When a manager keeps making humiliating comments, a coworker starts sending offensive messages in chat, or a customer repeatedly crosses the line, the problem is not “office drama.” It may be workplace harassment, and it can create legal exposure, lost productivity, and lasting harm for everyone involved. This guide explains what harassment at workplace really means, how to identify it, how the law treats it, and what to do next.
CompTIA Security+ Certification Course (SY0-701)
Master essential cybersecurity skills and confidently pass the Security+ exam with our comprehensive course designed to boost your problem-solving speed and real-world application.
Get this course on Udemy at the lowest price →Quick Answer
Workplace harassment is unwelcome conduct that is offensive, intimidating, hostile, or abusive and may become unlawful when it targets a protected characteristic or creates a hostile work environment. The safest response is to document the behavior, report it through the employer’s process, and preserve evidence such as emails, chat logs, and screenshots.
Quick Procedure
- Document each incident with dates, times, exact words, and witnesses.
- Save all evidence, including email, chat messages, screenshots, and voicemails.
- Set a clear boundary if it is safe to do so.
- Report the behavior through HR, a supervisor, a hotline, or another official channel.
- Escalate externally if the response is delayed, retaliatory, or ineffective.
| Primary focus | 10 things that are illegal for your employer to do, as of July 2026 |
|---|---|
| Core legal anchor | Unlawful harassment under Title VII of the Civil Rights Act, as of July 2026 |
| Common protected traits | Race, color, religion, sex, national origin, age, disability, genetic information, as of July 2026 |
| Common channels | In person, email, chat, video meetings, texts, and shared work tools, as of July 2026 |
| Best first response | Document, report, preserve evidence, and request corrective action, as of July 2026 |
| Official guidance source | U.S. Equal Employment Opportunity Commission, as of July 2026 |
| Training relevance | Strong overlap with cyber awareness, reporting discipline, and employee conduct covered in the CompTIA® Security+™ Certification Course (SY0-701), as of July 2026 |
What Workplace Harassment Really Means
Workplace harassment is unwelcome conduct that is offensive, intimidating, hostile, or abusive enough to interfere with someone’s ability to do the job or feel safe doing it. It is not limited to shouting or obvious threats. A pattern of mocking, exclusion, slurs, sexual comments, or targeted humiliation can qualify even if the person doing it claims they were “just joking.”
The key issue is impact. Harassment workplace complaints usually arise when behavior is repeated, severe, or both, and when a reasonable person would see the conduct as harmful. A single serious incident can also cross the line if it is extreme enough, such as a threat, a physical advance, or a deeply degrading public act.
It helps to separate harassment from ordinary conflict. A blunt performance review, a disagreement over deadlines, or a firm correction from a manager is not automatically harassment. The difference is whether the conduct is unwelcome, tied to identity or power abuse, and creating a hostile or degrading environment.
Harassment is not measured by whether the offender meant harm. It is measured by whether the conduct was unwelcome, targeted, and disruptive enough to damage safety, dignity, or job performance.
- Unwelcome conduct: the target did not invite it and does not want it to continue.
- Hostile environment: the behavior becomes so persistent or severe that work is affected.
- Power imbalance: supervisors, senior staff, or clients can create more pressure and fear.
- Single serious event: one severe act may be enough to trigger a legal or policy response.
What Laws Protect Workers?
In the United States, the federal baseline for workplace harassment comes from Title VII of the Civil Rights Act, which prohibits harassment based on protected characteristics such as race, color, religion, sex, and national origin. The Age Discrimination in Employment Act protects workers age 40 and older, and the Americans with Disabilities Act addresses disability-based harassment and related discrimination.
The Genetic Information Nondiscrimination Act also matters when harassment is tied to genetic information. For practical guidance, the EEOC’s harassment page is the most direct official resource for understanding how federal rules are applied in real cases: EEOC harassment guidance.
State and local laws can be broader than federal law. Some jurisdictions add protections for marital status, gender identity, sexual orientation, caregiver status, or other categories. Employers cannot assume that compliance with federal law is enough if state or city rules go further.
Who is doing the harassing also matters. A supervisor’s conduct can trigger employer liability differently from coworker misconduct, and third-party harassment from clients, vendors, or customers can still create legal and policy problems. That distinction is one reason investigations must be fast, documented, and impartial.
