Workplace harassment complaints in Cyprus: the employer's investigation route

Triage the report under the correct legal route

Law 42(I)/2025 defines harassment as unwanted work-related conduct whose purpose or effect is to violate dignity and create an intimidating, hostile, degrading, humiliating or offensive environment. Its violence definition covers conduct, omissions and threats with possible physical, sexual, psychological or economic harm. A report need not use the legal word 'harassment' before the employer treats it seriously. Record the actual behaviour, people, dates and setting first, then decide what legal and internal processes may apply.

The statute's work setting is wider than a company building. It includes work-related travel, training and social events, digital communications, employer-provided accommodation and travel to and from work. It covers full-time and part-time staff, apprentices, some people in training, remote workers and even candidates where the relevant conduct occurred in recruitment. It can also reach customers, contractors and visitors. A manager should not reject an allegation because the message was sent on a personal phone after hours or the alleged actor is a customer.

Article 4 expressly excludes acts or omissions that constitute discrimination on specified protected grounds under the separate equality statutes, including sex and certain other characteristics. Sexual harassment may need the sex-equality route, which has distinct complaint and responsibility rules. Do not use this boundary as an excuse to refuse a report: capture the facts, take immediate safety steps and route it to the appropriate trained investigator or legal adviser. One event may raise several legal and employment issues requiring coordinated handling.

For the separate general hazard register, see workplace risk assessment.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025; Cyprus Department of Labour: complaint about discrimination at work

Maintain a usable code, policy and trained reporting contacts

Article 6 calls for preventive measures and a policy developed and implemented with employee and representative consultation. It also requires a code of conduct, consultation with worker representatives, employee training and one or more trained persons responsible for receiving and investigating possible reports. A generic global policy that nobody can locate or understand may not meet the practical need. Give employees a clear local reporting route, including an alternative if the alleged actor is their manager or the usual HR contact.

The statute lists minimum code content: scope, prohibited violence and harassment conduct, the complaint routes and relevant bodies, employer and worker duties, and the measures and procedure for handling conduct. Explain what a person can report, how an initial safety check works, who investigates, how conflicts of interest are addressed, and how both parties are heard. Separate confidential handling from a promise of absolute secrecy; the investigator may need to share necessary allegations so the respondent can answer them fairly.

Training should cover managers, investigators and workers in ways suited to their roles. Managers need to recognise a report even if made verbally and know where to send it without attempting an improvised private settlement. Investigators need impartiality, evidence and data-handling skills. The code should be tested against remote work, customer-facing work and work-related messaging, not only physical misconduct at a desk. Article 6 also directs employers to consider violence and harassment in the written occupational risk assessment.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025

Receive a complaint without creating a new obstacle

The employer must receive, investigate and manage each complaint or relevant report through safe, fair and effective mechanisms. A report can arrive by conversation, email, a witness or another channel; do not insist on a special form before taking a credible safety concern seriously. Acknowledge receipt promptly, identify the immediate risk and ask what evidence or witnesses may exist. Record the complainant's account in their own words where possible and confirm material details back to them, without turning the initial meeting into a cross-examination.

At intake, explain the process, expected next step, available support and the limit of confidentiality. Ask the person what immediate arrangement would make work safe, but do not promise their preferred final outcome before investigating. Preserve relevant chats, emails, shift records or access logs under a controlled process; a disappearing-message app can make delay costly. Avoid collecting an entire device or unrelated private communications when the relevant evidence can be preserved more narrowly. Tell managers to stop informal discussion of the allegation across the team.

Do not discourage external reporting. The 2025 law protects complaints and protests in broad settings, and the government provides complaint channels for matters within the Labour Inspectorate's jurisdiction. A company can invite an internal report and still recognise a worker's right to approach a competent authority or court. Keep a dated log of when the employer learned of the issue, who handled it and which interim steps were offered. A vague file saying only 'employee upset' will not explain why the employer chose its response.

For the different statutory regime governing protected wrongdoing disclosures, see Cyprus whistleblowing channels.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025; Cyprus Labour Inspectorate: submission of complaints

Protect people promptly while avoiding a premature verdict

Article 6 requires appropriate action as soon as the employer knows of an incident or its effects, to stop it, prevent repetition, address its consequences and avoid re-victimisation. The law gives examples such as changing a position, schedule, place or method of work where workable. Choose measures based on risk and operational facts. A temporary no-contact instruction, alternative supervisor or adjusted customer assignment may be useful while facts are checked. Where there is immediate physical danger, use the relevant emergency and safety procedures.

An interim measure should not automatically burden the complainant. Moving only the person who reported harassment to a worse shift or lower-profile role may itself create a retaliation concern. Discuss options with both sides as appropriate, assess whether a measure affects pay, seniority or work conditions, and review it as the investigation develops. Tell everyone that a temporary arrangement is protective and does not establish guilt. Preserve the respondent's opportunity to answer the allegation without exposing the complainant to unnecessary direct contact.

Address possible witnesses too. A witness who is pressured to stay silent or who loses shifts after speaking may face the same kind of harmful treatment that the law seeks to prevent. Give one named senior person oversight of interim decisions, and require approval before any performance action, transfer or dismissal affecting a complainant or witness during the process. Check whether the alleged conduct is continuing through messages, social media or customer contact, rather than assuming that physical separation resolves the risk.

