Addressing sexual assault and molestation in healthcare
An allegation of sexual abuse, assault or molestation (SAM) made by a patient against a care team member can be frightening, unsettling and disruptive for the person making the allegation, the care team member and the organization. In addition, such an allegation of abuse can create the perfect storm, resulting in regulatory findings, reputational risks, criminal actions and possibly a civil suit.
Allegations in care settings can sometimes arise from miscommunication, lack of informed education and consent or differing perceptions. For individuals who are vulnerable or dependent on care, their understanding of interactions and surroundings shapes their reality. Even with the best intentions, the actions of care providers may be interpreted differently by the patient, potentially leading to confusion or emotional distress.
Sexual assault is broadly understood as any act of sexual contact or behavior that occurs without consent. Consent must be freely given, informed and mutually understood; it cannot be obtained through coercion, manipulation, or force. Additionally, consent is legally invalid when the individual is under the age of consent or lacks the mental or physical capacity to provide informed agreement due to impairment, disability, or unconsciousness.
It is important to recognize that legal definitions of sexual assault vary significantly across jurisdictions — including state and territorial laws, federal statutes, tribal codes and military regulations. These variations may influence how allegations are classified, investigated and prosecuted. Organizations should therefore ensure that their policies align with applicable laws and regulatory requirements while maintaining a survivor-centered approach.
Because definitions and thresholds differ by governing authority, organizations must provide clear internal guidance and training to ensure staff understand both the legal and ethical standards for identifying and responding to sexual assault.
As the commercial insurance landscape (risk transfer) continues to evolve and back away from coverage for SAM, organizational leadership will increasingly prioritize the development and implementation of a comprehensive risk management framework, including preventative measures and organizational processes. This framework will be most effective when integrated with an enterprise risk management (ERM) approach — one that not only identifies and assesses risks across all levels of the organization but also aligns risk strategy with overall business objectives.
ERM transcends traditional, siloed approaches by delivering a holistic, organization-wide perspective on risk. Rather than viewing SAM risks as isolated departmental issues, an ERM focus integrates them into a unified framework that identifies and evaluates exposures across strategic, operational, financial, compliance and reputational dimensions. By aligning risk appetite and tolerance with overarching business objectives, ERM ensures that risk decisions actively support long-term goals.
Key components of this approach will include:
Embedding these principles into a unified SAM response plan enables organizations to manage allegations effectively, navigate insurance complexities, strengthen resilience and demonstrate accountability to stakeholders.
01
Prevention and education are critical components of a safe and ethical care environment. Organizations should implement mandatory training for all staff on trauma-informed care, professional boundaries, critical event escalation and recognizing signs of abuse to ensure early intervention and accountability. Clear policies and behavioral codes of conduct must define unacceptable behaviors and outline consequences, reinforcing a culture of integrity and respect. Additionally, providing patient education materials such as brochures, signage and other communication methods that explain individual rights and reporting mechanisms empowers patients to speak up and fosters transparency throughout the care process.
02
Effective risk identification requires a proactive and structured approach. Organizations should leverage scenario analysis, tracking and trending of incident data and stress testing (failure mode and effects analysis) to anticipate emerging risks, including those that were previously mitigated through insurance. This forward-looking perspective helps uncover vulnerabilities under extreme conditions and informs strategic planning. These methods provide a comprehensive view of potential threats and their likelihood, enabling informed decision making and resilience across the enterprise.
03
Safe reporting mechanisms are essential in fostering a culture of respect, trust and accountability within healthcare organizations. In addition to traditional risk management incident reporting systems (RMIS) or organizational compliance (hotlines) reporting systems, establishing anonymous and confidential channels for both patients and caregivers ensures that individuals can report concerns without fear of retaliation. Incorporating third-party oversight adds an additional layer of impartiality, reinforcing the integrity of investigations and outcomes. Furthermore, deploying supportive response teams trained to handle disclosures with sensitivity and care promotes a compassionate approach, encouraging transparency while prioritizing the well-being of those involved.
04
Survivor-centered care prioritizes empowerment, dignity and long-term healing for individuals affected by misconduct. Survivors should be actively involved in decisions regarding their care and reporting, with encouragement to notify law enforcement if this step has not yet been taken. Comprehensive support with a focus on trauma-informed care, must extend beyond immediate intervention to include mental health services, follow-up care and access to community resources, recognizing that many survivors experience post-traumatic stress following such events. Additionally, organizations should implement feedback mechanisms that capture survivor experiences to continuously improve policies and practices, ensuring that care remains responsive and compassionate.
