WORKPLACE RIGHTS & LAW: POSH Act: What Every Employee and Employer Needs to Know
India’s landmark law against sexual harassment at work — explained plainly, with real examples and a complete guide to the SHe-Box portal.
Walk into any office in India today and you will find a notice pinned somewhere — often half-ignored — about an Internal Complaints Committee and a law called POSH. Most employees have heard the acronym. Far fewer understand what the law actually does, who it protects, what obligations it places on employers, and what happens when things go wrong. That gap between awareness and understanding is exactly where harassment continues to thrive.
This article is an attempt to close that gap. No legalese, no HR jargon — just a clear account of what the Prevention of Sexual Harassment (POSH) Act is, how it works in practice, and how the government’s SHe-Box portal fits into the picture.
Where It All Started
The story begins not in a parliament but in a village in Rajasthan. In 1992, a social worker named Bhanwari Devi tried to stop a child marriage. She was gang-raped in retaliation. When the courts failed to deliver justice, women’s rights groups took the matter all the way to the Supreme Court.
In 1997, the Supreme Court responded with what became known as the Vishaka Guidelines — a set of binding directions that required every workplace to have a mechanism for addressing sexual harassment. But guidelines are not law. For the next sixteen years, compliance was patchy and enforcement almost non-existent.
It took until 2013 for Parliament to pass the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act — the POSH Act. It came into force on December 9, 2013, and it fundamentally changed what employers are legally required to do.
| “The Act is not just about punishment. It is about creating workplaces where a complaint can be made without fear, heard without bias, and resolved without delay.” |
What Exactly Is Sexual Harassment Under the Act?
The Act defines sexual harassment broadly — and deliberately so. It is not limited to physical assault. Section 2(n) includes any one or more of the following unwelcome acts or behaviour:
- Physical contact or advances
- Demands or requests for sexual favours
- Making sexually coloured remarks
- Showing pornography
- Any other unwelcome physical, verbal, or non-verbal conduct of a sexual nature
Critically, the word ‘unwelcome’ is doing a lot of work here. What matters is not the intent of the person doing it — it is how the behaviour is experienced by the person on the receiving end.
| EXAMPLE
The “harmless joke” defence: A senior manager regularly makes jokes about female colleagues’ appearances at team lunches. He considers it light-hearted banter. His female colleagues find it deeply uncomfortable and humiliating. Under POSH, their experience — not his intention — is what counts. This behaviour can constitute sexual harassment. |
Who Does the Law Protect?
Here is something many people do not realise: the POSH Act protects any woman at a workplace — not just permanent employees. The definition of “aggrieved woman” (Section 2(a)) includes:
- Regular employees
- Contract workers and daily wage workers
- Probationers and trainees
- Apprentices
- Domestic workers employed in households
- Women employed through agents
- Volunteers and interns
And the definition of “workplace” extends well beyond a physical office. A work-related trip, a client site, a company event, even travel between office locations — all of these count.
| EXAMPLE
The intern scenario: Y is a 22-year-old unpaid marketing intern. At the office farewell party (held at a hotel), a senior executive makes repeated inappropriate comments and touches her shoulder despite her moving away. Even though X is unpaid and the incident occurred outside office premises, she is fully protected under POSH. The workplace includes work-related social events. |
The Respondent: Who Can Be Accused?
The law covers any man — employee, vendor, client, visitor — who is alleged to have committed sexual harassment at a workplace. Yes, even a client can be the subject of a complaint. The law does not require the respondent to be employed by the same organisation.
| EXAMPLE
The client situation: Y works at an IT services firm. During a client visit, the client’s representative sends her inappropriate messages asking for a personal meeting. Y reports this to her employer’s ICC. Even though the harasser is not their employee, the employer has an obligation under POSH to address the complaint and take appropriate steps — including, if necessary, restricting that client’s access to their premises. |
The Internal Complaints Committee (ICC): The Heart of the Law
Every organisation with 10 or more employees must constitute an Internal Complaints Committee (ICC). This is not optional. It is a statutory requirement, and failure to set one up attracts a penalty of up to Rs. 50,000 — and double that for a repeat offence.
