FirstHR

Types of Workplace Harassment: The Complete Guide for Small Businesses

The 11 types of workplace harassment small businesses must recognize. 4 EEOC categories, state training mandates, and a documentation playbook.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Compliance
40 min

Types of Workplace Harassment

What small businesses must recognize, prevent, and document to stay protected

The first harassment complaint I received as a business owner came from someone I considered a friend. An employee told me that a coworker, someone I personally hired and trusted, was making comments about her appearance that made her uncomfortable. My instinct was to pull the coworker aside and tell him to knock it off. That instinct, I later learned, was exactly the wrong response.

What I should have done was document the complaint, conduct a formal investigation, take remedial action, and follow up at scheduled intervals. Instead, I had an informal conversation, did not document anything, and assumed the problem was solved. Two months later, the employee filed an EEOC charge that included both the original harassment and the employer's failure to investigate properly. That charge cost more in legal fees than our annual revenue from that employee's work.

This guide exists to prevent that experience from happening to you. It covers the 11 types of workplace harassment that a small business with 5 to 50 employees is most likely to encounter, the four traditional categories the EEOC uses to classify harassment, why the "3 types" and "4 types" frameworks differ depending on who you ask, how to build the documentation trail that legally protects your business under the Faragher/Ellerth affirmative defense, which states require harassment training and by when, and what to do in the first 24 hours after an employee reports harassment. FirstHR handles the documentation workflow (policy acknowledgments, training tracking, complaint records), but this guide is about understanding the types and building the processes.

TL;DR
Workplace harassment is unwelcome conduct based on a protected characteristic (race, sex, religion, age, disability) that is severe or pervasive enough to create a hostile work environment. The 4 traditional categories are verbal, physical, psychological, and sexual. There are 11 specific types a small business encounters in practice. Employer protection requires a written policy, signed acknowledgments, documented training, a complaint process, and consistent enforcement. Six states mandate harassment training for small businesses.

What Is Workplace Harassment, Legally?

Workplace harassment under federal law is unwelcome conduct based on a protected characteristic that is either (1) severe or pervasive enough to create a work environment that a reasonable person would consider intimidating, hostile, or abusive, or (2) results in an adverse employment decision (firing, demotion, schedule change). The EEOC enforces harassment prohibitions under Title VII of the Civil Rights Act, the Americans with Disabilities Act, the Age Discrimination in Employment Act, and the Genetic Information Nondiscrimination Act.

Definition
Workplace Harassment
Workplace harassment is unwelcome conduct that is based on race, color, religion, sex (including sexual orientation, gender identity, and pregnancy), national origin, age (40 or older), disability, or genetic information. Harassment becomes unlawful when (1) enduring the offensive conduct becomes a condition of continued employment, or (2) the conduct is severe or pervasive enough to create a work environment that a reasonable person would consider intimidating, hostile, or abusive. Petty slights, annoyances, and isolated incidents (unless extremely serious) are generally not actionable. The conduct must cross the threshold from unpleasant to legally hostile.

Two legal standards determine whether conduct rises to the level of harassment. "Severe" means a single incident that is extreme enough to alter the conditions of employment (a physical assault, an explicit threat tied to a protected characteristic). "Pervasive" means a pattern of less severe incidents that, taken together, create a hostile environment (daily offensive jokes, repeated use of slurs, ongoing unwelcome comments). Most harassment claims at small businesses involve pervasive conduct, not single severe incidents, because the pattern builds over time in a close working environment where the harasser and victim interact daily.

The protected characteristics covered by federal law are race, color, religion, sex (including pregnancy, sexual orientation, and gender identity after Bostock v. Clayton County, 2020), national origin, age (40 and older under ADEA), disability (under ADA), and genetic information (under GINA). Many states add additional protected categories including marital status, military status, citizenship status, and political affiliation. The employment law guide covers the full set of federal protections by employee count threshold.

Harassment vs Bullying vs Discrimination: The Confusion

Small business owners frequently confuse harassment, bullying, and discrimination. The confusion matters because each carries different legal exposure, and the response to each is different.

ConceptDefinitionLegal StatusEmployer Liability
HarassmentUnwelcome conduct based on a protected characteristic that is severe or pervasiveIllegal under Title VII, ADA, ADEA, GINA, and state lawsAutomatic liability if by supervisor with tangible action; affirmative defense available otherwise
BullyingRepeated aggressive behavior not based on a protected characteristicNot illegal under federal law (no federal anti-bullying statute for private employers)Generally no federal liability; possible state tort claims for intentional infliction of emotional distress
DiscriminationAdverse employment decision based on a protected characteristic (hiring, firing, pay, promotion)Illegal under Title VII, ADA, ADEA, and state lawsDirect liability for the discriminatory decision

The practical distinction: a manager who yells at all employees equally is a bully. A manager who yells only at employees of a specific race or religion is harassing. A manager who promotes only employees of a specific gender is discriminating. All three are bad management, but only harassment and discrimination create federal legal liability. That said, bullying that is directed at one person after they engage in a protected activity (filing a complaint, requesting leave) can constitute retaliatory harassment, which is illegal. The retaliation guide covers that intersection in detail.

The Gray Zone for Small Businesses
At a 15-person company, bullying and harassment often look the same from the inside. A manager who belittles one employee might be a bully, or they might be targeting that employee because of a protected characteristic. Without investigation, you cannot tell the difference. The safest approach: treat every complaint of aggressive or hostile behavior as a potential harassment complaint, investigate it, and document the findings. If it turns out to be bullying rather than harassment, you have still protected the employee and your company.
Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

The 4 Traditional Categories of Workplace Harassment

When people search "what are the 4 types of workplace harassment," they are typically looking for the four broad categories that organize the spectrum of harassing conduct. These four categories are not statutory definitions (no law says "there are exactly four types"), but they are the framework used by the EEOC, employment attorneys, and most training providers to classify workplace harassment.

