POSH Act Compliance Guide for Indian SMBs 2026

If you run or manage a growing company in India, POSH compliance is one of those obligations that rarely feels urgent until it suddenly is. A complaint lands in a manager's inbox, an auditor asks for your Internal Committee order, or a client's vendor questionnaire wants proof of annual filings. At that moment, you either have a clean paper trail or you have a scramble.

This guide is written for founders, HR managers and operations heads at small and mid-sized businesses. It walks through what the law broadly expects, how to set up an Internal Committee (IC), how to handle complaints step by step, what to put in your annual report, how to run awareness sessions, and how remote and hybrid work change the picture. It also includes templates, tables and fictional worked examples you can adapt.

A note before we begin: this article is practical guidance, not legal advice. The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, its Rules, and state-level instructions can be amended or clarified. Always verify the current position with official government sources and a qualified lawyer before you finalise your policy or take action on a real complaint.

What the POSH Act Is and Why SMBs Cannot Ignore It

The POSH Act is the central law in India dealing with sexual harassment of women at the workplace. It places duties on employers to prevent harassment, to provide a redressal mechanism, and to report on what they have done. It applies across sectors, whether you are a ten-person design studio or a thousand-person manufacturer.

A few ideas sit at the heart of the Act:

• Prevention comes first. The law is not only about punishing misconduct after it happens. It expects employers to build a safe environment, train people and make the process visible.
• A structured process is mandatory. You cannot handle complaints informally and call it compliance. The Act expects a properly constituted committee and a defined inquiry procedure.
• Confidentiality matters. The identity of the complainant, respondent, witnesses and the details of the inquiry are protected, and breaching that carries consequences.
• Documentation is your evidence. If you cannot show what you did, in practice it is hard to prove you did it.

The myth that POSH is only for big companies

Many small employers assume POSH is a large-corporate issue. In practice, the obligation to constitute a committee is tied to employee headcount at an office or administrative unit, not to turnover or brand size. Businesses with fewer employees than the threshold are generally pointed toward a Local Committee at the district level for complaints, but that does not mean they have no duties. They still need a safe workplace and awareness. Check the exact thresholds and routes with official sources or counsel for your situation.

Also remember that a startup's headcount counts everyone the law treats as an employee, which can be broader than your payroll list. We will come back to this when we discuss who is covered.

Why compliance matters beyond the penalty

The Act provides for monetary penalties for non-compliance, and repeated violations can attract higher penalties and consequences for business licences. But the real cost of getting this wrong is usually different:

• A mishandled complaint can damage trust across your whole team.
• Enterprise clients increasingly ask for POSH evidence during vendor onboarding.
• Investors and acquirers look at compliance hygiene during due diligence.
• Attrition rises when employees conclude the organisation does not take harassment seriously.

For an SMB with limited HR bandwidth, a simple, repeatable system beats a heavy one that nobody follows.

Who and What the Act Covers

Understanding scope prevents the most common SMB mistakes.

Who is protected

The Act protects women at the workplace. The definition of "employee" is wide and can include regular, temporary, ad hoc and daily-wage workers, as well as people working with or without the knowledge of the principal employer, such as contract workers and interns, depending on how the arrangement is structured. Trainees, apprentices and volunteers are commonly discussed in this context too.

Practical takeaway: do not exclude interns, consultants working on your premises, or contract staff from your awareness sessions and policy.

What counts as a workplace

The definition of workplace is broad. It goes beyond the office desk and can include places visited by an employee in the course of employment, including transport provided by the employer. For modern teams, that has obvious implications for:

• Client sites and off-site meetings
• Company-arranged cabs and shuttles
• Offsites, team outings and conferences
• Business travel
• Remote work setups and digital channels (covered in detail later)

What is sexual harassment

The Act describes sexual harassment to include unwelcome acts or behaviour, whether direct or by implication, such as physical contact and advances, a demand or request for sexual favours, sexually coloured remarks, showing pornography, or any other unwelcome physical, verbal or non-verbal conduct of a sexual nature. It also describes circumstances such as implied or explicit promise of preferential treatment, threats about employment, interference with work, or creating an intimidating or hostile environment.

Your policy should paraphrase this in plain language and give examples that your team will recognise, for instance:

• Repeated unwelcome messages or comments about appearance
• Pressure for dates or personal meetings
• Sharing suggestive images or jokes in group chats
• Touching that makes someone uncomfortable
• Linking a promotion, appraisal or project allocation to personal favours

Always reproduce the statutory definition accurately from the official text in the formal policy, and use the plain-language version in training.

