The legal notices are not just a copy-paste of a legal template. Their content varies according to the legal form of the publisher, the nature of the activity, and the functionalities of the site. Ignoring these distinctions exposes one to sanctions, but more importantly, to a lack of transparency that users and authorities quickly detect.
Blocking trackers before consent: the technical audit that the notices alone do not cover
Displaying a compliant cookie banner in its text is not enough. Compliance depends on the technical behavior of the site: trackers requiring consent must remain blocked until the user has made their choice. A site that sets cookies as soon as the page loads, before any interaction with the banner, is in violation, regardless of the care taken in drafting its policy.
The refusal must be as simple as acceptance. A “Reject” button placed at the same visual level as “Accept,” without any additional steps. The choice must be easily withdrawn or modified, via a link permanently accessible in the footer.
We recommend checking the actual behavior of the site after clicking “Reject all” using a network inspection tool. A discrepancy between the text of the banner and the technical behavior poses a higher legal risk than the complete absence of a banner, because it demonstrates an intention to comply that is not followed through. The presentation of the Backlink Links site illustrates a clear structuring of this regulatory information.
Mandatory legal notices: what changes between legal entities and sole proprietors
The law for trust in the digital economy (LCEN) of June 21, 2004, imposes a common identification framework, but the information to be provided differs according to the publisher’s status.
Legal entity (SAS, SARL, SA, etc.)
- Company name, legal form, and amount of share capital, accompanied by the address of the registered office, an email address, and a phone number
- Registration number in the trade and companies register (RCS) for a commercial activity, or in the trades directory (RM) for a craft activity
- Individual tax identification number (VAT number) when the company is subject to it
- Name of the publication director or editorial manager
Natural person (sole proprietorship, micro-enterprise)
Name and surname of the operator, accompanied by the mention “sole proprietor” or the initials “EI”. The domiciliation address replaces that of the registered office. The SIREN number and, if applicable, the RM number are required.
In both cases, the contact details of the site’s host (company name, address, phone) must be included in the notices. The omission of the host is one of the most common oversights on showcase sites.
Specific obligations for regulated professions and e-commerce
Sites operated by regulated professions (lawyers, accountants, real estate agents, healthcare professionals) must mention the authority that granted the license to practice, the applicable professional rules, and the professional title with the member state of issuance.
For an online commerce site, the notices extend to the general terms and conditions of sale (GTC), the right of withdrawal, delivery and payment methods, as well as the contact details of the consumer mediator. The absence of GTC on an e-commerce site constitutes a distinct violation from the absence of classic legal notices.
DSA and digital accessibility: two layers of transparency in addition to legal notices
The Digital Services Act (DSA) introduces transparency obligations that do not overlap with classic legal notices. A showcase site is not affected in the same way as a platform hosting third-party content or an online marketplace.
For services that allow users to publish content, the DSA requires public disclosure of moderation rules, reasons for content restrictions, and avenues for appeal. These obligations pertain to the functioning of the service, not the identity of the publisher.
Since June 28, 2025, digital accessibility also applies to certain private digital services, including e-commerce. For the affected services, transparency is no longer limited to identification: it is necessary to account for the level of accessibility of the service. Microenterprises providing services benefit from an exemption, but other publishers must publish a regularly updated accessibility statement.
Sanctions for the absence of legal notices on a website
The LCEN provides for criminal sanctions of up to one year in prison and a fine for individuals. Beyond the criminal aspect, the CNIL can intervene independently on the personal data and cookies aspect, with administrative fines proportional to turnover.
The most concrete risk for the majority of sites remains the formal notice followed by an injunction to comply. Reports often come from competitors or consumers, rarely from random checks.
The legal notices page must remain accessible in one click from all pages of the site, usually via a link in the footer. A broken link or an empty page is legally equivalent to an absence of notices.
The transparency of a website is built on several distinct legal layers: identification of the publisher and the host, personal data and cookies policy, sector-specific obligations, and now accessibility and DSA rules for the relevant services. Each layer has its own reference texts and its own control authorities. Treating legal notices as a unique formality means only respecting a fraction of them.
