Legal Compliance in Labour Law: Employer Obligations

Introduction

Legal compliance in labour law is one of the most complex challenges for French employers, whether it is a micro-enterprise with 3 employees or a group with several thousand collaborators. Between contractual obligations at the beginning of an employment contract, ongoing administrative formalities, rules relating to working hours and safety requirements, the French Labour Code now contains more than 10,000 articles. Any breach exposes the company to criminal penalties, URSSAF recoveries or costly employment tribunal disputes. This article provides a structured and actionable overview of your legal obligations in 2026, and explains how electronic signature makes it possible to secure and trace all of these acts.

1. Obligations at recruitment: contracts, DPAE and registers

Prior notification of hiring (DPAE)

Before any commencement of execution of an employment contract, the employer is required to submit a prior notification of hiring (DPAE) to URSSAF, in accordance with articles L.1221-10 and following of the Labour Code. This formality, completed at the earliest 8 days before hiring and at the latest at the time of taking up duties, conditions the opening of the employee's social rights (health insurance, unemployment, retirement). In the event of omission, the employer faces a fine of up to €1,500 per employee not declared, or even the qualification of undeclared work (article L.8221-5 of the Labour Code), punishable by 5 years imprisonment and a €75,000 fine.

Drawing up and delivery of the employment contract

While a full-time permanent employment contract (CDI) can theoretically be verbal, the employer is in practice always required to provide the employee, within 2 months of taking up duties, a written statement setting out the essential elements of the employment relationship (EU Directive 2019/1152 transposed into French law). On the other hand, the fixed-term employment contract (CDD), temporary agency work contract, part-time contract or apprenticeship contract must necessarily be drawn up in writing, delivered within strict deadlines (2 working days for CDD, article L.1242-13). Absence of written form results in automatic reclassification as a permanent contract.

Electronic signature is here a first-rate compliance tool: it guarantees traceability of delivery, time-stamping of the signature and document integrity. To find out more about HR uses of electronic signature, consult our page dedicated to electronic signature for HR.

The single personnel register and mandatory registers

Article L.1221-13 of the Labour Code requires every employer to keep a single personnel register, mentioning for each employee their surname, first name, nationality, date of birth, gender, job, qualification, start and end dates. This register must be kept 5 years after the employee's departure. Added to this are the register of staff representatives (in companies with at least 11 employees), the single document for evaluation of occupational hazards (DUERP, article R.4121-1), updated at least annually, and the register of minor work accidents.

2. Ongoing obligations: working time, remuneration and social protection

Legal working time and its exceptions

The legal duration of work is set at 35 hours per week (article L.3121-27 of the Labour Code). Beyond this, overtime hours entitle to increase (25% for the first 8 hours, 50% thereafter) or equivalent compensatory rest. Non-compliance with these rules exposes the employer to criminal penalties (article L.3171-4) and to URSSAF recovery of social contributions not paid on unpaid increases.

Absolute maximum durations are: 10 hours per day, 48 hours per week and 44 hours on average over 12 consecutive weeks (article L.3121-20). Day-based forfeit systems, applicable to autonomous executives, require a collective agreement and a mandatory annual meeting, failing which they are void (Cass. Soc., recurring rulings since 2011).

Compliance of the payslip and remuneration obligations

Article R.3243-1 of the Labour Code lists the 25 mandatory items on the payslip. Since January 2017, the simplified payslip is the standard, but the employer must be able to provide a detailed payslip on request. Salary payment must take place at least once a month, on a fixed date.

Compliance with the minimum wage (€18.17/hour gross as of 1 January 2026) and sector-specific minima under the applicable collective agreement is mandatory. An employee receiving less than the sector-specific minimum can claim back pay for 3 years (article L.3245-1).

Obligations relating to vocational training

Since the law of 5 September 2018 "for the freedom to choose one's professional future", every employer is required to fund training through the vocational training contribution (CFP) and apprenticeship tax. The professional development meeting every 2 years (article L.6315-1) is mandatory, and the absence of training for 6 years results in an increase in personal training account (CPF) of €3,000 at the employer's expense. In 2024, URSSAF carried out more than 12,000 inspections resulting in recoveries related to training.

3. Health, safety and prevention: an obligation of result

The Single Document for Evaluation of Occupational Hazards (DUERP)

Since the law of 2 August 2021 strengthening prevention in occupational health, the DUERP is a strengthened obligation. It must list all occupational hazards present in the company and define an annual prevention programme for companies with at least 50 employees. The DUERP must now be kept for 40 years and deposited on a dedicated digital portal for companies with more than 150 employees. Absence of DUERP is subject to a fine of €1,500 (5th class) and constitutes inexcusable fault by the employer in the event of a work accident.

