Annual Report and Audit (Section 21)

A statute that ends with a complaint quietly resolved behind closed doors learns nothing. Section 21 of the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 is the provision that pulls the year's record into daylight: every Internal Committee and every Local Committee must, in each calendar year, prepare an annual report and place it before the employer and the District Officer. Read with Section 22, Rule 14 of the 2013 Rules and the monitoring architecture of Sections 20, 23 and 25, it converts private redressal into measurable, auditable public accountability — the closest the Act comes to an audit of its own working. This note unpacks the text, the contents prescribed by rule, the consequences of default, and the way the Supreme Court in Aureliano Fernandes v. State of Goa turned a decade of empty filing cabinets into a set of binding directions.

Where Section 21 sits in the scheme of the Act

Section 21 is the opening provision of Chapter VIII (“Miscellaneous”), placed deliberately after the substantive machinery is built. By the time a reader reaches it, the Act has already prohibited sexual harassment (Section 3, discussed in our note on prohibition of sexual harassment), required every employer of ten or more workers to set up an Internal Committee under Section 4, required every District Officer to set up a Local Committee under Section 6, and laid down the complaint procedure in Sections 9 to 13. Section 21 closes the loop: the committees that receive and decide complaints must account, annually, for what they did with them.

The marginal heading reads “Committee to submit annual report.” The duty is therefore cast on the committee — the Internal Committee or the Local Committee — and not, at this first stage, on the employer. The employer's distinct disclosure duty arrives separately in Section 22. Keeping the two duties analytically apart is essential and is a favourite examiner's trap: Section 21 is the committee's report to the employer and District Officer; Section 22 is the employer's disclosure to the wider world in its own organisational report.

The bare text of Section 21

Section 21 has two sub-sections, and the statute is mercifully short:

(1) The Internal Committee or the Local Committee, as the case may be, shall in each calendar year prepare, in such form and at such time as may be prescribed, an annual report and submit the same to the employer and the District Officer.

(2) The District Officer shall forward a brief report on the annual reports received under sub-section (1) to the State Government.

Three structural features deserve attention. First, the obligation is annual and tied to the calendar year, not the financial year — a distinction that matters for compliance dating. Second, the form and time of the report are not fixed in the section itself but are “as may be prescribed”, the prescribing power being conferred by Section 29(2)(m), which authorises rules on “the form and time for preparation of annual report by Internal Committee and the Local Committee under sub-section (1) of section 21.” Third, sub-section (2) builds an upward reporting chain: committee → District Officer → State Government, so that aggregate data eventually reaches the policy layer.

Two distinct duties: the committee (s.21) and the employer (s.22)

Section 22 is the indispensable companion to Section 21 and must be read alongside it. It provides that “the employer shall include in its report the number of cases filed, if any, and their disposal under this Act in the annual report of his organisation or where no such report is required to be prepared, intimate such number of cases, if any, to the District Officer.”

The practical effect is a two-track disclosure regime. Under Section 21, the committee files a detailed annual report (in the prescribed form) with the employer and the District Officer. Under Section 22, the employer must additionally surface the bare numbers — cases filed and their disposal — in its own corporate or organisational annual report; and where an organisation is not legally required to prepare any annual report at all (a small partnership, say, or a society), the employer must instead intimate those numbers directly to the District Officer. Section 22 thus prevents the data from disappearing simply because an entity has no statutory annual report of its own. For listed companies this dovetails with disclosure obligations under company law, making the POSH numbers visible to shareholders and regulators.

What the report must contain: Rule 14 of the 2013 Rules

Section 21 leaves the contents to delegated legislation, and Rule 14 of the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Rules, 2013 supplies them. The annual report of the Internal Committee or Local Committee must contain the following particulars:

(a) the number of complaints of sexual harassment received in the year; (b) the number of complaints disposed of during the year; (c) the number of cases pending for more than ninety days; (d) the number of workshops or awareness programmes against sexual harassment carried out; and (e) the nature of action taken by the employer or District Officer.

Each item is doing analytical work. Clause (c) — cases pending beyond ninety days — is a direct audit of compliance with the ninety-day inquiry timeline in Section 11(4), exposing committees that let inquiries drift. Clause (d) measures whether the employer has discharged the prevention and sensitisation duties in Section 19. Clause (e) records outcomes, closing the gap between a finding and its enforcement. The report is therefore not a formality but a structured performance audit of the workplace's harassment-redressal system, reduced to five lines of data.