- Supervisor harassment: often treated more seriously because of direct authority.
- Coworker harassment: still actionable when the employer knew or should have known and failed to act.
- Third-party harassment: customer or vendor behavior can still require employer intervention.
What Are the 10 Things That Are Illegal for Your Employer to Do?
Many readers search for 10 things that are illegal for your employer to do because they want a practical boundary line, not a legal lecture. The short version is that employers cannot lawfully harass, retaliate, discriminate, ignore complaints, or permit a hostile environment tied to protected traits. They also cannot use silence, fear, or informal pressure to keep people from reporting problems.
Here are the ten most common illegal or high-risk behaviors in a workplace harassment context. Not every bad management act is illegal, but each of these can become unlawful depending on the facts, the protected class involved, and the employer’s response. For official federal context, the EEOC and the U.S. Department of Labor are the best starting points: EEOC and U.S. Department of Labor.
| Illegal or high-risk conduct | Why it matters |
|---|---|
| Harassing based on protected traits | Creates direct Title VII, ADA, ADEA, or related exposure. |
| Retaliating after a complaint | Discourages reporting and often becomes a separate violation. |
| Ignoring a complaint | Allows the hostile environment to continue and worsen. |
| Using threats or intimidation | Can pressure employees into silence and make the environment abusive. |
| Permitting supervisor abuse | Supervisors carry the employer’s authority, so risk rises quickly. |
| Allowing third-party harassment | Customers and vendors do not erase the employer’s duty to respond. |
| Treating digital abuse as “not real” | Email, chat, and video harassment can be just as damaging as in-person conduct. |
| Spreading humiliating rumors | Can support hostile environment and defamation-related concerns. |
| Blocking reporting channels | Prevents employees from using the system designed to protect them. |
| Unequal enforcement of policy | Selective discipline can show bias or discriminatory treatment. |
That list is useful because it turns a broad question into something a manager or employee can actually check. If a policy says complaints can be made without retaliation, but the complainant gets sidelined, reassigned, or mocked afterward, the employer may have created a second problem on top of the first. The same is true when a company “investigates” by warning the accused first, coaching witnesses, or burying the file.
Which Behaviors Count as Harassment?
Harassment can be verbal, physical, visual, sexual, or digital. The common thread is that the conduct is unwelcome and harmful, not just impolite. In many harassment at workplace cases, the first warning sign is not one dramatic event but a slow pattern of behavior that gets normalized because people are uncomfortable confronting it.
Verbal, physical, and visual conduct
Verbal harassment includes slurs, insults, threats, repeated mockery, degrading nicknames, and “jokes” that target someone’s identity or body. Physical harassment includes unwanted touching, blocking a doorway, invading personal space, or damaging property in a threatening way. Visual harassment includes offensive images, symbols, graffiti, notes, or screens left up intentionally to humiliate someone.
Sexual harassment is a major subset of these behaviors. It includes unwanted advances, coercive pressure, sex-based comments, quid pro quo demands, and a work environment saturated with sexualized hostility. The EEOC explains that harassment can be illegal when it is severe or pervasive enough to affect work conditions: EEOC harassment facts.
Digital harassment matters too
Digital harassment is real harassment. Offensive email threads, repeated hostile chat messages, humiliating GIFs, private texts, and hostile behavior in video meetings can all create a hostile environment. A screenshot in Slack or Teams can be just as important as a witness statement in a conference room.
- Email: repeated hostile tone, threats, or discriminatory remarks.
- Chat: public shaming, sarcasm, dogpiling, or exclusion from work channels.
- Video meetings: mocking backgrounds, interruptions, or hostile comments on camera.
- Text messages: after-hours pressure, intimidation, or unwanted personal comments.
A practical example: a female supervisor berates a male trainee on three separate occasions in counseling sessions. The supervisor’s comments were loud enough for other trainees and employees to hear, intimidating, threatening, and laced with profanity. Can this be viewed as workplace harassment? The answer is yes, if the supervisor targeted the employee based on an unreasonable action that created a hostile work environment, especially if the conduct was tied to protected status or was severe enough to alter the conditions of work. The legal label depends on the facts, but the risk is obvious.
How Do I Tell Harassment From Bullying or Rudeness?
