On the books, not optional.

Section 19(c) of the POSH Act, 2013 requires every organisation with 10+ employees to conduct regular employee sensitization and specialized Internal Committee (IC) capacity building.

Statute

POSH Act, 2013 & Companies (Accounts) Rules, 2025

Applicability

All entities with 10+ employees (Full-time, contract, interns)

Penalty for Default

₹50,000 fine on 1st default; repeat default risks business cancellation

Board Disclosure

Mandatory disclosure in Director's Annual Report

The Digital Personal Data Protection Act requires companies processing personal employee or customer data to ensure role-based data handling literacy to prevent massive breach liabilities.

Statute

DPDP Act, 2023 + DPDP Rules, 2025

Applicability

Any entity processing digital personal data (No headcount threshold)

Penalty for Breach

Fines up to ₹250 crore per incident

Core Focus

Consent management, HR data minimization, breach notification

Statutory fire drills, emergency evacuation marshals certification, and practical first-responder training under Factories Act & state Shops & Commercial Establishments Acts.

Statute

Factories Act, 1948 / State Shops & Est. Acts / NBC

Applicability

Offices, corporate hubs, factories, warehouses

Frequency

Periodic mock evacuation drills & fire warden refreshers

Audit Deliverable

Evacuation logs, drill observer reports, warden certificates

Governance frameworks covering Prevention of Corruption Act, conflict of interest, vendor gift policies, and whistleblowing mechanisms expected by boards and institutional investors.

Context

Prevention of Corruption Act, FCPA, Board Governance

Applicability

Vendor-facing, procurement, finance, leadership & sales

Frequency

At employee onboarding + annual corporate refresh

Key Benefit

Elimination of vendor fraud, regulatory compliance protection