Do You Need an Internal Committee? Thresholds and Alternatives

The broad rule is that an employer with ten or more employees at an office or branch must constitute an Internal Committee (IC). Where an employer has offices in different places, an IC is generally expected at each office or administrative unit. For workplaces below the threshold, or where the complaint is against the employer, the Act routes complaints to a Local Committee constituted by the district authority.

Here is a simple way to think about it:

This table is a simplification. Counting methods, branch structure and the status of contract workers can change the answer, so confirm with an advisor.

The headcount trap for growing startups

A company that crosses ten employees mid-year often forgets to form an IC. Build a trigger into your hiring process: when headcount at any location reaches eight or nine, start identifying members. HR systems that track location-wise headcount make this much easier than spreadsheets.

Worked example 1: the nine-person studio

Fictional scenario. Lotus Lane Studio, a design agency in Pune, has nine full-time staff and four interns. The founder believes the company is under the threshold. On review with a consultant, they learn that the way interns and contract designers are counted could matter, and that the safest course is to take advice. They decide to constitute an IC voluntarily, appoint an external member from a local women's organisation, and adopt a policy. Cost and effort were modest, and later a client questionnaire asked specifically for the committee order. They had it ready.

The lesson: when in doubt about the threshold, a voluntary and well-run committee costs far less than a dispute about whether you should have had one.

Setting Up the Internal Committee, Step by Step

An IC is only as credible as its composition and the confidence people have in it. Here is the broad structure the Act expects, followed by a practical process.

Composition at a glance

Again, check the current statutory wording for composition details, such as the exact qualifications and what happens with vacancies.

Step 1: Identify the right Presiding Officer

The Presiding Officer should be a senior woman employee who is trusted by staff and able to run a fair process. Seniority matters because the Act is concerned about undue influence. Avoid choosing someone who reports directly to a likely respondent or who is in a position where conflicts are likely.

If your organisation genuinely lacks a suitably senior woman at that location, speak to counsel about the lawful alternatives rather than improvising.

Step 2: Choose internal members thoughtfully

Look for people who are:

• Impartial, discreet and comfortable with sensitive conversations
• Willing to attend training and to give inquiry time when needed
• Drawn from different functions or levels, so that no single team dominates

Avoid appointing members purely because they are available. A committee of reluctant members produces weak inquiries.

Step 3: Find an external member

The external member is a safeguard, and many SMBs find this step the hardest. Options generally include:

• Representatives of local women's organisations or legal aid groups
• Lawyers or counsellors with experience in workplace harassment
• Professionals recommended by industry bodies or local chambers

Put the engagement in writing: scope of work, how many meetings or inquiries are expected, honorarium or fees, confidentiality, and a replacement process if the person becomes unavailable. Check the current position on whether and how remuneration for external members should be handled.

Step 4: Issue a written constitution order

Do not rely on a verbal announcement. Issue a signed order that records:

1. The names, designations and roles of all members
2. The date of constitution and the term
3. The location or unit the IC serves
4. Contact details, such as an email address and phone number, for the IC
5. A statement that members must keep proceedings confidential

Circulate the order to all employees and keep a copy in your compliance folder.

Step 5: Display and communicate

The Act expects employers to display, at a conspicuous place, the penal consequences of sexual harassment and the order constituting the IC. For distributed teams, an equivalent digital display, such as on your intranet or HR portal, makes sense in addition to any physical notice. Include the IC's contact details in onboarding material.

Step 6: Train the committee

Members need to understand the Act, the inquiry procedure, principles of natural justice, how to talk to complainants without re-traumatising them, and how to write a reasoned report. Budget for proper training on joining and a refresher each year. An untrained IC can undermine an otherwise valid process.

Step 7: Set up record-keeping

Decide in advance where complaint files will live, who can access them, how long they will be retained and how they will be destroyed or archived. Restrict access tightly. If you use HR software, make sure the module or folder holding IC records is not visible to general HR users or payroll staff.

Keeping the committee current

Committees go stale. People resign, change roles or move offices. Maintain a simple register:

• Member name and role
• Date of appointment and term end
• Training completed and dates
• Conflicts of interest declared

Set reminders at least three months before term expiry. When a member leaves, reconstitute promptly rather than waiting for the next review.

