Legal Compliance in Labour Rights: Employer Obligations

Introduction

Legal compliance with labour rights represents one of the most critical challenges for any enterprise, regardless of size. In France, the Labour Code imposes on the employer a set of precise obligations: drafting contracts, regulatory posting, maintaining registers, respecting working hours, managing employees' personal data. Non-compliance with these rules exposes the company to administrative, criminal and civil sanctions that can be substantial. This article reviews the main legal obligations, associated risks and digital best practices — notably electronic signature — to secure each stage of the employee's life cycle.

---

The Fundamental Contractual Obligations of the Employer

Drawing up and delivering the employment contract

Under French law, an indefinite-term employment contract (CDI) on a full-time basis is not subject to a mandatory written form requirement, except where a collective agreement provides otherwise. However, the transposition of European Directive 2019/1152 of 20 June 2019 — known as the "Transparent and Predictable Working Conditions Directive" — requires the employer to provide each employee, no later than the 7th calendar day following hiring, with a document or set of documents containing the essential information relating to the employment relationship (article L. 1221-5-1 of the Labour Code, as amended by decree no. 2023-1004 of 30 October 2023).

For fixed-term contracts, temporary work contracts, apprenticeship contracts and internship agreements, the written form is mandatory and must be delivered within very strict timeframes (generally 2 working days for a fixed-term contract). Failure to deliver a written contract within the legal timeframe may result in the fixed-term contract being reclassified as an indefinite-term contract by the Labour Court.

Electronic signature for HR is today an effective solution to guarantee traceability and timestamping of these contractual deliveries, while reducing administrative delays.

Mandatory Clauses in Contracts

The employment contract must include a certain number of legal clauses:

• Identity of the parties (name, address, SIRET number of the employer)

• Date of commencement of the employment relationship

• Place of work and, where applicable, remote working arrangements

• Job title, employment category, hierarchical coefficient

• Working hours and schedule distribution

• Remuneration (base salary, bonuses, benefits in kind)

• Duration of the trial period and renewal conditions

• Applicable collective agreement

• Supplementary social protection scheme

The omission of certain of these clauses may constitute a punishable breach, and in some cases, allow the employee to seek damages.

---

Mandatory Posting and Employee Information

Documents to be displayed in the workplace

Article L. 1221-16 of the Labour Code and numerous specific provisions require the employer to display or bring to the knowledge of employees an exhaustive list of documents. Amongst the mandatory postings are:

• The internal rules (mandatory from 50 employees, article L. 1311-2 of the Labour Code)

• Working hours and weekly rest periods

• Address and name of the competent labour inspector

• Details of emergency services

• Title of applicable collective agreements and contracts

• Texts relating to professional equality (article L. 1142-6)

• List of employee delegates on the CSE (Social and Economic Committee)

• National number for combating discrimination (3928)

• Provisions of the Penal Code relating to moral and sexual harassment

Since law no. 2021-1018 of 2 August 2021 known as the "Workplace Health" law, obligations to prevent occupational hazards have been strengthened, notably the mandatory annual updating of the Document for Assessing Occupational Risks (DUERP) at least once a year in companies with at least 11 employees.

Digital Communication: Between Opportunity and Compliance

The law of 8 August 2016 (the "Labour" law or El Khomri law) opened the door to the dematerialisation of certain mandatory information, provided that employees have easy access to it. The employer may thus make this information available via the intranet or a secure HR portal. However, the burden of proof of consultation rests with the employer, which requires traceable solutions. The use of tools such as an AI-powered contract generator or a digital signature platform allows such proofs of access and delivery to be automated.

---

Management of Working Time and Mandatory Registers

Legal Durations and Derogations

The Labour Code sets the legal working duration at 35 hours per week (article L. 3121-27). Overtime may be worked within the limits of legal maximum durations:

• 10 hours per day (article L. 3121-18)

• 48 hours per week (article L. 3121-20)

• 44 hours on average over a period of 12 consecutive weeks (article L. 3121-22)

Exceeding these ceilings without a collective agreement or labour inspector authorisation constitutes an offence subject to a fine of €1,500 per employee concerned (article R. 3124-3).

Day-rate schemes, reserved for managers and certain autonomous employees, must be expressly provided for by a collective agreement and stipulated in the individual contract. The absence of a valid collective agreement makes the day-rate scheme non-opposable to the employee, who may then claim payment for overtime.

