Remote Work: Legal Rights and Obligations 2026

Remote work has become permanently established in the French professional landscape. According to figures published by DARES in 2025, nearly 35% of private sector employees practise remote work on a regular basis, compared to less than 10% before the 2020 health crisis. This massification has not occurred without friction: disputes over expense reimbursement, uncertainties around remote surveillance, gaps in contractual amendments… In 2026, the legislator and social partners have substantially refined the applicable framework. This article reviews the legal rights and obligations of remote work in 2026, so that neither employer nor employee is caught off guard.

The Legal Framework for Remote Work: From the 2020 NIA to 2026 Changes

Legislative Pillars Still in Force

Remote work is defined in French law by article L.1222-9 of the Labour Code, stemming from the Macron Ordinance no. 2017-1387 of 22 September 2017 and supplemented by the National Interprofessional Agreement (NIA) of 26 November 2020. These texts establish four fundamental principles: mutual voluntariness, reversibility, equal treatment between remote workers and on-site employees, and reimbursement of professional expenses.

In 2026, these pillars remain intact, but several implementing decrees and sectoral amendments have clarified practical procedures, particularly on three points: the right to disconnect (strengthened by a DGT circular of March 2025), the definition of "structured hybrid remote work" (which distinguishes contractually fixed days from floating days), and cybersecurity obligations following the transposition of the NIS 2 directive into French law in October 2024.

Amendment to the Employment Contract: A Formal Obligation

Article L.1222-9 paragraph 3 requires that remote work be formalised by an amendment to the employment contract or by a unilateral employer charter. In 2026, the practice of simple email exchanges is clearly insufficient: in the event of an employment tribunal dispute, courts require a document signed by both parties specifying:

• The number of remote work days per week or per month;

• Availability hours;

• The place where remote work is performed (home, approved coworking space, etc.);

• The terms of expense reimbursement (URSSAF flat rate or actual reimbursement);

• Equipment provided and applicable IT security rules.

To secure this amendment, more and more companies are turning to electronic signatures for HR, which provides enforceable and timestamped proof of employee consent, whilst accelerating processing times.

Employee Rights in Remote Work in 2026

Reimbursement of Professional Expenses

Reimbursement of remote work expenses remains one of the most frequent friction points. URSSAF has tolerated since 2021 a flat-rate allowance exempt from social contributions, revised annually. In 2026, this flat rate is set at 12.40 € per day of actual remote work, up to a limit of 60% of the monthly amount. Beyond that, evidence of actual expenses is required (electricity bills, internet subscriptions, office equipment invoices).

The employer cannot make remote work contingent on the employee waiving this reimbursement. Any contractual clause going this far is deemed unwritten.

Right to Disconnect and Digital Surveillance

The right to disconnect, enshrined in article L.2242-17 of the Labour Code since the El Khomri Act of 2016, has been considerably strengthened by conventional practice. In 2026, the CNIL has published new recommendations (deliberation no. 2025-042) strictly governing employee monitoring tools in remote work: screenshot capture software, keystroke tracking, real-time geolocation. These practices are presumed disproportionate unless justified documentation and prior information to the Works Committee and affected employees are provided.

Work Accident at Home

The Court of Cassation has confirmed in several recent rulings (2024-2025) that an accident occurring at home during work hours is presumed to be a work accident within the meaning of article L.411-1 of the Social Security Code. This presumption now extends to coworking spaces approved by the employer, which requires the latter to declare these locations to its professional liability insurer.

Employer Obligations Regarding Cybersecurity

The NIS 2 Directive and Its Impact on Remote Work

Transposed into French law by Act no. 2024-1119 of 4 December 2024, the NIS 2 directive (EU 2022/2555) considerably expands the scope of entities subject to enhanced cybersecurity requirements. In 2026, "essential entities" and "important entities" — approximately 15,000 organisations in France according to ANSSI estimates — must implement security policies explicitly covering remote work environments.

Concretely, this translates into:

• The obligation to provide a VPN or encrypted remote access solution;

• The provision of equipment managed by the company (MDM – Mobile Device Management);

• Employee training on phishing and social engineering risks;

• The implementation of multi-factor authentication (MFA) for access to information systems.

The penalties provided for by NIS 2 for essential entities can reach 10 million euros or 2% of global turnover. For important entities, the ceiling is 7 million euros or 1.4% of turnover.

GDPR and Remote Work: New Points of Vigilance

Remote work amplifies the risk of personal data breaches: connections from unsecured Wi-Fi networks, use of personal equipment, storage of confidential information in domestic environments. In 2026, the CNIL considers that the employer, as a data controller within the meaning of article 4 of GDPR no. 2016/679, must document in its processing register the specific measures adopted to secure remote work.

Companies that dematerialise their document flows — contracts, task orders, timesheets — have an interest in adopting a solution compliant with the eIDAS regulation and its traceability requirements to guarantee the integrity and authenticity of documents exchanged remotely.

Formalisation of Remote Work Agreements: Best Practices 2026

Charter or Collective Agreement: Which Form to Choose?

The employer has the choice between two avenues for governing remote work beyond the individual amendment:

• The collective agreement, negotiated with union delegates or the Works Committee, which is binding on all employees falling within its scope. It is more protective for the company as it prevails in any individual disputes.

• The unilateral charter, established after consultation with the Works Committee, which can be put in place more quickly but offers less legal security in case of dispute.

In 2026, 62% of companies with more than 50 employees have a collective agreement on remote work, compared to 41% in 2022 (source: Annual Report of the Ministry of Labour, 2025). The trend is clearly towards formalised negotiation.

