A 2026 guide to drafting a Prevention of Sexual Harassment (POSH) Policy in India: scope, ICC, inquiry procedure, hybrid coverage and annual reporting.
A documented Prevention of Sexual Harassment (POSH) Policy is the foundation of statutory compliance under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013. In 2026, with hybrid work, AI-enabled communication tools, and intensified ESG diligence by investors and customers, a robust POSH Policy is both a legal must and a credibility signal.
What the POSH Act Requires of Every Employer
Every Indian employer with 10 or more employees — including full-time, part-time, contractual, interns, and consultants — must constitute an Internal Complaints Committee, adopt a written POSH policy, conduct regular awareness programmes, file an annual report under Section 21, and act on ICC recommendations within statutory timelines. The obligation is on the employer, not contingent on whether complaints have been received.
Core Elements of a Strong POSH Policy
- Statement of commitment and zero-tolerance from leadership
- Definition of sexual harassment with examples — physical, verbal, written, digital, hostile environment, quid pro quo
- Scope — employees, contractors, interns, vendors, visitors, hybrid and remote work
- Complaint mechanism — channels, formats, language options, anonymity protections
- Internal Complaints Committee composition, contact details, and tenure
- Inquiry procedure — timelines, natural justice, confidentiality, interim measures
- Anti-retaliation guarantee and consequence framework
- Reporting, record-keeping, and annual report process
- Training schedule and acknowledgement requirement
Defining Sexual Harassment Clearly
A strong policy includes the statutory definition under Section 2(n) of the POSH Act and supplements it with workplace-relevant examples — unwelcome physical contact, sexually coloured remarks, showing pornography, demands or requests for sexual favours, and any other unwelcome conduct of a sexual nature. Coverage must extend to digital channels — email, chat, video calls, social media — and to hybrid or remote workplaces.
Inquiry Procedure
The policy must spell out the inquiry process: ICC receives the written complaint, initiates inquiry within prescribed timelines, completes inquiry within 90 days, submits report within 10 days, and the employer acts within 60 days. Principles of natural justice apply throughout — the right to be heard, the right to cross-examine via the ICC, and the right to legal advice. Confidentiality is paramount; breach attracts penalty under the Act.
Hybrid and Digital Workplaces
Hybrid work expands the scope of "workplace" under the Act to include any location where work is performed at the employer's direction. The policy must address harassment via chat platforms, video meetings, work-related social media interactions, and AI-enabled communication tools. Many 2026 policies now include explicit clauses on screen-sharing etiquette, recording consent, and after-hours communication norms.
Training and Awareness
The policy must commit to annual training for all employees, deeper training for managers and HR, and specialised training for ICC members. Attendance, completion certificates, and trainer credentials must be documented. New-joiner onboarding should include POSH orientation as a non-negotiable module. Awareness collateral — posters, intranet pages, periodic emails — keeps the policy visible.
Annual Report and Governance
Under Section 21, the ICC prepares and submits an annual report to the employer and the District Officer, covering complaints received, disposed, pending, and training conducted. The board or senior management should review the report annually and discuss culture trends and policy enhancements. Listed companies disclose POSH metrics in the Business Responsibility and Sustainability Report (BRSR).
Conclusion
A well-drafted POSH Policy in 2026 is more than a compliance document — it is a statement of how an organisation treats its people. Cover every employee, define harassment clearly, build a credible ICC, run real training, document everything, and review annually. Done well, the policy becomes a culture lever; done poorly, it becomes a regulatory and reputational liability.