Verbal HarassmentOffensive comments, slurs, jokes, name-calling, threats, and intimidation directed at an employee because of a protected characteristic. Includes epithets, derogatory remarks, and stereotyping. At a small business, verbal harassment often happens in casual settings (break room, team lunch, company chat) where the boundary between friendly banter and hostile conduct blurs.
Physical HarassmentUnwanted physical contact, assault, blocking movement, invasion of personal space, destruction of property, or threatening gestures directed at an employee because of a protected characteristic. Ranges from a shoulder grab to a shove. At a small business, physical harassment is harder to dismiss as accidental because the close working environment means witnesses are usually present.
Psychological HarassmentPersistent behavior designed to intimidate, humiliate, isolate, or undermine an employee. Includes gaslighting, public shaming, deliberate exclusion from meetings, withholding information needed to do the job, and setting up to fail with impossible deadlines. Particularly common in small businesses where one personality dominates the culture and goes unchecked.
Sexual HarassmentUnwelcome sexual advances, requests for sexual favors, and other verbal or physical conduct of a sexual nature. Divides into two legal frameworks: quid pro quo (sexual favors tied to job benefits) and hostile work environment (pervasive sexual conduct that interferes with work). The most litigated and most penalized type across all company sizes.
Answering the Question Directly
The 4 types of workplace harassment are verbal (offensive comments, slurs, threats), physical (unwanted contact, assault, threatening gestures), psychological (intimidation, humiliation, isolation, gaslighting), and sexual (unwelcome advances, sexual favors, sexually explicit conduct). Each type is illegal when directed at an employee because of a protected characteristic (race, sex, religion, age, disability) and when severe or pervasive enough to create a hostile work environment.

In practice, these categories overlap. A coworker who makes sexual comments (verbal + sexual), follows the employee to their car (physical), and then denies it happened (psychological) has engaged in three of the four categories in a single pattern. Employers do not need to classify the exact category to respond. They need to recognize the conduct, document it, and take action. The category matters more for training and policy writing than for investigation and response.

The "3 Types of Harassment" Framing and Why It Varies

The "3 types" framing appears frequently in search results, but there is no universal agreement on which three types constitute the definitive list. The answer depends on jurisdiction and framing.

FrameworkThe 3 TypesUsed ByBest For
US Employment Law (common framing)Verbal, Physical, Visual/WrittenEEOC training materials, many employer guidesUS small business policy writing and training
California DFEH/CRDVerbal, Physical, VisualCalifornia Civil Rights Department (formerly DFEH)California employers (SB 1343 compliance)
UK Equality Act 2010Related to a protected characteristic, Sexual, Less favorable treatment for rejecting or submittingUK Employment TribunalsUK employers (not directly applicable to US)
Answering the Question Directly
The 3 types of harassment in US employment law are most commonly described as verbal (spoken words: slurs, threats, offensive jokes), physical (unwanted contact, gestures, blocking), and visual or written (offensive images, cartoons, emails, texts, social media posts). This framing is used in most US employer training programs and is the most practical framework for small business policy writing.

For US small businesses, the most useful framing is the first one: verbal, physical, and visual/written. This maps cleanly to policy language ("Harassment may take the form of verbal conduct, physical conduct, or visual and written materials") and covers the three channels through which harassment is delivered. The 4-category framing (adding psychological) provides deeper nuance for training purposes. Both frameworks are valid. Use whichever one your training program covers.

11 Types of Workplace Harassment a Small Business Encounters in Practice

The four categories and three framings above organize harassment by delivery method (how it happens). The 11 types below organize harassment by protected characteristic and context (why it happens and who it involves). Each type includes the federal law that prohibits it, a realistic scenario at a company with 5 to 50 employees, and the documentation you need to defend against a claim. The EEOC small business fact sheet provides additional guidance on employer obligations.

