Dematerialised payslip: legal value and record retention

The dematerialisation of payslips became established in French companies following the 2016 Labour Law, but many HR Directors continue to question a fundamental point: does an electronic payslip really have the same probative force as a paper document? And how can we guarantee its retention over the 50 years required by law? These questions are not trivial: if mismanaged, they expose the employer to employment tribunal disputes and administrative sanctions. This article clarifies the legal value of the dematerialised payslip, the technical conditions essential to its integrity, and best practices for retention in a digital safe deposit.

Legal value of the dematerialised payslip in 2026

Since article L. 3243-2 of the French Labour Code, amended by law n° 2016-1088 of 8 August 2016, the employer may provide the payslip in electronic form, unless the employee objects. This provision legitimised widespread dematerialisation, but it alone does not guarantee the legal value of the document.

Conditions for equivalence with paper

For an electronic payslip to be legally enforceable, three cumulative conditions must be met:

1. Document integrity: the file must not be able to be altered after its creation. This requires a technical mechanism guaranteeing the absence of tampering, such as a server seal or an electronic signature compliant with eIDAS.
2. Guaranteed availability: the employee must be able to access their payslip at any time during the legal retention period. A simple email transmission is not sufficient.
3. Confidentiality: only the employee concerned and the employer should be able to access the document.

The Council of State and the Court of Cassation have progressively consolidated this trilogy in their case law. In the event of an employment tribunal dispute, it is up to the employer to prove that they correctly provided the compliant payslip; a document whose integrity is not guaranteed may be excluded from proceedings.

Timestamping and traceability: essential tools

Qualified electronic timestamping constitutes proof that the document existed on a given date and has not been altered since. According to the eIDAS regulation (article 41), qualified timestamping benefits from a presumption of accuracy regarding the date and integrity of data. For payslips, it is strongly recommended to affix such a timestamp at the moment of document generation to crystallise its content.

Enforceability in employment tribunal disputes

The Employment Tribunal regularly examines disputes concerning salary corrections, bonus recalls or redundancy compensation. In this context, the payslip traceability chain is scrutinised closely. A payslip stored in a genuine certified digital safe deposit — and not in a simple cloud storage space — presents a significantly higher level of proof. The legal value of the electronic signature associated with the document further strengthens its probative force before the courts.

Payslip retention: the 50-year rule

The retention period for payslips is one of the longest in French labour law. It is set by article L. 3243-4 of the Labour Code: the payslip must be retained for 50 years or until the employee reaches age 75 (whichever comes first). This period, which may seem excessive, is justified by the fact that the payslip serves as proof for the calculation of pension entitlements.

The obligation rests with both parties

It is often misunderstood that the retention obligation rests with both the employer and the employee. The employer must retain a copy or duplicate of issued payslips; the employee, for their part, has an interest in retaining them to justify their entitlements to the CNAV or CARSAT in the event of an anomaly in their career record.

In a dematerialisation context, this raises a practical question: what happens if the employee leaves the company and loses access to the HR portal? The law requires the employer to offer a mechanism for retrieval or portability of payslips. This is precisely the role of the digital safe deposit.

Digital safe deposit: the compliant solution for 50 years of retention

The personal digital safe deposit is defined by law n° 2016-1321 of 7 October 2016 (Republic Digital Law) and supplemented by decree n° 2018-418 of 30 May 2018. To be qualified as a digital safe deposit, the service must:

• Guarantee data integrity stored (impossibility of modification, access logging)
• Ensure confidentiality through end-to-end encryption
• Guarantee availability throughout the retention period
• Allow data restitution in an open and interoperable format
• Be operated by a certified provider according to a recognised framework (ANSSI label or AFNOR NF 461 certification)

The HR dematerialised payslip solution must therefore be supported by a compliant digital safe deposit, and not by simple shared storage space. The distinction is fundamental from a legal perspective.