Medical examination at hiring and medical monitoring

Since the decree of 27 December 2016, the information and prevention visit (VIP) replaces the traditional hiring medical examination for most employees, but must take place within 3 months of taking up duties. Workers exposed to particular risks (article R.4624-23) benefit from enhanced individual monitoring with a prior visit to hiring by the occupational health physician. Non-compliance with these obligations may result in the nullity of dismissal for unfitness.

Mandatory posting obligations

The employer is required to post in the workplace a set of legal information, including: the title of applicable collective agreements, the contact details of the labour inspection, occupational health physician and emergency services, the company rules (mandatory from 50 employees), texts relating to equal pay for men and women and combating harassment. In 2025, DREETS sanctioned hundreds of companies for failure to post, with fines up to €10,000.

4. Staff representation and social dialogue: structural obligations

Setting up the CSE

Any company reaching the threshold of 11 employees for 12 consecutive months must organise elections for a Social and Economic Committee (CSE) (articles L.2311-2 and following). Terms are 4 years, renewable once. Failure to organise elections constitutes an offence of obstruction (article L.2317-1), punished by 1 year imprisonment and €7,500 fine. Companies with more than 50 employees have extended obligations: provision of premises, operating budget (0.20% of payroll), budget for social and cultural activities, and mandatory monthly meetings.

Mandatory annual negotiation (NAO)

In companies with a union representative, mandatory annual negotiation covers salaries, working time and value sharing. Since the law of 29 November 2023, companies with more than 50 employees making more than 1% net profit must negotiate a value-sharing agreement. Failure to negotiate without legitimate grounds constitutes an offence of obstruction.

Management of staff representatives and delegation hours

CSE elected representatives are entitled to legal delegation hours (from 10 to 34 hours depending on company size and mandates held). These hours are of right considered as working time. Any obstruction to their exercise exposes the employer to damages and criminal penalties. The keeping of a delegation note, although not legally mandatory, remains recommended for administrative monitoring, provided it does not constitute obstruction.

5. Digitisation of HR compliance: challenges and best practices

Towards controlled dematerialisation of HR acts

Dematerialisation of HR acts — contracts, amendments, conventional terminations, dismissal letters, election minutes — responds to a dual purpose: reduction of non-compliance risks (document loss, absence of delivery evidence) and operational efficiency gains. Qualified or advanced electronic signature, within the meaning of the eIDAS regulation, offers probative value equivalent to handwritten signature (article 1367 of the Civil Code) and guarantees document integrity.

Certyneo offers a platform dedicated to HR workflows making it possible to manage the entire documentary lifecycle, from contract generation to legal archiving. Explore our complete guide to electronic signature to understand the different signature levels and their uses.

Risks associated with non-compliant dematerialisation

Poorly conducted dematerialisation can weaken the legal value of documents. Use of a simple email or checkbox without certified time-stamping does not constitute electronic signature in the legal sense. In the event of an employment tribunal dispute, the judge may dismiss a document whose integrity or attribution cannot be proven. It is therefore essential to use a qualified trust service provider (QTSP) within the meaning of eIDAS, listed on the European Trust List.

To assess the return on investment of an electronic signature solution in your HR organisation, use our electronic signature ROI calculator.

Legal archiving and retention of evidence

Compliance does not end with signature: document retention is of paramount importance. Employment contracts must be kept 5 years after contract termination (civil limitation period), payslips 50 years (pension), and documents relating to work accidents 10 years. Electronic archiving with probative value, complying with standard NF Z 42-026, guarantees the authenticity and integrity of documents over the long term. Our AI-powered contract generator natively integrates these traceability requirements.

Legal framework applicable to employer compliance

Employer legal compliance is based on a dense and articulated corpus of law between national and European law.

French Labour Code: the foundation of all obligations, it governs individual and collective employment relationships. Articles L.1221-1 and following govern the employment contract; articles L.3121-1 and following working time; articles L.4121-1 and following the prevention of occupational hazards. Violation of Labour Code provisions may result in civil sanctions (voidness of acts, damages) and criminal penalties (offences of 1st to 5th class, misdemeanours).

