0.3The regulatory framework (Labor Code, obligations)
The essentials in 30 seconds
- Safety obligation: the employer must ensure safety and protect health — assess, prevent, train, provide protections.
- Mandatory vs voluntary: the Code and decrees bind by law; ISO 9001/14001/45001 standards bind through contract/customers.
- Transpose, track: the French framework is only an example — check local law and prove in writing (what is not tracked does not exist).
Threaded mini-case — Hakim reads his obligation in 3 questions
Hakim, QHSE coordinator in an industrial SME in Algiers, prepares his first risk assessment: he re-reads the guide's French framework (safety obligation, single file, prevention, bodies), then looks for the locally applicable texts with the inspectorate and a lawyer. He separates the mandatory from the voluntary (ISO) and tracks each dated action. His rule: the logic is universal, the texts are checked country by country.
Sequel to cases 0.1–0.2 — Hakim moves from logic to the applicable framework.
1. The safety duty: the foundation
Employers must ensure safety and protect workers' health (a duty of result in many national laws). This means assessing (DUERP — Single Occupational Risk Assessment Document, France), preventing (9 principles), training and providing protection. This guide illustrates with French law: transpose to your country (there, check the locally applicable Labor Code).
2. The hierarchy of texts (French example)
Labor Code (principles, DUERP, sanctions) → decrees/orders (detail per risk) → voluntary standards (ISO 9001/14001/45001: not mandatory, but required by customers). Distinguish the mandatory (regulatory) from the contractual (requested certifications): both are binding, but not for the same reasons.
3. What the company risks (for guidance)
Administrative sanctions (formal notices, shutdowns), criminal sanctions (after a serious accident involving fault), civil sanctions (compensation), commercial sanctions (lost contracts). Amounts and procedures vary by country: this chapter gives the logic; your legal advisor or local inspectorate gives the figures.
🔎 Concrete example — 🔎 Hands-on example — Reading your duty in 3 questions
Reading: judges and auditors ask the same questions.
1. Which text binds me? (Code + decrees for the risk concerned)
2. What did I assess? (up-to-date, signed, communicated DUERP)
3. What did I do? (dated actions, PPE provided, traced training)
→ if all 3 answers are written down, diligence can be provenLesson: what is not traced does not exist (Level 5 principle).
Section vocabulary
- QHSE regulatory framework
- All the legal obligations structuring the approach, mostly health-safety and environment; varies by country.
Simple example: Hakim lists the local texts for his SME with a lawyer.
What it is not: applying another country's texts as they are.
Reflex: always note the checked local text, never copy-paste.
- Employer safety obligation
- The duty to take the measures needed to ensure safety and protect workers' health.
Simple example: The owner assesses, prevents, trains and provides protections.
What it is not: an untracked verbal instruction.
Reflex: assess + act + train + track, all four together.
- Risk register (single file in France)
- A file listing and assessing risks and planning actions; in France: the mandatory single file.
Simple example: Hakim keeps the workshop register up to date, signed and shared.
What it is not: a register written once then forgotten.
Reflex: every new station or machine = a dated update.
- Voluntary standards (ISO)
- ISO 9001 (quality), 14001 (environment), 45001 (health-safety): voluntary certifications on top of the legal base.
Simple example: A customer demands ISO 9001: Hakim separates the legal mandatory from the contractual.
What it is not: saying "we are ISO so we comply".
Reflex: the law first, ISO next — both tracked separately.
- Regulatory monitoring
- Regular monitoring of the applicable texts, which change over time.
Simple example: Hakim re-reads the list of texts with the lawyer every quarter.
What it is not: a legal binder never reopened.
Reflex: one owner + one scheduled re-read date.
In practice — Hands on — Placing the regulatory framework
- Identify the legal foundation for health and safety IN YOUR COUNTRY (national Labor Code or equivalent) — the French framework is given as an example, not as a universal reference.
- Spot the main obligations: assess and formalize risks (in France: DUERP), prevent, inform/train, representation and enforcement bodies.
- Distinguish LEGAL obligations (mandatory) from VOLUNTARY standards (ISO 9001/14001/45001 — certification).
- Set up regulatory MONITORING (texts evolve) and always refer to the law applicable where you are.
Ready-to-say script — asking for the local framework (1 min)
"To comply here in Algiers, I need three written answers: which local text binds us, where our up-to-date risk assessment is, and which dated actions go with it. I am preparing this with the inspectorate and a lawyer, then we separate the mandatory from the voluntary."
