The HR Compliance Checklist for Employee Volunteering Programmes in India (2026 Reference)

varsha178
May 9
13 min read

Employee volunteering programmes in India operate at the intersection of multiple regulatory frameworks. A programme that delivers strong community outcomes can still expose the company to compliance risk if the underlying HR architecture has not been built with the relevant Indian laws in mind.

For HR teams running mature volunteering programmes or for HR teams launching new programmes, a structured compliance review is one of the most valuable annual practices. The review surfaces gaps before they become audit findings, before they become statutory liabilities, and before they become reputational risks. Most companies do not run this review systematically because the relevant compliance dimensions span multiple Indian regulatory frameworks, and HR teams often do not have a single reference point that brings them together.

This article provides that reference point. It walks through the compliance dimensions Indian HR teams should consider when designing and operating employee volunteering programmes, the specific regulatory frameworks that apply at each layer, the documentation discipline that supports compliance, and the operational practices that translate compliance into durable programme strength.

It is written for the HR head, the head of People Operations, the employee engagement lead, the Internal Committee chairperson, the Legal team partner, and the CSR coordinator who collectively design and operate the programme. The article is a starting reference for compliance review, not a definitive compliance certification. Every company's specific compliance picture depends on its sector, geography, workforce composition, partner relationships, and recent regulatory updates that may have followed this article's publication.

Important note: This article provides a compliance reference framework based on observed Indian regulatory practice as of April 2026. The article is informational guidance and does not provide legal advice or certify compliance for any specific company. Every compliance review described here should be conducted by the company's HR leadership in coordination with the company's Legal team, Chartered Accountant, Company Secretary, statutory auditor, and external legal counsel where appropriate. Specific provisions of the regulatory frameworks named in this article continue to evolve through court decisions, regulatory circulars, and amendments. Verify against current regulatory text and recent updates before acting on any specific compliance question.

Why HR Compliance Review for Volunteering Programmes Matters

Five structural realities make HR compliance review for volunteering programmes an important operational practice.

Volunteering activities take employees outside the standard workplace. Compliance frameworks designed around in-office work require explicit extension to off-site activities.
Volunteering involves multiple parties. Company employees, implementation partners, beneficiaries, and community members are all involved. Compliance frameworks need to address the relationships and responsibilities across all parties.
Volunteering documentation supports multiple audit and disclosure requirements. The same documentation feeds the company's CSR audit, BRSR Principle 8 disclosure, and statutory annual reporting.
Indian regulatory frameworks have intensified in recent years. Mental Healthcare Act 2017, BRSR refinements, POSH Act case law, and CSR rule amendments have all raised the compliance bar.
Reputational risk from compliance gaps is genuine. A single compliance incident at a volunteering activity can affect the company's broader reputation, which means programme compliance carries operational weight beyond regulatory technicality.

These five factors taken together mean that compliance review is not a defensive exercise. It is operational discipline that strengthens the programme's foundation.

The Eight Compliance Dimensions Indian HR Teams Should Review

The compliance review for an employee volunteering programme typically operates across eight dimensions. Each addresses a specific regulatory framework or operational layer.

Dimension 1: POSH Act 2013 Coverage

The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, applies to all activities arising out of employment, including off-site volunteering activities. The compliance check has the following components.

Policy language explicitly includes volunteering activities. The company's POSH policy should state that the policy applies to all activities organised by the company, including volunteering, off-site programmes, and field activities.
Internal Committee jurisdiction extends to volunteering. The IC's terms of reference should explicitly cover complaints arising from volunteering activities.
Awareness and training reach volunteering participants. Pre-activity briefings should reference the POSH framework's applicability and the IC's contact information.
Implementation partner coordination is documented. The MoU with implementation partners should include POSH coordination clauses.
Complaint handling procedures are clear for off-site incidents. The IC should have established procedures for off-site complaint investigation.
Section 21 annual reporting captures complaints from all activity contexts. The company's annual report under Section 21 of the Act should reflect complaints from volunteering and other off-site activities, not only complaints from the standard workplace.

