Legal compliance in employment law: employer obligations

Legal compliance in employment law is now one of the absolute priorities for HR departments and business leaders. In 2026, the French and European regulatory framework has become considerably denser: strengthened documentary obligations, dematerialisation of contracts, GDPR applied to employee data, more frequent labour inspectorate controls. A single irregularity can expose the employer to criminal sanctions, URSSAF back-assessments or costly employment tribunal disputes. This article deciphers the main employer obligations in terms of legal compliance in employment law — from contract drafting to document retention — and presents best practices to secure each stage of the employee lifecycle.

The foundations of employer compliance in employment law

The obligation to formalise the employment contract

The employment contract is the cornerstone of the employment relationship. Whilst a full-time permanent contract can theoretically remain verbal, practical reality imposes written formalisation. For fixed-term contracts, temporary employment contracts, part-time contracts or apprenticeship contracts, writing is mandatory under penalty of requalification (article L. 1242-12 of the French Labour Code for fixed-term contracts). European Directive 2019/1152 on transparent and predictable working conditions, transposed into French law by the Ordinance of 1 August 2022, has strengthened the obligation to provide written information: the employer must provide the employee, no later than the seventh calendar day following hiring, with a document specifying at minimum nine essential elements (identity of the parties, place of work, job title, start date, holiday entitlements, notice period, remuneration, working hours, applicable collective agreement).

Contract signature binds both parties. Since Law No. 2000-230 of 13 March 2000 and article 1366 of the Civil Code, electronic signature has the same legal value as handwritten signature, provided that the requirements for reliable identification of the signatory are met. This development paves the way for complete dematerialisation of the recruitment process, with significant operational gains for HR departments — provided a solution compliant with the eIDAS regulation is chosen.

Mandatory registers and notices

Every employer, regardless of company size, must maintain several mandatory registers:

• The unique personnel register (article L. 1221-13 of the French Labour Code): must be updated upon hiring and kept for five years after the employee's departure. It lists the surname, forename, nationality, date of birth, gender, employment, qualification, date of entry and departure of each worker.

• The document for evaluating occupational risks (DUERP): mandatory since the Decree of 5 November 2001, it must be updated at least once per year and kept for 40 years under the Health Law of 2 August 2021 (article L. 4121-3-1 of the French Labour Code). In the event of serious workplace accident or occupational illness, its absence or obsolescence constitutes inexcusable fault.

• The register of staff representatives / Works Council: in companies with 11 or more employees.

• Mandatory notices: title of the applicable collective agreement, contact details for the labour inspectorate, internal regulations (mandatory from 50 employees), gender equality in the workplace, moral and sexual harassment.

The absence of these documents exposes the employer to fines of up to €1,500 per affected employee (4th class misdemeanour), as well as increased penalties in the event of recidivism.

Working time and time tracking

Compliance with working time is a minefield. Article L. 3171-2 of the French Labour Code requires the employer to implement a system for recording working time duration for each employee whose working time is not predetermined. Since the CJEU ruling of 14 May 2019 (Deutsche Bank case), EU Member States are required to oblige employers to put in place an objective, reliable and accessible system for measuring daily working time. In France, this translates into increased obligations for annualised hours contracts, for which the employer must organise an individual annual meeting and produce a monthly control document.

Exceeding maximum durations (10 hours/day, 48 hours/week or 44 hours on average over 12 weeks) is liable to criminal prosecution. Unpaid or uncompensated overtime hours also constitute a frequent reason for employment tribunal referral.

Obligations regarding employee data protection (GDPR)

The employee, a data subject like any other

Since the GDPR came into force on 25 May 2018, employees' personal data benefits from the same protection as that of customers or prospects. The employer is a "controller" within the meaning of article 4 of Regulation 2016/679 and must, as such:

• Maintain a record of processing activities (article 30 GDPR) listing each processing involving employee data (payroll, absence management, video surveillance, time recording, professional email, etc.).

• Inform employees of the existence of processing activities, their purpose, retention period and their rights (articles 13 and 14 GDPR). This information must be provided upon hiring, typically via a notice attached to the employment contract.

• Regulate data transfers outside the EU: the use of HR tools hosted in the United States (payroll software, HR information systems, recruitment tools) must be subject to appropriate safeguards (standard contractual clauses, adequacy decision).

• Appoint a DPO if the main activity involves regular and systematic large-scale monitoring of data subjects.

The CNIL imposed several penalties in 2024 and 2025 on employers for failure to inform employees or excessive retention of time-tracking data. Fines can reach 4% of annual global turnover.

Video surveillance and employee monitoring

The right to respect for private life (article 9 of the Civil Code, article 8 of the ECHR) strictly limits the employer's powers of surveillance. Any implementation of a monitoring device (video surveillance, geolocation, keylogger, telephone monitoring) must:

• Be justified by a proportionate legitimate interest.

