The Employment Rights Act 2025 will make employers liable for third-party harassment unless they can show they took all reasonable steps to prevent it, with this new expanded duty expected to take effect in October 2026. This article considers why effective investigations will be central to demonstrating compliance with the new duty, and the challenges of investigating allegations involving individuals outside the organisation.