Roy v. Correct Care Solutions, LLC , 914 F.3d 52 ( 2019 )


Menu:
  •           United States Court of Appeals
    For the First Circuit
    No. 18-1313
    TARA J. ROY,
    Plaintiff, Appellant,
    v.
    CORRECT CARE SOLUTIONS, LLC; STATE OF MAINE DEPARTMENT OF
    CORRECTIONS; RODNEY BOUFFARD, individually; TROY ROSS,
    individually,
    Defendants, Appellees.
    APPEAL FROM THE UNITED STATES DISTRICT COURT
    FOR THE DISTRICT OF MAINE
    [Hon. Jon D. Levy, U.S. District Judge]
    Before
    Lynch, Stahl, and Barron,
    Circuit Judges.
    John P. Gause, with whom Eastern Maine Law, LLC was on brief,
    for appellant.
    Gail S. Coleman, with whom James L. Lee, Deputy General
    Counsel, Jennifer S. Goldstein, Associate General Counsel, and
    Elizabeth E. Theran, Assistant General Counsel, were on brief, for
    the Equal Opportunity Employment Commission, amicus curiae.
    Barbra L. Archer Hirsch on brief for Maine Human Rights
    Commission, amicus curiae.
    Melinda J. Caterine, with whom Littler Mendelson, P.C. was on
    brief, for appellee Correct Care Solutions, LLC.
    Valerie A. Wright, Assistant Attorney General, with whom
    Susan P. Herman, Deputy Attorney General, and Janet T. Mills,
    Attorney General of Maine, were on brief, for appellees State of
    Maine Department of Corrections, Bouffard, and Ross.
    January 28, 2019
    LYNCH, Circuit Judge.            This case raises important issues
    about employer liability for a hostile work environment created by
    third parties and about non-employer liability for employment-
    related discrimination under the Maine Human Rights Act (MHRA).
    We articulate here the rules which govern these claims.
    Tara Roy, the plaintiff, worked as a nurse, employed by
    Correct Care Solutions, LLC (CCS), at a Maine Department of
    Corrections (MDOC) prison.             After MDOC revoked her prison security
    clearance and CCS terminated her employment in October 2014, Roy
    sued three sets of defendants: CCS, the MDOC, and two individuals,
    the   prison's        warden    and    deputy      warden.    She    alleged       that
    discrimination and sexual harassment by the prison's corrections
    officers made her work environment hostile and that she was
    retaliated      against        for    complaints      about   the    hostile       work
    environment and for other whistleblowing.
    Specifically, Roy alleged that CCS violated Title VII
    and   § 4572    of     the    MHRA    by   not   responding   adequately      to   her
    complaints about the hostile work environment and by retaliating
    against     her      in      terminating     her     employment     for   protected
    complaints.          Her claims against MDOC under § 4633 of the MHRA
    alleged that MDOC interfered with her MHRA-protected right to work
    free from discrimination and that MDOC's revocation of her security
    clearance      was    unlawful       retaliation.      Finally,     against    Rodney
    Bouffard, the warden, and Troy Ross, the deputy warden, Roy brought
    - 3 -
    claims   under   42   U.S.C.   § 1983   for    violations   of    the    Equal
    Protection Clause and the First Amendment.
    The   district   court    granted   summary   judgment       to    all
    defendants on all claims.      See Roy v. Correct Care Solutions, LLC,
    
    321 F. Supp. 3d
    . 155, 160 (D. Me. 2018).         We reverse as to CCS and
    MDOC and affirm as to Bouffard and Ross.
    After an overview of the facts, we first explain that a
    jury could find that Roy's work environment was discriminatorily
    hostile.   Having established this, we proceed to examine liability
    for each defendant.     We reverse summary judgment for MDOC, first
    deciding an unresolved question of Maine law about the scope of
    § 4633 non-employer liability for workplace harassment and then
    finding disputes of material fact.            Next, in reversing summary
    judgment for CCS, we explain that an employer can be liable for a
    hostile work environment created by non-employees as long as the
    employer knew of the harassment and failed to take reasonable steps
    to address it.   A jury could find CCS liable for failing to protect
    Roy from the harassment, as well as for retaliation.             Finally, we
    affirm summary judgment for the warden and deputy warden.                    Ross
    and Bouffard receive qualified immunity, as reasonable officials
    could have believed on these facts that no equal protection or
    First Amendment violations occurred.
    - 4 -
    I.
    We present the facts in the light most favorable to Roy
    and draw all reasonable inferences in her favor, as we must at
    summary judgment.   Pippin v. Boulevard Motel Corp., 
    835 F.3d 180
    ,
    181 (1st Cir. 2016).
    Under a contract with MDOC, CCS operates and staffs the
    medical facility at the Maine State Prison (MSP) in Warren, Maine.
    In August 2012, CCS hired Roy to work as a licensed practical nurse
    at the MSP, where the medical facility consists of an infirmary
    and a clinic.   Roy worked in the clinic, and primarily interacted
    with the prison's corrections officers when they brought inmates
    in for treatment.      As a safety measure, two officers were also
    specifically assigned to the medical facility, one to the clinic
    and one to the infirmary.
    In late 2012, Davis Snow, the officer assigned to the
    clinic, made sexual jokes and degrading comments about women to
    Roy and made physical contact with Roy on two occasions.    Snow's
    remarks were "constant[]."     He said, for example, "don't worry,
    it's because you are blonde.     You wouldn't understand," and, "I
    wouldn't expect someone like you to understand how things are
    done."   Snow also once squeezed and twisted Roy's wrist until she
    dropped to her knees in pain.    And he once bent her over a chair
    and spanked her.
    - 5 -
    Roy complained to her CCS supervisors and MDOC about
    Snow in early 2013.    After MDOC investigated these complaints,
    Snow was reassigned, away from the medical facility.
    About a year later, in the spring of 2014, Roy began
    working with Donny Turner, who was often the corrections officer
    assigned to the medical clinic.     Turner, like Snow, "constantly"
    made derogatory jokes and comments about women.     He said, "[W]hy
    do we have females when . . . men do everything," and that a
    woman's "job is to be at home."    Turner continued his remarks even
    after Roy told him that his comments were not funny.
    On June 20, 2014, Roy filed an Incident Report about
    Turner's degrading comments.       The report also complained that
    Turner's behavior created health and safety risks.    Roy explained
    that Turner sometimes ignored her, left her alone in exam rooms
    with inmates, and did not respond to her requests to bring sick or
    injured inmates to the clinic.
    CCS employees were instructed to fill out MDOC Incident
    Reports to provide information about any disruptions in the work
    of the clinic involving corrections officers.        CCS says that
    reports by its employees about MDOC officers were usually submitted
    to CCS supervisors Elisabeth Lamson, CCS's administrator at the
    prison, and Robin Cross-Snell, the prison's head nurse.    CCS also
    says that such reports were then referred to MDOC within a day or
    - 6 -
    two for investigation, but the record suggests that this was not
    always done.
    Outside    of     this        formal    Incident       Report    process,
    Bouffard, the warden, and Ross, the deputy warden for operations,
    had   frequent     contact     with        Cross-Snell     and    Lamson.     The        CCS
    supervisors attended the prison's daily operations briefings, and
    Lamson    routinely     spoke     informally        with    MDOC    officials          about
    concerns related to the medical facility.
    Roy's    report     on    Turner      went    to    Lamson,    and    Lamson
    believes she may have spoken with Turner about the report.                              But
    she did not bring the issue to his supervisors, and there is no
    evidence that it was ever referred to or investigated by MDOC.
    Turner's behavior around Roy escalated after Roy filed
    the Incident Report about him.                Turner often left Roy alone with
    inmates, was frequently absent from his post in the clinic, talked
    down to Roy, and worked slowly or ignored Roy when she needed
    something.    It is considered a security risk for an officer at the
    medical facility to leave his post, particularly when inmates are
    around.
    Roy     continued        to     complain      about    Turner        to     her
    supervisors, in person and by email.                For example, on July 23, 24,
    and 31, 2014, Roy emailed Lamson saying that Turner was absent
    from his post in the clinic for as long as twenty minutes while
    inmates were there.       Lamson forwarded at least one of Roy's emails
    - 7 -
    about   Turner      to    MDOC,      but   there     is    no    evidence    that    MDOC
    investigated or acted on these reports by Roy about Turner, or
    that CCS ever followed up.