1Discriminatory HarassmentTitle VII, ADA, ADEA, GINA
SMB SCENARIOManager consistently makes comments about a female employee's pregnancy plans during team meetings. At a 20-person company, these comments are witnessed by the entire team, making it impossible for the employee to separate from the conduct.
DOCUMENTATION NEEDEDWritten complaint record, witness statements, manager coaching documentation
2Sexual Harassment: Quid Pro QuoTitle VII
SMB SCENARIOOwner tells office manager that a promotion depends on going to dinner with them. In a small business, quid pro quo almost always involves the owner or a senior manager because they are the only ones with power over employment decisions.
DOCUMENTATION NEEDEDComplaint intake form, investigation notes, any communications (text, email, Slack)
3Sexual Harassment: Hostile Work EnvironmentTitle VII
SMB SCENARIOWarehouse team shares sexually explicit images in a group text that includes all 8 warehouse employees. The conduct is pervasive (daily), witnessed by all, and no one reports because the group includes the shift lead.
DOCUMENTATION NEEDEDScreenshots/records of conduct, complaint records, policy acknowledgment showing employees knew the policy
4Racial and Ethnic HarassmentTitle VII
SMB SCENARIOCoworkers repeatedly mispronounce an employee's name after being corrected, make jokes about their accent, and assign them only customer-facing tasks 'because you speak Spanish.' At a 15-person company, there is nowhere to transfer away from the harassers.
DOCUMENTATION NEEDEDWritten complaints, incident log with dates and specific language, corrective actions taken
5Religious HarassmentTitle VII
SMB SCENARIOEmployee is mocked for prayer breaks, excluded from team lunches during Ramadan fasting, and told their religious headwear 'makes customers uncomfortable.' The owner dismisses it as 'just kidding around.'
DOCUMENTATION NEEDEDAccommodation request records, complaint records, evidence of policy enforcement or lack thereof
6Age-Based HarassmentADEA (40+)
SMB SCENARIOManager refers to the only employee over 55 as 'grandpa,' assumes they cannot learn new software, and suggests they 'might be happier retired.' The comments are made casually, but the pattern establishes hostile intent.
DOCUMENTATION NEEDEDPerformance records showing capability, dated complaint records, comparison with how younger employees are treated
7Disability HarassmentADA
SMB SCENARIOEmployee with anxiety disorder is told to 'toughen up,' mocked when they step outside during a panic episode, and excluded from a client meeting because 'we need someone reliable.' The employee had disclosed the condition and requested accommodation.
DOCUMENTATION NEEDEDAccommodation request and response, complaint records, evidence that accommodation was or was not provided
8Gender Identity and Sexual Orientation HarassmentTitle VII (Bostock, 2020)
SMB SCENARIOEmployee who transitions is deliberately deadnamed by a coworker, referred to by wrong pronouns, and excluded from team events. Manager says it is 'not intentional' but takes no corrective action.
DOCUMENTATION NEEDEDComplaint records, corrective action records, evidence of whether the policy covers gender identity explicitly
9Retaliatory HarassmentTitle VII, ADA, ADEA, FLSA, FMLA
SMB SCENARIOEmployee files a wage complaint. Afterward, their manager begins documenting every minor mistake, excludes them from the weekly team update, and moves their desk to an isolated corner. None of this happened before the complaint.
DOCUMENTATION NEEDEDPre-complaint and post-complaint performance records, timeline comparison, complaint and investigation records
10Third-Party HarassmentTitle VII (employer duty to protect)
SMB SCENARIOA regular customer makes sexually explicit comments to a cashier every visit. The cashier reports to the owner, who says 'that is just how he is, he is our biggest customer.' The owner's failure to act makes the employer liable.
DOCUMENTATION NEEDEDEmployee reports of customer conduct, dates and descriptions, any actions taken (or not taken) by the employer
11Online and Remote-Work HarassmentTitle VII (extends to virtual conduct)
SMB SCENARIOTeam lead sends inappropriate memes in Slack, makes comments about a remote employee's appearance on Zoom, and sends late-night personal messages. The remote employee has no physical coworkers to witness the behavior.
DOCUMENTATION NEEDEDScreenshots with timestamps, Slack/email records, complaint records, policy showing virtual conduct is covered

The documentation column in each type is not optional. It is the evidence that proves your business took harassment seriously and acted when it occurred. Without it, every type of harassment results in the same outcome: the employer cannot demonstrate that it fulfilled its duty to prevent and correct the conduct. The HR document management guide covers how to organize these records within your broader employee file system.

Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

Quid Pro Quo vs Hostile Work Environment: The Two Legal Frameworks

Sexual harassment in particular (but not exclusively) operates under two distinct legal frameworks. Understanding the difference matters because the employer's liability is different for each.

DimensionQuid Pro QuoHostile Work Environment
Requires a tangible employment action
Can be established by a single incident
Only supervisors/managers can perpetrate
Coworkers can perpetrate
Third parties (customers) can perpetrate
Employer is automatically liable
Affirmative defense available
Must be severe OR pervasive

Quid pro quo (Latin: "this for that") occurs when a person with authority over an employee's job conditions demands or implies that sexual favors are a condition of employment, promotion, continued employment, or favorable treatment. The critical elements are: the harasser has actual authority over the victim's employment, and a tangible employment action occurs (the employee is fired, demoted, denied a raise, or otherwise concretely affected). At a small business, quid pro quo almost always involves the owner or the most senior manager because they are the only people with employment decision-making authority.

Hostile work environment occurs when unwelcome conduct based on a protected characteristic is severe or pervasive enough to alter the conditions of employment and create a work environment that a reasonable person would find intimidating, hostile, or abusive. Unlike quid pro quo, hostile work environment can be created by anyone: coworkers, subordinates, customers, vendors, contractors. The conduct must be more than a minor annoyance; it must be objectively hostile and subjectively perceived as hostile by the victim.

For small businesses, hostile work environment claims are far more common than quid pro quo claims. The close working environment, the limited number of people, and the difficulty of avoiding the harasser make it easier for a pattern of conduct to become pervasive. The sample employee handbook includes anti-harassment policy language that covers both frameworks.

What Is a Hostile Work Environment? The 5 Legal Elements

A hostile work environment exists when unwelcome conduct based on a protected characteristic is severe or pervasive enough that a reasonable person would consider the work environment intimidating, hostile, or abusive. The term has a specific legal meaning that is narrower than how most people use it. A bad boss, a stressful job, or a rude coworker does not automatically create a hostile work environment in the legal sense. The conduct must meet all five elements that courts evaluate.

