POSH and Workplace Compliance: Why Culture Is Also a Control
Build a lawful, confidential and trusted prevention and complaint-redressal system.
POSH compliance is not complete because a policy PDF exists. Employees must know where to report, the Internal Committee must be properly constituted and trained, and the company must protect confidentiality and fairness while preventing retaliation.
A workplace with ten or more employees must constitute an Internal Committee at each qualifying office/administrative unit.
Presiding Officer, employee members and an external member must meet statutory criteria.
Confidentiality, interim relief, inquiry timelines and fair hearing are essential.
Policy and annual training are prevention controls, not box-ticking.
1. The operating framework
| Area | Minimum system | Failure signal |
|---|---|---|
| Policy and communication | Accessible policy, definitions, examples, channels and non-retaliation statement. | Employees do not know who the IC members are. |
| Internal Committee | Correct composition, external member, tenure, office/location coverage and conflict process. | Committee exists only on paper or member tenure has expired. |
| Complaint handling | Acknowledgement, limitation/extension analysis, conciliation rules, interim relief and inquiry plan. | HR conducts an informal investigation outside the IC process. |
| Confidentiality | Need-to-know access, secure records and controlled reporting. | Names or evidence circulated on email groups. |
| Training | Employee awareness and IC capability training. | Only a generic annual video with no IC training. |
| Reporting | IC annual report and employer disclosures/submissions as applicable. | No case register or annual statistics. |
2. CFO playbook
- Constitute the IC before the threshold is crossed and separately assess each office or administrative unit.
- Check composition, independence, external-member credentials and tenure annually.
- Publish multiple complaint channels and explain the Local Committee route where applicable.
- Train managers not to “settle” or investigate complaints outside the statutory process.
- Use secure case IDs, limited access and a conflict/recusal protocol.
- Track statutory inquiry/reporting timelines while giving both parties a fair opportunity.
- Report themes and preventive actions to leadership without breaching confidentiality.
3. Practical example
An employee tells her manager about repeated messages but says she does not want “a formal case.” The manager should not confront the respondent or circulate screenshots. The employee should be informed of options, confidentiality limits and the IC process, while immediate safety and non-retaliation measures are considered.
4. Common failure points
- Calling a general grievance committee the POSH IC.
- Appointing an external member without relevant experience.
- Letting HR alone decide whether a complaint is “serious.”
- Promising absolute confidentiality that the legal process cannot maintain.
- Punishing a complainant merely because a complaint is not proved; malicious intent requires separate assessment.
5. Evidence folder
- POSH policy and display
- IC constitution orders and member credentials
- Training records
- Secure complaint/case register
- Inquiry and interim-relief records
- Annual report/submission
- Prevention and retaliation-monitoring actions
6. Finin2min takeaway
Design the evidence before the transaction.
Reliable compliance is the result of clear ownership, timely action, reconciled records and a documented escalation route—not a last-minute filing exercise.