National Commission for Women Calls for Stricter POSH Compliance and Here is What You Need To Know.

POSH compliance is no longer just a paper formality but requires active participation by Organisations across the nation. The recent advisory by the National Commission for Women enhances this responsibility further, but in a much more pragmatic way.

The NCW Has Made POSH Everyone’s Problem. Yours Included.

You have a policy. You have an IC. You ran the annual training. You filed the report in January. On paper, you are compliant. 

On 19 June 2026, the National Commission for Women issued an advisory to every state and union territory in India that quietly changes what “compliant” means. It went to Chief Secretaries, Directors General of Police, District Magistrates, SSPs and Commissioners of Police. Not to you. That is the point. It builds the machinery that will come looking.

This is written for HR leaders, CHROs and POSH SPOCs at establishments with ten or more employees. You are the person who will be asked for the file.

The audit is now the compliance event

The advisory recommends mandatory annual POSH audits for every establishment with ten or more employees. Not a training count. Not a policy refresh. An audit.

An audit looks at whether your IC is legally constituted, whether complaints were disposed of within the statutory timelines, whether confidentiality held, whether awareness actually reached people, whether the annual report was filed. It looks at what you did, not what you intended to do.

And it says the absence of an audit is itself non compliance.

Read that again, because it inverts the usual risk calculation. You no longer become non compliant when a complaint is mishandled. You become non compliant by never having checked. Section 26 exposure begins with a gap in your own file.

Most organisations I work with cannot produce, in a week, a clean record of the last three years of IC constitution, member tenure, training dates, complaint registers and Section 21 filings. Not because they mishandled anything. Because nobody was ever asked.

Somebody is about to ask.

The IC that exists is not the IC the law requires

Every organisation tells me it has an IC. Very few can tell me when it last met.

The advisory is specific about composition. A woman Presiding Officer. At least fifty percent women members. An external member with genuine independence and real expertise in matters concerning women. Committees in every office, branch and unit. Not one committee at head office covering fourteen locations.

Check three things this week. Whether your Presiding Officer is still with the company. Whether your external member has an actual practice in this area or is somebody’s consultant friend. Whether your Bengaluru and Pune and Gurugram offices each have a committee, or whether they share one that has never travelled.

Most IC failures are not failures of judgment during an inquiry. They are failures of the constitution that existed long before the complaint arrived, and they void everything that follows.

SHe-Box is not optional and never was

The instinct is to register when a complaint comes. That instinct is the problem.

The advisory places specific weight on SHe-Box because the portal is how the state sees you. Registration is what puts your complaint data into the system the government is now building dashboards around. An unregistered employer is not a low profile employer. It is a visible gap in a district level dashboard.

Register. Tell your employees the portal exists. Tell your IC members what happens when a complaint lands there instead of with them.

The Other Side of the table is being built

This is the part most HR leaders are missing.

The advisory asks states to set up POSH monitoring cells and digital compliance dashboards. It asks that District Officers be notified in every district as nodal authorities for monitoring, awareness and grievance redressal. It routes enforcement through the police hierarchy.

For a decade, POSH filings went into a drawer. There was no one on the other side reading them. That is what is changing. The advisory is not primarily about your obligations, which have existed since 2013 and have not moved. It is about building the capacity to check whether you met them.

Maharashtra has already shown what this looks like in practice, activating its inspection powers with a thirty one point checklist. The NCW is asking every other state to do the same.

Compliance without an enforcer is culture. Compliance with an enforcer is exposure.

Schools and hospitals, this is you

The advisory is explicit that the framework applies to educational institutions, hospitals, local bodies, PSUs, boards and statutory authorities.

The rural nursing home with twelve staff. The school with a hundred employees and no HR function. The teaching hospital where the hierarchy between consultant and resident is absolute and the complaint mechanism is a name on a notice board nobody reads.

These are the places with the sharpest power gradients and the thinnest protections. They have generally assumed POSH is a corporate obligation. It is not, and it never was.

What to do before your board asks you

Do not wait for a state notification. Your state will issue one, and when it does, the timeline will be short and the request will be documentary.

Verify IC constitution across every location. Names, tenure, women’s representation, external member credentials.

Reconstruct your paper trail. Meeting records, training attendance, complaint register, Section 21 filings, notice board and website disclosures.

Register on SHe-Box.

Run a real audit. Internally if you have the capability, externally if you do not. The point is not the certificate. The point is knowing what you would say if a District Officer asked.

The Uncomfortable Part

An advisory is not a statute. It does not, on its own, create a new obligation on employers. Anyone selling you panic is overstating it.

But almost nothing in this advisory is new. Annual audits are the only genuinely new instrument. Everything else, the IC composition rules, the branch level committees, the annual report, the SHe-Box registration, the anti retaliation safeguards, has been law for thirteen years. The advisory does not add duties. It adds eyes.

Which means the question in front of you is not what the NCW now requires. It is what you have owed all along and quietly deferred, and whether you would like to find the gaps yourself or have a District Officer find them for you.

That is a governance question. It belongs on the board agenda, not in the HR calendar.

What’s next for you?

An advisory is not a statute. It creates no new obligation on employers by itself, and anyone selling you panic is overstating it.

But read the advisory looking for what is actually new and you will find one thing. The annual audit. Everything else, the woman Presiding Officer, the fifty percent representation, the independent external member, the committee in every branch and unit, the Section 21 report, the SHe-Box registration, the protection of a complainant from retaliation, has been law since 2013.

So the advisory does not add duties. It adds eyes, and it puts them in every district in the country. Which means the question in front of you was never what the NCW now requires. It is what you have owed for thirteen years and quietly deferred, because nobody was reading the file.

Most organisations cannot produce three years of IC constitution records, meeting minutes, training attendance and complaint registers in a week. Not because they mishandled anything. In most cases nothing was mishandled at all. It is simply that no one ever asked, and a thing no one asks for does not get kept.

Somebody is about to ask.

You can find the gaps yourself, or you can have a District Officer find them for you. There is no third option, and there never was.

---

Ungender’s POSH readiness assessment is the same checklist we use before an audit preparation. To gain access to the same, write to our team here or read more about our Audit methodology here.