Say it to management; have the list of local texts validated and schedule regulatory monitoring.
Copy-paste template — my 3 proofs
APPLICABLE TEXT (local, checked): _______________
ASSESSMENT (register up to date, signed on): _______________
ACTIONS (dated, owners): _______________
PPE PROVIDED / TRAINING TRACKED: _______________
MONITORING (who follows the texts, when): _______________Very small business / tight budget
With no lawyer: one page with the three proofs (identified local text, up-to-date register, dated actions) re-read every quarter.
SME in Algeria
Hakim has the lawyer list the local texts (labor, environment) and the control bodies, without copying French law.
Multi-risk site
Per risk (chemical, machines, welding): note the targeted local decree, the matching assessment and the proof of action — one table is enough.
Answering a customer audit
Present the three proofs in order: text, assessment, tracked actions — then the voluntary ISO certificates separately.
✓ Best practices
- Distinguish mandatory from contractual.
- Transpose to local law (no copy-paste).
- Trace diligence (assess, act, train).
✗ Common pitfalls
- Applying French law outside France.
- Confusing a voluntary standard with a duty.
- Acting without tracing (unprovable).
Key takeaways
- QHSE rests on a REGULATORY FRAMEWORK (legal obligations, mostly health, safety and environment). ⚠️ Regulation VARIES greatly by COUNTRY: the French framework is given as an EXAMPLE — refer to the law applicable where you are.
- In health and safety, the EMPLOYER has a strong duty (in France, a safety duty) based on GENERAL prevention principles (Level 2): avoid/assess risks, fight them at source, collective protection first.
- Typical obligations: ASSESS and formalize risks (France: DUERP), PREVENT, INFORM/TRAIN, bodies (France: CSE, occupational doctor, labor inspectorate), environment (France: ICPE classified facilities).
- VOLUNTARY standards (ISO 9001/14001/45001) complement the legal foundation (certification). Regulatory MONITORING is needed (texts evolve).
48h Challenge — apply tomorrow
Write your 3 answers (local text, up-to-date assessment, 1 dated action) with the template above. Have the local text checked by a lawyer or the inspectorate.
- I can name the employer's obligation and the 3 proofs.
- I separate the mandatory (law) from the voluntary (ISO).
- I have written my 3 answers and checked the local text.
Frequently asked questions
Why does this guide mostly cite French regulation, and how do I adapt it to my country?
This guide cites the French framework as a HANDS-ON ILLUSTRATION of QHSE principles, but these principles are largely universal — the key is to understand their LOGIC and relate it to YOUR country's regulation. Why the French framework is cited: (1) It is a structured, documented example. France has a detailed health-safety-environment framework (Labor Code, DUERP, general prevention principles, ICPE classified facilities…) often used as a teaching reference, with clear concepts (safety duty, single document). (2) It illustrates widely shared PRINCIPLES. Many countries have comparable frameworks (employer duty to protect workers, risk assessment, prevention, information/training, representation bodies, enforcement by an authority). The great QHSE principles (identify, prevent, measure, improve) are universal, even if texts and arrangements differ. (3) This is NOT a claim that French regulation applies everywhere — it is an example to make principles concrete. What VARIES by country: (1) The exact TEXTS (the “Labor Code” and its articles, thresholds, mandatory documents) and their NAMES (the DUERP is a French mechanism; other countries have their own risk-assessment documents). (2) The BODIES and players (staff representation, occupational medicine, inspection/enforcement authority) and their duties. (3) THRESHOLDS and obligations by company size and sector. (4) SANCTIONS and the liability regime (civil, criminal). (5) ENVIRONMENTAL regulations (facility classification, waste management, emission thresholds). How to ADAPT to your country: (1) Keep the PRINCIPLES, not the French details. What matters: employers must protect workers, risks must be assessed and formalized, prevention, information/training, measuring and improving, respecting environmental rules. These principles largely hold — transpose them to your context. (2) Identify YOUR country's LEGAL FRAMEWORK: what is the founding text (national Labor Code or equivalent)? which risk-assessment documents are mandatory? which bodies (representation, occupational medicine, enforcement authority)? which environmental obligations? (3) Find the EQUIVALENTS: what corresponds, where you are, to the “single document”, the “CSE”, the “ICPE”? The concepts often exist in other forms and names. (4) Rely on reliable LOCAL sources: your country's labor ministry / competent authority, prevention bodies, official texts, and if needed a local legal advisor or prevention specialist. (5) MONITOR the regulation applicable where you are (it evolves). (6) ISO STANDARDS (9001, 14001, 45001) are INTERNATIONAL: they apply the same way everywhere and offer a useful common language whatever the country. The right mindset: (1) This guide gives you the LOGIC and METHODS of QHSE (universal) plus hands-on examples (often French) to illustrate them. (2) Relate them to YOUR country's regulation — principles transpose, exact texts must be checked locally. (3) Never take the French framework as applicable as is where you are: it is an example, not a universal legal reference. In short: this guide mostly cites French regulation as a HANDS-ON ILLUSTRATION of largely UNIVERSAL QHSE principles (protecting workers, assessing risks, preventing, training, measuring, respecting the environment), not as a reference applicable everywhere. To adapt it to your country: keep the PRINCIPLES (transposable), identify the local LEGAL FRAMEWORK (founding text, mandatory documents, bodies, environmental obligations), find the EQUIVALENTS of the mechanisms cited, rely on official LOCAL sources (and a legal advisor if needed), and monitor. ISO standards are international and directly transposable. QHSE logic is universal; exact texts are national — understand the logic, check the applicable law where you are. ⚠️ This guide is not legal advice: consult your country's official sources.
