If you run a company with 10 or more employees in India, the POSH Act 2013 is not optional paperwork. It is a statutory obligation with real consequences — fines up to ₹50,000, cancellation of business licences, and in an increasingly litigious HR environment, personal liability for directors and management. And yet, most compliance audits reveal the same pattern: companies have a policy drafted, an ICC constituted on paper, and no training conducted, no annual report filed, and an External Member who hasn’t been contacted since the day of appointment.
This guide covers every obligation the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — commonly known as the POSH Act — places on employers. It’s written for HR managers, compliance officers, founders, and directors who need to actually implement this law, not just know it exists. It reflects the most current legal position including the Supreme Court’s August 2025 direction on SHe-Box registration and the Delhi High Court’s clarification on written complaints as a jurisdictional prerequisite.
Build Certified POSH Expertise for Your Team
LRA’s Certificate Course on POSH is designed for ICC members, HR professionals, and compliance officers — built by practising advocates, not generic compliance trainers.
What Is the POSH Act 2013?
POSH stands for Prevention of Sexual Harassment. The POSH Act 2013 is the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — a central legislation that came into force on 9 December 2013. It mandates every employer in India to prevent and address sexual harassment at the workplace through a written policy, an Internal Complaints Committee (ICC), mandatory training, and annual reporting to government authorities. The Act applies to all workplaces in India — private, government, NGO, or unorganised sector — and covers every woman engaged with the workplace, including employees, interns, trainees, visitors, and domestic workers.
Before 2013, India had no standalone statute on workplace sexual harassment. The gap was addressed through the Vishaka Guidelines — a set of directions issued by the Supreme Court in Vishaka & Ors. v. State of Rajasthan (1997), after Bhanwari Devi, a government social worker, was gang-raped in Rajasthan while preventing a child marriage. The Guidelines were grounded in Articles 14, 15, and 21 of the Constitution (equality, non-discrimination, and the right to life and dignity) but carried no penal enforcement mechanism.
Parliament converted the Vishaka framework into statute through the POSH Act, 2013, which has three stated objectives embedded in its very title: Prevention (stopping harassment before it occurs), Prohibition (zero tolerance backed by consequences), and Redressal (a time-bound, fair grievance mechanism). Every compliance obligation under the Act flows from one of these three objectives.
Is POSH Training Mandatory in India?
YES — POSH awareness and training are legally mandatory for all employers under the POSH Act, 2013.
Section 19(b): Every employer must display at a conspicuous place in the workplace the penal consequences of sexual harassment and the composition of the Internal Complaints Committee (ICC).
Section 19(c): Every employer must organise workshops and awareness programmes at regular intervals to sensitise employees about the provisions of the POSH Act.
Rule 13: The Rules under the POSH Act specifically require training for ICC members to enable them to effectively discharge their responsibilities.
There is no specific annual frequency prescribed under the Act. It only states that awareness programmes should be conducted “at regular intervals.” Most compliance professionals interpret this as at least once a year for all employees, with induction training for new employees and specialised training whenever new ICC members are appointed, along with refresher sessions as needed.
| Training Type | Who Must Attend | Frequency | Statutory Basis |
|---|---|---|---|
| General Awareness | All employees, interns, contractors, probationers | Minimum annually; at induction for new joiners | Section 19(c) |
| ICC Member Training | Presiding Officer + all members including External Member | At appointment + annually | Rule 13 |
| Manager / Leadership | All people managers, HODs, C-suite | Annually — ideally before general sessions | Section 19(b)/(c) |
| Annual Refresher | Entire workforce | Once per calendar year | Section 19(c) |
| New Joiner Induction | Every new employee on Day 1 or Week 1 | At onboarding | Section 19(c) |
Online POSH training is valid — courts and tribunals have accepted digital training as a compliant mode of awareness. However, the training must be actually delivered, not just assigned on an LMS. Completion records with timestamps, acknowledgment logs, and assessment scores are the documentation that proves compliance during an audit or inquiry.
Who Must Comply with the POSH Act?
