Many freelancers and small businesses assume legal notices only concern online shops, or that skipping them is a harmless oversight. That is a common but potentially costly mistake: French law requires this page on every site accessible to the public, whether it sells anything or not, and its absence constitutes a criminal offense, not merely an administrative irregularity.

The legal basis for this requirement

The obligation stems from the French law for confidence in the digital economy of June 21, 2004, known as LCEN, whose article governing legal notices was renumbered by the SREN law of May 21, 2024. This obligation applies to every site published from France, whether a showcase site, a personal blog, a nonprofit, or an online shop, with no exception based on the size of the business or the legal status of its publisher.

What the legal notice must contain

For a professional, the required information includes the full identity of the site's publisher, whether an individual or a company, its address, a means of contact, the business registration number or equivalent depending on the activity, the name of the publication director, as well as the identity and contact details of the site's host. A merchant site must additionally make its terms of sale and delivery conditions available, distinct obligations that add to the common baseline rather than replacing it.

The penalties for non compliance

Missing or inaccurate legal notices expose the publisher to criminal penalties under the LCEN, which can reach one year of imprisonment and seventy five thousand euros in fines for an individual. For a company, that fine can rise to three hundred seventy five thousand euros, under the multiplier mechanism the French penal code applies to legal entities. In practice, direct criminal prosecution remains rare for a simple oversight by a small freelancer, but the risk is not purely theoretical: an unhappy competitor, a client in a dispute, or a consumer association can very well report the absence, and a business already in a commercial conflict with a third party finds itself in a weaker position if this basic obligation is not met.

The special case of sole traders

A sole trader running a website, even a simple one with no direct sales function, remains subject to this obligation just as much as a more structured company. Lacking a traditional corporate structure does not exempt anyone from this identification requirement, which regularly surprises freelancers who assume only formally incorporated businesses are concerned.

The distinction from GDPR obligations

Legal notices and the obligations tied to the General Data Protection Regulation answer two different questions and rest on two distinct legal texts. Legal notices answer the question of who publishes the site, independently of any personal data collection. GDPR obligations, on the other hand, apply as soon as a site processes personal data, for instance through a contact form, and require informing the visitor about the use of that data at the moment they submit it. These two obligations complement rather than overlap each other, and the legal notice page usually includes a link to the privacy policy that details data processing.

Where and how to display this information

The law does not impose a specific location, but requires this information to remain easily accessible from any page of the site, which explains the widespread practice of a permanent footer link. On a WordPress site, this page is created like any other, while a custom PHP build simply needs to plan for this page from the outset rather than treating it as a late addition.

Points to verify before publishing: confirm that the renumbering of LCEN articles by the SREN law of May 21, 2024 remains accurate at the time of publication, and check that the penalty amounts mentioned (75,000 euros and one year of imprisonment for an individual, 375,000 euros for a company) still match the text in force on Légifrance.