What Is a Hostile Work Environment?
A hostile work environment is a workplace where an employee is subjected to unwelcome conduct based on a protected characteristic (race, sex, religion, age, disability, national origin) that is severe or pervasive enough to create conditions a reasonable person would find intimidating, hostile, or abusive. The conduct must be based on a legally protected characteristic, not just unpleasant behavior. The legal standard comes from the Supreme Court decisions in Meritor Savings Bank v. Vinson (1986) and Harris v. Forklift Systems (1993).
ElementWhat Courts Look AtWhat It Means for Your Business
1. Unwelcome conductThe employee did not solicit or invite the behavior and regarded it as unwantedDocument whether the employee communicated that the conduct was unwelcome. Even if they did not formally complain, evidence that they avoided the harasser or told a coworker counts.
2. Based on a protected characteristicThe conduct targets race, sex, religion, national origin, age (40+), disability, genetic information, or state-protected classesConduct that is equally offensive to everyone (a manager who yells at all employees) is not harassment. It must be linked to a protected characteristic.
3. Severe or pervasiveEither a single extreme incident (assault, explicit threat) or a pattern of less severe incidents that, taken together, alter the work environmentA single offhand remark is usually not enough. Repeated comments, jokes, or exclusionary behavior over weeks or months typically is. Courts look at frequency, severity, whether conduct was physically threatening, and whether it interfered with work performance.
4. Subjectively and objectively hostileThe employee personally found it hostile (subjective), AND a reasonable person in the same situation would also find it hostile (objective)Both prongs must be met. An employee who is unusually sensitive may fail the objective test. An employer who argues 'nobody else complained' may fail the subjective test if the targeted employee clearly found it hostile.
5. Employer knew or should have knownThe employer was aware of the conduct (through a complaint, direct observation, or circumstances that should have put them on notice) and failed to take prompt corrective actionThis is where documentation saves you. If the employer can show it had a policy, the employee did not use the complaint procedure, and the employer had no other way to know, the Faragher/Ellerth affirmative defense may apply.

For small businesses, element five is the most critical. In a 15-person company, it is difficult for the employer to argue they did not know about conduct that was happening daily in a shared workspace. The close working environment that makes small businesses productive also makes ignorance nearly impossible to claim. This is why proactive policies, training, and complaint procedures matter more for small employers than for large ones: you cannot rely on "we did not know" when everyone sits in the same room.

Hostile Work Environment vs Toxic Workplace vs Bullying

People frequently use "hostile work environment," "toxic workplace," and "bullying" interchangeably, but they are legally distinct concepts. Understanding the difference helps employers respond appropriately and avoid overreacting to complaints that do not carry legal weight or underreacting to complaints that do.

ConceptLegal DefinitionProtected Characteristic Required?Creates Employer Liability?Common Examples
Hostile work environmentUnwelcome conduct based on a protected class that is severe or pervasive enough to alter working conditionsYes (race, sex, religion, age, disability, etc.)Yes, under Title VII/ADA/ADEA and state lawsRacial slurs, sexual comments, religious mockery, disability-based exclusion, repeated offensive conduct targeting a protected trait
Toxic workplaceNo legal definition. A colloquial term for a generally unpleasant, stressful, or dysfunctional work environmentNoGenerally no federal liability (possible state claims for intentional infliction of emotional distress)Micromanagement, favoritism, gossip culture, unrealistic expectations, poor leadership, high turnover
Workplace bullyingRepeated aggressive behavior that intimidates, humiliates, or threatens. No federal statute specifically prohibits it.NoGenerally no federal liability (no federal anti-bullying law for private employers)Yelling, public shaming, assigning impossible tasks, deliberate exclusion, spreading rumors, taking credit for others' work
When Toxic or Bullying Crosses Into Hostile
A toxic workplace becomes a hostile work environment when the toxic behavior targets an employee because of a protected characteristic. A manager who yells at everyone equally is creating a toxic workplace, not a hostile work environment. A manager who yells only at female employees, or only at employees over 50, is creating a hostile work environment. The same behavior can be legal or illegal depending entirely on why it is directed at the specific employee.

For small business owners, the practical takeaway: when an employee says "this is a hostile work environment," do not dismiss it and do not panic. Ask what specific conduct they are describing and whether it targets them because of a characteristic (race, sex, age, disability, religion). If yes, investigate as a potential harassment claim. If no, address it as a management or culture issue. Both deserve attention, but only one creates federal legal liability. The HR best practices guide covers how to address workplace culture issues that fall below the harassment threshold.

Why Small Businesses Face Higher Harassment Risk

Small businesses are not more likely to have harassers. They are more likely to have harassment go unaddressed because the structural safeguards that prevent it in larger organizations do not exist at a company with 15 employees. Every structural gap increases the time between when harassment starts and when it is corrected, and time is what turns an isolated incident into a pervasive pattern.

Structural GapHow It Increases RiskThe Fix
No HR departmentThe person receiving complaints is the owner, who may be friends with the accused, may be the accused, or may not know how to investigateDesignate at least one alternative complaint channel (outside HR consultant, anonymous reporting tool, board member)
Everyone knows everyoneAnonymity is impossible. Complainants fear social consequences. Witnesses do not want to take sides.Create a written anti-retaliation policy and communicate it clearly. Demonstrate that complainants are protected.
Informal cultureBanter and jokes are normal. The line between friendly teasing and harassment is unclear. Nobody wants to be the person who 'ruins the vibe.'Document behavioral expectations in writing. Conduct annual training that includes real scenarios.
Owner-as-harasserIf the owner is the source of harassment, there is no one above them to receive the complaint or take corrective actionEstablish an external complaint channel from day one. This protects the owner from unfounded claims and protects employees from real ones.
No documentation culturePerformance reviews, disciplinary actions, and complaints are verbal. When a claim is filed, there is no evidence of anything.Document every personnel decision and every complaint, regardless of severity. Use e-signatures with timestamps.
High-pressure environmentSmall teams under deadline pressure may tolerate aggressive behavior that would be flagged in a larger organizationConduct stress-point training: what behaviors are acceptable under pressure and what crosses the line
What worked for me
The biggest gap at my first company was the complaint channel. I was the owner, the manager, and the HR department. When an employee had a complaint about a coworker, they came to me. When the complaint was about me? They had nowhere to go. I fixed this by contracting with an outside HR consultant who was available by phone and email as an alternative reporting channel. Cost: $200/month. Value: immeasurable. The existence of the alternative channel alone changed the dynamic because employees knew they had options.

