Mintskill old - Mintskill Blog #futureofwork

A Wake-Up Call for Every HR Leader, Business Owner, and Employee in India

Thu, 16 Apr 2026 01:39:31 +0530

When the System That Should Protect You Becomes the System That Fails You

Workplace Safety & HR Governance Article

When the System That Should Protect You Becomes the System That Fails You

A Wake-Up Call for Every HR Leader, Business Owner, and Employee in India

By Raj Kumar Joshi

Chief Advisor and Principal Consultant, Mintskill HR Solutions LLP | HR & Labour Law Strategist

April 2026 | Workplace Safety | POSH Compliance | HR Governance

"The most dangerous workplace is not the one where bad people exist. It is the one where good systems don't."

A case has emerged from a large Indian corporate workplace that has sent shockwaves through the HR community, the legal fraternity, and the nation.

I will not name the organisation. I will not name the individuals. The law is already dealing with both — arrests made, an SIT constituted, a high-level corporate investigation underway.

What I will do is look unflinchingly at what this case reveals about workplace governance in Indian organisations.

The facts, as reported in credible national media and corroborated by police FIRs, are deeply disturbing. Over four years, multiple junior employees — mostly young women in their first jobs — were subjected to sustained sexual harassment, psychological manipulation, religious coercion, and financial inducement. The perpetrators were senior employees in positions of supervisory authority.

What makes this case extraordinary is not only what the perpetrators did. It is what the HR system failed to do — despite being told. Repeatedly. For years.

Over 78 emails and multiple phone calls from victims to HR. No action. An HR officer allegedly telling a victim to "stay cool" — that such things are "common in MNCs." An HR manager arrested. Another untraceable.

This is not a story about bad people in a workplace. This is a story about a system that collapsed at every point it was designed to hold.

The HR Dimensions: What Broke, and Why

1. The POSH Act existed. The implementation did not. India has had the POSH Act since 2013. It mandates an Internal Complaints Committee (ICC), specifies timelines, and requires an independent external member precisely to prevent internal suppression. Over 78 complaints were filed and ignored. The ICC produced zero outcomes. The failure was not legislative. It was implementational — and that implementation is HR's responsibility.

2. The grievance mechanism was a facade. A grievance mechanism is only as good as the response it generates. When the response to documented complaints is silence or dismissal, it stops protecting employees — it starts protecting perpetrators. If your grievance register shows complaints and your culture shows no consequences, you don't have a grievance mechanism. You have a paper exercise.

3. Power was used as a weapon. Every accused held authority — team leader, senior engineer, assistant general manager. Every victim was junior. The power differential was not incidental to the misconduct. It was the mechanism of it. When anti-retaliation policies, skip-level reporting, and anonymous hotlines don't exist in practice, a position of authority becomes a position of impunity.

4. Young employees were left unprotected. Most victims were aged 18–25, likely in their first corporate role — unfamiliar with their rights, hesitant to challenge authority, and emotionally more susceptible to sustained pressure. HR has a specific duty of care toward this demographic that goes far beyond a standard onboarding checklist.

5. Workplace diversity was not actively managed. The allegations include a coordinated, structured attempt to use the workplace as a site of religious coercion — through organised communication groups, targeted identification of vulnerable individuals, and financial incentives sustained over years, undetected by HR. Diversity management that stops at festival celebrations and inclusion posters is not diversity management. It is optics.

6. HR itself was compromised. The most chilling dimension: an HR professional was arrested as an alleged abetter of the misconduct she was entrusted to prevent. When HR is complicit — whether through corruption, intimidation, or indifference — there is no backup system. The most vulnerable employees are fully exposed.

7. The employer brand was destroyed by preventable failures. A celebrated national employer. A 300-person BPO unit. A series of preventable failures spanning four years. A reputational cost no PR exercise can quickly repair. The employer brand is not built in recruitment campaigns. It is built — or destroyed — in how an organisation treats its most vulnerable employees when no one is watching.

The Remedial Framework: What Every Organisation Must Build Now

✅ 1. Make POSH Real, Not Ceremonial
Reconstitute your ICC with a genuinely independent external member. Conduct mandatory annual POSH training — not an e-learning checkbox, but real scenario-based sessions for all employees including senior leadership. Publish the complaint process visibly. Create interim protection for complainants from the moment a complaint is filed.

✅ 2. Build a Multi-Level Grievance Architecture
No organisation should have a single point of failure in its grievance system. Layer it: manager → HR head → anonymous digital channel → external ombudsperson or ethics hotline. No complaint at any level should be closeable without a documented outcome. Every complaint needs an acknowledgement, a timeline, a finding, and a recorded action.

