Privacy policy: what must a company publish?
A practical guide to privacy policies, data notices and cookie disclosures for professional websites in France.
Expert note: This article was written by our chartered accountancy firm. Information is current as of 2026. For a personalised review of your situation, contact us.
Privacy policy: what must a company publish?
Updated March 2026 - A privacy policy should explain how personal data is collected, used, stored and protected. It should reflect real business processes, not generic boilerplate.
See also digitalisation of SMEs, breach of trust complaint and legal AI.
Key elements
- ▸controller identity;
- ▸purposes and legal bases;
- ▸recipients;
- ▸retention periods;
- ▸data subject rights;
- ▸cookie information where relevant.
CTA : Review your privacy notices
Conclusion
Good privacy notices are specific, readable and aligned with actual tools and forms.
Need to review your privacy documentation? Book an appointment with an expert
Article written by Samuel HAYOT
Chartered Accountant, registered with the Institute of Chartered Accountants.
Need a quote or personalised advice?
Our accountancy firm supports you through all your steps. Get a free quote to review your situation and receive a bespoke fee proposal, or contact us directly.