top of page

The 31-Point POSH Compliance Checklist Every Employer Should Actually Be Using

Sep 9
5 min read

Most companies treat POSH compliance as something to set up once and never really touch again. A policy gets drafted, a committee gets formed, maybe an awareness session happens once a year, and then the whole thing sits quietly in a folder somewhere until either a complaint lands or someone from outside starts asking questions. That approach has gotten a lot riskier lately, especially with regulators moving toward active inspection rather than assuming companies are compliant just because a policy document exists somewhere on file.


Maharashtra recently gave a good preview of where this is heading, when its Women and Child Development department rolled out a detailed 31-point inspection checklist that district officers now use to actually walk into companies and check whether POSH compliance is real or just paperwork. It's a genuinely useful framework, and honestly, whether or not a business happens to be in Maharashtra, it's a solid checklist to measure any organisation against. The old question used to be simple. Does the company have a POSH policy, yes or no. The real question now is whether that policy actually functions, and whether the company could prove it on the spot if someone asked.


3.1 What the Checklist Is Actually Looking For

A surprising number of organisations technically have an Internal Committee that would completely fall apart under scrutiny, and this is usually where any real review should start. Every office or unit needs its own IC rather than one central committee trying to cover an entire company, and that committee needs to be properly constituted, meaning at least four members, at least half of them women, a senior woman employee formally appointed as Presiding Officer, and an external member included under Section 4(2)(c) of the POSH Act who actually has relevant experience rather than a name added purely to satisfy the requirement on paper. It's worth going back and checking the paperwork behind all of this too. Appointment letters should actually exist, tenure shouldn't have quietly expired, the external member's credentials should hold up, and training records should be on file for every branch, not just head office. An IC that exists only on paper remains one of the fastest ways to fail an inspection, and it's still one of the most common gaps found in practice.


From there, the checklist moves into how well the policy itself reflects how people actually work today. A lot of POSH policies still read like they were written before hybrid work existed, mostly because they were. A policy worth having now needs to explicitly account for video calls, messaging platforms, and interactions that happen while people are working from home rather than sitting together in an office. The workplace isn't just the physical office anymore, and a policy that pretends otherwise leaves real gaps that only become obvious once something actually goes wrong in one of those spaces.


3.2 Hybrid and Remote Workplace Coverage

A modern POSH framework must account for remote and distributed workplace environments. Under the law, the “workplace” extends beyond physical premises to include digital communication channels, video meetings, official messaging platforms, corporate travel, and home-office settings during working hours. Policies that do not explicitly address conduct across digital and remote spaces leave legal vulnerabilities during inquiry proceedings.


3.3 Visibility and Accessibility

There's not much point in having a strong policy if nobody actually knows it exists. This comes down to whether employees have genuinely received the policy rather than it sitting in a folder somewhere, whether committee details and reporting channels are displayed where people can actually see them, and whether the policy gets built into onboarding and the employee handbook rather than treated as a one-time announcement. If people don't know how to report something, the whole system is weak no matter how well it reads on paper.


3.4 Training and Sensitisation

Training is critical because it is where a lot of organizations quietly fall short. Possessing an appointed IC is insufficient if members lack practical instruction on inquiry procedure.


IC members require functional training covering:

1. Adherence to strict statutory timelines (acknowledgment within 7 working days, completion of inquiry within 90 days).

2. Application of principles of natural justice and proper handling of evidence.

3. Granting interim relief to complainants under Section 12.

4. Drafting legally sound inquiry reports that withstand judicial review.


Beyond the IC, general workforce awareness sessions must be conducted periodically across all branches, supported by verifiable attendance logs.


3.5 Procedural Compliance and Documentation

Complaints are supposed to be acknowledged within seven working days, inquiries need to wrap up within ninety days, and employers are expected to act on the committee's recommendations within sixty days of receiving them. Most organisations struggle here not out of deliberate neglect but because their documentation is inconsistent, meaning the paper trail behind complaint registers, acknowledgment records, inquiry notices, witness statements, and closure reports either doesn't exist or doesn't line up cleanly. If a timeline does slip for a legitimate reason, the smartest move is documenting that reason clearly rather than leaving it unexplained. Confidentiality under Section 16 of the Act comes up just as often, and it's worth being honest about who actually has access to complaint records, how securely investigation files are stored, and whether managers or colleagues end up casually discussing cases they really shouldn't know the details of.


3.6 SHe-Box Compliance

Registration on the central She-Box portal is a required step, but compliance requires active administration. Employers must appoint designated Nodal Officers/HR representatives to monitor the portal, ensure IC and branch contact details are current, and manage complaints routed directly through the platform. Annual POSH reports must be prepared, submitted to the relevant District Officer, and filed in accordance with statutory deadlines.


3.7 Why This Needs to Be a Living System, Not a Filed Document

Most companies aren't failing at POSH compliance because they ignored it entirely. They're failing because it got treated as a one-time project instead of something that needs ongoing maintenance. A policy gets written, a committee gets formed, and then nobody really touches any of it again until something goes wrong. The smartest organisations aren't waiting for an external check to find out where they stand. They're periodically running something close to this same review against themselves, covering everything from IC constitution and training records to documentation, complaint handling, SHe-Box onboarding, and investigation protocols, well before anyone from outside comes asking.


Getting ahead of this realistically means an honest internal audit of IC composition and documentation rather than an assumption that whatever was set up years ago is still valid, an update to the policy so it genuinely covers hybrid and digital work, awareness that's visible and repeated rather than buried in an onboarding deck somewhere, and real training for IC members on inquiry procedure rather than a general briefing. It also means treating complaint handling with proper documentation and timing, being honest about who can access confidential records, and making sure SHe-Box is fully, not partially, set up.


None of this is particularly complicated on its own. What's changed is the assumption that nobody's checking. That assumption doesn't really hold anymore, and treating POSH compliance as a living system rather than a filing cabinet exercise is quickly becoming the safer, and frankly the more honest, way to run it.

Disclaimer: This article is intended for general informational purposes only and does not constitute legal advice or a legal opinion. Laws and judicial interpretations are subject to change. Readers are advised to seek professional legal advice based on their specific circumstances.


 
 
 

Comments


bottom of page