Legal Compliance Employment Law: Employer Obligations

Legal compliance in employment law represents one of the major challenges for any enterprise, regardless of size. In France, the Labour Code imposes a precise corpus of obligations on each employer: from drafting the employment contract to managing conventional terminations, including mandatory notices and security of employees' personal data. In 2026, this regulatory framework has become even more stringent, particularly through the effects of eIDAS 2.0 regulation, GDPR requirements and the progressive generalisation of HR digitalisation. This article comprehensively presents employer obligations, associated legal risks and available tools to satisfy them without flaw.

Foundations of HR Compliance: Contractual Obligations

The Employment Contract: a Precise Legal Requirement

Every employer must provide the employee, no later than two business days following hire, with a written document setting out the essential elements of the working relationship — in accordance with the French transposition of European Directive 2019/1152 of 20 June 2019 on transparent and predictable working conditions. For permanent contracts (CDI), the provision of a written contract is not strictly mandatory in legal terms, but it is imperatively recommended whenever a collective agreement requires it. For fixed-term contracts (CDD), part-time contracts and apprenticeship contracts, the written contract is mandatory under penalty of reclassification.

The contract must state: the identity of the parties, place of work, job title, start date, working hours, remuneration, probationary period duration and applicable collective agreement. Any omission exposes the employer to damages.

Prior Declaration of Recruitment (DPAE)

Mandatory for each new hire, the DPAE must be submitted to the URSSAF no later than 8 days before the employee starts work. This declaration automatically triggers Social Security affiliation, creation of the pension file and enrolment with the occupational health service. Failure to file a DPAE constitutes the offence of undeclared work, punished by 3 years' imprisonment and €45,000 fine for individuals (article L.8224-1 of the Labour Code).

Medical Examination on Hire

Since the occupational health reform from the 2016 Labour Act and its implementing decrees, the medical examination on hire has been replaced by a medical information and prevention visit (VIP) in most cases. This visit must take place no later than 3 months following the start date (or before, for high-risk roles). The employer is responsible for organising and monitoring these visits. Non-compliance with this obligation may engage the employer's civil liability, particularly in case of workplace accident or occupational illness.

Obligations During Execution of the Contract

Working Time, Rest and Mandatory Notices

The employer must ensure strict monitoring of each employee's working time, in accordance with articles L.3121-1 and following of the Labour Code. Legal maximum hours (10 hours per day, 48 hours per week, 44 hours on average over 12 weeks) must be strictly observed. Since the CJEU ruling of 14 May 2019 (case C-55/18, CCOO v Deutsche Bank), every employer is required to implement an objective, reliable and accessible system for measuring daily working time.

Regarding mandatory notices, the employer must display or make available to employees the following information:

• Collective working hours

• Title and contact details of the competent labour inspector

• Address and emergency services contact number

• Fire and evacuation procedures

• Internal rules (for enterprises with at least 50 employees)

• Texts relating to equal pay between women and men

• Remedies for moral and sexual harassment

Failure to display this information is sanctioned by a fine up to €1,500 per offence recorded.

Professional Training and the Personal Training Account (CPF)

The employer has an obligation to ensure employees adapt to developments in their role and maintain their employability. It must credit each employee's Personal Training Account (CPF) with €500 per year (€800 for low-skilled employees), up to a maximum of €5,000 (€8,000 for low-skilled employees). A professional development interview must be held every two years, and a review at six years to verify the employee has benefited from at least one non-mandatory training action, salary or professional progression, or acquisition of certification elements.

Protection of Employee Personal Data

The GDPR (EU Regulation 2016/679) applies fully to processing of employee personal data. The employer, as data controller, must:

• Keep a record of processing activities (article 30 GDPR)

• Inform employees of processing concerning them (articles 13 and 14)

• Limit collection to strictly necessary data (minimisation principle)

• Regulate transfers outside the EU

• Appoint a Data Protection Officer (DPO) if its activity requires it

GDPR violations may result in fines up to €20 million or 4% of annual worldwide turnover, whichever is higher. In 2025, the CNIL issued several sanctions against employers for excessive retention periods of HR data.