EEOC Harassment Data: What the Numbers Show

The EEOC publishes annual enforcement data that provides the most current picture of harassment charges in the United States. The numbers are relevant for small business owners because they show where enforcement attention is focused and what types of claims are increasing.

EEOC Harassment Charge Data
The EEOC received 88,531 discrimination charges in FY2024 (+9.2% vs FY2023). Harassment was alleged in 40.4% of all charges. Retaliation remained the #1 charge type at 47.8%, with harassment at #2. The EEOC secured nearly $700 million in total recoveries. The agency filed 111 merits lawsuits, including its first five cases under the Pregnant Workers Fairness Act (EEOC).

Two trends matter for small businesses. First, harassment charges are growing: from 21,270 charges in FY2021 to over 35,000 in FY2024, a roughly 65% increase in three years. This increase tracks with the post-pandemic return to in-person and hybrid work, where interpersonal conduct issues that were dormant during remote work have resurfaced. Second, the EEOC's updated harassment guidance (which replaced five documents from 1987 to 1999) explicitly incorporates Bostock v. Clayton County protections for LGBTQ+ employees and extends harassment definitions to virtual and social-media conduct. Harassment policies that have not been updated to reflect current EEOC enforcement guidance may not cover the full scope of protected conduct.

The practical implication: if your anti-harassment policy has not been reviewed recently, update it. Ensure it explicitly covers sexual orientation, gender identity, and virtual/online conduct. The onboarding policy guide covers how to integrate updated policies into the new hire workflow.

State Training Mandates That Apply to Small Businesses

Six states currently require employers to provide harassment training to employees, and several of these mandates apply to small businesses. If you have employees in any of these states, harassment training is not optional. It is a compliance deadline tied to each new hire's start date. The onboarding checklist maps all compliance deadlines across the first 90 days.

StateEmployer Size ThresholdTraining DurationNew Hire DeadlineRefresh Frequency
California (SB 1343)5+ employees2 hrs supervisors, 1 hr non-supervisorsWithin 6 months of hire or promotion to supervisorEvery 2 years
Connecticut3+ employees2 hrs supervisors, 2 hrs non-supervisorsWithin 6 months of hireEvery 10 years (supervisors)
Delaware50+ employees (all); 4+ employees (supervisors only)Interactive trainingWithin 1 year of hireEvery 2 years
IllinoisAll employers (1+)Annual training for all employeesWithin calendar year of hireAnnually
Maine15+ employeesTraining for all new employeesWithin 1 year of hireNot specified (recommended annually)
New YorkAll employers (1+)Interactive training for all employeesAs soon as possible upon hireAnnually

For small businesses that operate in multiple states, the strictest standard applies. If you have employees in both Texas (no mandate) and California (mandate at 5 employees), your California employees must receive training within 6 months of hire. Most employers apply the training uniformly to all employees regardless of state to simplify compliance and demonstrate good faith. The compliance hub provides state-by-state guides for all 50 states plus DC.

Even in states without a mandate, harassment training is a critical element of the Faragher/Ellerth affirmative defense (covered in the next section). An employer that provides training has a stronger legal defense than one that does not, regardless of whether the state requires it. The compliance training guide covers how to deliver required training without an LMS or L&D team.

Building the Faragher/Ellerth Affirmative Defense

The most important legal concept for small business owners to understand about harassment liability is the Faragher/Ellerth affirmative defense. Named after two Supreme Court cases (Faragher v. City of Boca Raton and Burlington Industries v. Ellerth, both 1998), this defense allows an employer to avoid liability for supervisor harassment that did not result in a tangible employment action, if the employer can prove two things:

First, the employer exercised reasonable care to prevent and promptly correct any harassing behavior. Second, the employee unreasonably failed to take advantage of the preventive or corrective opportunities the employer provided.

In practice, this means building a five-element paper trail that proves the employer did everything it should have done. If you have these five elements documented and can produce them when a claim is filed, your legal defense is dramatically stronger than an employer who has none of them.

Step 1Written Anti-Harassment Policy
Clear definition of harassment with examples (verbal, physical, sexual, online)
Statement that harassment based on any protected characteristic is prohibited
Multiple reporting channels (not just the owner)
Assurance of no retaliation for reporting
Statement of consequences for violators
Distributed to every employee and signed during onboarding
Step 2Signed Policy Acknowledgment Per Employee
Every employee signs an acknowledgment that they received and read the policy
Signature collected during onboarding (Day 1 or preboarding)
E-signature with timestamp preferred over wet signature (creates verifiable audit trail)
Stored in employee file, separate from general personnel documents
Re-signed annually when the policy is updated
Step 3Documented Training Completion
Anti-harassment training delivered to all employees within 30-90 days of hire (state-specific deadlines)
Manager-specific training (supervisory responsibilities) for anyone who supervises others
Training records include: employee name, date completed, topics covered, trainer/platform name
Retained for the duration of employment plus the applicable state retention period
Refresher training on the schedule required by your state (annually in CA, CT; biennially in DE, ME)
Step 4Complaint Intake and Investigation Records
Written record of every complaint: date received, reporter, summary of allegation, witnesses named
Investigation notes: interviews conducted, dates, findings, conclusions
Remedial actions taken: counseling, discipline, policy changes, monitoring
Follow-up check-ins with complainant at 1 week, 2 weeks, 30 days
All records stored in a separate confidential file, not the general personnel file
Step 5Consistent Enforcement and Monitoring
Disciplinary actions applied consistently regardless of the harasser's role or value to the company
Ongoing monitoring after complaints are resolved (check-in cadence documented)
Annual policy review and update cycle documented
Exit interview data reviewed for unreported harassment patterns
Documentation that the employer took the complaint seriously and acted promptly

The five steps above are not aspirational best practices. They are the specific evidence elements that employment attorneys look for when evaluating whether the affirmative defense is viable. An employer who has all five elements documented has a strong defense. An employer who is missing any one of them has a significant gap. The most commonly missing element at small businesses is step 2 (signed acknowledgments), because the policy exists in the employee handbook but nobody collected signatures confirming employees received it.

