OSH Code 2020 & Mental Health Compliance: A Legal & Occupational Health Framework

Introduction: Why The OSH Code 2020 Matters For Your Workplace Mental Health

For decades, Indian employers focused on physical workplace safety—equipment, ergonomics, accident prevention. But in 2020, a quiet revolution happened. The Occupational Safety, Health and Working Conditions Code (OSH Code, 2020) was enacted, consolidating 13 older labour laws into one comprehensive framework.

Here's what many employers still don't realize: The OSH Code doesn't just cover physical hazards anymore. Contemporary legal interpretation increasingly recognises that psychological well-being, fatigue, stress, burnout, and age-related health risks are now integral to "occupational safety."

This shift has profound implications. Employers are no longer expected to provide mental health support as a "nice-to-have" benefit. Under modern regulatory interpretation, mental health safeguards are a legal compliance requirement—as fundamental as fire exits or equipment maintenance.

---

What Is The OSH Code 2020?

The OSH Code 2020 is part of a consolidation of central labour laws in India. The government took 13 separate pieces of legislation—covering working conditions, safety, welfare, and occupational health—and merged them into one streamlined Code.

The intent was simple: Reduce compliance burden while enhancing worker protection across sectors.

The reality is more complex: By bringing all these laws under one umbrella, the OSH Code now creates a unified framework where employers must demonstrate comprehensive, continuous, and documented safety practices—including psychological safety.

---

The 3-Pillar Requirement: What Employers Are Now Expected To Do

Under the OSH Code 2020, contemporary legal practice expects employers to take three interconnected steps to safeguard employee mental health and psychological well-being:

Pillar 1: Preventive Assessment and Risk Identification

What it means: Instead of reacting after an employee burns out, suffers depression, or resigns, employers must proactively identify and assess psychological risks inherent in their operational models.

What employers are expected to do:

• Conduct workplace assessments identifying stress triggers: workload, overtime cultures, lack of autonomy, role ambiguity, job insecurity
• Document psychosocial hazards the same way you'd document chemical hazards or equipment risks
• Review work schedules, performance metrics, and management practices for burnout-inducing patterns
• Identify high-risk roles (content moderators, customer service, high-pressure sales) requiring enhanced mental health support
• Assess age-related health risks, including mental health impacts for aging employees

Why it matters: Legal defensibility now depends on demonstrating that you identified risks before harm occurred, not just that you offered support after the fact.

Pillar 2: Structured Support & Continuous Monitoring

What it means: Mental health support must be documented, continuous, and integrated into occupational safety systems—not ad-hoc wellness camps or occasional sessions.

What employers are expected to do:

• Establish periodic medical examinations, including annual health check-ups for employees above 40 years
• Integrate mental health screening into routine occupational health protocols
• Provide access to qualified, ethical, and confidential mental health professionals
• Conduct structured counselling sessions (not one-time awareness programs)
• Document all health monitoring, counselling access, and employee engagement
• Provide clear pathways for employees to access confidential support without fear of retaliation

Why it matters: Regulatory audits now look for evidence of continuity and structure, not just intentions. Can you show health screening records? Counselling access logs? Mental health awareness campaigns? EAP enrollment and utilization data?

Pillar 3: Manager Training & Early Intervention

What it means: Managers and supervisors are the first line of defense in preventing workplace mental health crises. They must be trained to recognize, respond, and escalate.

What employers are expected to do:

• Train managers to recognize early indicators of stress, fatigue, burnout, and psychological distress
• Cover signs including: uncharacteristic mistakes, withdrawal, mood changes, increased absenteeism, missed deadlines, irritability
• Teach managers supportive conversation techniques—how to ask "What support do you need?" instead of just "Are you okay?"
• Document manager training and competency checks
• Create escalation pathways so managers know when and how to refer employees to counselling or occupational health services
• Hold managers accountable for psychological safety in their teams

Why it matters: If a manager notices early signs of burnout and does nothing, the employer's liability exposure increases. Documented manager training is now a key compliance marker.