Dematerialisation of HR Documents: A Compliance Issue

The proliferation of amendments, charters and documents related to remote work has prompted many HR departments to accelerate their digital transformation. Electronic signature in the company offers an appropriate solution: it allows you to sign an amendment remotely in a matter of minutes, timestamp the document and retain proof of integrity with a qualified trust service provider (QTSP) under the eIDAS regulation.

It is important to distinguish between the three levels of signature provided for by eIDAS — simple, advanced and qualified — depending on document criticality. For an amendment to the employment contract, advanced electronic signature (AES) is generally sufficient, whilst certain specific legal acts require a qualified signature. To choose the level suited to your HR context, the complete guide to electronic signature from Certyneo details each level and its implications.

Finally, for companies wishing to streamline their contractual footprint and automatically generate compliant templates of remote work amendments, the AI-powered contract generator from Certyneo represents a significant time saving whilst reducing drafting errors.

Legal Framework Applicable to Remote Work in 2026

The legal regime for remote work in France rests on a multi-layered architecture, combining national labour law, European law and sectoral agreements.

Labour Code

• Article L.1222-9: legal definition of remote work, principle of mutual voluntariness, obligation of formalisation by agreement or charter, right to return to on-site work.

• Article L.1222-10: employer obligations (cost reimbursement, information on usage restrictions, priority for return to on-site work).

• Article L.2242-17: annual obligation to negotiate on the right to disconnect as part of negotiations on quality of working life.

Social Security Code

• Article L.411-1: presumption of work accident applicable to a remote working employee during contracted hours.

European Law

• Regulation eIDAS no. 910/2014 and its revision eIDAS 2.0 (EU Regulation 2024/1183): define the levels of electronic signature (simple, advanced, qualified) and the obligations of qualified trust service providers (QTSP). Advanced signature meets the evidence requirements for most HR documents, in accordance with article 25 of the regulation.

• GDPR no. 2016/679: the data controller (employer) must guarantee the security of personal data processed in a remote work context (article 32), document measures in the processing register (article 30) and carry out a DPIA if processing presents a high risk (article 35).

• NIS 2 Directive (EU 2022/2555), transposed by Act no. 2024-1119 of 4 December 2024: imposes risk management measures covering remote work environments for essential and important entities. Sanctions up to 10 million euros or 2% of global turnover.

National Interprofessional Agreement (NIA) of 26 November 2020: reference for best practice on regular and occasional remote work, adopted by most sectoral agreements.

ETSI Standards

• ETSI EN 319 132: technical specifications for advanced electronic signatures (XAdES).

• ETSI EN 319 122: CAdES specifications for dematerialised contract documents.

Legal Risks Identified for the Employer

• Absence of written signed amendment: possible reclassification as unilateral contract amendment, exposing to dismissal without genuine and serious cause.

• Non-reimbursement of professional expenses: conviction for reimbursement plus late payment interest.

• Disproportionate surveillance of employees: CNIL penalty (up to 4% of global turnover), moral damage.

• Failure to secure IT systems in remote work: responsibility engaged under NIS 2 and GDPR in case of data breach.

Concrete Usage Scenarios

Scenario 1 — An 80-Employee IT Services SME Dematerialises Its Remote Work Amendments

An IT services SME had so far practised remote work informally, through simple email exchanges. Following a URSSAF inspection concerning expense reimbursement and an employment tribunal dispute regarding return to on-site procedures, the HR department decides to formalise all its remote work amendments. By integrating an eIDAS-compliant advanced electronic signature solution into its HRIS, the SME reduces the average time from 12 days (follow-ups, postal sends, signed returns) to less than 48 hours to obtain a signed amendment. The rate of contractual disputes falls by 40% in the following financial year. All documents are archived with probative value, with qualified timestamping, which greatly simplifies responses to labour inspection requests.

Scenario 2 — A Legal Advisory Firm Secures Its Document Flows in Hybrid Remote Work

A law firm with around twenty partners and associates operates in hybrid mode (3 days remote, 2 days on-site). Teams daily handle sensitive documents, contract drafts and confidential correspondence. Following the transposition of NIS 2, the managing partner instructs the Chief Information Security Officer to audit digital practices. It emerges that 30% of sensitive documents were being transmitted via unencrypted personal email accounts. The implementation of a certified signature and document sharing platform centralises flows, traces every action on the document and eliminates unsecured exchanges. The firm reduces its exposure to GDPR breaches and satisfies new NIS 2 requirements concerning cyber risk management related to remote work.

Scenario 3 — A 1,200-Employee Industrial Group Deploys a Remote Work Charter Negotiated with Unions

An industrial group with multiple sites in France must harmonise remote work practices following the merger of two entities with different HR cultures. The collective remote work agreement is negotiated with union delegates over six months. It covers 800 eligible positions, defines common availability slots and provides for a unified expense flat rate. The signing of this agreement — by representatives of each union organisation and management — is carried out electronically. The deployment of individual amendments, organised in waves by site, is completed in three weeks instead of the initially planned two months. HR estimates a saving of approximately 600 hours of administrative processing across the entire operation, representing a return on investment of the digital solution within the first quarter.

Conclusion

In 2026, remote work is no longer an exceptional tolerance but a structural component of work organisation, governed by a dense and constantly evolving legal framework. Employers must ensure compliance of their contractual amendments, their expense reimbursement policy, their cybersecurity measures (NIS 2) and their personal data management (GDPR). For employees, knowing one's rights — disconnection, expenses, accident protection — is now essential.

The dematerialisation of HR documents, and in particular eIDAS-compliant electronic signature, constitutes a major lever to secure these obligations whilst gaining efficiency. Certyneo supports you in this transformation: discover our pricing and offerings tailored to HR teams or try our ROI calculator to measure concrete gains for your organisation.