At FirstHR, the e-signature and document management features exist specifically for this workflow: distribute the policy, collect a timestamped signature, assign training, track completion, and store everything with an audit trail. The documentation does not prevent harassment. It proves that the employer tried to prevent it, which is the legal standard.

What to Do When an Employee Reports Harassment

The first 24 hours after an employee reports harassment determine more about the outcome than the investigation itself. Employers who respond promptly, document thoroughly, and protect the complainant from retaliation have the strongest legal position. Employers who delay, dismiss, or react emotionally create exposure that no amount of subsequent investigation can fix.

First 24 Hours: Acknowledge and Stabilize
Acknowledge the report immediately: thank the employee, confirm you take it seriously
Document the complaint in writing: date, time, reporter, summary, witnesses
Do not share the complaint with anyone who does not need to know
Separate the complainant from the accused if they work in close proximity (move the accused, not the complainant)
If the complaint is about the owner: engage an outside investigator immediately
Freeze all pending personnel decisions about the complainant (reviews, transfers, discipline)
Days 2-7: Investigate
Interview the complainant: get specific dates, times, locations, witnesses, and what was said or done
Interview witnesses: document each conversation with date, who was present, and what was stated
Interview the accused: present the allegations without naming the complainant if possible
Gather evidence: emails, Slack messages, text messages, schedules, performance records
Review relevant policies: does your handbook address the specific conduct reported?
Document every step with timestamps
Days 7-14: Resolve and Document
Reach a determination: substantiated, unsubstantiated, or inconclusive
If substantiated: take remedial action proportional to the severity (warning, training, demotion, termination)
Communicate the outcome to the complainant (describe the action taken without disclosing specific discipline of the accused)
Communicate to the accused (document their acknowledgment of the determination and any corrective action)
Schedule follow-up check-ins with the complainant at 1 week, 2 weeks, and 30 days after resolution
Store all investigation records in a separate confidential file
The Critical Rule: Move the Accused, Not the Complainant
When separation is necessary during an investigation, the employer should adjust the accused's schedule or work location, not the complainant's. Moving the complainant to a different shift, different location, or different role can constitute retaliation (an adverse action taken because the employee filed a complaint), even if the intention was to protect them. Ask the complainant what they want, document the conversation, and prioritize keeping the complainant in their current role while adjusting the accused's proximity.

For small businesses where the owner is both the complaint receiver and the manager of both parties, engaging an outside investigator is not a luxury. It is a necessity. An employment attorney or HR consultant who conducts the investigation independently costs $2,000 to $5,000, which is a fraction of the $75,000 to $250,000 in legal fees that even a winning defense costs. The onboarding SOP guide covers how to document the complaint process as a standard operating procedure.

Third-Party Harassment: Customers, Vendors, and Contractors

Third-party harassment is one of the most underaddressed types at small businesses, particularly in customer-facing industries. Under Title VII, the employer has a duty to protect employees from harassment by anyone in the workplace, including customers, clients, vendors, delivery drivers, and contractors. The employer's obligation is triggered when it knows or should know about the conduct.

ScenarioEmployer's ObligationWhat Most Small Businesses Do Wrong
Customer makes sexually explicit comments to a cashierWarn the customer that the behavior must stop. If it continues, ban the customer or reassign the employee to a different role (at the employee's request).Owner tells the employee to 'ignore it' or 'he's just like that' because the customer is valuable
Vendor representative uses racial slurs around warehouse staffContact the vendor company and demand a different representative. Document the complaint and the action taken.Owner avoids confrontation with the vendor because the business relationship is important
Contractor on a job site makes repeated unwelcome comments to an employeeDirect the contractor to stop. If they continue, remove them from the site and notify the contracting company.Owner assumes the contractor is 'not our employee' and therefore not our problem
Client sends inappropriate messages to an account managerDocument the messages, address with the client directly, and offer the employee a different account assignment if requested.Owner worries about losing the client and asks the employee to 'handle it professionally'

The pattern in the "what most small businesses do wrong" column is consistent: the employer prioritizes the business relationship over the employee's protection. This is understandable from a revenue perspective, but it creates direct legal liability. Once the employer knows about third-party harassment and fails to act, the employer becomes liable for the hostile work environment that the third party created. The people management guide covers broader employer responsibilities for workplace conduct.

Remote and Online Harassment: The 2024 Update

The EEOC's 2024 updated harassment guidance explicitly addresses virtual and remote-work harassment, confirming that the same standards apply regardless of whether the conduct occurs in a physical office or through digital channels. This update codifies what courts had been applying piecemeal: Slack messages, Zoom behaviors, email content, social media posts about coworkers, and text messages are all subject to the same harassment analysis as in-person conduct.

