Health and Safety in France: 4 Headcount Thresholds That Change Your Duties

French occupational health and safety law does not scale smoothly. It steps. A company with 49 employees in Paris and a company with 51 are subject to materially different obligations, and the second set does not arrive with a warning letter. They attach the moment the headcount condition is met.

For a UK or US business scaling a French entity, this is the structural difference that matters most. British duties are broadly proportionate: the same principles apply to everyone and the effort flexes with risk and size. French duties are threshold-triggered, written into the Code du travail at specific numbers, and enforced against those numbers. Hiring your eleventh employee is a legal event.

Four thresholds do most of the work. Knowing where you sit against them is a fifteen-minute exercise that most foreign parents have never done.

Threshold 1: your first employee

Three obligations attach immediately, and the first is the one foreign employers most often defer.

The DUERP, the document unique d'évaluation des risques professionnels, is required from the first hire. There is no small-employer exemption and no grace period. It is a specific document in a recognised format, and a translated UK risk assessment is not one.

Second, you must affiliate to a service de prévention et de santé au travail, the occupational health service that succeeded the older médecine du travail arrangements. Affiliation is the duty, independent of whether anyone attends an appointment, and the SST framework governs what that service then owes your employees. The DUERP is transmitted to them at each update.

Third, under article L.4644-1 you must designate one or more employees competent in occupational risk prevention. The concept will be familiar to British employers from the competent person duty, though the French designation is formal and recorded.

One point matters disproportionately for technology and financial employers. Since the loi santé au travail of 2 August 2021, psychosocial risks are an explicit and mandatory component of the DUERP. Stress, workload, burnout and harassment are not adjacent wellbeing topics in France. A DUERP that omits them is incomplete as a matter of law, and for a business running release cycles, on-call rotations or trading-floor intensity, that is the section most likely to be missing.

Threshold 2: eleven employees

At eleven employees sustained across twelve consecutive months, a Comité Social et Économique becomes mandatory under article L.2311-2.

Between eleven and forty-nine employees the CSE has a defined but limited remit. Under article L.2312-5 it contributes to promoting health, safety and working conditions, and conducts investigations into workplace accidents and occupational illness jointly with the employer. It also holds a droit d'alerte where there is serious and imminent danger. It does not have legal personality at this size.

Two practical consequences. Your DUERP now requires an annual update, where employers below eleven are only obliged to revise it when circumstances change. And establishing a CSE is an electoral process, not an appointment: a pre-electoral agreement, defined colleges, a call for candidates and a timetable. Firms that discover the obligation at the point of breach are already late, because the process itself takes weeks.

Threshold 3: fifty employees

The largest single step, and the one that changes the character of the arrangement rather than just its volume.

Below fifty, the DUERP must be accompanied by a list of prevention and protection actions, which may sit within the document itself. At fifty and above, article L.4121-3-1 requires a PAPRIPACT, an annual programme of occupational risk prevention and improvement of working conditions. It is a separate document with prescribed contents: the actions, the conditions of their execution, result indicators, an estimate of cost, the resources to be committed and a timetable. Where planned actions are not carried out, the failure has to be justified to the CSE.

The CSE itself also transforms at fifty. It acquires legal personality and its own budget, gains the right to commission expert reports, and must be consulted on significant projects affecting health, safety or working conditions. In practice that captures office moves, fit-outs, changes to work organisation and the introduction of new technology, which is to say most of what a growing business does. A works council that had to be informed now has to be consulted before decisions are implemented.

Threshold 4: three hundred employees

At three hundred, article L.2315-36 requires a Commission Santé, Sécurité et Conditions de Travail within the CSE, a dedicated body for occupational risk prevention. The headcount is assessed annually, and the threshold applies per distinct establishment, so a group with several French sites should test each one rather than only the aggregate.

Two details are worth knowing before you reach it. A labour inspector can require a CSSCT below three hundred where the nature of the risks justifies it, so the threshold is a floor rather than a guarantee. And SSCT training entitlements extend at this size, which is a budget line as well as a governance one.

The thresholds at a glance

| Headcount | What attaches | Lead time you actually need | |---|---|---| | 1 | DUERP, SPST affiliation, designated competent employee, psychosocial risks assessed | Before the first contract starts | | 11 (12 consecutive months) | CSE mandatory, annual DUERP update | Several weeks for the electoral process | | 50 | PAPRIPACT, CSE with legal personality, budget, expertise and consultation rights | A full planning cycle | | 300 | CSSCT within the CSE, extended SSCT training | Assessed annually, plan a year ahead |

The pattern to notice is that every threshold has a lead time longer than the moment it triggers. Thresholds are crossed by hiring decisions made in a different function on a different timescale, which is why the compliance gap almost always opens between the offer letter and the org chart.

The obligation nobody plans for

Separately from the thresholds, the 2021 law requires successive versions of the DUERP to be retained for forty years, and introduced a digital deposit obligation phased by company size. The timetable for smaller employers has been deferred more than once, so confirm the current position rather than relying on a summary written when the law passed.

Forty years is longer than most companies keep anything, and considerably longer than most document management arrangements survive. The point of the retention period is traceability of exposure across a working life, and it is not satisfied by a folder on a shared drive that migrates twice and loses its version history. This is one of the clearer cases where health and safety consultants and software belong together: the advice determines what goes in the document, the system is what makes it still retrievable in 2065.

Getting France right without building an island

The instinct is to run France separately because the documents are French. That works until the second country, and then it does not.

The workable pattern is a single methodology and a single evidence base across the group, with each national instrument produced properly under its own law. Your DUERP, a German Gefährdungsbeurteilung and your UK risk assessments can share one register while each satisfies its own statutory test. Periodic health and safety audits then verify each entity against its own requirements rather than against a translated group standard. EU-OSHA's overview of the French national OSH system is a reasonable orientation for a parent company, and INRS publishes the technical prevention guidance that French practitioners actually work from. All of it descends from the EU Framework Directive 89/391/EEC, implemented in France with its own documentation and consultation rules.

Where Arinite fits

Arinite works with locally qualified practitioners in France, so your DUERP and PAPRIPACT are produced under French law by people qualified under it, while you keep one point of contact for the whole group. We support 1,500+ businesses across 50+ countries and protect 100,000+ employees, with 95%+ client retention over 15+ years. Our health and safety consultants work extensively with IT and software and finance and banking businesses, the two sectors most likely to cross a French threshold quickly, and our global health and safety consultants handle the jurisdictions that follow.

If you have a French entity approaching eleven or fifty employees, our international health and safety consultants can tell you what attaches and when. A free gap analysis will establish which threshold you are actually on, which is not always the one the headcount report suggests.

Related Articles

• Health and Safety in France: Complete Guide for UK and International Businesses
• PAPRIPACT: France's Annual Occupational Risk Prevention Programme and Its Lessons for UK Businesses
• DUERP Explained: 7 Things US, UK and International Businesses Must Know
• DUERP: les 5 questions essentielles que se pose chaque employeur (French language, useful for local teams)