Legal Compliance Employment Law: Employer's Obligations

Legal compliance in employment law constitutes a strategic challenge for any business, regardless of its size. In France, the Labour Code imposes on the employer a set of precise obligations covering contract drafting, leave management, occupational risk prevention and the protection of employees' personal data. Failure to comply with these obligations exposes the company to potentially severe administrative, criminal and civil sanctions. In a context of accelerated digitalisation, the dematerialisation of HR documents — employment contracts, amendments, company agreements — raises new questions about legal validity. This article reviews the main employer obligations, associated risks and best practices for securing employment law compliance.

The employer's fundamental contractual obligations

The employer is required to formalise the employment relationship in writing in the vast majority of situations. This obligation, which was previously limited to fixed-term contracts (CDD), has been significantly expanded under the impetus of European law.

Employment contract: mandatory content and deadlines

Since the transposition of Directive (EU) 2019/1152 on transparent and predictable working conditions, codified in articles L1221-5 et seq. of the Labour Code, the employer must provide the employee, within seven calendar days following recruitment, with a written document containing at minimum:

• The identity of the parties and the place of work

• The job title, employment category and nature of work

• The start date of the employment relationship

• Working hours (full-time or part-time)

• Remuneration (base salary, bonuses and benefits)

• Annual paid leave duration

• The procedure to be followed by the employer and employee in the event of termination of the employment relationship

• Applicable collective agreements

For permanent contracts (CDI), whilst there is no formal written obligation prescribed by the Labour Code for the contract itself, the provision of a single information document (DUI) is now mandatory as of 1 August 2022. Non-compliance with this obligation exposes the employer to a fine of €750 per employee concerned (4th class misdemeanour).

Contract amendments and modifications to the employment contract

Any modification of an essential element of the employment contract — remuneration, working hours, place of work entailing a change of geographical sector — requires the written and signed agreement of the employee. The case law of the Court of Cassation is consistent on this point: unilateral modification of an essential element constitutes serious misconduct that may justify assertion of fault against the employer (Cass. Soc., 8 October 1987, n°84-41.902 and consistent case law).

The dematerialisation of these documents via electronic signature allows processes to be accelerated whilst guaranteeing traceability and the evidential value of exchanges.

Obligations regarding health, safety and occupational risk prevention

Article L4121-1 of the Labour Code imposes on the employer a result-based safety obligation towards its employees. This obligation is based around several mandatory documentary provisions.

The Single Document for the Assessment of Occupational Risks (DUERP)

The DUERP is mandatory for all companies from the first employee, pursuant to decree n°2001-1016 of 5 November 2001, as amended by law n°2021-1018 of 2 August 2021 known as the "Occupational Health Law". As of 1 July 2023 for companies with more than 150 employees (and 1 July 2024 for others), the DUERP must be deposited on a dedicated digital portal managed by OPCO.

The DUERP must be updated:

• At minimum once per year in companies with 11 or more employees

• When any significant restructuring decision modifies working conditions

• When additional information on a risk is gathered

Sanction for non-compliance: the absence of a DUERP constitutes inexcusable fault on the part of the employer in the event of occupational accident or occupational disease, entitling the employee to an increase in annuity (Cass. Soc., 28 February 2002, n°00-11.793).

Safety training and mandatory registers

The employer must organise practical and appropriate safety training for any newly recruited worker, upon change of position or technique (article L4141-2 of the Labour Code). This training must be recorded in a training register. Furthermore, the employer is required to maintain up to date:

• The unique personnel register (article L1221-13)

• The register of minor occupational accidents (for authorised companies)

• The safety register for ERP or establishments subject to the Labour Code

The digitalisation of these registers is permitted provided their integrity, accessibility and inviolability are guaranteed, which advanced electronic signature solutions compliant with the eIDAS regulation allow.

The employer's obligations regarding working time and remuneration

Compliance with rules on working time duration and pay constitutes one of the priority inspection areas for labour inspectors.