Digital ChannelCommon Harassment PatternsWhat to Include in Your Policy
Slack / Teams / ChatInappropriate jokes in channels, offensive memes, exclusion from channels based on identity, persistent unwelcome DMsAll company chat platforms are work environments subject to the anti-harassment policy
Video calls (Zoom, Meet)Comments about appearance, screen-sharing inappropriate content, inappropriate virtual backgrounds, recording without consentCamera-on conduct is subject to the same standards as in-person meetings
EmailForwarding offensive content, persistent unwelcome personal emails, CC-based public shamingAll work email accounts are covered by the anti-harassment policy
Text / Personal messagingUnwelcome personal texts from coworkers or managers, late-night messages, sexually explicit contentWork-related communications on personal devices are covered if between coworkers
Social mediaPosting about coworkers with offensive commentary, sharing workplace photos without consent, online stalkingConduct on social media that references coworkers or the workplace is subject to the policy when it affects the work environment

For small businesses with remote or hybrid employees, the anti-harassment policy must explicitly state that digital communications are covered. A policy that only references "workplace conduct" without mentioning digital channels creates ambiguity that favors the harasser. The company policy guide covers how to write policies that apply across physical and digital work environments.

What worked for me
After we moved to hybrid work, I added one sentence to our anti-harassment policy: "This policy applies to all work-related interactions, including but not limited to in-person, telephone, video conference, email, instant messaging, social media, and text communication, regardless of the location from which the communication is sent or received." That single sentence closed the ambiguity gap. When we received a complaint about Slack messages, the policy clearly covered it.

Common Mistakes That Create Harassment Liability

MistakeWhy It Creates LiabilityThe Fix
No written anti-harassment policyWithout a policy, the employer cannot establish the first element of the Faragher/Ellerth affirmative defense. No policy = no defense.Write a policy that covers all protected characteristics, includes reporting procedures and anti-retaliation language, and distribute it during onboarding.
Policy exists but employees never signed itAn unsigned policy is an undelivered policy. The employer cannot prove the employee knew the rules or knew how to report.Collect a signed acknowledgment from every employee during onboarding. Re-collect annually when the policy is updated. Use e-signatures with timestamps.
No harassment training, even in mandatory statesViolates state law in CA, CT, DE, IL, ME, NY. Also undermines the affirmative defense in all states.Deliver training within the state-mandated deadline. Document completion dates. Use a system that tracks who has and has not completed training.
Ignoring 'minor' complaintsA complaint that seems minor today becomes the start date of a pattern that a jury evaluates tomorrow. Every unreported or uninvestigated complaint is a future exhibit.Investigate every complaint, no matter how minor it seems. Document the complaint, the investigation, and the resolution.
Treating the harasser as more valuable than the policyWhen the top salesperson or the owner's friend is the harasser, employers hesitate to discipline. Selective enforcement destroys the affirmative defense.Apply the policy consistently regardless of the harasser's role, tenure, or value to the company. Inconsistent enforcement is evidence of a policy that exists on paper only.
Not following up after resolving a complaintIf the complainant experiences further harassment or retaliation after the investigation and the employer never checked, the employer cannot demonstrate ongoing care.Schedule and document follow-up check-ins at 1 week, 2 weeks, and 30 days after resolution.
Outdated policy that does not cover LGBTQ+ or remote conductThe EEOC's 2024 guidance explicitly covers sexual orientation, gender identity, and virtual/digital conduct. A policy from 2019 does not reflect current enforcement standards.Update the policy to explicitly include sexual orientation, gender identity, pregnancy, and all digital communication channels.
Using the complaint to punish the complainantMoving the complainant to a worse shift, reducing their responsibilities, or isolating them 'for their protection' constitutes retaliation, even with good intentions.Do not change the complainant's working conditions without their explicit, documented request. Adjust the accused's conditions if separation is needed.

The mistake behind most of these mistakes: treating harassment as a personal conflict between two employees rather than a compliance obligation for the employer. The employer's job is not to determine whether the complainant is being "too sensitive" or whether the accused "meant anything by it." The employer's job is to receive the complaint, investigate it, take action if warranted, and document the process. The HR audit guide covers how to review your harassment prevention practices as part of a broader compliance check.

Key Takeaways
Workplace harassment is unwelcome conduct based on a protected characteristic (race, sex, religion, age, disability) that is severe or pervasive enough to create a hostile work environment. The 4 traditional categories are verbal, physical, psychological, and sexual.
The 3-types framing varies by jurisdiction. In the US, the most common framework is verbal, physical, and visual/written. California uses verbal, physical, and visual. The UK uses a different framework based on the Equality Act.
There are 11 specific types a small business encounters in practice, from discriminatory harassment and sexual harassment to third-party harassment by customers and online harassment via Slack and Zoom.
Employer protection requires the 5-element Faragher/Ellerth affirmative defense: written policy, signed acknowledgments, documented training, complaint/investigation records, and consistent enforcement.
Six states mandate harassment training for small businesses: California (5+ employees), Connecticut (3+), Delaware (50+/4+ for supervisors), Illinois (all), Maine (15+), and New York (all).
The EEOC received 88,531 charges in FY2024 with harassment alleged in 40.4%. The updated enforcement guidance extends harassment protections to LGBTQ+ employees and virtual/digital conduct.
When an employee reports harassment: acknowledge within hours, document the complaint, freeze personnel decisions about the complainant, investigate within days, and follow up at 1, 2, and 4 weeks.
Third-party harassment by customers, vendors, and contractors creates employer liability when the employer knows about the conduct and fails to act. 'He is our biggest customer' is not a defense.

Frequently Asked Questions

What are the 4 types of workplace harassment?

The four traditional categories of workplace harassment are verbal (offensive comments, slurs, jokes, threats), physical (unwanted contact, blocking movement, threatening gestures), psychological (intimidation, humiliation, isolation, gaslighting, deliberate exclusion), and sexual (unwelcome advances, requests for sexual favors, sexually explicit comments or materials). These four categories are not statutory definitions but are widely used by the EEOC, employment attorneys, and training providers to organize the spectrum of harassing conduct. Most workplace incidents fall into one or more of these categories.