What is the difference between legal obligations and ISO standards in QHSE?
Legal obligations and ISO standards play complementary but different roles: the former are MANDATORY and imposed by the State, the latter are VOLUNTARY and used to structure and gain recognition for an approach. LEGAL (regulatory) OBLIGATIONS: (1) They are MANDATORY: imposed by a country's laws and regulations (Labor Code, environmental regulations…). Complying is not a choice; non-compliance exposes you to sanctions (administrative, civil, criminal). (2) They set a MINIMUM to meet: protecting workers, assessing risks, preventing, managing waste and pollution within set limits, and so on. (3) They VARY by country (each State has its own texts). (4) Enforcement is carried out by public authorities (labor inspectorate, environmental authorities) that can sanction. (5) In short: this is the non-negotiable FOUNDATION — legal compliance comes first. ISO STANDARDS (9001 quality, 14001 environment, 45001 health and safety): (1) They are VOLUNTARY: an organization CHOOSES to adopt them (nobody is legally forced to, unless a customer/contract requires it contractually). (2) They do NOT replace the law: they add to the legal foundation. An ISO standard even requires COMPLYING with applicable regulation (legal compliance is part of the requirements). (3) They structure a management APPROACH: the standard describes HOW to organize a management system (for quality, environment, health and safety) — policy, objectives, processes, risk assessment, continuous improvement (PDCA). They bring a recognized method and framework. (4) They enable CERTIFICATION: an independent body audits and certifies that the organization meets the standard — a token of trust for customers and partners, sometimes required to access certain markets. (5) They are INTERNATIONAL: the same standards worldwide (a common language). The key differences: (1) MANDATORY (law) vs VOLUNTARY (ISO). (2) Legal MINIMUM to meet (law) vs management METHOD to organize well and improve (ISO). (3) STATE enforcement with sanctions (law) vs CERTIFICATION by an independent body, a token of trust (ISO). (4) VARIES by country (law) vs INTERNATIONAL (ISO). How they FIT TOGETHER: (1) LEGAL compliance is the mandatory FOUNDATION: the law must be respected first. (2) ISO standards come ON TOP, to structure, improve and gain recognition for the approach — they even help ensure and demonstrate legal compliance (which they require). (3) An organization can comply with the law WITHOUT being ISO-certified (the law does not require certification); but an ISO-certified organization must comply with the law (the standard requires it). (4) Many organizations adopt ISO standards because it is useful (method, improvement, image, market access), not because it is legally mandatory. In short: LEGAL OBLIGATIONS are MANDATORY (imposed by the State, a minimum to meet, enforced and sanctioned, varying by country) — the non-negotiable foundation of compliance. ISO STANDARDS (9001, 14001, 45001) are VOLUNTARY (an organization chooses to adopt them), international, and used to STRUCTURE a management approach (recognized method, continuous improvement) and have it CERTIFIED (token of trust, sometimes required by customers). They do not replace the law (they even require complying with it) but add to it, to organize well and gain recognition. In short: complying with the law is mandatory (the minimum); adopting ISO standards is a choice that structures and showcases the approach beyond the legal minimum. The two complement each other: legal compliance first, then a structured, certified management system.
What is health-and-safety regulation built on?