Last verified: 2026-07-13

The POSH Code: Workplace Safety, Appointment Letters & Employer Compliance

The POSH Act, 2013 makes workplace safety a legal duty rather than a courtesy: every employer with 10 or more employees must set up an Internal Committee, publish a policy against sexual harassment, and act on complaints within fixed timelines. Employer compliance starts at the appointment letter, where the policy is first put in front of a new hire, and runs through to an annual report filed with the district officer. Non-compliance carries a fine of up to Rs. 50,000, rising to cancellation of the business licence on a repeat breach. Since the Supreme Court’s 2023 ruling in Aureliano Fernandes v. State of Goa, (2023) SCC OnLine SC 621, enforcement has tightened across private and public establishments alike.

This article sets out what the POSH Act requires of employers, how the Internal Committee and the complaint process work, and where appointment letters and documentation fit into workplace-safety compliance.

The full name of the statute is the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013. It grew out of the Supreme Court’s guidelines in Vishaka & Ors. v. State of Rajasthan, (1997) 6 SCC 241, which governed this ground for sixteen years before Parliament finally legislated.

One point to settle at the start. The Act protects any woman at a workplace, whether she is on the payroll or not. A contract worker, an intern, a visitor, even a client can be an “aggrieved woman” under it. That reach is wider than most employers assume, and it shapes everything that follows.

Employer duties under the POSH Act

Employer duties under the POSH Act are grouped in Section 19 of the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, and they are positive obligations, not a passive “do not harass” rule. The employer must provide a safe working environment, constitute the complaints committee, display the penal consequences of harassment at a conspicuous place, run awareness workshops, and give the committee the facilities it needs to do its job. Miss these and the exposure sits with the employer, not the individual accused.

Why does the law load so much on the employer rather than leaving it to police and courts? Because sexual harassment at work is treated as an institutional failure of a safe workplace, a civil-remedy design the Supreme Court chose in Vishaka and Parliament carried forward. The employer controls the environment, so the employer carries the duty to keep it safe.

Who counts as an employee, and what counts as a workplace

The definitions are the part employers read too narrowly. Under Section 2 of the Act, an “employee” includes anyone working on regular, temporary, ad hoc or daily-wage terms, whether directly or through a contractor, and whether for remuneration or not. Interns, probationers, trainees and apprentices are all inside the definition. So “she’s not on our rolls” is rarely the shield it sounds like.

“Workplace” is drawn just as wide. It covers the office, but also any place the employee visits arising out of employment: a client site, a conference, a cab booked for work, an offsite. The extended workplace is exactly where a lot of real incidents happen, and it is the part a narrow HR reading tends to miss.

There’s a further category people forget. A woman need not be an employee at all to complain. The Act’s protection runs to any woman who alleges harassment at that workplace, which is why a visitor or a customer-facing complaint can still trigger the process. Frankly, this gets overlooked because employers instinctively think of POSH as an internal-HR matter.

The safe-environment duty in practice

Section 19 turns into a short list of things an employer must actually do. Provide a safe working environment, including safety from persons the woman comes into contact with at the workplace. Display, at a conspicuous place, the consequences of sexual harassment and the order constituting the Internal Committee. Organise workshops and awareness programmes at regular intervals. Provide the committee with the facilities to hold inquiries.

Two more duties sit alongside those and are easy to skip. The employer must assist the woman if she chooses to file a criminal complaint under the Bharatiya Nyaya Sanhita, 2023, and must treat sexual harassment as misconduct under the service rules so that disciplinary action can follow. That last one matters, because without a misconduct clause in the standing orders or HR policy, the recommended penalty can be hard to enforce.

The Internal Committee and the Local Committee

The Internal Committee is the body every covered employer must constitute under Section 4 of the POSH Act, and the threshold is 10 or more employees at a workplace. It is not optional, it is not a sub-committee of HR, and failing to set one up is itself a punishable breach even before any complaint arises. This is the single most common compliance gap the courts keep flagging.