    In   early       August   2014,    Roy      emailed   Lamson       about    an
    incident with Officer Ernest Parrow.                      When Roy reminded Parrow
    about the proper procedure for bringing sick inmates to the clinic,
    Parrow told Roy to "stop being a bitch."                        He added that he now
    understood why people hated her.                Later that month, on August 26,
    Roy sent an Incident Report to Cross-Snell stating that she had
    called Parrow to ask him to bring an inmate to the clinic to sign
    a form and that Parrow had responded by again calling her a "bitch"
    and then hanging up on her.
    Along with this August 26 Incident Report, Roy provided
    to CCS several sexually explicit text messages that Parrow had
    sent her earlier that summer.                Parrow, who had previously had a
    brief romantic relationship with Roy, texted her, "There is still
    a thing or two I didn't get to do to ya," and "if you want me to
    bend    you    over      let    me   know."        Roy     responded,       "U    have    a
    [girlfriend]!!!" to the first message and ignored the second.                            She
    told Cross-Snell that Parrow was angry with her in part because
    she had rejected his advances.
    Cross-Snell        verified     that     Parrow     had   called      Roy   a
    "bitch" twice and wrote an Incident Report, which she sent to MODC;
    CCS also gave MDOC the text messages between Parrow and Roy.                        CCS's
    - 8 -
    regional     vice     president,    John     Newby,       who   supervised       Roy's
    supervisors, learned that Parrow had called Roy a "bitch" twice
    and, on August 28, spoke with Ross, the deputy warden, about it.
    Ross says he then investigated Parrow's behavior, in part by
    reviewing the explicit text messages.                 Because of the alleged
    name-calling,         Ross     talked      to      Parrow       about      workplace
    professionalism.
    The text messages from Parrow reviewed by CCS and MDOC
    also showed an exchange between Parrow and Roy on July 16, 2014,
    in which Parrow said Roy was "being a shit" after Roy refused to
    share with him medical information that he wanted about an inmate.
    Roy said that the information, an inmate's prescribed medications,
    was confidential by statute and that Parrow was not authorized to
    receive it.
    Parrow    was    not   the     only    officer      asking    Roy     for
    confidential medical information.                 Throughout July and August
    2014, Roy complained to her supervisors that she and other medical
    staff   were    getting      frequent     calls    from     corrections    officers
    requesting     confidential     information.          She    said   that    officers
    responded to her refusals to share it by calling her names,
    yelling, hanging up on her, and threatening to file grievances
    against her.        At least four times during the summer of 2014, she
    emailed her supervisors reporting specific incidents.                      Roy says
    nothing was done by CCS or MDOC.
    - 9 -
    Roy also says that by mid-August multiple corrections
    officers showed daily hostility toward her.              Several of these
    officers, including Parrow, Snow, Paul Dever, and Paul Garrido,
    also filed Incident Reports complaining about Roy.            For example,
    Snow filed a report stating that Roy had yelled at him.             To Roy,
    the officers' hostility and the filed Incident Reports constituted
    retaliation against her for her complaints about Snow, Turner,
    Parrow, and their requests for confidential medical information.
    At her deposition, Roy said, "[W]ith the officers, when one is
    upset with somebody, they all are."
    Lamson and Cross-Snell met with Roy on August 14 about
    the reports filed about her.        Roy told her supervisors that the
    reports were false or exaggerated.          Lamson and Cross-Snell warned
    Roy that she "could be moved to another department" if her behavior
    did   not    change.   At   that    point     in   August,   CCS   obviously
    contemplated that it could move Roy to a different job within CCS.
    Weeks later, CCS's position changed, as we describe below.
    On September 12, Garrido told Roy that Officer Curtiss
    Doyle had said to him that an inmate needed to get sick so that
    the ensuing emergency medical call would "get Tara off her fat
    lazy ass."    Roy filed another Incident Report that day saying that
    she viewed this comment as sexual harassment.           MDOC investigated
    the incident in late September, days before Roy's employment was
    terminated.
    - 10 -
    Also on September 12, Roy emailed the CCS human resources
    specialist, copying Cross-Snell, Lamson, and their supervisor
    Newby, asking for a transfer to a different CCS facility "d[ue] to
    the fact that I currently feel that my work site is bo[]rd[er]ing
    on a hostile work environment."      The record shows no response to
    Roy's email, and Roy does not remember getting one.
    That same week, Officer William DeGuisto messaged Roy on
    Facebook to say, "You['re] lucky [Officer Paul] Dever is out on
    admin leave[.]     He was trying hard to get you fired."     When Roy
    asked for more information, DeGuisto told her that Dever "fucking
    complained to everyone you were picking on Turner and trying to
    get him fired" and that Dever "wrote a few reports on you."      When
    Roy said that Dever "does [not] have ANY reason to write reports
    on me," DeGuisto offered, "He says you have fucked everyone in the
    prison."
    DeGuisto then asked in a Facebook message if he could
    call Roy, but she replied she would "rather not" give him her phone
    number.    A few days later, he asked again if he could call her,
    and added, "Please try to smile at my window and not look at me
    like I'm the enemy."     Four days after that, DeGuisto messaged her:
    "Another report written against you today!!! And you still act
    like you mad at my window[.]      See you, I UN FRIEND YOU Tired of
    attitude."
    - 11 -
    Roy filed an Incident Report about DeGuisto's Facebook
    messages, attaching the exchange about Dever and the later requests
    to call her.    Lamson passed the report to her supervisor, Newby,
    and planned to discuss the report with Bouffard, the warden.
    Although MDOC says that it reviewed the allegations, Bouffard and
    Ross explained at their depositions that they did not act on the
    complaint because the interaction occurred on Facebook.                  Even
    though Roy and DeGuisto's messages were about what Roy, DeGuisto,
    and Dever had done, said, and heard in the workplace, in Ross's
    view, "The Facebook stuff, that's off-duty stuff.                 We don't do
    much with that."         Similarly, Bouffard called the conversation
    "something that was going on in their own private lives."
    After Roy filed the Incident Report about DeGuisto,
    Lamson spoke to Roy about all the Incident Reports she had filed.
    What happened at the meeting is disputed.          As Roy remembers it,
    Lamson told Roy that she should not write any more reports about
    corrections officers because Ross was upset with Roy's frequent
    complaints.     As Lamson remembers it, she told Roy "that the
    report[s Roy files] should be of substance."
    About two weeks later, on September 26, 2014, Roy and
    another nurse, Vanessa Reed-Chapman, were working in the clinic
    when Officer King was the correctional officer assigned to the
    clinic   and   Officer    Snodgrass   was   assigned   to   the    infirmary.
    (Turner was usually the officer assigned to the clinic, rather
    - 12 -
    than King, and Snodgrass's typical assignment was the front desk.)
    At about 10:00 that morning, a member of the medical staff was
    called to a medical emergency elsewhere in the prison.     Protocol
    required the officer assigned to the infirmary to accompany the
    medical staff member, as the infirmary could be locked to secure
    the inmates there.   That day, however, King was asked to respond
    to the call instead of Snodgrass.
    After King left, Roy and Reed-Chapman, who were then
    alone with three inmates in the medical clinic, called Snodgrass
    three times to come over from the infirmary.   If the medical clinic
    officer was away, the infirmary officer was supposed to secure the
    infirmary and come to the clinic.      Surveillance footage shows
    Snodgrass asleep at his desk and unresponsive to the nurses' calls.
    Eventually, Snodgrass did come over.
    Lamson learned of this incident from both Roy and Reed-
    Chapman and called MDOC's Captain Melquist, who came to the clinic
    to speak with the nurses.   Roy and Reed-Chapman each told Melquist
    that the officer on duty in the clinic, King, had responded to a
    call, that King had left Roy and Reed-Chapman with prisoners and
    without a corrections officer, and that the infirmary officer on
    duty, Snodgrass, did not arrive to cover the clinic for fifteen
    minutes.