Contract Termination Management: Procedural Obligations

Dismissal: Strict Formalism

Dismissal for personal or economic reasons must follow the rigorous procedure set out in articles L.1232-1 and following of the Labour Code. The employer must:

• Summon the employee to a preliminary meeting by registered letter with acknowledgement of receipt (LRAR) or delivery to hand against signed acknowledgement

• Observe a minimum period of 5 business days between summons and meeting

• Conduct the preliminary meeting with possible employee assistance

• Notify dismissal by LRAR, no earlier than 2 business days after the meeting

• Specify the grounds for dismissal in the letter

The dismissal letter establishes the limits of dispute in case of judicial challenge. Dismissal without real and serious cause exposes the employer to Macron scale compensation (0.5 to 20 months' gross salary depending on seniority, article L.1235-3 of the Labour Code).

Conventional Termination and Digitalisation

Since the generalisation of the TéléRC service on the Mon.Service-Public.fr portal, individual conventional termination must be endorsed online by the DREETS (Regional Directorate for Economy, Employment, Work and Solidarity). This process involves signing the CERFA form n°14598 by both parties, with a 15-day cooling-off period.

Electronic signature secures and significantly accelerates this procedure: the conventional termination form can be electronically signed, with certified timestamp and audit trail, guaranteeing document integrity and traceability of consent from both parties.

Staff Representation and Social Dialogue

The Social and Economic Committee (CSE): Implementation Obligations

Since the Macron ordinances of 2017 (Act n°2017-1340 of 15 September 2017), every enterprise with at least 11 employees for 12 consecutive months is required to establish a Social and Economic Committee (CSE). CSE elections must be held every 4 years. Failure to establish the CSE constitutes an obstruction offence, punished by 1 year's imprisonment and €7,500 fine (article L.2317-1 of the Labour Code).

The CSE has powers in health, safety and working conditions (SSCT) for enterprises with at least 50 employees, including the right to alert in case of serious and imminent danger.

Collective Bargaining and Professional Equality Index

Enterprises with at least 50 employees are subject to annual negotiation obligations on salaries, working time and profit-sharing. Since the Act of 5 September 2018 (Act n°2018-771 for freedom to choose one's professional future), enterprises with at least 50 employees must calculate and publish their Professional Equality Index (Egapro) annually, before 1 March. A score below 75 out of 100 requires the enterprise to define corrective measures under penalty of financial penalty reaching 1% of the wage bill.

Health, Safety and Risk Prevention

The Unique Document for Assessment of Professional Risks (DUERP)

Mandatory since Decree n°2001-1016 of 5 November 2001, the Unique Document for Assessment of Professional Risks (DUERP) must be updated at least annually and whenever significant modifications affecting working conditions occur. Since the Act of 2 August 2021 (Act n°2021-1018), enterprises with at least 150 employees must file the DUERP on a national digital portal managed by the OPCOs. This document must be retained for at least 40 years.

Failure to produce a DUERP is sanctioned by a fifth-class fine (€1,500 for individuals), but more importantly engages the employer's criminal liability in case of workplace accident, on the basis of breach of the safety obligation.

Prevention of Harassment and Psychosocial Risks

The employer is bound by an active obligation to prevent moral harassment (article L.1152-4 of the Labour Code) and sexual harassment (article L.1153-5). In enterprises with at least 250 employees, a Sexual Harassment Referent must be appointed from among CSE members. Every enterprise must also integrate psychosocial risks (RPS) into its DUERP.

Bringing these procedures into compliance can be greatly facilitated by digitalisation: formalised alerts, electronically signed reporting forms, traceability of processing steps. Consult our documentation to understand how to integrate these tools into your HR organisation.

Legal Framework Applicable to Employer Compliance

Foundational Texts of Employment Law

Employer legal compliance rests on a dense legislative corpus whose pillars are:

• Labour Code (Legislative and regulatory parts): employment contracts (L.1221-1 et seq.), working time (L.3121-1 et seq.), health-safety (L.4121-1 et seq.), staff representation (L.2311-1 et seq.), dismissal (L.1232-1 et seq.), training (L.6311-1 et seq.)

• Act n°2017-1340 of 15 September 2017 authorising ordinances to strengthen social dialogue (Macron ordinances, CSE creation)

• Act n°2021-1018 of 2 August 2021 to strengthen occupational health prevention (Occupational Health Act: DUERP reform, enhanced medical follow-up)

• European Directive 2019/1152 on transparent and predictable working conditions, transposed into French law by Ordinance n°2022-1104 of 3 August 2022

Electronic Signature and Legal Value of HR Documents

Electronic signature of employment documents (contracts, amendments, conventional terminations, collective agreements) is governed by:

• Civil Code, articles 1366 and 1367: "Electronic writing has the same probative force as writing on paper"; "Electronic signature consists in the use of a reliable identification process guaranteeing its link with the act to which it is attached."