Where the allegation affects an ongoing dismissal process, also review dismissal notice rules.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025

Investigate impartially and give both sides a fair chance to respond

Article 6 requires impartial handling, confidentiality, data protection and respect for the dignity of both the complainant and the respondent. Appoint an investigator without a reporting-line conflict or personal involvement; use someone external where senior management is implicated or the business cannot provide independence. Set a written scope: which alleged events, period, people and policies are being examined. An investigation should establish facts for an employment decision, not mimic a criminal trial or promise a prosecutorial conclusion.

Interview the complainant, the respondent and relevant witnesses separately. Put the material allegations to the respondent with enough detail to answer them, while limiting unnecessary disclosure of sensitive information. Seek corroboration from records when available, and note genuine gaps. Do not assume a missing witness disproves a report or that a strongly expressed denial disproves an allegation. Keep dated interview notes and allow corrections of factual transcription. If the employer uses an internal evidential standard, state it in the procedure and apply it consistently.

Separate findings from recommendations. A conclusion should identify each allegation, the evidence considered, whether it was established under the chosen internal standard, and any uncertainty. Avoid unsupported psychological judgments about credibility or motive. If a report falls outside the 2025 law because it is sex discrimination or another protected-ground issue, route it properly and continue necessary safety management. An investigator may need specialist help where conduct may also be criminal or the evidence includes sensitive health or sexual information.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025; Cyprus Department of Labour: complaint about discrimination at work

Choose proportionate action and communicate the outcome carefully

Once facts are established, the employer should decide what action stops the conduct and prevents recurrence. Depending on findings and applicable employment terms, that may involve a warning, training, changed reporting line, customer restriction, disciplinary action or another measure. The law's examples are not an exhaustive penalty menu. A serious case may require immediate specialist advice. Apply the same process to managers and senior staff; a code that protects a high performer from investigation will not function as a credible prevention mechanism.

Communicate the outcome to the parties in a manner that respects privacy. The complainant should know that the matter was addressed and what protective arrangements apply, but may not need every detail of another person's disciplinary file. The respondent should receive the decision and the basis needed to respond through the employer's process. Explain whether interim arrangements end or remain, who monitors them and how any further concern can be raised. Keep the decision-maker separate from the investigator where practical.

An inconclusive result is not a licence to ignore risk. The employer may still improve supervision, reporting routes or training without falsely declaring a person guilty. Conversely, a substantiated allegation should lead to action that genuinely removes or controls the problem, not merely a policy reminder. Record the reasoning for both the individual response and any system change. Review after a sensible interval to confirm that the conduct has stopped and neither party has been subjected to avoidable retaliation or renewed contact.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025

Monitor retaliation against complainants and witnesses

Article 7 makes a dismissal or harmful change in employment conditions connected with a complaint, protest or rejection of violence or harassment void unless the employer proves an unrelated reason. The protection extends by analogy to a person who helps or supports a complaint, including a witness. Article 11 also creates criminal exposure for obstructing reports or taking harmful or retaliatory action in the stated circumstances. An employer must therefore check decisions after a report, not just prohibit explicit threats.

A sudden downgrade, loss of shifts, unfavorable transfer, exclusion from training or poor rating can be retaliation even when described as ordinary management. Require an independent review of adverse action affecting a complainant, respondent or witness while the case is open and for an appropriate follow-up period. Compare the proposed action with prior performance records and similar cases. Document the genuinely unrelated reason if there is one. Do not promise immunity from legitimate management; instead, ensure it is independently supported and not a response to reporting.

A confidentiality instruction must not be used to silence the worker's access to a regulator, adviser or court. Tell witnesses to avoid gossip and protect personal data, while making clear that they may cooperate with a lawful process. Check in with the reporter after the investigation and give a route for renewed concerns. Article 8 requires personal data collected under the law to be protected according to GDPR and Cyprus data-protection law. Restrict case-file access and retention to a documented purpose, with legal-hold review where a dispute is likely.

For a broader employee-data retention method, see GDPR retention schedule.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025

Close the case with a defensible file and prevention review

A usable case file has the initial report, dates and channel, risk assessment, interim measures, investigator appointment, interview notes, relevant evidence, findings, decision, party communications and follow-up. Record access to sensitive material. The file should enable a later reviewer to see that the employer acted promptly, was impartial and protected both dignity and personal data. Do not place detailed allegations in a general employee folder where routine managers can read them. A summary of actions may belong in the appropriate personnel record, with the evidence restricted separately.

Review what the case reveals about the code. Did workers know the alternative channel for reporting a manager? Were digital messages and contractor conduct covered? Did investigators receive training and time to do the work? Was the written workplace risk assessment updated to include violence and harassment? Article 6 requires prevention as well as response, so a completed investigation without a prevention review can leave the same weakness in place. Update training and controls based on the specific failure, not a generic annual reminder.

Finally, revisit any open related process: a grievance, disciplinary case, equality-law complaint, safety issue or external authority request may continue after the internal decision. Keep owners and deadlines clear, and do not claim that an internal finding determines a criminal or regulatory outcome. This article is a process guide based on Law 42(I)/2025; for a high-risk allegation, preserve evidence and obtain advice on the relevant employment, equality, privacy and criminal-law routes before issuing irreversible decisions.

Basis and guidance: Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025; Cyprus Department of Labour: complaint about discrimination at work; Cyprus Labour Inspectorate: submission of complaints

Primary sources and scope

Sources checked: October 8, 2026. This guide concerns the Republic of Cyprus. Examples are hypothetical, not client case studies. Check current official requirements before making a filing.

• Cyprus Prevention and Combating of Violence and Harassment in the Workplace Law 42(I)/2025
• Cyprus Department of Labour: complaint about discrimination at work
• Cyprus Labour Inspectorate: submission of complaints