Labour Law Compliance: Employer Obligations

Introduction

In France, compliance with labour law represents a permanent challenge for employers: the Labour Code contains more than 3,500 articles, supplemented by collective agreements, branch agreements and constantly evolving case law. Any breach exposes the company to civil, criminal and administrative penalties that can reach several tens of thousands of euros per violation. Faced with this dense regulatory environment, understanding your obligations, prioritising them and equipping yourself effectively is no longer optional but a strategic necessity. This article reviews the main legal obligations of the employer — from the employment contract to notice requirements, including the protection of employees' personal data — and explains how electronic signature in business is an effective and secure lever for compliance.

Employment Contract Fundamentals: Formalisation and Compliance

The mandatory form of the employment contract

The indefinite-term contract (CDI) may legally be verbal for full-time contracts, but practice almost universally requires it to be in writing. By contrast, the fixed-term contract (CDD), part-time employment contract, apprenticeship contract and professional development contract must necessarily be in writing, on penalty of reclassification as a CDI or nullity (articles L1242-12, L3123-6 and L6222-4 of the Labour Code). The employer has two working days to deliver the signed CDD to the employee from the date they start work.

Late transmission or failure to sign exposes the employer to a minimum indemnity of one month's salary. In this context, dematerialisation via a dedicated electronic signature platform for HR allows strict compliance with regulatory deadlines whilst creating a timestamped and enforceable record.

Mandatory contract terms

The employment contract must include specific terms: identity of the parties, place of work, job title, start date, probationary period duration, remuneration and payment frequency, working hours, applicable collective agreement, supplementary pension fund and insurance coverage. Omission of these elements constitutes an irregularity that may give rise to damages.

Article R1221-1 of the Labour Code also requires the provision of a single information document (DUI) setting out the essential elements of the employment relationship, in accordance with European Directive 2019/1152 transposed into French law since November 2023.

Probationary period: rules and renewal

The probationary period is governed by articles L1221-19 to L1221-26 of the Labour Code. Its maximum legal duration varies by professional category: two months for workers and employees, three months for supervisors and technicians, four months for managers. It may be renewed only once, if the collective agreement expressly provides for it and if the employee consents in writing. Renewal that does not comply equates to unlawful termination, engaging the employer's liability.

Notice Requirements, Registers and Mandatory Declarations

Mandatory notices in the workplace

The employer is required to display a set of regulatory documents in its premises, on penalty of fines. Among the mandatory notices are:

• The internal regulations (mandatory from 50 employees)

• Working hours and rest periods

• Contact details of the labour inspectorate, occupational health services and emergency services

• Texts relating to gender equality and non-discrimination

• The title of the applicable collective agreement

• Information on sexual and workplace harassment (article L1153-5 of the Labour Code)

A Direccte (now DREETS) may check these notices during an inspection and draw up a report in case of breach. Partial dematerialisation is permitted on an intranet, provided that all employees have effective access.

The single staff register and the Unique Document for Risk Assessment

Any employer, from the first employee, must maintain a single staff register listing the names, surnames, nationality, date of birth, employment, qualifications, date of entry and departure of each employee (article L1221-13 of the Labour Code). This register must be retained for five years after the employee's departure.

The Unique Document for Professional Risk Assessment (DUERP), made mandatory by decree no. 2001-1016, must be updated annually and whenever there is a significant change in working conditions. The law of 2 August 2021 to strengthen prevention in occupational health extended the obligation to file the DUERP digitally on a national portal, progressively applicable according to company size until 2024-2025.

Social declarations: DSN and URSSAF obligations

Since 2017, the Nominal Social Declaration (DSN) is mandatory for all employers. Transmitted monthly from the payroll software, it centralises all social declarations (sickness, maternity, occupational accident/disease, retirement, unemployment) to social security organisations. Any DSN delay results in a penalty of €7.50 per employee per month of delay (capped at €750 per missing declaration).

URSSAF has a right of control over five years (three years in practice excluding fraud). In case of undeclared work, sanctions are particularly severe: cancellation of contribution exemptions, increased adjustment of 25%, and criminal prosecution that can lead to up to three years' imprisonment and €45,000 fine for individuals.

Protection of Employee Personal Data and GDPR Compliance

HR data processing: legal bases and retention periods

The employer is a data controller under the General Data Protection Regulation (GDPR, no. 2016/679). As such, it must have a valid legal basis for each processing of personal data concerning its employees: performance of the employment contract, legal obligation, legitimate interest or, more rarely, consent.