Worked example 2: reconstituting after an exit

Fictional scenario. At Kaveri Components, a 60-person manufacturing firm in Coimbatore, the IC's Presiding Officer resigns in March. HR notes that there are two pending awareness sessions and no active complaints, so the issue is deferred. In June, a complaint is received and the committee is not validly constituted. The company must now appoint a new Presiding Officer in a hurry, and the complainant's trust is already shaken.

What they should have done: treat a vacancy as a compliance event, appoint a replacement within a short window, issue an amended order, and update the notice board and intranet the same week.

Writing a POSH Policy That People Will Actually Read

A policy is a legal and cultural document. It should reflect the law, but it should also be understandable for a new joiner on their first week.

What a good policy contains

• Purpose and scope. Who it covers and where, including remote, off-site and travel contexts.
• Definitions. Sexual harassment, workplace, employee, aggrieved woman, respondent, in language aligned with the Act.
• Examples of unacceptable behaviour. Concrete, relatable and updated for digital channels.
• The IC. Names, contact details and how to reach them confidentially.
• How to complain. Written complaint, timelines, and the help available if the complainant cannot write.
• What happens next. Conciliation, inquiry, outcomes and appeal rights in simple steps.
• Interim relief. What protections may be available during the inquiry.
• Confidentiality. What it covers and the consequences of breaching it.
• Non-retaliation. A clear statement that victimising a complainant or witness is itself misconduct.
• Action for false or malicious complaints. Handled carefully, as described below.
• Review cycle. How and when the policy is updated.

Tone and format

Write in short sentences. Avoid copying large blocks of legal text without explanation. Offer the policy in the languages your workforce actually speaks. Add a one-page flowchart and an FAQ. A policy that sits in a PDF no one opens is a policy that does not exist.

Get acknowledgements

Have each employee acknowledge the policy at joining and annually. Track these electronically so you can show, for example, that 100 percent of current employees acknowledged the policy in a given period, if that is genuinely the case. Do not claim numbers you cannot back with records.

Be careful with "false complaint" language

The Act contains provisions about malicious complaints, but it also makes clear that merely failing to prove a complaint does not mean it was false or malicious. If your policy implies that every unproven complaint may be punished, you risk discouraging genuine complainants. Phrase this section carefully and have counsel review it.

Handling a Complaint: The Process From Receipt to Closure

This is the section HR teams most often want to see laid out clearly. The broad stages below follow the Act's structure. Verify specific timelines against the current official text before relying on them.

Stage 1: Receiving the complaint

The aggrieved woman may submit a written complaint to the IC. Broad timelines in the Act generally contemplate that the complaint be made within three months of the incident, or of the last incident in a series, with a possibility of extension where circumstances prevented earlier filing. If the complainant cannot put the complaint in writing, the Presiding Officer or a member is expected to render reasonable assistance. If she is unable to file for reasons such as incapacity, the Act provides for others to do so on her behalf.

Practical points:

• Acknowledge receipt promptly and in writing.
• Never ask the complainant to "sort it out with the manager first".
• Record the date and time of receipt.
• Share copies of the complaint and supporting documents with the respondent as the procedure requires.

Stage 2: Immediate safety and interim measures

Even before the inquiry concludes, the Act allows the IC to recommend interim relief on the complainant's written request. These can include transferring the complainant or the respondent, granting leave, or restraining the respondent from supervising or evaluating her. Check the exact provisions.

Think through logistics: who approves the transfer, how payroll treats any leave, and how to prevent the move from looking like a penalty on the complainant. Where leave is granted, plan how attendance and pay records will reflect this so that payroll errors do not create secondary grievances.

Stage 3: Conciliation (if requested)

Before starting a formal inquiry, the IC may, if the complainant requests it, try to settle the matter through conciliation. The Act is explicit that no monetary settlement should be the basis of conciliation. If a settlement is reached, the IC records it and forwards it to the employer to act on, and it provides copies to both parties. Do not push a complainant towards conciliation. It has to be her request.