• Be subject to prior consultation of the Works Council (article L. 2312-38 of the French Labour Code).

• Be declared or the subject of an impact assessment (DPIA) depending on the case.

• Be the subject of individual notification to the affected employees.

The Court of Cassation has confirmed in several recent rulings (notably Soc. 10 November 2021, No. 20-12.263) that evidence obtained through unlawful surveillance devices is inadmissible in court, even when it demonstrates employee misconduct.

Securing contractual documents and HR procedures

From handwritten signature to qualified electronic signature

Dematerialisation of HR documents is now an inescapable reality. Employment contracts, amendments, consensual terminations, company agreements, end-of-contract documents: all can be signed electronically. Electronic signature for HR makes it possible to drastically reduce processing times whilst guaranteeing greater probative value than handwritten signature, thanks to timestamping metadata and authenticity certificates.

Three levels of signature are defined by the eIDAS Regulation (910/2014):

• Simple electronic signature (SES): sufficient for internal low-risk documents.

• Advanced electronic signature (AES): recommended for standard employment contracts. It guarantees signatory identification and document integrity.

• Qualified electronic signature (QES): legal equivalent of handwritten signature under article 25 eIDAS. Mandatory for certain high-risk legal acts.

For consensual terminations, the French administration (DREETS) has validated the use of advanced electronic signature since 2022, facilitating the TéléRC online procedure.

Conservation and archiving of employment documents

Compliance with documentation does not stop at signature: it imposes precise retention periods, often unknown to employers:

| Document | Legal retention period | |---|---| | Payslips | 50 years or until the employee's 75th birthday | | Employment contracts | 5 years after the end of contract | | DUERP | 40 years | | Unique personnel register | 5 years after departure | | Documents relating to social contributions | 3 years (URSSAF) | | Tax returns related to payroll | 6 years |

An electronic archiving system with probative value, compliant with the NF Z 42-013 standard and the RGS reference system, guarantees the integrity and readability of documents over their entire legal retention period. Certyneo natively integrates secure archiving functions, making it possible to constitute a reliable audit trail in the event of inspection or dispute.

Preventing disputes and managing employment tribunal contentious matters

Main reasons for employment tribunal referrals

In 2024, French employment tribunals recorded over 140,000 new cases, according to Ministry of Justice data. The main reasons for contentious matters are:

• Dismissal without real and serious cause (approximately 35% of cases)

• Non-payment of overtime

• Requalification of fixed-term contract as permanent contract

• Moral or sexual harassment

• Non-compliance with termination procedures (summons, preliminary meeting, written notification)

In the vast majority of these disputes, the employer's ability to produce enforceable documentary evidence is decisive. A contract electronically signed with certified timestamping, communications securely retained, a DUERP regularly updated: all elements that can tip the scales in favour of the employer.

The disciplinary procedure: strict formalities to follow

Any disciplinary sanction — warning, suspension, dismissal for misconduct — must comply with strict formalities defined by articles L. 1332-1 to L. 1332-4 of the French Labour Code:

• Summons to preliminary meeting: by registered mail or handed over against written receipt, at least 5 working days before the meeting.

• Preliminary meeting: the employee may be assisted by a staff member or, in the absence of representatives, by an external adviser listed on the prefectural list.

• Notification of sanction: within a minimum of 2 working days and maximum of 1 month after the meeting, by motivated letter.

Any failure to comply with this procedure results in formal irregularity of the sanction, or even its nullity. Dematerialisation of these steps — via electronic registered mail or electronic signature — is now fully recognised, provided that effective receipt by the employee can be proven.

To optimise and secure all of these documentary processes, HR teams can rely on our comprehensive guide to electronic signature or explore features dedicated to electronic signature in business.

Legal framework applicable to compliance in employment law

Employer compliance rests on an accumulation of national and European standards whose mastery is essential.

French Labour Code: The fundamental provisions originate from the Labour Code, regularly updated by ordinances and laws. Among the most significant texts: Ordinance No. 2017-1387 of 22 September 2017 (the Macron ordinances) which fundamentally reformed staff representation and dismissal rules, Law No. 2021-1104 of 22 August 2021 (Climate Law) which extended the retention period for DUERP to 40 years, and Law No. 2022-1598 of 21 December 2022 on emergency measures relating to the labour market.