Form, timing and the absence of a central statutory deadline

A persistent practical puzzle is the deadline. The Act fixes none beyond “each calendar year”, and the Central Rules do not prescribe a uniform date. The form-and-time power under Section 29(2)(m) has not yielded a single national filing date, so the operative deadlines are set locally: many District Officers, by administrative order, require submission by a fixed date — commonly 31 January following the reporting year, or in some districts a later date — and aspirants should be precise in stating that the statute itself prescribes no date, the timing being “as may be prescribed” and, in practice, fixed by District Officer directions and state notifications.

The report's form is similarly left to prescription. In the absence of a single statutory proforma, committees structure the report around the five Rule 14 heads, and many states have circulated standard formats. The safe examination answer is: form and time are matters of delegated and administrative prescription under Section 21(1) read with Section 29(2)(m), not matters fixed on the face of the section.

The District Officer and the upward reporting chain

Section 21(2) and the surrounding provisions create a deliberate hierarchy of oversight. The District Officer, notified under Section 5, is the local hub. Section 20 imposes two duties on the District Officer: to “monitor the timely submission of report furnished by the Local Committee”, and to take measures for engaging non-governmental organisations to create awareness. Once the District Officer receives the committee reports under Section 21(1), sub-section (2) requires the Officer to “forward a brief report on the annual reports received” to the State Government.

This upward flow is reinforced by Section 23, which obliges the appropriate Government to “monitor the implementation of this Act and maintain data on the number of cases filed and disposed of in respect of all cases of sexual harassment at workplace.” Section 25 supplies the audit teeth: the appropriate Government may, by written order, call upon any employer or District Officer to furnish information relating to sexual harassment, and may authorise an officer to inspect records and the workplace, with every employer and District Officer bound to produce all relevant documents on demand. Read together, Sections 20, 21, 22, 23 and 25 form the only genuine audit mechanism in the Act — a chain that runs from each committee up to the State and back down through inspection.

Consequences of default: the penalty under Section 26

What happens if a committee or employer simply does not file? The Act's enforcement provision is Section 26, which makes failure to comply with statutory duties — including the duty to take action under Sections 13, 14 and 22 — punishable. Section 26(1) provides that where an employer fails to constitute an Internal Committee under Section 4(1), or to take action under Sections 13, 14 and 22, or contravenes or abets contravention of other provisions of the Act or rules, “he shall be punishable with fine which may extend to fifty thousand rupees.”

Section 26(2) escalates the consequence for repeat offenders: a previously convicted employer who commits and is convicted of the same offence again is liable to twice the punishment (subject to the statutory maximum), and — importantly for businesses — to “cancellation, of his licence or withdrawal, or non-renewal, or approval, or cancellation of the registration” required to carry on the business or activity. The non-disclosure of annual report data thus carries, on repetition, the existential risk of losing one's licence to operate. Because the annual reporting duty in Section 22 is expressly enumerated in Section 26(1)(b), an employer who suppresses the cases-filed numbers in its organisational report exposes itself directly to this penalty.

Penalty in action: Global Health Private Limited (Medanta)

The reality that Section 26 has bite was demonstrated in Global Health Private Limited v. Local Complaints Committee, District Indore, decided by the Madhya Pradesh High Court on 16 September 2019. The petitioner, the company operating the Medanta hospital brand in Indore, had failed to constitute an Internal Committee as required by the Act. The High Court not only upheld a fine of Rs. 50,000 — the statutory maximum under Section 26(1) — for the failure, but also sustained an award of Rs. 25,00,000 as compensation to the aggrieved woman for the pain, suffering, reputational loss and emotional distress she endured.

The case is instructive for the annual-report context because the same compliance architecture that requires a committee to exist also requires it to report. A workplace that has not constituted a committee cannot, by definition, file the Section 21 annual report; the failure to report is therefore often the visible symptom of a deeper failure to comply, and courts have treated such defaults as serious breaches of what the Madhya Pradesh High Court described as essentially social-welfare legislation requiring a broad and liberal construction. The decision signals that the financial and reputational price of non-compliance is real, not theoretical.

Aureliano Fernandes v. State of Goa: auditing a decade of non-filing

The most consequential judicial intervention on POSH compliance — and the one that gives the annual-report machinery its teeth in practice — is Aureliano Fernandes v. State of Goa, Civil Appeal No. 2482 of 2014, decided by the Supreme Court on 12 May 2023. Although the appeal arose from a procedural-fairness challenge to an Internal Committee inquiry at Goa University, the Court used the occasion to confront what it saw as the widespread, lackadaisical implementation of the Act a full decade after its enactment.

