Your anti-harassment policy isn't just an HR formality. It's your legal defense if someone claims harassment or discrimination occurred at your company.

Most founders think "we're nice people, we don't need this yet" or "we'll just treat everyone fairly." What they don't realize: federal law requires anti-discrimination compliance from employee #1, and harassment claims can cost $50,000-$300,000 to defend even when you win.

The expensive truth: Without a written anti-harassment policy, you cannot prove you took reasonable steps to prevent harassment which means you lose your legal defense in harassment lawsuits. Some states (like New York and California) have specific policy requirements that go beyond federal minimums. Get this wrong, and you're personally liable.

Here are the questions that determine whether your policy protects your company or leaves you exposed.

Section 1: Understanding What You're Prohibiting

1. Which protected classes does your policy cover?

Federal baseline (applies in all states): Race, color, religion, sex (including pregnancy, sexual orientation, gender identity per recent EEOC guidance), national origin, age (40+), disability, genetic information.

Colorado additions (C.R.S. § 24-34-402):

California additions (FEHA - Fair Employment and Housing Act):

New York additions (NY Human Rights Law):

Texas: Follows federal minimums for private employers; no additional state-protected classes for private companies under 15 employees.

Florida: Follows federal minimums; some local ordinances (Miami-Dade, etc.) add protections.

Your policy language should state: "This Company prohibits discrimination and harassment based on race, color, religion, sex (including pregnancy, sexual orientation, gender identity, and gender expression), national origin, age, disability, genetic information, [plus any state-specific additions for your location]."

2. How are you defining "harassment" vs. "discrimination"?

Discrimination: Adverse employment action (hiring, firing, promotion, pay, benefits) based on protected class.

Example: Paying a female engineer $90,000 while paying male engineers with similar experience $110,000 for the same role.

Harassment: Unwelcome conduct based on protected class that creates a hostile work environment OR results in a tangible employment action (quid pro quo).

Hostile environment harassment requires:

Your policy must define both: "Harassment includes verbal, physical, or visual conduct based on a protected characteristic that creates an intimidating, hostile, or offensive work environment. A single severe incident or a pattern of pervasive conduct may constitute harassment."

3. Are you specifically addressing sexual harassment?

Why it needs separate attention: Sexual harassment has specific legal standards and is the most frequently litigated harassment claim.

Two types to define:

Quid pro quo: "Submit to sexual advances or lose your job/promotion/raise."

Hostile environment: Unwelcome sexual advances, requests for sexual favors, sexually explicit comments, inappropriate touching, sexual jokes, display of sexual materials, etc.

New York requires specific sexual harassment policy language (Labor Law § 201-g): Your policy must meet or exceed New York's model policy if you have ANY employees in NY. The policy must include specific examples of prohibited conduct, complaint procedures, investigation procedures, and remedial actions.

California requirement: Policy must be in writing, provided to all employees (including temporary and seasonal), and include information about harassment based on sex, gender identity, gender expression, and sexual orientation.

4. What specific examples are you including?

Don't just list protected classes. Give concrete examples of prohibited conduct:

Racial harassment examples:

Sexual harassment examples:

Why examples matter: Generic policies don't create awareness. Specific examples show employees what crosses the line.

Texas consideration: While Texas has minimal state requirements, federal standards apply. Be specific enough that employees understand what's prohibited.

Section 2: Reporting & Investigation Procedures

5. Who can employees report harassment to?

The multiple-channel requirement: Never require employees to report only to their direct manager (who might be the harasser).

Required language: "Employees who believe they have experienced or witnessed harassment or discrimination should immediately report to:

Small company: If you're 3 people and don't have HR, name at least two people: "Report to the CEO or to [board member/outside attorney]."

New York requirement: Must provide multiple reporting channels and cannot require reporting solely to a supervisor.

6. What's your complaint investigation procedure?

Required elements:

1. Prompt investigation: "All complaints will be investigated promptly and thoroughly, generally within [X] business days of receipt."

2. Impartial investigator: "Investigations will be conducted by [HR/outside investigator/designated person] who has no direct involvement in the complaint."

3. Confidentiality (with limits): "The Company will maintain confidentiality to the extent possible, while conducting a thorough investigation. Some information must be shared with those involved in or witnessing the alleged conduct."

