POSH Act: Building an Internal Committee That Actually Works (Not Just on Paper)

Eleven years into the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — POSH — most Internal Committees in Indian companies are on paper. The constitution is on file, the notice is on the wall, the annual return goes to the District Officer. And almost nothing has happened to make any of it functionally capable of receiving and disposing of a complaint with the rigour the Act anticipates. This article is the practical playbook for an in-house CS or HR partner to build an ICC that actually works.

The framework, briefly

Every employer with 10 or more employees must constitute an Internal Committee (the older term IC or ICC). Composition under Section 4(2):

• A Presiding Officer who is a senior-level woman employee.
• At least two members from amongst employees, preferably committed to the cause of women or having legal knowledge.
• An external member from an NGO or someone with experience in women's issues.
• Half of the total members must be women.

Term: three years.

What “actually working” looks like

• The committee meets even when there is no complaint — at least quarterly — to review awareness, training, and policy.
• Every employee can name at least the Presiding Officer and the external member.
• There is a real, used, communication channel for reporting (email + a confidential physical drop, increasingly an anonymous web form).
• The annual return to the District Officer accurately reflects activity, including zero-complaint years.
• Mandatory training (under Rule 13) happens at least once a year for all employees, with new-hire onboarding modules.

The four common failure modes

1. Committee constituted but never trained. POSH inquiries are quasi-judicial. An untrained committee makes procedural errors — not allowing cross-examination, not maintaining contemporaneous notes, mis-counting timelines — that vitiate the outcome on appeal.
2. External member nominal. Often a friend of HR, attends one meeting a year. The external member's role is to inject independence and to chair the more controversial sessions when needed. Pick someone real.
3. Confidentiality breached during the inquiry. Section 16 prohibits disclosure of identity. Casual conversations during an inquiry can constitute a breach.
4. Annual return missed or inaccurate. Section 21 requires submission by 31-December for the calendar year just ended. The format varies state-to-state — some require a Form B, some a state-prescribed format.

The Section 17 + Section 19 obligation map

Section 17 — duties of the employer:

• Provide a safe working environment.
• Display the consequences of sexual harassment.
• Organise workshops and awareness programmes.
• Provide facilities to the ICC.
• Assist the woman if she chooses to file a complaint under IPC / BNS.
• Treat sexual harassment as misconduct under the rules of service.

Section 19 — annual return obligations — links into Section 21, requiring inclusion of the number of cases received and disposed of in the employer's annual report.

The inquiry timeline

1. Complaint received in writing — within 3 months of the last incident (extendable by 3 months).
2. Inquiry to be completed within 90 days.
3. Report to the employer within 10 days of completion.
4. Employer action within 60 days of the report.

Total: from complaint to action, a hard 5-6 months. The penalty for missing timelines is a procedural challenge that almost always succeeds on appeal.

The remote work and online harassment layer

Most pre-2020 POSH playbooks did not anticipate distributed teams, Slack DMs, video calls, or off-site coworking. The 2020s have made this central. Practical updates:

• “Workplace” under Section 2(o) now operationally includes any place the employee visits arising out of or in the course of employment, including virtually.
• Slack / Teams / email communications are workplace communications.
• Off-site team events, including offsites at hotels, fall within the scope.
• Vendor / client interactions at the client's premises are within scope — coordinate with the client's POSH framework.

The CS / HR playbook

1. Annually re-constitute or refresh ICCs in companies with employee count growth — the gender ratio and seniority test can quietly slip.
2. Mandatory training, recorded. One annual all-hands session, plus a new-hire module within 30 days of joining. Maintain attendance evidence.
3. One ICC training every year — full-day, external trainer, includes a mock inquiry.
4. Quarterly ICC meetings even without complaints — review training reach, review policy alignment with current law, review communication.
5. Annual return well before December. Don't leave it to the last week of the calendar year.
6. Board / audit committee briefing once a year — total complaints, disposal pattern, learnings. Treat as a governance item, not an HR item.

The legal risk that nobody talks about

An employer who is non-compliant with Section 4 (constitution) or Section 21 (annual return) is liable to a fine up to ₹50,000, with repeat offences attracting double penalty and possible cancellation of business registration / license. The financial penalty is small. The reputational penalty — a single instance in the financial press — is not.

How Delta Filings supports the POSH compliance layer

The Delta Filings compliance module carries the POSH calendar — annual training cycles, ICC term expiries, annual return due dates by state — and surfaces the obligations to the CS or HR partner alongside the rest of the corporate calendar. For a CS practice with multiple corporate clients, the multi-state annual return view is the single most useful POSH artefact you can produce in November.

The closing note

POSH is the law that most companies treat as compliance theatre and most employees treat as “better than nothing.” The companies that build a genuinely working ICC — trained, active between complaints, with credible external members — do better when the real complaint arrives. The investment is small. The risk avoided is not.