POSH Policy for Companies: How to Create, Implement and Maintain It
What a POSH policy must contain, the legal basis for it, how to implement and display it, review cycles, common drafting mistakes and a ready checklist.
A POSH policy is the internal document through which an employer implements the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013. Rule 13 of the POSH Rules requires every employer to formulate and widely disseminate an internal policy for the prohibition, prevention and redressal of sexual harassment. At minimum it must define sexual harassment, define the workplace, name the Internal Committee, explain how to complain and by when, and set out the inquiry process, confidentiality and protection against retaliation.
Most organisations already have "a POSH policy". Far fewer have one that would survive scrutiny. The two failures are predictable: a template downloaded from the internet that misstates timelines and names no committee, and a well-drafted policy that nobody has read because it was never circulated. This article covers what belongs in the document and what has to happen after it is signed.
What is a POSH policy?
It is the employer's written statement of how sexual harassment is defined, prohibited, reported, inquired into and acted upon at that workplace. It converts a central statute into something an employee can actually use — who to approach, how, within what time, and what will happen next.
It is distinct from a code of conduct, an employee handbook chapter or a general grievance policy. Those may reference it; they do not replace it.
Why companies need a POSH policy
Legal basis. Rule 13 of the POSH Rules requires the employer to formulate and widely disseminate an internal policy or charter or resolution or declaration for the prohibition, prevention and redressal of sexual harassment at the workplace. Section 19 requires the employer to provide a safe working environment, display the penal consequences of sexual harassment and the order constituting the Internal Committee at a conspicuous place, and organise awareness programmes. Section 19(h) requires sexual harassment to be treated as misconduct under the service rules — which means the policy must connect to your disciplinary framework, not float beside it.
Evidentiary basis. When a complaint arises, the policy is the first document produced. It establishes that employees were told what conduct was prohibited and how to report it. A workplace without a disseminated policy struggles to defend either its process or its culture.
Commercial basis. POSH policies are now standard requests in investor due diligence, client empanelment, vendor onboarding and RFP documentation. It is one of the cheapest documents to get right and one of the most visible when it is missing.
Essential elements of a POSH policy
1. Definition of sexual harassment
Reproduce the statutory definition faithfully rather than paraphrasing it. It includes unwelcome physical contact and advances, a demand or request for sexual favours, sexually coloured remarks, showing pornography, and any other unwelcome physical, verbal or non-verbal conduct of a sexual nature.
The Act also identifies circumstances which, if they occur in relation to or connected with any act of sexual harassment, may amount to sexual harassment — including implied or explicit promise of preferential treatment, implied or explicit threat of detrimental treatment, implied or explicit threat about present or future employment status, interference with work or creating an intimidating, offensive or hostile work environment, and humiliating treatment likely to affect health or safety.
Add workplace-relevant illustrations — messaging platforms, video calls, offsites, client sites, cab rides during work travel — so employees can recognise the conduct in their own context.
2. Applicability and coverage
State clearly who the policy covers. The statutory definition of "employee" is wide: regular, temporary, ad hoc, daily wage, contractual, probationary, trainee, apprentice, and workers engaged with or without the knowledge of the principal employer, whether for remuneration or not. Extend the policy to interns, consultants, contractor personnel and visitors so that no one falls through a gap.
Be honest about scope. The POSH Act protects an aggrieved woman. Complaints by male or non-binary employees cannot be inquired into under this Act. Most mature organisations therefore adopt a parallel gender-neutral anti-harassment mechanism under their service rules and say so expressly in the policy, keeping the two processes procedurally separate. That is best practice, not a statutory requirement.
3. Definition of workplace
The statutory definition is deliberately wide and covers, among others, any department, organisation, establishment, enterprise, institution, office, branch or unit, and any place visited by the employee arising out of or during the course of employment, including transportation provided by the employer.
For a modern workforce the policy should expressly cover client premises, offsites and conferences, work-related travel and accommodation, official communication channels and video meetings, and — treated conservatively — remote and hybrid working arrangements. The application of the Act to purely home-based settings continues to develop; drafting for coverage rather than against it is the safer position.
4. Complaint mechanism
Set out precisely how a complaint is made: in writing, to the Internal Committee, with the number of copies and supporting material as prescribed, and the addresses to which it can be sent — physical and email. Provide for assistance where the woman cannot make the complaint in writing herself, and note that the Rules allow specified persons to complain where she is unable to do so.