05
An immediate, compassionate and structured organizational response is essential when allegations of harm arise to safeguard patient safety, preserve trust and provide a safe, consistent investigative structure for employees. Organizations must act decisively and transparently, prioritizing the well-being of impacted parties, including caregivers. Those impacted by abuse allegations must have access to counseling and advocacy services that provide emotional support and guidance throughout the process. Additionally, working with law enforcement should be coordinated promptly and respectfully, ensuring that care and justice are delivered with sensitivity and dignity.
06
Accountability and transparency are fundamental to maintaining trust and integrity in care environments. Organizations must ensure that all allegations are investigated thoroughly and consistently by qualified professionals, with findings documented and acted upon. Clear consequences for substantiated perpetrators — including legal action and professional discipline — reinforce a zero-tolerance stance on misconduct. When appropriate, public reporting based on state, accreditation and licensing requirements of outcomes can further strengthen community confidence and awareness. States have laws mandating that certain patient complaints and substantiated allegations of misconduct be reported to the relevant licensing agencies. For example, in California, health facilities must report written patient complaints alleging sexual abuse or misconduct by a licensee to the licensee’s licensing agency within 15 days. State health departments, such as the California Department of Public Health (CDPH), issue citations for violations in long-term care facilities and make enforcement actions publicly accessible. In higher education settings, The Clery Act requires colleges and universities to disclose campus crime statistics, including sexual violence, fostering accountability and informed community awareness.
07
Systemic change is essential to creating lasting improvements in safety and accountability within healthcare organizations. This requires regular audits and reviews of institutional practices to identify gaps and ensure compliance with ethical standards. Collaboration with advocacy groups, law enforcement and survivor-led organizations brings valuable perspectives that strengthen policies and foster trust. Additionally, legislative advocacy for stronger protections and accountability measures helps drive industry-wide reform, ensuring that patient safety and survivor rights remain at the forefront of healthcare governance.
08
Risk financing alternatives play a critical role in building resilience when traditional insurance markets tighten, or coverage becomes cost prohibitive. Organizations should explore options such as captives, self-insurance and parametric solutions to create a diversified risk financing strategy that balances flexibility and control. Each approach offers unique benefits:
To ensure optimal outcomes, leadership must evaluate the cost-benefit trade-offs between retaining risk and transferring it, considering factors such as capital requirements, volatility tolerance and strategic objectives.
09
With the changes in the commercial insurance market evolving, underwriting readiness for risk professionals and organizational leaders is essential when sitting down with the insurance underwriter. Underwriting readiness begins with telling a clear, compelling story about your organization — one that demonstrates stability, transparency and a proactive approach to risk. Insurers seek more than numbers; they want insight into your culture, values and operational resilience. By showcasing your company’s origins, mission and milestones alongside data-driven achievements, you establish credibility and trust. Highlighting improvements in processes, technology and employee development, as well as initiatives that reflect your commitment to safety, innovation and community engagement, reinforces your readiness. Addressing challenges openly and reviewing emerging risks such as cybersecurity, natural disasters and workplace violence demonstrates foresight and transparency. Finally, articulate your vision for the future positions of your organization as a strong, forward-thinking partner in risk management.
Creating safe spaces in healthcare is not just a regulatory requirement, it is a moral and operational imperative. Allegations of sexual misconduct can have profound consequences for patients, providers and organizations, making proactive prevention and systemic accountability essential. By integrating a comprehensive ERM framework for SAM, offering robust education, safe reporting mechanisms and survivor-centered care, healthcare organizations can foster trust, resilience and transparency.
As insurance markets evolve, leadership must embrace innovative risk financing strategies and demonstrate underwriting readiness through a culture of safety and integrity. Ultimately, systemic change — driven by collaboration, continuous improvement and legislative advocacy — ensures that patient dignity and organizational accountability remain at the heart of healthcare delivery.
WTW hopes you found the general information provided here informative and helpful. The information contained herein is not intended to constitute legal or other professional advice and should not be relied upon in lieu of consultation with your own legal advisors. In the event you would like more information regarding your insurance coverage, please do not hesitate to reach out to us. In North America, WTW offers insurance products through licensed entities, including Willis Towers Watson Northeast, Inc. (in the United States) and Willis Canada Inc. (in Canada).