4. Documentation: "All complaints and investigations will be documented in writing."

5. Findings and action: "Upon completion of the investigation, the Company will take appropriate corrective action, up to and including termination, if harassment or discrimination is found to have occurred."

California requirement (AB 1825): Employers with 5+ employees must provide 2 hours of sexual harassment training to supervisors every 2 years. Your policy should reference this training requirement.

New York requirement: ALL employers must provide annual sexual harassment training to ALL employees. Training must be interactive and meet specific content requirements.

7. How are you protecting against retaliation?

The critical element: More retaliation claims succeed than underlying harassment claims. Your anti-retaliation policy may be more important than your harassment policy.

Required language: "The Company strictly prohibits retaliation against any employee who:

Retaliation includes any adverse action: termination, demotion, pay reduction, negative performance review, exclusion from meetings or opportunities, or any other action that would dissuade a reasonable person from reporting or participating in an investigation.

Employees who engage in retaliation will be subject to discipline up to and including termination."

Colorado specific (C.R.S. § 24-34-405): It's unlawful to retaliate against employees who oppose discriminatory practices or file charges with the Colorado Civil Rights Division.

Section 3: Responsibilities & Training

8. What are managers' specific obligations?

Manager accountability language: "Managers and supervisors have additional responsibilities:

Why this matters: Managers' knowledge of harassment can be imputed to the company. If a manager knew about harassment and did nothing, the company is liable.

New York supervisor training: Supervisors must complete interactive sexual harassment training that includes specific content on supervisor responsibilities.

9. What training are you providing and documenting?

Federal best practice: Train all employees on your policy within first 30 days of hire and annually thereafter.

New York mandate (Labor Law § 201-g):

California mandate:

Texas/Florida: No state training mandates, but strongly recommended as proof of good-faith harassment prevention.

Your policy should state: "All employees will receive harassment prevention training [annually/upon hire]. Managers and supervisors will receive additional training on their specific responsibilities. Attendance is mandatory, and completion will be documented."

10. How are you handling romantic relationships at work?

The dating policy question: Do you prohibit, discourage, or simply require disclosure of romantic relationships?

Risk-based approach:

Sample policy language: "The Company discourages romantic relationships between managers and their direct or indirect reports due to inherent conflicts of interest and potential for harassment claims. Any such relationship must be immediately disclosed to HR. The Company may transfer one party to eliminate the reporting relationship. Consensual relationships between co-workers without reporting relationships do not require disclosure but must remain professional and not disrupt the workplace."

California consideration: You cannot prohibit romantic relationships between consenting adults, but you can regulate workplace conduct and prohibit supervisor-subordinate relationships.

Section 4: State-Specific Requirements

11. Are you meeting New York's model policy requirements?

If you have ANY New York employees, your policy must include:

New York provides a model policy: You can adopt it verbatim or create your own that meets/exceeds it. Download from ny.gov.

12. Are you addressing Colorado's unique protections?

Lawful off-duty activities (C.R.S. § 24-34-402.5): Colorado prohibits discrimination based on lawful off-duty activities, including legal marijuana use.

Your policy should clarify: "While Colorado law protects lawful off-duty conduct including marijuana use, employees may not be under the influence of marijuana during work hours, and positions subject to federal drug testing requirements (DOT, federal contractors) remain subject to federal law."

LGBTQ+ protections: Colorado explicitly protects sexual orientation, gender identity, and gender expression. Your policy must include these.

13. Are you addressing third-party harassment?

The overlooked risk: Harassment by or of customers, vendors, contractors, clients.

Your policy should state: "This policy applies to harassment by or directed toward employees, contractors, vendors, customers, clients, and any other third parties. Employees who experience or witness third-party harassment should report it immediately. The Company will take appropriate action, which may include limiting or terminating business relationships with third parties who engage in harassment."

California requirement: Your policy must cover harassment by non-employees and explain employer's obligation to protect employees from customer/client harassment.

The Bottom Line

Your anti-harassment policy serves three critical functions:

Before you finalize your policy:

The cost of getting this wrong:

The cost of getting it right:

Your anti-harassment policy is required from employee #1. It's not something you "get to eventually;” it's a day-one essential that protects both your employees and your company.

This content is provided for informational purposes only and does not constitute legal advice; for guidance on your specific situation, please consult with an employment attorney licensed in your state.