POSH Act Compliance: A Practical Employer Guide

POSH Act compliance is one of those obligations that sits quietly in the background until the day it doesn't. A complaint lands in someone's inbox, and a company that has never thought seriously about its internal committee suddenly has to run a quasi-judicial inquiry, protect two people's dignity at once, and produce a report that could be scrutinised by a court years later. Most Indian employers get caught out not because they meant to ignore the law, but because they treated it as a formality — a PDF on a shared drive and a committee that exists only on paper.

This guide is for HR managers, founders and compliance leads at Indian companies, especially smaller ones without a legal team. It covers how to constitute an Internal Committee properly, what belongs in your policy, awareness training, how a complaint moves from receipt to inquiry to findings, confidentiality and interim relief, annual filings, and records.

One note first: this is general information, not legal advice. The statute, the rules under it, state rules and administrative practice all change, and details matter enormously in individual cases. Verify current requirements with official sources or your advisor, and involve qualified legal counsel in any serious or contested matter.

What the POSH Act actually requires of employers

The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act — commonly shortened to the POSH Act — was enacted in 2013 following long-standing judicial guidelines. It creates three connected duties: prevent harassment, prohibit it through clear standards, and provide a credible internal mechanism to redress complaints. In practice, employer obligations cluster as follows:

• Constitute an Internal Committee (IC) at every workplace with ten or more employees, at every office or administrative unit.
• Publish a policy against sexual harassment and communicate it to everyone in the workplace.
• Display the penal consequences of sexual harassment and the IC's composition and contact details conspicuously.
• Run awareness programmes at regular intervals, plus capacity-building for IC members.
• Give the IC the facilities it needs, including a safe space to meet and administrative support.
• Assist a complainant who wishes to file a police complaint, and act on the IC's recommendations.
• Treat breach of the policy as misconduct under your service rules.
• File an annual report and include the required disclosure in the company's annual report where applicable.

Two structural points are easy to miss. First, "workplace" is broad: it extends beyond the office to places an employee visits during the course of employment — client sites, offsite events, work travel, employer-arranged transport — and, in hybrid organisations, reasonably to work-related digital spaces such as chat channels, video calls and project tools. If a person is there because of work, treat it as within scope and let the IC decide boundaries on the facts.

Second, coverage of people is broader than "employees on payroll": protection is contemplated regardless of the nature of engagement — regular, temporary, ad hoc, daily wage, contractual, agency-supplied, apprentices, trainees, probationers, and visitors in some circumstances.

Where the Local Committee fits in

Not every complaint runs through an IC. The law also contemplates a district-level Local Committee, constituted by the District Officer. That route matters in two situations:

1. Workplaces with fewer than ten employees, where there is no obligation to constitute an IC.
2. Complaints against the employer itself — a proprietor, a founder-director, or the person with ultimate control over the workplace. An IC of that person's own subordinates cannot credibly adjudicate against them.

A five-person company is not obliged to constitute an IC, but it should still have a written policy and tell its team where the Local Committee sits. Contact details vary by district and state; check your state's Women and Child Development department or district administration for current details rather than relying on a list you found once.

Constituting the Internal Committee: composition and mechanics

The IC is the heart of POSH Act compliance. A badly constituted committee taints everything downstream — an inquiry by an invalid IC is vulnerable to challenge no matter how carefully it was run.

Composition requirements

A few practical rules follow from this structure:

• A minimum viable IC is four members — a presiding officer, two employee members and one external member. Many organisations run five or six to absorb recusals.
• The presiding officer must be a senior woman. "Senior" is relative to your organisation, not an abstract benchmark. In a forty-person company a department head qualifies; a junior HR executive nominated because she was available does not.
• Every office or administrative unit needs an IC where the numbers warrant it. A company with offices in Pune, Bengaluru and Gurugram should not default to one IC at head office; constitute committees where your people actually are.
• Quorum matters. Proceedings generally require the presiding officer and a minimum number of members. Never let a single member run an "informal inquiry" alone.

