HR Advisory · Compliance

POSH in 2026: Getting Your ICC and Policy Right

The POSH Act is a zero-tolerance, mandatory requirement independent of the Labour Codes — and in 2026 its 'workplace' definition explicitly includes your employees' homes. Most companies' frameworks are quietly out of date.

Of all the compliance obligations an Indian employer carries, the Prevention of Sexual Harassment (POSH) Act is the one most often treated as a one-time setup and then forgotten — which is exactly why so many frameworks are quietly non-compliant. The POSH Act is a mandatory, zero-tolerance requirement that applies to every organisation, independent of the four Labour Codes. And in 2026, two things make a fresh look overdue: the workplace definition has expanded to cover remote work, and inspection readiness is rising across the board.

The expansion most companies have missed

The POSH Act's definition of "workplace" now explicitly includes any place an employee visits in the course of employment — and, critically, a dwelling place or house. In a world of hybrid and remote work, that means your obligations and your employees' protections extend to virtual and home-office environments. A harassment incident over a video call, in a work chat, or during a work-from-home arrangement falls within POSH. Frameworks written for a purely on-site workforce no longer cover the reality of how people work.

Getting the ICC right

The Internal Complaints Committee is where most technical non-compliance hides. The requirements are specific:

• Threshold. Any organisation with 10 or more employees must constitute an ICC.
• Leadership. The ICC must be headed by a senior woman employee.
• Composition. At least half the members must be women.
• External member. It must include one external member — typically an NGO representative or a legal expert familiar with the subject.

A committee missing the external member, or without the required gender composition, is not validly constituted — which can invalidate its proceedings. This is a common and serious gap.

The obligations beyond the committee

POSH compliance is ongoing, not a one-time formation. The recurring duties include displaying the names of ICC members prominently, conducting annual sensitisation workshops for employees, filing the annual report, and integrating POSH into your appointment letters and HR policies. The penalties for non-compliance are real — fines, escalating consequences for repeat failures, potential licence implications, and significant reputational and legal exposure.

A practical 2026 checklist

1. Reconstitute or verify your ICC against the composition rules, including the external member.
2. Update the policy to explicitly cover remote, hybrid and virtual workplaces.
3. Display ICC details where employees can see them, including for remote staff.
4. Run the annual workshop and document attendance.
5. File the annual report on time.
6. Embed POSH in appointment letters and onboarding, which also aligns with the Labour Codes' documentation requirements.

Why this matters beyond compliance

It is tempting to treat POSH as a box-ticking obligation, but that framing misses the point. A credible, well-run POSH framework is part of how you build a workplace people trust — and a visible failure is one of the fastest ways to lose that trust and damage your employer brand. The companies that handle POSH well treat it as a genuine safety commitment, kept current and taken seriously, not a certificate filed and forgotten. For scaleups especially, it is a foundation investors check; we cover that in our piece on HR foundations before Series B.