You have launched your website, refined the design, and written your pages. One page that many neglect or rush is the legal notices. This requirement, imposed by the law for trust in the digital economy (LCEN) of June 21, 2004, applies to all websites published from France, whether it is a personal blog, a showcase site, or an online store.
Ignoring this requirement exposes you to heavy fines. But beyond the penalty, well-written legal notices enhance the trust of your visitors and protect your business in case of disputes.
What the LCEN really requires according to your legal status
The nature of the information to be published directly depends on your legal form. A sole trader and a company do not declare the same elements. Here’s what changes concretely.
For a sole trader or micro-entrepreneur, the page must display your first and last name, accompanied by the mention “sole trader” or the initials “EI”. This should be supplemented by your address, an email address, a phone number, your registration number with the RCS, and your VAT identification number.
For a legal entity (SARL, SAS, SA), replace the name with the company name, specify the legal form and the amount of share capital, then indicate the address of the registered office. The rest (email, phone, RCS, VAT) applies in the same way.
In both cases, you must mention the identity of the website host: name or company name, address, and phone number. For a good example of a complete and structured page, you can observe the legal notices of Mon Assiette which present these elements in a readable manner.
If you engage in a regulated activity (liberal profession, real estate agent, craftsman), additional information is required: the name of the authority that issued the operating license, references to applicable professional rules, and, if applicable, professional title and country of issuance.
Legal notices and personal data: two distinct obligations
Do you collect email addresses via a contact form? Do you use a traffic analysis tool? Then your legal notices are not enough. The privacy policy constitutes a separate document, governed by the GDPR.
The privacy policy must address specific points: identity of the data controller, purposes of the collection, legal bases retained, retention periods, and rights of individuals (access, rectification, deletion, portability).
Regarding cookies and trackers, the rule is clear: any non-essential tracker requires prior consent. The “Refuse” button must be as visible and accessible as the “Accept” button. Many sites still offer a banner with a single clearly visible “OK” button and a “Settings” link in small print. This imbalance does not comply with current requirements.
Common mistake: mixing everything on a single page
Combining legal notices, privacy policy, and general terms of sale in the same document harms readability and complicates updates. Each text responds to a different legal framework. Separate them into distinct pages, linked by internal links from the footer.
Digital Services Act: new rules for sites with third-party content
Since February 17, 2024, the European regulation on digital services (Digital Services Act) imposes specific obligations on sites that host content published by third parties. Do you have a comments section, a forum, customer reviews, or a marketplace? You are potentially concerned.
The main requirements focus on two points:
- A clearly identified point of contact, allowing authorities and users to report illegal content.
- An accessible reporting mechanism, with a transparent process for handling received notifications.
- Clear information on the moderation rules applied to hosted content.
For a classic showcase site without interactive space, these obligations do not apply. However, as soon as a visitor can publish content on your site, you must anticipate this regulatory framework.
Sanctions and concrete risks in case of absent or inaccurate legal notices
The absence of legal notices is sanctioned by the LCEN. The amounts vary according to the status: individuals risk a fine of up to 75,000 euros, while legal entities face fines of up to 375,000 euros. These ceilings are not theoretical.
A point often overlooked: inaccurate information can be classified as misleading commercial practice. The Court of Cassation confirmed, on February 13, 2025, a conviction on this basis. In other words, publishing legal notices containing erroneous data can be riskier than not publishing anything at all.
DGCCRF checks and e-commerce sites
Online sales sites are subject to regular checks by the DGCCRF. These verifications focus on the presence of mandatory notices, but also on the consistency between the declared information and the reality of the activity. A compliance order may be followed by a fine if corrections are not made within the allotted time.
Digital accessibility: a related topic not to be confused
Since June 28, 2025, e-commerce services subject to European accessibility regulations must be designed to be usable by people with disabilities. Some very small businesses benefit from exemptions, but the regulatory trend is clearly moving towards an expansion of the scope.
Accessibility does not replace legal notices, and vice versa. These are two distinct compliance requirements, with different reference texts. Confusing them amounts to neglecting one of the two.
The compliance of a website is no longer limited to a hastily written single page. Between legal notices, the privacy policy, obligations related to the Digital Services Act, and accessibility requirements, each legal layer demands its own attention. Check your existing pages, separate the documents, and update them with each change in status, host, or data collection practice.