Maximum durations and mandatory rest periods

The Labour Code sets strict limits:

• Maximum daily duration: 10 hours (article L3121-18), increased to 12 hours by derogation

• Maximum weekly duration: 48 hours in any given week (article L3121-20) and 44 hours on average over 12 consecutive weeks (article L3121-22)

• Daily rest: minimum 11 consecutive hours (article L3131-1)

• Weekly rest: minimum 35 consecutive hours (24h + 11h daily rest)

Day-rate arrangements, applicable to managers and certain autonomous employees, are subject to specific rules and must imperatively be based on a valid collective agreement (article L3121-64). The employer must moreover ensure regular monitoring of the workload of the employee on a day-rate arrangement, otherwise risking the arrangement being declared unenforceable.

The pay slip and related obligations

The dematerialised pay slip is now the norm since ordinance n°2017-1387 of 22 September 2017: the employer may provide the pay slip in electronic form without prior employee agreement, unless the employee objects. The pay slip must be retained for 5 years by the employer and made available to the employee for 50 years or until their 75th birthday via the personal training account or any other secure digital space.

Compliance of the pay slip also means respecting the simplified presentation resulting from decree n°2016-190 of 25 February 2016 (Ministry of Labour model).

Obligations relating to staff representation and collective bargaining

Once certain workforce thresholds are exceeded, the employer is subject to additional obligations concerning social governance.

The Social and Economic Committee (CSE)

Since the Macron ordinances of 22 September 2017 (ordinance n°2017-1386), all companies with at least 11 employees must organise elections to establish a Social and Economic Committee (CSE). The employer must:

• Organise elections within 90 days from notification to employees

• Provide the CSE with necessary means (premises, delegation hours, budget)

• Inform and consult the CSE on the company's strategic direction, economic situation and social policy

Failure to establish a CSE or organise elections constitutes an obstruction offence liable to a fine of €7,500 for the legal person (article L2317-1 of the Labour Code).

Mandatory company-level negotiation (NOE)

In companies with union representatives, the employer is required to engage in mandatory negotiation according to the following frequency (articles L2242-1 et seq.):

• Each year: on remuneration, working time, value-added sharing and occupational equality

• Every three years: on employment management and career development (GEPP) in companies with more than 300 employees

Electronic signature of negotiation minutes and company agreements via advanced electronic signature offers enhanced evidential value and simplifies the procedure for submission to the TéléAccords platform.

Protection of employees' personal data: a GDPR-integrated obligation

The employer, as a data controller within the meaning of GDPR (Regulation (EU) 2016/679), must comply with a set of specific obligations within the framework of the employment relationship.

HR processing and the legal basis

Personal data processing concerning employees must be based on a valid legal basis. In the employment context, the main legal bases mobilised are:

• Performance of the employment contract (article 6.1.b of GDPR) for pay management, leave, training

• Legal obligation (article 6.1.c) for DSN declaration, maintenance of mandatory registers

• Legitimate interest (article 6.1.f) for certain surveillance mechanisms, subject to rigorous balancing

The employer must inform employees of the existence of processing concerning them via an information notice appended to the employment contract (article 13 of GDPR). The processing activities register (RAT) must imperatively record HR processing.

Retention periods and right to erasure

The CNIL has published sectoral benchmarks specifying retention periods applicable to HR data. By way of example:

• Data on unsuccessful applications: maximum 2 years

• Employment contracts and related documents: 5 years after contract termination

• Pay slips: 5 years (employer) and provision for 50 years (employee)

• Video surveillance data in the workplace: 1 month as a general rule

Companies that dematerialise their HR processes must integrate these constraints into their document management policy. Discover how electronic signature can help you produce documents compliant with current legal requirements.

Legal framework applicable to employer compliance in employment law

Employer legal compliance in employment law is part of a dense normative framework, articulating national and European law.

Labour Code (legislative and regulatory parts): fundamental basis, it governs all individual and collective employment relationships. Articles L1221-1 et seq. govern the employment contract, whilst articles L4121-1 to L4121-5 define employer safety obligations.

Directive (EU) 2019/1152 of 20 June 2019 on transparent and predictable working conditions in the European Union, transposed into French law by decree n°2022-1173 of 25 August 2022: it requires provision of the Single Information Document (DUI) within seven days following recruitment.

eIDAS Regulation n°910/2014 and its successor eIDAS 2.0 (Regulation (EU) 2024/1183): they define the levels of electronic signature (simple, advanced, qualified) and their legal value. Pursuant to article 25 of eIDAS, a qualified electronic signature (SEQ) produces the same legal effects as a handwritten signature in all member states. For employment contracts, advanced electronic signature (SEA) offers a sufficient level of assurance in the vast majority of situations.