The POSH Act uses an intentionally broad definition of “workplace” under Section 2(o) — covering any place visited by an employee arising out of or during the course of employment. Courts have confirmed this includes client offices, off-site events, field locations, and digital channels used for official work.
| Type of Organisation | POSH Applicable? | ICC Required? | LCC Fallback? |
|---|---|---|---|
| Private Company (10+ employees) | ✔ Yes | ✔ Yes — mandatory | Only for complaints against the employer |
| Private Company (<10 employees) | ✔ Yes | ✘ Not required | ✔ Yes — all complaints go to LCC |
| Government Dept / PSU | ✔ Yes | ✔ Yes — mandatory | For inter-employer complaints |
| NGO / Trust / Society | ✔ Yes | ✔ If 10+ employees | ✔ Below threshold |
| Educational Institution | ✔ Yes | ✔ Mandatory (UGC also mandates) | ✔ For smaller colleges |
| Hospital / Healthcare | ✔ Yes | ✔ Mandatory | ✔ Below threshold |
| Startup (any size) | ✔ Yes — no startup exemption | ✔ If 10+ employees | ✔ Below threshold |
| MSME | ✔ Yes — no MSME exemption | ✔ If 10+ employees | ✔ Below threshold |
| Unorganised Sector | ✔ Yes | ✘ Not required | ✔ LCC handles all |
| Remote-only organisation | ✔ Yes | ✔ If 10+ workers | ✔ Below threshold |
One frequently misunderstood point: the 10-employee threshold is for ICC formation, not for POSH applicability. An organisation with 5 employees must still comply with the Act — adopt a policy, conduct awareness, and ensure employees can access the LCC. Non-applicability of the ICC obligation does not mean non-applicability of the law.
Employer Responsibilities Under the POSH Act
Section 19 of the Act lists every obligation the employer carries, and it’s worth reading against your current compliance status:
1. Written POSH Policy
channels, establishes the ICC’s composition and mandate, specifies confidentiality obligations, and lists disciplinary consequences. The policy must be published on the intranet or HRMS and displayed at prominent locations in the office — reception, notice boards, cafeteria. “Published” means actually accessible to every employee, not just uploaded to a folder no one knows about.
2. Safe Workplace Obligation
Section 19(a) places a general duty on the employer to provide a workplace that is safe and free from harassment. This is not merely aspirational — courts have used it to hold employers liable for systemic failure to act when harassment was reported informally, even before a formal ICC complaint.
3. ICC Formation and Maintenance
Every employer with 10 or more employees at any branch or office must constitute an ICC specifically for that location. A single ICC at HQ does not cover branch offices. The composition, tenure, and training of ICC members are statutory obligations, not HR best practices.
4. Awareness and Training
Already covered above — this is Section 19(c) and is legally mandatory. The employer must retain records of training — attendance registers, online completion logs, and assessment results.
5. Complaint Handling and Confidentiality
The employer must ensure that complaints are acknowledged promptly, that inquiries are conducted without bias, and that confidentiality is maintained throughout. Section 16 prohibits disclosure of the complainant’s identity, the respondent’s identity, or the proceedings to any third party, including within the organisation. Breach of confidentiality is an independent offence under the Act.
6. Annual Report
The employer must submit an annual report to the District Officer (the designated authority under the Act, typically the District Magistrate or a designated officer of the District Women and Child Development department) containing the number of complaints received, the number disposed of, and the nature of action taken. Most states now accept this through an online portal; some link it to the SHe-Box platform.
7. SHe-Box Registration (Supreme Court Order — August 2025)
Following the Supreme Court’s order dated 12 August 2025, organisations are now expected to register their Internal Committees and workplace details on the SHe-Box portal (shebox.wcd.gov.in), maintained by the Ministry of Women and Child Development. Sector regulators including SEBI, the Ministry of Education, and several state labour departments have issued circulars making SHe-Box registration a compliance requirement. This is an immediate action item if your organisation hasn’t registered yet.
How to Form an Internal Complaints Committee (ICC)
Section 4 of the POSH Act prescribes the composition of the ICC. Getting the composition right is the single most common compliance failure — and it’s the first thing any inquiry or regulatory audit checks.
Mandatory Composition (Section 4)
| Role | Eligibility | Number | Notes |
|---|---|---|---|
| Presiding Officer | Senior woman employee — ideally at senior management level | 1 (Mandatory) | Must be a woman. If no senior woman employee is available, the employer must nominate one from another office/branch or consult the LCC. |
| Employee Members | Committed to women’s causes, or with experience in social work or legal knowledge — from employees of the same level | Minimum 2 | At least one should ideally have a social work or legal background. |
| External Member | From an NGO, association, or body committed to women’s causes; or a person familiar with labour, management, or legal issues | Exactly 1 (Mandatory) | The single most commonly missing element in non-compliant ICCs. Must be genuinely independent — not a friend of the founders. |
