Why Collecting Misconduct Data Isn't Enough to Meet the New All Reasonable Steps Duty

Our co-founder and CEO, Gemma McCall, has written a piece for The HR Director exploring one of the most persistent gaps in workplace misconduct management: the space between collecting data and actually using it.
The article draws on new research of 300 senior HR professionals. The findings are stark. Only 41% of organisations consistently aggregate and analyse misconduct or speak-up data to identify patterns. Just 43% regularly use reporting insights to inform preventative action. And two thirds still rely on manual methods like spreadsheets and Word documents to manage this data.
These numbers matter more than ever. From October, employers of all sizes must demonstrate they have taken "all reasonable steps" to prevent sexual harassment under the Employment Rights Act. Collecting reports will no longer be enough. Organisations need to show they are acting on what that data tells them.
In the article, Gemma writes:
"Collecting data is really only the starting point. The real value and change comes from what organisations do with it, looking at reports collectively, identifying trends, and using those insights to act before issues escalate."
This speaks to a pattern we see across the sector. Many organisations have invested heavily in reporting channels, hotlines, and case management processes, yet treat each report as a standalone incident. Without aggregating that information, recurring behaviours, team-level trends, and early warning signs go unnoticed until they escalate into something far more serious.
Gemma also addresses the shift the new legislation demands:
"With the strengthened duties under the Employment Rights Act coming into force in October, organisations will need to demonstrate not just that they have reporting processes in place, but that they are actively using the information they receive to prevent misconduct. That shift from reactive to proactive is where prevention really begins."
This is the analytical discipline organisations now need to build. Every report is a data point. Treated collectively, those data points reveal risk before it turns into harm, and give organisations the evidence they need to meet their new legal obligations.
Read Gemma's full article in The HR Director for the complete research findings and analysis.
For the full picture, including the perception gap between HR professionals and employees on speak-up culture, download the Culture Shifters Annual Report 26/27.
What we're reading
Latest insights from the front lines of workplace culture.
The Spreadsheet Problem: Why 22% of Organisations Are Still Managing Misconduct Data Manually
22% of organisations still track misconduct data via spreadsheets. Read why this data gap has become a genuine compliance risk in 2026.


Feeling inspired?
Take the first step toward preventative misconduct management with a demo of our Report + Support™ platform. We can show you how to breakdown reporting barriers with anonymous 2-way messaging, and how to act before things escalate with name-matching and pattern-spotting across our analytics dashboard.



.png)

