The French duty of vigilance law (Law No. 2017-399 of 27 March 2017) requires large French companies to publish and implement a vigilance plan preventing serious harm to human rights, health, safety and the environment across their operations, subsidiaries and established suppliers. It covers companies employing, over two consecutive years, at least 5,000 people with their French subsidiaries or 10,000 worldwide. It is one of Europe's first mandatory due diligence laws and a model for the EU Corporate Sustainability Due Diligence Directive (CSDDD).

The vigilance plan, published in the annual management report, contains five measures:

  • Risk mapping. Identification, analysis and ranking of risks.
  • Assessment procedures. Regular evaluation of subsidiaries, subcontractors and suppliers against that map.
  • Mitigation actions. Measures to reduce risks and prevent serious harm.
  • Alert mechanism. A reporting channel set up with the company's representative trade unions.
  • Monitoring system. Follow-up of the measures and of their effectiveness.

How is it enforced, and how does it relate to the CSDDD?

After a formal notice and a three-month delay, the Paris Judicial Court can order compliance, and the company is liable for harm that compliance would have prevented. The CSDDD, as amended by the Omnibus directive (EU) 2026/470, applies only from 26 July 2029 to groups with more than 5,000 employees and EUR 1.5 billion in turnover, so the French law remains the reference regime until then.

CONCLUSION
Vigilance is proven in the board record

Admincontrol Board Portal keeps committee papers, minutes and approvals in one secure space with folder-level access rights and a full audit trail, so the board's oversight of the vigilance plan can be evidenced.

Explore Admincontrol Board Portal

Share this post