Legal Compliance Labour Law: Employer Obligations

Legal compliance in labour law represents one of the major challenges for any business, regardless of size. In France, the Labour Code imposes a precise corpus of obligations on every employer: from drafting employment contracts to managing agreed terminations, including mandatory postings and securing employees' personal data. In 2026, this regulatory framework has become even denser, particularly due to the eIDAS 2.0 regulation, GDPR requirements and the progressive generalisation of HR digitalisation. This article presents comprehensively the obligations of the employer, associated legal risks and available tools to satisfy them without fail.

Foundations of HR Compliance: Contractual Obligations

Employment Contract: a Precise Legal Requirement

Every employer must provide the employee, no later than two working days following recruitment, with a written document recalling the essential elements of the working relationship — in compliance with the French transposition of European Directive 2019/1152 of 20 June 2019 concerning transparent and predictable working conditions. For permanent contracts (CDI), the provision of a written contract is not strictly obligatory under law, but it is imperatively recommended if any collective agreement provides for it. For fixed-term contracts (CDD), part-time contracts and apprenticeship contracts, the written contract is obligatory on pain of reclassification.

The contract must mention: the identity of the parties, place of work, job title, start date, working time, remuneration, trial period duration and applicable collective agreement. Any omission exposes the employer to damages.

Prior Declaration to Recruitment (DPAE)

Mandatory for each new employee, the DPAE must be submitted to URSSAF no later than 8 days before the employee begins work. This declaration automatically triggers affiliation to social security, creation of the retirement file and membership in the occupational health service. Failure to file the DPAE constitutes the offence of undeclared work, punished by 3 years imprisonment and €45,000 fine for individuals (Article L.8224-1 of the Labour Code).

Medical Examination on Recruitment

Since the reform of occupational health resulting from the 2016 Labour Law and its implementing decrees, the medical examination on recruitment has been replaced by an information and prevention visit (VIP) in most cases. This visit must take place no later than 3 months following the start of employment (or before starting for high-risk positions). The employer is responsible for organising and monitoring these visits. Non-compliance with this obligation can engage the employer's civil liability, particularly in case of workplace accident or occupational illness.

Obligations During Contract Performance

Working Time, Rest and Mandatory Postings

The employer must ensure strict monitoring of working time for each employee, in accordance with Articles L.3121-1 and following of the Labour Code. Maximum legal durations (10 hours per day, 48 hours per week, 44 hours averaged over 12 weeks) must be strictly complied with. Following the Court of Justice ruling of 14 May 2019 (case C-55/18, CCOO v Deutsche Bank), every employer must implement an objective, reliable and accessible system for measuring daily working time.

Regarding mandatory postings, the employer must display or make available to employees the following information:

• Collective working schedules

• Name and contact details of the competent labour inspector

• Address and telephone number of emergency services

• Fire and evacuation procedures

• Internal regulations (for companies with at least 50 employees)

• Texts relating to equal remuneration between men and women

• Remedies for moral and sexual harassment

The absence of posting is sanctioned by a fine of up to €1,500 per violation found.

Professional Training and Personal Training Account (CPF)

The employer has the obligation to ensure the adaptation of its employees to the evolution of their job and to maintain their employability. It must contribute to the Personal Training Account (CPF) of each employee to the tune of €500 per year (€800 for low-skilled employees), within a ceiling of €5,000 (€8,000 for low-skilled employees). A professional interview must be organised every two years, as well as an assessment at six years to verify whether the employee has benefited from at least one non-mandatory training action, salary or professional progression, or acquisition of certification elements.

Protection of Employees' Personal Data

The GDPR (Regulation EU 2016/679) applies fully to employee personal data processing. The employer, as data controller, must:

• Keep a record of processing activities (Article 30 GDPR)

• Inform employees of processing concerning them (Articles 13 and 14)

• Limit collection to strictly necessary data (minimisation principle)

• Frame transfers outside the EU

• Appoint a Data Protection Officer (DPO) if its activity requires it

Violations of GDPR can result in fines of up to €20 million or 4% of annual worldwide turnover, whichever is higher. CNIL issued several sanctions in 2025 against employers for excessive HR data retention periods.

