Legal compliance in employment law: employer obligations

Legal compliance in employment law is today one of the absolute priorities of HR management and business leaders. In 2026, the French and European regulatory framework has become considerably denser: strengthened documentary obligations, dematerialisation of contracts, GDPR applied to employee data, more frequent labour inspectorate checks. A single irregularity can expose the employer to criminal sanctions, URSSAF enforcement actions or costly employment tribunal proceedings. This article decodes the main employer obligations in terms of legal compliance in employment law — from contract drafting to document retention — and presents best practices to secure each stage of the employee lifecycle.

The foundations of employer compliance in employment law

The obligation to formalise the employment contract

The employment contract is the cornerstone of the employment relationship. Whilst a full-time open-ended contract can theoretically remain verbal, practical reality requires written formalisation. For fixed-term contracts, temporary contracts, part-time contracts or apprenticeship contracts, writing is mandatory under penalty of reclassification (article L. 1242-12 of the French Labour Code for fixed-term contracts). The European Directive 2019/1152 on transparent and predictable working conditions, transposed into French law by the Ordinance of 1 August 2022, has strengthened the obligation of written information: the employer must provide the employee, no later than the seventh calendar day following employment, with a document specifying at least nine essential elements (identity of the parties, place of work, job title, start date, leave entitlement, notice period, remuneration, working hours, applicable collective agreement).

The signature of the contract commits both parties. Since the law no. 2000-230 of 13 March 2000 and article 1366 of the Civil Code, electronic signature has the same legal value as handwritten signature, provided that the requirements for reliable identification of the signatory are met. This development paves the way for complete dematerialisation of the recruitment process, with significant operational gains for HR departments — provided that a solution compliant with the eIDAS regulation is chosen.

Mandatory registers and notices

Every employer, regardless of company size, must keep several mandatory registers:

• The unique employee register (article L. 1221-13 of the French Labour Code): must be updated upon hiring and retained for five years after the employee's departure. It lists the name, surname, nationality, date of birth, gender, employment, qualification, start date and departure date of each worker.

• The unique document for assessing occupational health and safety risks (DUERP): mandatory since the decree of 5 November 2001, it must be updated at least once a year and retained for 40 years since the Health Act of 2 August 2021 (article L. 4121-3-1 of the French Labour Code). In the event of a serious workplace accident or occupational disease, its absence or obsolescence constitutes gross negligence.

• The register of staff representatives / works council: in companies with 11 employees or more.

• Mandatory notices: title of the applicable collective agreement, contact details of the labour inspectorate, internal regulations (mandatory from 50 employees), gender equality, harassment and sexual harassment.

The absence of these documents exposes the employer to fines of up to €1,500 per affected employee (4th class misdemeanour), as well as to increased sanctions in case of recurrence.

Working hours and time tracking

Compliance with working time is a minefield. Article L. 3171-2 of the French Labour Code requires the employer to implement a system for recording working hours for each employee whose time is not predetermined. Since the CJEU ruling of 14 May 2019 (Deutsche Bank case), EU member states are required to impose on employers the implementation of an objective, reliable and accessible system for measuring daily working time. In France, this translates into increased obligations for day-rate arrangements, for which the employer must organise an annual individual meeting and produce a monthly control document.

Exceeding maximum durations (10 hours/day, 48 hours/week or 44 hours on average over 12 weeks) is liable to criminal prosecution. Unremunerated or unreimbursed overtime also constitutes a frequent reason for bringing proceedings before the Employment Tribunal.

Obligations regarding the protection of employee data (GDPR)

The employee, a data subject like any other

Since the GDPR came into force on 25 May 2018, the personal data of employees benefits from the same protection as that of customers or prospects. The employer is a "data controller" within the meaning of article 4 of Regulation (EU) 2016/679 and must, as such:

• Keep a record of processing activities (article 30 GDPR) mentioning each processing involving employee data (payroll, absence management, video surveillance, access control systems, professional messaging, etc.).

• Inform employees of the existence of processing, its purpose, data retention period and their rights (articles 13 and 14 GDPR). This information must be provided from the first day of employment, typically via a notice attached to the employment contract.

• Regulate data transfers outside the EU: the use of HR tools hosted in the United States (payroll software, HRIS, recruitment tools) must be subject to appropriate safeguards (standard contractual clauses, adequacy decision).

• Appoint a Data Protection Officer if the main activity involves regular and systematic monitoring on a large scale of data subjects.

The CNIL has imposed several sanctions on employers in 2024 and 2025 for failure to inform employees or excessive retention of time-tracking data. Fines can reach 4% of annual global turnover.

Video surveillance and employee monitoring

The right to respect for private life (article 9 of the Civil Code, article 8 of the ECHR) strictly limits the employer's surveillance powers. Any implementation of a monitoring device (video surveillance, geolocation, keylogger, telephone monitoring) must:

• Be justified by a proportionate legitimate interest.