Stage 4: The inquiry

If conciliation is not sought or fails, the IC proceeds with the inquiry, following principles of natural justice and the service rules applicable to the organisation. Generally the stages look like this:

1. Notice to the respondent. Provide the complaint and documents, and set a reasonable time to respond.
2. Written reply. The respondent submits a response with supporting documents and witness names.
3. Hearings. The IC hears both sides separately or together as appropriate, keeping the process dignified and non-adversarial.
4. Evidence and witnesses. The IC reviews documents, messages, logs and witness statements.
5. Opportunity to be heard. Both parties must have a fair chance to present their case.
6. Deliberation. Members consider evidence on its merits, free from outside influence.
7. Report. The IC records findings and recommendations.

Maintain minutes of every sitting. Keep a signed attendance record for the committee, and get statements signed by the people who gave them.

Stage 5: Timelines

The Act sets broad timelines. As a commonly understood summary, the inquiry is expected to be completed within a defined period (ninety days is the figure often cited), the report is to be submitted to the employer within a short window after completion, and the employer is expected to act within a defined period after receiving it. Confirm the current numbers in the official text and note them in your internal checklist.

Stage 6: Findings and recommendations

If the allegation is not proved, the IC recommends no action. If it is proved, the IC recommends action under the organisation's service rules or, where there are none, in line with the Act, such as a written apology, warning, reprimand or censure, withholding of promotion or increments, termination, community service or counselling. The Act also allows the IC to recommend deduction from the respondent's salary to compensate the complainant, with certain considerations about the respondent's ability to pay. Compensation is determined with reference to factors the Act lists, such as mental trauma, loss of career opportunity, medical expenses and the respondent's income.

Stage 7: Employer action and payroll implications

The employer must act on the recommendations within the stated time. This is where HR and payroll coordinate:

• If the recommendation involves salary deduction, payroll should apply it only on a written order, with clear component codes and an audit trail.
• If it involves termination, follow your separation process, including full and final settlement, in accordance with applicable labour laws.
• Do not mention the matter in payslips, general HR dashboards or emails to wider groups.

Stage 8: Appeals

Either party can generally appeal the IC's recommendations within a set period to the appropriate forum under the service rules or the Act. Tell both parties about this in the outcome communication.

Stage 9: Closure and aftercare

A case does not end with a decision. Close properly:

• Check in with the complainant after a few weeks to confirm there has been no retaliation.
• Monitor reporting lines and performance reviews for signs of victimisation.
• Record lessons learned at a high level, without identifying details, to improve the training.
• Archive the file securely and note the retention date.

Worked example 3: a complaint in a 40-person SaaS firm

Fictional scenario. Meera, a product analyst at Orchid Cloud, a 40-person software company in Bengaluru, receives repeated late-night messages from a senior colleague, Arvind, that she finds uncomfortable. She emails the IC address with screenshots.

How the IC handles it:

1. Day 0. The Presiding Officer acknowledges the email the same day and offers a private meeting.
2. Day 2. In the meeting, Meera asks to be moved off Arvind's project team during the inquiry. The IC records her written request and recommends interim relief. Management approves a team change that does not affect her pay, title or growth path.
3. Day 3. The IC declines conciliation because Meera does not request it, and starts the inquiry. It sends Arvind the complaint and screenshots and sets a date for his reply.
4. Days 5 to 30. Hearings are held separately. Arvind says the messages were friendly banter. The IC reviews the full chat history, questions two colleagues who saw some exchanges, and notes the timing and tone of messages.
5. Day 45. The IC concludes, by majority and with reasons, that the conduct was unwelcome and of a sexual nature, and submits its report.
6. Following weeks. Management issues a written warning, mandatory counselling and removal from people-management duties for a period, consistent with the company's service rules. Arvind and Meera are told they can appeal.
7. Aftercare. HR checks in with Meera at thirty and ninety days. All files stay in a restricted folder, and no details are shared with the wider team.

Nothing in this example is a legal template; outcomes depend on facts and applicable rules. What it shows is the discipline: written steps, dates recorded, separation of roles, and confidentiality at every stage.

Confidentiality: What to Protect and How

The Act prohibits publishing or making known the contents of the complaint, identity and addresses of the aggrieved woman, respondent and witnesses, information about conciliation and inquiry proceedings, recommendations of the IC and action taken. There are limited provisions about disseminating information on the justice secured without disclosing identities.

Operational checklist:

• Limit access to IC members and a small number of authorised people.
• Use a separate, access-controlled folder or module for case files.
• Avoid discussing cases in open offices, chat groups or by email to wide lists.
• Label documents "Confidential" and use initials or case numbers instead of names in routine tracking.
• Remind everyone involved, in writing, about their confidentiality duty.
• When sharing aggregated data in your annual report or training, remove anything that could identify individuals.

