Legal Compliance Employment Law: Employer Obligations

Legal compliance in employment law constitutes a strategic issue for any business, regardless of size. In France, the Labour Code imposes on employers a set of precise obligations covering contract drafting, leave management, occupational health and safety prevention, and the protection of employees' personal data. Failure to comply with these obligations exposes the company to potentially heavy administrative, criminal and civil penalties. In a context of accelerated digitalisation, the dematerialisation of HR documents — employment contracts, amendments, company agreements — raises new questions regarding legal validity. This article examines the main employer obligations, associated risks and best practices to secure employment law compliance.

Fundamental contractual obligations of the employer

Employers are required to formalise the employment relationship in writing in the vast majority of situations. This obligation, once limited to fixed-term contracts (FTC), has expanded considerably under the impetus of European law.

Employment contract: mandatory content and deadlines

Since the transposition of Directive (EU) 2019/1152 on transparent and predictable working conditions, codified in articles L1221-5 and following of the Labour Code, the employer must provide the employee, within seven calendar days of hiring, with a written document containing at minimum:

• The identity of the parties and the workplace

• The job title, employment category and nature of work

• The date work begins

• Working hours (full-time or part-time)

• Remuneration (base salary, bonuses and benefits)

• Annual paid leave duration

• The procedure to be followed by the employer and employee in case of termination of the employment relationship

• Applicable collective agreements

For permanent contracts (CDI), whilst no formal written obligation is expressly provided by the Labour Code for the contract itself, the provision of a single information document (DUI) is now mandatory since 1 August 2022. Non-compliance with this obligation exposes the employer to a fine of €750 per employee concerned (4th class misdemeanour).

Amendments and modifications to the employment contract

Any modification to an essential element of the employment contract — remuneration, working hours, workplace involving a change in geographical sector — requires the written agreement signed by the employee. The case law of the Court of Cassation is consistent on this point: unilateral modification of an essential element constitutes serious misconduct that may justify an employee taking action for wrongful termination (Cass. Soc., 8 October 1987, no. 84-41.902 and consistent case law).

The dematerialisation of these documents via electronic signature allows processes to be accelerated whilst guaranteeing traceability and the probative value of exchanges.

Obligations regarding health, safety and occupational risk prevention

Article L4121-1 of the Labour Code imposes on employers a duty of care result towards their employees. This obligation is based on several mandatory documentary devices.

The Document for the Assessment of Occupational Risks (DUERP)

The DUERP is mandatory for all companies from the first employee, under Decree no. 2001-1016 of 5 November 2001, amended by Law no. 2021-1018 of 2 August 2021 known as the "Work Health Law". From 1 July 2023 for companies with more than 150 employees (and from 1 July 2024 for others), the DUERP must be filed on a dedicated digital portal managed by OPCO.

The DUERP must be updated:

• At least once per year in companies with 11 or more employees

• When any decision on significant reorganisation modifying working conditions

• When additional information on a risk is gathered

Sanction for failure: the absence of DUERP constitutes inexcusable negligence on the employer's part in case of workplace accident or occupational illness, entitling the employee to an increase in annuity (Cass. Soc., 28 February 2002, no. 00-11.793).

Safety training and mandatory registers

The employer must organise practical and appropriate safety training for any newly hired worker, upon change of position or technique (article L4141-2 of the Labour Code). This training must be recorded in a training register. Moreover, the employer must keep up to date:

• The single personnel register (article L1221-13)

• The register of minor workplace accidents (for authorised companies)

• The safety register for public access establishments or establishments subject to the Labour Code

The digitisation of these registers is permitted provided their integrity, accessibility and inviolability are guaranteed, which advanced electronic signature solutions compliant with the eIDAS regulation allow.

Employer obligations regarding working time and remuneration

Compliance with rules on working hours and pay constitutes one of labour inspection's priority control areas.

