The confusion runs in both directions. Some people believe the Equality Act reaches into their private opinions. Some organisations behave as though a colleague’s discomfort is itself the legal problem to fix. Neither is right, and one fact corrects both: the Act places duties on specific actors, in specific roles. Knowing exactly who those are is the place to start.
Who does the Act actually place a duty on?
The Equality Act does not regulate what people think, say to one another privately, or believe in their own lives. It binds duty-bearers — organisations and people acting in defined roles:
- Employers, across recruitment, terms, opportunities, dismissal and harassment at work.
- Service providers, under the part of the Equality Act covering services and public functions.
- Public authorities, which carry an extra duty to have due regard to eliminating discrimination, advancing equality of opportunity and fostering good relations — a duty of process, not of outcome.
- Associations, and others in comparable defined roles.
A private individual holding a view, or living by it in their own life, is not a duty-bearer. Their employer may have duties about what happens at work — but that duty belongs to the employer, not to them.
Why does a colleague’s conduct become the organisation’s problem?
This is where the two opening mistakes meet. If the Act does not bind individuals, how does a colleague’s remark become a legal question at all? Through the organisation, not around it. A provision usually called section 109 makes an employer liable for what its staff do in the course of their work, extending to agents and anyone acting with its authority, not only employees. That is why the duty is institutional rather than personal: the Act reaches an individual’s conduct by holding the organisation answerable for it.
That has a sharp edge, established in Unite the Union v Nailard: a policy in the handbook does not, by itself, defend an organisation against that liability. What counts is evidence — training delivered, monitoring carried out, action taken when something goes wrong. A document nobody has read protects nobody.
Is the EHRC’s Code something citizens have to obey?
No. The EHRC Services Code is a statutory code of practice, issued by the regulator, addressed to service providers — not the public. It comes into force on 5 August 2026, when the 2011 Code is revoked the same day, so it is not yet in force. Once it is, it will carry real weight: a court or tribunal must take it into account where relevant, and it is admissible in evidence, so an organisation departing from it should expect to explain why. But it is not law — it is the regulator’s interpretation of the Equality Act, addressed to the providers the Act already binds, and it creates no new duty on anyone outside that group.
What does “proportionate” actually require?
These are duties of judgement, not duties to reach one fixed answer, and the law is precise about how that judgement must be reasoned. The test, set out by the Supreme Court in Bank Mellat v HM Treasury (No. 2), has four limbs: a legitimate aim serious enough to justify limiting a right; a rational connection to that aim; no less intrusive way of achieving it; a fair balance between benefit and harm. All four must hold — three out of four is not proportionate.
The public sector equality duty runs on the same logic: due regard, not a predetermined result. Within the services Code’s own architecture the pattern repeats — mixed provision is the starting point, a single-sex or separate-sex restriction is a justified exception to it, and the burden of showing that exception is proportionate sits with the provider, not the person seeking to use the service.
Why the focus stays on behaviour, not identity
Given who the duty falls on, what is it actually asking an organisation to manage? Conduct, not identity. The regulator’s own direction is to manage what people do, not police who they are. An organisation’s legitimate concern is behaviour — harassment, intimidation, conduct that leaves someone unsafe or unable to work or receive a service — and conduct that has that effect counts whether or not it was intended. Someone’s ordinary, incidental use of a facility is not something to be policed.
There is a practical reason too. No UK document reliably evidences a person’s biological sex for controlling access to a facility, and appearance is no more reliable. Challenging someone at an ordinary service point is itself a dignity and data protection risk — sex and gender reassignment are both special category data. Where there is genuine misconduct, address that conduct directly, on its own facts, rather than making identity the question.
What this means, both ways
Read the other way round, this settles two things people often get backwards. Staff are not required to change what they believe — the duty sits on the organisation and concerns conduct at work, not private views; nothing in the Act asks anyone to think differently. And a colleague’s discomfort is not, on its own, a breach of anything — it may be worth a management conversation, but it is not the legal question. What the organisation answers for is its own arrangements and conduct: what it provided, what it decided, and whether the decision was reasoned and proportionate.
In a nutshell
- The Act binds organisations in specific roles — employers, service providers, public authorities, associations — not the public at large. A private opinion, calmly held or expressed, is not the Act’s business.
- The organisation carries a colleague’s conduct because of how liability is built, not because the law regulates individuals directly. A policy in a drawer has never been enough on its own.
- The EHRC’s Code is guidance to providers, not law for citizens. It is not yet in force — that starts 5 August 2026 — and even then it interprets the Act rather than replacing it.
- Proportionality, not a fixed answer, is what the law asks for. A legitimate aim, a rational connection, no less intrusive option, a fair balance — all four, every time.
- The question is always behaviour, not identity. Policing who someone is, rather than what they have done, is unreliable, undignified and creates its own legal risk.
None of this tells you how it applies to a specific complaint or a specific decision under pressure. That judgement depends on the facts in front of you, not a general statement of principle.