Contract Termination Management: Procedural Obligations

Dismissal: Strict Formalism

Dismissal for personal or economic reason is subject to a procedure strictly governed by Articles L.1232-1 and following of the Labour Code. The employer must:

• Call the employee to a preliminary meeting by registered letter with acknowledgment of receipt (LRAR) or hand delivery against receipt

• Respect a minimum period of 5 working days between the summons and the meeting

• Hold the preliminary meeting with possible assistance for the employee

• Notify dismissal by LRAR, no earlier than 2 working days after the meeting

• Specify the reason for dismissal in the letter

The dismissal letter sets the limits of the dispute in case of judicial challenge. Dismissal without real and serious cause exposes the employer to the Macron scale of compensation (from 0.5 to 20 months gross salary depending on length of service, Article L.1235-3 of the Labour Code).

Agreed Termination and Digitalisation

Since the generalisation of the TéléRC service on the Mon.Service-Public.fr portal, individual agreed termination must be approved online by DREETS (Regional Directorate of Economy, Employment, Work and Solidarity). This process involves signing the CERFA form no.14598 by both parties, with a withdrawal period of 15 calendar days.

Electronic signature secures and considerably accelerates this procedure: the agreed termination form can be signed electronically, with certified timestamping and audit proof, guaranteeing document integrity and traceability of both parties' consent.

Staff Representation and Social Dialogue

Social and Economic Committee (CSE): Obligation to Establish

Since the Macron ordinances of 2017 (Law no.2017-1340 of 15 September 2017), any company with at least 11 employees for 12 consecutive months is required to establish a Social and Economic Committee (CSE). CSE elections must be organised every 4 years. Failure to establish a CSE constitutes the offence of obstruction, punished by 1 year imprisonment and €7,500 fine (Article L.2317-1 of the Labour Code).

The CSE has powers regarding health, safety and working conditions (SSCT) for companies with at least 50 employees, including the right to alert in case of serious and imminent danger.

Collective Bargaining and Professional Equality Index

Companies with at least 50 employees are subject to annual negotiation obligations on salaries, working time and profit sharing. Since the Law of 5 September 2018 (Law no.2018-771 for freedom to choose one's professional future), companies with at least 50 employees must calculate and publish each year their Professional Equality Index (Index Egapro), before 1 March. A score below 75 points out of 100 requires the company to define corrective measures on pain of a financial penalty reaching 1% of the payroll.

Health, Safety and Risk Prevention

Single Document for Evaluating Occupational Risks (DUER)

Mandatory since Decree no.2001-1016 of 5 November 2001, the Single Document for Evaluating Professional Risks (DUERP) must be updated at least annually and whenever significant modifications change working conditions. Since the Law of 2 August 2021 (Law no.2021-1018), companies with at least 150 employees must file the DUERP on a national digital portal managed by OPCOs. This document must be retained for at least 40 years minimum.

The lack of DUERP is sanctioned by a Class 5 fine (€1,500 for individuals), but above all engages the criminal liability of the employer in case of workplace accident, on the basis of failure to meet the obligation of result security.

Prevention of Harassment and Psychosocial Risks

The employer is bound by an active obligation to prevent moral harassment (Article L.1152-4 of the Labour Code) and sexual harassment (Article L.1153-5). In companies with at least 250 employees, a sexual harassment referent must be appointed from among CSE members. Any company must also integrate psychosocial risks (RPS) into its DUERP.

Compliance with these procedures can be greatly facilitated by digitalisation: formalised alerts, electronically signed reporting forms, traceability of processing steps. Consult our guide to understand how to integrate these tools into your HR organisation.

Legal Framework Applicable to Employer Compliance

Foundational Texts of Labour Law

Employer legal compliance is based on a dense legislative corpus whose pillars are:

• Labour Code (Legislative and regulatory part): employment contracts (L.1221-1 et seq.), working time (L.3121-1 et seq.), health-safety (L.4121-1 et seq.), staff representation (L.2311-1 et seq.), dismissal (L.1232-1 et seq.), training (L.6311-1 et seq.)

• Law no.2017-1340 of 15 September 2017 empowering to take by ordinances the measures to strengthen social dialogue (Macron ordinances, creation of CSE)

• Law no.2021-1018 of 2 August 2021 to strengthen workplace health prevention (Labour Health Law: DUERP reform, reinforced medical monitoring)

• European Directive 2019/1152 concerning transparent and predictable working conditions, transposed into French law by Ordinance no.2022-1104 of 3 August 2022

Electronic Signature and Legal Value of HR Documents

Electronic signature of work documents (contracts, amendments, agreed terminations, collective agreements) is governed by:

• Civil Code, Articles 1366 and 1367: "Electronic writing has the same probative force as writing on paper support"; "Electronic signature consists in the use of a reliable identification procedure guaranteeing its link with the document it attaches to."

