Is a written risk assessment mandatory in France, and how often must it be reviewed?

Yes. Every employer in France must assess the risks to workers' health and safety and write the results in a single document, the document unique d'évaluation des risques professionnels (DUERP). Companies with 11 or more employees must update it at least once a year; every employer must also update it after any important change to working conditions and whenever new information about a risk becomes available.

Short answer

• Who: every employer with at least one employee (L. 4121-3 and R. 4121-1). There is no size exemption from the document itself.
• Content: an inventory of the risks identified in each work unit, including thermal conditions (R. 4121-1), taking account of differences in exposure between women and men (L. 4121-3).
• Review triggers (R. 4121-2): at least yearly from 11 employees; after any important change affecting health, safety or working conditions; when new information on a risk reaches the employer.
• Action plan: 50 or more employees: an annual prevention programme with measures, indicators, costs and a timetable; below 50: a list of prevention actions written in the DUERP (L. 4121-3-1).
• Records: every version kept for 40 years and available to workers, former workers, the CSE, the occupational health service, inspectors and Social Security prevention staff (R. 4121-4).
• Penalty: failing to write or update the document is a fifth-class contravention (R. 4741-1): up to 1,500 euros for an individual and 7,500 euros for a company, doubled for a repeat offence. Since 27 June 2026 the labour administration can instead impose an administrative fine of up to 4,000 euros per worker concerned where there is no DUERP at all (L. 8115-1 and L. 8115-3).

What the DUERP must contain and who takes part

The DUERP lists all the occupational risks to which workers are exposed and keeps a collective record of these exposures (L. 4121-3-1). The assessment covers the choice of processes, work equipment, chemicals, the design of workplaces and the organisation of work (L. 4121-3). It is organised by work unit (unité de travail), which the employer defines in practice by workshop, job or activity with similar exposure.

Several parties contribute: the social and economic committee (CSE) and its health and safety commission where they exist, the CSE being consulted on the document and its updates; the designated competent employee(s); and the occupational health and prevention service (SPST), to which the employer sends the document at every update (L. 4121-3 and L. 4121-3-1). Specific assessments are integrated into it, for example the explosion protection document required where explosive atmospheres may occur (R. 4227-52) and the chemical risk assessment.

A notice explaining how workers can consult the DUERP must be displayed in the workplace, in the same place as the internal rules where these exist (R. 4121-4).

Review frequency and the 40-year record

The prevention programme or action list is updated whenever the DUERP is updated, if necessary (R. 4121-2). The law of 2 August 2021 extended retention to at least 40 years and provided for deposit of the document on a digital portal managed by employer organisations, with dates from 1 July 2023 for companies of 150 or more employees and at the latest 1 July 2024 for smaller ones (L. 4121-3-1). Until that deposit obligation actually applies, the employer keeps the successive versions on paper or electronically (R. 4121-4). Employers should check whether the portal is operational for their size when they update the document.

Common mistakes

• Writing one generic document for the whole company. The law requires an inventory per work unit.
• Updating only once a year. The annual update is a minimum; changes and accidents trigger an update at once.
• Deleting old versions. All versions must be kept for 40 years because they prove past exposures for workers' later health claims.
• Forgetting the action plan. From 50 employees, the DUERP must lead to a costed, scheduled annual programme.

Related on excodex

• Occupational safety and health in France: law, authorities and employer duties
• The workplace risk assessment process: team, records and review
• Events that trigger a risk assessment review
• How are explosive atmospheres regulated in France?

Standards and further reading

• Code du travail, articles L. 4121-3, L. 4121-3-1, R. 4121-1, R. 4121-2, R. 4121-4, R. 4741-1, L. 8115-1 and L. 8115-3: Code du travail numérique
• Décret n° 2022-395 du 18 mars 2022 (DUERP update and retention rules)
• Loi n° 2021-1018 du 2 août 2021 pour renforcer la prévention en santé au travail
• Service-public.gouv.fr (Entreprendre), Qu'est-ce que le document unique d'évaluation des risques professionnels (DUERP) ?, verified by its editors on 22 July 2026: https://entreprendre.service-public.gouv.fr/vosdroits/F35360
• INRS, risk assessment: https://www.inrs.fr/demarche/evaluation-risques-professionnels/ce-qu-il-faut-retenir.html

This article is general occupational safety and health information prepared by the excodex editorial team. It does not replace the applicable legislation, standards, manufacturers' instructions or the assessment of a competent OSH professional or occupational physician.