What Is Third-Party Harassment?

Third-party harassment occurs when an employee is harassed by someone who is not their employer or coworker — typically a client, customer, vendor, contractor, or visitor — during the course of employment. Employers can be held liable under Title VII if they knew or should have known about the conduct and failed to take prompt, corrective action.

Who qualifies as a third party?

Third-party sexual harassment is the most litigated form, but the same legal framework applies to harassment based on race, national origin, religion, disability, and age under Title VII, the ADA, and the ADEA.

Employer liability: the legal standard

The “knew or should have known” test

Employer liability for third-party harassment is negligence-based. The employer is not automatically liable for what a vendor or client does, but becomes liable once it had — or should have had — knowledge of the conduct and failed to act. The EEOC applies this standard under Title VII’s hostile work environment doctrine. Liability attaches when: (1) the harassment was severe or pervasive enough to alter the terms and conditions of employment; (2) the employer knew about the conduct through a direct complaint, management observation, or constructive notice; and (3) the employer failed to take prompt, effective corrective action.

2026 updates: US and UK

United States: The EEOC rescinded its April 2024 Enforcement Guidance on Harassment (effective January 22, 2026). Title VII and its protections against third-party harassment remain fully intact — the guidance was non-binding. State civil rights laws in California, New York, and Illinois impose independent obligations that often exceed federal standards.

United Kingdom: From October 2026, the UK Employment Rights Act creates direct employer liability for third-party harassment when the employer fails to take “all reasonable steps” to prevent it. Enterprise organizations with UK operations must conduct risk assessments, update anti-harassment policies, establish accessible reporting procedures, and document preventive measures before the October 2026 effective date.

Third-party harassment examples

• A restaurant server reports that a regular customer makes repeated sexual comments. The manager logs the complaint but takes no action — the customer continues. The employer’s inaction creates Title VII liability.
• A hospital administrator dismisses nursing staff complaints about a patient’s verbal abuse over multiple shifts. Failure to act — or reassign staff, warn the patient, or involve security — exposes the employer.
• A corporate account executive is harassed during a client dinner. Her manager’s response: “That client brings in $2 million a year, just deal with it.” Instructing an employee to tolerate harassment to protect revenue is itself an adverse employment action.
• An on-site contractor makes offensive comments to office staff over a three-month project. HR’s failure to investigate or remove the contractor from site creates ongoing hostile environment liability.

What employers must do: prevention and response

Prevention

• Policy coverage: Anti-harassment policy must explicitly state that third-party harassment — from clients, vendors, contractors, and visitors — is prohibited and that the company will respond to reports regardless of the commercial relationship
• Training: Include third-party scenarios in annual harassment prevention training; ensure frontline managers know they cannot instruct employees to tolerate harassing conduct from clients
• Vendor and client contracts: Include anti-harassment clauses in standard vendor agreements; reserve the right to remove individuals from site or terminate contracts for harassing conduct
• Risk assessments: Industries with high third-party contact (hospitality, retail, healthcare, financial services) should conduct periodic assessments of environments where third-party harassment is most likely

Response

1. Acknowledge the complaint within 24 hours; do not dismiss based on the commercial value of the relationship
2. Assign a neutral investigator with no reporting relationship to the accused or to the commercial relationship manager
3. Document the complaint, investigation steps, and all communications with timestamps
4. Take corrective action — remove the third party from the worksite, escalate to their employer or agency, terminate the vendor/client relationship, or contact law enforcement where criminal conduct is involved
5. Communicate the outcome to the complainant within the timeline established in your policy
6. Confirm that no adverse employment action is taken against the employee who reported

Enterprise HR compliance checklist

• Anti-harassment policy explicitly covers third-party perpetrators
• Policy accessible to all employees including frontline and shift workers
• Annual training includes third-party scenario examples
• Vendor and client contracts include anti-harassment language
• Reporting process allows employees to bypass their direct manager (critical when manager is the commercial relationship owner)
• UK operations: risk assessment completed; policy updated for October 2026 Employment Rights Act compliance
• Documentation of every complaint, investigation, and corrective action maintained with timestamps
• No-retaliation commitment stated explicitly and enforced

How pre-employment assessment connects to harassment prevention

Organizations reduce third-party harassment exposure upstream by hiring managers with validated integrity and judgment. Testlify’s structured behavioral assessments identify candidates who exercise sound judgment in ambiguous situations — a key predictor of whether managers respond correctly when a client or vendor behaves improperly. For enterprise teams hiring at scale, skills-based hiring with documented criteria also reduces the EEOC disparate-impact exposure that can arise when harassment policies are applied inconsistently.

Frequently asked questions