Maintaining absolute confidentiality during workplace harassment inquiries is not just a matter of corporate etiquette—it is a strict statutory requirement under Indian law. Recent legislative discussions, such as administrative updates emphasizing total privacy in government and private institutions, underscore a timeless truth for organizations: the integrity of a workplace harassment investigation hinges entirely on how fiercely privacy is guarded.

For human resources (HR) professionals, business owners, and Internal Committee (IC) members, managing information flow during a Prevention of Sexual Harassment (PoSH) proceeding is one of the most sensitive operational responsibilities. Breaching this trust exposes organizations to severe legal risks, reputational damage, and profound psychological harm to the individuals involved.

The Statutory Mandate of Confidentiality Under the PoSH Act, 2013

Under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, privacy is enshrined directly into the legislative framework. Section 16 of the PoSH Act explicitly prohibits the publication or dissemination of contents relating to harassment complaints and inquiry proceedings.

What Section 16 Restricts

The statute places a legal embargo on sharing specific details with the public, press, or unconcerned colleagues. This restriction covers:



Unlike standard corporate disputes, a PoSH proceeding operates under a heightened duty of care. The law explicitly shields sensitive details from entering public domains or general office chatter to prevent social stigma, professional retaliation, and secondary trauma.

The Penalty for Breaching Confidentiality

A common misconception among employers is that confidentiality rules are merely guidelines. In reality, violating these mandates carries statutory penalties.

Under Section 13 of the PoSH Act, if any person entrusted with duty under the Act—including IC members, employers, or witnesses—violates confidentiality by publishing or communicating contents to the public or media, they attract penalties prescribed under the service rules of the organization. Where service rules do not explicitly apply, a statutory fine of ₹5,000 can be levied by the concerned District Officer.

Beyond statutory fines, breaches of privacy severely jeopardize the legal standing of an inquiry. If sensitive details leak internally, it creates an environment of intimidation, potentially leading to claims of constructive dismissal, workplace victimization, or legal challenges alleging a biased and compromised inquiry process.

Practical Challenges in Maintaining Workplace Privacy

Even with clear laws, organizations frequently stumble when trying to balance transparency with privacy during an ongoing investigation.

1. Internal Rumor Mills and Office Gossip

When an IC is constituted or formal fact-finding interviews begin, office corridors often become breeding grounds for speculation. Colleagues may notice witnesses being called into conference rooms or note the sudden absence of key personnel.

2. Digital Communication and Remote Work

With hybrid and remote work models dominating Indian workplaces, sensitive documents are frequently shared via email, messaging applications, or cloud storage. Without enterprise-grade data protection, accidental exposure or unauthorized forwarding of inquiry files remains a persistent threat.

3. Managing Respondent and Witness Boundaries

Respondents have a natural right to a fair defense, which includes receiving copies of the complaint and evidence to formulate a response. However, distributing these documents without strict cautionary framing can lead to accidental leaks or retaliatory behavior.

Best Practices for HR and Internal Committees

To protect both organizational integrity and individual dignity, compliance teams must establish robust, proactive protocols.

Implement a Clear Non-Disclosure Framework

Every participant entering a PoSH proceeding—including the complainant, respondent, and witnesses—should sign a formal confidentiality undertaking prior to the commencement of hearings. This document must clearly outline the legal boundaries of information sharing and the consequences of a breach.

Secure Digital and Physical Records

Limit the "Need-to-Know" Circle

Information should be restricted strictly to active IC members, the legal counsel, and the immediate parties involved. HR must avoid briefing senior management on granular inquiry details while the investigation is underway; leadership should only be notified when final recommendations are ready for implementation.

Leverage Official Compliance Channels

Employers should encourage employees to utilize secure, government-backed infrastructure like the SHe-Box portal, which ensures digital tracking and confidentiality for working women lodging workplace grievances. Integrating internal reporting with secure technological systems minimizes administrative leaks.

Conclusion

Confidentiality is the bedrock of a credible, trustworthy, and legally compliant PoSH framework. When employees are confident that their grievances will be handled with absolute discretion, they are more likely to come forward, fostering a safer and more ethical working environment. For businesses, treating privacy not as an afterthought, but as a core compliance pillar, is the ultimate safeguard against legal liability and cultural erosion.