The Court recorded its serious concern that, in many institutions, committees either did not exist or did not function, and that the reporting and monitoring obligations were being honoured in the breach. It issued a series of binding directions: the Union, State Governments and Union Territories were to undertake a time-bound exercise to verify whether all ministries, departments, statutory bodies, public sector undertakings, institutions and authorities had constituted properly composed Internal Committees and Local Committees; organisations were directed to publish their committee composition, the procedure for lodging complaints and the relevant policy on their websites; and authorities were to ensure that committee members were trained and that regular awareness programmes were conducted. These directions operationalise precisely the data that Sections 21 to 23 are meant to generate — the Court was, in substance, ordering the audit that the statute had long promised but rarely delivered.

From Vishaka to the audit: why reporting matters

The reporting and monitoring duties of Section 21 are best understood as the institutional fulfilment of the original judicial command in Vishaka v. State of Rajasthan, AIR 1997 SC 3011. In Vishaka, a three-judge Bench (Verma C.J., Sujata V. Manohar and B.N. Kirpal JJ.), decided on 13 August 1997, held that sexual harassment at the workplace violates the fundamental rights guaranteed by Articles 14, 15, 19(1)(g) and 21 of the Constitution, and laid down binding guidelines requiring employers to constitute complaints committees and to maintain a safe working environment.

The Vishaka Guidelines, however, contained no robust mechanism for aggregating and surfacing data on how those committees actually performed. Section 21, read with Rule 14 and Sections 22 to 25, supplies what Vishaka could not: a recurring, structured account of complaints, disposals, delays and preventive activity that travels up to the State. As the introductory note on this subject explains — see our introduction to the Act — the statute's promise is not merely individual redressal but systemic reform, and systemic reform is impossible without measurement. The annual report is that measurement.

Reconciling reporting with confidentiality under Section 16

A genuine tension runs between the disclosure duties of Sections 21 and 22 and the confidentiality command of Section 16, which prohibits publication of the identity of the aggrieved woman, the respondent, witnesses, and the contents of the complaint, inquiry proceedings and recommendations. The reconciliation lies in the design of Rule 14: the annual report deals in aggregate numbers and categories — complaints received, complaints disposed of, cases pending beyond ninety days, workshops conducted, and the nature of action taken — not in the identities of parties or the narrative of any particular complaint.

Properly drafted, therefore, a Section 21 report discloses nothing that Section 16 protects. The committee reports that, for example, eight complaints were received and six disposed of; it does not name a complainant or reproduce her allegations. Where employers conflate the two and either over-disclose (breaching Section 16) or under-report to “protect privacy” (breaching Sections 21 and 22), they err. The correct course, consistently emphasised in compliance practice, is full statistical disclosure with strict anonymisation — the report counts cases, it does not narrate them.

The “audit” character of the annual report

The topic heading speaks of “annual report and audit,” and it is worth being precise about the sense in which Section 21 effects an audit. The Act does not mandate an external financial-style audit by an independent auditor. Rather, the audit is self-reporting subject to external verification: the committee audits its own year through the Rule 14 heads (Section 21), the employer audits its case-load disclosure (Section 22), the District Officer monitors and aggregates (Sections 20 and 21(2)), the appropriate Government maintains the data and monitors implementation (Section 23), and the verification power — the true audit teeth — lives in Section 25, which permits the Government to demand information and to depute officers to inspect records and the workplace.

In contemporary corporate practice this statutory minimum is increasingly supplemented by voluntary POSH audits — third-party reviews of policy, committee composition, training, record-keeping and timeline compliance — but these are best-practice add-ons, not statutory requirements under Section 21. For examination purposes the candidate should distinguish clearly between the statutory reporting-and-monitoring audit created by Sections 21 to 25 and the voluntary external POSH audit that the market has developed around it.

Putting it together: a compliance checklist

Synthesising the provisions, a compliant annual-reporting cycle looks like this. (1) During the calendar year the Internal Committee or Local Committee maintains records of every complaint received under Section 9, its disposal under Section 13, and any pendency beyond the ninety-day timeline in Section 11(4). (2) The committee logs the workshops and awareness programmes conducted under Section 19. (3) At year-end the committee compiles the Rule 14 report and, under Section 21(1), submits it to the employer and the District Officer in the prescribed form and within the locally prescribed time. (4) The employer, under Section 22, includes the cases-filed-and-disposed numbers in its organisational annual report, or, having no such report, intimates them to the District Officer. (5) The District Officer monitors timeliness (Section 20), and forwards a brief consolidated report to the State Government (Section 21(2)). (6) The appropriate Government maintains the data (Section 23) and may verify it by inspection (Section 25).

Default at any node triggers Section 26 liability — a fine up to Rs. 50,000, escalating on repetition to double punishment and licence cancellation — and, as Aureliano Fernandes makes plain, invites judicial scrutiny of the entire compliance posture. The annual report, modest as it looks, is therefore the linchpin that converts the Act from a paper right into an audited, accountable system. For the full doctrinal context, return to the subject hub.