Scope
Define who and what activities the policy covers, including off-site events, remote work, contractor interactions, and third-party conduct to ensure consistent application.
A complete policy reduces ambiguity, helps meet legal obligations under federal and state frameworks, and supports a safer workplace culture. It documents complaint pathways, encourages timely reporting, and provides evidence of proactive employer measures should enforcement or litigation arise.
HR teams normally draft and maintain the policy, with input from legal and senior leadership. Use an approved template to ensure consistency across locations.
Keep the policy accessible, formally distribute changes to staff, and document delivery and receipt for compliance and audit purposes.
Responsible for drafting and updating the policy, coordinating training, overseeing internal investigations, and maintaining retention records. The HR Director signs or certifies policy distribution when required.
Provides legal review for compliance with federal and state laws, advises on high-risk incidents, and authorizes amendments that affect liability or regulatory reporting.
Define who and what activities the policy covers, including off-site events, remote work, contractor interactions, and third-party conduct to ensure consistent application.
List examples of harassment, discrimination, and hostile conduct with clear behavioral definitions to reduce ambiguity and make investigations more objective.
Describe multiple reporting channels (anonymous hotlines, email, manager, HR) and clarify timelines for initial acknowledgment and next steps.
Outline investigation steps, typical timelines, confidentiality limits, investigator roles, evidence collection, and potential interim measures.
State explicitly that retaliation is prohibited, describe protections for reporters and witnesses, and provide examples of retaliatory actions.
Set training frequency, mandated audiences, monitoring metrics, and the process for updating content to reflect legal or organizational changes.
| Field | Configuration |
|---|---|
| Signer Authentication | Email plus SMS code or SSO for higher assurance |
| Acknowledgment Checkbox | Required field with timestamp and IP capture |
| Signature Order | Sequential for leadership approvals; parallel for bulk acknowledgments |
| Storage Location | Encrypted document store with role-based access |
Choose a platform that supports common document formats, secure storage, and integrations with your HR systems.
Confirm the platform can produce an audit trail, support records retention, and meet any industry privacy obligations before launching.
Acknowledge receipt within 1–2 business days to the reporting party.
Aim to conclude investigations within 30 calendar days when practicable.
Conduct mandatory prevention training at least annually, or as state law requires.
Review and update the policy at least annually or after material changes.
Retention begins on complaint closure or policy effective date, per record rules.
Finalize customized language and required fields before seeking approvals.
Obtain counsel review to confirm jurisdictional compliance and risk mitigation.
Distribute, collect acknowledgments, and record completion rates.
Measure training completion, complaint trends, and update policy annually.
A regional healthcare provider customized the template to include privacy protocols and anonymous reporting
A remote-first technology company added jurisdiction-specific language and multiple reporting channels