Digital safe and electronic payslips in France: 2026 obligations

Electronic payslips have become standard practice in France, but the long-term conservation obligation that comes with digitisation is routinely underestimated by employers. Guaranteeing access to a payslip for fifty years is a fundamentally different challenge from storing PDF files on a shared server.

This guide sets out the complete legal framework in force in 2026: the employee opt-out mechanism, the binding conservation periods, the technical characteristics of a compliant digital safe, GDPR requirements and the operational pitfalls we encounter most often in outsourced payroll engagements.

Since 2017, a French employer may issue the payslip electronically without seeking each employee's prior consent, but the employee retains an unconditional and free right to object at any time (article L3243-2 of the Labour Code). The employer must guarantee accessibility of the electronic payslip for fifty years, or until the employee's seventy-fifth birthday, whichever is the later date (article D3243-8). This can only be achieved through a digital safe compliant with the AFNOR NF Z42-020 standard, which certifies the document's integrity and evidential value over its entire retention life.

The legal framing matters. Article L3243-2 does not require digitisation: it authorises it. The employer chooses to use it or to keep paper. What changed on 1 January 2017 is the consent model: before that date, the employee's agreement was required; since then, silence is deemed acceptance.

In practice, an employer can decide to switch all payslips to digital format without signing addenda to employment contracts. The obligation is to inform employees of the decision, of how to access the digital safe and of their right to refuse, before the first electronic payslip is issued.

Yes, at any time, without giving reasons and without any impact on their employment contract. The objection may be raised before the scheme is introduced or after the first electronic issue. No specific form is required, though a written record makes it easier to track.

When an employee exercises this right, the employer must revert to paper delivery without undue delay. A practical internal procedure should specify a maximum turnaround — three months is widely used as a workable reference for the payroll team to reorganise processing.

This reversibility must be planned before the tool is chosen. The chosen solution must allow switching an individual employee back to paper at any time, without losing the history of payslips already issued electronically. Any payroll software or outsourced payroll provider should be able to demonstrate this capability before the contract is signed.

This is the most demanding obligation, and the most frequently overlooked. Article D3243-8 of the Labour Code requires the employer — or its appointed provider — to guarantee the electronic payslip's availability to the employee for the longer of:

• fifty years from the date it is made available;
• or the date the employee reaches seventy-five years of age.

These two obligations are distinct and cumulative. An employer who keeps its own copies for five years but fails to guarantee the employee's access for fifty years is not compliant.

To illustrate the scale of this constraint: an employee hired at age 25 in 2026 must be able to access their payslips until age 75 — that is, until 2076. This accessibility must survive the employee's departure, a payroll software change and even the company's own disappearance.

A digital safe is not a secure storage space. It is a technical component certifying that a deposited document cannot be modified after recording — by the user, the administrator, a third party or even the service provider itself. This integrity property is what gives the electronic payslip its evidential value in employment tribunal proceedings or a social security inspection.

The reference standard for this component is the AFNOR NF Z42-020 standard. It must be distinguished from NF Z42-013 (ISO 14641-1), which covers the complete electronic archiving system:

For payslips, the practical criteria to verify with a provider are:

• contractually guaranteed accessibility period of at least fifty years;
• sealing mechanism proving document integrity after deposit;
• employee access portability, including after they leave the company;
• audit log of all operations (deposit, access, download);
• business-continuity procedure in the event of provider failure.

This mirrors the requirements for evidential electronic archiving that we recommend across the company's full document cycle.

A professional services firm had outsourced its payroll for eight years. When it changed provider in 2025, the HR team discovered that the payslips issued since 2017 were stored in the previous software's archiving module — a standard backup space, without NF Z42-020 certification and without guaranteed portability for departed employees.

During the migration, the full payslip history had to be exported as PDF, transferred to a certified digital-safe platform and employees re-notified. The exercise took six weeks and generated an unplanned cost. The main difficulty: several former employees who had left two or three years earlier no longer had an active login on the previous platform.

This type of situation is common when payroll providers change. It is avoided by building payslip portability and continued access contractually into the original agreement — before signing.

The DSN (Déclaration sociale nominative) is the monthly channel through which payroll data is transmitted to French social security bodies. It does not replace the payslip and does not fulfil the conservation obligation on the employee's behalf. These two obligations run in parallel: the DSN satisfies the employer's monthly reporting duties, while the digital safe preserves the payslip that evidences individual remuneration.

In the monthly payroll cycle, the digital safe is the final step: after payslips are calculated and DSN is filed, each payslip is sealed and deposited in the employee's personal space on or before the pay date. This sequencing should be documented in the internal payroll procedure.

A French payslip contains inherently sensitive personal data: gross and net remuneration, social contributions in detail, sometimes bank account details, mutual insurance, wage garnishments or family information.

Digitisation constitutes data processing subject to the GDPR. There are four practical obligations:

1. Restricted access: only the employee concerned and authorised personnel (HR, accountant, mandated expert-comptable) may access payslips. Strong authentication is recommended.
2. Documented retention period: the fifty-year legal retention period must appear in the internal processing documentation.
3. Records of processing: this processing must be recorded in the company's GDPR records of processing, with its purpose, data categories, recipients and retention period.
4. Processing agreement: the digital-safe provider is a data processor under article 28 of the GDPR. The contract must specify processing purposes, security measures, data location and conditions for return or deletion.

The absence of a GDPR processing agreement with the safe provider is one of the CNIL's standard audit checkpoints in HR compliance reviews.

This is the most operationally complex scenario. When an employee leaves the company, they must retain access to their payslips for the full legal period — independently of the employment relationship.

Market solutions offer two models. In the first, the employee has a personal space tied to their own identity (personal email, phone number), which survives the end of employment. In the second, the space is tied to the employer and a transfer procedure is triggered automatically at contract termination.

The first model is more robust for continuity of access. The second carries risk if the transfer procedure is not executed promptly or if the departing employee has not been informed of what to do.

This question must be verified when choosing the tool, and the off-boarding procedure must include a dedicated step to confirm the departing employee's access to their payslip history.

1. Confirm that the solution is NF Z42-020 certified, or that it relies on a certified safe component.
2. Verify that the contractually guaranteed accessibility period covers fifty years or until age 75.
3. Validate the post-departure portability model: personal employee access, or a transfer procedure?
4. Build in reversibility to paper format for employees who exercise their opt-out right.
5. Sign a GDPR processing agreement compliant with article 28 of the regulation.
6. Record the processing in the company's records of processing.
7. Inform employees of the scheme, their rights and access procedures before the first electronic payslip is issued.
8. Document the process in the monthly payroll cycle, including sequencing with the DSN filing.

Up to date as at 2026-06-14. This article is for information only and does not replace personalised professional advice. For your specific situation, consult a registered expert-comptable.