POSH Compliance in India: Complete Guide for Employers

POSH compliance means meeting the obligations that the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 places on an employer. In practice it has five parts: constitute an Internal Committee at every workplace with ten or more workers, adopt and publish a POSH policy, run awareness and IC orientation programmes, handle complaints within the statutory timelines, and prepare the annual report each calendar year. Non-compliance attracts a fine of up to ₹50,000 for the first offence.

If you run a company in India — private limited, LLP, partnership firm, trust or a proprietorship with staff — POSH is not an HR nicety. It is a standalone central law with its own committee, its own procedure, its own reporting and its own penalty. And since 14 July 2025, for companies it also feeds directly into the Board's Report filed with the MCA.

This guide sets out what the law actually requires, what is practice rather than statute, and what a compliant file looks like when a District Officer, an auditor or an investor asks to see it.

What is POSH?

POSH is the common shorthand for the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013. The law grew out of the Supreme Court's 1997 judgment in Vishaka v. State of Rajasthan, which laid down binding guidelines in the absence of legislation. Those guidelines governed Indian workplaces for sixteen years until Parliament enacted the POSH Act, which came into force on 9 December 2013 along with the POSH Rules, 2013.

The Act does three things: it defines sexual harassment at the workplace, it creates an internal forum to inquire into complaints, and it places positive duties on the employer to prevent harassment in the first place.

One point employers must understand clearly: the POSH Act protects an "aggrieved woman". A complaint by a male employee, or a complaint that falls outside the statutory definition, cannot be inquired into under this Act. Most well-run organisations therefore adopt a gender-neutral internal anti-harassment policy that runs alongside the statutory POSH mechanism, so that no employee is left without a route. That is best practice, not a statutory requirement — and the two mechanisms should be kept procedurally separate.

POSH Act 2013: the structure in one view

Provision	What it covers
Section 2(n)	Definition of sexual harassment
Section 2(o)	Definition of "workplace" — deliberately wide
Section 4	Constitution of the Internal Committee
Sections 5–7	District Officer and Local Committee
Section 9	Complaint — within three months, extendable by three
Section 10	Conciliation, at the woman's request only
Sections 11–13	Inquiry, 90-day limit, report within 10 days, action within 60 days
Section 12	Interim relief during inquiry
Section 14	False or malicious complaints
Sections 16–17	Confidentiality and penalty for breach
Section 18	Appeal within 90 days
Section 19	Duties of the employer
Sections 21–22	Annual report by the IC; disclosure by the employer
Section 26	Penalty for non-compliance

Who needs to comply with POSH?

Every employer of a workplace in India is covered by the Act. Where the workplace employs ten or more workers, the employer must constitute an Internal Committee (IC) under Section 4. Where it employs fewer than ten, complaints go to the Local Committee constituted by the District Officer — but the employer's preventive duties under Section 19 continue to apply.

Two aspects of the threshold catch employers out.

The count is broad. It is not limited to employees on the payroll. Regular, temporary, ad hoc, daily-wage, contractual, probationary, apprentice and intern engagements — paid or unpaid — count towards the number of workers at the workplace. So do workers engaged through a contractor.

The count is assessed at the workplace, not at the group. Section 4 requires an IC at every office or administrative unit. A company with a 40-person head office in Kolkata and a 12-person branch in Pune needs a properly constituted IC covering each — one committee sitting only in the head office does not automatically discharge the obligation for the branch.

Applicability across entity types

Entity	IC required at 10+ workers	POSH policy	Board's Report disclosure
Private limited company	Yes	Yes	Yes — see the caveat for small companies below
Public limited company	Yes	Yes	Yes
One Person Company / small company	Yes	Yes	Rule 8 disclosure format does not apply (Rule 8(6)); abridged Board's Report under Rule 8A
LLP	Yes	Yes	Not applicable — no Companies Act Board's Report
Partnership firm / proprietorship	Yes	Yes	Not applicable
Trust, society, NGO, educational institution, hospital	Yes	Yes	Not applicable

Nothing about POSH is contingent on turnover, sector, funding stage or profitability. A pre-revenue startup with eleven interns has the same Section 4 obligation as a listed company.

What is an Internal Committee?