A leak can harm people and create independent liability. Treat confidentiality as seriously as the inquiry itself.

Awareness and Training Programmes

The Act requires employers to organise workshops and awareness programmes at regular intervals, and to orient members of the IC. Awareness is also your best prevention tool.

Build a yearly training calendar

What makes training work

• Use scenarios, not slides. Ask "What would you do if..." questions based on realistic situations in your industry.
• Include digital conduct. Cover chat tools, video calls, social media and after-hours messaging.
• Address power dynamics. Many incidents involve a manager and a subordinate. Say that openly.
• Explain what a manager must do when told something informally. They should not promise secrecy, and they should guide the person to the IC or inform the IC as the policy requires.
• Make it accessible. Offer sessions in local languages and for shift workers.
• Keep records. Attendance, dates, trainer details, materials and feedback form your evidence.

Measuring effectiveness without inventing numbers

Track simple, honest indicators:

• Percentage of employees who have completed training in the year
• Percentage of new joiners trained within thirty days
• Post-session feedback on clarity
• Number of queries received by the IC, which can be a sign of awareness rather than a problem

Be careful with interpreting complaint counts. A low number does not prove a safe workplace, and a rise after training can indicate increased trust.

Worked example 4: a lean annual plan

Fictional scenario. A 25-person logistics start-up, SwiftHaul, has one HR generalist and a small budget. Their yearly plan:

• April. Refresh the policy; confirm IC membership; annual acknowledgement.
• May. Two-hour all-hands session with an external facilitator, in Hindi and English.
• July. One-hour manager workshop with scenarios from warehouse and delivery operations.
• September. IC refresher with the external member.
• November. Pulse survey on safety and awareness (anonymous).
• January. Collect data for the annual report.

Total effort is a few days of HR time and a modest facilitator fee, and every step produces a dated record.

The Annual Report: What to Prepare and When

The Act requires the IC to prepare an annual report and submit it to the employer and the District Officer. Employers are also expected to include the number of cases filed and their disposal in their own annual reporting where the law requires it, such as in the directors' or board's report for companies. Verify the current reporting format, deadlines and any state portals or forms with the official authority in your district.

What the report typically covers

Based on the general scheme of the Act and commonly used formats, expect to include:

• Number of complaints received in the year
• Number disposed of
• Number of cases pending for more than ninety days
• Number of workshops or awareness programmes held
• Nature of action taken

Your district authority may specify a format, so use that if available.

Annual report preparation checklist

1. Define the reporting period. Use the period specified by the authority or your financial or calendar year, as required.
2. Collect data from the case register. Counts only, with no names.
3. Compile training records. Number of sessions, audiences, and dates.
4. Confirm IC details. Current members, dates of appointment and any changes during the year.
5. Write a short narrative. Challenges, improvements and plans for next year.
6. Review for confidentiality. Confirm no identifying details slipped in.
7. Obtain signatures. The Presiding Officer signs and the employer acknowledges.
8. Submit and retain proof. Keep the acknowledgement or dispatch receipt.
9. Update the board report or management disclosure if applicable to your entity.

Filing even when there are no cases

A common error is to assume that no complaints means no report. Zero complaints is still information, and in general it is wise to file a report stating that no complaints were received, along with the awareness activities conducted. Confirm with the district authority or counsel how they expect nil returns to be handled.

Sample annual report skeleton

Create the skeleton once and update it each year. If your HR system logs cases and training attendance, report preparation becomes a ten-minute export, not a two-week hunt.

Remote and Hybrid Work: What Changes and What Does Not

The law's duties do not disappear because employees are working from home. Many questions here do not have settled, detailed official guidance, so a careful and conservative approach, backed by legal advice, is sensible.

The workplace is wider than the office

Since the definition of workplace extends to places visited in the course of employment, video calls, messaging platforms and virtual meetings can be settings in which harassment occurs. Treat them as part of your workplace for the purposes of your policy.

Common remote and hybrid risk areas

• Chat tools. Late-night messages, inappropriate emojis, unwanted private chats and suggestive memes.
• Video calls. Comments on appearance, home environment or personal life; requests to keep the camera on in unreasonable ways.
• Social media. Following, tagging or messaging colleagues in ways that cause discomfort.
• After-hours contact. Persistent calls or messages unrelated to work.
• Hybrid transitions. Behaviour at in-person days, client events and offsites.

