Your ICC has three members. The presiding officer is your HR head — a man. Your annual report was due in January, but nobody filed it. You haven’t run an employee awareness session since onboarding day. If a labour inspector walks in tomorrow, your company is looking at a ₹50,000 fine and a potential licence cancellation notice.
This is the POSH compliance reality for hundreds of Indian SMEs right now. The Prevention of Sexual Harassment of Women at Workplace (Prevention, Protection and Redressal) Act, 2013 — called the POSH Act — is not optional, not just for big IT companies, and not something you fix after a complaint arrives.
Here is what every HR manager needs to verify before Q4 starts.
- The POSH Act 2013 applies to all employers with 10 or more employees — factories, shops, IT firms, restaurants, logistics companies, NGOs
- You must have a formally constituted Internal Complaints Committee (ICC) with at least 4 members — including one external member and a woman as Presiding Officer
- ICC members serve a maximum 3-year term and must be reconstituted on time — or the committee has no legal authority
- Annual report must be submitted to the District Officer every year by 31 January — even if zero complaints were received
- Penalties: up to ₹50,000 for first offence; repeat offence can result in licence cancellation
What Is the POSH Act, and Why Does It Apply to Your Company?
The POSH Act is India’s law for preventing and addressing sexual harassment at the workplace. It defines sexual harassment broadly — it covers far more than physical acts. Unwelcome verbal conduct, sexually coloured remarks, sharing inappropriate digital content, and quid pro quo demands all qualify under the Act.
The Act applies to every workplace in India — offices, factories, construction sites, shops, restaurants, hospitals, transport vehicles, and work-from-home setups. If you employ 10 or more people, you are legally required to comply under the POSH Act 2013.
Many HR managers in growing companies assume this law is for large corporates. It is not. A garment unit in Ludhiana with 22 workers, a logistics company in Pune with 15 drivers, a restaurant in Bengaluru with 12 staff — all must comply with the full requirements of the Act. There is no turnover or revenue threshold. It is purely headcount: 10 or more employees means you are in scope.
ICC Constitution: The Rules Most Companies Get Wrong
The Internal Complaints Committee (ICC) is the operational heart of POSH compliance. Under Section 4 of the POSH Act 2013, every employer must constitute an ICC at each office or establishment where they have employees.
The ICC must have at least four members:
- Presiding Officer — must be a woman employed at a senior level at the workplace. If no senior woman is available internally, she must be nominated from another office or administrative unit of the same employer. A man cannot serve as Presiding Officer.
- At least two employee members — preferably persons committed to the cause of women’s rights, or who have experience in social work or legal knowledge.
- One external member — from an NGO or association committed to the cause of women, or a person with legal knowledge or experience in social work. This is the member most companies quietly skip.
Critically, minimum 50% of all ICC members must be women. So a 4-member ICC must have at least 2 women.
The ICC’s term is 3 years. Many companies constitute the ICC once and forget about it. If your ICC was formed in June 2022, it expired in June 2025. Without reconstitution, your committee has no legal authority to conduct inquiries — and any inquiry it does conduct during the lapsed period is challengeable in court.
The Annual Report That Most HR Teams Simply Don’t File
Under Section 21 of the POSH Act, the ICC must prepare an annual report every calendar year and submit it to both the employer and the District Officer. The report must include:
- Number of complaints received during the year
- Number of complaints disposed of
- Cases pending for more than 90 days (with reasons)
- Number of awareness workshops conducted
- Recommendations made by the ICC
Most states require this report to be submitted by 31 January for the preceding calendar year. Miss it, and you are non-compliant — regardless of whether you received any complaints. Zero complaints means you file a nil report. Not filing is still a violation.
If your company is required to publish an annual report (as listed companies are), the POSH Act requires that this ICC data also appears there. Regulators and investors increasingly check for it.
The 90-Day Inquiry Rule and What Happens After
When a complaint is received, the ICC has 90 days to complete the inquiry under Section 11. Extensions are possible with documented justification, but delays without good cause expose the employer to direct liability.
The inquiry must observe principles of natural justice — both the complainant and the respondent get a fair hearing. After completing the inquiry, the ICC submits its report with findings and recommendations to the employer within 10 days of completion.
The employer must act on the ICC’s recommendation within 60 days of receiving it. Recommendations can include a written apology, counselling, suspension, transfer, demotion, or termination — depending on the severity of the finding.
One important protection for the complainant: the ICC can recommend interim measures during the inquiry period — such as transferring the respondent to another location or granting the complainant additional leave — to protect her during the process.
