EHRC Guidance: Workplace Harassment Monitoring and Complainant Privacy in Great Britain

Editorial hold — human review pending.

Country: United Kingdom. Research snapshot: 2026-10-20. Source / development date: 2024-09-24.

Unresolved verification flags

The technical guidance was reviewed in September 2024. Check later amendments, territorial scope and commencement. Guidance illustrations are not a fixed statutory checklist.

Resolve these limitations and the article-specific legal checklist before approval. This draft is educational information, not legal advice.

Background and Legal Overview

Country: United Kingdom (England, Scotland, and Wales). Development date: 24 September 2024. Research snapshot date: 20 October 2026.

Complying with statutory workplace standards under the Equality Act 2010 requires ongoing evaluation. The Equality and Human Rights Commission (EHRC) technical guidance on harassment at work emphasises that prevention is an active, anticipatory responsibility rather than a static administrative exercise [source: launch-source-11]. Employers must routinely assess risks and evaluate whether their control measures remain effective, while carefully protecting the confidentiality of individuals who raise concerns [source: launch-source-11].

The Anticipatory Preventative Duty and Risk Assessment

Under section 40A(1) of the Equality Act 2010, employers have a positive legal obligation to take reasonable steps to prevent sexual harassment of workers in the course of their employment [source: launch-source-11]. The EHRC guidance notes that an employer is unlikely to comply with this preventative duty without undertaking a structured risk assessment (paragraphs 3.30–3.31).

Risk assessments should consider factors such as: - Workforce demographics, such as male-dominated environments or power imbalances. - Cultural factors, such as tolerance of crude banter or dismissive leadership attitudes. - Working arrangements, including isolated working, travel, or frequent contact with third parties like clients, customers, or patients. - Historic patterns, including previous complaints or informal concerns.

To satisfy the statutory requirement of taking reasonable steps, organisations must not merely implement policies on paper. In the historical case study of Allay (UK) Ltd v Gehlen (UKEAT/0031/20/AT), the Employment Appeal Tribunal highlighted that anti-harassment training that has become "stale" or ineffective does not support the reasonable steps defence under section 109(4) of the Act [source: launch-source-11]. Employers must assess whether workforce interventions have been understood and whether refresher sessions are required.

Governance Recommendations for Monitoring Effectiveness

To gauge whether workplace interventions are functioning without placing complainants at risk of exposure or victimisation, the EHRC guidance details several practical recommendations:

1. Centralised Incident Logs: Employers should establish secure, data-protection-compliant incident repositories to log formal complaints and informal concerns. In a hypothetical construction firm scenario in the guidance, management created an evidence hub to track sexual harassment reports and committed to reviewing incident data every six months to detect systemic trends.
2. Anonymous Climate Surveys: Organisations can deploy periodic, anonymised surveys to evaluate employee perceptions of workplace culture and reporting confidence. In a hypothetical hospital scenario, management committed to regular climate surveys and an annual review of training effectiveness after discovering unreported misconduct.
3. Consultation with Stakeholders: Engaging with recognised trade unions, employee representatives, or internal diversity networks allows management to collect qualitative feedback on harassment risks without requiring individuals to disclose personal experiences publicly.

Safeguarding Complainant Confidentiality

Section 27 of the Equality Act 2010 makes it unlawful to subject any person to a detriment because they have engaged in a protected act, such as raising a grievance or providing witness testimony [source: launch-source-11]. Fear of victimisation or social exposure frequently deters reporting. Consequently, governance monitoring must incorporate strong privacy safeguards:

• Data Aggregation: When presenting monitoring reports to executive boards or consultative committees, data must be anonymised and aggregated to prevent the indirect identification of individual complainants or small teams.
• Need-to-Know Access: Access to raw incident logs must be strictly restricted to trained personnel responsible for conducting investigations and regulatory compliance.
• Transparent Boundaries: While employers should uphold confidentiality, policies should clearly state any exceptional legal boundaries, such as mandatory regulatory notifications or serious criminal risks.

Legal review required

• Local applicability: Confirm that monitoring mechanisms comply with employment and data privacy laws applicable in England, Scotland, or Wales.
• Statutory updates: Check the status and detail of upcoming statutory amendments scheduled to take effect in April and October 2026.
• Case law verification: Ensure reliance on historical appellate decisions (such as Allay v Gehlen) is verified against current legal precedents.
• Notice: Unsupported legal interpretations must be resolved before policy implementation. This material provides educational analysis, not certified legal advice, and has not been subjected to human review.