Legal notices on a professional website 2026: what is required
The mandatory legal notices on a professional website in 2026 (editor, host, mediation, GDPR) and the penalties for non-compliance.
This topic is part of our service
Business law support in France | Corporate secretarialExpert note: This article was written by our chartered accountancy firm. Information is current as of 2026. For a personalised review of your situation, contact us.
You have launched your site to promote your business, but have you set up the legal notices? Many owners treat them as a minor formality, yet they are imposed by two regimes: the Law for Confidence in the Digital Economy (LCEN) and, for online sales, the Consumer Code. Missing notices expose you to enforcement and criminal penalties. In our practice, we have helped several e-merchants bring their site into line after a warning letter: upfront compliance would have cost far less.
Quick answer. The mandatory legal notices on a professional website include the editor's full identity (name, address, business register/SIREN, capital, VAT), the host's identity, the publication director, and — for online sales — the terms of sale, pre-contractual information, the consumer mediator and the privacy policy (GDPR). Since the law of 21 May 2024, these obligations sit in Article 1-1 of the LCEN and the sanction for missing identification in Article 1-2: up to one year's imprisonment and EUR 75,000 fine for an individual, EUR 375,000 for a legal entity.
The 2026 legal framework: two foundations#
The LCEN (Law no. 2004-575 of 21 June 2004)#
The LCEN applies to every site editor, whether or not selling online. It was restructured by the SREN Act (Law no. 2024-449 of 21 May 2024) on securing and regulating the digital space: the editor-identification duty, formerly in Article 6-III, now sits in Article 1-1, and the criminal sanction for missing identification, formerly in Article 6-VI, in Article 1-2. Permanently accessible must be: the editor's identity, a contact address and the host's details.
The Consumer Code (Article L111-1)#
If you sell online, the Consumer Code requires more detailed pre-contractual information: the professional's identity, the characteristics and price, delivery costs and timeframes, the right of withdrawal, and the consumer mediator's contact details. This is an extra layer on top of the LCEN.
Checklist of mandatory notices by entity type#
| Element | Natural person (brochure) | Company (brochure) | Regulated profession | E-commerce |
|---|---|---|---|---|
| Name or trading name + activity | Yes | Yes (+ legal form) | Yes (+ title + regulator) | Yes |
| Professional address | Yes | Yes | Yes | Yes |
| SIREN and business register | If registered | Yes | Yes | Yes |
| Share capital | — | Yes | Yes | Yes |
| Intra-EU VAT number | If VAT-taxable | If VAT-taxable | If VAT-taxable | If VAT-taxable |
| Contact (email, phone) | Recommended | Yes | Yes | Yes |
| Host (name, address, contact) | Yes | Yes | Yes | Yes |
| Publication director | If media | Yes | Yes | Yes |
| Professional body number | — | — | Yes | If applicable |
| Terms and conditions of sale | No | If selling | If selling | Yes |
| Privacy policy (GDPR) | If data collected | Yes | Yes | Yes |
| Consumer mediator | No | No | No | Yes |
The editor's identity#
Natural person#
State your name, the address of your place of business and the nature of your activity. A SIREN number is required only if you are registered; citing it nonetheless builds trust.
Company#
State the exact trading name, legal form, SIREN number, business-register entry and competent registry, share capital, registered address and intra-EU VAT number if you are VAT-taxable.
Common pitfall. Many sites show an address matching neither the registered office nor the actual place of business. State the exact address of the establishment responsible for publication.
Regulated profession#
Add the exact professional title and the regulator registration number (for example the Architects' Register), plus the regulator's country in cross-border practice. For an accountant, mention of the entry on the professional roll is expected.
The host and the publication director#
The host must be identifiable: name, address and contact details. Ask your provider for these and keep them current if you change host.
The publication director is the person answerable for content. It is usually the editor; state clearly who validates content, especially if an agency manages the site.
E-commerce: the additional obligations#
Terms and conditions of sale#
Accessible and accepted before the order, they state the description of goods or services, the VAT-inclusive price, delivery costs and timeframes, the right of withdrawal (14 days, with exceptions), payment terms and statutory warranties.
Consumer mediator#
Any professional selling to consumers must provide the contact details of a competent consumer mediator (Article L612-1 of the Consumer Code) and how to refer a dispute. It is one of the omissions most flagged by the DGCCRF.
Privacy policy (GDPR)#
A dedicated page must state the data collected, the purposes, the retention period, individuals' rights and the contact (or data protection officer, if any). Non-essential cookies require prior consent, in line with the CNIL's guidance.
