You are browsing a website, scrolling to the bottom of the page, and you come across a discreet link: “legal notices.” Behind this link lie legal obligations that every website publisher must comply with in France. Whether your site is a personal blog, a professional showcase, or an online store, these legal notices are mandated by law. Ignoring this obligation exposes you to heavy financial penalties.
What the law requires based on your legal status
The Law for Confidence in the Digital Economy (LCEN) of June 21, 2004, sets the framework. Every website accessible to the public must display legal notices, whether it is managed by an individual, a sole proprietor, or a company.
The required information varies according to the legal form of the publisher. As can be verified on the legal notices of the Geek Gazette site, each publisher tailors the content of this page to their specific situation.
For an individual (micro-enterprise, sole proprietorship), the following must be indicated:
- Name, surname, and home address, accompanied by the mention “sole proprietor” or the initials “EI”
- Email address and phone number allowing contact with the business
- Registration number with the RCS and VAT identification number
- Name or business name of the website host, along with their address and phone number
For a legal entity (company), the notices additionally include the business name, legal form, and amount of share capital. The address provided is that of the registered office.
If you are engaged in a regulated activity (pharmacy, beverage sales, liberal profession subject to an order), you must also mention the name and address of the authority that issued the authorization.
Legal notices and personal data: two distinct obligations
Many websites merge legal notices and privacy policy into a single page. These are two separate legal obligations, governed by different texts.
The legal notices fall under the LCEN. The privacy policy falls under the GDPR (General Data Protection Regulation). You can group them on the same page, but each block must be clearly identified.
What the GDPR requires on your site
As soon as your site collects personal data (contact form, newsletter, customer account, audience measurement cookies), you must inform the user of several concrete elements:
- The purpose of each data collection: why you are collecting this information and what you do with it
- The legal basis for processing: consent, performance of a contract, legitimate interest, or legal obligation
- The recipients of the data: who has access, including subcontractors (host, emailing tool)
- The retention period for the data and the user’s rights (access, rectification, deletion, portability)
- The contact details of the data controller and, where applicable, the data protection officer
Cookie management requires a compliant consent banner, allowing the user to accept or refuse each category of cookies before they are placed. A simple “OK” button is not sufficient.
Transparency on artificial intelligence: the new obligation of the AI Act
Since August 2, 2026, an additional obligation concerns sites that integrate generative AI systems. Article 50 of the European Regulation on Artificial Intelligence (AI Act) imposes two specific rules.
A chatbot or virtual assistant must clearly indicate that it is an AI from the first interaction with the user, unless this is evident from the context. If your site offers a dynamic FAQ, a virtual advisor, or any conversational agent powered by a language model, this information must be prominently displayed.
AI-generated content: when must it be mentioned?
The AI Act goes further for certain content published on your site. When you disseminate deepfakes (images, videos, or sounds misleadingly representing real people or events) or AI-generated texts intended to inform the public on matters of public interest, visible labeling is mandatory.
This requirement does not apply to all texts produced with the help of AI. It specifically targets content that could mislead regarding its human origin in an informative or journalistic context.
Sanctions and common mistakes regarding legal notices
The absence of legal notices or their incomplete nature constitutes an offense. For an individual, the fine can reach 75,000 euros. For a legal entity, it can rise to 375,000 euros, along with up to one year of imprisonment for individuals.
Among the most common mistakes is the omission of the host’s contact details. Many website creators think that only their own details are sufficient. The law also requires identifying the host with their name, address, and phone number.
Another pitfall: legal notices must remain easily accessible from any page. A link in the footer is standard. A downloadable PDF file or a page accessible only from the homepage does not meet this visibility requirement.
Intellectual property: a mention often poorly handled
If your site uses images, illustrations, or photographs, you must indicate their intellectual property. For texts that are not yours, you must either obtain the author’s permission or cite the source. Omitting these credits exposes you to separate legal actions from those related to the legal notices themselves.
The legal notices of a website in France are no longer limited to the contact details of the publisher and the host. The GDPR has added a layer of requirements regarding personal data, and the AI Act introduces transparency obligations for sites using artificial intelligence. Regularly updating your legal notices page is not a common reflex, but it is the only way to remain compliant as the regulatory framework evolves.
