Third Party Harassment Employer Liability 2026: New Legal Duties

Third Party Harassment Employer Liability 2026 is a live employer issue because the Employment Rights Act 2025 adds a duty on employers not to permit third parties to harass employees.

This guide explains what the rule means in practice, where the main legal and payroll risks sit, and what employers should do now. It is written for UK SME owners, HR managers and payroll administrators who need a clear operational answer rather than a theory-heavy overview.

What is third party harassment employer liability

Third party harassment involves unlawful harassment of an employee by someone who is not a co-worker, such as a customer, client, patient, visitor or contractor. The new duty means an employer must not permit a third party to harass an employee. That moves the focus onto prevention, response and repeated risk scenarios.

This is especially important in public-facing sectors where abusive customer behaviour has often been normalised.

What should employers review first?

Start with the basics:

• contracts and policy wording
• payroll and benefit settings
• manager guidance and escalation routes
• record keeping and audit trails
• any group of workers with irregular hours, lower pay or higher legal risk

Then test a real sample of records rather than assuming the written policy matches day-to-day practice.

How does the new duty interact with sexual harassment prevention

The 2024 duty to take reasonable steps to prevent sexual harassment already pushed employers towards risk assessments and active prevention. The 2025 reform package strengthens the framework further, including movement from 'reasonable steps' to all reasonable steps for sexual harassment prevention and explicit third-party protection.

Together, these rules make passive policies far less defensible. Employers need active controls, not just handbook wording.

Where do employers usually go wrong?

Employers usually run into trouble when they rely on outdated documents, inconsistent manager decisions or poor records. A process can look fine on paper and still fail in practice if payroll, HR and line management are working from different assumptions. The Employment Rights Act 2025 summary for employers and the grievance policy template are useful supporting reads when building a stronger harassment prevention framework.

What should employers do in practice

Set a clear customer behaviour standard, train managers, empower staff to end abusive interactions and investigate repeat incidents. Risk-assess locations such as receptions, retail counters, call centres, hospitality venues and lone-working roles. Where a client or customer creates a pattern, escalate and record what action was taken.

The key legal question is often what the employer knew and what it did next.

What should a practical employer action plan include?

A practical action plan should do five things. First, identify the legal trigger and whether it has already started or is only announced for a later commencement date. Second, update written documents so contracts, policies and letters match the current rule. Third, make sure payroll and HR systems reflect the change. Fourth, brief managers so they do not improvise. Fifth, keep an evidence trail of what was reviewed and when.

For SMEs, the best action plans are specific. They name the process owner, the software setting, the affected employee group and the deadline. Broad intentions such as "review policy" rarely survive contact with a live grievance, payroll query or HMRC check.

Which documents and systems should employers update?

Most employers need to touch more systems than they first expect. As a minimum, review:

• offer letters and employment contracts
• staff handbook wording
• payroll software settings and pay elements
• pension and benefit workflows
• sickness, disciplinary or grievance templates where relevant
• manager training notes
• onboarding and leaver checklists
• internal escalation routes for complex cases

A joined-up update prevents one team from fixing the headline issue while another team carries on using the old process.

Compliance checklist or practical steps

Use this checklist as a working plan:

• confirm the current legal position and commencement date
• identify the affected worker groups and managers
• review contracts, policies and template letters
• update payroll, pension or benefit settings where relevant
• test one real or sample case end to end
• brief managers on what to do and what not to do
• store evidence of the review and sign-off
• schedule a follow-up audit after the next payroll or live case
• link related guidance and tools inside your HR system for quick access

Frequently asked questions

Key takeaways

The safest employer response is to treat Third Party Harassment Employer Liability 2026 as an operational change, not just a legal update. Review your documents, test your payroll or HR workflow, and train managers before the next real case arrives. For related guidance, see the how to handle a grievance at work employer guide and the staff handbook template for small businesses. The disciplinary procedure template can also help when misconduct overlaps with harassment complaints.