Employer Obligations Beyond Forming the ICC
Constituting the ICC is the most visible step, but the POSH Act places several other mandatory duties on employers.
| Obligation | Requirement Under POSH Act |
|---|---|
| Display of Policy | Anti-harassment policy and ICC contact details must be prominently displayed at the workplace |
| Awareness Programmes | Periodic orientation and sensitisation sessions for all employees — documented with attendance |
| ICC Training | Sensitise ICC members on inquiry procedures, natural justice, and confidentiality obligations |
| Contractual Workers | The Act covers all workers — permanent, contractual, temporary, trainees, apprentices, and volunteers at your premises |
| Confidentiality | Identity of complainant, respondent, and all witnesses must not be disclosed to any third party |
| Annual Report | Annual POSH report to District Officer by 31 January each year — even if complaint count is zero |
A common failure point: companies train their permanent employees on POSH but ignore contractual workers and third-party agency staff on their premises. The Act and subsequent court rulings make clear that the employer is responsible for the safety of anyone working at or in connection with their workplace. If contract security staff harass a permanent employee on your premises, your company is liable.
6 POSH Mistakes HR Managers Make (and Inspectors Look For First)
1. Counting only full-time employees for the 10-person threshold. Permanent, contractual, daily wage, probationary, and apprentices all count. A company with 6 permanent staff and 5 contract housekeeping workers has 11 employees for POSH purposes.
2. Appointing a male HR manager or CEO as Presiding Officer. The Presiding Officer must be a woman, with no exceptions in the Act. If there is genuinely no senior woman available at your specific location, nominate one from another unit of your organization — not from outside.
3. Skipping the external member. This is the most common gap. The external member must be genuinely external to your organization — not a relative of a promoter, not a retired employee. During any inspection, this is the first member’s credentials an inspector will verify.
4. Letting the 3-year ICC term lapse without reconstitution. Issue fresh appointment letters before the existing committee’s term ends. File updated ICC composition details with the District Officer. Set a calendar reminder: three years is not a guideline, it is a hard limit.
5. Treating a one-line anti-harassment clause as a POSH policy. A clause in your employee handbook does not satisfy the Act. You need a standalone written policy covering the definition of sexual harassment, the complaint mechanism, ICC details, and the inquiry process — displayed at your office and shared with all employees in a language they understand.
6. Assuming no complaints means no annual report. The annual report is mandatory regardless of complaint count. A nil report is still a report. Not filing is a separate violation from any complaint-handling failure.
Frequently Asked Questions on POSH Compliance India 2026
Q: Does the POSH Act apply to a company with fewer than 10 employees?
No mandatory ICC requirement for sub-10 employers, but your employees are not unprotected. Complaints can be filed with the Local Complaints Committee (LCC) set up by the District Officer. It is still good practice — and increasingly expected by clients — to have a written anti-harassment policy regardless of size.
Q: What happens if a complaint is filed and we don’t have a valid ICC?
Serious consequences. The District Officer can take cognizance, impose fines, and in repeat cases recommend cancellation of your business registration or licence to operate. Not having an ICC is not a defence — it is an aggravating factor that makes the penalty worse, not better.
Q: Can a male employee file a complaint under POSH?
The POSH Act 2013 as currently enacted specifically covers sexual harassment of women at the workplace. Male employees can report harassment through the ICC, but the Act’s specific inquiry protections apply to women as aggrieved parties. Some progressive company policies extend similar protections to all genders, which is good practice even if not legally mandated.
Q: How often must we hold POSH awareness training?
The Act says “periodically.” POSH inspectors typically expect at least one documented awareness session per year, with attendance records. Quarterly sessions are considered best practice. Keep all session records — dates, topics, attendance — because they are specifically reviewed during inspections.
Q: Our company is fully remote. Do we still need an ICC?
Yes. The POSH Act covers “any dwelling house” used for employment. Work-from-home arrangements are explicitly within scope. Your ICC must be formally constituted, and your policy must be communicated to all remote employees digitally. Online ICC meetings and virtual hearings are permissible.
Q: What is the penalty for POSH non-compliance in 2026?
First offence: fine of up to ₹50,000. Repeat offences: the fine is doubled and the government may direct cancellation of the employer’s registration or licence. The fines may seem modest, but the reputational risk, the distress to employees, and the licence exposure are not.
If your ICC composition is unclear, your annual report has not been filed, or you cannot remember the last awareness session you documented — Q3 is a good time to sort it. Inspections and complaints tend to spike toward year-end.
EZHRM’s POSH Compliance module helps you manage ICC constitution, track inquiry timelines, log awareness programmes, and generate the annual report with the correct data — so nothing gets missed at crunch time. Worth a look if you want this running on autopilot.