• Regulation eIDAS no.910/2014 (now revised by eIDAS 2.0, Regulation EU 2024/1183): defines three levels of electronic signature — simple (SES), advanced (AdES) and qualified (QES). Qualified signature is presumed equivalent to handwritten signature throughout the EU (Article 25§2).

• ETSI Standard EN 319 132: specifies technical requirements for advanced electronic signatures in XAdES, PAdES and CAdES format used in digitalised contractual documents.

• Order of 22 March 2019 concerning electronic signature of notarial acts, progressively extending use to regulated professions.

Data Protection and GDPR in HR

• Regulation EU 2016/679 (GDPR): legal basis for processing employee data (Article 6§1b — contract performance), retention periods (5 years post-termination for payslips), individual rights (access, rectification, limited erasure)

• NIS2 Directive (Directive EU 2022/2555), transposed into French law by the Law of 11 April 2024: imposes reinforced cybersecurity requirements on essential and important entities, including securing HR systems and electronic signature platforms

• CNIL Deliberation no.2002-017 and sectoral reference frameworks: specifically govern data processing in the context of personnel management

Risks and Penalties

The legal risks for non-compliant employers are multiple: criminal sanctions (obstruction, undeclared work), administrative fines (CNIL up to 4% of worldwide turnover), employment tribunal judgements (Macron scale, salary arrears, damages), and growing reputational risks in the age of ESG rankings. Using an electronic signature solution constitutes an essential safeguard against challenging the validity of HR acts.

Use Cases: Electronic Signature Serving HR Compliance

Scenario 1: A Mid-Size Industrial SME of 180 Employees Digitalises its Contracts and Amendments

A mid-size industrial company managing about 180 employees across two sites faced a significant volume of seasonal fixed-term contracts and working time modification amendments. Paper processing resulted in average delays of 7 days between drafting and effective document signature, with a loss or filing error rate estimated at 12%. By adopting an advanced electronic signature solution (AdES) integrated into its HRIS, the SME reduced this delay to less than 24 hours, reduced printing and archiving costs by 65%, and secured the traceability of each signature (timestamping, IP address, two-factor authentication). In case of employment tribunal dispute, the company now has complete audit trail, exportable as certified PDF, in compliance with eIDAS regulation requirements.

Scenario 2: A Multi-Unit Hotel Group Secures its Agreed Terminations

A hospitality and restaurant operator managing about ten establishments and approximately 400 employees processed up to 40 agreed terminations per year, with an entirely paper procedure requiring postal exchanges. Approval delays lengthened due to form errors (poorly completed CERFA forms, missing signatures) and lost mail. After deploying a dedicated workflow for agreed termination electronic signature — incorporating advanced signature for both parties, automatic form submission to DREETS via TéléRC and timestamped archiving — the form error rate fell to 2%, and average approval time decreased from 22 days to 17 days (including the incompressible legal withdrawal period of 15 days). The HR department recovered on average 4 hours of administrative work per file.

Scenario 3: An HR Consulting Firm Accompanies its Clients in GDPR Compliance

An HR consulting firm specialising in supporting twenty client companies in social compliance integrated electronic signature into its GDPR compliance services. For each client, the firm formalises processing records, employee privacy policies and data processing agreements (DPA) with qualified electronic signature (QES), guaranteeing irrefutable proof of informed consent and signature date. This approach enabled supported companies to reduce exposure to CNIL audits and have documented proof during internal audits. The firm was able to position this offering as a competitive differentiator, with customer satisfaction measured at 94% on compliance commitments. To explore pricing options suitable for this type of use, our pricing calculator allows estimating concrete gains depending on document volume processed.

Conclusion

Legal compliance in labour law is a permanent, evolving and multi-dimensional requirement for every employer in 2026. From contractual obligations on recruitment through to managing terminations, including data protection, staff representation and risk prevention, the regulatory framework leaves no room for approximation. The penalties incurred — criminal, civil and administrative — can jeopardise a company's survival.

Digitalisation of HR processes, supported by electronic signature solutions compliant with eIDAS, is today the most effective response to reconcile operational agility and legal rigour. It strengthens traceability, reduces delays and secures the probative value of each document.

Take action today: discover how Certyneo secures your HR obligations and simplifies your compliance. Contact us or request a demo for personalised support.