Employment Law Compliance: Employer Obligations

Employment law compliance represents a strategic challenge for any French company, regardless of size. In 2026, employers face a dense body of legislation: Labour Code, European directives, GDPR regulations and documentary traceability obligations. Failing to meet these obligations exposes the company to labour court sanctions, URSSAF adjustments and serious deterioration of the workplace climate. This article decrypts all legal obligations of the employer, from drafting the employment contract to preserving HR documents, highlighting how tools such as electronic signature for HR transform social compliance management.

Fundamental documentary obligations of the employer

The law requires every employer to formalise in writing a set of documents governing the employment relationship. These documentary obligations are not mere formalities: they constitute the legal proof of the respective rights and duties of the parties.

Employment contract: mandatory form and content

In France, a full-time permanent employment contract (CDI) can in principle be verbal, but practice systematically requires a written document. However, several types of contracts mandatorily require written form on pain of nullity or requalification:

• Fixed-term contract (article L.1242-12 of the Labour Code): the contract must be transmitted to the employee within 2 business days following hiring. It must mention the reason for the contract, the end date or minimum duration, the position, remuneration and applicable collective agreement.

• Temporary work contract (article L.1251-16): same requirement for formalism with transmission within 2 days.

• Part-time contract (article L.3123-6): must be written, it must specify weekly or monthly duration, schedule distribution and conditions for modification.

• Apprenticeship and professional development contract: subject to registration with the competent OPCO.

Since ordinance no. 2017-1387 of 22 September 2017 and the transposition of European directive 2019/1152 on transparent and predictable working conditions, employers must provide every new employee with a written document listing the essential elements of the employment relationship within 7 calendar days. This "written statement" obligation concerns in particular the trial period duration, remuneration, paid leave and any conventional provisions.

Mandatory registers and their maintenance

The employer is required to establish and preserve several registers whose absence can result in fourth-category fines (€750 per infraction):

• Unique personnel register (article L.1221-13): must list all employed persons in chronological order of entry, with identity, nationality, date of birth, gender, employment, qualification, dates of entry and departure. It must be preserved for 5 years after the employee's departure date.

• Single document for the evaluation of occupational risks (DUERP, article L.4121-3): mandatory from the first employee onwards, it must be updated annually or whenever working conditions change. Since law no. 2021-1018 of 2 August 2021, its preservation is extended to 40 years and a dematerialised deposit on a national digital portal is now mandatory for companies with more than 150 employees.

• Register of staff delegations and minutes of CSE meetings for companies with at least 11 employees.

• Safety register for premises subject to periodic inspections.

Mandatory notices in the workplace

In addition to written documents, the employer must display several legally required items in its premises:

• The title of applicable collective conventions and agreements

• Contact details of the labour inspectorate and occupational health physician

• The internal rules (mandatory from 50 employees onwards, article L.1311-2)

• Texts relating to gender equality in the workplace

• Safety and evacuation procedures

• Collective work schedules

Failure to display these items is sanctioned by a fine that can reach €750 per infraction found.

Obligations regarding remuneration and working hours

Salary compliance is one of the labour inspectorate's priority audit areas. In 2025, the General Directorate of Labour conducted over 200,000 interventions, a significant portion of which focused on compliance with the minimum wage and collective agreement minima.

Compliance with minimum wage and collective agreement minima

Since 1 November 2024, the gross hourly minimum wage is set at €11.88, or €1,801.80 gross monthly for 35 hours per week. The employer must ensure that the remuneration of every employee is at least equal to this amount, on penalty of criminal sanctions (€1,500 fine per affected employee, increased to €3,000 in case of repeat offence, article L.3233-1).

Furthermore, collective agreements set minimum wage grids that may be higher than the minimum wage. The employer is required to comply with the collective agreement applicable to their sector of activity, identifiable via the IDCC code (Collective Agreement Identifier) appearing on the pay slip.

