Legal Compliance Employment Law: Employer Obligations

Legal compliance in employment law constitutes a strategic challenge for any business, regardless of its size. In France, the Labour Code imposes on the employer a set of precise obligations covering the drafting of contracts, the management of leave, the prevention of occupational hazards and the protection of personal data of employees. Non-compliance with these obligations exposes the company to potentially severe administrative, criminal and civil sanctions. In a context of accelerated digitalisation, the dematerialisation of HR documents — employment contracts, amendments, company agreements — raises new questions about legal validity. This article reviews the main obligations of the employer, associated risks and best practices to secure your employment law compliance.

The fundamental contractual obligations of the employer

The employer is required to formalise the employment relationship in writing in the vast majority of situations. This obligation, long confined to fixed-term contracts (FTC), has expanded considerably under the impetus of European law.

Employment contract: mandatory content and deadlines

Since the transposition of Directive (EU) 2019/1152 on transparent and predictable working conditions, codified in Articles L1221-5 and following of the Labour Code, the employer must provide the employee, within seven calendar days following hiring, with a written document containing at least:

• The identity of the parties and the place of work

• The job title, employment category and nature of work

• The date of commencement of the employment relationship

• Working hours (full-time or part-time)

• Remuneration (base salary, bonuses and benefits)

• Duration of annual paid leave

• The procedure to be followed by the employer and employee in the event of termination of the employment relationship

• Applicable collective agreements

For permanent contracts (CDI), although no formal obligation to draw up the contract itself is provided by the Labour Code, the provision of a single information document (DUI) is now mandatory as of 1 August 2022. Non-compliance with this obligation exposes the employer to a fine of €750 per employee concerned (4th class misdemeanour).

Amendments and modifications to the employment contract

Any modification of an essential element of the employment contract — remuneration, working hours, place of work involving a change of geographical sector — requires the written agreement and signature of the employee. The case law of the Court of Cassation is consistent on this point: a unilateral modification of an essential element constitutes serious misconduct that may justify a taking of action against the employer (Cass. Soc., 8 October 1987, no. 84-41.902 and consistent case law).

The dematerialisation of these documents via electronic signature allows accelerating processes while guaranteeing the traceability and probative value of exchanges.

Obligations regarding health, safety and risk prevention

Article L4121-1 of the Labour Code imposes on the employer a result-based safety obligation to its employees. This obligation is structured around several mandatory documentary devices.

The Single Document for Evaluating Occupational Risks (DUERP)

The DUERP is mandatory for all companies from the first employee, pursuant to Decree no. 2001-1016 of 5 November 2001, amended by Law no. 2021-1018 of 2 August 2021 known as the "Occupational Health Law". Since 1 July 2023 for companies with more than 150 employees (and 1 July 2024 for others), the DUERP must be deposited on a dedicated digital portal managed by OPCOs.

The DUERP must be updated:

• At least once a year in companies with 11 or more employees

• When any significant modification decision altering working conditions is made

• When additional information on a risk is collected

Sanction in case of default: the absence of DUERP constitutes inexcusable fault of the employer in the event of a work accident or occupational disease, giving the employee the right to an annuity increase (Cass. Soc., 28 February 2002, no. 00-11.793).

Safety training and mandatory registers

The employer must organise practical and appropriate safety training for every newly hired worker, when changing position or technique (Article L4141-2 of the Labour Code). This training must be recorded in a training register. Furthermore, the employer is required to maintain and keep up to date:

• The single register of personnel (Article L1221-13)

• The register of minor work accidents (for authorised companies)

• The safety register for reception facilities or establishments subject to the Labour Code

The digitalisation of these registers is authorised provided that their integrity, accessibility and inviolability are guaranteed, which is possible through advanced electronic signature solutions compliant with the eIDAS regulation.

Employer obligations regarding working time and remuneration

Compliance with the rules relating to working time and payroll constitutes one of the priority control areas of the labour inspectorate.