---

Key Obligations Under OSH Code 2020 For Mental Health

The OSH Code mandates these specific employer duties related to mental health and psychological safety:

Obligation	What Employers Must Do	Legal Risk If Ignored
Hazard Assessment	Identify psychosocial risks (workload, bullying, job insecurity, role clarity) as documented hazards	Non-compliance findings in labour audits; liability in injury/burnout cases
Medical Examinations	Conduct annual health check-ups for employees above 40 years; include mental health screening	Regulatory penalties; evidence of negligence in negligence claims
Professional Support	Provide access to qualified, confidential mental health professionals	Breach of duty of care; reputational damage; employee claims
Manager Training	Train supervisors to recognize stress, burnout, fatigue, and initiate supportive conversations	Missed early intervention; escalation of harm; regulatory scrutiny
Documentation	Maintain records of health assessments, counselling access, awareness programs, and manager training	Inability to defend compliance in audits or legal proceedings
Preventive Approach	Embed mental health into operational safety systems (not one-time events)	Perception of non-compliance; vulnerability to litigation
Accessibility	Ensure confidential, low-barrier access to mental health services; de-stigmatize help-seeking	Low EAP utilization; hidden mental health crises; sudden burnout

---

Article 21 & The Supreme Court Shift: Mental Health As A Constitutional Right

While the OSH Code sets the legal framework, a landmark July 2025 Supreme Court judgment has now elevated the moral and constitutional stakes.

The July 2025 Sukdeb Saha Judgment

In Sukdeb Saha v. State of Andhra Pradesh, the Supreme Court made history: Mental health is now explicitly recognized as an integral component of the Right to Life under Article 21 of the Constitution of India.

What this means:

• Mental health is no longer a "welfare concern" or discretionary benefit
• It is a constitutional right, enforceable through courts
• Employers cannot ignore psychological safety and claim it is a private matter

---

Additional Regulatory Frameworks Aligning With Mental Health Compliance

Beyond the OSH Code, several other Indian laws reinforce the mental health compliance mandate:

POSH Act, 2013 (Prevention Of Sexual Harassment)

The POSH Act requires organizations to maintain a safe, harassment-free workplace. Workplace harassment is a significant psychosocial hazard that triggers mental health impacts (anxiety, depression, PTSD).

Employer obligations:

• Establish an Internal Complaints Committee (ICC) for organizations with more than 10 employees
• Conduct POSH training and awareness annually
• Maintain confidentiality of complaints
• File annual POSH compliance reports to District Officers

Mental health link: A harassment-free workplace is essential for psychological safety. POSH compliance and mental health support go hand-in-hand.

Digital Personal Data Protection Act, 2023 (DPDP Act)

As employers collect health and mental health data (from EAPs, health screenings, counselling records), the DPDP Act mandates confidentiality and data security of employee health information, consent-based processing, and individual rights to access and control their health information.

Employer obligation: Ensure that mental health records, EAP data, and health screening information are protected under DPDP standards. Breach of confidentiality can expose employers to data protection penalties and constitutional violations of privacy.

Mental Healthcare Act, 2017

The MHA establishes the right to affordable, quality mental health care and protects persons with mental illness from discrimination.

For employers:

• Cannot discriminate against employees with mental illness
• Must provide reasonable accommodation
• Must maintain confidentiality of mental health information

---

Common Employer Compliance Gaps (And How To Avoid Them)

Gap 1: No Documented Psychosocial Risk Assessment

What employers do: Offer general wellness programs but don't formally assess workplace stressors.

What regulation expects: Documented identification of psychological hazards specific to your workplace.

Fix: Conduct a psychosocial risk assessment identifying stressors, vulnerable groups, and mitigation measures. Document this as part of your occupational safety framework.

Gap 2: One-Off Wellness Events Instead Of Structured Programs

What employers do: Annual yoga camp, quarterly wellness webinars, EAP available "on-demand."

What regulation expects: Continuous, structured mental health support integrated into occupational safety systems.

Fix: Design a comprehensive mental health program with clear timelines, measurable engagement targets, and documented outcomes.

Gap 3: Manager Unpreparedness

What employers do: Managers are never trained to recognize burnout or stress.

What regulation expects: Managers can identify early warning signs and initiate supportive conversations.

Fix: Conduct mandatory manager training on mental health awareness, stress recognition, and supportive communication. Document training and competency. Hold annual refreshers.

Gap 4: No Clear Confidentiality Protocols

What employers do: Employees fear that using EAP or counselling will be flagged to management.

What regulation expects: Clear, documented confidentiality guarantees. Employees know that seeking help is private and consequence-free.

Fix: Publish and enforce a confidentiality protocol ensuring EAP access is separate from HR performance tracking. Consider third-party EAP providers to reinforce independence.

Gap 5: Missing Documentation

What employers do: Conduct health check-ups, run wellness programs, offer counselling—but don't track participation.