✅ 3. Govern Power Imbalance Deliberately
Introduce 360-degree feedback for all supervisory roles. Make behavioural integrity part of every promotion decision — not an afterthought. Ensure anti-retaliation policy is enforced as a standalone violation, not folded into a broader misconduct category. HR and senior leadership must have regular skip-level conversations with junior staff.

✅ 4. Protect Young and New Employees Specifically
Rights induction on Day 1 — not the general policy briefing but a specific, interactive session on POSH, Labour Codes, and their personal rights. Assign peer mentors, not supervisors. Conduct welfare check-ins every 90 days in an employee's first year. Create a dedicated, confidential helpline for employees in their first 12 months.

✅ 5. Manage Diversity Actively — Including Religious Harmony
Adopt an explicit zero-tolerance policy on religious coercion in any form. Train HR specifically for high-diversity environments. Monitor inter-community dynamics. Ensure digital communication channels — including WhatsApp groups — fall within a clear organisational conduct policy.

✅ 6. Make HR Accountability to Outcomes, Not Inputs
Measure HR performance on complaint resolution rates, time-to-action, and psychological safety scores — not just policy document completion. Mandate an independent annual HR audit reporting directly to the board. Give the board quarterly visibility of people risk. Create escalation channels that bypass local HR entirely.

A Direct Message to Our HR Colleagues

We chose this profession because we believe in people. In the dignity of work. In organisations that are safe, fair, and humane.

Cases like this are a betrayal of everything our function stands for. And the temptation to say "that could never happen here" is the most dangerous response we can have.

Go back to your organisation tomorrow and ask yourself honestly: If an employee came to me today with a complaint like the ones in this case — would my system catch it? Would I act? Would the victim be protected?

If you cannot answer yes with certainty, the work begins now.

This case teaches us that organisations without consequences create environments of impunity. That HR without accountability creates governance voids. And that young employees without protection become victims of structures that were supposed to serve them.

The cost of fixing this is a fraction of the cost of failing to.

India's workforce — especially its youngest members — deserves better. It is our obligation to build the systems that deliver it.

🔴 Is Your Workplace Truly Safe — Or Does It Only Appear to Be?

Get Started Now

Early Preparation Is a Leadership Imperative

Tue, 20 Jan 2026 09:37:01 +0530

India’s New Labour Codes and What Organisations Must Prepare for Now

India is approaching a decisive regulatory shift in the way employment, compensation, workforce welfare, and workplace governance are structured. With the Government indicating that the four new Labour Codes may become effective from April 1, aligned with the start of the financial year, organisations must treat this development as a strategic HR and business transformation event, not merely a statutory update.

At Mintskill, we view this transition as one of the most significant inflection points for Indian employers in the last three decades. The consolidation of 29 central labour laws into four unified codes will reshape how organisations design compensation, manage workforce categories, administer social security, and demonstrate governance maturity.

This advisory is intended to help Mintskill clients understand what is changing, why it matters, and how to prepare decisively.

Why the New Labour Codes Matter at a Strategic Level

The four Labour Codes —

Code on Wages
Industrial Relations Code
Code on Social Security
Occupational Safety, Health and Working Conditions (OSHWC) Code

are not incremental reforms. They fundamentally redefine how employment relationships are regulated in India.

For employers, the shift introduces:

Uniformity in definitions and compliance logic
Digitization and consolidation of filings and inspections
Expanded employer obligations across compensation, benefits, safety, and documentation

While the intent is simplification, the operational and financial impact will be significant, especially for organisations with structured salary components, multi-state operations, or diverse workforce models.

Key Areas of Impact for Mintskill Clients

1. Compensation Design and Payroll Economics

One of the most consequential changes arises from the standardised definition of “wages”. Allowances exceeding prescribed limits may now be treated as wages for statutory purposes, directly impacting:

Provident Fund contributions
Gratuity calculations
Bonus, overtime, and leave encashment

For many organisations, this will lead to a structural increase in statutory costs unless compensation models are reviewed proactively. From an advisory standpoint, Mintskill strongly recommends scenario modelling and CTC rebalancing well in advance of enforcement.

2. Employment Contracts and Workforce Structuring

The new framework mandates formal appointment letters for all categories of workers and expands definitions that bring fixed-term, contract, and certain non-traditional workers into clearer statutory coverage.