Maximum hours and compulsory rest periods

The Labour Code sets strict limits:

• Maximum daily duration: 10 hours (Article L3121-18), increased to 12 hours by derogation

• Maximum weekly duration: 48 hours in a given week (Article L3121-20) and 44 hours on average over 12 consecutive weeks (Article L3121-22)

• Daily rest: minimum 11 consecutive hours (Article L3131-1)

• Weekly rest: minimum 35 consecutive hours (24 hours + 11 hours daily rest)

Day-rate agreements, applicable to managers and certain autonomous employees, are subject to specific rules and must imperatively be based on a valid collective agreement (Article L3121-64). The employer must furthermore ensure regular monitoring of the workload of the day-rate employee, failing which the day-rate agreement may be declared inopposable.

The pay slip and related obligations

The dematerialised pay slip is now the standard since Ordinance no. 2017-1387 of 22 September 2017: the employer can provide the pay slip in electronic form without prior employee agreement, unless the employee objects. The pay slip must be kept by the employer for 5 years and made available to the employee for 50 years or until their 75th birthday via the personal training account or any other secure digital space.

Compliance with the pay slip also involves respecting the simplified presentation arising from Decree no. 2016-190 of 25 February 2016 (Ministry of Labour model).

Obligations related to employee representation and collective bargaining

Once certain employee thresholds are reached, the employer is subject to additional obligations regarding social governance.

The Social and Economic Committee (CSE)

Since the Macron Ordinances of 22 September 2017 (Ordinance no. 2017-1386), all companies with at least 11 employees must organise elections to establish a Social and Economic Committee (CSE). The employer must:

• Organise elections within 90 days of informing employees

• Provide the CSE with the necessary means (premises, delegation hours, budget)

• Inform and consult the CSE on the strategic direction, economic situation and social policy of the company

Failure to establish the CSE or organise elections constitutes an obstruction offence punishable by a fine of €7,500 for the legal entity (Article L2317-1 of the Labour Code).

Mandatory company-level negotiation (NOE)

In companies with union representatives, the employer is required to enter into mandatory negotiations according to the following frequency (Articles L2242-1 and following):

• Each year: on remuneration, working time, sharing of added value and equal opportunity

• Every three years: on employment management and professional development (GEPP) in companies with more than 300 employees

The electronic signature of negotiation minutes and company agreements, through advanced electronic signature, offers enhanced probative value and simplifies the filing procedure on the TéléAccords platform.

Protection of employees' personal data: an integrated GDPR obligation

The employer, as a data controller within the meaning of the GDPR (Regulation (EU) 2016/679), must comply with a set of specific obligations in the context of the employment relationship.

HR data processing and legal basis

The processing of employees' personal data must be based on a valid legal basis. In the employment context, the main legal bases used are:

• Performance of the employment contract (Article 6.1.b of the GDPR) for payroll management, leave, training

• Legal obligation (Article 6.1.c) for DSN declaration, keeping mandatory registers

• Legitimate interest (Article 6.1.f) for certain monitoring devices, subject to rigorous balancing

The employer must inform employees of the existence of processing concerning them through an information notice appended to the employment contract (Article 13 of the GDPR). The record of processing activities (RAT) must imperatively include HR processing.

Retention periods and right to erasure

The CNIL has published sector-specific frameworks clarifying retention periods applicable to HR data. By way of example:

• Data from unsuccessful candidates: 2 years maximum

• Employment contracts and related documents: 5 years after the end of the contract

• Pay slips: 5 years (employer) and availability for 50 years (employee)

• Video surveillance data in the company: 1 month in general

Companies that dematerialise their HR processes must integrate these constraints into their document management policy. Discover how electronic signature can help you produce documents compliant with current legal requirements.

Applicable legal framework for employer compliance in employment law

Employer compliance in employment law is part of a dense normative framework, articulating national and European law.

Labour Code (legislative and regulatory parts): fundamental basis, it governs all individual and collective employment relationships. Articles L1221-1 and following govern the employment contract, while Articles L4121-1 to L4121-5 define the employer's safety obligations.

Directive (EU) 2019/1152 of 20 June 2019 on transparent and predictable working conditions in the European Union, transposed into French law by Decree no. 2022-1173 of 25 August 2022: it requires the provision of the Single Information Document (DUI) within seven days of hiring.

eIDAS Regulation no. 910/2014 and its successor eIDAS 2.0 (Regulation (EU) 2024/1183): they define the levels of electronic signature (simple, advanced, qualified) and their legal value. In accordance with Article 25 of eIDAS, a qualified electronic signature (QES) produces the same legal effects as a handwritten signature in all member states. For employment contracts, advanced electronic signature (AES) provides a sufficient level of guarantee in the vast majority of situations.