What regulation expects: Evidence of mental health initiatives, utilization rates, and continuous monitoring.

Fix: Implement tracking systems for health screening participation, EAP enrollment and utilization, manager training attendance, and mental health awareness campaign reach.

---

How To Build An OSH Code-Compliant Mental Health Program

Here's a practical roadmap:

Phase 1: Assessment (Months 1-2)

• Conduct psychosocial risk assessment across departments
• Identify vulnerable roles and employee populations
• Review current health and wellness practices
• Identify gaps against OSH Code and complementary law requirements

Phase 2: Design & Planning (Months 2-3)

• Draft mental health policy integrated into occupational safety framework
• Design structured counselling/EAP program
• Plan manager training curriculum
• Set up health screening protocols
• Establish confidentiality and data protection measures

Phase 3: Implementation (Months 4-6)

• Launch manager mental health training
• Activate EAP or counselling services
• Begin health screening cycle
• Roll out employee awareness campaigns
• Establish escalation pathways

Phase 4: Monitoring & Documentation (Ongoing)

• Track health screening participation and results
• Monitor EAP utilization rates
• Audit manager training effectiveness
• Maintain comprehensive compliance records
• Conduct annual reviews and updates

---

Role Of EAP Providers In Ensuring Compliance

Employee Assistance Programs (EAPs) are now a compliance necessity, not a benefit add-on. A compliant EAP should provide:

• ✓ Confidential counselling (separate from employer systems)
• ✓ Qualified mental health professionals (licensed counsellors, psychologists, coaches)
• ✓ Accessible formats (virtual, after-hours, multi-lingual)
• ✓ Clear utilization tracking (for employer monitoring of engagement, not individual identification)
• ✓ Manager training on mental health awareness and referral processes
• ✓ Crisis support (24/7 helpline for emergencies)
• ✓ Data protection compliance (DPDP Act-aligned confidentiality)
• ✓ Outcome reporting (program impact, utilization trends, not individual details)

How PrimeEAP aligns with OSH Code compliance: PrimeEAP and HopeQure provide structured, documented EAP services that integrate into occupational safety frameworks. By partnering with experienced EAP providers, employers demonstrate compliance with the OSH Code, Article 21 protections, and contemporary legal standards for workplace mental health.

---

Frequently Asked Questions: OSH Code 2020 & Mental Health Compliance

Q: Is mental health really a legal requirement under the OSH Code, or is it just best practice?

A: Both. The OSH Code framework, contemporary regulatory interpretation, and the Supreme Court's Article 21 judgment have all confirmed that mental health safeguards are now legal obligations, not optional. Employers who treat mental health as discretionary are at compliance and liability risk.

Q: What happens if our organization doesn't align with OSH Code mental health expectations?

A: Labour inspections may identify non-compliance gaps. If an employee experiences burnout or mental health crisis, the employer's failure to provide documented support increases liability exposure. Reputational damage and regulatory penalties may follow.

Q: Do small organizations (under 50 employees) need to comply with OSH Code mental health provisions?

A: Yes. The OSH Code applies across sectors and organization sizes. Legal expectations remain the same regardless of company size.

Q: Is an EAP sufficient to ensure OSH Code compliance?

A: An EAP is necessary but not sufficient. Compliance also requires documented psychosocial risk assessment, manager training, health screening, clear confidentiality protocols, and integration into occupational safety systems.

Q: How do we document compliance for regulatory audits?

A: Maintain records of psychosocial risk assessment reports, health screening participation, EAP enrollment and utilization data, manager training attendance, mental health awareness materials, policy documents, and incident response logs.

Q: What is the timeline for organizations to come into full compliance?

A: There is no prescribed deadline, but the expectation is continuous and prompt alignment. Assess current state within 3 months, design compliance roadmap within 6 months, begin implementation within 9 months, and achieve core compliance within 12-18 months.

---

Key Takeaways: Compliance Checklist

---

Conclusion: Mental Health Is No Longer Optional

The OSH Code 2020, the July 2025 Supreme Court judgment on Article 21, and complementary laws have fundamentally reshaped employer obligations in India.

Mental health is no longer a benefit. It is a compliance requirement.

Organizations that recognize this shift early—and design comprehensive, documented, and integrated mental health programs—will build stronger cultures, reduce legal and reputational risk, and demonstrate that they are serious about the constitutional right to dignity and psychological safety at work.

The question is not "Should we invest in mental health?" The question is: "How quickly can we demonstrate compliance?"

---