    Although Melquist told Roy and Reed-Chapman to file
    Incident Reports, Roy did not do so because of what Lamson had
    - 13 -
    told her about Ross not wanting Roy to file more reports.                    Reed-
    Chapman did file an Incident Report, writing that King left at
    "Approx 10[:]00" with "3 inmates still present in clinic with NO
    Supervision By DOC."         She continued, "[O]fficer did eventually
    come to clinic @ 10[:]15.         Safety Risk."
    Surveillance      footage     shows   a      different    officer,
    Therrien, in the clinic thirty seconds after King left.                The video
    does    not   show   Therrien    assuming    King's     duties   or    his   post.
    Therrien was there letting inmates in and out of the clinic.                   The
    video also shows Snodgrass arriving about six minutes after King
    left.     Either Therrien or Snodgrass is on camera in the clinic for
    all but one minute and forty-nine seconds of the fifteen minutes
    after King left.      (MDOC says that Therrien never left the clinic,
    and only occasionally left the view of the camera.)
    That same afternoon, Lamson and Cross-Snell met with
    Captain       Melquist,   Ross,     and      the    MDOC     human     resources
    representative.       At the meeting, the captain expressed concern
    about the discrepancies between the surveillance video and Roy and
    Reed-Chapman's statements about being unattended for approximately
    fifteen minutes.      Ross then said that he was frustrated that Roy
    was involved in so many investigations, adding that he wanted to
    "gate-close" Roy -- that is, to revoke Roy's security clearance.
    Ross later said that he wanted to do this in part because of "any
    [reports] that she may have been involved in."
    - 14 -
    The CCS Team Member Manual provides that employees like
    Roy are expected to maintain prison security clearances.         At the
    MSP, clearances were controlled by MDOC, and Bouffard was the
    ultimate decisionmaker.
    Although CCS was aware after the meeting that Roy's
    security clearance was in limbo, there is no evidence that CCS had
    any discussions with MDOC about Roy after September 26.         CCS did
    place Roy on "temporary suspended leave" that day.          Newby, the
    regional vice president, told Roy that he knew she had done nothing
    wrong and that the leave was merely a cooling off period.            The
    leave was not temporary.
    A week later, on October 2, 2014, Bouffard emailed Newby
    stating, "Effective immediately as a result of misconduct nurse
    Tara Roy will no longer be allowed entrance to the facility.
    Specifically, she misrepresented the truth and subsequently failed
    to follow a directive."          Bouffard made this decision without
    speaking to Roy or Reed-Chapman about the September 26 incident.
    Indeed, aside from the captain, who spoke to Roy and Reed-Chapman
    on September 26, no one at MDOC inquired of them about their
    version of events.
    MDOC did not revoke Reed-Chapman's security clearance,
    although    she   had     made     the     same   representations,    or
    "misrepresent[ations]," as Roy.      At deposition, Bouffard explained
    that he chose not to revoke Reed-Chapman's clearance because she
    - 15 -
    was a new employee who "took direction" from Roy.                         At the time,
    CCS did not ask MDOC to explain the discrepancy, nor did CCS
    discipline Reed-Chapman.
    CCS terminated Roy's employment the day MDOC revoked her
    clearance.        Lamson told Roy that she could no longer work at the
    MSP because of the loss of her clearance and that CCS had no
    openings     at     other    facilities.           CCS's      two    other    sites     in
    Maine --   the         Androscoggin       County   Jail      and    the   Two    Bridges
    Jail -- were not MDOC facilities and had security clearance systems
    separate from the MSP's.               Later, Lamson admitted that she had not
    looked into and did not actually know on October 2 whether CCS had
    openings at these facilities.
    II.
    We start with Roy's allegations that she was subjected
    to a hostile work environment in violation of Title VII, the MHRA,
    and the Equal Protection Clause.              This allegation is an essential
    ingredient        of    Roy's     sexual     harassment       claims      against       all
    defendants.        We conclude that a reasonable jury could find that
    Roy's work environment was hostile, and we turn in later sections
    to the liability of each defendant.
    A    hostile       work    environment     is    one    "permeated        with
    discriminatory          intimidation,       ridicule,        and    insult,     that    is
    sufficiently severe or pervasive to alter the conditions of the
    victim's employment."            Harris v. Forklift Sys. Inc., 
    510 U.S. 17
    ,
    - 16 -
    21 (1993) (internal quotations and citations omitted).       To succeed
    on a hostile work environment claim under Title VII, a plaintiff
    must establish six elements:
    (1) that she (or he) is a member of a protected
    class; (2) that she was subjected to unwelcome
    sexual harassment; (3) that the harassment was
    based upon sex; (4) that the harassment was
    sufficiently severe or pervasive so as to
    alter the conditions of plaintiff's employment
    and create an abusive work environment;
    (5) that sexually objectionable conduct was
    both objectively and subjectively offensive,
    such that a reasonable person would find it
    hostile or abusive and the victim in fact did
    perceive it to be so; and (6) that some basis
    for employer liability has been established.
    O'Rourke v. City of Providence, 
    235 F.3d 713
    , 728 (1st Cir. 2001)
    (citing Faragher v. City of Boca Raton, 
    524 U.S. 775
    , 787-89
    (1998)).    A hostile work environment claim under the MHRA is
    "concurrent with Title VII."     Watt v. UniFirst Corp., 
    969 A.2d 897
    , 903 (Me. 2009).   At issue now are whether the harassment was
    based upon sex and whether it was sufficiently severe or pervasive.
    Later, we discuss the bases for liability.1
    1    The other elements are not genuinely contested.     CCS
    does offer a one-paragraph argument on appeal that Roy was not
    subjectively offended. This argument is not well developed, and
    is waived. United States v. Zannino, 
    895 F.2d 1
    , 17 (1st Cir.
    1990). Nor is the argument convincing. Roy repeatedly asked the
    corrections officers to stop their behavior and made formal
    complaints to her supervisors and MDOC, including a request to be
    transferred.
    - 17 -
    The   district   court    concluded     that    a   hostile   work
    environment did not exist.2    In ruling that much of the conduct
    Roy alleged was not based upon her sex and that the harassment she
    experienced was not sufficiently severe or pervasive, the district
    court applied an erroneous legal standard and also erroneously
    resolved material disputes of fact.        See Roy, 
    321 F. Supp. 3d
    at
    166-68.
    Roy must show that a jury could find the harassment she
    experienced "was based in part on her" sex.        Franchina v. City of
    Providence, 
    881 F.3d 32
    , 54 (1st Cir. 2018).            The district court
    erred when it suggested that Roy's sex must be the but-for cause
    or even the sole cause of each alleged harassing incident.              Roy,
    
    321 F. Supp. 3d
    at 167.    The Supreme Court has squarely rejected
    these standards for hostile work environment claims.             See Univ.
    of Texas Sw. Med. Ctr. v. Nassar, 
    570 U.S. 338
    , 343 (2013) ("It
    suffices . . . to show [on a hostile work environment claim] that
    the   motive    to   discriminate    was    one    of     the   employer's
    2   Roy has also appealed the district court's determination
    that the allegations about Snow were untimely. "This is a question
    that need not be resolved here, as" none of Roy's Title VII or
    MHRA claims "turn[] on it." Maher v. Mass. Gen. Hosp. Long Term
    Disability Plan, 
    665 F.3d 289
    , 301 (1st Cir. 2011).
    Even so, the allegations against Snow may be considered
    as "relevant background evidence to show that discriminatory
    animus motivated the acts that occurred within" the statutory time
    windows. Malone v. Lockheed Martin Corp., 
    610 F.3d 16
    , 22 (1st
    Cir. 2010) (citing Rathbun v. Autozone, Inc., 
    361 F.3d 62
    , 76 (1st
    Cir. 2004)).
    - 18 -
    motives . . . ."); Price Waterhouse v. Hopkins, 
    490 U.S. 228
    , 240
    (1989) (plurality opinion) ("To construe the words 'because of' as
    colloquial     shorthand   for   'but-for     causation' . . . is   to
    misunderstand them.").3
    Much of the abuse Roy experienced was undoubtedly based
    on her sex: Turner made constant derogatory comments about women;
    DeGuisto pestered her for her phone number in Facebook messages
    and conveyed that Dever was spreading rumors that she had "fucked"
    everyone in the prison;4 and Parrow sent her graphically sexual
    text messages.     The district court erred in disregarding three
    other allegations that it viewed as insufficiently "connected to
    Roy's sex."    Roy, 
    321 F. Supp. 3d
    at 167.