Dematerialisation and the employee's right to object

The 2016 Labour Law established an inverted consent regime: the employer can dematerialise without seeking the employee's agreement, but the employee may object at any time. This objection must be respected within a reasonable timeframe (the ministerial circular mentions a one-month timeframe).

Managing objections in practice

In companies managing several hundred employees, managing objections can become a real operational challenge. It is advisable to implement:

• A register of objections updated in real time
• An automated process allowing the concerned employee to switch to paper delivery from the next pay period
• Traceability of the objection (date, channel of receipt, acknowledgement of receipt)

These elements are all the more important as failure to respect the right to object is treated as a breach of the obligation to provide the payslip, liable to the fine provided for third-class offences (€450 per payslip not provided).

GDPR and payslip data

The payslip contains sensitive personal data: basic salary, bonuses, contributions, supplementary pension information, and possibly health-related elements (daily allowances). As such, the processing of this data is subject to GDPR. The employer, in its capacity as data controller, must:

• Register this processing in its processing activity register (article 30 GDPR)
• Define a proportionate retention period (50 years for payslips, consistent with the purpose)
• Implement appropriate technical and organisational measures (encryption, access control)
• Appoint a DPO if the scale of the processing justifies it

Integrated HR solutions, such as those offered by Certyneo as part of electronic signature for HR, allow you to address simultaneously the constraints of the Labour Code and GDPR within a single system.

Choosing the right technical architecture for sustainable compliance

Compliance over 50 years is not just a legal issue: it is above all a technological challenge. File formats evolve, software becomes obsolete, and providers disappear. A robust retention strategy must anticipate these risks.

Sustainable file formats

The PDF/A format (ISO 19005) is the recommended standard for long-term archiving. Unlike standard PDF, PDF/A embeds all fonts and metadata necessary for its future reading, without dependency on external resources. It is recognised by French public archives and European courts as a probative format.

Data migration and service continuity

Over 50 years, it is virtually certain that you will change HR providers. Your contract with your digital safe deposit must include a data portability clause: restitution in an open format (PDF/A, XML), complete export on demand, and defined migration timeframe. Before committing to a provider, also check their financial stability and the existence of a business continuity plan (BCP). An in-depth comparison of available solutions is accessible in our comparison of electronic signature solutions.

Logging and audit trail

Any action on an archived payslip (viewing, downloading, access rights modification) must be logged in an immutable manner. This audit trail is essential in the event of URSSAF inspection, labour inspection or legal dispute. It proves that the document has not been altered between its creation and the moment it is presented as evidence.

Legal framework applicable to dematerialised payslip retention

The dematerialisation of payslips is based on a stack of legal and regulatory texts that must be mastered to ensure full compliance.

French Labour Code

• Article L. 3243-2: permits the provision of payslips in electronic form, subject to the employee's right to object.
• Article L. 3243-4: sets the obligation to retain payslips for 50 years or until the employee reaches age 75.
• Article R. 3243-5: specifies the technical methods guaranteeing the integrity and confidentiality of the electronic payslip.

Law n° 2016-1088 of 8 August 2016 (Labour Law, known as the El Khomri Law): the first major law to generalise payslip dematerialisation in France, with the inverted consent mechanism.

Law n° 2016-1321 of 7 October 2016 (Republic Digital Law) and decree n° 2018-418 of 30 May 2018: define the framework for personal digital safe deposits, their qualification conditions and the obligations of providers.

eIDAS Regulation n° 910/2014: provides the European framework for trust services, notably electronic seals (articles 35 and onwards) and qualified timestamping (article 41). A qualified timestamp benefits from a legal presumption of accuracy regarding the date and integrity of data in all Member States.

Civil Code, articles 1366-1367: establish the principle of equivalence between electronic and paper writing, provided that the identity of the author and the integrity of the document are guaranteed. Article 1367 defines electronic signature and its probative effects.

