POSH Act Compliance for Indian SMEs in 2026: HR Manager’s Checklist

Picture this: your CEO forwards you an email asking if your company is “POSH compliant.” You remember signing some policy two years ago, but right now you don’t actually know whether your Internal Committee has a current Presiding Officer — or whether your last Annual Report was filed. If that gives you a small jolt, this guide is for you.

Too many HR managers in 5–500 person companies treat POSH compliance as a one-time policy upload. It isn’t. The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — the POSH Act — is a continuous set of obligations: people, paperwork, training, and reporting. Miss any of them and the penalty starts at ₹50,000 per violation, with repeat offences doubling the amount and your business licence potentially on the line.

What is POSH Act compliance, exactly?

POSH Act compliance means an Indian employer with 10 or more employees has put in place the policy, committee, training, and reporting framework required under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, and is running it on a continuous basis — not just on paper.

It’s a “preventive plus redressal” law. Section 19 lists what the employer is responsible for: providing a safe workplace, displaying the consequences of sexual harassment, running awareness workshops, helping the IC, and assisting the complainant in pursuing legal action. The absence of a complaint is no defence — your obligation is to keep the system live and visible at all times.

Who does POSH apply to in 2026?

The Act applies to every workplace in India where 10 or more “employees” work. The word “employee” is defined broadly:

• Permanent and probationary staff
• Contract, daily-wage, ad-hoc, and temporary workers
• Apprentices and interns, paid or unpaid
• Volunteers
• Workers engaged through a third party — the principal employer is still responsible

Protection extends to all women at the workplace, regardless of payroll status. A female client visiting your office, a delivery executive, a third-party housekeeping worker — all covered. No salary cap, no seniority filter.

For workplaces under 10 employees — or where the complaint is against the employer themselves — the matter is handled by the Local Committee (LC) constituted at the district level.

How to constitute a valid Internal Committee (IC)

This is the single biggest area where SMEs slip up. An IC that doesn’t meet statutory composition is treated as no IC at all. Here’s what a compliant IC looks like under Section 4 of the Act:

Role	Who can hold it	Count
Presiding Officer	Senior woman employee. If no senior woman is available at that branch, nominate one from another office of the same employer.	1
Internal Members	Employees committed to the cause of women, with legal knowledge or social work experience.	≥2
External Member	From a recognised NGO working on women’s issues, or a person familiar with sexual harassment law. Not an employee.	1

Minimum 4 members. At least 50% must be women. Every branch or unit with 10+ employees needs its own IC. If your SME has offices in Bahadurgarh, Gurugram, and Bengaluru, you need three ICs and three Annual Reports — head-office filing does not replace district-wise reporting.

Tenure: 3 years. Mark it in your HR calendar — non-renewal of IC is one of the most common audit findings, and a lapsed IC means none of the inquiries it conducts will hold up.

The POSH policy — what it must contain

A copy-pasted template will not stand up to a District Officer’s audit. Your POSH policy should, at minimum, cover:

• Definition of sexual harassment per Section 2(n), including the five behaviours under Section 3(2)
• Names, designations, and contact details of every IC member, displayed at every workplace
• Complaint process — written complaint within 3 months of the incident, extendable by 3 more months if reasons are recorded
• Confidentiality clauses (Section 16) — disclosure of the identity of the complainant or respondent attracts a penalty of ₹5,000
• Interim relief the complainant can request — transfer, leave up to 3 months, restraining the respondent from reporting on her work
• Consequences for false or malicious complaints (Section 14)
• Penal consequences for the respondent, including pay deduction
• Reference to legal recourse — IPC Section 354A and the right to file an FIR

Print the policy in English and the local language. Display IC contact details at the entrance, on noticeboards, and on the intranet. If you treat your statutory compliance stack as a single calendar, POSH slots in next to PF, ESI, and PT — same discipline.

POSH training — frequency, depth, and what auditors look for

The Act requires “regular workshops and awareness programmes.” It doesn’t define “regular,” but most District Officers and corporate counsel treat the following as the minimum:

• All employees: at least once a year, 1–2 hours
• IC members: in-depth training within 30 days of induction, plus annual refreshers covering inquiry procedures, evidence handling, and case law
• Managers and senior leadership: annual sessions on identifying and preventing harassment in their teams

Keep attendance sheets, slide decks, and trainer credentials on file. In an audit, the District Officer will ask for proof — verbal claims don’t count. Bake POSH training into your employee onboarding flow so every new joiner clears it in their first week.

The POSH Annual Report — what’s due by 31 January

By 31 January each calendar year, every IC must submit an Annual Report to the District Officer, with a copy to the employer. It covers the previous calendar year — January to December, not the financial year. This is the single date HR teams most often miss because they think in fiscal-year cycles.