Civil Code — articles 1366 and 1367: article 1366 provides that "electronic writing has the same probative force as writing on paper"; article 1367 specifies that "electronic signature consists of the use of a reliable process of identification guaranteeing its connection with the act to which it attaches". These provisions confer full legal value on electronically signed employment contracts.

eIDAS Regulation No. 910/2014: this European regulation defines three levels of electronic signature (simple, advanced, qualified) and their technical requirements. For high-stakes HR acts (framework contracts, conventional terminations), advanced or qualified signature is recommended to maximise probative value. eIDAS Regulation 2.0 (coming into force in 2026) strengthens identification requirements and introduces the European digital identity wallet (EUDIW).

GDPR No. 2016/679: management of personal data of employees (identification data, health data, possible biometric data) is subject to GDPR. The employer is controller and must establish a legal basis (contract performance, legal obligation), inform employees (article 13), limit data retention and guarantee its security. A breach of employee personal data must be notified to CNIL within 72 hours (article 33). GDPR fines can reach 4% of global annual turnover.

ETSI EN 319 132 standard: this European technical standard defines advanced electronic signature profiles (XAdES, CAdES, PAdES) used in eIDAS-compliant signature solutions. Recourse to a provider certified to this standard guarantees the sustainability and interoperability of electronic signatures in HR files.

NIS2 Directive (EU 2022/2555): transposed into French law by the law of 26 March 2025, it imposes strengthened cybersecurity requirements on essential and important entities, including many employers in industrial sectors or digital service providers. DRH of these entities must integrate the security of HR systems into their cyber risk management policy.

EU Directive 2019/1152 on transparent and predictable working conditions: transposed by the order of 22 June 2022, it strengthens employer's obligations to provide written information to the employee within the first 7 days of taking up duties for essential elements, and within 30 days for others.

Usage scenarios: HR compliance in practice

Scenario 1: A services SME managing 150 hirings per year

A services company with around 350 employees and carrying out 150 annual hirings (permanent, fixed-term, apprentices) faced a high rate of delays in contract signature: on average, 23% of contracts were not signed before the date of taking up duties, exposing the employer to the risk of reclassification and difficulties of proof in the event of dispute. By deploying an advanced electronic signature solution integrated into its HRIS, the company reduced this average delay between delivery and signature from 7.3 days to less than 24 hours. The rate of contracts signed before J+1 increased to 97%. HR teams saved on average 2.5 hours per hiring on administrative follow-up and archiving tasks, a saving of over 375 hours annually. The time-stamped electronic audit trail made it possible to close two employment tribunal disputes in the employer's favour, due to the impossibility of contesting the delivery date.

Scenario 2: An industrial group subject to labour inspection

An intermediate-sized industrial group (approximately 1,200 employees, 4 production sites) was subject to a labour inspection audit on the compliance of its DUERP, personnel registers and the conduct of professional interviews. Before dematerialisation, 30% of professional interviews were not formalised in writing and the DUERP of two sites had not been updated for more than 14 months. After deploying an integrated solution combining document generation, electronic signature and legal archiving, all professional interviews were formalised and electronically signed, generating a solid evidence base. At the next inspection, 100% of required documents could be produced within 48 hours. The company avoided a recovery estimated between €40,000 and €80,000 according to applicable URSSAF scales.

Scenario 3: An HR consulting firm supporting SMEs/small companies

A firm specialising in HR outsourcing supports around fifty SMEs (between 5 and 25 employees each) in ensuring social compliance. These structures do not have a dedicated HR department and frequently accumulate failures: absence of an up-to-date single personnel register, payslips not kept, incomplete mandatory postings. By offering a pooled documentary management service with electronic signature, the firm enabled these companies to reduce non-compliance identified during annual audits by 60%. The cost of ensuring compliance per company was divided by 3 thanks to process standardisation and pre-configured contract templates complying with the Labour Code and applicable collective agreements.

Conclusion

Legal compliance in labour law is not an ancillary administrative constraint: it is a strategic imperative that conditions the serenity of the employer-employee relationship, the legal solidity of the company and its reputation. From hiring obligations to staff representation rules, passing through risk prevention and pay management, each step of the employment contract lifecycle is governed by precise texts, accompanied by real sanctions.

The digitisation of HR processes, via electronic signature and legal archiving, is now the most effective response to master this compliance at scale, without increasing administrative burden. Certyneo supports HR and legal teams in this transformation, with an eIDAS-compliant platform, GDPR and adapted to the requirements of French labour law.

Ready to secure your HR acts? Discover Certyneo and start free today.