Does the 10-employee count include contract and part-time staff? Yes. The count follows the wide definition of “employee”, so a small office that runs on contractors can cross the line without realising it. The safer reading is to count everyone who works at the workplace, not just the permanent payroll.

Composition of the Internal Committee

The composition is prescribed, not left to the employer’s discretion. The Presiding Officer must be a woman employed at a senior level at the workplace. There must be at least two members from among employees, preferably committed to the cause of women or with experience in social work or legal knowledge. And there must be one external member, drawn from an NGO or association committed to the cause of women, or a person familiar with issues relating to sexual harassment.

The external member is the requirement employers most often drop, usually to save cost or effort. That is a mistake. The external presence is what signals independence, and its absence has been used to challenge the validity of an inquiry. At least one-half of the total members nominated must be women, and the members hold office for a term not exceeding three years.

Here’s a practical trap. If the senior-most woman available is herself in the reporting line of a likely respondent, the committee’s independence is compromised from the start. The better approach, in our view, is to fix the composition and the external member on a standing basis, before any complaint lands, rather than assembling a committee in a hurry once one does.

When the Local Committee steps in

The Local Committee is the district-level body constituted under Section 6 of the Act, and it exists for the situations the Internal Committee cannot cover. Where an establishment has fewer than 10 employees, there is no obligation to form an Internal Committee, so complaints go to the Local Committee instead. It also takes complaints where the allegation is against the employer himself, because an in-house committee cannot fairly judge the person who controls it.

The Local Committee is constituted by the District Officer, a role the state government designates (usually the District Magistrate or Collector). For the millions of women in India’s vast unorganised sector, small shops, domestic work, tiny establishments, the Local Committee is the only forum the Act gives them, at least on paper. In practice, many districts have been slow to constitute functional Local Committees, which is a gap the Supreme Court has specifically criticised.

How a POSH complaint moves from filing to inquiry

A POSH complaint follows a fixed statutory path once it is filed, and the timelines are the spine of the process. The aggrieved woman must make a written complaint to the Internal Committee within three months of the incident, or within three months of the last incident where there is a series. The committee can extend that window by a further three months for reasons recorded in writing, but not indefinitely.

What if the woman can’t file in writing herself, or is too distressed to? The committee is required to render reasonable assistance to help her put the complaint in writing, and where she is unable to complain because of physical or mental incapacity or death, a relative, friend, co-worker or others specified in the rules may do so on her behalf. The three-month clock is real, but it is not a trapdoor.

Conciliation, and why it is limited

Conciliation is available before an inquiry begins, but only on the aggrieved woman’s terms. Under Section 10 of the POSH Act, the Internal Committee may, at her request, take steps to settle the matter through conciliation. The employer cannot force it, and the committee cannot initiate it on its own.

There is one firm limit the law draws. No monetary settlement can be made the basis of conciliation. That rules out the “hush payment” model, where a complaint is quietly bought off, and it keeps conciliation as a genuine resolution route rather than a settlement bazaar. If conciliation is reached, the committee records it and no further inquiry is conducted, unless the woman later shows the terms were not honoured.

The 90-day inquiry, the report and the 60-day action window

The inquiry has a hard outer limit: it must be completed within 90 days. During the inquiry, the Internal Committee has the powers of a civil court for summoning witnesses and requiring documents, so it is a quasi-judicial process, not an informal chat. It follows the principles of natural justice, which means the respondent gets notice of the allegations and a fair chance to reply. The Supreme Court set aside an entire inquiry in Aureliano Fernandes v. State of Goa precisely because that fair chance was denied.

Once the inquiry ends, the committee must submit its report to the employer within 10 days. If the allegation is proved, it recommends action, which can range from disciplinary action for misconduct to deduction from the respondent’s salary as compensation to the woman, worked out on the factors in Section 15 (including mental trauma, loss of career opportunity, and the respondent’s income). The employer must then act on the recommendation within 60 days.