Choosing the external member well

The external member is where small companies most often cut corners, and where the shortcut is most visible. The role exists to bring independence and subject-matter competence into a room otherwise made of colleagues.

• Look for genuine experience: a practitioner who has served on committees, a lawyer working on employment or gender matters, a social worker from a credible organisation, or an established trainer.
• Use a written engagement letter covering scope, availability, confidentiality, conflicts and fees. The law contemplates payment of fees or allowances; agree the basis in advance.
• Avoid your regular external counsel, a director's relative, a vendor, or anyone commercially dependent on the company. Independence is a perception test as much as a factual one.
• Check availability realistically. A member who cannot attend hearings within the statutory timeline stalls the inquiry, and the delay becomes a ground of challenge.

Members who cannot serve, and members who must step aside

Certain circumstances disqualify a member or require removal — breaching confidentiality, conviction of an offence or pending proceedings, being found guilty in disciplinary proceedings, or abusing the position. Beyond those grounds, build a recusal norm into your IC's working rules: a member who manages or reports to either party, has a close personal relationship with them, or has already expressed a view on the incident should step aside. Record recusals in writing with reasons, and draw the replacement from a standing pool of trained alternates — which turns a recusal from a crisis into a phone call.

The constitution order

Constitute the IC by a formal written order signed by the employer, naming each member and their role, the date of nomination, the term, and contact details for complaints. Refresh it whenever membership changes. Then publish it — notice board, intranet, handbook, a pinned message in your main channel, and a page new joiners see at onboarding — and make contact easy with a dedicated email address monitored by the presiding officer plus a physical route such as a sealed drop box. Never route POSH complaints through a generic HR ticketing queue.

Writing the policy: a sample outline

Your policy is the document employees read once during onboarding and again on the worst day of their working life. Write it for the second reading: plain language, short sentences, no clause numbering that requires a law degree. Translate it into the languages your workforce actually uses. Here is a workable outline to adapt.

Sample POSH policy outline

1. Purpose and commitment A short statement of intent from leadership. Two paragraphs, not two pages.

2. Scope and applicability Who is covered — all persons at the workplace regardless of employment status, including permanent, probationary, contractual, agency-supplied, consultants, interns, trainees, apprentices, volunteers and, where applicable, visitors. Where it applies — offices, client sites, work travel, employer-arranged transport, offsite events, work-related social gatherings and work-related digital channels. Plus a note on how this policy interacts with your code of conduct.

3. What sexual harassment means The statutory concept in plain terms: unwelcome acts or behaviour, direct or by implication, including physical contact and advances, a demand or request for sexual favours, sexually coloured remarks, showing pornography, and other unwelcome physical, verbal or non-verbal conduct of a sexual nature — plus the associated circumstances the law recognises, such as implied promises of preferential treatment, threats about employment status, interference with work, a hostile work environment, and humiliating treatment likely to affect health or safety.

4. Illustrative examples A short, respectfully written list, including digital conduct — inappropriate messages or images in work channels, persistent unwanted contact after being asked to stop, comments on appearance in video meetings — stated to be illustrative, not exhaustive.

5. Who to contact IC members by name, role, email and phone, plus the Local Committee route for complaints against the employer.

6. How to make a complaint Format, timelines, who may complain on the aggrieved woman's behalf if she is unable to, and what happens next. Reassure the reader they can approach any IC member.

7. Conciliation Available only at the complainant's request, never a precondition to inquiry, and never on the basis of a monetary settlement.

8. The inquiry process Step by step, with indicative timelines, and a plain statement that both parties will be heard in line with principles of natural justice.

9. Interim relief What may be requested while the inquiry is pending, and how.

10. Confidentiality What is protected, who has access, and the consequences of breach.

11. Consequences and remedies Disciplinary action under service rules, recovery from wages in appropriate cases, and the possibility of action for a malicious complaint or false evidence — coupled with an explicit statement that inability to substantiate a complaint is not by itself malicious.

