A showcase site created in an evening on WordPress, a blog launched between two projects, a hastily set up Shopify store: we often forget the same detail, the legal notice page. In France, every website accessible to the public must display its legal notices, whether it is professional or personal. The law for confidence in the digital economy (LCEN) of June 21, 2004, establishes this obligation, and the penalties for non-compliance are not symbolic.
CNIL Checks and Digital Compliance: What Has Changed Since 2023
Legal notices are often associated with a fixed formality. In practice, the CNIL now includes the verification of legal notices in its overall digital compliance checks. Since the 2023 CNIL report and its 2024 control plan, the absence or obsolescence of these notices is noted during investigations related to data protection, commercial prospecting, or cookie management.
Recommended read : Innovative Solutions to Simplify Your Search for Social Housing in France
In other words, an incomplete legal notice page can trigger a broader compliance check regarding the site’s GDPR compliance. We are no longer talking about an isolated oversight that is corrected after a report, but rather an entry point for the authorities. This is a good reason to treat this page as a living document, updated with every change of host, business name, or data policy.
To see what a structured page looks like, the legal notices of Geek Gazette illustrate well the level of detail expected on an editorial site.
Related reading : What are the criteria for choosing the best marine vehicle battery?
Mandatory Legal Notices on a Professional Site: Information Not to Forget
The LCEN distinguishes between two types of publishers, individuals and legal entities, with different requirements. For a sole trader, you must provide name, first name, address, and the mention “sole trader” or the initials “EI”. For a company, you add the company name, registered office, and capital amount.
Beyond this basic information, several details are systematically missing from sites created with no-code templates:
- The registration number with the RCS and the VAT identification number, often left blank in generic templates
- The complete identity of the site’s host (name or company name, address, and phone number), which many confuse with the name of the CMS used
- The actual contact details of the publisher (email address and phone number), not just a simple contact form
- For regulated activities (pharmacy, beverage sales, liberal professions), the name and address of the authority that granted the operating license
Keeping the default template of your CMS without adapting it is the most common mistake. Specialized lawyers and DPOs regularly observe this: absence of SIREN, incorrect identification of the host, incorrect qualification of professional or personal status. These gaps directly expose you to penalties.
Penalties Provided by the LCEN
For an individual, the fine can reach 75,000 euros. For a legal entity, this amount rises to 375,000 euros. A one-year prison sentence is also provided for in the text. We are far from just a slap on the wrist.
Personal Data and Cookies: The Border with the GDPR
Legal notices are not limited to identifying the publisher. As soon as a site collects personal data (contact form, newsletter, user account, analytics), the page must specify the purposes of the collection, the legal basis for processing, and the recipients of the data.
In practice, these details are often separated between the legal notice page itself and a dedicated privacy policy. Both approaches are accepted, but the information must remain easily accessible. The CNIL checks this point during its inspections.
For cookies, the consent banner is not enough. The legal notices or the associated policy must list the cookies used, their purpose, and their retention period. A site that displays a banner without documentation behind it remains in violation.
AI Act and AI Transparency: The Next Update of Your Legal Notices
The European Parliament adopted the final text of the regulation on artificial intelligence (AI Act) on March 13, 2024. This text will impose new transparency obligations for sites using AI systems: chatbots, automatic content generation, recommendation or moderation systems.
Specifically, if a site uses a chatbot powered by a language model or generates product sheets automatically, it must inform users of the presence of these systems. This information may appear in the legal notices, in a dedicated AI transparency page, or in the terms of use.
For publishers of French sites, this means a revision of the legal notice page in the months following the implementation of the various provisions of the regulation. Anticipating this evolution prevents being caught off guard when checks incorporate this aspect.
No-Code Sites and Templates: Why Copy-Pasting Does Not Protect
WordPress, Wix, Shopify, and other no-code platforms provide templates for legal notices. These templates are generic and rarely adapted to French law. We find pages that mention an American host without an address or phone number, poorly qualified legal statuses, or GDPR clauses copied from an English-speaking site.
Adapting the legal notices to your actual situation takes less than an hour and protects against disproportionate risks. Each field must be checked: identity of the publisher, contact details of the host, RCS or SIREN number, data policy. If the site engages in a regulated activity, specific mentions related to that activity must also be included.
A personal site without commercial activity has lighter obligations. You can limit it to the name of the host if you wish to remain anonymous as an individual. The page must still exist: the total absence of legal notices remains punishable regardless of the type of site.
The legal notice page functions as an identity card for the site. It evolves with the regulatory framework, with the publisher’s activity, and soon with the use of artificial intelligence. Updating it at least once a year remains the simplest reflex to stay compliant.