    3    The Maine case cited by the district court is not to the
    contrary. See Roy, 
    321 F. Supp. 3d
    at 167 (citing Bowen v. Dep't
    of Human Servs., 
    606 A.2d 1051
    , 1053-54 (Me. 1992)). That case
    said that but-for causation "would be sufficient" under the MHRA,
    not that proof of but-for causation was necessary.     
    Bowen, 606 A.2d at 1053
    (emphasis added).
    4     CCS argues in a footnote that DeGuisto's Facebook
    messages should be disregarded because they occurred outside of
    work. But, as we have said before, "Courts . . . permit evidence
    of non-workplace conduct to help determine the severity and
    pervasiveness of the hostility in the workplace as well as to
    establish that the conduct was motivated by gender." Crowley v.
    L.L. Bean, Inc., 
    303 F.3d 387
    , 409 (1st Cir. 2002). Furthermore,
    it is not clear at all that Facebook messages should be considered
    non-workplace conduct where, as here, they were about workplace
    conduct, including Dever's reports and rumors, and were sent over
    social media by an officer who worked in Roy's workplace.       Cf.
    Feminist Majority Found. v. Hurley, 
    911 F.3d 674
    , 688-89 (4th Cir.
    2018) ("[W]e cannot conclude that [a university] could turn a blind
    eye to the sexual harassment that pervaded and disrupted its campus
    solely because the offending conduct took place through
    cyberspace.").
    - 19 -
    First, there is no doubt that a jury could find that
    Parrow calling Roy a "bitch" was connected to her sex.     It does
    not matter whether Parrow was motivated by "anger resulting from
    the breakup of their previous romantic relationship," as the
    district court emphasized.   
    Id. at 168.
       To distinguish between
    harassment motivated by sex and harassment motivated by anger after
    a break up, as the district court did, "establishes a false
    dichotomy" between Roy's sex and Parrow's romantic interest in
    her, which are "inextricably linked."   Forrest v. Brinker Int'l.
    Payroll Co., 
    511 F.3d 225
    , 229 (1st Cir. 2007).      Regardless of
    Parrow's particular and subjective motives, "the use of sexually
    degrading, gender-specific epithets, such as . . . 'bitch,' . . .
    constitute[s] harassment based upon sex."   
    Id. Second, a
    reasonable jury could infer that the comment
    about Roy's "ass" was made in part because of her sex, given the
    context.   See, e.g., Tang v. Citizens Bank, N.A., 
    821 F.3d 206
    ,
    216 (1st Cir. 2016) (considering context, use of word "ass" was
    based on sex); McGullam v. Cedar Graphics, Inc., 
    609 F.3d 70
    , 85
    (2d Cir. 2010) (Calabresi, J., concurring) (viewing comment by
    male co-worker about plaintiff's "big fat ass" to be based on sex).
    That context includes Turner, Parrow, and Dever sexualizing Roy
    and officers like Snow emphasizing aspects of her appearance, such
    as her blonde hair.
    - 20 -
    Third, it was error for the district court to hold at
    summary judgment that Roy's allegations of retaliatory conduct
    were not sex-based.     A jury could find on one of several theories
    that officers put Roy at risk, treated her rudely, ignored her,
    demeaned her, and filed reports complaining about her not only
    because of her whistleblowing but also because of her sex.
    A jury could see this degrading treatment as a form of
    sex-based    discrimination.          Responding       disrespectfully         or
    dismissively   to    women's    requests,     complaining      about    women's
    performance, and ignoring or ostracizing women are paradigmatic
    ways to communicate to women that they are less worthy than or
    less welcome than men in a workplace.             See 
    O’Rourke, 235 F.3d at 730
    .   Indeed,      several    of   the   remarks     showed   this    sort    of
    stereotyping (e.g., a woman's "job is to be at home").                  A jury
    could also find that the retaliation was motivated in part by sex
    because it was committed alongside overtly sexual harassment.                 See
    Marrero v. Goya of P.R., Inc., 
    304 F.3d 7
    , 20 (1st Cir. 2002)
    (considering    sex-neutral     conduct      by   a   supervisor      with    his
    explicitly sexual conduct); Rosario v. Dep't of Army, 
    607 F.3d 241
    , 248 (1st Cir. 2010) (similar); Kaytor v. Elec. Boat Corp.,
    
    609 F.3d 537
    , 548 (2d Cir. 2010) (justifying this inference).                 Roy
    alleges that Turner, Dever, Snow, and Parrow, retaliated against
    her after her whistleblowing while also directing at her blatantly
    sexual comments, rumors, jokes, and epithets.                  As the Equal
    - 21 -
    Opportunity Employment Commission (EEOC), amicus here, urging
    reversal, says, "it is impossible to tease out" as a matter of law
    "how much of the officers' conduct was based solely on Roy's
    whistleblowing     and   how   much   was   also   infected    with   sex
    discrimination."    This is an issue for the jury.
    Severity and pervasiveness were also issues for the
    jury, and the district court erred in deciding as a matter of law
    that the conduct was neither severe nor pervasive.            Roy, 321 F.
    Supp. 3d at 168.         A plaintiff need only show that her work
    environment was severe or that it was pervasive, Burns v. Johnson,
    
    829 F.3d 1
    , 18 (1st Cir. 2016), and a jury could find for Roy on
    either theory, or on both.
    On severity, a jury could find Turner's practice of
    abandoning his post so that Roy was left alone with inmates severe
    enough, on its own, to alter the terms and conditions of her
    employment.   Turner was assigned to the medical clinic to protect
    Roy and the other medical staff from inmates who were considered
    dangerous, and his absences placed Roy at risk of serious physical
    harm.   Conduct that places a plaintiff in this sort of peril is
    severe for purposes of a hostile work environment claim.              See
    Patton v. Keystone RV Co., 
    455 F.3d 812
    , 818 (7th Cir. 2006)
    (holding that conduct that places the plaintiff in reasonable fear
    of serious physical harm suffices to show constructive discharge
    under Title VII, a more difficult showing than severity); see also,
    - 22 -
    e.g., Gerald v. Univ. of P.R., 
    707 F.3d 7
    , 18 (1st Cir. 2013)
    (finding physically threatening behavior severe); 
    Harris, 510 U.S. at 23
    (including physically threatening behavior among indicators
    of a hostile work environment).
    On    pervasiveness,    there   is    evidence        that   Roy    was
    subjected to Turner's persistent derision and to several officers'
    "daily" retaliatory treatment, escalating from July to September
    of 2014.     This environment was punctuated with the potentially
    humiliating episodes involving Dever and Parrow.                     A jury could
    reasonably    view    this   as   frequent   abuse      and   as   a   pattern    of
    hostility, rather than as intermittent, isolated harassment.                    See,
    e.g., 
    Tang, 821 F.3d at 217
    (finding four incidents plus the
    plaintiff's allegation that the harassment occurred "[e]very time"
    the harasser "had a chance" could be pervasive); Flood v. Bank of
    Am. Corp., 
    780 F.3d 1
    , 13 (1st Cir. 2015) (describing treatment by
    multiple co-workers as a pattern of abuse); Hernandez-Loring v.
    Universidad       Metropolitana,    
    233 F.3d 49
    ,    55   (1st     Cir.   2000)
    (reversing entry of summary judgment on hostile work environment
    claim based on two incidents and allegation that plaintiff was
    "repeatedly asked [on] dates").
    Finally, there is other evidence supporting Roy's claim
    of a hostile work environment.        That officers complained about Roy
    and that she requested a transfer in mid-September could permit a
    jury to find that the harassment was "detract[ing] from [Roy's]
    - 23 -
    job performance" and "discourag[ing] [her] from remaining on the
    job,"    both   telltale    signs    of     a   "discriminatorily     abusive"
    environment.     
    Harris, 510 U.S. at 22
    .
    III.