Civil Code, articles 1366 and 1367: article 1366 grants electronic writing the same evidential force as paper writing, provided the person is duly identified and the document is established and preserved under conditions guaranteeing its integrity. Article 1367 specifies that an electronic signature consists of the use of a reliable procedure for identifying the signatory guaranteeing its link with the act.

GDPR n°2016/679 of 27 April 2016: applies to all processing of employees' personal data. Non-compliance with GDPR obligations exposes the employer to fines of up to 4% of annual worldwide turnover or €20 million (article 83 of GDPR). In France, the CNIL has imposed several significant sanctions on employers for breaching their GDPR obligations in HR matters.

ETSI Standards EN 319 132 and EN 319 122: they define advanced electronic signature formats XAdES and CAdES, guaranteeing interoperability and the longevity of signatures over time.

Law n°2021-1018 of 2 August 2021 (Occupational Health Law): strengthens primary prevention obligations, in particular updating and digital submission of the DUERP.

Macron ordinances of 22 September 2017 (n°2017-1385, n°2017-1386, n°2017-1387, n°2017-1388): fundamentally reform employment law, establishing the CSE and relaxing the collective bargaining framework.

An employer who breaches these provisions faces criminal sanctions (obstruction offence, undeclared work), civil sanctions (nullity of acts, damages) and administrative sanctions (DRIEETS enforcement notice, administrative closure). Recourse to certified digital tools makes it possible to significantly reduce these risks.

Use cases: how companies secure their employment law compliance

Scenario 1: An 80-employee IT services SME accelerates signature of its contracts and amendments

An IT services SME managing approximately 80 permanent employees and regularly using seasonal fixed-term reinforcements faced average delays of 8 to 12 days to collect signatures on employment contracts and amendments. These delays exposed the company to a risk of non-compliance regarding the obligation to provide the DUI within seven days (Directive 2019/1152). By deploying an advanced electronic signature solution integrated into its HR system, the SME reduced average signature delay to less than 24 hours. The rate of documents signed within the legal timeframe rose from 61% to 97%. Savings realised on printing, postal and document management costs were estimated at approximately €8,500 per year, representing a positive ROI from the fourth month of use.

Scenario 2: A 350-employee industrial group digitalises its DUERP and safety protocols

An intermediate-sized industrial group operating three production sites and employing 350 staff needed to meet the digital submission obligation for the DUERP established by the 2021 Occupational Health Law. The multiplicity of sites and complexity of annual updating generated documentary inconsistencies and a high risk of document unenforceability in the event of inspection. By digitalising the entire process — collaborative drafting, validation by CSE members via electronic signature, automatic submission to the OPCO portal — the group reduced annual DUERP updating time by three (from 6 weeks to 2 weeks). Enhanced traceability made it possible to demonstrate compliance during an unannounced labour inspection, avoiding an enforcement notice.

Scenario 3: A restaurant franchise network secures its company agreements and mandatory negotiations

A restaurant franchise network comprising around thirty affiliated establishments under a head company employing over 400 staff in total needed to organise annual mandatory negotiations on remuneration and occupational equality. The geographical dispersion of union representatives and signatories complicated signature collection on negotiation minutes and company agreements. Deploying an eIDAS-compliant electronic signature solution streamlined the multi-party signature process, reducing average finalisation delay for agreements from 21 days to less than 5 days. Automatic submission to TéléAccords generated from the platform also eliminated procedural error risks during submission, which previously caused frequent rejections.

Conclusion

Legal compliance in employment law is an ongoing challenge for the employer: contractual obligations, risk prevention, working time management, staff representation and data protection form a demanding normative framework, whose non-compliance can be costly in terms of sanctions and social reputation. Digitalisation of HR processes — and in particular eIDAS-compliant electronic signature — is today one of the most effective levers for reconciling speed of execution, evidential value and regulatory compliance.

Certyneo supports you in securing all your HR documents: employment contracts, amendments, company agreements, DUERP and much more. Contact us or request a demo to concretely measure the gains you could realise. Ready to take action? Sign up for your free account and start signing in compliance today.