GDPR Regulation n° 2016/679: applies in full to personal data contained in payslips. The employer, as data controller, must notably respect the minimisation principle (article 5), define proportionate retention periods (article 13) and implement appropriate security measures (article 32).

AFNOR standard NF Z42-013 (electronic archiving) and ISO 14641 standard: define the functional and technical requirements for electronic archiving systems with probative value (SAE). Compliance with them is highly recommended for any digital safe deposit provider.

NIS 2 Directive (2022/2555/EU), transposed into French law by law n° 2024-449 of 21 May 2024: strengthens cybersecurity obligations for essential service operators, among which large-scale digital archiving providers may be counted.

Risks in case of non-compliance: an employer who does not comply with retention conditions is exposed to employment tribunal sanctions (inability to prove salary payment), URSSAF adjustments (inability to justify contributions paid) and administrative fines. Non-compliance with GDPR may result in CNIL sanctions of up to €20 million or 4% of global annual turnover.

Usage scenarios: long-term retention in practice

Scenario 1 — A mid-sized industrial company with 800 employees undergoing digital transition

An industrial company employing around 800 people, spread across three production sites, decides to dematerialise all of its payslips. Before the migration, HR teams managed a volume of 9,600 paper payslips per year, stored in secure cabinets, with an estimated document management cost of €4.50 per payslip (printing, enveloping, postage, physical archiving). By switching to a certified NF 461 digital safe deposit, the company reduces this cost to less than €0.80 per payslip, an annual saving of nearly €35,000. Over the 50-year legal retention period, the cumulative saving is considerable. More importantly, during a URSSAF inspection covering the last 5 years, the HR department is able to produce within minutes all the requested payslips, with their qualified timestamp and complete audit trail. The inspector concludes the inspection without adjustment related to missing documentation.

Scenario 2 — A network of SMEs in the private healthcare sector

A grouping of private care facilities employing around 1,200 employees — doctors, nurses, administrative staff — faces a specific issue: its employees show high mobility and change facilities every 3 to 5 years on average. With each departure, the question of payslip portability arises. By deploying a personal digital safe deposit attached to each employee — and not solely to the employer — the grouping allows each collaborator to retain access to their payslips even after contract termination. When requesting the validation of quarters with a CARSAT, an employee who worked in three different facilities can produce all their payslips over 22 years in just a few clicks. The procedure, which previously took several weeks of research in sometimes incomplete paper archives, is reduced to less than an hour.

Scenario 3 — An accountancy firm managing payroll for micro-enterprises

An accountancy firm handling outsourced payroll for around fifty micro-enterprise clients (approximately 300 employees in total) switches its payslip delivery process to an integrated SaaS solution. Before dematerialisation, the firm printed and transmitted payslips by post or email — with no guarantee of integrity. In the event of a dispute between an employer client and one of their employees, the firm had no proof of compliant delivery. After deploying a digital safe deposit solution with timestamping and logging, the firm can certify with certainty the date and conditions of delivery of each payslip. Over the 18 months following the migration, two employment tribunal challenges relating to salary recalls are rejected thanks to the strength of the audit trail produced. The firm also improves its value proposition to its micro-enterprise clients, who benefit from a level of compliance previously reserved for large companies.

Conclusion

The dematerialised payslip has full legal value in France, provided that three pillars are rigorously respected: the technical integrity of the document, the confidentiality of the personal data it contains, and guaranteed retention for 50 years in a certified digital safe deposit. These requirements, which stem from the Labour Code, eIDAS regulation and GDPR, are not mere formalities: they determine the employer's ability to defend themselves in the event of an employment tribunal dispute or URSSAF inspection.

Certyneo supports HR teams in this transition by offering an integrated solution combining generation, signature, qualified timestamping and long-term archiving of payslips. To discover how to secure your dematerialised payroll process and estimate your potential gains, calculate your ROI with our simulator or contact our team for a personalised demonstration.