    A jury could find that Roy endured a hostile work
    environment, so we proceed to evaluate the liability of each
    defendant.      We begin with the claims against MDOC, turn next to
    CCS, and finally to Ross and Bouffard.
    A.   Claims against MDOC under Maine Law
    Roy alleges first that MDOC interfered with her MHRA-
    protected right to work free from sex discrimination in violation
    of MHRA § 4633(2).      Second, she alleges that MDOC's revocation of
    her security clearance was an act of retaliation, unlawful under
    § 4633(1),      for   her   MHRA-protected       complaints   about     sexual
    harassment, about officers requesting inmate medical information
    made confidential by statute, about officers ignoring her requests
    to bring inmates to the clinic, about officers leaving her alone
    with potentially dangerous inmates, and about retaliation because
    of her reporting activity.5
    We address first whether § 4633 of the MHRA allows suits
    against non-employer third parties for discrimination that occurs
    5    The MHRA makes it unlawful to discriminate in any "matter
    directly or indirectly related to employment" based on sex or on
    certain whistleblower activity.        Me. Rev. Stat. tit. 5,
    § 4572(1)(A). Protected whistleblower activity is defined in the
    - 24 -
    in a workplace.6          The district court concluded, relying on the
    Maine Law Court's decision in Fuhrmann v. Staples Office Superstore
    East,       Inc.,   
    58 A.3d 1083
      (Me.   2012),   that   the   MHRA   allows
    employment discrimination actions against employers only, and
    never against "non-employer entit[ies]" like MDOC.                  Roy, 321 F.
    Supp. 3d at 164.           We disagree and hold, based on the text and
    history of § 4633, that the provision allows Roy's claims.7
    1.     Section 4633
    The text of § 4633 encompasses both of Roy's claims
    against MDOC.        Section 4633 reads:
    (1) Retaliation.        A   person    may  not
    discriminate against any individual because
    that individual has opposed any act or
    practice   that   is   unlawful    under  this
    Act . . . .
    (2) Interference, coercion, or intimidation.
    It is unlawful for a person to coerce,
    intimidate, threaten or interfere with any
    individual in the exercise or enjoyment of the
    Whistleblower Protection Act (MWPA), which does not provide a cause
    of action separate from the MHRA's. See Me. Human Rights Comm'n
    v. Me. Dep't of Def. & Veterans' Servs., 
    627 A.2d 1005
    , 1007 n.8
    (Me. 1993).
    6 At a hearing on the motions for summary judgment, the
    district court asked the parties whether this question should be
    certified to the Maine Law Court. See Transcript of Oral Argument
    at 51-54, Roy, 
    321 F. Supp. 3d
    155 (No. 16-cv-00383).        Roy's
    counsel supported certification while MDOC did not, and the
    district court ultimately decided not to certify the question. In
    their briefs on appeal, neither party has asked us to do so.
    7 We do not have before us a claim against an individual
    supervisor employed by the plaintiff's employer and take no
    position on whether § 4633 would allow such a claim.
    - 25 -
    rights   granted         or      protected        by      this
    Act . . . .
    Me.   Rev.   Stat.    Ann.     tit.    5,    § 4633(1)-(2).            This       language
    prohibits    any    "person" 8 from         hindering --       by    "[i]nterference,
    coercion, or intimidation" or by "[r]etaliation" -- the exercise
    of any "rights granted or protected" by the MHRA.                     Me. Rev. Stat.
    Ann. tit. 5, § 4633.
    The legislative history of § 4633 also supports our
    reading.      The    Maine   legislature's           summary    of    § 4633       at   its
    enactment states that the provision "makes clear that retaliation,
    interference,       coercion    and        intimidation . . . by            any    person
    because that individual engaged in activities related to rights
    protected by the [MHRA] is a violation of the Act."                         Me. Pub. L.
    1993, ch. 303 § 3, Summary.
    Further, Maine's Human Rights Commission (MHRC), the
    agency that administers the MHRA, has long interpreted § 4633 to
    allow claims like Roy's against third parties whose actions impair
    workers'     MHRA-protected       rights       to     be   free      from     workplace
    discrimination.         Indeed,       in     Maine    Human     Rights       Comm'n     v.
    Saddleback, Inc., No. CV-06-219, 
    2008 WL 6875449
    (Me. Super. Ct.
    Oct. 31, 2008), the Maine Superior Court agreed with the MHRC that
    Saddleback, a ski resort, violated § 4633 in demanding that a
    8   MDOC is a "person" under the MHRA. See Me. Rev. Stat.
    Ann. tit. 5, § 4553(7) (defining "person" to "include[] the State
    and all agencies thereof").
    - 26 -
    construction contractor fire one of its employees because the
    employee had reported safety violations at a Saddleback work site.
    As Saddleback makes clear, there is a key distinction
    between § 4633 and § 4572, the MHRA provision that prohibits
    unlawful    employment    discrimination.     Section     4572    addresses
    discriminatory conduct by an employer, or employees or agents of
    the employer, that occurs within the scope of a traditional
    employment relationship.       Section 4633 targets actions by third
    parties (not the employer, its employees, or agents) that hinder
    employees' MHRA-protected rights to work free from discrimination.
    MDOC argues and the district court agreed that the Law
    Court's decision in Fuhrmann precludes this reading of § 4633.
    Not so.     In Fuhrmann, a Staples salesperson had her longstanding
    work hours changed after she reported possible tax fraud at her
    
    store. 58 A.3d at 1088
    .     She sued Staples and her individual
    supervisors, alleging retaliation under § 4572 of the MHRA for
    whistleblower    activity   defined   in    § 833(1)(A)   of     the   Maine
    Whistleblower Protection Act (MWPA).         
    Id. at 1088-89.
           The Law
    Court dismissed the claims against the individual supervisors,
    holding that "[p]ursuant to either [the MHRA's or the MWPA's]
    statutory    definition   of   'employer,'   there   is    no    individual
    supervisor liability for employment discrimination."            
    Id. at 1098.
    Fuhrmann does not control here.       The issue before the
    Law Court there was individual supervisor liability for a claim
    - 27 -
    under § 4572, and neither Fuhrmann's holding nor its reasoning
    translate to cases like this one involving third-party liability
    under   § 4633.      Fuhrmann    never   mentioned    § 4633,   and    several
    significant differences between § 4572 and § 4633 undercut MDOC's
    argument that Fuhrmann's holding extends to bar Roy's claims.
    First, § 4572 prohibits discrimination by an "employer," and what
    Fuhrmann interpreted was the MHRA's definition of that 
    term. 58 A.3d at 1094
    .     In contrast, § 4633 prohibits discrimination by any
    "person."      Second, § 4633 appears in the miscellaneous section of
    the MHRA, while Fuhrmann interpreted provisions in the MHRA's
    employment discrimination section.           Third, the provisions have
    different histories, and the enactment of § 4633 more than twenty
    years after § 4572 is a strong indication that the provisions have
    different intents.
    Nevertheless, the district court reasoned that allowing
    Roy's       § 4633     suit      "contradicts        Fuhrmann's        central
    rationale -- that the MHRA intends to hold employers liable for
    employment discrimination."           Roy, 
    321 F. Supp. 3d
    at 163.         But
    Fuhrmann assessed only whether the legislature intended to allow
    suits against individual supervisors, not what it intended about
    suits against non-employer third parties.            To the Fuhrmann court,
    the   MHRA's    incorporation    of    vicarious    liability   indicated   a
    legislative intent to hold employers, but not supervisors as
    individuals,      liable   for   supervisors'      discriminatory     conduct.
    - 28 -
    
    Fuhrmann, 58 A.3d at 1097
    ; see also Me. Rev. Stat. Ann. tit. 5,
    § 4553(10)(E) (discussing vicarious liability).                  But vicarious
    liability is not relevant to claims like Roy's against third
    parties not alleged to be agents of the employer.                   Similarly,
    Fuhrmann   concluded     that   the    remedies   listed    in    the   remedial
    provision that applies to both § 4572 and § 4633 violations were
    difficult to apply "to individual supervisors in 
    practice." 58 A.3d at 1098
    .   Fuhrmann said nothing about the application of the
    listed remedies to third-party entities and did not explore the
    remedial   provision's     prefatory      statement   that       "remedies   may
    include, but are not limited to" those listed.                Me. Rev. Stat.
