POSH Act 2013: Employer Obligations Every Company Must Know

Quick Answer: The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — commonly called the POSH Act — legally requires every employer with 10 or more employees to constitute an Internal Committee (IC), adopt a written anti-harassment policy, conduct regular awareness training, and file an annual compliance report. Non-compliance carries a fine of up to ₹50,000 for a first offence, with repeat violations potentially leading to cancellation of business licences.

Who Is Covered Under the POSH Act

The Act's protection is broader than many employers assume. "Workplace" is defined expansively to include not just office premises but any place visited by the employee arising out of or during the course of employment, including transportation provided by the employer for commuting. "Employee" covers regular, temporary, ad hoc, or daily wage workers, interns, apprentices, contract workers, and probationers — not just permanent staff. Domestic workers are covered separately with specific provisions. This means a company cannot exclude interns, contractors, or gig workers from POSH protection simply because they aren't on the permanent payroll.

Obligation 1: Constitute an Internal Committee (IC)

Every office or branch with 10 or more employees must set up an Internal Committee under Section 4. The composition is specifically prescribed, not left to the employer's discretion:

• Presiding Officer — a woman employed at a senior level in the organisation. If no senior-level woman is available at that location, the Presiding Officer must be nominated from another office or administrative unit of the same organisation.
• At least two members from among employees, committed to the cause of women or with experience in social work or legal knowledge.
• One external member from an NGO or association committed to the cause of women, or someone familiar with issues of sexual harassment — this external member is mandatory and cannot be substituted with another internal employee, precisely to prevent internal bias or conflicts of interest from dominating the process.

At least half of the total IC members must be women. The IC's term is fixed at not more than three years, after which it must be reconstituted. Companies with multiple offices need a separate IC at each location employing 10 or more people, unless a Local Committee arrangement is being used, or the organisation designates a common IC across closely located branches in a manner permitted by the rules.

Obligation 2: Draft and Circulate a POSH Policy

A written, organisation-specific policy is not optional. At minimum, it should define what constitutes sexual harassment (using the Act's own definition, not a vague paraphrase), explain the complaint procedure and timelines, name the IC members with contact details, describe the inquiry process and possible outcomes, state the organisation's zero-tolerance stance, and clarify protections against retaliation for complainants and witnesses. This policy must be prominently displayed — physically at the workplace and, for most modern workplaces, also circulated digitally (intranet, employee handbook, onboarding material) — since the Act specifically requires employers to make employees aware of it, not merely have it exist on paper.

Obligation 3: Conduct Awareness Programs and Training

Section 19 places an affirmative duty on employers to organise workshops and awareness programs at regular intervals to sensitise employees on POSH provisions, and to conduct orientation for IC members themselves on how to conduct inquiries properly. This isn't a one-time onboarding checkbox — regulators and courts increasingly expect evidence of periodic, ongoing training, not a single session run once when the company was founded. Employers frequently get this obligation wrong by treating it as satisfied through a single email circular rather than active engagement.

Obligation 4: Timely and Fair Complaint Handling

When a complaint is received, the law prescribes a specific procedure and strict timelines that the IC must follow:

1. Complaint filing — within 3 months of the incident (extendable by the IC for another 3 months if sufficient reason is shown for the delay).
2. Conciliation option — before initiating an inquiry, the IC may, at the complainant's request, attempt conciliation, though this cannot involve any monetary settlement as a term.
3. Inquiry — must be completed within 90 days of the complaint being filed.
4. Report submission — the IC must submit its findings within 10 days of completing the inquiry.
5. Employer action — the employer must act on the IC's recommendations within 60 days of receiving the report.

During the inquiry, the complainant can request interim measures — such as transfer of either party, granting leave to the complainant, or restraining the respondent from supervising the complainant's work assessment — to prevent an intimidating environment while the process is ongoing. The identity of the complainant, respondent, and witnesses, along with the inquiry proceedings, must be kept strictly confidential under Section 16; violating this confidentiality obligation itself attracts a separate penalty.

Obligation 5: Annual Reporting

Every employer must file an annual report with the District Officer, disclosing the number of complaints received, complaints disposed of, complaints pending beyond 90 days, and the number of workshops or awareness programs conducted. Many companies additionally include this data in their annual report or Business Responsibility and Sustainability Report (BRSR) if applicable, since it has increasingly become an area of interest for institutional investors and ESG assessments, not just a regulatory formality.

What Happens If an Employer Doesn't Comply

Section 26 prescribes specific consequences for non-compliance: a fine of up to ₹50,000 for a first contravention (failing to constitute an IC, failing to act on IC recommendations, or violating any other provision of the Act). For a second or subsequent contravention, the punishment can be double the fine, and — significantly — cancellation, withdrawal, or non-renewal of the registration or licence required for carrying on business or activity. Beyond statutory penalties, non-compliance has become a material litigation and reputational risk — courts have increasingly held companies vicariously liable and directed compensation where a properly constituted, trained IC could have prevented or better handled an incident.