12. Non-retaliation, appeal, awareness and review No adverse action against a complainant or witness acting in good faith, retaliation being independently punishable misconduct; the right of either party to appeal within the prescribed period; the frequency of awareness sessions and IC capacity-building; record-keeping and the annual report; and the annual review date and policy owner.

Two drafting cautions. First, do not copy a policy from another company's website — you will inherit clauses that contradict your service rules, references to committees you don't have, and timelines you can't meet. Second, do not write in a way that discourages complaints. Warnings about false complaints, written aggressively and placed early, have a chilling effect. Place that clause late, phrase it carefully, and pair it with a statement that an unproven complaint is not a false one.

Awareness training that actually works

Awareness programmes are a statutory requirement and, done properly, the most effective prevention tool available. Done as a ritual, they change nothing.

Two distinct audiences

All employees need to know what the policy covers, what the standards of behaviour are, how to raise a concern, what happens next, and what protections exist — expressed in everyday terms rather than legal ones.

IC members need substantially more: how to receive a complaint, conduct a hearing, question witnesses without leading them, assess credibility fairly, weigh evidence on the balance of probabilities, write a reasoned report, and manage their own biases. IC capacity-building is a specific obligation, not an optional extra.

Making sessions land

• Use scenarios, not statutes. Realistic, anonymised situations produce genuine learning; reading out definitions produces nothing.
• Cover the grey zones — repeated compliments, after-hours messaging, banter in group chats, the manager who asks a junior colleague out once.
• Train managers separately. A manager who hears about an incident, even informally, cannot promise to keep it quiet and cannot investigate alone; they must point the person to the IC while respecting their autonomy about whether to file.
• Keep it live where possible. E-learning scales, but a facilitator answering real questions achieves more.
• Run it at onboarding and at defined intervals — annually is common and defensible. Check applicable rules and your state's requirements for any specified frequency.
• Record attendance: date, mode, facilitator, agenda, attendees, materials. This is both a governance record and evidence that the prevention obligation was discharged.

An awareness plan for a company of 30–150 people

The complaint process, step by step

What follows is a practical sequence. Timelines below are indicative of the general framework; verify current statutory periods, extensions and any state-specific variations before you rely on them operationally.

Step 1: Receiving the complaint

A written complaint may be submitted to the IC. Points to handle carefully:

• The complaint is generally to be made within three months of the incident, or of the last incident in a series. The IC may extend this period where satisfied that circumstances prevented timely filing, recording reasons in writing. Delay is not automatically fatal.
• If the complainant cannot file herself — incapacity or death — the law permits specified others to file on her behalf.
• If someone approaches the IC verbally, a member should assist in reducing the complaint to writing: help with mechanics, not shaping content.
• Acknowledge receipt in writing, provide the policy, explain the process and timeline, and set out available support.
• Do not screen complaints for merit at intake. The IC decides; HR does not filter.

Step 2: Early decisions by the IC

Within the first few days the IC should meet and settle, in signed minutes: whether the complaint falls within its jurisdiction or is a Local Committee matter; whether any member must recuse; whether conciliation has been requested; whether interim relief is needed immediately; and who is the point of contact for each party.

Step 3: Conciliation, if requested

Before initiating an inquiry, the IC may — at the request of the complainant — take steps to settle the matter through conciliation. Three constraints apply. It happens only if the complainant asks; the IC must never propose it as the default and HR must never suggest it as a way to make the matter go away. No monetary settlement may be made its basis. And if a settlement is reached, the IC records it and forwards it for action with no further inquiry, while a failed settlement — or non-compliance with its terms — sends the matter to inquiry.

Conciliation suits a narrow band of matters, typically where the complainant wants acknowledgement, an apology or a change in reporting line rather than a finding. It is inappropriate for serious allegations, and pressure to conciliate is itself a governance failure.