• Be subject to prior consultation of the works council (article L. 2312-38 of the French Labour Code).

• Be declared or subject to an impact assessment (DPIA) as applicable.

• Be subject to individual notification of affected employees.

The Court of Cassation confirmed in several recent rulings (in particular Soc. 10 November 2021, no. 20-12.263) that evidence obtained through unlawful surveillance devices is inadmissible in court, even when it demonstrates employee misconduct.

Securing contractual documents and HR procedures

From handwritten signature to qualified electronic signature

The dematerialisation of HR documents is now an inescapable reality. Employment contracts, amendments, settlement agreements, company agreements, end-of-employment documents: all can be electronically signed. The electronic signature for HR makes it possible to drastically reduce processing times whilst guaranteeing superior probative value to handwritten signature, thanks to time-stamping metadata and authenticity certificates.

Three levels of signature are defined by the eIDAS regulation (no. 910/2014):

• Simple electronic signature (SES): sufficient for internal documents with low stakes.

• Advanced electronic signature (AES): recommended for standard employment contracts. It guarantees the identification of the signatory and the integrity of the document.

• Qualified electronic signature (QES): legal equivalent of handwritten signature under article 25 eIDAS. Mandatory for certain documents with high legal stakes.

For settlement agreements, the French administration (DREETS) has validated the use of advanced electronic signature since 2022, facilitating the TéléRC remote procedure.

Retention and archiving of employment documents

Compliance with documentation does not end at signature: it requires specific retention periods, often unknown to employers:

| Document | Legal retention period | |---|---| | Payslips | 50 years or until the employee reaches 75 years of age | | Employment contracts | 5 years after the end of the contract | | DUERP | 40 years | | Unique employee register | 5 years after departure | | Documents relating to social security contributions | 3 years (URSSAF) | | Tax declarations related to payroll | 6 years |

An electronic archiving system with probative value, compliant with the NF Z 42-013 standard and the RGS repository, guarantees the integrity and readability of documents throughout their entire legal retention period. Certyneo natively integrates secure archiving functions, making it possible to build a reliable audit trail in case of inspection or dispute.

Dispute prevention and management of employment tribunal proceedings

The main reasons for bringing matters before the Employment Tribunal

In 2024, French Employment Tribunals recorded more than 140,000 new cases, according to data from the Ministry of Justice. The main reasons for disputes are:

• Dismissal without real and serious cause (approximately 35% of cases)

• Non-payment of overtime

• Reclassification of fixed-term contract to open-ended contract

• Harassment or sexual harassment

• Non-compliance with termination procedures (summons, preliminary meeting, written notification)

In the vast majority of these disputes, the employer's ability to produce documentary evidence is decisive. An electronically signed contract with certified time-stamping, communications kept secure, a regularly updated DUERP: all elements that can tip the scales in the employer's favour.

The disciplinary procedure: strict formalism to be observed

Any disciplinary sanction — warning, suspension, dismissal for cause — is subject to strict formalism defined by articles L. 1332-1 to L. 1332-4 of the French Labour Code:

• Summons to a preliminary meeting: by registered letter or handed to the employee in person with written acknowledgement, at least 5 working days before the meeting.

• Preliminary meeting: the employee may be assisted by a member of personnel or, in the absence of representatives, by an external adviser registered on the prefectural list.

• Notification of the sanction: within a minimum of 2 working days and a maximum of 1 month after the meeting, by a reasoned letter.

Any breach of this procedure results in the formal irregularity of the sanction, or even its nullity. The dematerialisation of these steps — via electronic registered letter or electronic signature — is today fully accepted, provided that effective receipt by the employee can be demonstrated.

To optimise and secure all these documentary processes, HR teams can rely on our comprehensive guide to electronic signature or explore the features dedicated to electronic signature in the enterprise.

Legal framework applicable to compliance in employment law

Compliance by employers is based on a accumulation of national and European standards whose mastery is essential.

French Labour Code: Fundamental provisions come from the Labour Code, regularly updated by ordinances and laws. Among the most structural texts: Ordinance no. 2017-1387 of 22 September 2017 (so-called Macron ordinances) which fundamentally reformed staff representation and dismissal rules, Law no. 2021-1104 of 22 August 2021 (Climate Act) which extended the DUERP retention period to 40 years, and Law no. 2022-1598 of 21 December 2022 on urgent measures relating to the labour market.

