Legal Compliance Employment Law: Employer Obligations

Legal compliance in employment law represents one of the major challenges for any business, regardless of size. In France, the Labor Code imposes a precise body of obligations on every employer: from drafting employment contracts to managing conventional terminations, through mandatory postings and protection of employee personal data. In 2026, this regulatory framework has become even denser, particularly due to the eIDAS 2.0 regulation, GDPR requirements and the gradual generalization of HR digitalization. This article exhaustively presents employer obligations, associated legal risks and available tools to meet them without fail.

Foundations of HR Compliance: Contractual Obligations

Employment Contract: A Precise Legal Requirement

Every employer must provide the employee, no later than two business days following hiring, with a written document summarizing the essential elements of the employment relationship — in accordance with the French implementation of European Directive 2019/1152 of June 20, 2019 on transparent and predictable working conditions. For permanent contracts (CDI), providing a written contract is not strictly mandatory under law, but it is imperatively recommended when any collective agreement provides for it. For fixed-term contracts (CDD), part-time contracts and apprenticeship contracts, a written contract is mandatory under penalty of requalification.

The contract must mention: the identity of the parties, place of work, job title, start date, working hours, compensation, trial period duration and applicable collective agreement. Any omission exposes the employer to damages.

Prior Declaration of Hiring (DPAE)

Mandatory for each new employee, the DPAE must be transmitted to URSSAF no later than 8 days before the employee's start date. This declaration automatically triggers Social Security affiliation, creation of the retirement file and enrollment in occupational health services. Failure to file a DPAE constitutes the offense of concealed employment, punished by 3 years imprisonment and 45,000 € fine for individuals (article L.8224-1 of the Labor Code).

Pre-Employment Medical Visit

Since the occupational health reform from the 2016 Labor Act and its implementing decrees, the pre-employment medical visit has been replaced by a visit for information and prevention (VIP) in most cases. This visit must occur no later than 3 months after taking office (or before taking office for at-risk positions). The employer is responsible for organizing and monitoring these visits. Non-compliance with this obligation may engage the employer's civil liability, particularly in case of workplace accident or occupational illness.

Obligations During Contract Performance

Working Time, Rest and Mandatory Postings

The employer must ensure rigorous monitoring of each employee's working time, in accordance with articles L.3121-1 and following of the Labor Code. Legal maximum durations (10 hours per day, 48 hours per week, 44 hours average over 12 weeks) must be strictly respected. Since the CJEU ruling of May 14, 2019 (case C-55/18, CCOO v Deutsche Bank), every employer is required to establish an objective, reliable and accessible system for measuring daily working time.

Concerning mandatory postings, the employer must display or make available to employees the following information:

• Collective working schedules

• Title and contact information of the competent labor inspector

• Address and emergency services phone numbers

• Fire and evacuation procedures

• Internal rules (for companies with at least 50 employees)

• Texts relating to equal pay between women and men

• Recourse procedures regarding moral and sexual harassment

Absence of posting is sanctioned by a fine up to 1,500 € per offense found.

Vocational Training and Personal Training Account (CPF)

The employer has the obligation to ensure adaptation of employees to changes in their job position and to maintain their employability. The employer must fund each employee's Personal Training Account (CPF) with 500 € per year (800 € for low-skilled employees), up to a limit of 5,000 € (8,000 € for low-skilled). A professional interview must be organized every two years, as well as a review at six years to verify whether the employee has benefited from at least one non-mandatory training action, salary or professional progression, or acquisition of certification elements.

Protection of Employee Personal Data

The GDPR (EU Regulation 2016/679) applies fully to processing of employee personal data. The employer, as data controller, must:

• Keep a register of processing activities (article 30 GDPR)

• Inform employees of processing concerning them (articles 13 and 14)

• Limit collection to strictly necessary data (minimization principle)

• Regulate transfers outside the EU

• Appoint a Data Protection Officer (DPO) if activities require it

GDPR violations may result in fines up to 20 million euros or 4% of annual worldwide turnover, whichever is higher. CNIL imposed several sanctions in 2025 against employers for excessive retention periods of HR data.