Retention periods for HR data are governed by the CNIL and specific legal prescriptions: payslips must be retained in electronic format for 50 years (El Khomri law of 2016 codified at article L3243-4 of the Labour Code), employee records for five years after departure, video surveillance data in the workplace for a maximum of one month.

Records of processing activities and employee rights

The employer must maintain a record of processing activities documenting each HR processing: purpose, data categories, recipients, retention periods and security measures. Employees enjoy rights of access, rectification, erasure (within legal limits), portability and objection to profiling.

A personal data breach (intrusion, payroll file loss, erroneous sending of payslips) must be reported to the CNIL within 72 hours and, if the risk to rights and freedoms is high, to the affected employees. Sanctions reach up to 4% of global annual turnover or €20 million.

Monitoring of employees and respect for privacy

The employer may legitimately implement surveillance tools (time clocks, activity tracking software, geolocation) provided it informs employees and staff representatives in advance, proportions surveillance to the objective pursued and conducts an impact assessment (DPIA) if the processing is likely to entail a high risk. The Court of Cassation regularly recalls that any evidence obtained through a non-declared surveillance device is inadmissible in court.

Working Time, Leave and Professional Equality

Regulation of working time: maximum hours and rest periods

The legal working time is set at 35 hours per week for a full-time employee (article L3121-27 of the Labour Code). Exemptions exist via collective agreements, but absolute ceilings apply: 10 hours per day, 48 hours per week, 44 hours on average over 12 consecutive weeks. Employees must be entitled to daily rest of at least 11 consecutive hours and weekly rest of 35 consecutive hours.

Non-compliance with these maximum hours exposes the employer to a fourth-class fine (€750 per affected employee) and, in case of serious risk to employee health, to action for breach of the duty of care.

Paid leave and legal absences

Every employee acquires 2.5 working days of paid leave per month of actual work, or 30 working days (five weeks) per year. Since the DDADUE law of 22 April 2024 (transposing European case law), employees on sick leave continue to accrue paid leave, with a requirement for the employer to inform them on their return.

To these statutory leaves are added: maternity leave (minimum 16 weeks), paternity leave (28 days since 2021), bereavement leave for loss of a child (12 days), and numerous collective agreement exceptional leaves. The management of these absences and the signing of amendments or return-to-work documents directly benefit from the contributions of electronic signature compliant with eIDAS.

Professional equality and the Penicaud index

Since the Professional Future law of 2018, companies with at least 50 employees are required to calculate and publish annually their professional equality index (Penicaud index), before 1 March. This index, out of 100 points, evaluates five indicators: pay gap, gap in rate of pay rises, gap in promotion rate, percentage of female employees given a pay rise on return from maternity leave, and number of women among the ten highest-paid employees. A score below 75 requires the company to define corrective measures within three years, on penalty of a financial penalty that can reach 1% of the payroll.

Staff Representation and Collective Bargaining Obligations

Setting up the Social and Economic Committee (CSE)

Since the Macron ordinances of 2017, the Social and Economic Committee (CSE) is the sole instance of staff representation for companies with at least 11 employees. Its duties evolve according to thresholds: consultation on strategic, economic and social objectives from 50 employees, setting up a health, safety and working conditions committee (CSSCT) from 300 employees.

The employer is required to organise professional elections every four years (or sooner in case of failure), to inform and consult the CSE on any restructuring, redundancy or change in working conditions project, and to provide it with access to the Economic, Social and Environmental Data Base (BDESE). Failure to consult constitutes an obstruction offence punishable by €7,500 fine and one year's imprisonment.

Mandatory annual negotiation (NAO) obligations

In companies with union delegates, the employer must engage in negotiations each year on remuneration (actual salaries, employee savings, value sharing), working time and value sharing. Every three years, negotiations must cover professional equality, quality of life and working conditions, as well as employment management and career development (GEPP) from 300 employees.

Failure to engage in these negotiations also constitutes an obstruction offence. The dematerialisation of company agreements via a secure HR electronic signature solution allows compliance with filing deadlines with the DREETS and guarantees the integrity of signed documents, in accordance with the comprehensive guide to electronic signature.

Legal Framework Applicable to Labour Law Compliance

Compliance with labour law rests on a stack of normative sources that the employer must master simultaneously.

Labour Code: reference text, it structures all individual and collective labour relations. Its absolutely mandatory provisions apply to all, without any derogation possible (e.g. prohibition of child labour, minimum wage, maximum working hours). Supplementary provisions may be adjusted by collective agreement, provided they are not less favourable than the law.