Step 4: Notice to the respondent

Where the matter proceeds to inquiry, send the respondent a copy of the complaint within the prescribed period after receipt — generally a short window measured in days. The respondent then files a reply with supporting documents and a list of witnesses, again within a short prescribed period. The notice should set out the allegations clearly, explain the process, state the right to be heard and to present evidence, and confirm the confidentiality obligations that now bind them.

Vague notice is a common reason an inquiry is later found unfair. The respondent must know precisely what is alleged, including approximate dates, places and conduct, so they can meaningfully answer it.

Step 5: The inquiry

The IC conducts the inquiry in accordance with applicable service rules or, where none apply, the rules prescribed under the Act. Core principles:

• Both parties are heard. Each gets a fair opportunity to present their case, respond to the other's material, and comment on the evidence relied upon.
• No cross-examination between the parties. Questions are routed through the IC. This protects both sides and keeps proceedings orderly.
• A party may be accompanied in line with your policy, but legal practitioners generally do not represent parties before the IC.
• The standard is the balance of probabilities — what is more likely than not on the material before the IC, not the criminal standard.
• The IC has certain powers of a civil court, including summoning and enforcing attendance and requiring production of documents. Use them thoughtfully and record their exercise.
• Absence and non-cooperation. Where a party fails to attend without sufficient cause for a specified number of consecutive hearings, the IC may, after written notice, terminate the proceedings or proceed ex parte. Follow the notice requirements precisely.

Practical conduct of hearings:

• Hold hearings in a private, neutral space. For distributed teams, use a secure video platform, everyone joining from a private location, no recording without a documented basis.
• Never place the complainant and respondent in the same room or call unless there is a compelling documented reason and the complainant consents.
• Take contemporaneous minutes, share them for confirmation, and have participants sign or confirm in writing.
• Question witnesses separately, opening with broad questions and avoiding suggested answers.
• Assess credibility on the whole picture — consistency, contemporaneous corroboration such as messages, plausibility, motive — rather than demeanour alone.
• Keep the scope tethered to the complaint. Deal with new and distinct allegations as new matters rather than folding them in silently.

Step 6: Findings and report

The IC completes the inquiry and provides a report of its findings to the employer, with recommendations.

• If the allegation is not proved, the IC recommends that no action is required.
• If the allegation is proved, the IC recommends action — which may include action for misconduct under the applicable service rules, and deduction from the respondent's salary or wages as compensation, determined with reference to factors such as loss of career opportunity, medical expenses, mental trauma, the respondent's income and financial status, and feasibility of payment.
• The report must be reasoned: the allegations, the process, the evidence considered, the findings on each allegation, and the reasoning connecting evidence to conclusion. A one-line conclusion is indefensible.
• The report is provided to both parties in accordance with the applicable rules.

The employer must then act on the recommendations within the prescribed period. This is implementation, not a discretionary review of the IC's findings.

Step 7: Appeal

A person aggrieved by the recommendations, or by their non-implementation, may appeal to the appropriate forum within the prescribed period. Your policy should say this exists, and the IC should mention it when communicating the outcome.

Indicative inquiry timeline

Treat these as a planning framework and confirm current periods, including state-specific rules, before applying them to a live matter. Missing a statutory deadline is one of the few errors that is both easy to avoid and hard to defend.

Confidentiality: what it protects and how to enforce it

Confidentiality is not a courtesy here; it is a statutory obligation with penal consequences for breach. The contents of the complaint, the identity and addresses of the complainant, respondent and witnesses, the conduct of the proceedings, the recommendations and the action taken are all protected from publication or disclosure to the public, press or media. Operationally:

• Restrict the circle to IC members, the parties, witnesses as necessary, and the person implementing the outcome. Not the team, not the reporting manager "for context," not the leadership group.
• Control the artefacts. Restricted folders with named access, no forwarding chains, and no live matter discussed in an open channel or a calendar invite titled with someone's name.
• Bind everyone in writing — members, witnesses and both parties should sign a confidentiality undertaking.
• Anonymise upward reporting. Leadership may know a matter exists and how it is progressing, not who is involved.
• Treat breach as misconduct. Rumour about a live inquiry damages the complainant, prejudices the respondent and taints the process.