Interim relief runs alongside all of this. Under Section 12, while the inquiry is pending the committee can recommend that the woman be transferred, or the respondent be transferred, or that she be granted leave of up to three months over and above her normal entitlement, so she is not forced to keep working next to the person she has complained about. That’s the protection most complainants don’t realise they can ask for on day one.

Appointment letters, the POSH policy and the compliance trail

Appointment letters are where POSH compliance actually begins for a new hire, because that is the first document in which the employer can put the anti-harassment policy on record. The Act does not, in terms, command a specific clause in the appointment letter. But read Section 19’s duties together with the new labour codes’ appointment-letter mandate, and the offer letter becomes the natural anchor for the whole compliance trail: policy acknowledged, committee identified, reporting route known, all from the first day.

Isn’t this just paperwork? Not once a complaint is filed. The single thing an Internal Committee, and later a court, looks for is evidence that the employer communicated the policy and the process. An acknowledged POSH policy at onboarding is the cleanest proof of that, and its absence is the first thing a well-advised complainant’s lawyer will point to.

Where POSH sits in onboarding

The practical build is straightforward. The appointment letter or the employee handbook it refers to should state that sexual harassment is treated as misconduct, name the Internal Committee and how to reach it, and attach or link the standalone POSH policy. Getting the appointment letter itself right is part of a larger drafting discipline, which our guide to drafting an employment agreement in India covers clause by clause.

This dovetails with a change employers are already absorbing. Under the new labour codes, a formal appointment letter is now a statutory entitlement for every worker, a shift explained in our piece on working hours, overtime and leave under the new labour codes. So the document POSH relies on to carry the policy is now something the employer has to issue anyway, which is why folding the two duties into one onboarding step makes obvious sense.

The policy, the display and the awareness duty

The written policy is the backbone, and Section 19 gives it three moving parts. There is the policy document itself, which sets out what conduct is prohibited, who sits on the committee, and how to complain. There is the display duty: the penal consequences and the committee’s constitution have to be put up at a conspicuous place in the workplace, physical or digital. And there is the awareness duty: workshops and orientation programmes for employees, and specific capacity-building sessions for committee members, at regular intervals.

Skipping the awareness piece is the false economy we see most often. An employer can have a perfect policy on file and still fail an inspection, or lose credibility before a committee, because it never actually trained its people or its committee. The document is necessary. It is not sufficient. A complete new labour code compliance checklist is the practical way to make sure the policy, the display and the training records are all in place, not just drafted.

Annual reporting, confidentiality and false complaints

Annual reporting is the compliance step employers forget after the committee is set up, and it is a legal duty, not housekeeping. Under Section 21 of the POSH Act, the Internal Committee (and the Local Committee) must prepare an annual report each calendar year and submit it to the employer and to the District Officer. Section 22 then requires the employer to include the number of cases filed and disposed of in its own annual report, or to intimate the District Officer where no such report is otherwise prepared.

Why does a small annual filing carry weight? Because it is the one recurring, dated record that proves the machinery is alive. A committee that never files an annual report looks, from the outside, like a committee that never functioned, and that inference cuts against the employer the moment a dispute or an inspection arises.

Confidentiality and its limits

Confidentiality runs through the entire process under Section 16 of the Act. The identity of the aggrieved woman, the respondent, the witnesses, the contents of the complaint, and the inquiry proceedings cannot be published, communicated or made known to the public, press or media. The point is to protect the complainant from the second harm of exposure, which for years kept women from complaining at all.

The confidentiality is not absolute, though. Information about the justice secured, without the identity details, can be disseminated. And breach of the confidentiality obligation is itself penalised: a person who contravenes Section 16 is liable to the penalty prescribed under the service rules, or Rs. 5,000 where no such rules apply. So the HR manager who gossips about a live complaint isn’t just being unprofessional, they’re exposed under the Act.

False or malicious complaints

The Act does address misuse, but carefully. Under Section 14, if the Internal Committee concludes that a complaint was malicious, or was made knowing it to be false, or that forged or misleading evidence was produced, it may recommend action against the complainant under the service rules. This is the provision employers reach for when they fear the process will be weaponised.