Adapting the process for distributed teams

Running hearings online

If you hold hearings by video, think about:

• Privacy. Each participant should confirm they are alone or who else is present.
• Recording. Decide in advance whether sessions are recorded, get appropriate consent, and store files securely. Take legal advice on this.
• Technology. Use an approved platform with access controls; avoid casual group chats.
• Fairness. Both parties should receive the same opportunity and documents.
• Support. Offer breaks and access to a counsellor if needed.

Preserving digital evidence

When a complaint involves messages or calls, ask the complainant to keep the originals and avoid deleting anything. IT should be ready to preserve relevant logs on request from the IC, within your data protection and privacy obligations. Limit access to the minimum necessary.

Employees in different states

If your team is spread across cities, work out which office or administrative unit each employee is attached to, and which IC and district authority apply. Seek legal advice for employees who work entirely remotely from places where you have no office. Document the approach you adopt and apply it consistently.

Worked example 5: a hybrid dispute

Fictional scenario. At Banyan Retail Tech, a 120-person hybrid company with offices in Hyderabad and Noida, a woman engineer based in Hyderabad reports a team lead in Noida for inappropriate comments during video calls and private messages. The company has an IC at each office.

The HR head asks counsel which IC should handle the case. Based on advice, they use the IC of the complainant's office, include the Noida-based internal member only if there is no conflict, and ask the external member to attend hearings by video. Hearings are scheduled during working hours for both parties, evidence is preserved by IT under restricted access, and both parties receive the same documents through a secure channel.

The takeaway is not the specific allocation, which depends on advice, but the habit of deciding who handles what before a crisis, and documenting why.

Common Mistakes SMBs Make

After reviewing how small organisations handle POSH compliance, a pattern of avoidable errors appears.

1. No IC order, or an outdated one. Membership lists that include people who left a year ago.
2. No external member. A committee that is incomplete may have its findings challenged.
3. Treating the founder as the decision-maker. The IC has defined functions; management acts on its recommendations.
4. Asking managers to investigate informally. This breaks process and confidentiality.
5. Pressuring the complainant to settle. Conciliation must be at her request and not monetary.
6. Failing to protect against retaliation. Subtle changes to roles or ratings after a complaint can create fresh problems.
7. Skipping training because nobody has complained. Awareness is a continuing duty.
8. No annual report. Even a nil report is evidence of diligence.
9. Storing files carelessly. Sensitive documents in shared drives or open email chains.
10. Ignoring contract workers and interns. Their experience matters, and the law may cover them.
11. Copy-pasting a template policy. A policy that does not reflect your actual locations, channels and structure will fail in practice.
12. Not reviewing after a case. Each case is a chance to improve training and process.

The Employer's Compliance Calendar

A calendar turns good intentions into habit. Adapt this one to your reporting cycle.

Maintaining an evidence file

A single, well-organised compliance folder will save you in audits and client reviews. Include:

• IC constitution orders and amendments
• External member engagement letters
• Policy versions and acknowledgements
• Training calendars, attendance and materials
• Notices and screenshots of intranet display
• Annual reports and submission proofs
• Anonymised case register

How Technology Can Help Without Compromising Privacy

HR software cannot replace a properly constituted IC or legal advice, but it can remove admin friction so that people focus on judgment.

Useful capabilities for POSH compliance include:

• Location-wise headcount tracking to flag when a unit crosses the IC threshold.
• Policy distribution and acknowledgement tracking at onboarding and annually.
• Training scheduling and attendance records that feed directly into the annual report.
• Document storage with role-based access so IC files are visible only to authorised members.
• Reminders for IC term expiry, annual training and report deadlines.
• Audit trails showing who accessed or changed records.
• Payroll controls so that salary deductions or leave arising from an IC recommendation are applied only on authorised instruction and are hidden from routine views.

When evaluating any tool, ask hard questions about access control, data residency, retention settings and how confidential case data is segregated from the general HR database. Involve your IT and legal advisers in the decision.

A 30-Day Action Plan for Getting Compliant

If you are starting from scratch, here is a realistic month.

Week 1: Assess

• Count employees by location, including how you treat contract workers and interns.
• Check whether an IC order exists and whether it is current.
• Collect existing policies, notices and training records.
• Book a consultation with a lawyer familiar with workplace law.