Dimension 2: Mental Healthcare Act 2017 and Workplace Wellbeing

The Mental Healthcare Act 2017 has implications for workplace policy infrastructure that affect volunteering programmes designed to support wellbeing.

Health insurance covers mental health conditions on parity with physical health. Group health insurance for employees should include mental health coverage in line with the Act's provisions and IRDAI guidance.
Non-discrimination practices are documented. Employment practices, including in volunteering programme participation, should not discriminate based on mental health conditions or history.
Confidentiality of mental health-related information is maintained. Any information about an employee's mental health, including in the context of volunteering programme participation, is kept confidential.
Reasonable accommodation is offered where employees disclose conditions. Volunteering activities should be designed to allow reasonable accommodation for employees who request it.
Resources for mental health support are visible. Information about Employee Assistance Programmes, Tele MANAS (14416), and other support resources is accessible to all employees.

Dimension 3: Companies Act 2013 Section 135 and CSR Rules

For companies covered under Section 135 of the Companies Act 2013, employee volunteering programmes that contribute to CSR activities must satisfy specific compliance requirements under the CSR Rules.

Volunteering activities aligned to CSR are mapped to Schedule VII clauses. Each volunteering activity that contributes to CSR should be aligned to a specific Schedule VII clause and documented accordingly.
Implementation partners hold valid CSR-1 registration. Partners receiving CSR-related contributions or coordinating CSR-aligned volunteering activities should hold valid CSR Registration Numbers.
The CSR Committee approves volunteering programme integration. Where the volunteering programme intersects with CSR activities, the CSR Committee's awareness and approval are documented.
Annual Action Plan references include volunteering components. The Annual Action Plan filed with the MCA may reference volunteering activities where they contribute to CSR delivery.
CSR-2 filing reflects the volunteering programme's contribution accurately. The annual CSR-2 form filed with the MCA captures the volunteering programme's contribution to CSR where applicable.
CFO certification under Rule 4(5) is supported by volunteering documentation. Where the company's CFO certifies that CSR funds have been utilised for the purposes approved by the Board, the certification is supported by documentation that includes volunteering programme records.

Dimension 4: Indian Shops and Establishments Acts and State Labour Law

Most Indian states have their own Shops and Establishments Acts (Karnataka, Maharashtra, Telangana, Tamil Nadu, Delhi, and others), and the Code on Wages 2019 and Industrial Relations Code 2020 affect leave, hours, and working condition aspects of employment that apply to volunteering programmes.

Volunteer Time Off (VTO) treatment under leave architecture is documented. Whether VTO is offered as paid time off, as a separate leave category, or under existing leave provisions, the policy treatment is documented and consistent with the relevant State Shops and Establishments Act.
Working hours during volunteering activities respect statutory limits. Activities scheduled during work hours respect maximum working hour provisions under the relevant State Act.
Compensation continuity during volunteering is clear. Whether employees are compensated as working hours during volunteering or under a different framework, the compensation treatment is clear and lawful.
State variation is acknowledged. A company operating across multiple states accounts for variation across the Karnataka Shops and Establishments Act, Maharashtra Shops and Establishments (Regulation of Employment and Conditions of Service) Act, Telangana Shops and Establishments Act, Delhi Shops and Establishments Act, and other state frameworks.
Code on Wages 2019 implications are reviewed. The Code's provisions on minimum wages, payment of wages, and bonus may apply to volunteering compensation depending on programme structure.

Dimension 5: FCRA Considerations Where Applicable

The Foreign Contribution Regulation Act 2010 applies to certain volunteering programme structures, particularly those involving foreign-affiliated NGO partners or foreign-funded activities.