The Internal Committee is the statutory forum that receives and inquires into complaints of sexual harassment at the workplace. It is constituted by the employer by a written order — not by an email, not by a slide in an HR deck — and the order is one of the documents an inspection will ask to see.

Composition (Section 4)

Role	Requirement
Presiding Officer	A woman employed at a senior level at the workplace. If no senior woman is available, one may be nominated from another office or administrative unit of the same employer, or from another workplace or organisation
Members from among employees	At least two, preferably committed to the cause of women, or with social work experience or legal knowledge
External member	One member from an NGO or association committed to the cause of women, or a person familiar with issues relating to sexual harassment
Gender balance	At least half of the total members must be women
Tenure	Not exceeding three years from the date of nomination

Under Rule 3 of the POSH Rules, the external member is entitled to an allowance of ₹200 per day for attending proceedings, plus travel reimbursement, payable by the employer. That is the statutory floor. In practice, qualified external members — trained POSH practitioners and lawyers — are engaged on professional fee terms, and paying a market rate is perfectly permissible.

The composition rules are not decorative. High Courts have set aside inquiries where the committee was short of the prescribed strength or where the external member did not meet the statutory description. If the IC is defective, its findings can be challenged and the entire inquiry wasted.

Deeper treatment: Internal Committee under POSH Act.

Role and responsibilities of the IC

Receive complaints and acknowledge them
Offer conciliation if — and only if — the aggrieved woman requests it, and never on a monetary settlement basis
Conduct the inquiry in line with principles of natural justice
Recommend interim relief during the inquiry where warranted
Complete the inquiry within 90 days and submit the report to the employer within 10 days of completion
Recommend action and, where harassment is proved, compensation
Maintain confidentiality
Prepare the annual report each calendar year

The IC exercises certain powers of a civil court for summoning persons and requiring documents. Parties are not permitted to be represented by a legal practitioner in the proceedings.

The POSH policy

The POSH policy is the document that translates the Act into your workplace. Rule 13 of the POSH Rules requires every employer to formulate and widely disseminate an internal policy for prohibition, prevention and redressal of sexual harassment.

A usable policy covers the statutory definition of sexual harassment, who it applies to, the definition of workplace including off-site locations and work-related travel, the names and contact details of IC members, how to complain and by when, what happens after a complaint is filed, interim relief, confidentiality, protection against retaliation, consequences for the respondent, and consequences for a false or malicious complaint.

A policy copied from the internet and never circulated fails on both counts — it is usually inaccurate and it is not disseminated. Full drafting guidance: POSH policy for companies.

Employee awareness and training

Section 19(c) requires the employer to organise workshops and awareness programmes at regular intervals for employees, and orientation programmes for IC members. The Act does not fix a numerical frequency, which is why "at least once a year for all employees, plus a separate IC orientation" has become the accepted compliance standard — it is defensible, and it is what District Officers and auditors look for.

Training records matter more than training slides. Keep dated attendance sheets, the session agenda, the trainer's name and the mode of delivery. Awareness programmes conducted during the year are a specific line item in the statutory annual report, so the numbers must be capable of being evidenced.

Complaint handling: the statutory timeline

Stage	Timeline
Filing the complaint	Within 3 months of the incident, or of the last incident in a series. The IC may extend by a further 3 months for recorded reasons
Copy to the respondent	Within 7 working days of receipt
Respondent's reply	Within 10 working days
Inquiry	To be completed within 90 days
Inquiry report to the employer	Within 10 days of completion of the inquiry
Action on recommendations	Within 60 days of receiving the recommendations
Appeal	Within 90 days of the recommendation

Conciliation under Section 10 can only be initiated at the request of the aggrieved woman, and no monetary settlement may be made the basis of conciliation. If a settlement is reached, no further inquiry is conducted.

Annual reporting requirements

There are two distinct reporting obligations, and conflating them is the most common error in POSH content and in practice.

One — the IC's annual report (Section 21 read with Rule 14). The Internal Committee prepares an annual report for each calendar year and submits it to the employer and the District Officer. Rule 14 prescribes the contents: complaints received, complaints disposed of, cases pending for more than ninety days, awareness workshops or programmes carried out, and the nature of action taken by the employer or District Officer.

Two — the employer's own disclosure (Section 22). The employer includes the number of cases filed and their disposal in the annual report of the organisation. Where the organisation is not required to prepare an annual report, it intimates the number of cases to the District Officer.