Here’s the safeguard that matters, and it is often misread. A mere inability to substantiate a complaint, or a lack of adequate proof, is expressly not enough to treat the complaint as malicious. The law draws a clear line between a case that fails on evidence and a case brought in bad faith. Only the second attracts action, and malice has to be established through a specific finding, not assumed because the woman lost. Treat every unproven complaint as false, and the employer creates a fresh chilling effect the courts will not reward.

Penalties, enforcement and the Aureliano Fernandes directions

The penalty for non-compliance sits in Section 26 of the POSH Act, and it starts with a fine of up to Rs. 50,000. That covers failing to constitute an Internal Committee, failing to act on the committee’s recommendations, failing to file returns, or otherwise contravening the Act. The fine looks modest on its own, which is exactly why employers underestimate what sits behind it.

What actually bites is the repeat-offence consequence. On a second or subsequent contravention, the punishment doubles, and, more seriously, the government can cancel or withdraw, or refuse to renew, the licence or registration required to carry on the business. For a regulated establishment, that is an existential penalty, not a line-item fine, and it is the reason POSH compliance cannot be treated as a low-stakes formality.

The Aureliano Fernandes tightening

The enforcement climate shifted with Aureliano Fernandes v. State of Goa, decided by the Supreme Court on 12 May 2023. The Court found what it called serious lapses in the implementation of the POSH Act more than a decade after it was passed, and issued a set of directions to close the gap. It required the Union, states and Union Territories to verify that all ministries, departments, public sector undertakings, authorities and local bodies had constituted Internal Committees compliant with the Act.

The directions reached the private side too. The Court called for confirming that Internal Committees exist across private establishments, educational institutions, hospitals and nursing homes, and for capacity-building and training of committee members to be treated as an ongoing obligation. It also asked authorities to make the committees’ details, and the complaint procedure, publicly and readily available. The practical message to employers was blunt: a committee that exists only on paper is not compliance.

Enforcement channels and the SHe-Box portal

Enforcement runs through the District Officer and the state machinery, backed now by a central reporting route. The government’s SHe-Box portal gives women a single online window to register complaints against any workplace, public or private, and routes each complaint to the relevant committee while letting the ministry track its status. For employers, that visibility is the point: a complaint filed centrally is a complaint that is now much harder to lose in an in-house drawer.

How is enforcement likely to develop from here? Expect the checkable duties to draw attention first: whether an Internal Committee exists and is correctly composed, whether the annual report was filed, whether the policy is displayed. The judicial precedents that shaped this field, from Vishaka to Apparel Export Promotion Council v. A.K. Chopra, (1999) 1 SCC 759 to Medha Kotwal Lele v. Union of India, (2013) 1 SCC 297, all pushed in the same direction: turning a stated right into an enforced one. Reading POSH as a form-filling exercise is the misjudgement most likely to catch an employer out. For the wider view of why this is a governance issue and not just an HR task, iPleaders has a useful piece on why POSH compliance is more than an HR checklist.

Frequently asked questions

1. What is the POSH Act, and who does it protect? The POSH Act is the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013. It protects any woman at a workplace, whether she is a regular employee, a contract or temporary worker, an intern, or even a visitor or client, from sexual harassment, and it makes the employer responsible for prevention and redressal.

2. When must an employer set up an Internal Committee? As soon as the workplace has 10 or more employees. Under Section 4 of the Act, constituting the Internal Committee is mandatory at that threshold, and the count includes contract, temporary and part-time staff, not just the permanent payroll.

3. Who must be on the Internal Committee? A Presiding Officer who is a senior woman employee, at least two employee members preferably with a background in social work or law, and one external member from an NGO or a person familiar with sexual harassment issues. At least half the members must be women, and the external member is compulsory.

4. What is the difference between the Internal Committee and the Local Committee? The Internal Committee is constituted by the employer inside the workplace. The Local Committee is a district-level body under Section 6, which handles complaints from establishments with fewer than 10 employees and complaints made against the employer himself.