    Ann. tit. 5, § 4613(2)(B).        The district court erred in holding
    that Fuhrmann bars Roy's claims against MDOC.
    2.    MDOC's Alternative Argument for Summary Judgment
    MDOC also argues that Roy has not offered evidence
    sufficient to push her § 4633 interference and retaliation claims
    past summary judgment.      MDOC is plainly wrong.
    First,   on    the    § 4633(2)     interference       claim,     MDOC
    contends only that we may affirm the grant of summary judgment
    because there was no hostile work environment.             But, as explained,
    a reasonable jury could conclude that Roy was subjected to a
    hostile work environment because of her sex in violation of the
    MHRA's protections against "unlawful employment discrimination."
    See Me. Rev. Stat. Ann. tit. 5, § 4572(1)(A).
    - 29 -
    Second, because we reject MDOC's arguments that Roy's
    conduct was not protected activity under the MHRA and the MWPA and
    that it had non-pretextual reasons for revoking her security
    clearance, Roy's retaliation claim may go to the jury.     MDOC says
    that the facts show that Roy did not engage in protected activity.
    But, with respect to Roy's complaints about the hostile work
    environment, MDOC appears to contend only that the reports are not
    protected because the evidence did not suffice to show that the
    work environment was hostile on the basis of sex.    That contention
    is mistaken.   Similarly, as we will explain with respect to CCS's
    liability under the MWPA, the arguments advanced by CCS and, by
    reference, MDOC, do not preclude Roy's other complaints from being
    found to be protected whistleblower activity because they relate
    to potential violations of medical privacy laws, as well as to
    health and safety risks at the prison.   See 
    id. § 4572(1)
    (making
    unlawful discrimination based on whistleblower activity); Me. Rev.
    Stat.   Ann.   tit.   26,   § 833(1)(A)-(B)    (defining   protected
    whistleblower activity as reporting "a violation of a [state or
    federal] law or rule" or "a condition or practice that would put
    at risk the health or safety of . . . [an] individual.").
    MDOC next argues that Roy cannot show that MDOC's stated
    reasons for revoking the security clearance -- Roy's statements
    about and her failure to file a report on the September 26
    incident -- were pretext for retaliation.     But, based on numerous
    - 30 -
    facts, of which we mention only a few, a jury could conclude that
    those reasons were pretext.      A jury could credit Ross's statements
    that   he   was   frustrated   about   Roy's   involvement    in    so   many
    investigations and that he wanted to "gate-close" Roy.             And, even
    if the jury were to credit MDOC's stated reasons over Ross's
    statements, a jury could find that Roy's actions did not jeopardize
    the security of the prison and could not justify, on their own,
    the revocation of her clearance.
    Further, there is the glaringly differential treatment
    of Roy and Reed-Chapman.        Although Reed-Chapman, who had never
    complained before, also told the captain that she and Roy were
    unattended for approximately fifteen minutes, and then put that
    impression in writing, in an Incident Report, MDOC did not revoke
    Reed-Chapman's     security    clearance.      Reed-Chapman   did    file   a
    report, as the captain had requested.          But a jury could believe
    Roy's assertion that she had been told that Ross did not want her
    to file more reports.     Or, a jury could decide that MDOC did not
    actually need a report from Roy once it had Reed-Chapman's.
    In sum, Roy's § 4633 interference and retaliation claims
    can proceed to trial.
    B.     Claims against CCS under Title VII and Maine Law
    Roy has also produced sufficient evidence for her sexual
    harassment and retaliation claims against CCS to reach a jury.
    - 31 -
    1.   Hostile Work Environment Claims against CCS
    An employer like CCS can be liable for a hostile work
    environment created by third parties like MDOC's employees.       See
    Medina-Rivera v. MVM, Inc., 
    713 F.3d 132
    , 137 (1st Cir. 2013);
    Rodriguez-Hernandez v. Miranda-Velez, 
    132 F.3d 848
    , 854-55 (1st
    Cir. 1998) (using ratification theory); see also, e.g., Gardner v.
    CLC of Pascagoula, LLC, 
    894 F.3d 654
    , 657 (5th Cir. 2018) ("Because
    the ultimate focus of Title VII liability is on the employer's
    conduct[,] . . . nonemployees     can    be   the   source   of   the
    harassment."); Beckford v. Dep't of Corr., 
    605 F.3d 951
    , 957 (11th
    Cir. 2010) ("It is well established that employers may be liable
    for failing to remedy the harassment of employees by third parties
    who create a hostile work environment.").9      In these situations,
    a finding that the harassment was so severe or pervasive as to
    alter the terms and conditions of the plaintiff's employment is
    not by itself enough to make the employer liable.      Liability for
    a discriminatory environment created by a non-employee "depends on
    whether the employer knew or should have known of the hostile work
    environment and took reasonable measures to try to abate it."
    
    Gardner, 894 F.3d at 663
    ; see also, e.g., Freeman v. Dal-Tile
    9    Federal law guides interpretation of the MHRA, Cookson
    v. Brewer Sch. Dep't, 
    974 A.2d 276
    , 281 (Me. 2009), and we consider
    the MHRA to be parallel with Title VII here, cf. 
    Watt, 969 A.2d at 904
    (noting that the MHRA standard for employer liability for
    co-worker harassment has developed concurrently with federal law).
    - 32 -
    Corp., 
    750 F.3d 413
    , 423 (4th Cir. 2014) (holding that employer
    liability depends on employer knowledge and whether the employer
    response     was   "reasonably   calculated   to    end    the     harassment"
    (internal quotation marks omitted)).          Circuit courts addressing
    the issue of employer liability for third-party harassment have
    uniformly applied this rule.10
    The district court never discussed whether there was a
    basis for CCS's liability under Title VII and the MHRA, and CCS
    does not argue on appeal that there is no legal basis. 11                    We
    consider the issue, however, because of the unique nature of Roy's
    workplace, where workers employed by multiple entities shared a
    worksite that did not belong to Roy's employer and where the
    organizational relationships afforded non-employers influence over
    employment    conditions   and   decisions.        See    Dallan    F.   Flake,
    Employer Liability for Non-Employee Discrimination, 58 B.C. L.
    10   See 
    Gardner, 894 F.3d at 657
    ; 
    Freeman, 750 F.3d at 423
    ;
    Summa v. Hofstra Univ., 
    708 F.3d 115
    , 124 (2d Cir. 2013); 
    Beckford, 605 F.3d at 958
    ; Freitag v. Ayers, 
    468 F.3d 528
    , 538 (9th Cir.
    2006); Dunn v. Washington Cty. Hosp., 
    429 F.3d 689
    , 691 (7th Cir.
    2005); Slayton v. Ohio Dep't of Youth Servs., 
    206 F.3d 669
    , 677
    (6th Cir. 2000); Lockard v. Pizza Hut, Inc., 
    162 F.3d 1062
    , 1073-
    74 (10th Cir. 1998); Crist v. Focus Homes, Inc., 
    122 F.3d 1107
    ,
    1111 (8th Cir. 1997); see also 29 C.F.R. 1604.11(e) (stating that
    employer can be liable for harassment by third parties "where the
    employer . . . knows or should have known of the conduct and fails
    to take immediate and appropriate corrective action.").
    11   CCS did argue in the district court that there was no
    basis for employer liability because it "took prompt and effective
    action" when it learned of Roy's complaints.
    - 33 -
    Rev.   1170,   1178-81    (2017)     (stating    that   such     organizational
    complexity is increasingly common and analyzing the implications
    for third-party harassment claims).
    Many third-party harassment cases involve less complex
    arrangements:    common     are    cases   involving    retail    customers   or
    healthcare facility patients who harass employees at a store or
    healthcare facility operated by the employer.             See, e.g., Lockard
    v.   Pizza   Hut,   Inc.,    
    162 F.3d 1062
    ,   1067   (10th     Cir.   1998)
    (customers); 
    Gardner, 894 F.3d at 657
    (patient).               But those cases
    do not purport to limit an employer's duty to those situations.
