POSH Compliance

The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act 2013 — POSH — is one of the most actively enforced compliance regimes in India and remains, paradoxically, one of the most poorly implemented. Every employer with 10 or more employees (regardless of gender mix, industry, urban or rural location, formal or informal workforce) must constitute an Internal Complaints Committee (ICC), publish a written POSH Policy, conduct mandatory annual awareness training, and file an annual report (Form 1) to the District Officer. Non-compliance attracts penalty up to INR 50,000 on the first violation, doubled on repeat, and possible cancellation of business licences — and beyond the statute, a single inadequately handled complaint can produce litigation, brand damage and investor-DD red-flags far in excess of the headline penalty.

By 2026, two structural shifts have made POSH non-negotiable. First, the Supreme Court's 2023 Aureliano Fernandes v. State of Goa directions specifically called out the country's poor implementation and ordered State Governments and District Officers to actively monitor compliance — annual reports filed late or not at all are now a documented enforcement priority. Second, every credible investor's diligence checklist now includes a stand-alone POSH section — ICC composition, training records, complaint register and Form 1 filings are inspected line-by-line, and gaps reduce valuation or trigger condition-precedent fixes.

We handle the entire POSH mandate as a one-time setup plus an annual retainer — ICC constitution with the right composition (including the often-missed external member), drafting and Board-approval of the POSH Policy, mandatory annual training (in-person or hybrid), confidential complaint redressal handling within the 90-day statutory window, and Form 1 annual report filing to the District Officer. No compliance fragment left to HR. No template policy left unimplemented.

What POSH Compliance Actually Requires

• Internal Complaints Committee (ICC) Constitution:: Section 4 of the POSH Act mandates a specific composition — a Presiding Officer who must be a senior woman employee, at least two internal members committed to women's cause or with relevant experience, and at least one external member from an NGO / association / person familiar with sexual-harassment issues. Half the members must be women. The ICC must be reconstituted at least every three years.

• Written POSH Policy:: A Board-approved policy displayed prominently at the workplace and on the intranet — covering the definition of sexual harassment, ICC contact details, complaint mechanism, confidentiality protections, anti-retaliation guarantees, interim relief mechanisms, and consequences of false complaints. Generic downloaded policies fail audit.

• Mandatory Annual Awareness Training:: Section 19(c) requires the employer to organise workshops and training programmes at regular intervals — interpreted in practice as at least annually for all employees and separately and more intensively for ICC members. Records of attendance, content, trainer credentials and feedback are part of audit-evidence.

• Complaint Redressal — 90-Day Disposal:: A written complaint must be filed within three months of the incident (extendable to six). The ICC has 90 days to complete inquiry, with prescribed procedural protections — opportunity to be heard, cross-examination through ICC, written submissions, interim transfer relief if needed. Final report to the employer with recommended action; the employer must act within 60 days.

• Form 1 Annual Report:: Section 21 requires the ICC to prepare an annual report containing the number of complaints received, disposed, pending, action taken, and workshops conducted. The employer files this with the District Officer in the calendar year following the reporting year. Filing through the SHe-Box portal of the Ministry of Women & Child Development is now the predominant route.

Vendor, Contractor & Hybrid-Workplace Coverage:
Workplace under POSH includes any place visited by the employee in connection with employment — client sites, offsite events, conferences, transport provided by the employer, and (post-2020 jurisprudence) home-office and virtual-meeting environments for hybrid workforces. Contractor and vendor employees deployed at the workplace are covered.

Why Most Companies Fail POSH Audit

The most common defects we rectify — ICC missing the external member, presiding officer not a senior woman, ICC not reconstituted within three years, policy never Board-approved, no training records, complaint register absent, Form 1 never filed (or filed late, multiple years in arrears), and vendor / contractor / hybrid workforce not included in scope. Each of these is an enforcement trigger and a documented finding in any subsequent investor or buyer DD.