Well-being at work: what the regulations require

Updated April 2026 - The labor code does not only talk about comfort or atmosphere. In French law, the subject of well-being at work refers primarily to an obligation of prevention: the employer must protect the physical and mental health of employees and organize work in an appropriate manner. In other words, well-being is not an HR bonus. It is a subject of compliance, management and proof.

See also: URSSAF control, Understanding a pay slip and Payroll outsourcing.

Short answer: the regulations on well-being at work require the employer to avoid professional risks, prevent psychosocial risks, train teams and document the measures taken. The DUERP remains the central piece of this logic.

Article L4121-1 of the Labor Code requires the employer to take the necessary measures to ensure safety and protect the physical and mental health of workers. Article L4121-2 recalls the general principles of prevention: avoiding risks, evaluating those which cannot be avoided, combating risks at source and adapting work to the individual.

Concretely, this means that an employer cannot be satisfied with a speech on the quality of life at work. He must be able to show that he has taken action: risk assessment, prevention actions, information, training, appropriate organization and monitoring.

The DUERP remains central. Successive versions must be kept in the company as long as the obligation to submit them on a digital portal has not come into force according to the terms provided for by the labor code. This means that in 2026, the written record and the ability to retrieve versions remains essential.

Hayot Expertise Advice: well-being at work becomes fragile as soon as the company confuses HR communication and prevention. What really matters are concrete actions, dated, traced and reviewed over time.

In practice, the subject is not limited to visible benefits. A break room, a fruit basket or a speech on kindness are not enough if the workload, schedules, managerial tensions or lack of procedures continue to damage the social climate.

Legally, it is necessary to look at several dimensions:

• the workload and its actual sharing;
• schedules, amplitudes and rest times;
• psychosocial risks;
• the ergonomics of the workstations;
• exposure to harassment or incivility;
• the circulation of information;
• monitoring of alerts and incidents;
• the company's ability to act quickly.

Teleworking, digital tools, hybrid teams and more flexible work rhythms make the subject even more sensitive. Well-being must not become an adjustment variable when activity accelerates.

The single professional risk assessment document is not a decorative document. It must identify the risks, prioritize them and describe the prevention measures put in place. For an SME, it is often what allows regulations to be linked to the reality on the ground.

A good version of the DUERP must at least answer four questions:

1. What risks have been identified? 2. Who is exposed and in what situation? 3. What prevention actions were adopted? 4. Who follows the update and how often?

This document must live with the company. An organizational change, a change of tool, a new manager, a seasonal overload or a repetitive incident must lead to a review.

1. Workload#

This is the subject that comes up most often in the files. A team can have the right technical resources and yet be in constant tension if priorities are unclear, if deadlines are unachievable or if decisions are never formalized.

2. Psychosocial risks#

Chronic stress, conflicts, isolation, exhaustion, permanent pressure: these risks are not abstract. They must be assessed, prevented and monitored. In practice, this involves interviews, field feedback, alert channels and training of supervisors.

3. Local management#

A good regulatory framework is of no use if managers have not learned to implement it. A manager must know how to spot an overload, relay an alert, decide on a priority and document what was decided.

4. Organization of positions#

Ergonomics, tools, storage, circulation, lighting, noise, posture: well-being often begins with very concrete details. Sometimes all it takes is a bad station, an unsuitable chair or an insufficient reception procedure to create avoidable risks.

• an updated risk assessment;
• a DUERP consistent with real activity;
• training actions, at least for sensitive positions;
• an alert processing procedure;
• clear rules on workload and schedules;
• monitoring of incidents and corrective plans;
• a minimum of traceability on what was done and when. The trace counts almost as much as the action. In the event of a question from an employee, an inspection or a dispute, it must be possible to show that prevention has been thought out, not just announced.

Let's take a service company with 25 employees. The manager notices delays, an increase in fatigue and tensions between two teams. A useful plan doesn't start with an internal communications campaign. It begins with a diagnosis: load, schedules, tools, friction points, feedback from managers and repeated incidents.

Then, the company can implement:

• an update of the DUERP;
• a rule for prioritizing requests;
• a short weekly meeting between managers;
• training on weak overload signals;
• a simple and confidential alert procedure;
• follow-up at 30 and 90 days to check the effect of the measures.

This type of plan is more effective than a general speech on well-being, because it is concrete, controllable and verifiable.

• limit the subject to peripheral advantages;
• do not update the DUERP;
• underestimate psychosocial risks;
• confuse well-being and internal communication;
• not training managers;
• do not keep track of the actions carried out.

We need to move away from purely HR thinking and look at the impacts on absenteeism, turnover, productivity, quality and litigation risk. When the subject is piloted as an operating risk, the solutions become simpler: we prioritize, we document, we correct and we recheck.

CTA: Structure your social and documentary obligations

In 2026, the regulation of well-being at work is based on a clear logic: prevent, evaluate, train, organize and trace. A company that treats the subject seriously gains in compliance, management and sustainable performance.

<details> <summary>Is well-being at work a legal obligation in itself?</summary> The term is not a single autonomous right, but it covers very real obligations of prevention, protection of physical and mental health and appropriate organization of work. In practice, the employer must be able to show what he has done to prevent risks. </details> <details> <summary>Is DUERP enough to prove prevention?</summary> No, not him alone. The DUERP is the basis, but it must be aligned with concrete actions: training, alert procedures, workload monitoring, corrective measures and regular updating. It's the whole thing that counts. </details> <details> <summary>Do managers have a legal rôle?</summary> Yes, because they implement prevention on a daily basis. They must know how to spot an overload, raise an alert and apply internal rules. Without proximity relays, the measurements remain too theoretical. </details> <details> <summary>Is a small business affected in the same way as a large group?</summary> Yes. The means are not the same, but the obligation of prevention exists. The difference is mainly due to the level of formalization and the way of documenting actions. A TPE can remain simple, but not improvise. </details>

(Official sources: L4121-1 and L4121-2 of the labor code, INRS on the DUERP, Légifrance on the conservation of successive versions of the single document)