Managing Contract Termination: Procedural Obligations

Dismissal: Strict Formalism

Dismissal for personal or economic reasons is governed by a rigorously regulated procedure under articles L.1232-1 and following of the Labor Code. The employer must:

• Summon the employee to a preliminary meeting by certified mail with receipt (LRAR) or hand delivery with acknowledgment

• Respect a minimum 5 business day period between summons and the meeting

• Conduct the preliminary meeting with possible employee assistance

• Notify dismissal by LRAR, at the earliest 2 business days after the meeting

• Specify the reason for dismissal in the letter

The dismissal letter defines the limits of the dispute in case of judicial challenge. Dismissal without real and serious cause exposes the employer to the Macron compensation scale (0.5 to 20 months gross salary depending on seniority, article L.1235-3 of the Labor Code).

Conventional Termination and Digitalization

Since the generalization of the TéléRC service on the Mon.Service-Public.fr portal, individual conventional termination must be approved online by DREETS (Regional Directorate for Economy, Employment, Work and Solidarity). This process involves signing the CERFA form n°14598 by both parties, with a 15 calendar day withdrawal period.

Electronic signature secures and considerably accelerates this procedure: the conventional termination form can be electronically signed, with certified time-stamping and audit evidence, guaranteeing document integrity and traceability of both parties' consent.

Employee Representation and Social Dialogue

Social and Economic Committee (CSE): Implementation Obligations

Since the Macron ordinances of 2017 (law n°2017-1340 of September 15, 2017), any company with at least 11 employees for 12 consecutive months is required to establish a Social and Economic Committee (CSE). CSE elections must be organized every 4 years. Failure to establish a CSE constitutes the offense of obstruction, punished by one year imprisonment and 7,500 € fine (article L.2317-1 of the Labor Code).

The CSE has prerogatives regarding health, safety and working conditions (SSCT) for companies with at least 50 employees, including the right to alert in case of serious and imminent danger.

Collective Bargaining and Professional Equality Index

Companies with at least 50 employees are subject to annual bargaining obligations on wages, working time and value sharing. Since the law of September 5, 2018 (law n°2018-771 on freedom to choose one's professional future), companies with at least 50 employees must calculate and publish annually their Professional Equality Index (Index Egapro), before March 1st. A score below 75 points out of 100 requires the company to define corrective measures under penalty of financial penalty reaching 1% of the payroll.

Health, Safety and Risk Prevention

Document for Assessment of Professional Risks (DUERP)

Mandatory since decree n°2001-1016 of November 5, 2001, the Document for Evaluation of Professional Risks (DUERP) must be updated at least annually and when any significant modification affecting working conditions occurs. Since the law of August 2, 2021 (law n°2021-1018), companies with at least 150 employees must file the DUERP on a national digital portal managed by OPCO. This document must be kept for a minimum of 40 years.

Lack of DUERP is sanctioned by a class 5 fine (1,500 € for individuals), but especially engages the criminal liability of the employer in case of workplace accident, based on breach of the obligation of safety of result.

Prevention of Harassment and Psychosocial Risks

The employer is bound by an obligation of active prevention of moral harassment (article L.1152-4 of the Labor Code) and sexual harassment (article L.1153-5). In companies with at least 250 employees, a sexual harassment referral officer must be appointed from CSE members. Every company must also integrate psychosocial risks (RPS) into its DUERP.

Making these procedures compliant can be greatly facilitated by digitalization: formalized alerts, electronically signed complaint forms, traceability of processing steps. See our guide to understand how to integrate these tools into your HR organization.

Legal Framework Applicable to Employer Compliance

Founding Texts of Employment Law

Employer legal compliance rests on a dense legislative corpus whose pillars are:

• Labor Code (Legislative and regulatory part): employment contracts (L.1221-1 et seq.), working time (L.3121-1 et seq.), health-safety (L.4121-1 et seq.), employee representation (L.2311-1 et seq.), dismissal (L.1232-1 et seq.), training (L.6311-1 et seq.)

• Law n°2017-1340 of September 15, 2017 enabling ordinances for measures to strengthen social dialogue (Macron ordinances, CSE creation)

• Law n°2021-1018 of August 2, 2021 to strengthen occupational health prevention (Occupational Health Act: DUERP reform, enhanced medical monitoring)

• European Directive 2019/1152 on transparent and predictable working conditions, transposed into French law by ordinance n°2022-1104 of August 3, 2022

Electronic Signature and Legal Value of HR Documents

Electronic signature of work documents (contracts, amendments, conventional terminations, collective agreements) is regulated by:

• Civil Code, articles 1366 and 1367: "Electronic writing has the same probative force as writing on paper medium"; "Electronic signature consists of the use of a reliable identification method guaranteeing its connection to the act to which it attaches."

