POSH Act Compliance in Banks: ICC, Timelines and Ethical Duties (2026)

POSH Act compliance in banks is not just a legal formality — it is a frontline test of whether a bank's stated ethics actually protect the women who work there. For JAIIB/CAIIB candidates and working bankers alike, the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — the POSH Act — sits at the intersection of law, HR policy and workplace ethics, and it is examined in detail under the Ethics in Banking paper.

This article walks through what the POSH Act actually requires of a bank: how the Internal Committee (ICC) is constituted, the timelines that govern a complaint from filing to resolution, the duties placed on bank management, and the ethical obligations that fall on every employee — not just HR.

⚖️ What Is the POSH Act and Why It Matters for Banks

The POSH Act, 2013 came into force to give statutory teeth to the Supreme Court's 1997 Vishaka Guidelines on workplace sexual harassment. It defines sexual harassment broadly — unwelcome physical contact and advances, a demand or request for sexual favours, sexually coloured remarks, showing pornography, and any other unwelcome physical, verbal or non-verbal conduct of a sexual nature. The definition is deliberately wide so that ambiguous or "borderline" behaviour is not left outside its scope.

Crucially for banking staff, the Act defines "workplace" expansively — it is not limited to the branch premises. It extends to any place visited by an employee during the course of employment, including transportation provided for the purpose, client site visits, recovery or collection duty, and official travel. This matters directly for POSH Act compliance in banks, because bank employees — especially in retail, recovery and relationship roles — routinely work outside the branch.

The Act covers women employees regardless of their employment status: permanent staff, probationers, trainees, apprentices, and contractual or outsourced employees are all protected. For a sector like banking that relies heavily on third-party staffing for sales, security and support roles, this wide coverage is a compliance point examinees are frequently tested on. Read alongside Work Ethics and the Workplace, POSH compliance is best understood as one concrete, legally enforceable expression of a bank's broader ethical duty of care toward its people.

👥 Internal Committee (ICC) Composition and Constitution

Every bank branch or office employing 10 or more persons must constitute an Internal Committee to receive and inquire into complaints of sexual harassment. Where a unit has fewer than 10 employees, or where the complaint is against the employer itself, the matter instead goes to the Local Committee constituted by the District Officer — banks with small rural or satellite branches need to know which route applies to them.

The ICC's composition is prescribed, not discretionary. It must be headed by a Presiding Officer who is a woman employed at a senior level. It must include at least two members from among employees who are committed to the cause of women or who have experience in social work or legal knowledge. And it must include one external member — typically from an NGO or association working on women's issues, or someone familiar with sexual harassment matters — brought in specifically to reduce internal bias and hierarchy pressure. At least half of the total ICC membership must be women, and members typically serve for a fixed tenure rather than indefinitely.

💡 Exam Tip: Remember the three building blocks of ICC composition — a senior woman as Presiding Officer, at least two internal members with relevant experience, and one external member. Questions often test which category a given role falls into.

This structure connects directly to the idea of Building an Ethical Organization — an ICC that is properly constituted, independent and visible signals that the bank's ethical commitments are backed by structure, not just a policy document sitting in a drawer.

⏱️ Complaint Filing, Inquiry Timelines and Interim Relief

The Act builds a fairly tight, time-bound process, and the timelines are a favourite examination area. An aggrieved woman must ordinarily submit her complaint in writing within three months of the incident (or, in the case of a series of incidents, within three months of the last incident). The ICC has discretion to extend this filing window by a further period, for reasons it records in writing, where it is satisfied that circumstances prevented timely filing.

Once a complaint is received, the ICC may — only if the woman requests it, and before starting a formal inquiry — attempt conciliation between the parties, but this can never involve any monetary settlement. If conciliation is not sought or fails, the ICC proceeds to a formal inquiry, which it must complete within ninety days of the complaint being received. The inquiry report then has to be submitted to the employer, who is required to act on the ICC's recommendations within a further short window after receipt.