Maximum working hours and mandatory rest periods

The Labour Code sets strict limits:

• Maximum daily working hours: 10 hours (article L3121-18), extended to 12 hours by derogation

• Maximum weekly working hours: 48 hours in any given week (article L3121-20) and 44 hours on average over 12 consecutive weeks (article L3121-22)

• Daily rest: minimum 11 consecutive hours (article L3131-1)

• Weekly rest: minimum 35 consecutive hours (24h + 11h daily rest)

Working day forfeit agreements, applicable to managers and certain autonomous employees, are subject to specific rules and must imperatively be based on a valid collective agreement (article L3121-64). The employer must moreover ensure regular monitoring of the workload of the employee on a forfeit day basis under penalty of having the forfeit declared unenforceable.

The payslip and related obligations

The dematerialised payslip is now the standard since Ordinance no. 2017-1387 of 22 September 2017: the employer can provide the payslip in electronic form without prior employee consent, unless the latter objects. The payslip must be kept for 5 years by the employer and made available to the employee for 50 years or until age 75 via the personal training account or any other secure digital space.

Payslip compliance also requires compliance with the simplified format resulting from Decree no. 2016-190 of 25 February 2016 (Labour Ministry model).

Obligations relating to employee representation and collective bargaining

Upon reaching certain workforce thresholds, employers are subject to additional obligations in terms of social governance.

The Social and Economic Committee (CSE)

Since the Macron ordinances of 22 September 2017 (Ordinance no. 2017-1386), all companies with at least 11 employees must organise elections to establish a Social and Economic Committee (CSE). The employer must:

• Organise elections within 90 days of informing employees

• Provide the CSE with necessary resources (premises, delegation time, budget)

• Inform and consult the CSE on strategic directions, economic situation and company social policy

Failure to establish the CSE or organise elections constitutes an obstruction offence punishable by a €7,500 fine for the legal entity (article L2317-1 of the Labour Code).

Mandatory negotiation in the company (NOE)

In companies with union representatives, the employer is required to engage in mandatory negotiations according to the following frequency (articles L2242-1 and following):

• Each year: on remuneration, working time, value sharing and professional equality

• Every three years: on employment management and professional development (GEPP) in companies with more than 300 employees

Electronic signature of negotiation minutes and company agreements, via advanced electronic signature, provides reinforced probative value and simplifies the filing procedure on the TéléAccords platform.

Protection of employees' personal data: a GDPR-integrated obligation

The employer, as the data controller under the GDPR (Regulation (EU) 2016/679), must comply with a set of specific obligations within the scope of the employment relationship.

HR processing and legal basis

The processing of employees' personal data must be based on a valid legal basis. In the employment context, the main legal bases mobilised are:

• Performance of the employment contract (article 6.1.b of GDPR) for pay management, leave, training

• Legal obligation (article 6.1.c) for DSN declaration, maintaining mandatory registers

• Legitimate interest (article 6.1.f) for certain monitoring devices, subject to rigorous balancing

The employer must inform employees of the existence of processing concerning them via an information notice attached to the employment contract (article 13 of GDPR). The record of processing activities (RAP) must imperatively list HR processing.

Retention periods and right to erasure

The CNIL has published sectoral benchmarks clarifying retention periods applicable to HR data. By way of example:

• Unsuccessful candidate data: maximum 2 years

• Employment contracts and related documents: 5 years after contract termination

• Payslips: 5 years (employer) and made available for 50 years (employee)

• Video surveillance data in the company: 1 month as a general rule

Companies that dematerialise their HR processes must integrate these constraints into their document management policy. Discover how advanced electronic signature can help you produce documents compliant with current legal requirements.

Legal framework applicable to employer compliance in employment law

Employer legal compliance in employment law is part of a dense normative corpus, articulating national and European law.

Labour Code (legislative and regulatory parts): fundamental basis, it governs all individual and collective employment relationships. Articles L1221-1 and following regulate the employment contract, whilst articles L4121-1 to L4121-5 define employer safety obligations.

Directive (EU) 2019/1152 of 20 June 2019 on transparent and predictable working conditions in the European Union, transposed into French law by Decree no. 2022-1173 of 25 August 2022: it requires the provision of the Single Information Document (DUI) within seven days of hiring.

Regulation eIDAS no. 910/2014 and its successor eIDAS 2.0 (Regulation (EU) 2024/1183): they define levels of electronic signature (simple, advanced, qualified) and their legal value. In accordance with article 25 of eIDAS, a qualified electronic signature (QES) produces the same legal effects as a handwritten signature in all member states. For employment contracts, advanced electronic signature (AES) provides a sufficient level of assurance in the vast majority of situations.