Mandatory Registers

The employer is required to maintain several registers, some of which must be retained for specific periods:

• The unique personnel register: mandatory from the first employee (article L. 1221-13), retained for 5 years after the employee's departure

• The DUERP: retained for at least 40 years under the 2021 Workplace Health law

• The CSE delegation register and meeting minutes

• The minor workplace accident register (if the company has a medical service)

• The personal data processing register (GDPR, article 30 of regulation 2016/679)

The dematerialised maintenance of these registers is permitted provided that their integrity, confidentiality and accessibility to inspection officers are guaranteed. Electronic signature solutions for businesses help ensure these requirements of documentary integrity.

---

Protection of Employees' Personal Data (GDPR)

Specific Obligations in an HR Context

The General Data Protection Regulation (GDPR, EU regulation 2016/679) applies fully to the processing of employee data. As a data controller, the employer must:

• Inform employees of the nature of the data collected, its purpose, retention period and their rights (articles 13 and 14 of the GDPR)

• Keep a record of processing activities (article 30)

• Designate a Data Protection Officer (DPO) in certain cases (article 37), notably in the event of large-scale processing of sensitive data (medical records, trade union convictions)

• Govern data transfers to third countries outside the EU

• Implement appropriate security measures (encryption, pseudonymisation, access controls)

The CNIL has published several HR sectoral frameworks, including the framework on administrative personnel management (decision of 22 November 2012, updated post-GDPR). Non-compliance may result in sanctions of up to €20 million or 4% of global annual turnover.

Electronic Signature as a GDPR Compliance Tool

The use of a certified electronic signature platform, as explained in the complete guide to electronic signature, offers a dual advantage: it secures the delivery of contractual documents whilst minimising the personal data processed (principle of minimisation, article 5.1.c of the GDPR). Signature biometric data is replaced by cryptographic mechanisms that do not involve biometric data collection in the strict sense.

---

Obligations Regarding Health, Safety and Prevention

The General Safety Obligation… Now Shifted to Reinforced Means

Since the Court of Cassation ruling of 25 November 2015 (no. 14-24.444), case law has nuanced the safety obligation on the employer: it is no longer an absolute obligation of result but a reinforced obligation of means. An employer who proves having taken all necessary measures to protect the physical and mental health of employees may exonerate itself from liability.

This shift in case law does not, however, alleviate the practical requirements:

• Assessment of occupational hazards formalised in the DUERP

• Annual prevention programme (PAPRIPACT) for companies with 50 or more employees

• Safety training and first aid training

• Medical visits (information and prevention visit on hiring, enhanced individual monitoring for high-risk positions)

• Adaptation of workstations for employees with disabilities or during pregnancy

Criminal Liability of the Employer

Non-compliance with safety obligations may engage the criminal liability of the employer as a natural person (director, holder of delegated powers) for deliberate endangerment of others (article 223-1 of the Penal Code), involuntary injury (article 222-19) or even involuntary manslaughter (article 221-6), with penalties ranging up to 3 years' imprisonment and €45,000 fine in the event of manifest deliberate breach of a safety obligation.

The implementation of documented procedures, timestamped registers and electronic signatures on safety protocols constitutes valuable evidence in the event of litigation, as highlighted in our comparison of electronic signature solutions.

Legal Framework Applicable to Employer Obligations in Labour Law

Core Texts of Domestic Law

The employer's obligations in terms of legal compliance are rooted in a dense legislative and regulatory framework:

• Labour Code: articles L. 1221-1 et seq. (contract formation), L. 1311-1 et seq. (internal rules), L. 3121-1 et seq. (working time), L. 4121-1 et seq. (health and safety), L. 2311-1 et seq. (employee representation)

• Decree no. 2023-1004 of 30 October 2023: transposition of EU Directive 2019/1152 on transparent and predictable working conditions

• Law no. 2021-1018 of 2 August 2021 known as the "Workplace Health" law: strengthening of the DUERP, creation of the prevention passport, obligation to retain the DUERP for 40 years

• Law no. 2022-1598 of 21 December 2022 on emergency measures for the labour market

• Civil Code, articles 1366 and 1367: legal value of electronic signature — article 1366 provides that "electronic writing has the same probative force as writing on paper" and article 1367 defines electronic signature as "the use of a reliable identification process guaranteeing its link with the act to which it is attached"