Implementation partners' FCRA status is verified where foreign contributions are involved. Partners receiving foreign contributions should hold valid FCRA registration.
Volunteering activities involving foreign-funded programmes follow FCRA constraints. Activities where the underlying funding is foreign should comply with FCRA's restrictions.
The company's own foreign contribution position, where applicable, is documented. Companies that themselves receive or transfer foreign contributions should maintain compliant documentation.
Foreign volunteer participation, where applicable, is reviewed. Programmes that include foreign nationals as volunteers should consider FCRA implications and visa-related compliance.

For most Indian corporate volunteering programmes operating with domestically-funded NGO partners, FCRA does not directly apply. The dimension is included for completeness because FCRA does affect specific programme structures.

Dimension 6: Data Protection and IT Act Considerations

Employee volunteering programmes generate data that touches the Information Technology Act 2000 (with amendments through the Digital Personal Data Protection Act 2023) and IT Rules 2011 frameworks.

Employee volunteering data is collected with consent. Participation records, photographs, and feedback collected during volunteering activities are collected with appropriate consent.
Beneficiary data collected during volunteering is handled with consent. Beneficiary information collected at activity sites is handled in line with data protection principles.
Photography and storytelling protocols respect consent. Photographs of employees, beneficiaries, and community members published in internal or external communications follow consent protocols.
Data retention practices are documented. How long volunteering programme data is retained, where it is stored, and how it is deleted at the end of retention is documented.
Cross-border data transfer, where applicable, is reviewed. Where volunteering programme data is transferred outside India (for global HR systems, parent-company reporting, or platform infrastructure hosted outside India), the cross-border transfer follows applicable rules.
Children's data, where collected, is handled with extra care. Volunteering activities involving children as beneficiaries generate data that requires heightened consent and handling protocols, consistent with child protection principles in Indian and international law.

Dimension 7: BRSR Framework Compliance

For listed companies under SEBI's BRSR (Business Responsibility and Sustainability Reporting) framework, employee volunteering programmes feed multiple Principles in the annual disclosure.

BRSR Principle 8 (responsible and inclusive growth) disclosure includes volunteering programme outcomes. Volunteer hours, participation rates, beneficiaries reached, and geographic distribution are captured.
BRSR Principle 3 (employee wellbeing) disclosure references volunteering as a wellbeing initiative. Where volunteering is positioned as a wellbeing component, Principle 3 reflects this accurately.
BRSR Principle 5 (human rights) disclosure incorporates volunteering compliance practices. POSH Act extension to volunteering, complaint handling, and grievance redressal data feed Principle 5.
BRSR Principle 6 (environment) disclosure includes environmental volunteering activities. Plantation, water, waste, and other environmental volunteering activities feed Principle 6.
Quarterly or periodic data capture supports the annual filing window. Continuous data capture during the year supports the BRSR filing rather than retrospective assembly at year-end.

Dimension 8: Field Safety and Insurance Coverage

Employee volunteering activities take place in field locations where insurance, safety, and accident coverage considerations apply.

Group accident insurance covers employees during volunteering activities. The company's standard group accident or personal accident insurance is reviewed to confirm coverage extends to off-site volunteering activities.
Specific event insurance is arranged for high-risk activities. Activities involving water, heights, transportation, or other elevated risk categories may require additional insurance coverage for the activity duration.
Activity safety protocols are documented. Protocols for participant safety during the activity, including heat protection during summer activities, transportation safety, and emergency response, are documented.
First aid arrangements are confirmed for each activity. First aid kits, emergency contact information, and medical support arrangements are confirmed before the activity begins.
Implementation partner liability and insurance position is documented. The partner's own insurance position and liability coverage for joint activities are documented in the MoU.

The Compliance Review Cadence

Compliance review is not a single annual exercise. Different dimensions benefit from different review cadences.

Quarterly review: POSH compliance, complaint handling, training cadence
Twice-yearly review: Implementation partner compliance status, FCRA where applicable, insurance coverage
Annual review: Full compliance review across all eight dimensions, BRSR data preparation, Companies Act CSR alignment, statutory reporting preparation
Event-triggered review: When new regulations are notified, when court decisions affect interpretation, when the company expands to new states or geographies, when partner relationships change
Programme launch review: Before launching a new programme structure or major activity expansion, full compliance review is conducted

This cadence allows compliance review to be operational discipline rather than a year-end scramble.