Maximum working hours and mandatory rest periods

French law imposes strict limits governed by the Labour Code:

• Legal duration: 35 hours per week (article L.3121-27)

• Maximum daily duration: 10 hours (article L.3121-18), which may be extended to 12 hours by collective agreement or exemption

• Absolute maximum weekly duration: 48 hours in a single week (article L.3121-20) and 44 hours on average over 12 consecutive weeks

• Minimum daily rest: 11 consecutive hours (article L.3131-1)

• Weekly rest: 24 consecutive hours, usually on Sunday (article L.3132-2)

Non-compliance with these provisions exposes the employer to fourth-category criminal sanctions and engages their civil liability in case of work accident attributable to work overload.

The dematerialised pay slip

Since the El Khomri law of 2016 and its implementing decrees, the employer may provide the pay slip in electronic form, unless the employee objects. This dematerialisation is subject to security requirements: accessibility for 50 years or until the employee's 75th birthday, via a certified digital safe. The electronic signature for corporate contracts fits into this secure dematerialisation logic, covering both pay slips and contract amendments.

Obligations relating to health, safety and risk prevention

The obligation of result in safety, established by case law of the Court of Cassation since the landmark Asbestos ruling of 28 February 2002, requires the employer to take all necessary measures to protect the physical and mental health of their employees.

Medical examination and occupational health monitoring

Since law no. 2021-1018 of 2 August 2021 reforming occupational health, medical monitoring obligations have been strengthened:

• Information and prevention visit (VIP): within 3 months of hiring for most employees

• Reinforced individual monitoring (SIR): for positions exposed to particular risks (asbestos, dangerous chemical agents, hyperbaric risks, etc.), with a medical examination of aptitude before taking up the position

• Mid-career visit: newly established around age 45 of the employee

• Return-to-work visit: mandatory after any absence exceeding 30 days for illness or accident

The absence of medical monitoring constitutes inexcusable fault on the employer's part in case of work accident or occupational disease, with considerable financial consequences on work accident and occupational disease (AT/MP) contribution.

Prevention of psychosocial risks (PSR)

Since landmark rulings on moral harassment (Cass. soc., 21 June 2006), case law has progressively extended the safety obligation to psychosocial risks. In 2026, prevention of burnout, moral and sexual harassment, and risks related to digital tools (right to disconnect established by the 2016 Labour Law, article L.2242-17) are among the labour inspectorate's audit priorities.

The national inter-occupational agreement (ANI) of 9 December 2020 on occupational health, transposed in the 2021 law, strengthens employer obligations regarding primary prevention: identification of risk situations in the DUERP, manager training, implementation of internal alert mechanisms.

Staff representation, collective bargaining and workplace equality

Obligations related to the CSE

The Social and Economic Committee (CSE), established by the 2017 Macron ordinances, is mandatory in all companies with at least 11 employees. CSE elections must be organised within 90 days following the crossing of the 11-employee threshold for 12 consecutive months.

For companies with at least 50 employees, the employer must:

• Organise monthly CSE meetings

• Provide an updated Economic, Social and Environmental Data Base (BDESE)

• Consult the CSE on strategic directions, economic situation and social policy

• Negotiate annually on salaries, working time and workplace equality

Non-compliance with these obligations exposes the employer to the offence of obstruction (article L.2317-1), sanctioned by one year's imprisonment and €7,500 fine.

The workplace equality index

Since law no. 2018-771 of 5 September 2018 on freedom to choose one's professional future, all companies with at least 50 employees must calculate and publish annually before 1 March their gender equality index. This index out of 100 points evaluates 5 indicators: remuneration gap, gaps in increases and promotions, rate of female employees receiving increases upon return from maternity leave, and parity among the 10 highest-paid employees.

Below 75 points, the company has 3 years to achieve compliance on penalty of a financial penalty reaching 1% of the payroll. The dematerialised management of HR documents enables more reliable collection and processing of data needed for this index calculation.

