HR3.2: How to respond to Human Rights impacts – prevent, mitigate and remediate

TABLE OF CONTENTS

• Why this matters
• What HR3.2 is about
• Start with your most important issues
• Step 1: Understand what is happening, how severe it is, and your type of connection
• Step 2: Decide how to respond
• Step 3: Implement your response, take action

Why this matters

Your company may learn about potential or actual human rights impacts through many different sources: worker grievances, supplier audits, community complaints, incident reports, NGO allegations, media coverage, stakeholder engagement, or internal risk and compliance processes.

HR3.2 is about what happens next. It focuses on how your company takes appropriate action when it becomes aware of a human rights risk or issue. This may involve preventing harm, reducing the likelihood or severity of a potential impact, stopping an ongoing impact, supporting remediation, or working with relevant business partners and stakeholders to improve outcomes. 

This is where human rights due diligence becomes practical. It is not enough to identify risks or collect information. Your company also needs to show how it responds, especially in the parts of its operations and value chain where the risks to people are most serious. In many cases, this includes working directly with suppliers whose practices are linked to your salient human rights issues.

What HR3.2 is about 

HR3.2 asks whether your company takes action when actual or potential negative human rights impacts are identified. The goal is not only to check for problems, but to respond in a way that helps prevent future harm, reduce ongoing risk, and address harm where it has already happened.

In practice, this often means moving beyond basic compliance tools. Audits, supplier codes of conduct, and contractual requirements may be useful starting points, but on their own they are usually not enough. A strong response process requires active follow-up, clear expectations, support for improvement, and a plan for what happens if progress is not made.

Start with your most important issues

Your company should not try to respond to every issue in the same way or at the same time. Start with the human rights impacts that are most severe. These might include issues such as low wages, unsafe working conditions, discrimination, land rights impacts, etc. 

If these issues are concentrated in certain supplier relationships, business units, projects or regions, that is where your company should focus first. 

Step 1 - Understand what is happening, how severe it is, and your type of connection

Step 2 - Decide how to respond

Step 3 - Implement your response, take action!

Step 1: Understand what is happening, how severe it is, and your type of connection

Start by prioritizing where to act first

Once you've established a solid process for collecting, prioritizing, and escalating human rights impact information, you'll be better equipped to assess and prioritize cases as they arise. For guidance on setting up this process, see the article: HR3.1: How to collect, prioritize, and escalate information on Human Rights issues. 

Classify your type of connection to the impact

As you assess what is happening and how severe it is, determine how your company is linked to the impact. This will guide your response:

• Causing, e.g. a factory owned and operated by the company forces employees to work excessive overtime without proper pay.

• Contributing, e.g. a bank provides financing to a construction project knowing the project is displacing an indigenous community without proper consultation.

• Linked (via business relationships), e.g. a software company licenses generic productivity software to a client; the client's employees are later found to be surveilling union organizers using unrelated internal tools.

Understanding both severity and connection types gives you a clear picture of what is going on and what responsibility your company has. 

Step 2: Decide how to respond

Move from monitoring to active engagement

Once you have prioritized where to act and understand your type of connection, decide how your company will respond. HR3.2 expects more than passive monitoring. Supplier codes of conduct or social audits may help identify concerns, but on their own they are not an effective response. Your company should actively engage relevant suppliers or business partners on concrete improvements linked to the salient human rights issues. 

Use your type of connection to shape your response

• If your company is causing or contributing to harm, it will usually need to take more direct and immediate action, including remedy. 

• If your company is linked to harm through a business relationship, the focus may be on using leverage and working with others to drive change.

Engage affected stakeholders 

Deciding how to respond should involve input from those affected where possible, such as workers, communities, or their legitimate representatives. This helps ensure that the planned actions actually address their needs and concerns. 

Frame your response around prevent, mitigate, and remediate 

Step 3: Implement your response, take action

Turn decisions into concrete actions with clear plans

Your response process should lead to specific, time-bound actions, not just intentions. For each prioritized supplier or business partner, agree on: 

• Measurable improvement targets

• Clear timelines

• Defined responsibilities for both your company and the supplier or business partner

This turns high-level commitments into practical, accountable plans. 

Examples of response actions include

• Reducing excessive working hours to legal or agreed levels within a set timeframe

• Establishing safe and accessible grievance mechanisms for workers

• Conducting social or human rights impact assessments for high‑risk sites

• Improving occupational health and safety controls

• Strengthening anti-discrimination policies and implementation

• Working toward a recognized labor or human rights certification

Support your supply chain in mitigation 

Effective response is not only about requirements and sanctions. HR3.2 expects companies to use their leverage constructively and support improvement, especially when their own business practices contribute to the problem. Many human rights risks are tied to purchasing practices such as very tight deadlines, aggressive pricing, or frequent last‑minute changes in order volumes. 

Ways your company can support suppliers include: 

• Mentoring or upskilling supplier management teams

• Providing training for workers or managers on specific risks

• Sharing tools, checklists, or guidance materials

• Co‑funding assessments or workplace improvements

• Adjusting purchasing practices that create pressure and drive harm

• Setting more realistic lead times

• Sharing risk more fairly in contracts

This support can make it more likely that mitigation efforts will succeed and be sustained. 

Monitor and adjust as you go 

As you implement your response, monitor progress regularly (at least annually) for prioritized suppliers or relationships. Look at: actions taken by the supplier, actions taken by your company, progress against agreed targets, evidence of real improvements for people…

Use this information to decide whether further or stronger action is needed. 

Document and learn from your response 

Throughout, document what you do: how you prioritized, what actions were agreed, what progress was made, and what changed over time. This supports HR3.2 and helps embed human rights due diligence into daily business decisions.