What SMEs Need to Know About the UK’s New Sexual Harassment Laws (and Why Whistleblowing Now Matters More Than Ever)

The UK is undergoing the most significant shift in workplace harassment law in a generation. For SMEs, the changes are not just legal technicalities, they fundamentally reshape how organisations must prevent, detect, and respond to sexual harassment.

Critically, these reforms move businesses from a reactive stance to a proactive, system-driven approach, with whistleblowing processes now at the heart of compliance.

What’s Changed (and When)

1. October 2024: A New Preventative Duty

From October 2024, employers are legally required to take “reasonable steps” to prevent sexual harassment before it happens - not just respond after the fact.

This includes:

• Anticipating where harassment risks may arise
• Taking action to mitigate those risks
• Covering harassment from employees and third parties (e.g. customers or suppliers)

This marked a major cultural shift: prevention is now a legal obligation, not a best practice.

2. April 2026: Sexual Harassment Becomes Whistleblowing

From 6 April 2026, sexual harassment will be explicitly classified as a “qualifying disclosure” under whistleblowing law.

This means:

• Employees reporting sexual harassment are automatically protected from retaliation or dismissal
• Concerns can be raised even if harassment is likely to occur, not just after it happens
• Workers no longer need to “fit” complaints into other legal categories (e.g. health and safety breaches)

In short: speak-up systems are no longer optional - they are legally critical.

3. October 2026: The Bar Gets Higher

From October 2026, the duty strengthens further. Employers must take “all reasonable steps” to prevent sexual harassment.

At the same time:

• Liability extends clearly to third-party harassment
• Expectations around documentation, training, and monitoring increase significantly

This raises the compliance bar, especially for SMEs without formal HR infrastructure.

What This Means for SMEs

For smaller organisations, these changes can feel disproportionate. But regulators are clear: size does not remove responsibility.

The key shift is this:

It’s no longer enough to have a policy. You must prove your system works.

That means SMEs need to rethink three core areas.

1. From Policies to Proof

Having an anti-harassment policy is now just the starting point. SMEs must demonstrate:

• Active risk assessments (where could harassment occur?)
• Ongoing training and awareness
• Evidence that action is taken when risks are identified

If a claim reaches tribunal, failure to show preventative action could increase compensation by up to 25%.

2. Whistleblowing Is Now a Core Compliance Tool

The 2026 reform fundamentally links sexual harassment to whistleblowing.

This creates new expectations:

• Employees must have safe, confidential ways to report concerns
• Reports must be tracked, investigated, and resolved consistently
• Businesses must demonstrate non-retaliation protections in practice

For SMEs, informal reporting (e.g. “just tell your manager”) is no longer sufficient.

3. Third-Party Risk Can’t Be Ignored

Hospitality, retail, healthcare, and service-based SMEs are particularly exposed.

From 2024, and more strongly in 2026, employers are expected to:

• Identify risks from customers, clients, and suppliers
• Put safeguards in place (training, escalation routes, contractual controls)
• Act when issues arise

This significantly expands the scope of responsibility beyond internal culture.

How SMEs Should Adapt (Practical Steps)

To stay compliant—and build a healthier workplace, SMEs should focus on five practical actions:

1. Integrate Harassment Into Whistleblowing Systems

Treat sexual harassment as a reportable risk category, not a standalone HR issue.

2. Upgrade Reporting Channels

Provide:

• Anonymous reporting options
• Clear escalation pathways
• Timely feedback loops

3. Centralise Case Management

Track:

• Reports
• Investigations
• Outcomes

This creates an audit trail - critical for legal defence.

4. Train Managers Differently

Managers need to:

• Recognise early warning signs
• Handle disclosures correctly
• Avoid behaviours that could be seen as retaliation

5. Monitor and Improve

Regularly review:

• Reporting trends
• Resolution times
• Employee confidence in the system

Where Platforms Like Continual Fit In

For many SMEs, the challenge isn’t intent—it’s execution.

This is where platforms like Continual can play a meaningful role, not as a “nice-to-have,” but as infrastructure.

A modern compliance platform helps SMEs:

• Centralise whistleblowing and incident reporting in one place
• Ensure consistent, documented investigation workflows
• Provide confidential reporting channels that employees trust
• Surface patterns and risks early, before they escalate

Importantly, this aligns directly with the legal shift toward proactive prevention and demonstrable action.

Rather than relying on fragmented emails, spreadsheets, or ad hoc processes, SMEs can build a repeatable, defensible system, without needing a large HR or legal team.

Final Thought: This Is a Culture Shift, Not Just a Compliance Task

The direction of travel is clear.

UK employment law is moving toward:

• Greater employee protection
• Stronger employer accountability
• A requirement for systems, not intentions

For SMEs, the opportunity is to get ahead early.

Those that embed sexual harassment into their whistleblowing processes, supported by the right tools and workflows, won’t just meet legal requirements. They’ll build safer, more transparent, and ultimately more resilient organisations.

‍