Common Compliance Gaps Employers Should Fix

• No external member on the IC — this alone can invalidate an inquiry's findings if challenged, since the external member's presence is a mandatory safeguard, not a formality.
• IC term expired without reconstitution — an inquiry conducted by an IC whose three-year term has lapsed is vulnerable to legal challenge.
• Policy exists but was never actually circulated or explained — courts and regulators look for evidence of actual awareness, not just a PDF sitting in an HR drive.
• Treating contract staff, interns, or gig workers as outside POSH's scope — this is a direct misreading of the Act's definition of "employee" and "workplace."
• Inquiry delays beyond statutory timelines — apart from the direct penalty risk, this undermines the complainant's confidence in the process and can be used to argue institutional bias later.
• No process for handling complaints where the respondent is a senior leader or the employer themselves — the rules do provide for this scenario, and employers should have it addressed in policy rather than discovering the gap mid-complaint.

Special Situations: Complaints Against Third Parties

The Act also addresses situations where the harasser is not a co-employee — for example, a client, vendor, or customer visiting the workplace. In such cases, the employer is still obligated to provide assistance to the woman if she chooses to file a complaint with the police, and take appropriate action against the third party in terms of discontinuing the relationship or business dealing, depending on the employer's contractual leverage with that third party. This is frequently overlooked by employers who assume POSH obligations only extend to internal staff-on-staff situations.

Employer Liability Beyond the IC: Vicarious Liability

Employers sometimes assume that once an IC is constituted, their legal exposure is limited to whatever penalty applies for procedural lapses. Courts have taken a broader view. Where an employer fails to take reasonable preventive steps — no functioning IC, no genuine awareness programs, no safe reporting channel — and harassment occurs, courts have been willing to hold the organisation itself liable in connected civil or writ proceedings, treating the absence of a compliant POSH framework as evidence of institutional failure rather than a purely technical lapse. This has pushed many organisations, particularly listed companies and those with foreign parent entities subject to global compliance standards, to treat POSH compliance as a governance and audit matter rather than purely an HR formality — with periodic third-party audits of IC functioning, policy currency, and training records increasingly common in larger organisations.

Frequently Asked Questions

Does a company with fewer than 10 employees have any POSH obligations?

The mandatory requirement to constitute an Internal Committee applies specifically to workplaces with 10 or more employees. Establishments below that threshold fall under the jurisdiction of the Local Committee constituted by the District Officer, and complaints from employees at such smaller establishments are to be filed there instead — the underlying protection against sexual harassment still applies, just through a different redressal mechanism.

Can a complaint be filed anonymously?

The Act requires a written complaint from the aggrieved woman (or, in specific circumstances, someone authorised to act on her behalf if she is unable to do so herself). Purely anonymous complaints with no identifiable complainant generally cannot be formally inquired into under the Act's procedure, though employers may still choose to investigate credible anonymous information through other internal mechanisms.

What if the complaint is found to be false or malicious?

Section 14 allows the IC to recommend action against a complainant if the inquiry concludes the allegation was false and malicious — but the Act is careful to note that a complaint that is simply not proved on the available evidence is not automatically "false or malicious," and this distinction is treated seriously precisely to prevent the false-complaint provision from being misused to discourage genuine complainants.

Is the employer liable even if the incident happened outside office hours, at an off-site event?

Yes, if the event or location qualifies as an extension of the "workplace" under the Act's broad definition — this commonly includes official work trips, client events, and organisation-sponsored social functions, since the harassment arises out of or in connection with employment.

Do male employees have any protection under POSH?

The POSH Act, as currently framed, specifically protects women employees. Complaints by male employees regarding workplace harassment would generally need to be addressed through other internal grievance mechanisms or applicable general employment law, not the POSH Act itself, since its statutory scope is limited to protecting women.

Key Takeaways

• Any workplace with 10 or more employees must have a properly constituted Internal Committee, including a mandatory external member — missing this can invalidate an entire inquiry.
• POSH obligations extend to interns, contract workers, and daily-wage employees, not just permanent staff.
• Strict statutory timelines govern the entire complaint process, from filing to employer action, and delays carry real legal risk.
• Annual compliance reporting to the District Officer is mandatory, and penalties for non-compliance escalate from fines to potential licence cancellation on repeat violations.
• Training and policy circulation must be genuine and ongoing — a one-time document is not treated as adequate compliance.

Disclaimer: This article is for general information and legal awareness only. It does not constitute legal advice and does not create a lawyer–client relationship. Compliance requirements should be verified against the current Act, rules, and any applicable state-specific notifications. Please consult a qualified advocate for advice specific to your organisation. As per Bar Council of India rules, this content is not intended as advertisement or solicitation.