Category: Harassment and Discrimination
Third-Party Harassment
Simply put
Third-party harassment is workplace harassment where the person doing the harassing is not a direct employee of the organization, such as a customer, vendor, contractor, or other non-worker. An employer may become responsible for addressing this conduct when it knows, or reasonably should have known, that it was occurring. Exact standards for employer liability vary by jurisdiction and should be confirmed with qualified legal counsel.
Formal definition
Third-party harassment refers to harassing conduct directed at an organization's employees by individuals who are not direct employees of that organization, such as clients, customers, vendors, contractors, or visitors. In the U.S. context, harassment generally constitutes a form of employment discrimination addressed under federal statutes including Title VII of the Civil Rights Act of 1964 and the Age Discrimination in Employment Act of 1967, as enforced by the EEOC. According to source guidance, an employer may be held liable for harassment by a third party where an employee can demonstrate that the employer knew, or in the exercise of reasonable care should have known, of the conduct and failed to take appropriate corrective action. This entry concerns the conduct and associated potential employer liability; it does not, on its own, describe the specific policies, training modules, reporting channels, or investigative procedures an organization may deploy to prevent or respond to such harassment, which are distinct program elements. Liability standards are jurisdiction-specific and fact-dependent; this definition is educational and not a substitute for professional legal advice.
Why it matters
Third-party harassment matters because an organization's exposure to harassment claims does not end at the boundary of its own workforce. Employees interact with customers, vendors, contractors, and visitors as part of ordinary business, and harassing conduct from any of these individuals can affect the working environment. Under U.S. guidance, an employer may be held liable where an employee can show that the employer knew, or in the exercise of reasonable care should have known, of the conduct and failed to take appropriate corrective action. This means that inaction after notice, not just the conduct itself, can become the basis for potential liability.
Who it's relevant to
Compliance and Ethics Program Managers
Program managers need to account for harassment risks that originate outside the workforce when scoping the organization's harassment framework. Recognizing third-party harassment as a distinct exposure helps ensure that program design does not assume all harassers are employees, though the specific policies, reporting channels, and investigative procedures used to address it are separate program elements from the definition itself.
Legal and Employment Counsel
Because employer liability for third-party harassment depends on standards that are jurisdiction-specific and fact-dependent, legal teams are central to assessing exposure and appropriate corrective action. The knowledge-based standard, where an employer may be liable if it knew or should have known and failed to act appropriately, should be evaluated against the applicable law by qualified counsel; this entry is educational and not a substitute for legal advice.
HR and Employee Relations Teams
These teams often receive and act on reports involving customers, vendors, contractors, or visitors, where the harasser is not an employee subject to standard internal discipline. Understanding that the potential for employer liability may hinge on whether the organization knew or should have known and responded appropriately underscores the importance of how such reports are recognized and escalated.
Learning and Development Staff
Staff who design harassment training can use this concept to ensure content reflects that harassment may come from non-employees and not only from coworkers or supervisors. A training module addressing this scenario is one component of a broader response and, on its own, does not constitute the organization's full policy or investigative process.
Inside Third-Party Harassment
Definition and Scope
Third-party harassment refers to harassing conduct directed at an organization's workers by individuals who are not employees, such as customers, clients, vendors, contractors, patients, or members of the public. It is distinct from harassment between coworkers or by supervisors, though the underlying protected-characteristic concepts (such as harassment based on sex, race, or other protected traits) may overlap. The precise obligations vary by jurisdiction and local law, and this entry is educational rather than legal advice.
Employer Awareness and Response
A central element in many legal frameworks is whether the employer knew or should have known about the conduct and whether it took action within its control. Because employers cannot directly discipline non-employees the way they can discipline staff, the focus is generally on the reasonableness of the employer's response given its level of control over the third party and the work environment. Exact standards are jurisdiction-specific and should be confirmed against primary legal sources and qualified counsel.
Reporting Channels
Mechanisms through which affected workers can report harassment by third parties. This is one component of a broader compliance and ethics program and is related to, but distinct from, general whistleblower channels. A reporting channel alone does not constitute a complete response framework.
Training Component
Training modules that help workers and managers recognize third-party harassment, understand how to report it, and understand the organization's response process. Training is one element of addressing third-party harassment and does not by itself satisfy an organization's full obligations; its usefulness depends on implementation and context.
