The legal notices of a website are often drafted once and then forgotten. However, their content is subject to specific obligations set by the law for trust in the digital economy (LCEN) of June 21, 2004. Beyond the identification of the publisher, a website’s compliance today encompasses distinct requirements: privacy policy, cookie management, contractual information.
Measuring the gap between what the law requires and what most sites actually display helps to identify concrete risks.
Legal notices, privacy policy, and cookies: three legally distinct obligations
The most common confusion is to group all legal information on a single page. However, French and European regulations distinguish three areas, each based on a different text and monitored by authorities that do not look at the same elements.
| Obligation | Founding Text | Main Content | Control Body |
|---|---|---|---|
| Legal Notices | LCEN of June 21, 2004 | Identity of the publisher, host, contact details | DGCCRF, courts |
| Privacy Policy | GDPR (2018) | Purposes of collection, legal basis, retention period, rights of individuals | CNIL |
| Cookie Banner / Tracker Management | ePrivacy Directive, transposed into the LCEN (art. 82) | Prior consent, list of trackers, option to refuse | CNIL |
A site can display complete legal notices while being non-compliant regarding trackers. Conversely, an impeccable cookie banner does not exempt the need to mention the host. Each area must be treated separately to prevent a check on one from revealing a gap in another.
The legal notices of Lordy’s site illustrate this separation by structuring identification information independently from privacy-related data.
Sanctions incurred in the absence of legal notices
The LCEN provides for criminal sanctions for individuals and legal entities that do not comply with the identification obligation. For a legal entity, the amount of the fine is multiplied by five compared to that applicable to individuals.
On the other hand, the pressure for control is increasingly focused on trackers and the security of personal data, rather than solely on the identification of the publisher. The CNIL has intensified its corrective actions in recent years, prioritizing breaches related to cookies and the GDPR.
Often overlooked indirect risks
Beyond the fine, the absence of complete legal notices weakens a site’s position in the event of a commercial dispute. A customer who cannot identify the responsible party of a site has an additional argument before a court. Credibility with partners (banks, advertising platforms, marketplaces) can also be affected.
- An online payment provider may refuse to activate an account if the legal notices are absent or incomplete
- Programmatic advertising agencies are increasingly checking legal compliance before accepting a publisher
- A competitor may report the absence of legal notices to the DGCCRF, triggering a check
Technical migrations and structural changes: the risk of obsolescence of legal notices
Drafting legal notices at the launch of the site is not enough. Any modification of the legal structure or hosting makes the page potentially inaccurate. A change in corporate form (e.g., from SARL to SAS), a relocation of the headquarters, a change of management, or a migration to a new host alters information that must be included in the notices.
The change of host is a particularly common case. During a technical migration, teams focus on service continuity and SEO. Updating the host’s contact details in the legal notices is rarely included in the migration specifications.
Recommended frequency of verification
No text imposes a revision schedule. A systematic check at each event that modifies displayed information remains the most reliable method. Otherwise, an annual audit of the legal notices, privacy policy, and cookie banner allows for the detection of accumulated discrepancies.
Online right of withdrawal: the reform applicable in June 2026
Online sales sites must anticipate a concrete European evolution. As of June 19, 2026, professionals selling to consumers will have to offer a feature allowing the exercise of the right of withdrawal directly from the purchase interface (site, application, customer area). This feature must be free and accessible without complex procedures.
This obligation does not strictly fall under the legal notices, but it is part of the same compliance environment. A site that updates its legal notices without integrating this new withdrawal process will remain partially non-compliant after this date.
The reform illustrates a fundamental trend: the legal obligations of a site are no longer limited to a static page. They now affect user journeys, account management interfaces, and ordering processes. Managing legal compliance as an ongoing technical project, just like maintenance or security, reduces the risk of silently accumulating breaches.