Civil Code, Articles 1366 and 1367: Article 1366 gives electronic written form the same probative force as writing on paper, provided that the person is duly identified and the document is drawn up and kept in conditions guaranteeing its integrity. Article 1367 clarifies that an electronic signature consists of the use of a reliable process for identifying the signatory guaranteeing their link to the deed.

GDPR no. 2016/679 of 27 April 2016: applicable to all processing of employees' personal data. Non-compliance with GDPR obligations exposes the employer to fines that can reach 4% of global annual turnover or €20 million (Article 83 of the GDPR). In France, the CNIL has imposed several significant sanctions against employers for breaching their GDPR obligations in HR matters.

ETSI standards EN 319 132 and EN 319 122: they define the advanced electronic signature formats XAdES and CAdES, ensuring interoperability and longevity of signatures over time.

Law no. 2021-1018 of 2 August 2021 (Occupational Health Law): strengthens primary prevention obligations, in particular the updating and digital filing of the DUERP.

Macron Ordinances of 22 September 2017 (no. 2017-1385, no. 2017-1386, no. 2017-1387, no. 2017-1388): fundamentally reform employment law, establishing the CSE and relaxing the framework for collective bargaining.

An employer who fails to comply with these texts faces criminal sanctions (obstruction offence, undeclared work), civil sanctions (nullity of acts, damages) and administrative sanctions (notice from DRIEETS, administrative closure). The use of certified digital tools can significantly reduce these risks.

Use cases: how companies secure their employment law compliance

Case 1: An 80-employee IT services SME accelerates the signing of its contracts and amendments

An SME in the IT services sector, managing approximately 80 employees on permanent contracts and regularly using seasonal reinforcements on fixed-term contracts, faced average delays of 8 to 12 days to collect signatures on employment contracts and amendments. These delays exposed the company to a risk of non-compliance with the obligation to provide the DUI within seven days (Directive 2019/1152). By deploying an advanced electronic signature solution integrated into its HRIS, the SME reduced the average signing delay to less than 24 hours. The rate of documents signed within the legal deadline increased from 61% to 97%. The savings achieved on printing, postal and document management costs were estimated at approximately €8,500 per year, representing a positive ROI from the fourth month of use.

Case 2: A 350-employee industrial group digitalises its DUERP and safety protocols

A mid-sized industrial group, operating on three production sites and employing 350 employees, needed to meet the requirement for digital filing of the DUERP introduced by the 2021 Occupational Health Law. The multiplicity of sites and the complexity of annual updates generated documentary inconsistencies and a high risk of inopposability of the document during an inspection. By digitalising the entire process — collaborative drafting, validation by CSE members via electronic signature, automatic filing on the OPCO portal — the group divided by three the time for the annual DUERP update (from 6 weeks to 2 weeks). Enhanced traceability made it possible to demonstrate compliance during a surprise labour inspectorate inspection, avoiding a notice of non-compliance.

Case 3: A fast-food franchise network secures its company agreements and mandatory negotiations

A fast-food franchise network, comprising around thirty affiliated establishments under a parent company employing over 400 employees in total, needed to organise mandatory negotiations each year on remuneration and equal opportunity. The geographical dispersal of union representatives and signatories complicated the collection of signatures on negotiation minutes and company agreements. The deployment of an electronic signature solution compliant with eIDAS streamlined the multi-party signature process, reducing the time to finalise agreements from an average of 21 days to less than 5 days. Automatic filing on TéléAccords, generated from the platform, also eliminated procedural error risks during filing, a frequent source of rejections previously.

Conclusion

Legal compliance in employment law is an ongoing project for the employer: contractual obligations, risk prevention, working time management, employee representation and data protection form a demanding regulatory framework, the non-compliance with which can be costly in terms of sanctions and social reputation. The digitalisation of HR processes — and in particular eIDAS-compliant electronic signature — is today one of the most effective levers for reconciling speed of execution, probative value and regulatory compliance.

Certyneo supports you in securing all your HR documents: employment contracts, amendments, company agreements, DUERP and much more. Contact us for a free consultation or request a demonstration to measure concrete gains you could achieve. Ready to take action? Start signing in compliance today.