Documentation That Supports Compliance

The compliance review is supported by documentation maintained continuously through the year. The relevant documentation includes:

POSH policy current version and version history
Internal Committee composition records and meeting minutes
POSH awareness training records with attendance and dates
Implementation partner MoUs with POSH coordination clauses
Implementation partner CSR-1 registration certificates
Implementation partner FCRA certificates where applicable
Volunteering policy current version with VTO provisions
State-specific labour law compliance confirmations where the company operates across multiple states
Group health insurance and group accident insurance policies covering volunteering activities
Activity-specific safety protocols and risk assessments
Volunteering data retention and consent records
BRSR data continuously captured for relevant Principles
CSR Annual Action Plan reflecting volunteering components
CFO certifications under Rule 4(5) where volunteering contributes to CSR
Complaint records and Section 21 reporting data

This documentation set supports both internal compliance review and external statutory audit cycles.

Five Common Compliance Gaps That Recur Across Indian HR Programmes

Across observed practice, five recurring patterns produce compliance gaps in otherwise well-intentioned volunteering programmes.

1. POSH Coverage Assumed but Not Documented

HR teams often assume POSH applies to volunteering activities by default, without explicitly extending the policy and IC jurisdiction in writing. The assumption is technically correct under the Act, but the absence of explicit documentation creates ambiguity at the moment a complaint is raised. Strong programmes extend POSH coverage explicitly in policy text and IC terms of reference.

2. Implementation Partner Documentation Not Verified Annually

CSR-1 registration, 12A and 80G status, FCRA where applicable, and the partner's own POSH framework should be verified annually. Partners' compliance status can change. Programmes that don't refresh verification annually find themselves with lapsed-status partners at audit moments.

3. Insurance Coverage Assumed Without Confirmation

HR teams sometimes assume that group accident insurance covers off-site volunteering activities, without specifically confirming the policy language. Some policies have geographic, activity-type, or notification requirements that affect coverage. Specific confirmation is more reliable than assumption.

4. State Variation Overlooked in Multi-State Operations

A volunteering programme designed around the Karnataka Shops and Establishments Act may not align cleanly with the Maharashtra or Tamil Nadu equivalent when the company operates in multiple states. State variation in leave provisions, working hours, and overtime affects programme design.

5. Data Retention Practices Inherited Without Review

Volunteering programme data is often retained under whatever retention practice the broader HR system uses, without specific review of whether that retention is appropriate. With the Digital Personal Data Protection Act 2023 in force, specific review of volunteering data retention is increasingly relevant.

Five Suggestions for Stronger Compliance Operations

The following suggestions reflect operational practice that produces stronger compliance outcomes. They are observations, not prescriptions.

1. Build Compliance Review into the Annual HR Calendar

Schedule the annual compliance review at a fixed point in the year (typically Q2 or Q3, with sufficient time to address findings before year-end). The fixed schedule makes compliance review a discipline rather than an afterthought.

2. Coordinate HR, Legal, and CSR Teams in the Review

Different compliance dimensions sit with different functions. POSH is HR. Companies Act CSR provisions are CSR Committee. Insurance is HR and Legal. Cross-functional review produces a complete compliance picture that any single function alone cannot.

3. Document Findings and Track Resolution

Compliance review should produce a documented findings report with specific gaps identified, recommended actions, owners, and timelines. The report becomes the input for the next year's review and ensures findings are actually addressed rather than noted and forgotten.

4. Build Vendor and Partner Compliance into Onboarding

When onboarding a new implementation partner, compliance verification (CSR-1, 12A, 80G, FCRA where applicable, POSH framework, insurance) becomes part of the onboarding checklist rather than a retrospective verification. This prevents downstream compliance issues.

