Compliance with Employment Law: Employer's Obligations

Introduction

In France, compliance with employment law represents a permanent challenge for employers: the Labour Code contains more than 3,500 articles, supplemented by collective agreements, sectoral agreements and constantly evolving case law. Any breach exposes the company to civil, criminal and administrative sanctions that can reach several tens of thousands of euros per infraction. Faced with this dense regulatory environment, understanding obligations, prioritising them and equipping oneself effectively is no longer optional but a strategic necessity. This article reviews the main legal obligations of employers — from the employment contract to notice requirements, including the protection of employees' personal data — and explains how electronic signature in the workplace constitutes an effective and secure lever for achieving compliance.

The Fundamentals of the Employment Contract: Formalisation and Compliance

The Mandatory Form of the Employment Contract

The indefinite-term contract (CDI) may legally be oral for full-time contracts, but practice almost universally imposes its written form. By contrast, the fixed-term contract (CDD), part-time employment contract, apprenticeship contract and professional qualification contract must be in writing, failing which the contract may be reclassified as a CDI or deemed void (Articles L1242-12, L3123-6 and L6222-4 of the Labour Code). The employer has two working days to hand over the signed CDD to the employee from the start of employment.

Late delivery or absence of signature exposes the employer to a minimum indemnity of one month's salary. In this context, dematerialisation via a HR electronic signature platform makes it possible to scrupulously comply with regulatory deadlines whilst creating a time-stamped and enforceable record.

Mandatory Provisions of the Contract

The employment contract must include specific provisions: identity of the parties, place of work, job title, start date, duration of the trial period, remuneration and payment frequency, working hours, applicable collective agreement, supplementary pension scheme and insurance. The omission of these elements constitutes an irregularity that may give rise to damages.

Article R1221-1 of the Labour Code also requires the provision of a single information document (DUI) setting out the essential elements of the working relationship, in accordance with European Directive 2019/1152 transposed into French law since November 2023.

The Trial Period: Rules and Renewal

The trial period is governed by Articles L1221-19 to L1221-26 of the Labour Code. Its maximum legal duration varies according to professional category: two months for workers and employees, three months for supervisors and technicians, four months for managers. It may be renewed only once, if the collective agreement expressly provides for it and if the employee consents in writing. Non-compliant renewal is equivalent to unfair dismissal, engaging the employer's liability.

Notice Requirements, Registers and Mandatory Declarations

Mandatory Notices in Premises

The employer is required to display in its premises a set of regulatory documents, failing which it incurs fines. Among the essential notices are:

• The internal regulations (mandatory from 50 employees onwards)

• Working hours and rest periods

• Contact details for the labour inspectorate, occupational health services and emergency services

• Texts relating to equal opportunity between men and women and non-discrimination

• The title of the applicable collective agreement

• Information on sexual and psychological harassment (Article L1153-5 of the Labour Code)

A Direccte (now DREETS) may check these notices during an inspection and draw up a report in case of failure. Partial dematerialisation is permitted on the intranet, provided all employees have effective access.

The Unique Personnel Register and the Single Document for Risk Assessment

Any employer, from the first employee onwards, must maintain a unique personnel register listing the names, forenames, nationality, date of birth, employment, qualification, date of entry and departure of each employee (Article L1221-13 of the Labour Code). This register must be kept for five years after the date of the employee's departure.

The Single Document for Professional Risk Assessment (DUERP), made mandatory by Decree No. 2001-1016, must be updated annually and whenever there is any significant change in working conditions. The Act of 2 August 2021 to strengthen occupational health prevention extended the obligation to file the DUERP digitally on a national portal, progressively applicable according to company size until 2024-2025.

Social Declarations: DSN and URSSAF Obligations

Since 2017, the Nominal Social Declaration (DSN) has been mandatory for all employers. Transmitted monthly from the payroll software, it centralises all social declarations (sickness, maternity, workplace accident/occupational disease, pensions, unemployment) to social protection bodies. Any delay in submitting the DSN results in a penalty of €7.50 per employee per month of delay (capped at €750 per missing declaration).

URSSAF has the right to audit over five years (three years in practice outside fraud cases). In the event of undeclared work, sanctions are particularly severe: cancellation of contribution exemptions, enhanced reassessment of 25%, and criminal proceedings potentially resulting in up to three years' imprisonment and €45,000 fine for individuals.

Protection of Employee Personal Data and GDPR Compliance

Processing HR Data: Legal Bases and Retention Periods

The employer is a controller within the meaning of the General Data Protection Regulation (GDPR, No. 2016/679). As such, it must have a valid legal basis for each processing of personal data concerning its employees: performance of the employment contract, legal obligation, legitimate interest or, more rarely, consent.