• eIDAS Regulation n°910/2014 (now revised by eIDAS 2.0, EU Regulation 2024/1183): defines three levels of electronic signature — simple (SES), advanced (AdES) and qualified (QES). Qualified signature is presumed equivalent to handwritten signature throughout the EU (article 25§2).

• ETSI EN 319 132 standard: specifies technical requirements for advanced electronic signatures in XAdES, PAdES and CAdES format used in dematerialised contractual documents.

• Order of 22 March 2019 on electronic signature of notarial deeds, progressively extending uses to regulated professions.

Data Protection and GDPR in HR

• EU Regulation 2016/679 (GDPR): legal basis for processing employee data (article 6§1b — contract execution), retention periods (5 years post-termination for payslips), individual rights (access, rectification, limited erasure)

• NIS2 Directive (EU Directive 2022/2555), transposed into French law by the Act of 11 April 2024: imposes strengthened cybersecurity requirements on essential and important entities, including security of HR systems and electronic signature platforms

• CNIL Deliberation n°2002-017 and sectoral benchmarks: specifically govern data processing in the context of personnel management

Risks and Sanctions

Legal risks for non-compliant employers are multiple: criminal sanctions (obstruction, undeclared work), administrative fines (CNIL up to 4% of worldwide turnover), employment tribunal condemnations (Macron scale, salary arrears, damages), and growing reputational risks at the time of ESG rankings. Using an electronic signature solution constitutes an essential barrier against challenge to the validity of HR acts.

Usage Scenarios: Electronic Signature Serving HR Compliance

Scenario 1: An Industrial SME of 180 Employees Digitalises its Contracts and Amendments

An industrial enterprise of medium size, managing approximately 180 employees across two sites, faced significant volumes of seasonal fixed-term contracts and amendments modifying working time. Paper processing caused average delays of 7 days between drafting and actual document signature, with a loss or filing error rate estimated at 12%. By adopting an advanced electronic signature solution (AdES) integrated with its SIRH, the SME reduced this delay to under 24 hours, reduced printing and archival costs by 65%, and secured signature traceability (timestamp, IP address, two-factor authentication). In case of employment tribunal dispute, the enterprise now has a complete audit trail, exportable as certified PDF, in accordance with eIDAS regulation requirements.

Scenario 2: A Multi-Site Hotel Group Secures its Conventional Terminations

A hospitality and restaurant operator managing around ten establishments and approximately 400 employees processed up to 40 conventional terminations annually, with an entirely paper-based procedure requiring postal exchanges. Endorsement delays lengthened due to form errors (incorrectly completed CERFA forms, missing signatures) and lost mail. After deploying a dedicated electronic signature workflow for conventional terminations — incorporating advanced signature for both parties, automatic form submission to DREETS via TéléRC and timestamped archival — form error rate fell to 2%, and average endorsement time decreased from 22 days to 17 days (including the incompressible legal 15-day cooling-off period). The HR department recovered on average 4 hours of administrative work per file.

Scenario 3: An HR Consulting Firm Guides Clients towards GDPR Compliance

An HR consulting firm specialising in human resources, supporting around twenty client enterprises in their social compliance, integrated electronic signature into its GDPR compliance services. For each client, the firm formalises processing records, employee privacy policies and data processing agreements (DPA) with qualified electronic signature (QES), guaranteeing irrefutable proof of informed consent and signature date. This approach enabled assisted enterprises to reduce CNIL audit exposure and hold documented evidence during internal audits. The firm was able to value this offering as a competitive differentiator, with client satisfaction measured at 94% on compliance commitments. To explore pricing options adapted to this type of use, our calculator allows estimating concrete gains according to the volume of documents processed.

Conclusion

Legal compliance in employment law is a permanent, evolving and multidimensional requirement for any employer in 2026. From contractual obligations on hire through to termination management, including data protection, staff representation and risk prevention, the regulatory framework leaves no room for approximation. Penalties incurred — criminal, civil and administrative — may jeopardise an enterprise's sustainability.

Digitalisation of HR processes, supported by eIDAS-compliant electronic signature solutions, today constitutes the most effective response to reconcile operational agility and legal rigour. It strengthens traceability, reduces delays and secures the probative value of each document.

Take action today: discover how Certyneo secures your HR obligations and simplifies your compliance. Contact our team or request a personalised demonstration.