Applicable European Regulation

• eIDAS Regulation no. 910/2014 (and its revised version eIDAS 2.0, EU regulation 2024/1183): defines three levels of electronic signature (simple, advanced, qualified) and establishes the principle of non-discrimination between qualified electronic signature and handwritten signature. For employment contracts, an advanced electronic signature (AES) or qualified electronic signature (QES) is recommended to maximise legal security

• GDPR Regulation no. 2016/679: applicable to the processing of employees' personal data. Article 88 allows Member States to lay down specific rules for processing in the context of employment relationships, subject to appropriate protection measures

• NIS2 Directive (EU 2022/2555): transposed in France by the law on the resilience of activities of critical importance (LOPMI and transposition ordinance), imposes cybersecurity measures on essential and important operators, which includes critical HR systems

• ETSI EN 319 132 Standard: European technical standard defining advanced electronic signature formats XAdES, applicable to HR contractual documents

Legal Risks in Case of Non-Compliance

| Breach | Potential Sanction | |---|---| | Absence of written contract (fixed-term contract) | Reclassification as indefinite-term contract, damages | | Exceeding maximum working hours | Fine of €1,500 per employee (R. 3124-3) | | Absence of DUERP | Fine of €1,500 (R. 4741-1) | | Serious GDPR violation | Up to €20m or 4% of global turnover | | Failure to post mandatory notices | Fine of €750 per breach (R. 1227-1) | | Failure to prevent harassment | Employer's civil and criminal liability |

The employer may validly use electronic signature for all HR documents provided that the signature level chosen is suited to the sensitivity of the document and that the employee's consent is free and informed (recital 155 of the GDPR).

Usage Scenarios: HR Compliance Strengthened by Electronic Signature

Scenario 1 — An Industrial SME with 120 Employees Facing Fixed-Term Contract Reclassification

An SME in the manufacturing sector employing about 120 employees made extensive use of fixed-term contracts to absorb its seasonal peaks in activity. Contracts were sent by post or delivered in person, without timestamped proof of delivery within the legal 2-working-day timeframe. Over two financial years, three labour court disputes resulted in reclassifications as indefinite-term contracts, representing a total cost of approximately €47,000 (back pay, compensation and legal fees).

After deploying an advanced electronic signature solution integrated into its HRIS, the SME reduced the delivery timeframe for contracts to zero (instant transmission, certified timestamping). The signed-and-returned rate increased from 64% within legal timeframes to 99%, and no further disputes related to late delivery were recorded in the following 18 months. The return on investment, calculated via a dedicated ROI calculator, proved positive from the 4th month of use.

Scenario 2 — A Distribution Group with 800 Retail Outlets and Decentralised HR Management

A food distribution network managing several hundred retail outlets as franchises faced critical documentary heterogeneity: internal rules not updated, contract amendments not returned signed in 30% of cases, incomplete DUERP in certain entities. The labour inspection, during an on-site inspection, had issued several formal notices.

The group's HR department standardised the entire documentary cycle via a centralised electronic signature platform, with automatic reminders and compliance dashboards by entity. Within 6 months, the documentary completeness rate increased from 68% to 97%. HR teams recovered on average 2.5 hours per week per administrator previously devoted to manual follow-ups — representing a saving equivalent to 1.2 FTE across the group.

Scenario 3 — An Accountancy Firm Managing HR Outsourcing for Small Client Companies

An accountancy firm of about twenty staff members offered social management services to about one hundred small-client companies. The multiplicity of contacts, geographical dispersion and variety of applicable collective agreements made managing evidence of contractual delivery particularly complex.

By integrating a electronic signature solution for law and accountancy firms, the firm was able to create dedicated signature workflows by document type (contract, amendment, final settlement statement, receipt for settlement), with automatic archiving for legal retention periods. The added value perceived by clients led to an increase in the average basket of social services of 18%, according to the firm's internal estimate based on semi-annual satisfaction surveys.

Conclusion

Legal compliance in labour rights is not an incidental administrative burden: it conditions the validity of contracts, the protection of employees and the employer's civil and criminal liability. From contractual obligations to posting rules, through working time management, register-keeping and the protection of personal data, each stage of the HR cycle is governed by precise texts and sanctioned in the event of breach.

The dematerialisation of documentary processes, supported by an electronic signature solution compliant with the eIDAS regulation, is today the most effective lever to secure all these obligations whilst reducing administrative burden. Certyneo offers you a turnkey, certified and compliant platform, suited to the HR challenges of French and European companies.

Ready to secure your HR compliance? Discover our offers and start for free on Certyneo today.