Retention periods for HR data are governed by the CNIL and specific legal provisions: payslips must be kept in electronic format for 50 years (Khomri Act of 2016 codified at Article L3243-4 of the Labour Code), employee files for five years after departure, video surveillance data in the workplace for a maximum of one month.

The Record of Processing Activities and Employee Rights

The employer must maintain a record of processing activities documenting each HR processing: purpose, data categories, recipients, retention periods and security measures. Employees have rights of access, rectification, erasure (within legal limits), portability and opposition to profiling.

A personal data breach (intrusion, loss of payroll file, accidental sending of payslips) must be reported to the CNIL within 72 hours and, if the risk is high for rights and freedoms, to the affected employees. Sanctions reach up to 4% of annual global turnover or €20 million.

Employee Monitoring and Respect for Privacy

The employer may legitimately implement surveillance tools (time clocks, activity tracking software, geolocation) provided it first informs employees and staff representatives, proportions the surveillance to the objective pursued and conducts an impact assessment (DPIA) if the processing is likely to pose high risks. The Court of Cassation regularly reminds us that any evidence obtained through an undeclared surveillance device is inadmissible in court.

Working Hours, Leave and Equal Opportunities

Regulation of Working Time: Maximum Durations and Rest

The legal working time is set at 35 hours per week for a full-time employee (Article L3121-27 of the Labour Code). Derogations exist via collective agreements, but absolute ceilings apply: 10 hours per day, 48 hours per week, 44 hours on average over 12 consecutive weeks. Employees must be entitled to a daily rest period of at least 11 consecutive hours and a weekly rest period of 35 consecutive hours.

Non-compliance with these maximum durations exposes the employer to a fourth-class fine (€750 per affected employee) and, where there is a serious risk to the employee's health, to an action for damages for breach of the safety obligation.

Paid Leave and Legal Absences

Every employee accrues 2.5 working days of paid leave per month of actual work, or 30 working days (five weeks) per year. Since the DDADUE Act of 22 April 2024 (transposing European case law), employees on sick leave continue to accrue paid leave, with the employer required to inform them upon their return.

These legal leave entitlements are supplemented by: maternity leave (16 weeks minimum), paternity leave (28 days since 2021), bereavement leave for loss of a child (12 days), and numerous conventional leave provisions. The management of these absences and the signing of amendments or return-to-work documents directly benefit from the advantages of eIDAS-compliant electronic signature.

Equal Opportunities and Pénicaud Index

Since the Professional Future Act of 2018, companies with at least 50 employees are required to calculate and publish annually their gender equality index (Pénicaud index), before 1 March. This index, out of 100 points, evaluates five indicators: pay gap, rate of pay rise gap, promotion rate gap, percentage of female employees given a pay rise on return from maternity leave, and number of women among the ten highest paid employees. A score below 75 requires the company to define corrective measures within three years, failing which it incurs a financial penalty of up to 1% of the payroll.

Staff Representation and Collective Bargaining Obligations

Setting up the Social and Economic Committee (CSE)

Since the 2017 Macron Ordinances, the Social and Economic Committee (CSE) is the sole staff representation body for companies with at least 11 employees. Its functions vary according to thresholds: consultation on strategic, economic and social direction from 50 employees onwards, establishment of a health, safety and working conditions commission (CSSCT) from 300 employees onwards.

The employer is required to organise professional elections every four years (or sooner in case of default), to inform and consult the CSE on any restructuring, redundancy or change in working conditions, and to provide it with access to the Economic, Social and Environmental Database (BDESE). Failure to consult constitutes the offence of obstruction, subject to a fine of €7,500 and one year's imprisonment.

Mandatory Annual Negotiation Obligations (NAO)

In companies with union representatives, the employer must conduct negotiations each year on remuneration (actual wages, employee savings, value sharing), working time and sharing of added value. Every three years, negotiations must cover equal opportunities, quality of life and working conditions, as well as the management of employment and career development (GEPP) from 300 employees onwards.

Failure to conduct these negotiations also constitutes the offence of obstruction. The dematerialisation of company agreements via a secure HR electronic signature solution makes it possible to comply with filing deadlines with DREETS and to guarantee the integrity of signed documents, in accordance with the complete guide to electronic signature.

Legal Framework Applicable to Compliance in Employment Law

Compliance with employment law is based on an overlay of regulatory sources that the employer must master simultaneously.

Labour Code: the reference text, it structures all individual and collective employment relations. Its provisions of absolute public policy apply to all, with no possible waiver (e.g. prohibition of child labour, minimum wage, maximum working hours). Supplementary provisions may be amended by collective agreement, provided they are no less favourable than the law.

