Digital payslip: legal value and retention

The digitalisation of payslips has become the norm in French companies since the Labour Law of 2016, but many HR directors continue to question a fundamental point: does an electronic payslip really have the same probative force as a paper document? And how can you guarantee its retention over the 50 years required by law? These questions are not trivial: if poorly managed, they expose the employer to labour court disputes and administrative sanctions. This article clarifies the legal value of the digital payslip, the technical conditions essential to its integrity, and best practices for retention in a digital safe deposit box.

Legal value of the digital payslip in 2026

Since article L. 3243-2 of the French Labour Code, amended by law no. 2016-1088 of 8 August 2016, the employer may issue the payslip in electronic form, unless the employee objects. This provision legitimised massive digitalisation, but it alone is not sufficient to guarantee the legal value of the document.

Conditions for equivalence with paper

For an electronic payslip to be legally enforceable, three cumulative conditions must be met:

1. Document integrity: the file must not be modifiable after creation. This requires a technical mechanism guaranteeing the absence of alteration, such as a server seal or an electronic signature compliant with eIDAS.
2. Guaranteed availability: the employee must be able to access their payslip at any time during the legal retention period. Simply sending it by email is not sufficient.
3. Confidentiality: only the concerned employee and the employer should be able to access the document.

The Council of State and the Court of Cassation have progressively consolidated this trilogy in their case law. In the event of a labour dispute, it is the employer's responsibility to prove that they properly issued the compliant payslip; a document whose integrity is not guaranteed may be excluded from proceedings.

Electronic timestamping and traceability: essential tools

Qualified electronic timestamping provides proof that the document existed on a given date and has not been modified since. According to the eIDAS regulation (article 41), a qualified timestamp benefits from a presumption of accuracy regarding the date and integrity of the data. For payslips, it is strongly recommended to affix such a timestamp at the time of document generation to crystallise its content.

Enforceability in labour disputes

The Labour Court regularly examines disputes concerning salary corrections, bonus claims or redundancy payments. In this context, the traceability chain of the payslip is examined closely. A payslip stored in a genuine certified digital safe deposit box — not merely in a simple cloud storage space — presents a significantly higher level of proof. The legal value of the electronic signature associated with the document further strengthens its probative force before the courts.

Payslip retention: the 50-year rule

The retention period for payslips is one of the longest in French employment law. It is set by article L. 3243-4 of the French Labour Code: the payslip must be retained for 50 years or until the employee reaches age 75 (whichever occurs first). This duration, which may seem excessive, is justified by the fact that the payslip serves as proof for calculating pension entitlements.

The obligation rests with both parties

It is often misunderstood that the retention obligation rests with both the employer and the employee. The employer must retain a copy or duplicate of the issued payslips; the employee, for their part, has an interest in retaining them to justify their entitlements to the National Old Age Insurance Fund or regional pension offices in case of discrepancies in their career record.

In a digitalisation context, this raises a practical question: what happens if the employee leaves the company and loses access to the HR portal? The law requires the employer to provide a mechanism for recovery or portability of payslips. This is precisely the role of the digital safe deposit box.

Digital safe deposit box: the compliant solution for 50 years of retention

The personal digital safe deposit box is defined by law no. 2016-1321 of 7 October 2016 (Digital Republic Law) and supplemented by decree no. 2018-418 of 30 May 2018. To be qualified as a digital safe deposit box, the service must:

• Guarantee data integrity stored (no possibility of modification, access logging)
• Ensure confidentiality via end-to-end encryption
• Guarantee availability throughout the retention period
• Allow data restitution in an open and interoperable format
• Be operated by a certified provider according to a recognised standard (ANSSI label or AFNOR NF 461 certification)

The digital payslip HR solution must therefore be supported by a compliant digital safe deposit box, not merely by shared storage space. This distinction is fundamental from a legal standpoint.

Digitalisation and the employee's right to object

The 2016 Labour Law established an inverted consent regime: the employer can digitalise without obtaining employee agreement, but the employee may object at any time. This objection must be respected within a reasonable timeframe (the ministerial circular mentions a one-month deadline).

Managing objections in practice

In companies managing several hundred employees, managing objections can become a real operational challenge. The following should be implemented:

• A register of objections updated in real time
• An automated process allowing the concerned employee to switch to paper delivery upon exercising their right
• Traceability of the objection (date, channel of receipt, acknowledgement of receipt)

These elements are all the more important since failure to respect the right to object is treated as a breach of the obligation to issue the payslip, punishable by the fine provided for class 3 offences (€450 per payslip not issued).

GDPR and payslip data

The payslip contains sensitive personal data: base salary, bonuses, contributions, information regarding supplementary pension, and potentially health-related elements (daily allowances). As such, the processing of this data is subject to the GDPR. The employer, in its capacity as data controller, must:

• Record this processing in its processing register (article 30 GDPR)
• Define a proportionate retention period (50 years for payslips, consistent with the purpose)
• Implement appropriate technical and organisational measures (encryption, access control)
• Designate a DPO if the scale of processing justifies it

Integrated HR solutions, such as those offered by Certyneo as part of electronic signature for HR, make it possible to address simultaneously the constraints of the Labour Code and the GDPR within a single system.

Choosing the right technical architecture for lasting compliance

Compliance over 50 years is not merely a legal question: it is above all a technological challenge. File formats evolve, software becomes obsolete, and service providers disappear. A robust retention strategy must anticipate these risks.

Durable file formats

The PDF/A format (ISO 19005) is the recommended standard for long-term archiving. Unlike standard PDF, PDF/A embeds all fonts and metadata necessary for future reading, without dependency on external resources. It is recognised by French public archives and European courts as a probative format.