Bullying is repeated harmful behavior that may not always be tied to a protected characteristic. Harassment becomes a legal issue when the bullying overlaps with discrimination, hostile environment conduct, or retaliation. That distinction matters because many workplaces have bad behavior that is still not automatically unlawful, but it can still be dangerous and should still be addressed.
General rudeness is different again. A manager can give hard feedback, reject a request, or assign difficult work without crossing into harassment. The line gets crossed when the behavior becomes humiliating, targeted, repeated, or tied to identity, disability, sex, age, race, or another protected trait. Intention alone does not save the conduct if the effect is abusive.
A useful test is to ask four questions: Was the conduct unwelcome? Was it repeated or severe? Was it connected to a protected trait or a power imbalance? Did it affect the employee’s work or sense of safety? If the answer is yes to several of those questions, the behavior deserves immediate attention.
Harsh management is not the same thing as unlawful harassment. Repeated humiliation, exclusion, or threats are what turn “tough leadership” into a workplace liability.
Consider the question many people search for: a group of employees begins making demeaning comments to their disabled coworkers. They also call them rude nicknames. A manager participates in the behavior. The disabled coworkers complain, but the employer does nothing. Is this systemic harassment? Yes, because it affected a group of people in a protected class, and the manager’s participation makes the pattern more serious. Once management joins the conduct and the employer ignores the complaint, the risk escalates quickly.
Where Does Workplace Harassment Happen Today?
Workplace harassment can happen anywhere work happens. It is not limited to the office floor or a supervisor’s desk. The modern harassment workplace includes cubicles, warehouses, retail counters, parking lots, ride-along vehicles, video meetings, shared drives, chat channels, and off-site events.
Remote and hybrid teams create new ways for harmful conduct to spread. A joke in a meeting chat, a mocking reaction emoji, or a private message sent after hours can have the same chilling effect as a comment made in front of a room. The fact that the team is not physically together does not reduce the employer’s responsibility to respond.
Third-party harassment is also common. Customers may be rude, vendors may be aggressive, and clients may make discriminatory remarks. Employers cannot always control the source, but they can control the response. That usually means removing the individual from the interaction, warning the business partner, documenting the incident, and making a safer work arrangement where possible.
- On-site locations: offices, break rooms, loading docks, and parking areas.
- Remote tools: email, Slack, Teams, Zoom, and shared project boards.
- Travel and events: conferences, client dinners, and training sessions.
- Field work: service calls, job sites, and vehicle-based work.
The core issue is exposure. If the employee must keep working in the same environment, the harassment continues to affect performance, confidence, and safety even when it is “only online.”
How Should You Respond if You Experience Harassment?
The first priority is to document. Write down what happened as soon as possible, including the date, time, location, people present, exact words used, and any follow-up messages. If the conduct happened in digital tools, save screenshots and export the thread before it can be deleted.
Good documentation is specific. “He was rude” is weak. “On June 14 at 9:10 a.m. in the Teams meeting, he said, ‘You people are all useless,’ while pointing at me and two coworkers” is far better. That level of detail helps HR, legal, or an investigator see the pattern and assess credibility.
- Record the incident in a private log or secure note immediately.
- Preserve evidence such as emails, texts, screenshots, voicemails, and photos.
- Set a boundary if it is safe and appropriate to do so.
- Report internally through HR, a supervisor, a hotline, a union rep, or another designated path.
- Escalate externally if the employer ignores the issue or retaliates.
Not every situation requires a direct confrontation, especially if the other person has more power or has already shown retaliatory behavior. In those cases, reporting through the established channel is often the safer move. If the conduct is severe, ongoing, or legally sensitive, consider external guidance quickly rather than waiting for the issue to resolve itself.
Pro Tip
Keep a personal copy of reports and evidence outside company systems if policy and law allow it. If access to your work account is cut off later, you still have the timeline, messages, and names you need.
How Should Employers Investigate and Respond?
A proper investigation is prompt, impartial, and documented. Employers who wait too long, interview only the accused, or rely on hallway gossip usually make the problem worse. A good investigator collects facts first, then reaches conclusions based on evidence rather than assumptions.
That process normally includes separate interviews with the complainant, the accused, and witnesses. The investigator should ask for dates, exact language, screenshots, prior incidents, and any retaliation that followed. If a manager was involved, the investigation must be even more careful because supervisor conduct can signal a wider culture problem.