Confidentiality has limits: it does not prevent the aggrieved woman from disclosing information about the outcome to obtain justice, nor override lawful disclosure to authorities, nor excuse you from the anonymised aggregate reporting described below.

Interim relief while the inquiry is pending

Where the complainant requests it, the IC may recommend interim measures during the inquiry. The point is to remove pressure and prevent further harm without prejudging the outcome, so measures must be protective, not punitive. Commonly available options include:

• Transfer of the complainant or the respondent to another workplace.
• Leave for the complainant, in addition to her normal entitlement.
• Restraining the respondent from reporting on the complainant's performance or writing her appraisal, with that responsibility passed to another person.
• Any other relief the applicable rules provide.

Two principles keep interim relief fair. First, the burden of disruption should not fall by default on the complainant — moving her while the respondent stays put is experienced as a penalty. Where separation is needed, look first at moving the respondent or changing reporting lines. Second, interim measures are not findings. Communicate them neutrally and keep them time-bound to the inquiry. Suspension is a service-rules question rather than a POSH remedy; use it sparingly and with advice.

The annual report, filings and disclosures

The IC must prepare an annual report for each calendar year and submit it to the employer and the District Officer. It is a statistical and process document, not a narrative of individual cases, and generally covers the number of complaints received, the number disposed of, cases pending for more than ninety days, workshops or awareness programmes carried out, and the nature of action taken by the employer.

Separately, where the employer is a company required to prepare a directors' or board report, a statement about compliance with the constitution of the Internal Committee goes into that report. If your entity files no such report, the obligation is generally to intimate the District Officer.

Confirm the applicable format, submission address and due date with official sources each year — formats and portals vary by state and change over time.

Annual POSH Act compliance calendar

Records: what to keep and for how long

Good records turn a defensible process into a provable one. Maintain a POSH register or case file with, at minimum:

• The constitution order and every amendment, with dates and member details.
• Signed policy acknowledgements and training records — dates, attendees, content, facilitator credentials.
• For each complaint: the complaint, acknowledgement, notices, replies, minutes of every sitting, evidence submitted, witness statements, recusal notes, interim relief recommendations, the inquiry report, communication to both parties, and evidence of implementation.
• Annual reports and proof of submission.

Keep case files segregated from ordinary personnel files, with access limited to named individuals and an access log. Do not place details of a pending complaint in the respondent's general HR file; record only the final outcome, in line with your service rules.

The Act does not set a single universal retention period, and organisations commonly retain case files for several years to cover limitation and appeal windows. Set a written retention schedule, apply it consistently, and confirm the position with your advisor.

POSH Act compliance for small companies, done properly

Small teams often assume this is a large-company problem. It is not, and the burden is smaller than it looks if you sequence it sensibly.

Under ten employees. No IC is required. Still: circulate a policy, display the Local Committee contact details for your district, brief the team, and record that you did. If a complaint arises, direct it to the Local Committee and cooperate fully.

Ten employees and above. Work through this sequence:

1. Count your workplace population honestly, including contractors, interns and agency staff.
2. Identify the senior woman who will preside, and two employee members with sound judgment.
3. Engage an external member on a written retainer, with agreed fees and availability.
4. Issue the constitution order and publish it everywhere your team looks.
5. Adopt a plain-language policy and collect acknowledgements.
6. Display the policy summary, penal consequences and IC contact details at the workplace.
7. Run an awareness session and an IC orientation within the first quarter.
8. Set up case-file structure, confidentiality undertakings and the annual calendar above, and diarise the annual report and IC term expiry.

Founder-led companies should state in the policy that complaints against the employer go to the Local Committee, and founders should not sit on the IC. The instinct to be involved is understandable, and it is exactly what undermines credibility.

Distributed teams should decide in advance which location's IC covers which employees, ensure secure video hearings are possible, and treat work chat and video platforms as part of the workplace.

