Legal Compliance in Labour Law: Employer Obligations

Introduction

Legal compliance in labour law is one of the most complex challenges for French employers, whether it is a micro-business with 3 employees or a group with several thousand staff members. Between contractual obligations at the birth of the employment contract, ongoing administrative formalities, rules relating to working hours and safety requirements, the French Labour Code today comprises more than 10,000 articles. Any breach exposes the company to criminal penalties, URSSAF adjustments or costly labour court disputes. This article provides a structured and actionable overview of your legal obligations in 2026, and explains how electronic signature enables you to secure and trace all of these acts.

1. Recruitment obligations: contracts, pre-hiring declaration and registers

The pre-hiring declaration (DPAE)

Before any commencement of execution of an employment contract, the employer is required to submit a pre-hiring declaration (DPAE) to the URSSAF, in accordance with articles L.1221-10 et seq. of the Labour Code. This formality, carried out at the earliest 8 days before hiring and at the latest at the time of taking up the post, conditions the opening of the employee's social rights (health insurance, unemployment, retirement). In case of omission, the employer faces a fine of up to €1,500 per undeclared employee, or even qualification as concealed work (article L.8221-5 of the Labour Code), punishable by 5 years imprisonment and €75,000 fine.

The drafting and delivery of the employment contract

While a full-time indefinite-term contract (CDI) can theoretically be verbal, the employer is in fact always required to provide the employee, within 2 months of taking up the position, a written statement setting out the essential elements of the working relationship (EU Directive 2019/1152 transposed into French law). On the other hand, the fixed-term contract (CDD), temporary work contract, part-time contract or apprenticeship contract must necessarily be established in writing, delivered within strict deadlines (2 working days for the CDD, article L.1242-13). The absence of a written document results in automatic reclassification as a CDI.

Electronic signature is here a first-rate compliance tool: it guarantees traceability of delivery, time-stamps the signature and ensures document integrity. To learn more about HR uses of electronic signature, consult our dedicated page.

The unique personnel register and mandatory registers

Article L.1221-13 of the Labour Code requires every employer to maintain a unique personnel register, mentioning for each employee their name, first name, nationality, date of birth, gender, job, qualification, date of entry and departure. This register must be kept for 5 years after the employee's departure. Added to this are the register of staff representatives (in companies with at least 11 employees), the unique document for evaluation of professional risks (DUERP, article R.4121-1), updated at least annually, and the register of minor workplace accidents.

2. Ongoing obligations: working time, remuneration and social protection

Legal working hours and its exemptions

The legal duration of work is set at 35 hours per week (article L.3121-27 of the Labour Code). Beyond this, overtime hours give rise to increased pay (25% for the first 8 hours, 50% thereafter) or equivalent rest time in compensation. Non-compliance with these rules exposes the employer to criminal penalties (article L.3171-4) and an URSSAF adjustment on social contributions not paid on unpaid increases.

The absolute maximum durations are: 10 hours per day, 48 hours per week and 44 hours on average over 12 consecutive weeks (article L.3121-20). Day-rate agreements, applicable to autonomous managers, require collective agreement and a mandatory annual review, under penalty of nullity (Cass. Soc., recurring rulings since 2011).

Compliance of the payslip and remuneration obligations

Article R.3243-1 of the Labour Code lists 25 mandatory items on the payslip. Since January 2017, the simplified payslip is the norm, but the employer must be able to provide a detailed payslip on request. Salary payment must take place at least once a month, on a fixed date.

Compliance with the minimum wage (€18.17/hour gross as of January 1, 2026) and the conventional minimums of the applicable collective agreement is mandatory. An employee receiving less than the conventional minimum may claim back pay for 3 years (article L.3245-1).

Obligations relating to vocational training

Since the law of September 5, 2018 "to enable freedom to choose one's future", each employer is required to fund training via the vocational training contribution (CFP) and apprenticeship tax. The professional interview every 2 years (article L.6315-1) is mandatory, and the absence of training for 6 years results in a 3,000 € increase in CPF at the employer's expense. In 2024, the URSSAF carried out more than 12,000 inspections resulting in adjustments related to training.

3. Health, safety and prevention: an obligation to achieve results

The Unique Document for Assessment of Professional Risks (DUERP)

Since the law of August 2, 2021 strengthening occupational health prevention, the DUERP is a reinforced obligation. It must identify all professional risks present in the company and define an annual prevention program for companies with at least 50 employees. The DUERP must now be kept for 40 years and filed on a dedicated digital portal for companies with more than 150 employees. The absence of a DUERP is liable to a fine of €1,500 (5th class) and constitutes inexcusable fault on the employer's part in case of a workplace accident.

