Legal compliance in employment law: employer obligations

Legal compliance in employment law is today one of the absolute priorities for HR management and business leaders. In 2026, the French and European regulatory framework has become significantly more densified: strengthened documentary obligations, dematerialisation of contracts, GDPR applied to employee data, more frequent labour inspections. A single irregularity can expose the employer to criminal sanctions, URSSAF assessments or costly employment tribunal disputes. This article deciphers the main employer obligations regarding legal compliance in employment law — from contract drafting to document preservation — and presents best practices to secure each step of the employee lifecycle.

The foundations of employer compliance in employment law

The obligation to formalise the employment contract

The employment contract is the cornerstone of the employment relationship. Whilst a full-time permanent contract can theoretically remain verbal, practical reality requires written formalisation. For fixed-term contracts, temporary work contracts, part-time contracts or apprenticeship contracts, writing is mandatory under penalty of reclassification (article L. 1242-12 of the Labour Code for fixed-term contracts). European Directive 2019/1152 on transparent and predictable working conditions, transposed into French law by the Ordinance of 1 August 2022, strengthened the obligation to provide written information: the employer must provide the employee, no later than the seventh calendar day following employment, with a document specifying at least nine essential elements (identity of the parties, place of work, job title, start date, annual leave, notice period, remuneration, working hours, applicable collective agreement).

The signature of the contract commits both parties. Since Law n°2000-230 of 13 March 2000 and article 1366 of the Civil Code, electronic signatures have the same legal value as handwritten signatures, provided they comply with requirements for reliable identification of the signatory. This development opens the way to complete dematerialisation of the recruitment process, with significant operational gains for HR departments — provided a compliant solution is chosen.

Mandatory registers and notices

Every employer, regardless of company size, must maintain several mandatory registers:

• The single employee register (article L. 1221-13 of the Labour Code): must be updated on recruitment and kept for five years after the employee leaves. It lists the name, first name, nationality, date of birth, gender, job, qualification, start date and departure date of each worker.

• The unique document for assessing occupational hazards (DUERP): mandatory since the Decree of 5 November 2001, it must be updated at least once per year and kept for 40 years since the Health Law of 2 August 2021 (article L. 4121-3-1 of the Labour Code). In the event of a serious work accident or occupational illness, its absence or obsolescence constitutes gross negligence.

• The staff representative/works council register: in companies with 11 or more employees.

• Mandatory notices: title of the applicable collective agreement, labour inspectorate contact details, staff rules (mandatory from 50 employees), gender equality, moral and sexual harassment.

The absence of these documents exposes the employer to fines of up to €1,500 per affected employee (Class 4 misdemeanour), as well as increased penalties in case of recidivism.

Working hours and time tracking

Compliance regarding working hours is a minefield. Article L. 3171-2 of the Labour Code requires employers to put in place a system for calculating working hours for each employee whose time is not predetermined. Since the CJEU ruling of 14 May 2019 (Deutsche Bank case), EU member states are required to impose on employers the implementation of an objective, reliable and accessible system for measuring daily working hours. In France, this translates into increased obligations for day-based forfaits, for which the employer must organise an annual individual interview and produce a monthly control document.

Exceeding maximum durations (10 hours/day, 48 hours/week or 44 hours on average over 12 weeks) is subject to criminal prosecution. Unpaid or uncompensated overtime also constitutes a frequent reason for referral to the Employment Tribunal.

Obligations regarding protection of employee data (GDPR)

The employee, a data subject like any other

Since the GDPR came into force on 25 May 2018, personal data of employees benefit from the same protection as that of customers or prospects. The employer is a "controller" under article 4 of Regulation n°2016/679 and must, in this capacity:

• Maintain a register of processing activities (article 30 GDPR) listing each processing involving employee data (payroll, absence management, video surveillance, access control, professional messaging, etc.).

• Inform employees of the existence of processing, its purpose, data retention period and their rights (articles 13 and 14 GDPR). This information must be provided on recruitment, typically via a notice attached to the employment contract.

• Control transfers of data outside the EU: the use of HR tools hosted in the United States (payroll software, HRIS, recruitment tools) must be subject to appropriate safeguards (standard contractual clauses, adequacy decision).

• Appoint a DPO if the main activity involves regular and systematic monitoring of individuals on a large scale.

The CNIL imposed several sanctions on employers in 2024 and 2025 for failure to inform employees or excessive retention of time tracking data. Fines can reach 4% of annual worldwide turnover.

Video surveillance and employee monitoring

The right to respect for private life (article 9 of the Civil Code, article 8 of the ECHR) strictly limits employers' powers of surveillance. Any implementation of a control device (video surveillance, geolocation, keylogger, telephone monitoring) must:

• Be justified by a proportionate legitimate interest.

• Be subject to prior consultation of the works council (article L. 2312-38 of the Labour Code).

• Be declared or subject to an impact assessment (DPIA) depending on the circumstances.

• Be accompanied by individual notification to the employees concerned.

The Court of Cassation confirmed in several recent rulings (notably Soc. 10 November 2021, n°20-12.263) that evidence obtained through illicit surveillance devices is inadmissible in court, even when it demonstrates an employee's wrongdoing.

Securing contractual documents and HR procedures

From handwritten signature to qualified electronic signature

Dematerialisation of HR documents is now an inescapable reality. Employment contracts, amendments, negotiated terminations, company agreements, end-of-contract documents: all can be electronically signed. Qualified electronic signature allows to drastically reduce processing times whilst guaranteeing higher probative value than a handwritten signature, thanks to timestamping metadata and authenticity certificates.

Three levels of signature are defined by the eIDAS Regulation (n°910/2014):

• Simple electronic signature (SES): sufficient for internal low-stakes documents.

• Advanced electronic signature (AES): recommended for standard employment contracts. It guarantees signatory identification and document integrity.

• Qualified electronic signature (QES): legal equivalent of handwritten signature under article 25 eIDAS. Mandatory for certain high-stakes legal acts.

For negotiated terminations, the French administration (DREETS) has validated the use of advanced electronic signature since 2022, facilitating the TéléRC online procedure.

Retention and archiving of employment documents

Documentary compliance does not end with signature: it requires precise retention periods, often overlooked by employers:

| Document | Required retention period | |---|---| | Payslips | 50 years or until the employee's 75th birthday | | Employment contracts | 5 years after the end of contract | | DUERP | 40 years | | Single employee register | 5 years after departure | | Documents relating to social contributions | 3 years (URSSAF) | | Tax declarations related to payroll | 6 years |

A certified electronic archiving system (AEVP), compliant with standard NF Z 42-013 and the RGS framework, guarantees the integrity and readability of documents throughout their legal retention period. Certyneo natively integrates secure archiving functions, allowing the creation of a reliable audit trail in case of inspection or dispute.

Prevention of disputes and management of employment tribunal cases

Main reasons for referral to the Employment Tribunal

In 2024, French Employment Tribunals recorded more than 140,000 new cases, according to Ministry of Justice data. The main reasons for disputes are:

• Dismissal without genuine and serious cause (approximately 35% of cases)

• Non-payment of overtime

• Reclassification of fixed-term contracts as permanent

• Moral or sexual harassment

• Non-compliance with termination procedures (summons, preliminary meeting, written notification)

In the vast majority of these disputes, the employer's ability to produce enforceable documentary evidence is decisive. An electronically signed contract with certified timestamp, communications preserved securely, a regularly updated DUERP: all elements that can tip the balance in the employer's favour.

The disciplinary procedure: strict formality to observe

Any disciplinary sanction — warning, suspension, dismissal for misconduct — must follow the precise procedure defined by articles L. 1332-1 to L. 1332-4 of the Labour Code:

• Summons to preliminary meeting: by registered letter or personal delivery with receipt, at least 5 working days before the meeting.

• Preliminary meeting: the employee may be assisted by a staff member or, in the absence of representatives, by an external adviser registered on the prefectural list.

• Notification of sanction: within a minimum of 2 working days and maximum of 1 month after the meeting, by motivated letter.

Any breach of this procedure results in formal irregularity of the sanction, or even its nullity. Dematerialisation of these steps — via electronic registered mail or electronic signature — is now fully accepted, provided the effective receipt by the employee can be proven.

To optimise and secure all these documentary processes, HR teams can rely on our solutions or explore features dedicated to employment contract management.

Legal framework applicable to compliance in employment law

Employer compliance is based on a stack of national and European standards whose mastery is essential.

French Labour Code: The fundamental provisions derive from the Labour Code, regularly updated by ordinances and laws. Among the most structuring texts: Ordinance n°2017-1387 of 22 September 2017 (the Macron ordinances) which fundamentally reformed staff representation and dismissal rules, Law n°2021-1104 of 22 August 2021 (Climate Law) which extended the DUERP retention period to 40 years, and Law n°2022-1598 of 21 December 2022 introducing urgent measures relating to the labour market.

European Directive 2019/1152: Transposed into French law by decree of 1 August 2022, it requires employers to provide in writing, within 7 calendar days of employment, essential information on working conditions. Non-compliance with this obligation engages the employer's civil liability.