This requires organisations to:

Revisit offer letters, contracts, and employment documentation
Review fixed-term employment strategies and gratuity provisioning
Ensure consistency between HR policy, payroll practice, and statutory intent

Inadequate alignment between documentation and actual practice will materially increase compliance risk.

3. Social Security and Workforce Welfare

The Social Security Code expands coverage to previously under-represented workforce segments, including gig and platform workers. While the operational mechanics will evolve through rules and state notifications, the direction is clear: greater formalisation and accountability for employers.

Organisations should begin assessing:

Workforce categorisation risks
Registration and contribution readiness
Technology and reporting capabilities

This is particularly relevant for organisations leveraging flexible, project-based, or outsourced talent models.

4. Workplace Safety, Health, and Governance

The OSHWC Code introduces national standards for workplace safety, working hours, and health conditions across sectors. Compliance expectations will extend beyond traditional factories to offices and service environments.

From a governance perspective, this places HR at the centre of:

Safety audits and internal controls
Policy enforcement and employee communication
Regulatory inspections supported by digital records

Non-compliance will have reputational implications beyond regulatory penalties.

Why Early Preparation Is a Leadership Imperative

Labour is a concurrent subject, and state-level rules will determine the final operational contours. This makes early preparation critical, particularly for organisations operating across multiple states.

In Mintskill’s advisory experience, organisations that delay action risk:

Sudden cost escalations at the time of enforcement
Payroll disruptions and employee dissatisfaction
Weak regulatory defensibility during inspections or disputes

Conversely, organisations that act early gain:

Control over compensation and workforce design
Predictability in financial planning
Stronger employer branding and governance confidence

Mintskill’s Advisory Perspective

At Mintskill, we do not approach labour law changes as isolated compliance exercises. We advise organisations at the intersection of HR strategy, regulatory clarity, technology enablement, and business continuity.

As your HR advisory partner, Mintskill is actively supporting clients with:

Labour Code impact diagnostics
Compensation and payroll restructuring advisory
HR policy and contract realignment
State-wise compliance mapping
Leadership and HR team capability building

Our objective is simple: to ensure that Mintskill clients are not merely compliant, but strategically prepared.

How Mintskill Can Support You

For Existing Mintskill Clients

We recommend initiating a Labour Codes Readiness Review through your Mintskill support portal.

Please log in to raise a request or consult your advisory team at: https://help.mintskill.com/portal/en/signin

For New Enquiries

If you would like to understand how the new Labour Codes may impact your organisation and how Mintskill can support your compliance and HR strategy, please write to us at: support@mintskill.com

Our advisory team will connect with you to assess your current state and outline a structured preparedness roadmap.

Note: The upcoming Labour Codes represent a defining moment for Indian employers to modernise HR practices, strengthen governance, and future-proof workforce strategies. The question is not whether these changes will impact your organisation, but how prepared you will be when they do.

Mintskill remains committed to guiding its clients through this transition with clarity, confidence, and control. https://www.mintskill.com/hrconsulting

Get Started Now

DPDP Act Challenge in Recruitment and Hiring

Tue, 16 Dec 2025 14:54:45 +0530

Understanding the DPDP Act Challenge in Talent Acquisition and Hiring Compliances — And How Zoho Recruit Provides a Compliance-Ready Solution

The Digital Personal Data Protection Act, 2023 (DPDP Act) marks a significant milestone in India’s regulatory landscape, establishing a formal legal framework governing how personal data is collected, used, stored, shared and deleted by organisations. With the DPDP Rules, 2025 officially notified on 14 November 2025, obligations around consent, data minimisation, retention policies and breach reporting are now actionable and enforceable. Yet, despite the clarity offered by the rules, many teams across HR, recruitment and background verification (BGV) functions remain uncertain about practical implementation and compliance readiness.

At its core, the Act is about data respect and accountability: companies must justify why they collect data, obtain clear, purpose-specific consent, secure stored information, and delete data when it is no longer needed. Individuals gain stronger rights, such as access, correction, deletion and withdrawal of consent.

However, as many organisations are discovering, common hiring practices and data workflows now sit at odds with DPDP requirements. Legacy approaches—such as collecting extensive candidate documentation (multiple IDs, employment histories and BGV reports), storing CVs indefinitely, and relying on generically worded consent forms—no longer align with the law’s principles of data minimisation and purpose limitation.

