Perhaps you can clarify for me.
As Joe Citizen, I have no obligation to report a crime. There are situations, particularly those pertaining to sexual assault, where a duty to report is imposed (i.e. physicians, nurses, schoolteachers and probably ones I do not know), but those are imposed by law.
However, if a duty is imposed by a contract of employment, how is the employee now not an agent of law enforcement? It would seem a duty is being assumed that did not otherwise exist. Thus, an employee's failure to report sexual misconduct, including domestic and dating violence, now opens the employer to potential liability that did not exist until the duty was assumed. Failure to report opens the door to a failure of the employer to properly train, among other things, and I can imagine one could come up with another half dozen ways to attach liability to the employer.
Now CU has to train its employees, assuming this recommendation is adopted and contracts amended, to spot, for instance, dating violence, and discriminate that from garden variety violence. What are they gong to do, have a date registry? I know it sounds silly, but this is why I do not understand the thinking behind making employers, clubs, and other non-governmental entities mini-law enforcement agencies. It seems redundant and fraught with problems, self-imposed civil liability among them.
It has been a while since I was employed by a large entity, so maybe this really is the new normal. I can understand training employees to spot fraud, theft, signs of domestic abuse, avoid liability for gender, sexual, age discrimination etc. But impose on them an obligation to spot, diagnose and report crime? Seems like you are asking for lawsuits.