What information should I receive when harassment or sexual misconduct

Overview

When you report harassment or sexual misconduct by a member of staff, the organisation will usually handle it under an internal grievance, disciplinary or dignity-at-work procedure, and it will keep the process confidential. Confidentiality does not mean you are entitled to nothing. There is a recognised tension between the accused person’s privacy and data protection rights on the one hand, and your legitimate interest as complainant in knowing that your concern was taken seriously and dealt with on the other. What you are entitled to receive depends partly on the type of organisation (a private employer, a public body, or a university, each of which may have its own binding policy), and partly on general law.

The answer below sets out what good practice and the relevant guidance say you should be told, what the law adds, and where the limits sit.

What you should normally be told about the outcome

Guidance from ACAS and from the Equality and Human Rights Commission on handling sexual harassment complaints is clear that the person who complained should be told the outcome. In practice this means the organisation should confirm to you:

1. That the investigation or process has concluded.

2. Whether the complaint was upheld, partly upheld, or not upheld.

3. In broad terms, the reasons for that conclusion, so the outcome does not appear arbitrary.

4. Whether any appeal route is open to you, and how and by when to use it.

5. Any steps that directly affect you, for example changes to reporting lines, working arrangements, or measures to keep you and the accused apart.

The EHRC technical guidance and ACAS both stress prompt, clear communication of the outcome to the complainant, and outlining any appeals process. If you have simply been told “the matter has been dealt with” with nothing further, that generally falls short of good practice, and you can reasonably ask for the elements above in writing.

What you are usually not automatically entitled to

The confidentiality of the procedure genuinely does limit what can be shared. You are generally not entitled to be told:

The precise disciplinary sanction imposed on the individual, for example whether they received a written warning, were dismissed, or resigned. This is treated as the other person’s personal data and part of the confidential employment relationship between the organisation and its staff member. Organisations will often confirm only that “appropriate action has been taken.”

The detailed contents of witness statements, the investigation report, or third parties’ personal information.

Information that would identify other complainants or witnesses.

There are limited exceptions. If a sanction directly and necessarily affects you, some detail may properly be shared, for example that the person will no longer supervise you or has been moved to a different site.

The data protection dimension

Under UK GDPR and the Data Protection Act 2018 you have a right to make a subject access request for your own personal data. An investigation file about your complaint will usually contain your personal data, so a subject access request can be a route to see some of the material. However, the organisation can redact or withhold:

Information that is the personal data of other people (particularly the accused and witnesses) where disclosure would not be reasonable, applying the balancing exercise in the DPA 2018 and the ICO’s guidance on mixed personal data.

Material covered by other exemptions, such as legal professional privilege or, in limited cases, information that would prejudice an ongoing investigation.

So a subject access request will usually get you your own account and correspondence, and possibly a redacted version of findings, but rarely the full unredacted file or the details of another person’s discipline. Data protection gives you access rights to your data; it is not a general right to know how another employee was punished.

If this is a university or student context

If you are a student and the member of staff is a university employee, the position is layered. The university’s own student complaints procedure and its staff disciplinary procedure are usually separate, and its published policy is binding on it. Good practice, reflected in guidance from the Office for the Independent Adjudicator for Higher Education, is that a student complainant should be told the outcome of their complaint and whether it was upheld, together with the reasons, even if the detail of staff disciplinary action is withheld as confidential. If the university has a specific sexual misconduct policy, check what it promises complainants, because you can hold the university to its own published commitments. If you exhaust the internal process and remain dissatisfied, the OIA can review whether the university followed its procedures fairly.

How different facts change the position

The label matters less than the underlying conduct. “Harassment” and “sexual misconduct” can range from unwanted comments to conduct that is also a criminal offence such as sexual assault. Where the behaviour may be criminal, you also have the option of reporting to the police, and a police investigation runs separately from any HR process. The organisation can still deal with the workplace or campus aspect under its own procedures.

Whether the conduct meets the legal definition of harassment under the Equality Act 2010 depends on the facts, in particular whether it was unwanted conduct related to a protected characteristic (or of a sexual nature) that had the purpose or effect of violating your dignity or creating an intimidating, hostile, degrading, humiliating or offensive environment. An organisation may decide conduct was inappropriate and dealt with it, without formally labelling it unlawful harassment, and that can be a legitimate outcome rather than a failure to act.

If the organisation genuinely investigated and reached a reasoned conclusion you disagree with, that is different from a case where it did nothing, failed to keep you safe, or failed to tell you anything. The remedies differ accordingly.

Practical next steps

1. Ask in writing for a clear statement of the outcome: whether the complaint was upheld, the broad reasons, any appeal route and deadline, and any protective measures that affect you. Frame it as a request under the organisation’s own procedure.

2. Check the specific policy the organisation used (grievance, dignity at work, or sexual misconduct policy) and identify exactly what it promises to tell complainants. Hold them to their own wording.

3. If you want the underlying material about you, consider a subject access request, expecting redactions of others’ personal data.

4. Use the appeal or review stage if you are told the process was concluded but you believe it was inadequate, biased, or procedurally unfair.

5. Consider your ongoing protection. Since October 2024 employers are under a strengthened preventative duty in relation to sexual harassment, so it is reasonable to ask what steps are being taken to prevent recurrence and to keep you safe, separate from any question of individual punishment.

6. If internal routes are exhausted, external routes may be available depending on context: an employment tribunal claim (with strict time limits, normally three months less one day, and Acas early conciliation first) if you are an employee or worker and have suffered harassment or victimisation; the OIA if you are a student; the police if the conduct may be criminal.

Key missing facts

The precise answer turns on a few things you have not stated: whether you are an employee, worker, student or other user of the organisation; what type of organisation it is and what its specific policy says; whether the conduct may also be criminal; and exactly what you have already been told. If you can say which of these applies, the entitlements and the best route can be pinned down more precisely.