    In our view, the duty to try to protect employees from sexual
    harassment exists in other environments, even in environments that
    are, like MDOC's prison, "inherently dangerous" and difficult to
    control.     Freitag v. Ayers, 
    468 F.3d 528
    , 539 (9th Cir. 2006)
    ("[E]ven in an inherently dangerous working environment, the focus
    remains on whether the employer took reasonable measures to make
    the workplace as safe as possible."             (quotation marks omitted));
    see also 
    Beckford, 605 F.3d at 958
    -59; 
    Gardner, 894 F.3d at 663
    -
    64 (applying this to nursing homes with diminished-behavioral-
    capacity patients).       CCS had an obligation to try to protect Roy
    from a hostile work environment, and the reasonableness rule
    consistently applied in third-party harassment claims is adequate
    - 34 -
    to account for the complexities of her workplace.12                 Cf. 
    Beckford, 605 F.3d at 959
    (holding this test adequate to account for the
    complexities of a work environment in a prison).
    Ultimately,      a     jury    must     decide   Roy's    hostile     work
    environment     claims   against        CCS.      CCS   plainly    knew   of    the
    harassment.13    The reasonableness of CCS's response is an issue
    for the jury.    Although CCS did not employ the corrections officers
    or manage the prison, CCS was not helpless to influence the
    officers, their supervisors, or the operation of the prison's
    medical facility.        CCS had formal and informal mechanisms for
    raising Roy's complaints and for pressing for remedies.                        This
    influence over the environment and the officers is evident in
    instances when MDOC responded to CCS's efforts by investigating
    and acting, as with Parrow.              But CCS did not always use the
    available mechanisms.           It forwarded some but not all of Roy's
    complaints.       And    when    MDOC's        responses   were    dismissive    or
    12   We do not address whether this test applies to all other
    arrangements.    There may be situations that require separate
    consideration of an employer's level of control or authority over
    the environment or over the entity that employs the harassers.
    See 29 C.F.R. § 1604.11(e) (stating that the EEOC will also
    consider "the extent of the employer's control and any other legal
    responsibility which the employer may have with respect to the
    conduct of such non-employees."); see also 
    Summa, 708 F.3d at 124
    -
    25 (considering whether level of control was sufficient to support
    liability).
    13   Because this is a case of actual knowledge, we do not
    explore the "should have known" element.
    - 35 -
    inadequate, CCS often did nothing.                  Even when Roy's physical
    safety was threatened by Turner's and King's absences from the
    clinic when inmates were present, CCS either did not refer Roy's
    complaints or accepted MDOC's inaction or arguably inappropriate
    responses, without question.                  See 
    Lockard, 162 F.3d at 1075
    (finding basis for liability in part on employer's failure to
    address   a    "potentially         dangerous    situation"     created    by    non-
    employees).        To give just one example, there is no evidence that
    CCS suggested steps like reassigning Turner, disciplining him, or
    adding additional layers of security.               See 
    Beckford, 605 F.3d at 959
    -60 (identifying possible measures for mitigating harassment of
    corrections officers by inmates); 
    Gardner, 894 F.3d at 663
    (giving
    examples of mitigation sufficient to avoid liability in a case of
    harassment by a nursing home patient).
    Apart from what CCS did or could have done to influence
    MDOC is the issue of what CCS could have done on its own.                      A jury
    could see as unreasonable CCS's changing story about and seeming
    failure   to       consider    an    obvious    mitigating    measure,     and    one
    requested by Roy -- a transfer.
    Entry of summary judgment was error.            Roy's hostile work
    environment claims against CCS should go to a jury.
    2.       Retaliation Claims against CCS
    In    granting        summary    judgment   for    CCS      on    Roy's
    retaliation claims under Title VII and Maine law, the district
    - 36 -
    court ruled that Roy's complaints were not protected activity
    because, in its view, CCS lacked "the ability and authority to
    correct" the complained-of violations.    Roy, 
    321 F. Supp. 3d
    at
    169.   We reverse, for errors of law and fact, addressing first the
    claims under Title VII and the MHRA that CCS retaliated against
    Roy for complaints about the hostile work environment and second
    the whistleblower retaliation claim under the MHRA and the MWPA.
    a.   Title VII and MHRA Retaliation
    The Maine case relied on by the district court for its
    definition of protected activity, Hickson v. Vescom Corp., 
    87 A.3d 704
    (Me. 2014), interpreted § 833(2) of the MWPA, and does not
    define protected activity for Roy's Title VII or MHRA claims.    
    See 87 A.3d at 710
    (citing Me. Rev. Stat. Ann. tit. 26, § 833(2)).
    Under both Title VII and the MHRA, a jury could find that Roy's
    complaints were protected because they reported activity that she
    had a reasonable, good faith belief violated those statutes.     See
    Fantini v. Salem State Coll., 
    557 F.3d 22
    , 32 (1st Cir. 2009)
    (citing 42 U.S.C. § 2000e-3).
    CCS does not defend the district court's rationale.    It
    urges us to affirm the entry of summary judgment on the grounds
    that Roy cannot show that her complaints were what caused her
    termination and cannot show that CCS's neutral reason for firing
    her -- MDOC's revocation of the security clearance -- was pretext.
    - 37 -
    Factual disputes here require a jury to decide causation and
    pretext.14
    The causation element of a Title VII retaliation claim
    is not satisfied by evidence that retaliation was one motivating
    factor in the adverse action.          See 
    Nassar, 570 U.S. at 362-63
    .
    Instead, Roy must show "but-for" causation -- that is, that she
    "would not have [been terminated] in the absence of the" protected
    complaints.     
    Id. at 360.
          Emphasizing this standard, CCS argues
    that the revocation of the clearance was the sole but-for cause of
    Roy's termination.
    Factual   disputes    preclude   summary   judgment   on   this
    theory of causation.      To start, CCS and Roy dispute whether the
    revocation of the security clearance meant that CCS could no longer
    employ Roy.    If CCS could have transferred Roy to one of its other
    facilities in Maine, as Roy says, then a jury could find that
    retaliatory animus was a but-for cause of CCS's decision to fire
    her rather than transfer her.        Significantly, CCS has not produced
    evidence that a transfer was impossible.          CCS does not even deny
    that a transfer was possible, emphasizing instead that the burden
    14   The familiar burden-shifting framework from McDonnell-
    Douglas Corp. v. Green, 
    411 U.S. 792
    (1973), applies. The elements
    other than causation and pretext are easily settled in Roy's favor:
    As we have said, Roy engaged in protected activity.       She also
    suffered an adverse employment action when she was fired.
    - 38 -
    was on Roy to ask about other positions.              But Roy did so, in mid-
    September.
    Alternatively,      a   jury     could   conclude     that    MDOC's
    retaliatory animus caused the revocation of the security clearance
    and,   in    turn,   caused    Roy's     termination.       A     third   party's
    retaliatory    or    discriminatory      animus    can   cause    an   employer's
    adverse action where, as a jury might find here, the employer knew
    that animus motivated the third-party's actions or demands and
    simply   accepted     those    actions      or   demands.        Cf.   Rodriguez-
    
    Hernandez, 132 F.3d at 854-55
         (holding   that       customers'
    discriminatory preferences, where ratified by the employer, can
    cause Title VII discrimination); Tamosaitis v. URS Inc., 
    781 F.3d 468
    , 482-83 (9th Cir. 2015) (holding that client's demand to remove
    a whistleblowing employee from a project caused employer's adverse
    action under an analogous statute).
    Similar facts would permit a jury to find that CCS's
    stated reason was pretext for a retaliatory motive.                See Billings
    v. Town of Grafton, 
    515 F.3d 39
    , 55 (1st Cir. 2008) (quoting
    Hodgens v. Gen. Dynamics Corp., 
    144 F.3d 151
    , 168 (1st Cir. 1998))
    (explaining that pretext can be shown through facts that expose
    "weaknesses, implausibilities, inconsistencies, incoherencies, or
    contradictions in the employer's proffered legitimate reasons").