The pre-employment medical examination and medical monitoring

Since the decree of December 27, 2016, the visit of information and prevention (VIP) replaces the classic pre-employment medical examination for most employees, but must take place within 3 months of taking up the position. Workers exposed to particular risks (article R.4624-23) benefit from reinforced individual monitoring with preliminary examination by the occupational physician before employment. Non-compliance with these obligations may result in the nullity of dismissal for unfitness.

Mandatory posting obligations

The employer is required to post in the workplace a set of legal information, in particular: the title of applicable collective agreements, the contact details of the labour inspection, occupational physician and emergency services, the internal regulations (mandatory from 50 employees), texts relating to equal pay between men and women and the fight against harassment. In 2025, the DREETS sanctioned hundreds of companies for failure to post, with fines up to €10,000.

4. Staff representation and social dialogue: structural obligations

The establishment of the CSE

Any company reaching the threshold of 11 employees for 12 consecutive months must organize elections for a Social and Economic Committee (CSE) (articles L.2311-2 et seq.). Terms are 4 years, renewable once. Failure to organize elections constitutes the offence of obstruction (article L.2317-1), punishable by 1 year imprisonment and €7,500 fine. Companies with more than 50 employees have extended obligations: provision of premises, operating budget (0.20% of payroll), budget for social and cultural activities, and mandatory monthly meetings.

Mandatory annual negotiations (NAO)

In companies with a union representative, mandatory annual negotiation concerns salaries, working time and value sharing. Since the law of November 29, 2023, companies with more than 50 employees achieving more than 1% net profit must negotiate a value-sharing agreement. Failure to negotiate without legitimate grounds constitutes the offence of obstruction.

Management of staff representatives and delegation hours

CSE elected officials have legal delegation hours (from 10 to 34 hours depending on company size and mandates held). These hours are by right considered as actual working time. Any obstruction to their exercise exposes the employer to damages and criminal penalties. Maintaining a delegation form, although not legally required, remains recommended for administrative tracking, provided it does not constitute an obstruction.

5. Digitization of HR compliance: issues and best practices

Towards controlled dematerialization of HR acts

The dematerialization of HR acts — contracts, amendments, conventional terminations, dismissal letters, election minutes — responds to a dual issue: reducing non-compliance risks (loss of documents, lack of proof of delivery) and operational efficiency gains. Qualified or advanced electronic signature, within the meaning of eIDAS regulation, offers probative value equivalent to handwritten signature (article 1367 of the Civil Code) and guarantees the integrity of the signed document.

Certyneo offers a dedicated platform for HR workflows enabling management of the entire document lifecycle, from contract generation to legal archiving. Explore our page to understand the different signature levels and their uses.

Risks associated with non-compliant dematerialization

Poorly conducted dematerialization can weaken the legal value of documents. The use of a simple email or checkbox without certified time-stamping does not constitute electronic signature in the legal sense. In case of labour court dispute, the judge may discard a document whose integrity or attribution cannot be proven. It is therefore essential to use a qualified trust service provider (QTSP) within the meaning of eIDAS, listed on the European Trust List.

To assess the return on investment of an electronic signature solution in your HR organization, use our calculator.

Legal archiving and evidence preservation

Compliance does not end with signature: document preservation is of paramount importance. Employment contracts must be kept for 5 years after contract termination (civil prescription), payslips for 50 years (retirement), and documents relating to workplace accidents for 10 years. Electronic archiving with probative value, compliant with NF Z 42-026 standard, guarantees document authenticity and integrity over the long term. Our solution natively incorporates these traceability requirements.

Legal framework applicable to employer compliance

Employer legal compliance is based on a dense and articulated body of law between national and European law.

French Labour Code: the foundation of all obligations, it organizes individual and collective employment relations. Articles L.1221-1 et seq. govern the employment contract; articles L.3121-1 et seq. working time; articles L.4121-1 et seq. prevention of professional risks. Violation of Labour Code provisions may result in civil sanctions (nullity of acts, damages) and criminal penalties (offences of 1st to 5th class, misdemeanours).

