Earlier this month, the restaurant chain Il Fornaio agreed to pay $3 million to settle a lawsuit brought by the U.S. Equal Employment Opportunity Commission. The allegations were ugly: widespread groping and sexual harassment of female employees — including teenagers — across the company’s California and Nevada locations, with complaints that went unaddressed and workers who spoke up facing retaliation in the form of cut hours and increased harassment. As part of the settlement, Il Fornaio agreed to hire an outside monitor and maintain a dedicated HR function to ensure compliance with federal civil rights law going forward.
It’s tempting to read a story like this and file it under “that’s a big-company problem.” Il Fornaio operates 15 locations. It has corporate resources, an HR department (apparently an underperforming one), and legal counsel. A lot of local business owners have none of that. But that’s exactly the point: the absence of HR infrastructure isn’t a shield from liability. It’s the reason problems like this metastasize into seven-figure settlements instead of getting resolved quietly and quickly.
The legal exposure is lower than most owners assume
Many small business owners believe federal harassment law simply doesn’t apply to them. Title VII of the Civil Rights Act, the law the EEOC used against Il Fornaio, does set a 15-employee threshold. But that number is misleading as a safety line. Several states — including California and New York — extend harassment protections to businesses with far fewer employees, and some state agencies actively investigate complaints regardless of headcount. If you employ anyone, you’re operating inside a legal framework that assumes you have a way to receive, investigate, and act on complaints. Most small businesses don’t — until something forces the question.
The EEOC’s own guidance for small employers is explicit that size doesn’t eliminate the duty to prevent and correct harassment: an owner can satisfy much of that duty by clearly telling employees harassment is prohibited, giving them a way to report it directly to the owner, and following through with a prompt, impartial investigation and real corrective action when something is reported, according to the EEOC’s Q&A for small employers. None of that requires a dedicated HR department. It requires a process that exists before it’s needed.
What actually went wrong at Il Fornaio
The pattern the EEOC described — complaints made and ignored, then retaliation against the people who complained — is the single most expensive mistake an employer can make, precisely because it’s avoidable. A one-off incident of harassment creates risk. A documented pattern of complaints that management knew about and failed to act on, as HR Dive reported in its coverage of the case, converts that risk into a finding of negligence. Courts and agencies draw a sharp line between “harassment happened” and “harassment happened and leadership let it continue.” The second is what turns a personnel problem into an existential one for a small operation that can’t absorb a seven-figure judgment.
Building the version of this that fits a five-person shop
You don’t need Il Fornaio’s budget to close this gap. The EEOC’s own checklist for small businesses boils down to a handful of concrete steps, detailed in its harassment policy tips for small employers:
- Put it in writing. A one-page policy stating plainly that harassment based on sex, race, age, disability, or any other protected characteristic will not be tolerated, with a few concrete examples of what counts, removes any ambiguity about expectations.
- Give employees more than one way to report. If the only reporting channel is “tell your manager,” you’ve recreated the exact failure mode in the Il Fornaio case — because the manager is often the problem, or is friends with the problem. Designate at least one person outside the normal chain of command, even if that’s just the owner’s cell phone number.
- Respond fast, every time. A complaint that sits for two weeks because the owner is busy running the business is functionally the same as a complaint that was ignored. The EEOC’s broader promising practices guidance emphasizes that investigations need to be prompt and impartial — not perfect, just prompt.
- Never let a complaint correlate with a schedule cut. Retaliation is what turned this from a harassment case into a $3 million one. If someone complains and their hours drop the next week, you are building the plaintiff’s exhibit list for them, even if the scheduling change was unrelated.
- Document everything. A dated note of what was reported, what was investigated, and what action was taken is worth more in a dispute than any amount of good intentions after the fact.
The takeaway
None of this requires outside counsel or an HR hire — it requires about an hour to write the policy, five minutes to hand it out at onboarding, and the discipline to actually follow it the first time someone comes forward. The businesses that get burned aren’t usually the ones with bad policies; they’re the ones with no policy at all, where a quiet complaint from a teenage employee has nowhere to go but up the same chain of command that’s ignoring it. Write the one-pager this week, tell your team where complaints actually go, and make sure every manager you employ understands that how they respond to the first complaint determines whether there’s ever a second.