📌 Note: Interim reliefs are available even while the inquiry is pending — for example, transferring the complainant or the respondent, or granting the complainant leave, so she is not forced to continue routine contact with the respondent during the process.

The law also cautions against treating an unproven complaint as automatically malicious: action for a false or malicious complaint is reserved for genuine bad faith, not simply for complaints that the ICC is unable to substantiate on the available evidence. This distinction protects the willingness of women to come forward without fear of automatic retaliation.

🏦 Duties of Bank Management and the Ethical Chain of Responsibility

The Act does not stop at setting up a committee — it places affirmative duties on the employer. Bank management is expected to provide a safe working environment, prominently display the consequences of sexual harassment along with the ICC's composition and contact details, organise regular workshops and awareness programmes for employees, and treat sexual harassment as misconduct under applicable service rules so that internal disciplinary action can follow an adverse ICC finding.

The employer must also assist the aggrieved woman if she chooses to file a police complaint, and must monitor the timely submission of the ICC's inquiry reports rather than letting cases languish. Separately, the ICC (or Local Committee) is required to prepare an annual report on the complaints it has handled, and this feeds into the employer's own annual reporting obligations and is filed with the District Officer.

In a bank, this is where POSH compliance stops being purely an HR function and becomes part of governance and ethics oversight. Boards and senior management are expected to periodically satisfy themselves that ICCs exist across the branch network, are adequately staffed, and are actually functioning — not merely constituted on paper. Branch managers, HR business partners, and the ethics or compliance function all share responsibility here: a policy that exists only in a circular but is unknown to front-line staff fails the spirit of the law just as much as having no policy at all.

🚨 Consequences of Non-Compliance and Employee Obligations

Failure to constitute an ICC where required, or other non-compliance with the Act's obligations, exposes an employer to monetary penalty, and repeated default can escalate to cancellation or non-renewal of the licence or registration needed to carry on business — a serious risk for a regulated entity like a bank, quite apart from the reputational damage that follows any publicised lapse.

For individual employees, a substantiated finding of sexual harassment typically attracts disciplinary action under the bank's service rules, up to and including dismissal, and does not preclude separate criminal liability where the conduct also amounts to an offence under general criminal law. On the flip side, every employee also carries an ethical obligation under this framework: to attend POSH awareness training when it is scheduled, to cooperate honestly if called before the ICC, and to never misuse the complaint mechanism for personal or malicious ends.

⚠️ Warning: Treating an ICC as a paperwork formality is itself a compliance failure — an ICC that never meets, has vacant external-member seats, or misses the 90-day inquiry window exposes the bank to penalty even if no complaint has yet been mishandled.

Viewed through the lens of Banking Ethics — Changing Dynamics, POSH compliance is really a specific, legally-mandated instance of a much larger idea: that a bank's ethical health shows up in how it treats the least powerful person in any given room. Ethical lapses of this kind rarely exist in isolation either — the same organisational culture that tolerates harassment often overlaps with lapses covered in white-collar crime in banking and loose adherence to gifts and hospitality rules for bank employees, and it typically shows up alongside weak observance of the fair practices code for banks toward customers as well.

Just as an independent CCO reporting line is meant to keep compliance escalation free of local hierarchy pressure, the ICC's external member and its direct reporting to senior management exist to keep POSH inquiries independent of the branch chain of command that the respondent may be part of.

🧠 Practice MCQs: POSH Act Compliance in Banks

Want chapter-wise mock tests with 100+ MCQs? Start practising free

POSH Act compliance in banks is ultimately about whether an institution's ethical commitments hold up under pressure — whether the ICC exists in practice and not just in a circular, whether timelines are actually met, and whether employees at every level understand both their protections and their obligations. Build this understanding into your exam preparation with IIBF CAIIB course material and reinforce it with regular practice tests. For more on this subject, explore the Ethics in Banking blog archive.