Reading the Act and the Rules as one text

Indian statutes follow a common pattern. Parliament passes the Act. The Executive notifies Rules under the rule-making power inside the Act. The Act tells you what must happen. The Rules tell you how. POSH is no exception, and the relationship between the Act and the Rules is unusually tight.

The two source documents

1. The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 (Act No. 14 of 2013).
2. The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Rules, 2013, notified by the Ministry of Women and Child Development on the 9th of December, 2013.

Both are stored in the dcomply Academy citation register. Every claim in this course points back to a specific section or rule, and the verbatim text is in the register.

How to spot when the Act is pointing at the Rules

Look for the phrase "as may be prescribed" or "in such manner as may be prescribed" in the Act. Every time you see it, the Act has handed off operational detail to the Rules. You will see the phrase repeatedly across the Act.

Some examples that you will meet later in this course:

• Section 4(4) says the NGO member of the IC shall be paid such fees or allowances "as may be prescribed". The actual figure (₹200 per day, plus travel reimbursement) is set in Rule 3 of the POSH Rules 2013 [L2-C1].
• Section 11(1) says that the inquiry shall be conducted in accordance with the service rules of the respondent, or where no such rules exist, "in such manner as may be prescribed". The "manner" is set out in Rule 7, which prescribes the six-copy complaint, the seven working day notice to the respondent, the ten working day reply period, and the natural justice standard [L2-C2].
• Section 19(c) says the employer shall organise workshops and orientation programmes "in the manner as may be prescribed". The manner is set out in Rule 13, which lists five duties of the employer including the internal policy, the orientation programme, employee awareness, capacity building for IC members, and the public declaration of IC member names and contact details [L2-C3].

A common practitioner mistake is to advise based on the Act alone. If a CEO asks "do we have to publish the names of IC members on the intranet", and you answer based on Section 19 alone, you will miss the answer. It is in Rule 13(e). Read both, every time.

What the Rules add beyond the Act

Three categories of content live almost entirely in the Rules:

1. The operational mechanics of inquiry. Rule 7 is the core of how an inquiry runs day to day. The seven and ten working day windows, the rule against legal practitioners appearing for the parties, the right of the Committee to terminate proceedings or pass an ex parte order on three consecutive defaults after fifteen days' written notice, all come from Rule 7 [L2-C2].
2. Money items. The NGO member's allowance and travel reimbursement are in Rule 3 [L2-C1]. The Local Committee Chairperson and members' allowances are also set by Rule.
3. Employer compliance machinery. Rule 13 takes the principle in Section 19 (employer shall provide a safe workplace, run workshops, assist the Committee) and converts it into a five-point operational checklist [L2-C3].

The reading discipline

When you sit down with a POSH question, work in this order:

1. Read the relevant section of the Act in full, including its provisos.
2. Note any phrase like "as may be prescribed" and pull the corresponding rule.
3. Read the rule in full.
4. Check whether any Supreme Court ruling has interpreted that section or rule. After 2023 to 2025, that step is no longer optional.
5. Only then form a view.

The temptation to short-circuit this is real. Resist it. The cases that end up in appeal almost always involve a Committee that did step 1 well and skipped steps 2 to 4.

The 2026 dimension: SHe-Box 2.0 and DPDP Rules 2025 layered on top

Two 2026 developments now sit above the Act and Rules and change how you actually run POSH machinery in a live workplace. Neither replaces the Act. Both add a compliance layer that every IC must understand.

SHe-Box 2.0. The Ministry of Women and Child Development relaunched the Sexual Harassment electronic Box (SHe-Box) on the 17th of June, 2026, moving from a v1 static portal to a workflow platform that talks to employer ICs. A complainant filing on SHe-Box 2.0 gets a unique complaint number, a routing decision (employer IC, Local Committee, or a Nodal Officer at the Department), and a workflow status track. As a practitioner, you now have to build your IC intake to interoperate with SHe-Box: complaints filed on SHe-Box that route to your IC arrive with metadata (complainant identity flagged confidential, respondent name, date, alleged incident summary), and the IC's status updates back to SHe-Box are expected within specified windows. The MWCD has not yet notified a formal SHe-Box Rules amendment to the POSH Rules 2013, but the operational expectation is set by MWCD circulars and by parliamentary reply. Practitioners advising employers on POSH policy should now include a section on SHe-Box interface design.

DPDP Act 2023 and Rules 2025. Every POSH inquiry now handles Section 2(t) sensitive personal data of the complainant, the respondent and any witnesses under DPDP as well as under POSH Section 16. The DPDP Rules, 2025 gazetted on the 13th of November, 2025 (G.S.R. 846(E)) impose specific rules on notice, purpose limitation, retention, and breach response that overlap with the POSH Section 16 confidentiality duty. Rule 12 of the DPDP Rules read with Section 6 of the DPDP Act now imposes a specific fresh consent and notice discipline for retention of inquiry records beyond the immediate purpose. Module 5 walks through the DPDP crosswalk in the inquiry chapter. What you need to know at the reading-discipline stage: the source stack has expanded from POSH Act + POSH Rules to POSH Act + POSH Rules + DPDP Act 2023 + DPDP Rules 2025. Any advice that ignores DPDP is now half-formed.

The reading order for the 2026 practitioner

Refined for the current legal landscape:

1. Read the POSH Act section, provisos included.
2. Pull any prescribed rule under the POSH Rules 2013 (via the "as may be prescribed" trigger).
3. Check the three post-2023 Supreme Court rulings for any that touch this section.
4. Check whether the DPDP Act 2023 or Rules 2025 impose an overlapping duty (notice, consent, retention, breach) on the same operation.
5. For listed or covered companies, check whether the Companies (Accounts) Second Amendment Rules 2025 or SEBI BRSR trigger a disclosure duty on the same operation.
6. Only then form a working view.

Five steps sound heavy, but for most day-to-day IC questions they collapse to one or two. The discipline is: assume every question touches every layer until you have checked, not the other way around.

The BNS 2023 layer for criminal-track coordination

The Bharatiya Nyaya Sanhita 2023 replaced the Indian Penal Code with effect from 1 July 2024. Practitioners advising on POSH matters that intersect criminal law must now cite BNS section numbers, not IPC ones. The most-cited mappings: IPC 354 (assault to outrage modesty) is now BNS 74; IPC 354A (sexual harassment as criminal offence) is now BNS 75; IPC 354B (assault with intent to disrobe) is now BNS 76; IPC 509 (word or gesture insulting modesty) is now BNS 79; IPC 354D (stalking) is now BNS 78. Section 19(g) of the POSH Act requires the employer to assist the complainant in filing a criminal complaint if she elects; the assistance should reference the correct BNS section. IC members drafting reports that touch on criminal-nature conduct should get this cross-reference right in every report post 1 July 2024.