Name a fallback route where the complaint is against a member of the IC or against the employer, and reference the Local Committee constituted by the District Officer for complaints against the employer.
5. Internal Committee details
Name the members, their designations and roles, and give working contact details. Update this on every reconstitution. A policy that says "complaints may be made to the Internal Committee" without naming anyone is not a usable complaint mechanism.
Deeper guidance on getting the committee itself right: Internal Committee under the POSH Act.
6. Timelines
| Stage | Timeline to state in the policy |
|---|---|
| Filing a complaint | Within 3 months of the incident or the last incident; extendable by up to 3 further months for recorded reasons |
| Copy to respondent | Within 7 working days |
| Respondent's reply | Within 10 working days |
| Inquiry completion | Within 90 days |
| Report to employer | Within 10 days of completion |
| Action on recommendations | Within 60 days |
| Appeal | Within 90 days |
Getting these wrong in the policy is worse than omitting them, because employees and committees follow the document in front of them.
7. Inquiry process
Describe the process in plain language: acknowledgement, notice to the respondent, opportunity to both parties, quorum of three members including the Presiding Officer, no legal practitioners representing parties, the committee's power to summon persons and require documents, and the outcome — findings, recommendations on action, and compensation where harassment is proved.
Include conciliation accurately: it is available only if the aggrieved woman requests it, and no monetary settlement may be made the basis of conciliation.
8. Confidentiality
State the Section 16 prohibition on disclosing the complaint contents, the identity and addresses of the parties and witnesses, and the proceedings, recommendations and action taken. State the consequence of breach — action under the service rules, and recovery of the ₹5,000 penalty provided under the POSH Rules.
9. Protection against retaliation
The Act does not use the word "retaliation", but the protection is built into interim relief and into the employer's duty to provide a safe working environment. A good policy states expressly that victimisation of a complainant or witness — through appraisal, allocation, transfer, exclusion or informal pressure — is itself misconduct, and describes the interim measures available during an inquiry, including transfer, leave of up to three months, and restraining the respondent from reporting on the complainant's work.
10. False or malicious complaints
Reproduce the statutory position carefully. Where the committee concludes that the allegation is malicious, or that the complaint was made knowing it to be false, or that forged or misleading evidence was produced, action may be recommended under the service rules. Critically, mere inability to substantiate a complaint or provide adequate proof does not attract action — the policy must say so, or it will deter genuine complainants.
11. Consequences and employer responsibilities
List the outcomes available on a finding of harassment — written apology, warning, censure, withholding of promotion or increment, termination, counselling, community service, and deduction of compensation from salary or wages — and record the employer's Section 19 duties, including treating sexual harassment as misconduct and acting on the committee's recommendations within sixty days.
12. Awareness, training and display
State the commitment to awareness programmes for employees and orientation for IC members at regular intervals, and to displaying the penal consequences and the IC order at a conspicuous place.
Implementation: what happens after drafting
A policy is only as good as its rollout. Six steps make the difference:
- Approve it formally. Board or partner approval, dated, with a version number.
- Circulate it to every employee and take acknowledgements — at induction and on every revision.
- Display the required notices — penal consequences of sexual harassment and the IC constitution order — at a conspicuous place at each workplace. Photograph the display and keep it with your records.
- Publish it where people can find it — intranet, HR portal, notice board, and the induction pack.
- Train. One annual employee awareness session and one IC orientation session, both with dated attendance records.
- Flow it down. Include POSH obligations in contractor, vendor and consultant agreements so that personnel deployed at your premises are covered.
Policy review and updates
Review annually as a default, and immediately on any of these triggers:
- Reconstitution of the Internal Committee or any change in members or contact details
- Opening a new office or administrative unit
- Statutory or procedural change — for instance the July 2025 Companies Act amendment that expanded POSH disclosure in the Board's Report
- A State or district instruction — such as SHe-Box registration and Nodal Officer requirements
- Learnings from a completed inquiry
- A shift in working model, such as a move to hybrid or distributed teams
Maintain a version history page in the policy itself. When a District Officer, an auditor or an acquirer asks how long the policy has been in force, the answer should be in the document.