What are the 3 types of harassment?

The 3-type framing depends on jurisdiction. In US employment law, the three types are commonly described as verbal harassment, physical harassment, and visual or written harassment (offensive images, cartoons, emails, texts). In California, the three types recognized by the Department of Fair Employment and Housing are verbal, physical, and visual. Under the UK Equality Act 2010, the three types are harassment related to a protected characteristic, sexual harassment, and less favorable treatment for rejecting or submitting to harassment. For US small business purposes, the verbal, physical, and visual framing is the most practical for policy writing and training.

Is bullying the same as harassment?

No. Bullying and harassment are different concepts with different legal implications. Harassment is illegal when it targets a protected characteristic (race, sex, religion, age, disability, national origin, and others protected under Title VII, ADA, and ADEA). Bullying is repeated aggressive behavior that may not target a protected characteristic. An employee who is yelled at by a manager for poor performance is being bullied, but not necessarily harassed. An employee who is yelled at because of their race is being harassed. The legal distinction matters because harassment creates employer liability under federal and state law, while bullying generally does not unless it constitutes intentional infliction of emotional distress under state tort law.

Can a small business be liable for harassment by a customer?

Yes. Under Title VII, employers have a duty to protect employees from harassment by third parties, including customers, vendors, clients, and contractors, when the employer knows or should know about the conduct and fails to take corrective action. If an employee reports that a customer is making sexually explicit comments and the employer does nothing because the customer is valuable, the employer is liable. The standard is whether the employer took prompt and effective remedial action once it knew about the harassment. For small businesses in customer-facing industries like retail, food service, and healthcare, third-party harassment is one of the most common and most underaddressed types.

Does harassment training have to be in person?

No. Most states that mandate harassment training accept online, self-paced training as long as it meets the content and duration requirements. California (SB 1343) requires 2 hours for supervisors and 1 hour for non-supervisory employees, and accepts e-learning with an interactive component. Connecticut requires 2 hours for supervisors and accepts online training. Delaware, Illinois, Maine, and New York also accept online formats. The key requirements are that the training covers the specific topics mandated by the state, includes an interactive element (quizzes, acknowledgments, or the ability to ask questions), and that completion is documented with dates and employee signatures.

What is the difference between quid pro quo and hostile work environment?

Quid pro quo harassment occurs when a person in authority conditions employment benefits (hiring, promotion, raise, continued employment) on submission to sexual advances. Only supervisors or managers with authority over the victim can commit quid pro quo harassment. A single incident is sufficient. Hostile work environment harassment occurs when unwelcome conduct based on a protected characteristic is severe or pervasive enough to create an intimidating, hostile, or offensive work environment. Anyone can create a hostile work environment, including coworkers, subordinates, and third parties. A single severe incident (physical assault, explicit threat) or a pattern of less severe incidents can establish it.

How many employees trigger harassment training requirements?

It varies by state. California requires harassment training for employers with 5 or more employees. Connecticut requires it for employers with 3 or more employees. Delaware requires it for employers with 50 or more employees (4 or more for supervisors). Illinois requires it for all employers regardless of size. Maine requires it for employers with 15 or more employees. New York requires it for all employers regardless of size. Most other states do not mandate harassment training but strongly recommend it. Regardless of mandates, training is a core element of the Faragher/Ellerth affirmative defense, which means any employer who wants legal protection from harassment liability should provide training.

What should a harassment policy include?

A harassment policy should include a clear definition of harassment with specific examples of prohibited conduct, a statement covering all protected characteristics under federal and applicable state law, a description of two or more reporting channels (so the complainant is not forced to report to the harasser), an explicit anti-retaliation statement, a description of the investigation process, a statement of consequences for violators (up to and including termination), contact information for the EEOC and relevant state agency, and an acknowledgment signature line. The policy should be distributed during onboarding and re-acknowledged annually.

How long should harassment investigation records be kept?

At minimum, harassment investigation records should be retained for the duration of the involved employees' employment plus the applicable statute of limitations. Under federal law (Title VII), the statute of limitations for filing an EEOC charge is 180 days (or 300 days in states with their own anti-discrimination agencies). However, many states have longer filing periods (up to 3 years in some states). The safest practice is to retain all harassment-related documentation for the duration of employment plus 5 to 7 years. Records should be stored in a separate confidential file, not in the employee's general personnel file.

What is the employer's liability for workplace harassment?

Employer liability depends on who committed the harassment. For harassment by a supervisor that results in a tangible employment action (firing, demotion, denial of promotion), the employer is automatically liable with no defense available. For harassment by a supervisor that does not result in a tangible action, the employer can avoid liability by proving the Faragher/Ellerth affirmative defense: it exercised reasonable care to prevent and correct harassment, and the employee unreasonably failed to use the complaint procedures. For harassment by coworkers or third parties, the employer is liable only if it knew or should have known about the conduct and failed to take prompt corrective action.

What is a hostile work environment?

A hostile work environment is a workplace where unwelcome conduct based on a protected characteristic (race, sex, religion, age, disability, national origin) is severe or pervasive enough to create conditions that a reasonable person would find intimidating, hostile, or abusive. The legal standard comes from the Supreme Court decisions in Meritor Savings Bank v. Vinson (1986) and Harris v. Forklift Systems (1993). A hostile work environment is not the same as a toxic workplace or a bad boss. The conduct must be linked to a protected characteristic and must cross the threshold from unpleasant to legally hostile. Courts evaluate five elements: the conduct was unwelcome, it was based on a protected class, it was severe or pervasive, it was both subjectively and objectively hostile, and the employer knew or should have known and failed to act.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial