Legal Compliance in Employment Law: Employer Obligations

Legal compliance in employment law represents one of the major challenges for any business, regardless of size. In France, the Labour Code imposes a precise set of obligations on each employer: from drafting the employment contract to managing amicable terminations, through mandatory notices and the security of employees' personal data. In 2026, this regulatory framework has become even denser, particularly due to the eIDAS 2.0 regulation, GDPR requirements and the progressive roll-out of HR digitalisation. This article presents comprehensively the employer's obligations, associated legal risks and available tools to satisfy them without fail.

Foundations of HR Compliance: Contractual Obligations

The Employment Contract: A Precise Legal Requirement

Every employer must provide the employee, no later than two working days following recruitment, with a written document outlining the essential elements of the employment relationship — in compliance with the French transposition of European Directive 2019/1152 of 20 June 2019 on transparent and predictable working conditions. For permanent contracts (CDI), the provision of a written contract is not strictly mandatory under law, but it is imperative if required by any applicable collective agreement. For fixed-term contracts (CDD), part-time contracts and apprenticeships, the written contract is mandatory under penalty of contract reclassification.

The contract must include: the identity of the parties, the place of work, the job title, the start date, working hours, remuneration, the trial period duration and the applicable collective agreement. Any omission exposes the employer to damages.

Pre-Employment Declaration (DPAE)

Mandatory for each new hire, the DPAE must be transmitted to URSSAF no later than 8 days before the employee's start date. This declaration automatically triggers affiliation to Social Security, creation of the pension file and enrolment in occupational health services. Failure to submit the DPAE constitutes the offence of undeclared work, punishable by 3 years imprisonment and €45,000 fine for natural persons (article L.8224-1 of the Labour Code).

Medical Examination on Recruitment

Since the reform of occupational medicine resulting from the 2016 Labour Act and its implementing decrees, the pre-employment medical examination has been replaced by an information and prevention visit (VIP) in most cases. This visit must take place no later than 3 months after the employee takes up their post (or before for at-risk positions). The employer is responsible for organising and monitoring these visits. Non-compliance with this obligation can engage the employer's civil liability, particularly in the event of workplace accident or occupational illness.

Obligations During Contract Execution

Working Time, Rest and Mandatory Notices

The employer must ensure strict monitoring of each employee's working time, in compliance with articles L.3121-1 and following of the Labour Code. Maximum legal working hours (10 hours per day, 48 hours per week, 44 hours on average over 12 weeks) must be strictly observed. Following the CJEU ruling of 14 May 2019 (case C-55/18, CCOO v Deutsche Bank), every employer must implement an objective, reliable and accessible system for measuring daily working time.

Concerning mandatory notices, the employer must display or make available to employees the following information:

• Collective working schedules

• The title and contact details of the competent labour inspector

• The address and emergency services telephone number

• Fire and evacuation procedures

• Internal regulations (for companies with at least 50 employees)

• Texts relating to equal remuneration between women and men

• Recourse procedures for moral and sexual harassment

Failure to display these notices is sanctioned by a fine of up to €1,500 per infraction noted.

Professional Training and Personal Training Account (CPF)

The employer has the obligation to ensure adaptation of employees to the evolution of their job and to maintain their employability. It must contribute to each employee's Personal Training Account (CPF) at the rate of €500 per year (€800 for low-skilled employees), up to a ceiling of €5,000 (€8,000 for low-skilled employees). A professional interview must be organised every two years, as well as a review at six years to verify whether the employee has benefited from at least one non-mandatory training activity, salary or professional progression, or acquisition of certification elements.

Protection of Employees' Personal Data

The GDPR (Regulation EU 2016/679) applies fully to the processing of employees' personal data. The employer, as data controller, must:

• Keep a record of processing activities (article 30 GDPR)

• Inform employees of processing concerning them (articles 13 and 14)

• Limit data collection to strictly necessary data (minimisation principle)

• Regulate transfers outside the EU

• Appoint a Data Protection Officer (DPO) if its activity requires it

GDPR violations can result in fines up to €20 million or 4% of annual global turnover, whichever is higher. CNIL pronounced several sanctions against employers in 2025 for excessive retention periods of HR data.

Contract Termination Management: Procedural Obligations

Dismissal: Strict Formalities

Dismissal for personal or economic reasons must follow a procedure rigorously governed by articles L.1232-1 and following of the Labour Code. The employer must:

• Summon the employee to a pre-dismissal meeting by registered letter with acknowledgement of receipt (LRAR) or hand-delivery with receipt

• Observe a minimum period of 5 working days between the summons and the meeting

• Conduct the pre-dismissal meeting with possible representation of the employee

• Notify dismissal by LRAR, no earlier than 2 working days after the meeting

• State the reason for dismissal in the letter

The dismissal letter determines the limits of the dispute in case of judicial challenge. Dismissal without real and serious cause exposes the employer to the Macron compensation scale (from 0.5 to 20 months of gross salary depending on length of service, article L.1235-3 of the Labour Code).

Amicable Termination and Digitalisation

Since the generalisation of the TéléRC service on the Mon.Service-Public.fr portal, the individual amicable termination must be validated online by DREETS (Regional Directorate for Economy, Employment, Work and Solidarity). This process involves signing the CERFA form no. 14598 by both parties, with a 15-day withdrawal period.

Electronic signature secures and considerably speeds up this procedure: the amicable termination form can be signed electronically, with certified time-stamping and audit evidence, guaranteeing document integrity and proof of consent from both parties.

Staff Representation and Social Dialogue

Social and Economic Committee (CSE): Implementation Obligations

Since the Macron ordinances of 2017 (Act no. 2017-1340 of 15 September 2017), any company with at least 11 employees for 12 consecutive months is required to establish a Social and Economic Committee (CSE). CSE elections must be organised every 4 years. Failure to establish the CSE constitutes an obstruction offence, punishable by 1 year imprisonment and €7,500 fine (article L.2317-1 of the Labour Code).

The CSE has prerogatives in matters of health, safety and working conditions (SSCT) for companies with at least 50 employees, including the right to alert in case of serious and imminent danger.

Collective Bargaining and Professional Equality Index

Companies with at least 50 employees are subject to mandatory annual negotiations on salaries, working time and distribution of added value. Since the Act of 5 September 2018 (Act no. 2018-771 on freedom to choose one's professional future), companies with at least 50 employees must calculate and publish annually their Professional Equality Index (Egapro), by 1 March. A score below 75 points out of 100 requires the company to define corrective measures on pain of a financial penalty reaching 1% of the payroll.

Health, Safety and Risk Prevention

Unique Risk Assessment Document (DUERP)

Mandatory since decree no. 2001-1016 of 5 November 2001, the Unique Professional Risk Assessment Document (DUERP) must be updated at least annually and when any significant modification alters working conditions. Since the Act of 2 August 2021 (Act no. 2021-1018), companies with at least 150 employees must file the DUERP on a national digital portal managed by OPCOs. This document must be kept for a minimum of 40 years.

Absence of DUERP is sanctioned by a 5th class fine (€1,500 for natural persons), but above all engages the employer's criminal liability in case of workplace accident, on the basis of breach of the obligation to ensure safety of outcome.

Prevention of Harassment and Psychosocial Risks

The employer is bound by an active obligation to prevent moral harassment (article L.1152-4 of the Labour Code) and sexual harassment (article L.1153-5). In companies with at least 250 employees, a Sexual Harassment Officer must be appointed from among CSE members. Any company must also integrate psychosocial risks (RPS) into its DUERP.

Compliance with these procedures can be greatly facilitated by digitalisation: formalised alerts, electronically signed reporting forms, traceability of processing steps. See our guide to understand how to integrate these tools into your HR organisation.

Legal Framework Applicable to Employer Compliance

Founding Texts of Employment Law

Employer legal compliance is based on a dense legislative body whose pillars are:

• Labour Code (Legislative and regulatory part): employment contracts (L.1221-1 et seq.), working time (L.3121-1 et seq.), health-safety (L.4121-1 et seq.), staff representation (L.2311-1 et seq.), dismissal (L.1232-1 et seq.), training (L.6311-1 et seq.)

• Act no. 2017-1340 of 15 September 2017 empowering the Government to adopt by ordinances measures to strengthen social dialogue (Macron ordinances, creation of CSE)

• Act no. 2021-1018 of 2 August 2021 to strengthen occupational health prevention (called Occupational Health Act: DUERP reform, enhanced medical monitoring)

• European Directive 2019/1152 on transparent and predictable working conditions, transposed into French law by ordinance no. 2022-1104 of 3 August 2022

Electronic Signature and Legal Value of HR Documents

Electronic signature of employment documents (contracts, amendments, amicable terminations, collective agreements) is governed by:

• Civil Code, articles 1366 and 1367: "Electronic writing has the same probative force as writing on paper support"; "Electronic signature consists in the use of a reliable identification process guaranteeing its link to the act to which it is attached."

• eIDAS Regulation no. 910/2014 (now revised by eIDAS 2.0, Regulation EU 2024/1183): defines three levels of electronic signature — simple (SES), advanced (AdES) and qualified (QES). Qualified signature is presumed equivalent to handwritten signature throughout the EU (article 25§2).

• ETSI EN 319 132 standard: specifies technical requirements for advanced electronic signatures in XAdES, PAdES and CAdES formats used in dematerialised contractual documents.

• Order of 22 March 2019 relating to electronic signature of notarial deeds, progressively extending usage to regulated professions.

Data Protection and GDPR in HR

• Regulation EU 2016/679 (GDPR): legal basis for processing employee data (article 6§1b — performance of employment contract), retention periods (5 years post-termination for payslips), individual rights (access, rectification, limited erasure)

• NIS2 Directive (Directive EU 2022/2555), transposed into French law by the Act of 11 April 2024: imposes enhanced cybersecurity requirements on essential and important entities, including securing HR systems and electronic signature platforms

• CNIL Deliberation no. 2002-017 and sectoral frameworks: specifically govern data processing in the context of staff management

Risks and Sanctions

Legal risks for non-compliant employers are multiple: criminal sanctions (obstruction, undeclared work), administrative fines (CNIL up to 4% of global turnover), labour court judgments (Macron scale, salary arrears, damages), and growing reputational risks in the age of ESG rankings. Using an electronic signature solution constitutes an essential safeguard against challenges to the validity of HR documents.

Use Cases: Electronic Signature in Service of HR Compliance

Case 1: An Industrial SME with 180 Employees Digitalises Contracts and Amendments

An industrial company of intermediate size, managing approximately 180 employees across two sites, faced significant volume of seasonal fixed-term contracts and amendments to modify working hours. Paper processing resulted in average delays of 7 days between drafting and effective document signature, with an estimated loss or filing error rate of 12%. By adopting an advanced electronic signature solution (AdES) integrated with its HRIS, the SME reduced this delay to under 24 hours, reduced printing and archiving costs by 65%, and secured the traceability of each signature (time-stamping, IP address, two-factor authentication). In case of labour court dispute, the company now has a complete audit trail, exportable as certified PDF, in compliance with eIDAS regulation requirements.

Case 2: A Multi-Establishment Hotel Group Secures Amicable Terminations

A hospitality and catering operator managing around ten establishments and approximately 400 employees processed up to 40 amicable terminations per year, with an entirely paper-based procedure requiring postal exchanges. Validation delays lengthened due to form errors (CERFA forms poorly completed, missing signatures) and postal losses. After deploying a workflow of electronic signature dedicated to amicable terminations — incorporating advanced signature for both parties, automatic sending of the form to DREETS via TéléRC and time-stamped archiving — the form error rate fell to 2%, and the average validation period decreased from 22 days to 17 days (including the incompressible legal 15-day withdrawal period). The HR department recovered on average 4 hours of administrative work per file.

Case 3: An HR Consulting Firm Supports Clients in GDPR Compliance

An HR consulting firm specialising in employment law, supporting around twenty client companies in their legal compliance, integrated electronic signature into its GDPR compliance services. For each client, the firm formalises processing records, employee confidentiality policies and data processing agreements (DPA) with qualified electronic signature (QES), guaranteeing irrefutable proof of informed consent and signature date. This approach enabled the supported companies to reduce their exposure to CNIL inspections and possess documented evidence during internal audits. The firm was able to promote this offering as a competitive differentiator, with customer satisfaction measured at 94% on compliance commitments. To explore pricing options tailored to this type of usage, our calculator enables you to estimate concrete gains based on the volume of documents processed.

Conclusion

Legal compliance in employment law is a permanent, evolving and multi-faceted requirement for every employer in 2026. From contractual obligations on recruitment through to contract termination management, including data protection, staff representation and risk prevention, the regulatory framework leaves no room for approximation. The sanctions incurred — criminal, civil and administrative — can threaten a company's long-term viability.

Digitalisation of HR processes, based on electronic signature solutions compliant with eIDAS, is today the most effective answer to reconcile operational agility with legal rigour. It strengthens traceability, reduces delays and secures the probative value of each document.

Take action today: discover how Certyneo secures your HR obligations and simplifies your compliance. Contact us or request a demo for personalised support.