Civil Code, articles 1366 and 1367: article 1366 recognises electronic documents the same probative force as a document on paper, provided the person is duly identified and the document is established and kept in conditions guaranteeing its integrity. Article 1367 clarifies that an electronic signature consists of the use of a reliable procedure for identifying the signatory guaranteeing their connection to the document.

GDPR no. 2016/679 of 27 April 2016: applicable to all processing of employees' personal data. Non-compliance with GDPR obligations exposes the employer to fines up to 4% of annual global turnover or €20 million (article 83 of GDPR). In France, the CNIL has imposed several significant sanctions against employers for breaching GDPR obligations in HR matters.

ETSI Standards EN 319 132 and EN 319 122: they define formats for advanced electronic signature XAdES and CAdES, guaranteeing interoperability and longevity of signatures over time.

Law no. 2021-1018 of 2 August 2021 (Work Health Law): strengthens primary prevention obligations, particularly the updating and digital filing of DUERP.

Macron Ordinances of 22 September 2017 (no. 2017-1385, no. 2017-1386, no. 2017-1387, no. 2017-1388): fundamentally reform employment law, establishing the CSE and relaxing the collective bargaining framework.

Employers who breach these texts face criminal sanctions (obstruction offence, hidden employment), civil sanctions (nullity of acts, damages) and administrative sanctions (DRIEETS formal notice, administrative closure). Using certified digital tools significantly reduces these risks.

Use cases: how companies secure their employment law compliance

Case study 1: A 80-employee IT services SME accelerates the signing of its contracts and amendments

An SME in the IT services sector, managing about 80 permanent employees and regularly using seasonal fixed-term reinforcements, faced average delays of 8 to 12 days to collect signatures on employment contracts and amendments. These delays exposed the company to a risk of non-compliance with the obligation to provide the DUI within seven days (Directive 2019/1152). By deploying an advanced electronic signature solution integrated into its HRIS, the SME reduced the average signing delay to less than 24 hours. The rate of documents signed within the legal deadline rose from 61% to 97%. Savings made on printing, postal sending and document management costs were estimated at approximately €8,500 per year, representing a positive ROI within four months of use.

Case study 2: A 350-employee industrial group digitalises its DUERP and safety protocols

A mid-sized industrial group, operating across three production sites and employing 350 staff, had to meet the digital filing obligation for DUERP established by the 2021 Work Health Law. The multiplicity of sites and complexity of annual updates generated documentary inconsistencies and a high risk of non-enforceability in case of inspection. By digitising the entire process — collaborative drafting, validation by CSE members via electronic signature, automatic filing on the OPCO portal — the group reduced annual DUERP update time by three (from 6 weeks to 2 weeks). Enhanced traceability allowed it to demonstrate compliance during an unannounced labour inspection, avoiding a formal notice.

Case study 3: A quick-service restaurant franchise network secures its company agreements and mandatory negotiations

A quick-service restaurant franchise network, encompassing about thirty affiliated establishments under a head office employing over 400 employees in total, had to organise mandatory annual negotiations on remuneration and professional equality. The geographical dispersion of union representatives and signatories complicated the collection of signatures on negotiation minutes and company agreements. The deployment of an eIDAS-compliant electronic signature solution streamlined the multi-party signature process, reducing the time to finalise agreements from an average of 21 days to less than 5 days. Automatic filing on TéléAccords, generated from the platform, also eliminated procedural error risks during filing, a frequent source of rejections previously.

Conclusion

Legal compliance in employment law is an ongoing project for employers: contractual obligations, risk prevention, working time management, employee representation and data protection form a demanding normative whole, whose non-compliance can be costly in terms of sanctions and social reputation. The digitalisation of HR processes — and in particular eIDAS-compliant electronic signature — is now one of the most effective levers to combine speed of execution, probative value and regulatory compliance.

Certyneo supports you in securing all your HR documents: employment contracts, amendments, company agreements, DUERP and much more. Contact us or request a demo to concretely measure the gains you could achieve. Ready to take action? Start signing in compliance today.