Regulation eIDAS n°910/2014: It constitutes the legal foundation of electronic signatures within the EU. Article 25 provides that a qualified electronic signature produces the same legal effects as a handwritten signature. Articles 26 and 28 define the technical requirements for advanced and qualified signatures. Regulation eIDAS 2.0 (Regulation n°2024/1183, which came into force on 20 May 2024) strengthens the European digital identity wallet, with direct implications for signatory identification in HR processes.

Civil Code, articles 1366-1367: Article 1366 provides that "electronic writing has the same probative force as writing on paper, provided that the person from whom it emanates can be properly identified and that it is established and preserved in conditions likely to guarantee its integrity". Article 1367 defines electronic signature and refers to the conditions set by decree by the State Council (Decree n°2017-1416 of 28 September 2017).

GDPR n°2016/679: Management of employee data is subject to the principles of lawfulness, fairness, minimisation, accuracy and limitation of retention (article 5 GDPR). Article 88 GDPR authorises member states to establish specific rules for processing data in the context of employment relationships. In France, the amended Data Protection Act (Law n°78-17) and CNIL deliberations supplement this framework.

ETSI Standard EN 319 132: This European standard defines the formats of advanced electronic signatures (XAdES, PAdES, CAdES) and compliance profiles applicable to trust service providers. It is directly relevant for employers dematerialising their contractual documents.

Risks in case of non-compliance: Sanctions can be criminal (imprisonment up to 1 year and €3,750 fine for certain labour law breaches), civil (damages before the Employment Tribunal), administrative (temporary establishment closure, exclusion from public contracts) and social (URSSAF assessment in case of irregularities in contract classification or contribution calculation).

Concrete use scenarios

An 85-person IT services SME facing a labour inspection

An IT services SME with approximately 85 employees receives notice of a labour inspection regarding the employment conditions of its developers on a day-based forfait system. The inspector requests production of monthly working time control documents for the past three years, minutes of annual day-based forfait meetings and employment contracts for all affected employees.

Before deploying an electronic signature and digital archiving solution, the company stored its contracts in paper form in filing cabinets dispersed across sites. Reconstruction of files took several weeks, with missing documents for 12 employees. After a formal notice, the employer had to regularise its situation and pay a transactional fine.

Since complete dematerialisation of its HR processes via an electronic signature platform connected to its HRIS, the company has a complete audit trail for each document: certified signature date, signatory identity, version history. During a second inspection two years later, all required documents were produced in less than two hours. Companies that have adopted structured HR document management systems reduce by an average of 70 to 85% the time needed to prepare for audits, according to sector benchmarks published by specialist HR transformation firms.

A retail distribution group with 400 seasonal hires annually

A regional food retail group employs approximately 400 seasonal workers over a 3 to 6-month period each year. Each recruitment involves signing a fixed-term contract, a GDPR notification, proof of staff rules receipt and a job sheet. With traditional methods (postal sending or in-agency signature), the average time between offer acceptance and contract signature was 5 to 7 working days, with an incomplete file rate of 18%.

After deploying an advanced electronic signature solution integrated into their ATS (Applicant Tracking System), contracts are automatically generated from candidate data and sent for signature in minutes. The employee signs from their smartphone, without travel. File finalisation time fell to less than 24 hours, the incomplete file rate to less than 2%. The cost saving from eliminating registered mail and reducing data re-entry represents tens of thousands of euros annually for this volume type.

An HR consulting firm assisting clients in compliance

An HR consulting firm specialising in human resources accompanies twenty SME clients in their legal compliance. The firm identified that 60% of its clients did not have an up-to-date DUERP, that 45% did not fully comply with information obligations under Directive 2019/1152, and that 30% used fixed-term contract templates with insufficient or obsolete clauses.

By integrating an automated compliant contract generation tool and an electronic signature solution into its service offering, the firm was able to industrialise documentary compliance for its clients. Contract templates are updated in real-time according to legislative developments, and each signed document is automatically archived with certified timestamp. Result: a 40% reduction in time spent on documentary production and an increase in the firm's support capacity without additional recruitment.

Conclusion

Legal compliance in employment law is not optional: it is a permanent obligation that engages the civil, criminal and social liability of every employer. From contract drafting to archiving payslips, through protecting employee data and observing disciplinary procedures, each step of the employee lifecycle is governed by a dense and constantly evolving regulatory framework.

Dematerialisation of HR processes, supported by electronic signature solutions compliant with the eIDAS regulation, is today the most effective lever for reconciling compliance, operational efficiency and risk reduction. Certyneo assists companies of all sizes in this transition, with a secure platform, compliant document templates and certified archiving.

Ready to secure your HR processes and strengthen your employment law compliance? Get started today.