Remote work: legal rights and obligations 2026

Remote work has become a permanent fixture in the French professional landscape. According to figures published by DARES in 2025, nearly 35% of private sector employees practise remote work regularly, compared to less than 10% before the 2020 health crisis. This massification was not without friction: disputes over cost coverage, uncertainty around remote monitoring, gaps in contractual amendments… In 2026, the legislator and social partners have substantially refined the applicable framework. This article takes stock of the legal rights and obligations of remote work in 2026, so that neither the employer nor the employee is caught off guard.

The legal framework for remote work: from the 2020 ANI to 2026 developments

The legislative pillars still in force

Remote work is defined in French law by article L.1222-9 of the Labour Code, arising from the Macron ordinance no. 2017-1387 of 22 September 2017 and supplemented by the National Inter-professional Agreement (ANI) of 26 November 2020. These texts establish four fundamental principles: mutual consent, reversibility, equal treatment between remote workers and on-site employees, and coverage of professional expenses.

In 2026, these pillars remain intact, but several implementation decrees and sectoral amendments have clarified practical arrangements, particularly on three points: the right to disconnect (strengthened by a DGT circular of March 2025), the definition of "structured hybrid remote work" (which distinguishes contractually fixed days from floating days), and cybersecurity obligations following the transposition of directive NIS 2 into French law in October 2024.

The amendment to the employment contract: a formal obligation

Article L.1222-9 paragraph 3 requires that the implementation of remote work be formalised by an amendment to the employment contract or by a unilateral employer charter. In 2026, the practice of simple email exchanges is clearly insufficient: in the event of an employment tribunal dispute, courts require a signed document from both parties specifying:

• The number of days of remote work per week or per month;

• Availability time slots;

• The place of work (home, approved coworking space, etc.);

• Arrangements for cost coverage (URSSAF allowance or actual reimbursement);

• Equipment provided and applicable information security rules.

To secure this amendment, more and more companies are resorting to electronic signature for HR, which provides verifiable and time-stamped proof of employee consent, whilst accelerating processing times.

Employee rights in remote work in 2026

Coverage of professional expenses

Covering the costs associated with remote work remains one of the most frequent points of friction. URSSAF has tolerated since 2021 a flat-rate allowance exempt from social contributions, revised annually. In 2026, this allowance is set at €12.40 per day of actual remote work, up to 60% of the monthly amount. Beyond that, proof of actual expenses is required (electricity bills, internet subscription, office equipment).

The employer cannot make the exercise of remote work conditional on the employee waiving this coverage. Any contractual clause going in this direction is deemed unwritten.

Right to disconnect and digital monitoring

The right to disconnect, enshrined in article L.2242-17 of the Labour Code since the El Khomri law of 2016, has been significantly strengthened by conventional practice. In 2026, the CNIL has published new recommendations (deliberation no. 2025-042) strictly governing tools for monitoring remote working employees: screen capture software, keystroke tracking, real-time geolocation. These practices are presumed disproportionate unless documented justification and prior information to the Works Council and affected employees is provided.

Accident at home

The Court of Cassation has confirmed in several recent rulings (2024-2025) that an accident occurring at home during working hours is presumed to be a work accident within the meaning of article L.411-1 of the Social Security Code. This presumption now extends to coworking spaces approved by the employer, which requires the employer to declare these locations to its professional liability insurer.

Employer obligations in terms of cybersecurity

Directive NIS 2 and its impacts on remote work

Transposed into French law by law no. 2024-1119 of 4 December 2024, directive NIS 2 (EU 2022/2555) significantly expands the scope of entities subject to enhanced cybersecurity requirements. In 2026, "essential entities" and "important entities" — approximately 15,000 organisations in France according to ANSSI estimates — must implement security policies explicitly covering remote work environments.

In practical terms, this translates to:

• The obligation to provide a VPN or encrypted remote access solution;

• Provision of company-managed equipment (MDM – Mobile Device Management);

• Training employees on phishing and social engineering risks;

• Implementation of multi-factor authentication (MFA) for access to information systems.

The sanctions provided by NIS 2 for essential entities can reach €10 million or 2% of worldwide turnover. For important entities, the ceiling is €7 million or 1.4% of turnover.

GDPR and remote work: new points of vigilance

Remote work amplifies the risks of personal data breaches: connections from unsecured Wi-Fi networks, use of personal equipment, storage of confidential information in home environments. In 2026, the CNIL considers that the employer, as a data controller within the meaning of article 4 of GDPR no. 2016/679, must document in its processing register the specific measures adopted to secure remote work.

Companies that are dematerialising their documentary flows — contracts, mission orders, timesheets — should adopt a solution compliant with the eIDAS regulation and its traceability requirements to guarantee the integrity and authenticity of documents exchanged remotely.

Formalising remote work agreements: best practices 2026

Charter or collective agreement: which form to choose?

The employer has a choice between two vectors for governing remote work beyond the individual amendment:

• The collective agreement, negotiated with union representatives or the Works Council, which applies to all employees falling within its scope. It is more protective for the company as it prevails over potential individual disputes.

• The unilateral charter, established after consultation of the Works Council, which can be put in place more quickly but offers less legal security in case of challenge.

In 2026, 62% of companies with more than 50 employees have a collective agreement on remote work, compared to 41% in 2022 (source: Annual Report of the Ministry of Labour, 2025). The trend is clearly towards formalised negotiation.