Confidentiality matters, but absolute secrecy is unrealistic. Employees should be told that the company will share information only on a need-to-know basis, while still doing enough fact-finding to address the complaint. Retaliation prevention should start immediately and remain active after the investigation closes.
- Acknowledge the complaint and explain next steps.
- Preserve evidence before messages or files disappear.
- Interview relevant parties separately and document each statement.
- Assess policy and legal violations against the facts collected.
- Apply corrective action proportionate to the conduct.
- Monitor for retaliation for weeks or months after resolution.
Corrective action may include discipline, coaching, separation of employees, training, or policy updates. The point is not simply to close the case. The point is to stop the conduct, reduce recurrence, and show that complaints are treated seriously.
What Are Employer Responsibilities Under Law and Best Practice?
Employers have a duty to maintain a workplace free from unlawful harassment and to provide reporting channels that actually work. A policy that sits in a handbook but is never explained, enforced, or monitored is not enough. Employees need to know where to report, what happens next, and how the company protects them from retaliation.
Manager accountability is central. Supervisors set the tone, decide who gets heard, and often determine whether a complaint is ignored or escalated. If a manager is part of the problem, the organization has to route the complaint around that person immediately. Allowing the accused to control the process is a classic abuse of power in the workplace.
Consistent enforcement matters just as much as written policy. If one employee is disciplined for a joke and another is not, the policy starts to look selective and unreliable. That inconsistency can erode trust fast and may also create discrimination risk if enforcement tracks favoritism or bias.
- Clear channels: HR, hotline, manager, union, or ethics reporting path.
- No retaliation: promotion, schedule, pay, and assignments must not be used as punishment.
- Policy communication: employees should receive and acknowledge the rules.
- Routine review: anti-harassment policies should be updated and tested.
Best-practice employers also review complaint trends. A single complaint may be individual misconduct. Ten complaints about the same team, shift, or manager usually point to a process problem that needs broader correction.
How Can Employers Prevent Harassment Before It Starts?
Prevention starts with leadership behavior. If executives and managers tolerate insults, “locker room” comments, or retaliation, employees will assume the company does not mean what it says. A safer culture is built by showing that respectful conduct is expected from day one and enforced every day.
Training should be practical, not generic. Employees need to know how to recognize harassment, interrupt it safely, and report it without guesswork. Managers need separate guidance on handling complaints, documenting concerns, and avoiding retaliation. This is one place where IT teams and security-aware organizations often understand the value of repeatable process, because the same discipline used in incident response also applies to conduct response.
Onboarding should include real scenarios, not just policy acknowledgment. Annual refreshers should cover current tools and realistic situations: chat misconduct, remote-meeting interruptions, customer abuse, and public shaming. That keeps the policy connected to day-to-day work instead of turning it into a forgotten compliance document.
Note
Tracking complaint themes is one of the fastest ways to spot systemic risk. Repeated issues involving one manager, one shift, or one location usually mean the policy exists on paper but not in practice.
- Leadership example: leaders must model the standard they expect.
- Bystander intervention: coworkers should know how to interrupt safely.
- Early resolution: small issues should be addressed before they harden into patterns.
- Metrics: complaints, repeat offenders, and response time should be tracked.
What Should You Do in Remote, Hybrid, and Digital Workplaces?
Remote work does not reduce harassment risk; it changes the shape of it. Policies should explicitly cover video meetings, collaboration platforms, direct messages, email, and shared documents. If the policy only mentions “office conduct,” it misses the place where many modern conflicts actually happen.
Tone is especially tricky in digital channels. Sarcasm, short replies, emojis, and side chats can be misused to isolate or humiliate someone. Screenshots can also spread fast, which means a single offensive post can move from one channel into a broader reputational problem within minutes.
Managers in hybrid teams should pay attention to inclusion signals. Who gets interrupted? Who is left out of meetings? Who is excluded from private channels where decisions are made? In a remote environment, harassment sometimes looks like silence, exclusion, or repeated technical “accidents” that happen to one person more than everyone else.
- Set channel rules for public and private communication.
- Review meetings for participation imbalance and hostile tone.
- Investigate screenshots and logs as seriously as in-person witness reports.
- Address after-hours pressure if it becomes coercive or abusive.