European Directive 2019/1152: Transposed into French law by decree of 1 August 2022, it requires the employer to provide in writing, within 7 calendar days of the start of employment, essential information on working conditions. Failure to comply with this obligation engages the civil liability of the employer.

eIDAS Regulation no. 910/2014: It constitutes the legal foundation for electronic signature in the EU. Article 25 provides that a qualified electronic signature has the same legal effects as a handwritten signature. Articles 26 and 28 define the technical requirements for advanced and qualified signatures. The eIDAS 2.0 regulation (Regulation no. 2024/1183, which came into force on 20 May 2024) strengthens the European digital identity wallet, with direct implications for signatory identification in HR processes.

Civil Code, articles 1366-1367: Article 1366 states that "an electronic document has the same probative force as a paper document, provided that the person from whom it originates can be duly identified and that it is established and retained in conditions such as to guarantee its integrity". Article 1367 defines electronic signature and refers to the conditions set by decree in Council of State (decree no. 2017-1416 of 28 September 2017).

GDPR no. 2016/679: The management of employee data is subject to the principles of lawfulness, fairness, minimisation, accuracy and limitation of retention (article 5 GDPR). Article 88 GDPR allows member states to provide specific rules for the processing of data in the context of employment relations. In France, the amended Data Protection Act (law no. 78-17) and CNIL deliberations supplement this framework.

ETSI EN 319 132 standard: This European standard defines the formats of advanced electronic signature (XAdES, PAdES, CAdES) and the compliance profiles applicable to trust service providers. It is directly relevant for employers who dematerialise their contractual documents.

Risks of non-compliance: Sanctions can be criminal (imprisonment up to 1 year and €3,750 fine for certain employment law violations), civil (damages before the Employment Tribunal), administrative (temporary closure of establishment, exclusion from public contracts) and social (URSSAF enforcement action in case of irregularities in contract classification or contribution calculation).

Practical use scenarios

An SME of 85 employees in services facing a labour inspectorate audit

An IT services SME with approximately 85 employees receives a notice of labour inspectorate inspection concerning the employment conditions of its developers on a day-rate arrangement. The inspector requests the production of monthly time-tracking control documents for the past three years, minutes of annual day-rate arrangement meetings and employment contracts for all affected employees.

Before deploying an electronic signature and digital archiving solution, the company stored its contracts in paper form in filing cabinets spread across multiple sites. The reconstitution of files took several weeks, with missing documents for 12 employees. After formal notice, the employer had to regularise its situation and pay a settlement fine.

Since the complete dematerialisation of its HR processes via an electronic signature platform connected to its HRIS, the company has a complete audit trail for each document: certified signature date, signatory identity, version history. During a second inspection two years later, all required documents were produced in less than two hours. Companies that have adopted a structured HR document management system reduce by an average of 70 to 85% the time spent preparing for audits, according to sectoral benchmarks published by HR transformation specialist firms.

A retail distribution group with 400 seasonal hires per year

A regional food retail group employs approximately 400 seasonal workers over a 3 to 6-month period each year. Each hire involves the signature of a fixed-term contract, a GDPR information notice, an internal regulations receipt confirmation and a job description. With traditional methods (postal mailing or in-store signature), the average time between acceptance of an offer and contract signature was 5 to 7 working days, with an incomplete file rate of 18%.

After deploying an advanced electronic signature solution integrated with their ATS (Applicant Tracking System), contracts are automatically generated from candidate data and sent for signature within minutes. The employee signs from their smartphone, without any need to visit an office. The time to finalise files has fallen to less than 24 hours, the incomplete file rate to less than 2%. The cost savings from eliminating registered mailings and reducing data re-entry represent tens of thousands of euros annually for this volume.

An HR consulting firm assisting its clients in achieving compliance

An HR consulting firm specialising in employment law supports about twenty SME clients in their compliance with employment law. The firm identified that 60% of its clients did not have an up-to-date DUERP, that 45% did not fully comply with the information obligations under Directive 2019/1152, and that 30% used fixed-term contract templates containing insufficient or outdated clauses.

By integrating an automated compliant contract generation tool (see our AI contract generator) and an electronic signature solution into its service offering, the firm was able to industrialise the documentary compliance of its clients. Contract templates are updated in real time based on legislative changes, and each signed document is automatically archived with certified time-stamping. Result: a 40% reduction in time spent on documentary production and an increase in the firm's support capacity without additional hiring.

Conclusion

Legal compliance in employment law is not an option: it is a permanent obligation that engages the civil, criminal and social liability of every employer. From contract drafting to the archiving of payslips, through the protection of employee data and compliance with disciplinary procedures, each stage of the employee lifecycle is governed by a dense body of regulations that is constantly evolving.

The dematerialisation of HR processes, supported by solutions for electronic signature compliant with the eIDAS regulation, is today the most effective lever for reconciling compliance, operational efficiency and risk reduction. Certyneo supports companies of all sizes in this transition, with a secure platform, compliant document templates and archiving with probative value.

Ready to secure your HR processes and strengthen your employment law compliance? Discover Certyneo pricing and get started today.