Workplace well-being regulations in France: DUERP, QVCT and psychosocial risks

French labour law does not treat workplace well-being as a perk or a culture initiative. It imposes a reinforced duty of care: employers must protect workers' physical and mental health, assess every occupational risk, put prevention measures in place and keep documented proof. Failure to do so exposes the business — and the director personally — to criminal liability, civil damages and administrative penalties.

For small and medium-sized businesses, the question is not whether these rules apply. They apply from the very first employee. The question is what they require in practice, and how to meet those requirements without turning compliance into a full-time project.

Direct answer: under Articles L4121-1 and L4121-2 of the French Labour Code, every employer must avoid occupational risks, assess those that cannot be eliminated, train their teams and implement proportionate protective measures. The DUERP (single occupational risk assessment document) is compulsory from the first employee, must be kept for 40 years and updated at least once a year in companies with 11 or more staff. Preventing psychosocial risks (RPS) is an integral part of that obligation, as is the QVCT approach.

Article L4121-1 of the Labour Code sets out three categories of measures the employer must implement:

1. Actions to prevent occupational risks, including those referred to in Article L4161-1;
2. Information and training actions;
3. The establishment of an appropriate organisation and adequate resources.

The law also requires the employer to adapt these measures over time as circumstances change and to work towards continuous improvement. The obligation is not a one-off box-ticking exercise.

Article L4121-2 sets out nine general prevention principles:

The standard applied to employers is often described as a reinforced duty of means: they must demonstrate that all necessary steps were taken, not simply assert good intentions.

Our read: the companies that come through an inspection or employment tribunal claim without serious damage are almost always those that kept contemporaneous records. Having acted is not enough; you need to be able to prove it with dated documents.

Yes, with no size threshold or sector exemption. The DUERP is compulsory from the first employee under Article R4121-1 of the Labour Code. It must list all occupational risks to which workers are exposed and provide collective traceability of exposures.

Companies with 50 or more employees must consult the works council (CSE) before finalising the DUERP and any update.

For companies under 50 employees, the planned prevention actions are recorded directly in the DUERP. Above 50 employees, those actions take the form of an annual occupational risk prevention and working conditions improvement plan (PAPRIPACT), submitted to the CSE for an opinion.

The underestimated risk: many directors believe they have a DUERP because one was drawn up when the business started. A document that has not been updated for several years, or no longer reflects actual working conditions, offers no protection in litigation. The DUERP must evolve with the business.

QVCT (qualité de vie et des conditions de travail — quality of working life and working conditions) is the current reference framework for organisational well-being at work. It replaced the older QVT label following the national inter-professional agreement (ANI) of 9 December 2020, which explicitly integrated working conditions and risk prevention into the broader quality of life approach.

QVCT does not create a single uniform obligation for all businesses. Its implementation is driven by social dialogue and collective bargaining. That said, QVCT topics form part of the mandatory bargaining agenda under the Labour Code for companies that have trade union delegates.

In practice, the QVCT approach covers four areas:

1. Work organisation and content (autonomy, workload, meaning, role clarity)
2. Working conditions (ergonomics, hours, physical environment)
3. Workplace relationships (management quality, cooperation, recognition)
4. Health and safety (risk prevention, medical monitoring, psychosocial risks)

A pattern we see regularly: QVCT is often framed as a feel-good initiative rather than a compliance matter. That framing is misleading. A credible QVCT policy starts with the DUERP, field-level feedback and social KPIs — not with ping-pong tables or mindfulness apps.

Psychosocial risks (RPS) — chronic stress, burnout, workplace harassment, internal violence, isolation — are occupational risks in every sense. They fall squarely within the scope of Article L4121-1 and must appear in the DUERP alongside physical risks.

The employer's obligations include:

• Assessing RPS as part of the overall risk evaluation process (DUERP)
• Implementing preventive measures that address the root cause
• Planning prevention to cover work organisation, social relations and working conditions
• Training line managers to spot early warning signs of overload and distress
• Maintaining an accessible, confidential reporting channel
• Taking disciplinary action when harassment is established

Two national inter-professional agreements provide additional structure:

• The stress agreement (2008, extended 2009): requires identifying stress indicators and implementing preventive action plans in consultation with staff representatives.
• The harassment and violence agreement (2010): mandates clear anti-harassment policies, complaint procedures, confidentiality and appropriate support.

Steps to build RPS compliance:

1. List the risk factors present in your business (workload, management style, autonomy, interpersonal relations, job security)
2. Enter those factors in the DUERP with a risk rating
3. Define priority actions (manager training, reporting procedure, reorganisation where needed)
4. Present the plan to the CSE if you have one
5. Review at 6 and 12 months and update the DUERP accordingly
6. Keep records of every step: meeting minutes, training records, alerts handled

The service de prévention et de santé au travail (SPST) — formerly the occupational medicine service — is a statutory interlocutor for employers, not only for employee medical check-ups.

Its remit covers:

• Advising the employer on occupational risk prevention
• Contributing expertise to the DUERP
• Conducting individual health monitoring (pre-employment, periodic, return-to-work and on-request medical appointments)
• Alerting the employer to identified risks

Employers are legally required to register with an approved SPST. The updated DUERP must be transmitted to the SPST at each revision. For roles with specific risks — night work, high-risk positions, workers with disabilities — the monitoring regime is intensified and medical appointment intervals are shortened.

The underlying prevention principles apply to every employer. What varies is the level of formality and certain triggering thresholds.

A practical trade-off for small businesses: a simple DUERP updated every year is worth more than a comprehensive document written once and never touched again. For a business with fewer than 10 employees, a few clear pages covering all real risks — physical hazards, mental load, digital tools, working relationships — is a proportionate and defensible approach.

The law of 2 August 2021 (Loi n° 2021-1018) to strengthen occupational health prevention introduced several changes that are still working through in 2026:

• The DUERP must now provide "collective traceability of exposures" (Article L4121-3-1), which goes beyond simply listing hazards.
• The 40-year retention obligation has been in force since 31 March 2022.
• The digital portal deposit obligation is phased by company size — the rollout calendar depends on implementing decrees; check with your SPST for your specific situation.
• The prevention passport (passeport de prévention), which tracks health and safety training, was opened to employers in March 2026.

These procedural changes do not alter the substance of the obligation. They do affect how evidence is stored and how compliance is demonstrated. A business still managing its prevention documents solely on paper should plan a transition.

Updated 2026-05-26. This article is for information purposes and does not replace personalised professional advice. For your specific situation, consult a registered expert-comptable.