Who Sits on the ICC?
The ICC must have at least four members:
1. Presiding Officer — A senior woman employee. She chairs the committee.
2. Two Members — Employees committed to the cause of women, preferably with legal or social work experience.
3. External Member — A person from an NGO or association committed to women’s issues, or a legal expert. This is mandatory. The presence of an outsider prevents the committee from becoming a tool of the employer.
| Important: At least half the members of the ICC must be women. If a Presiding Officer or member resigns or is unavailable, a new one must be appointed within a reasonable time. An ICC that exists only on paper — with no meetings, no training, no visible presence — is not genuine compliance. |
Local Complaints Committee (LCC): For Smaller Workplaces
What about organisations with fewer than 10 employees — or cases where the accused is the employer himself? This is where the Local Complaints Committee (LCC) steps in. Every District Officer (usually the District Collector or District Magistrate) is required to set up an LCC. Workers in small shops, domestic workers, agricultural labourers — anyone without access to an ICC — can file complaints with the LCC.
How the Complaint Process Works
The process has a clear structure designed to be both accessible and fair.
Step 1: Filing the Complaint
The aggrieved woman must file a written complaint within 3 months of the incident (or the last incident in a series). The ICC can extend this by another 3 months if there was sufficient cause for the delay. If the woman cannot write the complaint herself, the Presiding Officer or a member must provide reasonable assistance.
Step 2: Conciliation (Optional)
Before inquiry begins, the complainant may request conciliation — an attempt to settle the matter through mediation. Crucially, the settlement cannot include payment of any sum of money to the complainant. If conciliation succeeds, the ICC records it and closes the matter. If it fails, inquiry proceeds.
Step 3: Inquiry
The ICC conducts an inquiry following the principles of natural justice — both parties get to be heard, present evidence, and examine witnesses. The inquiry must be completed within 60 days.
Step 4: Report and Recommendations
Within 10 days of completing the inquiry, the ICC submits its report to the employer. If the complaint is found substantiated, the ICC recommends action against the respondent — which can include:
- Written apology
- Warning or reprimand
- Withholding of promotion or increment
- Suspension or termination
- Deducting salary to pay compensation to the complainant
Step 5: Employer Acts
The employer must implement the recommendations within 60 days of receiving the report.
| EXAMPLE
A complaint that went through the full process: Z, a project manager at a manufacturing company, filed a complaint against a colleague who repeatedly sent her suggestive texts and followed her to her car. The ICC heard both sides over three sittings. The respondent denied everything. The ICC examined her phone records and CCTV footage. Finding the complaint substantiated, they recommended a 3-month suspension without pay and a written warning. The employer implemented the recommendations within the stipulated time. Z was also offered the option to be transferred to a different project team. |
Protection Against False or Malicious Complaints
A concern often raised — especially by employers — is the risk of false complaints. The Act addresses this. If, after inquiry, the ICC finds a complaint was malicious (not merely unproven), it can recommend action against the complainant. But — and this is important — an inability to prove a complaint does not, by itself, make it malicious. The bar for “malicious” is deliberate fabrication. This balance prevents the law from being weaponised in either direction.