Compliance and Ethics Dimensions
Third-party harassment sits on a spectrum: adherence to applicable anti-harassment laws and internal policies is a compliance matter with defined consequences, while fostering a respectful environment that protects workers beyond minimum legal requirements is an ethics and values matter. The two dimensions are related but should not be treated as interchangeable.
Common questions
Answers to the questions practitioners most commonly ask about Third-Party Harassment.
Does harassment only count if it comes from a coworker or manager?
No. Third-party harassment refers to harassing conduct directed at employees by individuals who are not employees of the organization, such as customers, clients, vendors, contractors, patients, or visitors. Treating harassment as only an internal, employee-to-employee issue overlooks a distinct category of workplace conduct that policies and training may need to address. The specific legal obligations attached to third-party conduct vary by jurisdiction and should be confirmed with qualified legal counsel.
Because a harasser is an outside party rather than an employee, is the organization simply not responsible?
Not necessarily. The fact that the harasser is external does not automatically remove organizational responsibility. Depending on the jurisdiction and the facts, an employer's obligations may turn on factors such as awareness of the conduct and the adequacy of its response. This is an area where legal duties are jurisdiction-specific and fact-dependent, so specific liability questions should be directed to qualified legal counsel. This glossary entry is educational and not a substitute for professional advice.
How can third-party harassment be addressed within a compliance training module?
A training module can be one component that helps employees recognize third-party harassment, understand relevant policies, and know available reporting channels. Training alone is not a complete response; it typically works alongside a code of conduct, reporting mechanisms, and a monitoring and response function. Training is intended to support awareness and consistent handling, but its effect depends on implementation, reinforcement, and the broader program in which it sits.
What reporting mechanisms are relevant when the harasser is not an employee?
Employees generally need clear, accessible channels to report conduct by external parties, and those channels should be capable of routing such reports for appropriate review. Because the individual involved is outside the organization, follow-up may involve parties such as the relevant business relationship owner in addition to the standard intake process. Organizations should confirm that their reporting and response procedures explicitly account for third-party scenarios rather than assuming internal processes cover them.
How should third-party harassment risks be reflected in a risk assessment?
A risk assessment can consider the settings, roles, and relationships where employees interact with external parties, since exposure to third-party conduct varies by function and context. Identifying higher-exposure roles is intended to inform where controls, training emphasis, and monitoring may be directed. The risk assessment is a distinct program element and does not by itself resolve incidents; its value depends on how findings are acted upon.
What should managers understand about their role in responding to third-party harassment?
Managers are often a point of contact when employees raise concerns about external parties, so training may focus on how they recognize reports, escalate appropriately, and avoid dismissing conduct because the source is a customer or vendor. Manager response is generally regarded as an important part of consistent handling, but appropriate actions can depend on local law and the specific relationship involved, and complex situations may require qualified legal counsel.
Common misconceptions
Employers have no responsibility for harassment committed by customers, clients, or other non-employees.
In many jurisdictions employers may bear responsibility depending on what they knew or should have known and whether they took reasonable action within their control. The specific legal standard varies by jurisdiction and should be confirmed with qualified counsel; this entry is not legal advice.
Third-party harassment is the same as coworker or supervisor harassment and can be handled identically.
The protected-characteristic concepts may overlap, but the source of the conduct is a non-employee, which limits the disciplinary tools available to the employer and shifts the focus toward the reasonableness of the employer's response given its degree of control.
Providing anti-harassment training resolves the organization's obligations regarding third-party harassment.
Training is only one component of a larger response framework that may include reporting channels, investigation and response processes, and policies. Training may support awareness and reporting but does not on its own guarantee prevention or satisfy an organization's full obligations, and outcomes depend on implementation and context.
Best practices
Establish clear reporting channels that explicitly cover harassment by non-employees such as customers, vendors, and contractors, and communicate that these channels apply to third-party conduct.
Include third-party harassment scenarios in training modules so workers and managers can recognize the conduct and understand how to report and respond, treating training as one component rather than a complete solution.
Define a response process that reflects the organization's actual degree of control over the third party, since disciplinary tools available for employees generally do not apply to non-employees.
Confirm the specific legal obligations and standards that apply in each relevant jurisdiction with qualified legal counsel, as requirements vary and this guidance is educational rather than legal advice.
Document reports and the organization's responses to support a demonstrable, reasonable approach, while avoiding any assumption that documentation alone guarantees legal protection.
Address both the compliance dimension (adherence to applicable law and policy) and the ethics dimension (protecting workers and fostering a respectful environment) without treating the two as interchangeable.