Data migration and service continuity

Over 50 years, it is virtually certain you will change HR providers. Your digital safe deposit box contract must include a data portability clause: restitution in an open format (PDF/A, XML), complete export on demand, and a defined migration timeframe. Before committing to a provider, also verify their financial solidity and the existence of a business continuity plan (BCP). An in-depth comparison of available solutions is accessible in our electronic signature solutions comparison.

Logging and audit trail

Every action on an archived payslip (viewing, downloading, access rights modification) must be logged immutably. This audit trail is essential in the event of URSSAF inspection, labour inspection or judicial proceedings. It proves that the document has not been altered between its creation and the moment it is presented as evidence.

Legal framework applicable to digital payslip retention

The digitalisation of payslips rests on a body of legal and regulatory texts that must be mastered to ensure full compliance.

French Labour Code

• Article L. 3243-2: authorises the issue of the payslip in electronic form, subject to the employee's right to object.
• Article L. 3243-4: sets the obligation to retain the payslip for 50 years or until the employee reaches age 75.
• Article R. 3243-5: specifies the technical arrangements guaranteeing the integrity and confidentiality of the electronic payslip.

Law no. 2016-1088 of 8 August 2016 (Labour Law, known as the El Khomri Law): the first major law to generalise digital payslip processing in France, with the inverted consent mechanism.

Law no. 2016-1321 of 7 October 2016 (Digital Republic Law) and decree no. 2018-418 of 30 May 2018: define the framework for the personal digital safe deposit box, its qualification conditions and provider obligations.

eIDAS Regulation no. 910/2014: provides the European framework for trust services, notably electronic seals (article 35 et seq.) and qualified timestamping (article 41). A qualified timestamp benefits from a legal presumption of accuracy regarding the date and integrity of data in all Member States.

Civil Code, articles 1366-1367: establish the principle of equivalence between electronic and paper writing, provided that the identity of the author and the integrity of the document are guaranteed. Article 1367 defines electronic signature and its probative effects.

GDPR Regulation no. 2016/679: fully applies to personal data contained in payslips. The employer, as data controller, must in particular comply with the minimisation principle (article 5), define proportionate retention periods (article 13) and implement appropriate security measures (article 32).

AFNOR Standard NF Z42-013 (electronic archiving) and ISO Standard 14641: define the functional and technical requirements of electronic archiving systems with probative value (SAE). Compliance with these is strongly recommended for any digital safe deposit box provider.

NIS 2 Directive (2022/2555/EU), transposed into French law by law no. 2024-449 of 21 May 2024: strengthens cybersecurity obligations for essential service operators, among which large-scale digital archiving providers may be included.

Risks of non-compliance: an employer failing to respect retention conditions faces labour court sanctions (inability to prove salary payment), URSSAF adjustments (inability to justify contributions paid) and administrative fines. Failure to comply with the GDPR may result in CNIL sanctions of up to €20 million or 4% of global annual turnover.

Use scenarios: long-term retention in practice

Scenario 1 — A mid-sized industrial company of 800 employees in digital transition

An industrial company employing approximately 800 people, spread across three production sites, decides to digitalise all of its payslips. Before migration, the HR teams managed a volume of 9,600 paper payslips per year, stored in secure filing cabinets, with a document management cost estimated at €4.50 per payslip (printing, enveloping, postage, physical archiving). By switching to a certified NF 461 digital safe deposit box, the company reduces this cost to less than €0.80 per payslip, representing annual savings of nearly €35,000. Over the 50-year legal retention period, cumulative savings are substantial. More importantly, during a URSSAF inspection covering the past 5 years, the HR team is able to produce within minutes all requested payslips, complete with qualified timestamping and full audit trail. The inspector concludes the inspection without adjustments related to missing documentation.

Scenario 2 — A network of SMEs in the private healthcare sector

A grouping of private care facilities employing approximately 1,200 employees — doctors, nurses, administrative staff — faces a specific issue: its employees show high mobility and change facilities every 3 to 5 years on average. With each departure, the question of payslip portability arises. By deploying a personal digital safe deposit box attached to each employee — not solely to the employer — the grouping allows each collaborator to retain access to their payslips even after contract termination. When requesting validation of contribution periods from a regional pension office, an employee who worked in three different facilities can produce their complete payslips over 22 years within minutes. The procedure, which previously took several weeks of searching through sometimes incomplete paper archives, is now reduced to less than an hour.

Scenario 3 — An accounting firm managing payroll for small businesses

An accounting firm handling outsourced payroll for approximately fifty SME clients (representing about 300 employees in total) switches its payslip distribution process to an integrated SaaS solution. Before digitalisation, the firm printed and transmitted payslips by mail or email — without any guarantee of integrity. In case of dispute between a client employer and one of its employees, the firm had no proof of compliant delivery. After deploying a digital safe deposit box solution with timestamping and logging, the firm can attest with certainty to the date and conditions of delivery of each payslip. In the 18 months following migration, two attempted labour court challenges regarding salary arrears are dismissed thanks to the robustness of the audit trail produced. The firm also enhances its value proposition to SME clients, who now benefit from a level of compliance previously reserved for large companies.

Conclusion

The digital payslip has full legal value in France, provided that three pillars are rigorously respected: technical integrity of the document, confidentiality of the personal data it contains, and guaranteed retention for 50 years in a certified digital safe deposit box. These requirements, which stem from the Labour Code, the eIDAS regulation and the GDPR, are not mere formalities: they determine the employer's ability to defend themselves in case of labour dispute or URSSAF inspection.

Certyneo assists HR teams in this transition by offering an integrated solution combining generation, signature, qualified timestamping and long-term archiving of payslips. To discover how to secure your digital payroll process and estimate your potential gains, calculate your ROI with our simulator or contact our team for a personalised demonstration.