European Directive 2019/1152: Transposed into French law by decree of 1 August 2022, it requires the employer to provide in writing, within 7 calendar days of taking up employment, essential information on working conditions. Failure to comply with this obligation engages the employer's civil liability.

eIDAS Regulation 910/2014: It constitutes the legal foundation for electronic signature in the EU. Article 25 provides that a qualified electronic signature produces the same legal effects as a handwritten signature. Articles 26 and 28 define the technical requirements for advanced and qualified signatures. eIDAS 2.0 Regulation (Regulation 2024/1183, which entered into force on 20 May 2024) strengthens the European digital identity wallet, with direct implications for signatory identification in HR processes.

Civil Code, articles 1366-1367: Article 1366 provides that "electronic writing has the same probative force as writing on paper, provided that the person from whom it originates can be duly identified and it is established and retained in conditions such as to guarantee its integrity". Article 1367 defines electronic signature and refers to the conditions set by decree in the Council of State (Decree 2017-1416 of 28 September 2017).

GDPR 2016/679: Employee data management is subject to the principles of lawfulness, fairness, minimisation, accuracy and storage limitation (article 5 GDPR). Article 88 GDPR allows Member States to provide specific rules for processing data in the context of employment relationships. In France, the modified Data Protection Act (Law No. 78-17) and CNIL decisions supplement this system.

ETSI EN 319 132 Standard: This European standard defines the formats for advanced electronic signature (XAdES, PAdES, CAdES) and the compliance profiles applicable to trust service providers. It is directly relevant for employers who dematerialise their contractual documents.

Risks in case of non-compliance: Sanctions can be criminal (imprisonment up to 1 year and €3,750 fine for certain employment law violations), civil (damages before the CPH), administrative (temporary closure of establishment, exclusion from public contracts) and social (URSSAF back-assessment in case of irregularities in contract classification or contribution calculation).

Concrete usage scenarios

An 85-employee service company SME facing a labour inspectorate audit

An SME in the IT services sector with approximately 85 employees receives notice of a labour inspectorate inspection concerning the employment conditions of its developers on annualised hours contracts. The inspector requests production of monthly time-recording control documents for the previous three years, reports of annual annualised hours contract meetings and employment contracts for all affected employees.

Before deploying an electronic signature and digital archiving solution, the company stored its contracts in paper form in filing cabinets scattered across sites. Reconstituting the files took several weeks, with missing documents for 12 employees. Following a formal notice, the employer had to regularise its situation and pay an administrative settlement fine.

Since complete dematerialisation of its HR processes via an electronic signature platform connected to its HR information system, the company has a complete audit trail for each document: certified signature date, signatory identity, version history. At a second inspection two years later, all required documents were produced in less than two hours. Companies that have adopted structured HR document management have reduced audit preparation time by an average of 70 to 85%, according to sector benchmarks published by HR transformation specialists.

A distribution group with 400 seasonal hirings annually

A regional food distribution group hires approximately 400 seasonal workers each year for a 3 to 6-month period. Each hiring involves signing a fixed-term contract, a GDPR information notice, an internal regulations handover certificate and a job sheet. With traditional methods (postal dispatch or signature on-site), the average time between offer acceptance and contract signature was 5 to 7 working days, with an incomplete file rate of 18%.

Following deployment of an advanced electronic signature solution integrated with their ATS (Applicant Tracking System), contracts are automatically generated from candidate data and sent for signature within minutes. The employee signs from their smartphone, without travel. The time to finalise files fell to under 24 hours, the incomplete file rate to less than 2%. The cost savings from eliminating registered mail dispatch and reducing re-entry represents tens of thousands of euros annually for this volume type.

An HR consulting firm assisting clients with compliance

An HR consulting firm specialising in employment law assists around twenty SME clients in achieving employment law compliance. The firm identified that 60% of its clients did not have an up-to-date DUERP, 45% did not fully comply with information obligations under Directive 2019/1152, and 30% used fixed-term contract templates with insufficient or outdated clauses.

By integrating an automatic contract generation tool compliant with regulations (see our AI-powered contract generator) and an electronic signature solution into its service offering, the firm was able to industrialise documentary compliance for its clients. Contract templates are updated in real time based on legislative changes, and each signed document is automatically archived with certified timestamping. Result: a 40% reduction in time spent on document production and an increase in the firm's support capacity without additional recruitment.

Conclusion

Legal compliance in employment law is not optional: it is a permanent obligation that engages the civil, criminal and social liability of every employer. From contract drafting to payslip archiving, passing through employee data protection and compliance with disciplinary procedures, each stage of the employee lifecycle is governed by a dense and constantly evolving regulatory framework.

Dematerialisation of HR processes, supported by electronic signature solutions compliant with the eIDAS Regulation, is now the most effective lever for reconciling compliance, operational efficiency and risk reduction. Certyneo supports companies of all sizes in this transition, with a secure platform, compliant document templates and probative value archiving.

Ready to secure your HR processes and strengthen your employment law compliance? Discover Certyneo pricing and get started today.