.

At FirstHR, the e-signature and document management features exist specifically for this workflow: distribute the policy, collect a timestamped signature, assign training, track completion, and store everything with an audit trail. The documentation does not prevent harassment. It proves that the employer tried to prevent it, which is the legal standard.

What to Do When an Employee Reports Harassment

The first 24 hours after an employee reports harassment determine more about the outcome than the investigation itself. Employers who respond promptly, document thoroughly, and protect the complainant from retaliation have the strongest legal position. Employers who delay, dismiss, or react emotionally create exposure that no amount of subsequent investigation can fix.

Remedial action belongs to the first element of the Faragher/Ellerth defense, the employer's reasonable care to "correct promptly" any harassing behavior, and a remedy that leaves the conduct running is hard to present as correction. Whether it worked shows only after the fact: did the conduct stop, did the accused honor the terms they were given, and did anyone else who was exposed to the same behavior see it end. Write that down at 1 week, 2 weeks, and 30 days, because by then the case feels closed and nobody is watching. Whether the complainant's schedule, pay, or duties changed after they complained is a separate question, tracked on the check-in record in the retaliation guide.

For small businesses where the owner is both the complaint receiver and the manager of both parties, bringing in an outside investigator is a necessity. A few days of an employment attorney's or an HR consultant's time is a small line item next to what defending a charge costs, and the independence is the part you cannot manufacture in-house.

How to Handle Harassment in the Workplace as a Manager

A manager's job when harassment is reported is narrow: listen, write it down, escalate the same day, and change nothing about the complainant's schedule or duties. Managers are not investigators. At a small company, the manager who tries to settle it quietly is usually the reason the claim gets expensive.

The legal weight sits on that escalation. Once a manager knows, the employer knows, and the clock on prompt corrective action starts whether or not the owner has been told yet. Element five of the hostile work environment test frequently turns on what a supervisor heard months before a formal complaint arrived.

Four things a manager should never do: promise the complainant that nothing will happen without their approval, confront the accused on the spot, repeat the complaint to the team, or test the story by asking around informally. Say what happens next, say who will be in touch, and hand it over.

Third-Party Harassment: Customers, Vendors, and Contractors

Third-party harassment is one of the most underaddressed types at small businesses, particularly in customer-facing industries. Under Title VII, the employer has a duty to protect employees from harassment by anyone in the workplace, including customers, clients, vendors, delivery drivers, and contractors. The employer's obligation is triggered when it knows or should know about the conduct.

The pattern in the "what most small businesses do wrong" column is consistent: the employer prioritizes the business relationship over the employee's protection. This is understandable from a revenue perspective, but it creates direct legal liability. Once the employer knows about third-party harassment and fails to act, the employer becomes liable for the hostile work environment that the third party created.

Third-party reports rarely arrive as written complaints. They arrive as a comment at the end of a shift, which is exactly why they leave no record of what the employee said or what the business did next. Fill this in the day the report is made.

Remote and Online Harassment: How Digital Conduct Is Covered

Harassment law follows the conduct, not the room it happens in. Nothing in Title VII limits the analysis to a physical workplace, so Slack messages, Zoom behavior, email content, social media posts about coworkers, and text messages all run through the same severe-or-pervasive test as anything said across a desk.

The EEOC guidance that spelled this out in 2024 was rescinded in January 2026, which changed a guidance document, not the statute or the case law that courts actually apply.

For small businesses with remote or hybrid employees, the anti-harassment policy must explicitly state that digital communications are covered. A policy that only references "workplace conduct" without mentioning digital channels creates ambiguity that favors the harasser.

Common Mistakes That Create Harassment Liability

The mistakes that create harassment liability at a small business are failures of process: something the employer did or skipped, not the harassing conduct itself. Each of the eight below either weakens your defense or hands the employee a new claim, and each has a straightforward fix.

The mistake behind most of these mistakes: treating harassment as a personal conflict between two employees rather than a compliance obligation for the employer. The employer's job is not to determine whether the complainant is being "too sensitive" or whether the accused "meant anything by it." The employer's job is to receive the complaint, investigate it, take action if warranted, and document the process.

Frequently Asked Questions