Civil Code — articles 1366 and 1367: article 1366 provides that "electronic writing has the same probative force as writing on paper support"; article 1367 clarifies that "electronic signature consists in the use of a reliable identification process guaranteeing its link with the act to which it is attached". These provisions give full legal value to employment contracts signed electronically.

eIDAS Regulation No. 910/2014: this European regulation defines three levels of electronic signature (simple, advanced, qualified) and their technical requirements. For high-stakes HR acts (framework contracts, conventional terminations), advanced or qualified signature is recommended to maximize probative value. eIDAS Regulation 2.0 (coming into force in 2026) strengthens identification requirements and introduces the European digital identity wallet (EUDIW).

GDPR No. 2016/679: the management of employees' personal data (identification data, health data, possible biometric data) is subject to GDPR. The employer is the data controller and must establish a legal basis (contract performance, legal obligation), inform employees (article 13), limit data retention and ensure their security. A breach of employees' personal data must be notified to the CNIL within 72 hours (article 33). GDPR fines can reach 4% of annual worldwide turnover.

ETSI EN 319 132 standard: this European technical standard defines advanced electronic signature profiles (XAdES, CAdES, PAdES) used in eIDAS-compliant signature solutions. Using a provider certified under this standard guarantees the durability and interoperability of electronic signatures in HR files.

NIS2 Directive (EU 2022/2555): transposed into French law by the law of March 26, 2025, it imposes enhanced cybersecurity requirements on essential and important entities, including many industrial employers or digital service providers. CIOs of these entities must integrate HR system security into their cyber risk management policy.

EU Directive 2019/1152 on transparent and predictable working conditions: transposed by the ordinance of June 22, 2022, it strengthens the employer's written information obligations to the employee within the first 7 days of taking up the position for essential elements, and within 30 days for others.

Usage scenarios: HR compliance in practice

Scenario 1: A services SME managing 150 hires per year

A services company with around 350 employees and conducting 150 annual hires (CDI, CDD, apprentices) faced a high rate of delays in contract signature: on average, 23% of contracts were not signed before the start date, exposing the employer to requalification risk and difficulties in providing proof in case of dispute. By deploying an advanced electronic signature solution integrated into its HRIS, the company reduced the average delivery and signature time from 7.3 days to less than 24 hours. The rate of contracts signed before J+1 increased to 97%. HR teams saved an average of 2.5 hours per hire on administrative follow-up and archiving tasks, representing a gain of over 375 hours annually. The time-stamped electronic audit trail enabled two labour court disputes to be closed in favour of the employer, due to the inability to contest the delivery date.

Scenario 2: An industrial group subject to labour inspection

An intermediate-sized industrial group (approximately 1,200 employees, 4 production sites) was subject to a labour inspection check focusing on the compliance of its DUERP, personnel registers and conduct of professional interviews. Before dematerialization, 30% of professional interviews were not formalized in writing and the DUERP of two sites had not been updated for more than 14 months. After deploying an integrated solution combining document generation, electronic signature and legal archiving, all professional interviews were formalized and electronically signed, generating a solid evidence base. During the next inspection, 100% of required documents were able to be produced within 48 hours. The company avoided an adjustment estimated between €40,000 and €80,000 according to applicable URSSAF rates.

Scenario 3: An HR consulting firm supporting SMEs/small businesses

A firm specializing in HR outsourcing supports fifty SMEs (between 5 and 25 employees each) in their social compliance. These structures do not have a dedicated HR department and frequently accumulate shortcomings: lack of updated unique personnel register, payslips not kept, incomplete mandatory postings. By offering a pooled document management service with electronic signature, the firm enabled these companies to reduce by 60% the number of non-compliances identified during annual audits. The cost of bringing each company into compliance was divided by 3 thanks to process standardization and pre-configured templates compliant with the Labour Code and applicable collective agreements.

Conclusion

Legal compliance in labour law is not an accessory administrative constraint: it is a strategic imperative that determines the serenity of the employer-employee relationship, the legal solidity of the company and its reputation. From recruitment obligations to staff representation rules, through risk prevention and payroll management, each stage of the employment contract lifecycle is governed by precise texts, coupled with real sanctions.

The digitization of HR processes, via electronic signature and legal archiving, is today the most effective response for managing this compliance at scale, without increasing administrative burden. Certyneo supports HR and legal teams in this transformation, with a platform compliant with eIDAS, GDPR and adapted to the requirements of French labour law.

Ready to secure your HR acts? Sign up today.