I can quickly offer some thoughts.
First of all, I myself am a lawyer and I believe many people wrongly use principles of criminal law to discuss sexual violence in the workplace or in day-to-day life. For example, the presumption of innocence, and so on, is not relevant outside the criminal courtroom. That's one.
Second, if we want to implement change, the first step for an organization is to clearly define what types of behaviours they wish to see, and what types of behaviours they do not want to see anymore. Organizations have full control over these definitions. They can use what the law says as inspiration, but they can be much bolder and more courageous than what the law says.
So there's defining the standards, and second, training the people inside the organization to understand these standards and behave by them, and third, making sure there is a mechanism in place to file complaints when these standards are not met, to make investigations, and then to have sanctions.