Mandatory negotiation and collective agreements

Companies with union representatives are subject to periodic negotiation requirements (article L.2242-1):

• Annually: remuneration, working time and organisation, workplace equality

• Every three years: employment and professional development management (GEPP) for companies with at least 300 employees

The conclusion of collective agreements by electronic means is now fully regulated by law. Decree no. 2023-179 of 13 March 2023 clarified the requirements for using electronic signature for collective agreements, requiring at minimum an advanced electronic signature under eIDAS regulation. To learn more on this point, the complete guide to electronic signature details the signature levels applicable depending on the HR acts.

Obligations regarding training, traceability and preservation of HR data

Personal Training Account and adaptation obligation

Article L.6315-1 of the Labour Code requires the employer to ensure the adaptation of employees to their position and to maintain their ability to hold a job. This obligation translates into:

• Professional interviews every 2 years (mandatory since the law of 5 March 2014)

• Recapitulative assessment every 6 years, verifying that over 6 years the employee has benefited from at least one non-mandatory training, salary or professional advancement, and from their professional interviews

• In case of non-compliance for companies with 50 or more employees, corrective allocation of the employee's training account up to €3,000

Preservation of HR documents and limitation periods

Documentary compliance requires precise retention periods:

| Document | Retention period | |---|---| | Employment contracts and amendments | 5 years after end of contract | | Pay slips | 5 years (50 years for the employer) | | Unique personnel register | 5 years after the departure of the last registered employee | | DUERP | 40 years | | Training documentation | 3 years | | Accounting and social documents | 10 years |

The secure dematerialisation of these documents, combined with timestamped electronic signature solutions, ensures the integrity and enforceability of evidence throughout the legal retention period. You can estimate the savings generated by this transition with our electronic signature ROI calculator.

Protection of employee personal data

GDPR applies fully to employee data. The employer, as the data controller, must:

• Maintain a record of processing activities (mandatory for 250+ employees, recommended below that)

• Inform employees of data collection and processing (article 13 GDPR)

• Appoint a DPO if processing requires it

• Regulate data transfers outside the EU

• Implement technical and organisational security measures

GDPR violations can result in fines up to €20 million or 4% of annual worldwide revenue. The CNIL issued over €40 million in sanctions in 2024 in the HR sector, notably for violations relating to excessive retention of candidate data.

For SMEs wishing to update their documentary models in compliance with these requirements, our AI-powered contract generator offers legally pre-validated templates, regularly updated.

Legal framework applicable to employer HR compliance

Employment law compliance rests on a layering of legal sources whose interaction must be understood.

Labour Code: fundamental provisions

The Labour Code is the cornerstone of employer obligations. Its fundamental articles on compliance include:

• L.1221-1 to L.1248-11: rules relating to employment contracts and their execution

• L.3121-1 to L.3163-2: working hours, rest and leave

• L.4121-1 to L.4741-11: occupational health and safety, prevention obligations and sanctions

• L.2311-1 to L.2317-1: staff representation and obstruction offence

• L.6311-1 to L.6523-9: vocational training and personal training account

Transposition of European directives

Several European directives strengthen the national framework:

• Directive 2019/1152/EU of 20 June 2019 on transparent and predictable working conditions: transposed by ordinance no. 2022-1228 of 14 September 2022, it requires provision of a written document within 7 days of hiring

• Directive 2019/1158/EU on work-life balance: transposed by law no. 2021-1018 of 2 August 2021

• Directive 2002/14/EC on information and consultation of workers: foundation of the CSE

Electronic signature of HR acts: legal foundations

The legal validity of electronic signature of work documents rests on:

• Civil Code, articles 1366 and 1367: electronic signature is recognised as equivalent to handwritten signature as long as it allows identification of the signatory and guarantees document integrity

• eIDAS Regulation no. 910/2014/EU: defines three signature levels (simple, advanced, qualified) and their probative value. Qualified signature (QES) benefits from legal presumption of authenticity throughout the EU