    We mention just a few.        The facts about the possibility of transfer
    weaken CCS's insistence that the security clearance was the sole
    - 39 -
    and actual reason for the firing.                     That CCS put Roy on leave
    (telling her it was temporary) immediately after the September 26
    meeting, a week before the clearance was revoked and her employment
    was terminated, could undermine CCS's claim that it harbored no
    desire to retaliate.         Or a jury could infer from CCS's failure to
    discipline Reed-Chapman that CCS did not find discipline-worthy
    the   conduct     that   MDOC    says    led     to    the   revocation    of   Roy's
    clearance.        Yet CCS did not try to stop MDOC from using that
    conduct to "gate-close" Roy.             To the contrary, CCS immediately,
    and apparently without question, fired Roy once she lost her
    clearance.       A jury should evaluate the issue of pretext.
    b.     Whistleblower Retaliation
    A    jury   should        also      decide      Roy's     whistleblower
    retaliation claim.        As just discussed, whether Roy's complaints
    caused her termination and whether CCS's stated reason is pretext
    are triable issues.          The jury, if it sees a need to, can tease
    apart the effects of the two sets of complaints -- those about
    sexual harassment and those about officers leaving Roy alone with
    inmates, asking for confidential inmate medical information, and
    refusing to bring inmates to the clinic.
    Further,    a      jury    could      deem      Roy's    whistleblowing
    complaints       protected    activity,       as      they   relate   to   potential
    violations of medical privacy laws and to health and safety risks
    at the prison.      See 
    id. § 4572(1)
    (making unlawful discrimination
    - 40 -
    based on protected whistleblower activity); Me. Rev. Stat. Ann.
    tit.     26,    §    833(1)(A)-(B)    (defining    protected     whistleblower
    activity as reporting "a violation of a [state or federal] law or
    rule" or "a condition or practice that would put at risk the health
    or safety of . . . [an] individual.").            The district court erred
    in ruling that Roy's complaints were unprotected because CCS
    lacked, under Hickson, "the ability and authority to correct" the
    complained-of violations.            Roy, 
    321 F. Supp. 3d
    at 169 (quoting
    
    Hickson, 87 A.3d at 711
    ).
    CCS argues, following the district court's reading, that
    Hickson, and the MWPA provision it interpreted, require evidence
    of direct authority to correct the violations, as the employee in
    Hickson, who complained about safety at a mill, was employed by
    the company directly responsible for mill 
    safety. 87 A.3d at 711
    .
    Yet Hickson nowhere limited its interpretation of § 833(2) to those
    facts.     Nor does the language of the provision suggest that the
    employer's corrective authority must be direct.                 It states that
    whistleblower protection applies to an employee who "has first
    brought    the      alleged   violation,    condition    or   practice   to   the
    attention      of   a   person   having    supervisory   authority   with     the
    employer and has allowed the employer a reasonable opportunity to
    correct that violation, condition or practice."                 Me. Rev. Stat.
    Ann. tit. 26, § 833(2).           We see no reason why a jury could not
    find "ability and authority to correct," 
    Hickson, 87 A.3d at 711
    ,
    - 41 -
    even if that control is indirect.      We have already established
    that CCS had both formal and informal mechanisms for influencing
    MDOC, its officers, and the operation of the prison.          Roy's
    whistleblower retaliation claim should go to the jury.
    C.   Claims against Ross and Bouffard under § 1983
    Roy alleges that Bouffard and Ross, the top prison
    officials, failed to stop prison staff from sexually harassing her
    in violation of the Equal Protection Clause15 and that Bouffard and
    Ross revoked her security clearance because of her complaints, in
    violation of the First Amendment.      Qualified immunity protects
    Ross and Bouffard from suit because reasonable officials could
    have believed "on the[se] facts" that no equal protection or First
    Amendment violation occurred.16   Dirrane v. Brookline Police Dep't,
    
    315 F.3d 65
    , 69 (1st Cir. 2002).
    Supervisors like Ross and Bouffard are liable under the
    Equal Protection Clause for a hostile work environment created by
    their subordinates in state government only if their "link" to the
    15   Roy does not raise on appeal a second equal protection
    claim, also rejected by the district court, that Bouffard, Ross,
    and the officers retaliated against her for complaining about the
    harassment. Roy, 
    321 F. Supp. 3d
    at 170.
    16   The district court did not reach the qualified immunity
    defense on the equal protection claim, holding simply that that
    Roy could not establish an equal protection violation. Roy, 
    321 F. Supp. 3d
    at 170. On the First Amendment claim, the district
    court held that, even if there were a constitutional violation,
    the officers would have qualified immunity. 
    Id. at 173.
    - 42 -
    unlawful      harassment    was    one   of   "'supervisory         encouragement,
    condonation, or acquiescence,' or 'gross negligence amounting to
    deliberate indifference.'"           
    Lipsett, 864 F.2d at 902
    (quoting
    Bohen v. City of East Chicago, 
    799 F.2d 1180
    , 1189 (7th Cir.
    1986)).       Two First Circuit cases apply this principle.                   In the
    single case finding supervisory liability under § 1983 for sexual
    harassment, the defendants knew of severe abuse but failed even to
    investigate.      See 
    id. at 890-93,
    907.           In the other case, which
    found    no   supervisor     liability,   the      defendant,       the    harasser's
    supervisor, at first discouraged the plaintiff from filing a formal
    complaint but then actively encouraged her to do so.                      See Sanchez
    v. Alvarado, 
    101 F.3d 223
    , 225, 228-29 (1st Cir. 1996).                      Ross and
    Bouffard's      conduct    falls   somewhere       between       these    guideposts.
    Complaints against Snow and Parrow were investigated and addressed
    while complaints about Turner, DeGuisto, and officers' retaliatory
    behavior were not.          "[A]s is common where there is a lack of
    precedent, this is not a case in which a reasonable officer must
    have known that he was acting unconstitutionally."                       
    Dirrane, 315 F.3d at 71
    (footnote omitted).
    Ross and Bouffard also receive qualified immunity from
    the First Amendment retaliation claim because reasonable officials
    could have believed that revoking Roy's security clearance would
    not     violate   the     Constitution.       To    show     a    First     Amendment
    violation, one thing Roy must demonstrate is that she was speaking
    - 43 -
    as a private citizen on a matter of public concern.17                Complaints
    like Roy's made to supervisors and public officials about sexual
    harassment and safety at public agencies can be protected citizen
    speech on matters of public concern.            See, e.g., Baron v. Suffolk
    Cty. Sheriff's Dep't, 
    402 F.3d 225
    , 233 (1st Cir. 2005) (upholding
    a jury verdict on a First Amendment claim by a corrections officer
    who had complained internally about discrimination and operation
    of a prison); Campbell v. Galloway, 
    483 F.3d 258
    , 270 (4th Cir.
    2007) (holding that police officer's letter to police chief about
    sexual harassment was protected by the First Amendment).                 But we
    cannot say that a reasonable official must have known that Roy's
    complaints were constitutionally protected.                Significantly, Roy
    only complained internally.           And, although the Supreme Court has
    established that form is never "dispositive" of the public concern
    question, Garcetti v. Ceballos, 
    547 U.S. 410
    , 420 (2006), it has
    sometimes seen a plaintiff's failure "to inform the public" about
    her    concerns     as   cutting   against     First    Amendment   protection,
    Connick v. Myers, 
    461 U.S. 138
    , 148 (1983); see also, e.g., City
    of    San   Diego   v.   Roe,   
    543 U.S. 77
    ,   84   (2004)   (per   curiam).
    17 Roy must also show that her interests in speaking
    outweighed MDOC's interest in efficient public services, see
    Pickering v. Board of Educ., 
    391 U.S. 563
    , 568 (1968), and that
    the protected speech was a substantial or motivating factor in the
    adverse employment decision, see Mt. Healthy City Sch. Dist. Bd.
    Educ. v. Doyle, 
    429 U.S. 274
    , 287 (1977); see also, e.g., Decotiis
    v. Whittemore, 
    635 F.3d 22
    , 29-30 (1st Cir. 2011) (describing the
    whole test).
    - 44 -
    Reasonable officials in Ross and Bouffard's positions, then, could
    have deemed Roy's complaints unprotected.    As a result, even if
    Roy could ultimately make out a First Amendment violation, the
    defendants receive qualified immunity.
    IV.
    We reverse summary judgment for MDOC and CCS and affirm
    summary judgment for Ross and Bouffard.   Costs are awarded to Roy.
    - 45 -