Contracts and electronic signatures: article 1366 of the Civil Code recognises electronic documents as equivalent to paper documents provided that the person from whom they emanate can be duly identified and that they are drawn up and retained in conditions capable of guaranteeing their integrity. Article 1367 defines electronic signature as the use of a reliable identification method. European regulation eIDAS no. 910/2014 (being revised by eIDAS 2.0 — EU regulation 2024/1183) establishes three levels of signature: simple (SES), advanced (AES) and qualified (QES). For employment contracts, advanced or qualified signature is recommended to ensure enforceability in case of dispute.

Personal data protection: GDPR (EU regulation no. 2016/679) is directly applicable. It requires implementation of the principles of minimisation, storage limitation, security (article 32) and accountability (article 5 §2). The Data Protection and Liberties law of 6 January 1978, as amended by ordinance no. 2018-1125, supplements this framework in France.

Occupational health and safety: decree no. 2001-1016 requires the DUERP; law no. 2021-1018 of 2 August 2021 strengthened prevention obligations and created the prevention passport. European framework directive 89/391/CEE is the community basis for these obligations.

Equality and non-discrimination: articles L1132-1 to L1132-4 of the Labour Code and European directive 2000/78/CE establish a general principle of non-discrimination based on 25 criteria. Non-compliance exposes the employer to nullity of discriminatory acts and unlimited damages.

Risks and sanctions: the labour inspectorate (DREETS) has enhanced powers since the ordinance of 7 April 2016: access to premises and documents, written injunctions, stoppage of dangerous work, direct fining. The prosecutor may be seized in case of criminal offence. Convictions may combine fines, repayment of public aid and bans on public procurement.

Use Cases: Labour Compliance and Electronic Signature

An 80-employee service SME facing seasonal contract requirements

An SME in the business services sector permanently employs 80 staff and recruits on average 40 additional employees each summer under fixed-term contracts. Previously, paper-based contract management generated frequent signature delays: candidates residing in the provinces or abroad sometimes returned their contract after the legal deadline of two working days, exposing the company to reclassification risks.

By deploying an advanced electronic signature solution integrated with its HRIS, the SME reduced the average signature time from 4.2 days to less than 18 hours. The documentary compliance rate (contracts signed within the legal deadline) increased from 63% to 97%. Savings generated on printing, sending and physical archiving costs represented approximately €8,500 per year, consistent with the ranges published by sectoral HR digitalisation reports (estimated gains between €50 and €120 per file processed).

A mid-sized industrial group managing NAO and collective agreements

A mid-market industrial company with approximately 1,200 employees spread across four production sites had to finalise several company agreements each year (NAO, working time agreement, employee savings plan) involving signatures from union delegates present on different sites. The paper process required travel, transmission delays and a risk of loss or alteration of documents before filing on the DREETS TéléAccords platform.

Adopting a qualified electronic signature solution reduced the time to finalise agreements from an average of 21 days to 4 working days. Automatic filing on TéléAccords, coupled with timestamped signature traceability, eliminated disputes over the formal validity of agreements. The mid-market company was also able to secure the management of its union data (data sensitive under GDPR, article 9) through end-to-end encryption of documents.

An HR consulting firm externalising contract management for its clients

An HR consulting firm specialising in contract drafting and monitoring manages employment contracts, amendments and severance agreements for about twenty SME clients. Faced with the diversity of applicable collective agreements and the multiplicity of stakeholders (externalised HR managers, executives, employees), the firm needed a multi-client solution allowing it to trace each signature and archive documents with legal probative value.

By relying on a electronic signature platform for legal and HR firms, the firm was able to offer superior service to its clients whilst reducing its operational costs by 30% on document processing. The dematerialisation of severance agreements — whose CERFA form must be signed by both parties and electronically transmitted to the DREETS — particularly benefited from qualified timestamping, making any subsequent dispute over the signature date virtually impossible.

Conclusion

Labour law compliance is not simply about passive observance of a fixed legal corpus: it requires permanent regulatory monitoring, controlled documentary processes and tools adapted to the operational reality of each company. From the employment contract to the DUERP, from DSN to mandatory negotiations, each obligation carries a risk of sanction if poorly managed or poorly documented.

eIDAS-compliant electronic signature is today one of the most effective levers for securing the HR documentary chain, meeting legal deadlines and proving the integrity of documents in case of inspection or dispute. Certyneo supports you in this approach with a platform designed for HR and legal teams.

Ready to secure your work documents? Discover Certyneo pricing or get started for free today.