• eIDAS Regulation n°910/2014 (now revised by eIDAS 2.0, EU Regulation 2024/1183): defines three levels of electronic signature — simple (SES), advanced (AdES) and qualified (QES). Qualified signature is presumed equivalent to handwritten signature throughout the EU (article 25§2).

• ETSI EN 319 132 standard: specifies technical requirements for advanced electronic signatures in XAdES, PAdES and CAdES formats used in digitized contractual documents.

• Order of March 22, 2019 relating to electronic signature of notarial acts, gradually extending uses to regulated professions.

Data Protection and GDPR in HR

• EU Regulation 2016/679 (GDPR): legal basis for processing employee data (article 6§1b — contract performance), retention periods (5 years post-termination for payslips), individual rights (access, correction, limited erasure)

• NIS2 Directive (EU Directive 2022/2555), transposed into French law by the law of April 11, 2024: imposes strengthened cybersecurity requirements for essential and important entities, including securing HR systems and electronic signature platforms

• CNIL Deliberation n°2002-017 and sectoral frameworks: specifically regulate processing of data in personnel management context

Risks and Sanctions

Legal risks for non-compliant employer are multiple: criminal sanctions (obstruction offense, concealed employment), administrative fines (CNIL up to 4% of worldwide turnover), labor court convictions (Macron scale, salary arrears, damages), and growing reputational risks in the era of CSR rankings. Using an electronic signature solution constitutes an essential safeguard against contestation of HR acts' validity.

Use Scenarios: Electronic Signature Serving HR Compliance

Scenario 1: A 180-Employee Industrial SME Digitizes its Contracts and Amendments

An industrial company of intermediate size, managing approximately 180 employees across two sites, faced significant volume of seasonal fixed-term contracts and working time modification amendments. Paper processing caused average 7-day delays between document drafting and effective signature, with 12% loss or filing error rate. By adopting an advanced electronic signature solution (AdES) integrated into its HR system, the SME reduced this delay to under 24 hours, cut printing and archiving costs by 65%, and secured signature traceability (time-stamping, IP address, two-factor authentication). In case of labor dispute, the company now has complete audit trail, exportable in certified PDF, in compliance with eIDAS regulation requirements.

Scenario 2: A Multi-Location Hotel Group Secures its Conventional Terminations

A hospitality-restaurant operator managing ten locations and approximately 400 employees processed up to 40 conventional terminations per year with entirely paper procedure requiring postal exchanges. Homologation delays lengthened due to form errors (poorly filled CERFA forms, missing signatures) and mail loss. After deploying electronic signature workflow dedicated to conventional terminations — integrating advanced signature for both parties, automatic form transmission to DREETS via TéléRC and time-stamped archiving — form error rate dropped to 2%, and average homologation delay decreased from 22 days to 17 days (including the incompressible 15-day legal withdrawal period). The HR department recovered average 4 hours of administrative work per file.

Scenario 3: An HR Consulting Firm Supports Clients in GDPR Compliance

An HR consulting firm specializing in HR compliance, supporting twenty client companies in social compliance, integrated electronic signature into its GDPR compliance services. For each client, the firm formalizes processing registers, employee privacy policies and data processor agreements (DPA) with qualified electronic signature (QES), guaranteeing irrefutable proof of informed consent and signature date. This approach allowed supported companies to reduce CNIL audit exposure and have documented proof during internal audits. The firm was able to market this offering as a competitive differentiator, with client satisfaction measured at 94% on compliance commitments. To explore pricing options suitable for this type of use, the cost calculator allows estimating concrete gains according to document volume processed.

Conclusion

Legal compliance in employment law is a permanent, evolving and multi-dimensional requirement for every employer in 2026. From contractual obligations at hiring through managing terminations, data protection, employee representation and risk prevention, the regulatory framework leaves no room for approximation. Sanctions incurred — criminal, civil and administrative — can jeopardize a company's continuity.

Digitalization of HR processes, supported by eIDAS-compliant electronic signature solutions, is today the most effective answer to reconcile operational agility and legal rigor. It strengthens traceability, reduces delays and secures probative value of each document.

Take action today: discover how Certyneo secures your HR obligations and simplifies your compliance. Contact us or request a personalized consultation.