Contracts and Electronic Signatures: Article 1366 of the Civil Code recognises electronic writing as equivalent to paper writing provided that the person from whom it originates can be duly identified and that it is established and preserved in such a way as to guarantee its integrity. Article 1367 defines electronic signature as the use of a reliable process of identification. The European eIDAS Regulation No. 910/2014 (currently being revised by eIDAS 2.0 — EU Regulation 2024/1183) establishes three levels of signature: simple (SES), advanced (AES) and qualified (QES). For employment contracts, advanced or qualified signature is recommended to ensure enforceability in the event of dispute.

Protection of Personal Data: the GDPR (EU Regulation No. 2016/679) is directly applicable. It requires the implementation of the principles of minimisation, limitation of retention, security (Article 32) and accountability (Article 5(2)). The Data Protection Act of 6 January 1978, as amended by Ordinance No. 2018-1125, supplements this framework in France.

Health and Safety at Work: Decree No. 2001-1016 imposes the DUERP; Act No. 2021-1018 of 2 August 2021 strengthened prevention obligations and created the prevention passport. The European framework directive 89/391/CEE forms the Community foundation for these obligations.

Equality and Non-discrimination: Articles L1132-1 to L1132-4 of the Labour Code and European Directive 2000/78/EC establish a general principle of non-discrimination based on 25 criteria. Non-compliance exposes the employer to nullity of discriminatory acts and to unlimited damages.

Risks and Sanctions: the labour inspectorate (DREETS) has enhanced powers since the Ordinance of 7 April 2016: access to premises and documents, formal notice, stopping of dangerous work, direct fining. The public prosecutor may be contacted in case of criminal infringement. Convictions may combine fines, repayment of public aid and debarment from submitting tenders for public contracts.

Use Cases: Employment Compliance and Electronic Signature

An 80-Employee Service SME Facing Seasonal Contract Fluctuations

An SME in the business services sector permanently employs 80 staff and recruits on average 40 additional employees each summer under fixed-term contracts. Previously, paper-based contract management generated frequent signing delays: candidates residing in the provinces or abroad sometimes returned their contracts after the legal two-working-day deadline, exposing the company to reclassification risks.

By implementing an advanced electronic signature solution integrated with its HRIS, the SME reduced the average signing timeframe from 4.2 days to less than 18 hours. The rate of documentary compliance (contracts signed within the legal deadline) rose from 63% to 97%. Savings generated through reduced printing, postage and physical archiving costs amounted to approximately €8,500 per year, consistent with ranges published in HR digitalisation sector reports (estimated gains between €50 and €120 per file processed).

A Mid-Sized Industrial Group Managing NAO and Collective Agreements

A mid-sized industrial company of around 1,200 employees distributed across four production sites had to finalise several company agreements each year (NAO, working time agreement, employee savings plan) involving the signature of union representatives present on different sites. The paper-based process required travel, transmission delays and a risk of loss or alteration of documents before their filing on the DREETS TéléAccords platform.

The adoption of a qualified electronic signature solution reduced the average time to finalise agreements from 21 days to 4 working days. Automatic filing on TéléAccords, coupled with time-stamped signature traceability, eliminated disputes over the formal validity of agreements. The mid-sized company was also able to secure the management of its union data (data sensitive within the meaning of GDPR, Article 9) through end-to-end encryption of documents.

An HR Consulting Firm Outsourcing Contract Management for Its Clients

An HR consulting firm specialising in advice manages contract drafting and monitoring for around twenty SME clients, including employment contracts, amendments and settlement agreements. Given the diversity of applicable collective agreements and the multiplicity of stakeholders (outsourced HR managers, company leaders, employees), the firm needed a multi-tenant solution enabling it to trace each signature and archive documents in a legally probative manner.

By relying on a electronic signature platform for legal and HR firms, the firm was able to offer a superior level of service to its clients whilst reducing its operating costs by 30% on document processing. The dematerialisation of settlement agreements — whose CERFA form must be signed by both parties and transmitted electronically to DREETS — particularly benefited from qualified time-stamping, making any subsequent dispute over the signature date virtually impossible.

Conclusion

Compliance with employment law is not merely passive observance of a fixed corpus of law: it requires ongoing regulatory monitoring, controlled documentary processes and tools adapted to the operational reality of each company. From the employment contract to the DUERP, from the DSN to mandatory negotiations, each obligation carries a risk of sanction if it is not properly supported or tracked.

eIDAS-compliant electronic signature is today one of the most effective levers for securing the HR documentary chain, meeting legal deadlines and proving the integrity of acts in the event of audit or dispute. Certyneo supports you in this endeavour with a platform designed for HR and legal teams.

Ready to secure your employment documents? Discover Certyneo's pricing or start for free today.