POSH policy checklist
| # | Element | Present? |
|---|---|---|
| 1 | Statutory definition of sexual harassment, with illustrations | ☐ |
| 2 | Circumstances listed under Section 3(2) | ☐ |
| 3 | Wide definition of employee, including interns and contract staff | ☐ |
| 4 | Wide definition of workplace, including travel and virtual settings | ☐ |
| 5 | Named IC members with contact details | ☐ |
| 6 | Route for complaints against the employer or an IC member | ☐ |
| 7 | Complaint format, mode and time limits | ☐ |
| 8 | Conciliation described accurately | ☐ |
| 9 | Inquiry process and quorum | ☐ |
| 10 | Interim relief options | ☐ |
| 11 | Confidentiality and the consequence of breach | ☐ |
| 12 | Protection against retaliation | ☐ |
| 13 | False or malicious complaints — with the "inability to prove is not malice" clarification | ☐ |
| 14 | Consequences and action within 60 days | ☐ |
| 15 | Appeal rights and the 90-day window | ☐ |
| 16 | Awareness, training and display commitments | ☐ |
| 17 | Version number, approval date and review cycle | ☐ |
| 18 | Employee acknowledgement mechanism | ☐ |
Common mistakes
- A downloaded template with foreign or outdated content — American "EEO" language, wrong timelines, references to repealed provisions.
- No named committee members, leaving employees with no one to approach.
- Stale contact details after the IC is reconstituted.
- Wrong timelines, particularly a 30-day or 45-day inquiry period that does not exist in the Act.
- Describing conciliation as a settlement route the employer can initiate. It runs only at the woman's request, and never on a monetary settlement basis.
- Aggressive false-complaint language that reads as a deterrent, without the statutory clarification that inability to prove is not malice.
- No display, which is a direct Section 19(b) failure and among the easiest things to verify.
- No acknowledgement records, so dissemination cannot be evidenced.
- No coverage of remote work or digital channels in a workforce that is substantially hybrid.
- Never reviewed — the version still names a Presiding Officer who left two years ago.
Who should consider professional assistance?
- First-time employers crossing ten workers who need a policy that matches their actual operations
- Startups preparing an investor data room, where the policy and the IC order are standard requests
- Multi-location organisations needing a single policy that works across States with local annexures
- Foreign-parent entities localising a global anti-harassment policy to Indian statutory requirements
- Organisations whose existing policy was written before the July 2025 Companies Act amendment and the current SHe-Box enforcement position
Frequently asked questions
Q: Is a POSH policy legally mandatory?
A: Rule 13 of the POSH Rules requires every employer to formulate and widely disseminate an internal policy for the prohibition, prevention and redressal of sexual harassment, and Section 19 imposes related duties. In practice, treat it as mandatory for every employer.
Q: Do companies with fewer than 10 employees need a POSH policy?
A: The Internal Committee obligation does not arise below ten workers, but the employer's duty to provide a safe workplace and the policy requirement under the Rules continue. Smaller employers should adopt a policy that points complainants to the Local Committee of the district.
Q: Can we use a downloadable POSH policy template?
A: A template is a starting point, not a policy. It must be customised with your committee members, locations, complaint routes, service rules and communication channels — and checked against current law before it is issued.
Q: Who approves the POSH policy?
A: The employer. In a company, Board approval is the usual and cleanest route; in an LLP or firm, approval by the designated partners or partners.
Q: Where must the policy be displayed?
A: Section 19(b) requires the penal consequences of sexual harassment and the order constituting the Internal Committee to be displayed at a conspicuous place in the workplace. The policy itself should be published on the intranet and issued with the induction pack.
Q: How often should a POSH policy be reviewed?
A: Annually as a default, and immediately whenever the committee changes, a new office opens, or the law changes.
Q: Should the POSH policy be gender-neutral?
A: The statutory mechanism applies to complaints by women. Many employers run a parallel gender-neutral internal mechanism for other complainants and say so in the policy. Keep the two processes clearly separate so that the statutory process is not diluted.
Q: Does the POSH policy apply to remote employees?
A: The definition of workplace is wide, and employers should extend the policy expressly to remote work, virtual meetings and official digital channels. Draft for coverage — the position on purely home-based settings continues to evolve.
Q: Must contractors and vendors be covered?
A: Workers engaged through a contractor count towards the workplace headcount and are covered as employees under the Act's wide definition. Include POSH obligations in vendor and contractor agreements.
Q: What is the penalty if we have no POSH policy?
A: Contravention of the Act or the Rules attracts a fine of up to ₹50,000 under Section 26, with a higher exposure on repeat offences. The practical exposure — a complaint handled without a documented framework — is usually more serious.
Disclaimer: This article is for general information only and does not constitute legal advice. Policy content should be tailored to your organisation's structure, service rules and locations, and reviewed by a qualified professional before adoption.