| GOVERNMENT PORTAL
The SHe-Box Portal: Filing a Complaint Online In 2017, the Ministry of Women and Child Development launched the Sexual Harassment electronic-Box (SHe-Box) portal — an online platform designed to make it easier for women to file POSH complaints, particularly against government employees and in situations where the internal mechanism has failed. What SHe-Box Does SHe-Box is a centralised complaint management system that allows a woman to register a complaint, track its status, and receive updates — all through a single online window. The portal is accessible at: shebox.wcd.gov.in Who Can Use It? Any woman who has faced sexual harassment at a workplace can use SHe-Box — whether she is a government employee, a private sector worker, or employed in an unorganised sector. The portal routes the complaint to the appropriate authority based on the employer type. How to File a Complaint on SHe-Box Step 1 — Register: Visit shebox.wcd.gov.in and create an account using your mobile number or email ID. Step 2 — Fill the Form: Log in and provide details about the incident — date, location, nature of harassment, and the organisation involved. Attach supporting documents if available. Step 3 — Submit: Once submitted, you receive an acknowledgement with a unique complaint number. Step 4 — Track: Log in at any time to check the status of your complaint and see which authority it has been routed to. Step 5 — ICC or LCC Takes Over: The portal forwards the complaint to the relevant ICC or the appropriate authority, which then conducts the inquiry under POSH timelines. What SHe-Box Is Not SHe-Box is not a replacement for the ICC process — it is a routing and tracking layer on top of it. The inquiry still happens through the ICC or LCC. What the portal does is create a digital trail, reduce the intimidation of walking into an HR cabin, and give the government visibility into complaint volumes and resolution timelines. |
Employer Obligations: Beyond Just Having an ICC
Setting up an ICC is the starting point, not the finishing line. The POSH Act places several other obligations on employers that are frequently overlooked:
- Awareness: Employers must display at a conspicuous place the penal consequences of sexual harassment and the composition of the ICC.
- Training: Organise workshops and awareness programmes — at regular intervals — for employees. ICC members must be oriented and trained.
- Annual Report: Every employer must include in their annual report the number of complaints received, disposed of, and pending, along with the nature of action taken.
- Assistance to ICC: Provide space, resources, and administrative support for the ICC to function effectively.
| EXAMPLE
The annual report failure: A mid-sized NBFC had an ICC on paper but never included POSH data in its annual report. During a regulatory inspection, this omission was flagged. The company faced scrutiny not just for the reporting failure but for the apparent signal that POSH compliance was treated as a checkbox exercise. This is increasingly a reputational and governance risk, particularly for listed companies. |
Penalties for Non-Compliance
- Failure to constitute an ICC: Fine up to Rs. 50,000
- Second or subsequent offence: Double the fine, and possible cancellation or non-renewal of business licence or registration
- Victimisation of a complainant: Treated as misconduct and attracts disciplinary action
Common Misconceptions — Set Straight
“Only physical harassment counts.”
False. The Act explicitly covers verbal and non-verbal conduct — comments, gestures, emails, messages, social media communication. A text message sent after hours is as much a potential POSH issue as something that happens in a conference room.
“If the woman doesn’t say no explicitly, it isn’t harassment.”
False. Harassment is defined by whether the conduct is unwelcome — not whether the woman said “no” in specific words. Silence, discomfort, or avoidance can all signal that behaviour is unwelcome.
“This only applies to big companies.”
False. The ICC requirement applies to organisations with 10 or more employees. Smaller organisations are covered by the LCC mechanism.
“Men cannot be protected under POSH.”
Technically, the POSH Act is specifically for the protection of women. However, many organisations have adopted internal policies that extend similar protections to all genders — and this is widely considered good practice.
What a Genuinely Safe Workplace Looks Like
Compliance and safety are not the same thing. A workplace can have a technically compliant ICC and still be a place where harassment flourishes — because the committee is dominated by allies of senior management, or because anyone who complains knows they will be quietly sidelined.
Genuine safety comes from culture: from managers who model respect, from peers who do not look away, from HR that does not rush to protect the organisation above the individual, and from leadership that treats a harassment complaint as a governance issue rather than a PR crisis.
The law gives every Indian working woman a framework to stand on. The culture determines whether she actually can.
| “An ICC that nobody trusts is just furniture. The law creates the structure; leaders create the safety.” |
Quick Reference: Key POSH Numbers
| Key Figure | What It Means |
| 3 months | Time limit to file a complaint (extendable by 3 more months) |
| 60 days | Maximum time for ICC inquiry |
| 10 days | Time for ICC to submit its report after inquiry |
| 60 days | Time for employer to implement ICC recommendations |
| 10+ employees | Threshold for mandatory ICC constitution |
| ₹50,000 | Fine for non-compliance |
| 4 members minimum | Required composition of ICC |
| 90 days | Combined inquiry + implementation window |