• Decree no. 2023-179 of 13 March 2023: specifies requirements for electronic signature of collective agreements (advanced level minimum)

• ETSI EN 319 132 and EN 319 162 standards: technical standards for XAdES and PAdES formats used in advanced and qualified electronic signatures

Protection of HR data

• GDPR Regulation no. 2016/679/EU: applies to all processing of personal data of employees, candidates and former employees

• Data Protection Act (law no. 78-17 as amended): adapts GDPR to French law and gives the CNIL power to audit and sanction

• Article L.1222-11 of the Labour Code: regulates data processing in the context of remote working

Legal risks in case of non-compliance

Sanctions for employer obligations breaches are multiple: criminal sanctions (fines, offences), labour court sanctions (damages, contract requalification), URSSAF adjustments, DGEFP penalties for non-compliance with training obligations, and CNIL fines. The personal liability of the manager may be engaged in case of inexcusable fault or proven obstruction offence.

Usage scenarios: HR compliance and electronic signature

Scenario 1: A mid-market manufacturing company with 350 employees facing labour inspectorate audits

A manufacturing company with around 350 employees across 3 sites is subject to an unannounced labour inspectorate inspection concerning its HR documentary obligations. Before implementing an electronic signature solution, the company presented several weaknesses: fixed-term contracts where the 2-day transmission deadline was regularly exceeded, amendments signed with delays of several weeks, and a DUERP whose annual update was not traced.

After deploying an eIDAS-compliant electronic signature solution, the company reduced contract and amendment signature time to less than 4 hours on average (compared to 6.2 days previously), with automatic timestamping certifying transmission date. At the next inspection, 100% of documents presented complied with legal deadlines. The estimated risk reduction: elimination of 12 documentary irregularities identified in a prior internal audit.

Scenario 2: A restaurant franchise network managing 120 seasonal contracts per summer

A fast-food restaurant chain with around twenty outlets must each year recruit and formalise approximately 120 seasonal contracts (fixed-term usage contracts) between May and September. Paper-based management resulted in recurring signature delays, lost originals and inability to verify signature status in real time.

By moving to 100% dematerialised seasonal contract management, the network reduced hiring paperwork completion time from 4.8 days to less than 6 hours. Documentary error rates (missing mandatory clauses, incorrectly specified reason for contract) fell from 18% to 2% thanks to pre-populated forms and automatic checks. The administrative cost of managing seasonal contracts decreased by approximately 35%, according to sector benchmarks from FAFIH.

Scenario 3: A digital services group of 80 employees facing a CNIL notice to comply

A computer services company with 80 staff receives a notice to comply from the CNIL following a complaint from a former employee: their personal data (evaluations, remuneration history, archived professional emails) had been retained over 5 years after contract termination, without legal basis or prior notice.

After GDPR-HR compliance audit, the company implemented a structured document retention policy, with automatic purge at legal expiry and timestamped tracking of all access to sensitive documents. Electronic signature of acknowledgements of privacy policies provided to employees enabled construction of enforceable proof of notification. At the CNIL's follow-up inspection six months later, the company was recognised as compliant, avoiding a potential fine estimated between €50,000 and €200,000 given the volume and sensitivity of data involved.

Conclusion

Employment law compliance is an ongoing undertaking for every employer: documentary obligations, compliance with working hours, medical monitoring, staff representation, workplace equality and data protection constitute as many areas requiring rigour and traceability. In a context where labour inspectorate and CNIL audits have intensified, secure dematerialisation of HR documents is no longer an option but a strategic imperative.

eIDAS-compliant electronic signature provides a concrete response to these challenges: timestamped proof of sending, guaranteed document integrity, automated validation workflow and compliant archiving throughout the legal retention period. Certyneo supports HR teams in this transformation, from contract signature to dematerialisation of collective agreements.

Ready to secure your company's HR compliance? Contact our experts or start your free trial on Certyneo today.