5. Stay Current with Regulatory Updates

Indian regulatory frameworks evolve regularly. POSH Act case law develops. Mental Healthcare Act guidance refines. CSR rules amend. BRSR requirements update. State labour laws shift. Companies that maintain a quarterly regulatory awareness practice (working with their Legal team or external counsel) find their compliance posture stronger than those that update only when issues surface.

A Note on Scope and Limitations of This Reference

This article walks through eight compliance dimensions that affect Indian employee volunteering programmes. It does not address every dimension that may apply to every specific programme structure.

Specific programmes may involve additional compliance considerations, including but not limited to:

State-specific industrial regulations beyond the general Shops and Establishments Acts
Sector-specific regulatory frameworks (banking, insurance, pharmaceutical, telecommunications, etc.)
International compliance frameworks where the parent company operates globally
Specific tax treatment of employer-employee volunteering arrangements
Specific contract law considerations in unique partnership structures

For programmes with unique structures, specific compliance dimensions, or operating in regulated sectors, the company's Legal team should design a compliance review framework specific to that programme, using this article as a starting reference rather than a complete checklist.

A Note on Professional Review

This article provides operational guidance and a compliance reference framework based on observed practice in the Indian sector as of April 2026. The article is informational guidance and does not provide legal advice or certify compliance for any specific company.

Every compliance review described here should be conducted by the company's HR leadership in coordination with the company's Legal team, Chartered Accountant, Company Secretary, statutory auditor, Internal Committee, and external legal counsel where appropriate. Specific provisions of the regulatory frameworks named in this article continue to evolve through court decisions, regulatory circulars, and legislative amendments.

Verify against the current text of the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act 2013, the Mental Healthcare Act 2017, the Companies Act 2013 and CSR Rules 2014, the relevant State Shops and Establishments Acts, the Code on Wages 2019, the Industrial Relations Code 2020, the Foreign Contribution Regulation Act 2010, the Information Technology Act 2000 with the Digital Personal Data Protection Act 2023, SEBI's BRSR framework, and any recent regulatory updates that may affect your specific situation.

This article is a starting reference for compliance review, not a definitive compliance certification. Use it as a structured input to your company's own compliance work.

Working with Marpu Foundation on Compliance-Aligned Volunteering Programmes

For HR teams running employee volunteering programmes in coordination with implementation partners, Marpu Foundation works as the implementation partner across 250+ corporate partnerships and 23+ Indian states. Marpu's operational discipline on the partner-side compliance dimensions described in this article supports corporate HR teams in maintaining their own compliance posture.

The practices Marpu maintains include:

Current CSR-1 registration with the Ministry of Corporate Affairs, refreshed and verifiable
Current 12A and 80G registrations under the Income Tax Act
Comprehensive partner-side POSH framework with Internal Committee constituted and trained
Documentation discipline across project lifecycle that supports corporate audit and BRSR disclosure
Schedule VII alignment confirmed at MoU stage and re-confirmed at every periodic review
Multi-state operational presence across Karnataka, Maharashtra, Telangana, Tamil Nadu, Andhra Pradesh, and other geographies, with awareness of state-specific compliance variation
Insurance and liability documentation appropriate for the programme structure
Field safety protocols including for high-temperature activities, transportation, and group field events
Data handling practices for beneficiary information, photographs, and storytelling consent
BRSR-aligned data capture by default for listed company corporate partners

Marpu's 85 percent corporate partner retention rate, which sits considerably above the Indian sector average, reflects partly this compliance discipline. Corporate HR teams partnering with Marpu benefit from partner-side compliance that supports the company's own compliance review.

For HR teams reviewing their compliance posture for FY 2026-27, designing a new programme with compliance built in from the start, or evolving an existing programme in response to regulatory updates, Marpu Foundation would be glad to begin a conversation.

Send a brief note on your focus areas, your geographies, your sectors, your CSR priorities, and your specific compliance questions. Marpu responds within two working days with documentation references, partner compliance certificates, and a programme proposal aligned to your priorities.

To begin that conversation, write to connect@marpu.org or visit marpu.org.