For companies, Section 22 now dovetails with the Companies Act. Rule 8(5)(x) of the Companies (Accounts) Rules, 2014 already required a statement in the Board's Report that the company has complied with the provisions relating to constitution of the Internal Complaints Committee. With effect from 14 July 2025, the Companies (Accounts) Second Amendment Rules, 2025 expanded that clause: the Board's Report must now also state the number of complaints received during the year, the number disposed of, and the number pending for more than ninety days. The same amendment added a separate statement on compliance with the Maternity Benefit Act, 1961 and required an electronic extract of the Board's Report to accompany AOC-4 filings.

Two clarifications worth putting in writing:

There is no separate POSH form or return filed with the MCA or the ROC. POSH information reaches the MCA only through the Board's Report attached to the annual financial statement filing.
Rule 8 does not apply to a One Person Company or a small company (Rule 8(6)); their Board's Report follows the abridged list in Rule 8A. That affects the disclosure format, not the underlying POSH obligation — a small company with ten or more workers still needs an IC, a policy, training and the Section 21 report.

Full treatment, including what to do when there were no complaints at all: POSH annual report and filing.

Employer responsibilities under Section 19

Section 19 lists the employer's duties. In working order they are:

Provide a safe working environment, including safety from persons coming into contact at the workplace
Display at a conspicuous place the penal consequences of sexual harassment and the order constituting the IC
Organise awareness workshops for employees and orientation programmes for IC members
Provide the IC with the facilities it needs to deal with a complaint and conduct an inquiry
Assist in securing the attendance of the respondent and witnesses
Make available to the IC the information it requires
Assist the woman if she chooses to file a criminal complaint
Treat sexual harassment as misconduct under the service rules and initiate action accordingly
Monitor timely submission of reports by the IC

Duties 2 and 3 are the cheapest to comply with and the most frequently missed. A notice board display and one annual session cost very little and are among the first things anyone verifying compliance will look for.

Need a compliance partner? CorporateWalla helps employers set up the Internal Committee, draft a defensible POSH policy, run employee and IC training and manage annual POSH documentation.

SHe-Box and the current enforcement climate

Enforcement has tightened materially since 2023. In Aureliano Fernandes v. State of Goa, the Supreme Court expressed serious concern about widespread non-implementation and has continued to monitor compliance through a series of directions to States and Union Territories, including directions to appoint District Officers, constitute or reconstitute Local Committees, and survey whether public and private workplaces have actually constituted ICs.

Alongside this, the Ministry of Women & Child Development relaunched the SHe-Box portal on 29 August 2024 as a single-window platform for filing and tracking workplace sexual harassment complaints, and as a central repository of IC and Nodal Officer details. Several States — including Delhi and Karnataka — have issued public notices directing organisations to register and to upload IC details.

Stated accurately: SHe-Box registration is not an express requirement written into the POSH Act. It flows from Supreme Court directions and from MWCD and State-level instructions, and the position is being actively enforced through district-level surveys. Employers should check the notification applicable to their State and district and, in most jurisdictions, should register and appoint a Nodal Officer rather than wait.

Consequences of non-compliance

Under Section 26, an employer who fails to constitute an Internal Committee, fails to act on the IC's recommendations, or contravenes or abets contravention of the Act or Rules is punishable with a fine which may extend to ₹50,000. On a second or subsequent conviction, the punishment may be twice that quantum, and the appropriate Government may cancel the licence or registration required for carrying on the business, or withdraw or refuse renewal or approval.

For companies, there is now a second track. An incorrect or missing POSH disclosure in the Board's Report is a Companies Act default in its own right, exposing the company and its officers to penalty under Section 134(8).

The commercial consequences usually bite harder than the statutory fine — failed investor due diligence, client and vendor onboarding rejections, RFP disqualification, and litigation risk where a defectively constituted IC has run an inquiry.

Separately, breach of confidentiality under Section 16 attracts action under the applicable service rules, and the POSH Rules provide for recovery of ₹5,000 as penalty from the person responsible.