5. How long does a woman have to file a POSH complaint? Three months from the date of the incident, or three months from the last incident in a series. The Internal Committee can extend this by a further three months for reasons recorded in writing.

6. How long does a POSH inquiry take? The inquiry must be completed within 90 days. The committee then submits its report to the employer within 10 days, and the employer must act on the recommendations within 60 days.

7. Can a POSH complaint be settled through conciliation? Yes, but only at the aggrieved woman’s request, and no monetary payment can be the basis of the settlement. Conciliation cannot be forced by the employer, and if it is reached, no further inquiry is held unless the terms are breached.

8. What relief can a woman get while the inquiry is pending? Under Section 12, the committee can recommend transferring the woman or the respondent, or granting the woman up to three months of leave over and above her normal entitlement, so she isn’t made to work alongside the respondent during the inquiry.

9. Does the appointment letter have to mention POSH? The Act does not prescribe a specific clause, but the appointment letter or the handbook it refers to is the standard place to record that sexual harassment is misconduct, name the Internal Committee, and attach the policy. With appointment letters now mandatory under the labour codes, folding the POSH policy into onboarding is the cleanest compliance practice.

10. What are the penalties for not complying with the POSH Act? A fine of up to Rs. 50,000 under Section 26. On a repeat contravention, the penalty doubles and the government can cancel or refuse to renew the licence or registration needed to run the business.

11. Is an employer punished for not having a POSH policy or committee? Yes. Failing to constitute the Internal Committee, or otherwise contravening the Act, is itself an offence under Section 26, independent of whether any complaint has been filed.

12. What happens if a complaint turns out to be false? If the committee specifically finds that the complaint was malicious or knowingly false, or that forged evidence was produced, it can recommend action under the service rules. But an inability to prove the complaint is expressly not treated as malice.

13. Is the identity of the complainant kept confidential? Yes. Section 16 bars publishing the identity of the woman, the respondent, witnesses, and the inquiry contents. Breaching this confidentiality is itself penalised under the service rules or with a Rs. 5,000 fine.

14. Does the POSH Act cover men or LGBTQ+ employees? The Act as drafted protects women. Complaints by men or on other grounds are usually handled under an employer’s internal, gender-neutral anti-harassment policy or the service rules, not under the POSH Act itself.

15. What did the Supreme Court say in Aureliano Fernandes v. State of Goa? In its 12 May 2023 ruling, the Court found serious gaps in POSH implementation and directed governments and public and private establishments to verify that compliant Internal Committees exist, to train committee members, and to make the complaint procedure publicly available.

References

Case Law

1. Vishaka & Ors. v. State of Rajasthan, (1997) 6 SCC 241; AIR 1997 SC 3011. Laid down the binding guidelines on workplace sexual harassment that governed until the 2013 Act.
2. Apparel Export Promotion Council v. A.K. Chopra, (1999) 1 SCC 759; AIR 1999 SC 625. Upheld the Vishaka approach and the dismissal of a superior for harassment.
3. Medha Kotwal Lele v. Union of India, (2013) 1 SCC 297; AIR 2013 SC 93. Directed effective implementation of the Vishaka guidelines and functional complaint committees.
4. Aureliano Fernandes v. State of Goa, (2023) SCC OnLine SC 621. Found serious lapses in POSH implementation and issued directions to public and private establishments (decided 12 May 2023).

Statutes

1. The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013. Sections cited: 2 (definitions), 4 (Internal Committee), 6 (Local Committee), 9 (complaint), 10 (conciliation), 11 (inquiry), 12 (interim relief), 13 (report and action), 14 (false or malicious complaint), 15 (compensation factors), 16 (confidentiality), 19 (employer duties), 21 and 22 (annual report), 26 (penalty); read with the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Rules, 2013.

This article is for informational purposes only and does not constitute legal advice. For specific legal guidance, consult a qualified legal professional.