Common mistakes employers make

• A committee that exists only on paper — members who have never met, never trained, and cannot describe the process.
• Skipping the external member, or appointing a friendly consultant who is not independent. This alone can invalidate an inquiry.
• An expired IC. Terms lapse, members resign, and nobody notices until a complaint arrives.
• HR investigating first. A well-meaning "preliminary fact-find" before the IC is seized of the matter contaminates evidence and creates an unfair record.
• Pushing conciliation to make a matter go away, or basing it on a monetary settlement, which is impermissible.
• Vague notice to the respondent. If they cannot tell exactly what is alleged, they cannot answer it, and the inquiry is unfair.
• Letting the parties confront each other through direct cross-examination.
• A conclusion without reasons, which will not withstand scrutiny.
• Interim relief that penalises the complainant by moving her or quietly sidelining her.
• Retaliation by omission — a cooler appraisal, exclusion from meetings, a withdrawn opportunity — after a complaint closes.
• Missing the annual report or the board-report disclosure, or treating the policy as finished. Review it annually.

Frequently Asked Questions

Is an Internal Committee mandatory for a company with fewer than ten employees?

No. The obligation arises at workplaces with ten or more employees; smaller workplaces are served by the district Local Committee. You should still publish a policy and run basic awareness — the standards of conduct do not disappear because of headcount.

Can the external member be someone we already work with?

Only if they are genuinely independent. Your regular external counsel, a vendor, an investor's nominee or a director's relative all create a perception of bias. Choose someone with relevant expertise or an NGO background, engage them in writing, and pay the agreed fees or allowances.

What if the complaint is against the founder or the employer?

It goes to the Local Committee, not the IC. A committee of the employer's own subordinates cannot fairly adjudicate a complaint against the person who controls their employment. Say this clearly in your policy so nobody has to work it out under pressure.

How long does an inquiry take?

The general framework requires completion within ninety days, the report to the employer shortly after, and employer action within sixty days of the recommendations. Verify current periods and state variations, and build internal milestones well inside the outer limits.

Do complaints have to be filed within three months?

The ordinary limitation is three months from the incident or the last incident in a series, and the IC may extend it for reasons recorded in writing where circumstances prevented earlier filing. Do not reject a delayed complaint reflexively — consider it, decide, record the reasoning.

What happens if the allegation cannot be proved?

The IC recommends that no action is required against the respondent. An unproven complaint is not a false complaint, and the complainant must not face adverse consequences for raising it in good faith. Action for a malicious complaint is possible only on a specific finding after inquiry; inability to substantiate is expressly not enough.

Can our POSH policy cover men and gender-diverse employees?

The statutory mechanism is framed around complaints by women. Nothing stops you offering an equivalent internal process for everyone under your code of conduct, and most well-run companies do. Keep the two clearly distinguishable in your documentation so the IC's jurisdiction is never in doubt.

Getting it right, and keeping it right

POSH Act compliance is not a document exercise. It is a standing capability: a properly constituted internal committee with a real external member, a policy people can read, training that changes behaviour, a process fair to both complainant and respondent, disciplined confidentiality, and records that prove all of it. Companies that build this before they need it handle the hard day far better than those that improvise.

Start with the basics this quarter — constitute or reconstitute your IC, refresh the policy, publish the contact details, book the awareness session, diarise the annual report — then keep it alive with the calendar above.

CozyHR helps Indian SMBs keep the administrative side in order: policy acknowledgements captured at onboarding, training attendance recorded against each employee, IC composition and term dates in one place, and reminders so nothing lapses. Try CozyHR and take the routine tracking off your plate, so your IC can focus on the part that needs judgment.

This article is general information for Indian employers and is not legal advice. Statutory provisions, rules, state-specific requirements, formats and timelines change; verify current requirements with official sources or your advisor. Any live complaint — and any matter involving potential criminal conduct — warrants qualified legal counsel from the outset.