Third-Party Harassment: Customer Behavior Is Your Problem

Belief: harassment by customers, vendors, or other non-employees is not the employer’s exposure because the employer does not control the harasser.

FEHA liability for third-party harassment turns on response, not control. The standard is whether the employer knew or should have known and failed to take immediate and appropriate corrective action. Control over the harasser is not required. The harasser can be a regular customer, a vendor’s representative, a contractor’s crew member, a patient, or a member of the public — if the conduct creates a hostile environment and the employer’s response is inadequate, the employer is on the hook.

The operational failure pattern is the dismissal at the frontline. An employee tells the shift manager that a regular customer makes comments every time he comes in. The manager says some version of “it’s the cost of doing business” or “just smile and move on.” Nothing gets written down. Nothing gets routed to HR or to the owner. The next time the employee complains — usually after the conduct escalates — the file shows no prior notice, no investigation, no corrective steps, and no documentation that the employer ever knew.

The proof pressure point is the response file. Courts ask whether the complaint was taken seriously, whether there was a prompt investigation, whether steps were taken to stop the exposure, and whether the employee was protected. Control over the harasser is not the test. What the employer did with what it knew is the test. The available corrective actions are wider than most SMB owners realize — reassigning the affected employee, limiting customer contact, warning the customer in writing, restructuring the reporting relationship, refusing service, and, if necessary, terminating the business relationship. Each of those is a documented step that shifts the analysis.

The defensible posture is to treat customer-and-vendor harassment complaints the same way employee-on-employee complaints get treated. Intake. Investigation. Corrective steps. Documentation. The reflex to dismiss “customer stuff” as outside the employer’s lane is exactly the reflex that creates liability.

When response is the standard and control is irrelevant, the absence of a response file is the case.

This post shares general information based on common patterns I see in California workplaces. It is not legal advice, does not create an attorney-client relationship, and outcomes depend on specific facts — no lawyer can guarantee a result. Past results do not guarantee or predict future outcomes. AI may have been used to create this post. All content reviewed by a CA attorney before publication.