The report must include:

1. Number of complaints of sexual harassment received during the year
2. Number of complaints disposed of
3. Number of cases pending for more than 90 days
4. Number of workshops or awareness programmes conducted
5. Nature of action taken by the employer

Even with zero complaints, a Nil Annual Report is mandatory. Skipping the Nil filing has driven several show-cause notices since the Supreme Court’s 2023 Aureliano Fernandes judgement, which directed every state to audit POSH compliance.

Multi-district businesses file separately with each District Officer. Three locations, three filings.

Common mistakes Indian HR managers make

After a decade of POSH audits, the same five mistakes keep showing up:

1. Paper IC. An Internal Committee constituted on a Word document, with members who don’t know they’re members. When a complaint lands, the inquiry collapses.
2. Wrong external member. Appointing your CA, your friend’s spouse, or a generic consultant instead of someone from a recognised women’s NGO or with documented work on sexual-harassment law.
3. Stale tenure. ICs whose 3-year term lapsed in 2024 and were never reconstituted. Every order they pass after expiry is challengeable.
4. No calendar-year tracking. HR teams measure everything April–March, forget POSH runs January–December, and miss the 31 January report.
5. Treating POSH as legal-only. Leaving training to one slide in induction. A complaint then surfaces from a junior employee who never knew what behaviours the policy actually covers.

Penalties for non-compliance

Section 26 of the Act lists the penalties:

• First violation: fine up to ₹50,000
• Repeat offence: double the fine, plus possible cancellation of business licence or registration
• Each failure — to constitute IC, file the Annual Report, or display IC contact details — counts as a separate violation

Beyond the statute, a single mishandled complaint that lands on social media or in a tribunal has cost SMEs deals, talent, and acquisition valuations. POSH is one of the rare compliance areas where indirect cost dwarfs the direct fine.

Quick compliance checklist for 2026

A 15-minute self-audit your team can run today:

• IC constituted with valid composition (Presiding Officer, ≥2 internal, 1 external, ≥50% women)
• IC tenure within the 3-year window
• POSH policy current, signed off by leadership, available in English + local language
• IC contact details displayed at every workplace and on the intranet
• Annual employee training completed, with attendance proof
• IC member training done in the last 12 months
• Complaint register maintained — even if empty
• Annual Report filed with District Officer by 31 January (Nil report if needed)
• Separate IC and report for each branch with 10+ employees
• POSH coverage extended in vendor and contractor agreements

Frequently asked questions

Q1. Does the POSH Act apply to startups with fewer than 10 employees?
The full IC requirement does not apply, but employees of such workplaces can still file a complaint with the Local Committee at the district level. Many SMEs voluntarily set up an internal grievance mechanism — it is increasingly expected by enterprise customers and investors during diligence.

Q2. Can the same Internal Committee cover multiple offices?
No. Every workplace — typically defined as a separate office or branch — with 10 or more employees needs its own IC, with its own Annual Report. Pan-India committees are not recognised under the statute.

Q3. Is POSH training mandatory under the Act?
Yes. Section 19(c) requires the employer to organise workshops and awareness programmes “at regular intervals” for employees, and orientation programmes for IC members. The Act does not specify exact frequency, but an annual cycle is the established compliance norm.

Q4. What happens if we miss the 31 January Annual Report?
Missing the deadline is non-compliance under Section 26 and attracts a fine of up to ₹50,000. Repeat misses can lead to cancellation of business licence. File a Nil report immediately if there were no complaints — late is better than not at all.

Q5. Can a man file a POSH complaint?
Not under the POSH Act, 2013, which protects women only. However, your internal grievance policy can — and should — extend equivalent protection to all genders. Many SMEs now run a parallel anti-harassment policy alongside POSH for this reason.

Q6. Does POSH apply to remote and hybrid workers?
Yes. Indian courts and the Ministry of Women & Child Development have clarified that “workplace” includes any place visited by an employee in connection with work — including home during remote work, online meeting platforms, and work travel. Your IC has jurisdiction over harassment that happens on Slack, Zoom, WhatsApp work groups, and during off-sites.

Where to go from here

Most of the hard work in POSH isn’t legal — it’s keeping the calendar, the trainings, and the IC roster current as people leave and join. EZHRM’s POSH compliance module handles the IC roster, training tracker, complaint register, and Annual Report draft inside the same HR system you already use. Worth a look before your next audit.

References: Ministry of Women & Child Development; Supreme Court of India, Aureliano Fernandes v. State of Goa, 2023.