Dematerialisation of HR documents: a compliance issue

The proliferation of amendments, charters and information documents related to remote work has prompted many HR departments to accelerate their digital transformation. Electronic signature in the enterprise offers an appropriate solution: it allows an amendment to be signed remotely in minutes, timestamps the document and preserves proof of integrity with a qualified trust service provider (QTSP) according to eIDAS regulation.

It is important to distinguish the three levels of signature provided for by eIDAS — simple, advanced and qualified — depending on the criticality of the document. For an amendment to an employment contract, advanced electronic signature (AES) is generally sufficient, whilst certain specific legal acts require a qualified signature. To choose the level adapted to your HR context, the comprehensive guide to electronic signature from Certyneo details each level and its implications.

Finally, for companies wishing to rationalise their contractual footprint and automatically generate compliant templates for remote work amendments, the AI contract generator from Certyneo represents significant time savings whilst reducing the risk of drafting errors.

Legal framework applicable to remote work in 2026

The legal regime for remote work in France is based on a multi-layered architecture, combining national labour law, European law and sectoral agreements.

Labour Code

• Article L.1222-9: legal definition of remote work, principle of mutual consent, obligation to formalise by agreement or charter, right to return to on-site work.

• Article L.1222-10: employer obligations (cost coverage, information on usage restrictions, priority for on-site return).

• Article L.2242-17: annual obligation to negotiate the right to disconnect as part of negotiation on quality of working life.

Social Security Code

• Article L.411-1: presumption of work accident applicable to remote working employee during contractual hours.

European law

• Regulation eIDAS no. 910/2014 and its revision eIDAS 2.0 (regulation EU 2024/1183): define the levels of electronic signature (simple, advanced, qualified) and the obligations of qualified trust service providers (QTSP). Advanced signature meets the evidence requirements for most HR documents, in accordance with article 25 of the regulation.

• GDPR no. 2016/679: the data controller (employer) must ensure the security of personal data processed in a remote work context (article 32), document the measures in the processing register (article 30) and carry out a DPIA if the processing presents a high risk (article 35).

• Directive NIS 2 (EU 2022/2555), transposed by law no. 2024-1119 of 4 December 2024: requires risk management measures covering remote work environments for essential and important entities. Sanctions up to €10m or 2% of worldwide turnover.

National Inter-professional Agreement (ANI) of 26 November 2020: best practice framework for regular and occasional remote work, adopted by most sectoral agreements.

ETSI Standards

• ETSI EN 319 132: technical specifications for advanced electronic signatures (XAdES).

• ETSI EN 319 122: CAdES specifications for dematerialised contractual documents.

Legal risks identified for the employer

• Absence of signed amendment: possible reclassification as unilateral contract modification, exposing to dismissal without a real and serious cause.

• Non-coverage of professional expenses: condemnation to reimbursement + interest for late payment.

• Disproportionate monitoring of employees: CNIL sanctions (up to 4% of worldwide turnover), moral prejudice.

• Failure to secure IT in remote work: NIS 2 and GDPR liability exposure in case of data breach.

Concrete usage scenarios

Scenario 1 — An 80-person IT services SME dematerialises its remote work amendments

An IT services SME had hitherto practised remote work informally, through simple email exchanges. Following a URSSAF inspection covering cost coverage and an employment tribunal dispute concerning return-to-office arrangements, the HR department decides to formalise all its remote work amendments. By integrating an advanced electronic signature solution compliant with eIDAS into its HRIS, the SME moves from an average processing time of 12 days (follow-ups, postal sends, signed returns) to less than 48 hours to obtain a signed amendment. The rate of contractual disputes drops by 40% in the following year. All documents are archived in a probative manner, with qualified time-stamping, which significantly simplifies responses to labour inspection requests.

Scenario 2 — A legal consultancy secures its documentary flows in hybrid remote work

A law firm of some twenty partners and associates operates in hybrid mode (3 days remote, 2 days on-site). Teams handle sensitive documents, contract drafts and confidential correspondence on a daily basis. Following the transposition of NIS 2, the managing partner instructs the CISO to audit digital practices. It emerges that 30% of sensitive documents were transiting through unencrypted personal email. The implementation of a certified signature and document sharing platform allows centralisation of flows, tracing each action on the document and eliminating insecure exchanges. The firm reduces its GDPR violation exposure and meets the new NIS 2 requirements for cyber risk management linked to remote work.

Scenario 3 — A 1,200-employee industrial group deploys a remote work charter negotiated with unions

An industrial group with several sites in France must standardise remote work practices following the merger of two entities with different HR cultures. The remote work collective agreement is negotiated with union representatives over six months. It covers 800 eligible positions, defines common availability periods and provides a unified expense allowance. The signature of this agreement — by representatives of each union organisation and management — is conducted electronically. The deployment of individual amendments, organised in waves by site, is completed in three weeks instead of the originally planned two months. The HR department estimates a saving of approximately 600 hours of administrative processing for the entire operation, representing a return on investment of the digital solution within the first quarter.

Conclusion

In 2026, remote work is no longer an exceptional tolerance but a structural component of work organisation, governed by a dense and constantly evolving legal corpus. Employers must ensure compliance of their contractual amendments, their cost coverage policy, their cybersecurity measures (NIS 2) and their management of personal data (GDPR). For employees, knowing one's rights — disconnection, expenses, protection in case of accident — is now essential.

The dematerialisation of HR documents, and in particular electronic signature compliant with eIDAS, is a major lever for securing these obligations whilst gaining efficiency. Certyneo supports you in this transformation: discover our rates and offers tailored to HR teams or test our ROI calculator to measure concrete gains for your organisation.