Challenges for HR and Recruitment Teams Under DPDP

Key pain points that HR, recruitment and BGV functions are grappling with include:

Consent complexity: Broad, “one-size-fits-all” consent forms do not meet the law’s requirement for clear, purpose-linked consent that can be withdrawn at any time.
Data minimisation and retention: Holding all candidate data “just in case” is no longer compliant. Organisations must determine what data is essential for the hiring process and set retention and deletion policies accordingly.
Vendor and third-party risk: Sharing candidate personal data with BGV vendors or external platforms without robust contractual clauses on DPDP compliance exposes the company to liability.
Secure handling and breach preparedness: Companies must secure candidate data at rest and in transit, monitor for breaches and have reporting mechanisms ready—functions that many traditional HR systems do not natively support.
These operational realities are not simply administrative matters; they have material legal and financial implications. Non-compliance exposes organisations to significant penalties and reputational risk.

Given this backdrop, organisations using standalone spreadsheets, generic HR information systems or fragmented tools often find themselves playing catch-up—mapping workflows retroactively rather than embedding compliance into the process.

Zoho Recruit: Turning Compliance Into Operational Strength

Zoho Recruit is positioned to address the core DPDP compliance challenges facing hiring and talent acquisition teams by embedding privacy-centric data governance capabilities directly into recruiting workflows. Below are the ways Zoho Recruit can help:

1. Consent Capture and Audit Trails

Zoho Recruit can be configured to:

Present purpose-specific consent flows to candidates during data collection (for resumes, ID proofs or background checks), replacing generic consent with clear, actionable approvals.
Maintain an audit trail of consent records, allowing HR and compliance teams to demonstrate when and how consent was obtained, modified or withdrawn.

This functionality aligns directly with the DPDP requirement for explicit, revocable consent, and continuous evidence of compliance.

2. Data Minimisation and Purpose Limitation

Rather than indiscriminately collecting all possible candidate information, Zoho Recruit helps teams:

Define structured data fields that capture only essential candidate data relevant to specific recruiting processes.
Eliminate redundant or optional data collection points based on configurable templates.

By limiting data intake to predefined, legally defensible purposes, organisations reduce unnecessary exposure to personal data risks and align with the DPDP emphasis on minimisation.

3. Retention Policies and Automatic De-Identification

A crucial DPDP requirement is defining how long data is held and when it must be deleted. Zoho Recruit enables:

Configurable retention policies so candidate records automatically transition to archival or deletion states after a defined period, based on business and legal needs.
Automated data purging workflows that respect retention rules, reducing the manual burden on HR teams and closing compliance gaps.

This ensures adherence to the DPDP’s mandate for time-bound data retention and deletion.

4. Secure Storage and Controlled Access

Zoho Recruit offers:

Role-based access controls to ensure that sensitive candidate data is visible only to authorised stakeholders.
Encryption at rest and in transit, aligning with best practices for data security.
Logging and monitoring capabilities to support internal audits and breach investigation processes.

Collectively, these features support DPDP’s requirements for secure storage and handling of personal data.

5. Vendor and Third-Party Governance

Many organisations outsource parts of their hiring or verification process (e.g., background checks). Using Zoho Recruit helps in two ways:

Centralised vendor data flows are tracked and controlled within the system, reducing unmonitored data transfers.
Agreements and data processing records can be associated with vendor profiles, allowing HR teams to enforce compliance clauses and monitor obligations.

This assists with contractual risk management—a DPDP expectation that organisations maintain control and oversight over data shared with third parties.

Integrating DPDP Compliance Into Talent Operations

Compliance with the DPDP Act doesn’t need to be a parallel project disconnected from daily hiring workflows. In fact, organisations that integrate privacy and compliance into their talent acquisition tech platforms stand to gain operational discipline, reduced legal risk and improved candidate trust. Common candidate questions such as “Why do you need this data?” or “How long will you keep it?” become opportunities to reinforce transparent, trust-based employer brand experiences.

By contrast, organisations that delay compliance risk scrambling to retrofit policies and systems, exposing themselves to regulatory scrutiny and operational disruption. The tools and processes within Zoho Recruit allow HR and talent acquisition teams to embed DPDP-aligned practices into their everyday workflows, from initial candidate contact through to onboarding and beyond.

Conclusion

The DPDP Act fundamentally reshapes how Indian organisations must think about personal data in hiring and recruitment. Rather than treat compliance as a burden or a checkbox exercise, forward-looking companies are investing in systems that build privacy by design into recruitment operations. Zoho Recruit offers a coherent, configurable platform that enables HR teams to meet DPDP requirements while maintaining operational productivity.

In doing so, organisations not only mitigate legal and financial risks but also strengthen trust with candidates and employees—a strategic advantage in today’s competitive talent marketplace.

Know More