Special cases#
Brochure site with no sales#
The LCEN minimum suffices: editor identity, host, contact, and a privacy policy as soon as a form collects data.
B2B e-commerce#
Notices remain mandatory; the consumer-mediation duty softens (it targets consumers) and T&Cs can be less prescriptive than in B2C.
B2C e-commerce#
Full compliance: all Consumer Code information (T&Cs, VAT-inclusive price, costs, withdrawal, mediator) and the privacy policy.
Regulated profession online#
It combines the LCEN, the Consumer Code if there is a paid online service, and its regulator's ethical rules (registration number, authorised structure, professional secrecy).
Vigilance points for 2026#
- Accessibility. A clear footer "Legal notices" link suffices; do not bury them.
- Updates. Refresh notices on any change (host, capital, VAT, contact) and display a last-update date.
- Multilingual. Reproduce notices in each site language.
- HTTPS. A professional site without a certificate (HTTPS) sends a poor compliance and security signal.
Our accounting perspective#
Supporting digital providers, we find recurring gaps: missing SIREN, no consumer mediator even though the business sells online, no last-update date. A DGCCRF inspection could lead to a costly remedial notice and reputational risk.
Hayot Expertise advice. Spend an hour building your "Legal notices" page from the checklist above, then have your legal counsel review it before going live. If your site generates turnover, this is minimal preventive investment against the consequences of a breach.
Key takeaways#
- LCEN: editor identity, address, contact and host mandatory for every professional site (Article 1-1 since the law of 21 May 2024).
- Sanction for missing identification (Article 1-2): up to 1 year and EUR 75,000 (individual), EUR 375,000 (entity).
- E-commerce: add T&Cs, VAT-inclusive price, withdrawal and consumer mediator.
- GDPR: privacy policy mandatory; non-essential cookies require consent.
- Regulated professions: state the title and regulator number.
- Accessibility and regular updates.
Sources#
- Légifrance — Law no. 2004-575 of 21 June 2004 (LCEN)
- Légifrance — Article L111-1 of the Consumer Code
- Légifrance — Article L612-1 of the Consumer Code (mediation)
- CNIL — Legal notices, cookies and personal data
- Service-Public — Legal notices on a website
Frequently asked questions
Is a simple "Legal notices" page enough?+
Yes, as long as it contains the mandatory elements (editor, host, contact, and a privacy policy if data is collected) and is easily reachable via a footer link. The form (generator, template, bespoke text) matters little; the content is what counts.
Do I need a consumer mediator even if I sell little?+
Yes. From the first online sale to a consumer, you must name a competent consumer mediator (Article L612-1). You may use a sector mediator.
What is the penalty for missing notices?+
Missing editor identification is sanctioned by Article 1-2 of the LCEN: up to one year's imprisonment and a EUR 75,000 fine for an individual, EUR 375,000 for a legal entity. DGCCRF consumer sanctions may add to this.
Must I name the host even if I do not pay for it directly?+
Yes. The host must be identifiable whatever the arrangement. Ask your provider for the details and insert them in your notices.
Does the 14-day right of withdrawal apply to digital services?+
For a digital service fully performed with the consumer's prior consent (for example immediate access), the right of withdrawal can be lost. State this clearly in your T&Cs to avoid disputes.
Must the privacy policy be updated every year?+
Not automatically. Update it whenever your collection or processing practices change, and display the last-update date for transparency.
Must notices be translated on a multilingual site?+
Yes. Reproduce the legal notices in each site language; a French-only version on an English-language site is a point of non-compliance.
Article written by Samuel HAYOT
Chartered Accountant, registered with the Institute of Chartered Accountants.
Regulated French accounting and audit firm based in Paris 8, built to support companies across France with a digital and decision-oriented approach.
Sources
Official and operational sources cited for this page.
- Légifrance — Loi n° 2004-575 du 21 juin 2004 (LCEN, articles 1-1 et 1-2 depuis la loi du 21 mai 2024)
- Légifrance — Article L111-1 du Code de la consommation (information précontractuelle)
- Légifrance — Article L612-1 du Code de la consommation (médiateur de la consommation)
- CNIL — Mentions informatives et formalités
- Service-Public — Mentions légales d'un site internet
This topic is part of our service Business law support in France | Corporate secretarial
Need a quote or personalised advice?
Our accountancy firm supports you through all your steps. Get a free quote to review your situation and receive a bespoke fee proposal, or contact us directly.