There's a two-line sentence in the French Labor Code that almost no one knows about, but it determines your legal position on all uncertain matters. It's found in Article R. 4121-2, paragraph three. Here it is, and here's what it means in practice.
The sentence
Article R. 4121-2 of the Labour Code lists the cases in which the single risk assessment document must be updated.
The first two are well-known. At least once a year in companies with at least eleven employees. And whenever a significant organizational change is made that modifies health, safety, or working conditions.
The third is much less so. The update is also carried out when additional information relevant to the risk assessment in a work unit is brought to the employer's attention.
Reread the wording. The text doesn't say "when the risk is demonstrated." It doesn't say "when a limit value is published." It says: information. Brought to the public's attention.
What counts as information
The list is longer than you might think. An opinion from ANSES. An article from INRS. A new European classification of a substance you use. A warning from an occupational health network. A report from the occupational physician. A report from an employee.
Each of these elements triggers an obligation to update. Without waiting for certainty, and without waiting for your annual deadline.
This is excellent news for you, because it allows you to act and incur expenses on a matter that has not yet been proven. And it's a point of vulnerability, because the employer who received the information and did nothing is in a difficult position to defend.
How to write about an uncertain risk in the single document
The immediate question that arises is practical: How do you record a risk that you don't know how to price due to a lack of data?
There is no official form for this. Here is a method that works and that I use.
Record the risk, even without a robust rating. Describe the current state of knowledge and explicitly state what is uncertain. Assess the level of control through the interim measures you have taken. Date the assessment. And include a review clause.
An example of wording: Based on current knowledge as of October 15, 2026, there is neither an occupational exposure limit value nor a standardized measurement method for this substance. Exposure is reduced to the lowest technically feasible level by the following measures.
The review clause, the piece everyone forgets
This is the point that makes the difference, and it's the one I most often see missing.
A clause that simply states "annual review" doesn't protect you. It even commits you to doing nothing for eleven months. A good clause specifies two things: a deadline and one or more events that trigger an early review.
For example: this assessment will be reviewed no later than October 15, 2027, and without delay in the event of publication of an agency opinion, modification of the European classification of the substance, report from the occupational health service, occurrence of an incident, or modification of the process.
Three lines. They are worth a lot in case of an audit or dispute.
Why the date matters more than the decision
Here's what you need to understand, and it often brings relief to the leaders to whom I explain it.
If an employee develops a disease in fifteen years, the question you will be asked will not be "Did you know?". It will be: What did you do with what you knew, and when?
A dated, documented file, with a reasoned decision and a review clause, protects the company even if the decision proves inadequate in light of subsequent scientific knowledge. An employer cannot be faulted for not knowing what science did not yet know.
However, the absence of any trace protects no one. And it suggests that nothing has been done, even when something has.
Who should be involved in the decision?
A single document drafted alone in an office has little value, including legal value. Three parties must be involved in the process.
First and foremost, the employees involved. They are the ones who know the actual working conditions, including those not covered by any procedure. An evaluation conducted without their input describes the prescribed work, not the actual work performed.
The social and economic committee, where one exists, participates in risk assessments and must be consulted on any significant project that modifies working conditions. Its responsibilities regarding health and safety apply to companies with eleven or more employees.
Finally, there's the occupational health and safety service. It can provide you with job analyses, metrology, and a medical assessment of situations.
And keep a record of these exchanges. In the event of a dispute, a single document developed collaboratively is infinitely more defensible than a perfect document written by a single person.
Three habits to adopt this week
First, designate a person to receive and archive external information: INRS news, agency notices, letters from the occupational health service. A dedicated email address is sufficient.
Secondly, date all pages of your single document. An undated assessment has no probative value.
Third, add a review clause to risks you know are poorly documented. Start with two or three; that's enough to establish the habit.
KEY POINTS TO REMEMBER
- Article R. 4121-2, 3° requires an update as soon as information arrives, not when the risk is demonstrated.
- An agency notice, an INRS publication, or a written statement from the occupational physician triggers this obligation.
- An uncertain risk is included in the single document along with the state of knowledge and its assumed uncertainty.
- The review clause must specify a timeframe AND the events that trigger an early review.
- The question asked in case of a dispute is not "did you know?" but "what did you do, and when?".
TO GO FURTHER
Is your single document dated, up-to-date, and auditable? An external review takes half a day and saves years of trouble. Write to me to discuss it.
