Our Group Companies
Irwell Law logo
New right to work checks, october 2026

Share this

Share article to facebookShare article to TwitterShare article to Linkedin
Related blogs
contracts
NewsWednesday, Sep 30, 2026

Third-Party Harassment: What UK Employers Need to Know

The Employment Rights Act 2025 (“ERA 2025”) introduces significant new duties for employers. Are you ready?

The ERA 2025 introduces a crucial obligation on employers to take reasonable steps to prevent third-party harassment, or they otherwise may be liable for unwanted incidents that occur in the workplace.

Here's what employers need to know:

You are a UK employer. You’ve got a team on the front line, dealing with the public every day. It’s a tough gig, and generally, your staff generally handle it well.

But what happens when a customer walks in and racially abuses your employee? Or worse, sexually harasses them?

Historically, employers would not be liable for the conduct of third parties. If you supported the staff member afterward and made a statement saying, “we don’t tolerate this”, you were probably in the clear.

Not anymore.

The ERA 2025 is ripping up that old rulebook and is modernising employment law to extend protections to workers across the country. From 30 October 2026, a single incident of harassment from a third party (like a customer) is enough to result in a claim at the Employment Tribunal. We aren’t talking about a pattern of behaviour here. One incident. One liability.

Section 21 of the ERA 2025, introduces a new head of claim under section 40 of the Equality Act 2010 (“EqA 2010”) which states:

An employer (A) must not permit a third party to harass a person (B) who is an employee of A.

A permits a third party to harass B only if—

the third party harasses B in the course of B’s employment by A, and

A failed to take all reasonable steps to prevent the third party from doing so.

In this section “third party” means a person other than—

(a) A, or

(b) an employee of A.

This provision extends protection beyond internal workplace interactions and ensures that employees are safeguarded from any discriminatory conduct in circumstances where it originates from individuals who are not directly involved with the employer. This section applies to all employees and covers harassment based on protected characteristics under section 4 of the EqA 2010.

Here is why Section 21 of the ERA 2025 needs to be top of your priority list, and what you need to do about it.

The “All Reasonable Steps” Trap

The new law inserts a fresh claim into the EqA 2010 (Section 40). It essentially says: an employer must not permit a third party to harass an employee.

And here is the kicker: you are deemed to have “permitted” it if:

The harassment happened during their employment.

You failed to take all reasonable steps to prevent it.

That’s right. The duty is now preventative. Having a “zero-tolerance” poster on the wall and being nice to the victim after the incident may no longer be a sufficient defence. The law now assumes that an employer is now liable unless you can prove you did absolutely everything you reasonably could to stop the incident happening in the first place.

What Are “Reasonable Steps”?

I know what you are thinking: “How am I supposed to know what ‘all reasonable steps’ means? The law isn’t clear!”

You are right – there is no checklist. What is “reasonable” for massive retailers differs from what is “reasonable” for smaller businesses.

However, the Equality and Human Rights Commission (“EHRC”) guidance on sexual harassment and harassment at work provides a useful roadmap for employers seeking to comply with their positive legal duty. The Employment Tribunal will likely look at (but not limit itself to):

  • Your Size and Resources: Can you afford training? Do you have a dedicated HR team?

  • The Working Environment: Is it a quiet office or a chaotic pub at 2AM?

  • The Nature of Contact: Do your staff interact with customers for 5 minutes or 5 hours?

  • The Risks: Have you identified the specific risks of your workplace?

Your Strongest Defence: Risk Assessments

If there is one takeaway from this provisional change, it is this: Conduct a Risk Assessment. Now.

If a claim lands on your desk and you cannot produce a documented risk assessment showing how you identified risks and mitigated them, you will find it significantly harder to defend the complaint. You need to show you were proactive, not reactive.

Identify the risks. Where are your staff vulnerable?

Implement controls. How will you mitigate those risks? (Training, signage, security, de-escalation policies).

Explain your decisions. Did you decide not to install a security camera? Document why. A clearly written explanation is your best friend in a Tribunal.

The good news (yes, there is some)

Here is the silver lining: a step can be considered “reasonable” even if it would not have prevented the act of harassment.

Why? Because you cannot control a stranger walking through your door. The law understands that. They don’t expect you to be psychic. They expect you to be prepared.

If you have done the risk assessment, implemented a robust training policy, trained your staff, and documented your reasoning, a Tribunal is far more likely to accept that you did take “all reasonable steps”, even if the incident still occurred.

If you have not, then approach us to help.

The Bottom Line

The clock is ticking. Now that October is here, the onus is on you to prove you are innocent.

Don’t wait for a claim to test your luck. Start preparing your risk assessments and reviewing your policies now. A stitch in time saves… well, a hefty legal bill and a damaged reputation.

Asad Farooq is a Legal Consultant at Irwell Law who specialises in defending claims at the Employment Tribunal.

Need to ensure you are compliant? Contact the team at Irwell Law ([email protected] or [email protected])

FAQs

Can an employer be liable for harassment by a customer?

Yes. From 30 October 2026, employers may be liable if a customer, client or other third party harasses an employee and the employer failed to take all reasonable steps to prevent it.

Does there need to be a pattern of behaviour?

No. A single incident may be enough to trigger liability.

What are reasonable steps?

The law does not provide a fixed checklist, but Tribunals may consider factors such as training, policies, risk assessments, reporting procedures and workplace-specific controls.

Should employers carry out a risk assessment?

Yes. A documented risk assessment is likely to be a key part of demonstrating that reasonable preventative steps were taken.

5min read