POSH compliance checklist

#	Item	Frequency
1	Written order constituting the IC at each office or administrative unit with 10+ workers	On setup; refresh on tenure expiry or member exit
2	IC composition verified — Presiding Officer, 2+ employee members, external member, 50% women	On constitution and on every change
3	POSH policy adopted, dated and circulated to all employees	On adoption; review annually
4	Policy acknowledgement collected from employees	On joining and on policy revision
5	Penal consequences and the IC order displayed at a conspicuous place	Continuous
6	Employee awareness session with dated attendance record	At least annually
7	IC orientation / skill-building session	At least annually
8	Complaint register and case files maintained confidentially	Continuous
9	IC annual report prepared for the calendar year under Rule 14	Annually
10	Annual report submitted to the employer and the District Officer	Annually, per district practice
11	POSH disclosure in the Board's Report, with complaint numbers	Annually, with financial statements
12	SHe-Box registration and Nodal Officer details, per State/district instructions	On setup; update on change
13	POSH clause in vendor, contractor and consultant agreements	On contracting

Who should consider professional assistance?

Organisations that have just crossed ten workers at any location and have never constituted an IC
Companies with offices in more than one district, where committee coverage and district-wise reporting get complicated
Startups preparing for a funding round, where POSH compliance is now a standard diligence item
Employers with no suitable senior woman internally to serve as Presiding Officer, or no access to a qualified external member
Organisations facing a live complaint where the inquiry must survive later challenge
Companies whose Board's Report disclosure now needs verified complaint data after the July 2025 amendment

Frequently asked questions

Q: Is POSH compliance mandatory for private limited companies?

A: Yes. Every employer is covered by the Act, and any workplace with ten or more workers must constitute an Internal Committee, adopt a policy and meet the reporting obligations, irrespective of company size or turnover.

Q: Is POSH applicable if we have fewer than 10 employees?

A: The obligation to constitute an Internal Committee does not arise. Complaints in such workplaces go to the Local Committee constituted by the District Officer. The employer's preventive duties under Section 19 — a safe workplace, a policy, awareness, assistance to the complainant — continue to apply.

Q: Does POSH apply to an LLP?

A: Yes. The Act applies to the workplace and the employer, not to a particular corporate form. LLPs, partnership firms, proprietorships, trusts and societies are all covered. What does not apply to them is the Companies Act Board's Report disclosure.

Q: Is the POSH annual report filed with the MCA?

A: No. The IC's annual report goes to the employer and the District Officer. Companies separately make a POSH disclosure inside the Board's Report, which is attached to the AOC-4 filing. There is no standalone POSH form on the MCA portal.

Q: How many members must an Internal Committee have?

A: At least four in practice — a Presiding Officer who is a senior woman employee, a minimum of two members from among employees, and one external member. At least half the members must be women.

Q: Is POSH training mandatory?

A: Section 19 requires awareness workshops for employees and orientation programmes for IC members at regular intervals. The Act does not specify a number; an annual employee session plus an annual IC session is the accepted standard and is what most District Officers expect to see evidenced.

Q: What is the penalty for POSH non-compliance?

A: Up to ₹50,000 for the first offence under Section 26. A repeat offence can attract twice the punishment and cancellation of licence or registration. For companies, a defective Board's Report disclosure is a separate default under the Companies Act.

Q: Can one Internal Committee cover all our branches?

A: Section 4 requires an IC at every office or administrative unit. Where units are small and geographically close, employers commonly designate a committee to cover a cluster with a named local point of contact — but the arrangement must be documented and must not leave any workplace without a functioning committee. Take advice before relying on a single central IC across States.

Q: Do we still need to do anything if we received no complaints all year?

A: Yes. The annual report is prepared and submitted even where the number of complaints is nil, and it should record that the IC is duly constituted and what awareness activity was carried out.

Q: Does POSH cover remote and work-from-home employees?

A: The statutory definition of workplace is wide and covers places visited by an employee arising out of or during the course of employment. Employers should extend the policy expressly to remote work, virtual meetings and official communication channels. This is an evolving area — treat it conservatively and cover it in the policy.

Disclaimer: This article is for general information only and does not constitute legal advice. POSH implementation and reporting mechanisms — including submission timelines and portal requirements — vary between States and districts. Verify the position applicable to your jurisdiction, or consult a qualified professional, before acting.

POSH Compliance in India: A Complete Guide for Companies and Employers