One practical standard works well: if a message would be inappropriate on a conference room screen, it is probably inappropriate in chat too. Digital tools are not a loophole.
How Do Real-World Scenarios Change the Analysis?
Case examples help because harassment often hides inside everyday behavior. A joke that lands once may be brushed off. The same joke repeated for weeks becomes a pattern. Once the pattern is visible, the response should be immediate: document, report, investigate, and correct.
Scenario one: coworkers keep making jokes about a colleague’s age and call him “grandpa” in meetings. He asks them to stop, but the behavior continues. If the comments are tied to age and affect the work environment, this is more than poor humor. It can support an age-based harassment claim and should be handled under policy and law.
Scenario two: a remote worker receives hostile messages in a team chat after reporting an error. The messages include mocking tone, public shaming, and exclusion from a project channel. That is not harmless online banter. It is digital harassment that can create a toxic environment just as effectively as in-person abuse.
Scenario three: a customer repeatedly makes racist comments to a retail employee, and the supervisor tells the employee to “just deal with it.” That is a response failure. Employers still have an obligation to protect employees from known harassment, even when the behavior comes from a paying customer.
Scenario four: a supervisor pressures a subordinate for a personal relationship, then cuts shifts after rejection. That is a classic power-imbalance case and may also involve retaliation. The employee should preserve evidence and escalate quickly.
- Identify the pattern rather than treating each event in isolation.
- Match the conduct to protected traits, power dynamics, or retaliation.
- Use the reporting system immediately.
- Force a real investigation with evidence and witnesses.
- Correct the environment so the same behavior does not continue.
Where Can Employees and Employers Get Help?
Start with internal policy, the employee handbook, and any reporting procedure that the company has already published. If the policy is confusing, outdated, or hidden, that itself is a problem. Employees should know who receives complaints, and managers should know exactly what to do when a report lands on their desk.
For U.S. guidance, the EEOC is the most authoritative first stop for workplace harassment definitions and complaint information. The Department of Labor is useful for broader workplace standards, and the National Institute for Occupational Safety and Health provides useful material on work-related stress and safety concerns: NIOSH. Employers should also check state labor agencies, since local rules can be more protective than federal law.
Employees may need HR support, union assistance, legal counsel, or outside advocacy help depending on the facts and severity. Employers, meanwhile, should regularly review whether their reporting channels, training, and investigation procedures actually work under pressure. A policy is only useful if people trust it enough to use it.
- Employees: document, report, and preserve proof.
- HR teams: investigate quickly and keep records.
- Managers: stop conduct early and escalate concerns.
- Leadership: enforce policy consistently and visibly.
Key Takeaway
Workplace harassment is harmful, unwelcome conduct that can become unlawful when it targets protected traits, relies on power abuse, or creates a hostile work environment.
Documentation matters because specific details, screenshots, and witness names make complaints actionable.
Employers reduce risk by responding quickly, investigating impartially, preventing retaliation, and enforcing policy consistently.
Remote and digital harassment counts too; email, chat, video, and private messages are part of the workplace.
CompTIA Security+ Certification Course (SY0-701)
Master essential cybersecurity skills and confidently pass the Security+ exam with our comprehensive course designed to boost your problem-solving speed and real-world application.
Get this course on Udemy at the lowest price →Conclusion
Workplace harassment is not just a personality clash. It is harmful, unwelcome conduct that can undermine safety, dignity, performance, and trust. It can happen in person or online, from a coworker, supervisor, customer, or vendor, and it becomes more serious when it targets a protected characteristic or is ignored after being reported.
The practical answer to 10 things that are illegal for your employer to do is simple: employers cannot use harassment, retaliation, intimidation, silence, or unequal enforcement to control people at work. Employees should document problems early, report through the proper channels, and escalate when the response is inadequate. Employers should investigate fast, correct the behavior, and prevent it from happening again.
If you are dealing with harassment at workplace, do not rely on memory alone. Write it down, save the evidence, and use the reporting process. If you manage people, treat every complaint as a serious operational issue, because it is one. ITU Online IT Training encourages leaders and employees alike to approach workplace conduct with the same discipline they would apply to security incidents: identify the problem, preserve the evidence, respond quickly, and close the gap before it spreads.
CompTIA®, Security+™, and EEOC are referenced for educational context only. CompTIA® and Security+™ are trademarks of CompTIA, Inc.