Week 2: Build

• Identify the Presiding Officer and internal members.
• Shortlist and approach external member candidates.
• Draft the policy and a one-page flowchart.
• Set up a confidential email address and folder for the IC.

Week 3: Formalise

• Issue the constitution order and external member engagement letter.
• Finalise the policy after legal review.
• Publish notices physically and digitally.
• Schedule training for the IC and for all staff.

Week 4: Communicate and record

• Run the first awareness session or release the e-learning module.
• Collect policy acknowledgements.
• Set up the complaint register, annual report template and compliance calendar.
• Brief managers on what to do when someone confides in them.

By the end of the month you will have a defensible baseline, which you can improve each quarter.

Frequently Asked Questions

1. We have fewer than ten employees. Do we need to worry about POSH compliance?

You may not be required to form your own Internal Committee, as complaints from smaller workplaces generally go to the Local Committee at the district level. But you still have a duty to provide a safe workplace, and it is sensible to adopt a policy, run awareness sessions and tell employees how to reach the Local Committee. Verify counting rules with an advisor, since interns and contract staff can complicate the headcount.

2. Can the founder or HR head be the Presiding Officer?

The Presiding Officer is expected to be a senior woman employee at the workplace. A founder who is not a woman, or whose role creates conflicts, would not fit that requirement. Whether a particular person qualifies depends on the statute's wording and the facts, so check with counsel rather than assuming.

3. Is an external member really mandatory?

The Act provides for an external member from an NGO or association committed to women's causes, or a person familiar with sexual harassment issues. Treat it as a core requirement of a properly constituted IC and confirm the current wording and any updates with official sources.

4. What if we receive a complaint after the standard time limit?

The Act contemplates a time window for filing and gives the IC power to extend it for a limited period if it is satisfied that circumstances prevented timely filing, with reasons recorded in writing. Do not turn away a late complaint at the HR desk; refer it to the IC, which can decide.

5. Does the Act cover remote employees and virtual harassment?

The definition of workplace is broad, and conduct that happens over work chat, calls or video meetings is generally treated as connected with employment. Specific questions about employees in other states or fully remote setups should be discussed with legal counsel, and your policy should expressly mention digital channels.

6. Do we have to file an annual report if there were no complaints?

It is prudent to do so. A nil report with details of awareness activities shows that the committee is active. Confirm the preferred format and the filing method with your district authority, since practices can vary.

7. Can a complaint be settled with a payment?

The Act states that conciliation must not be based on a monetary settlement. Conciliation is also available only at the complainant's request. If an arrangement involving money is proposed, stop and consult counsel.

8. What happens if our company does not comply?

The Act provides for penalties for failing to constitute an IC, failing to act on recommendations, or other non-compliance, with higher penalties and possible cancellation or non-renewal of business registrations for repeat offences. The exact amounts and consequences should be verified in the current official text. Beyond legal penalties, poor compliance can cost you client trust and employee confidence.

Conclusion: Make POSH Compliance a Routine, Not a Reaction

POSH compliance is not a one-time project. It is a rhythm: a properly constituted committee, a clear policy, regular training, a fair complaint process, careful records and an annual report. For an SMB, the secret is to keep each element simple and to put dates in the calendar so nothing slips.

If you remember only a few points from this guide, make them these:

• Constitute an IC by written order wherever the threshold applies, and keep it current.
• Include an external member and train every member.
• Publish the policy, acknowledge it, and make the complaint route obvious in office and remote settings.
• Follow the process and timelines, keep minutes, and protect confidentiality.
• Train people every year and keep proof.
• File the annual report, even when there are no cases.
• Verify rules with official sources and legal counsel, because requirements evolve.

The best compliance systems are boring in the right way: reminders fire on time, records are in one place, and the HR team is not hunting through email threads when a client or authority asks questions.

If you want a lighter administrative load, CozyHR can help you keep location-wise headcount, policy acknowledgements, training records and compliance reminders in one place alongside your payroll and HR data. You can try CozyHR at your own pace and see whether it fits how your team works. Whatever tools you choose, the goal stays the same: a workplace where people feel safe, are heard fairly, and trust that the system works.

Disclaimer: This article is for general information only and is not legal advice. Laws, rules and official procedures may change. Please consult official government sources and a qualified legal professional before acting on any matter described here.