A website that publishes editorial content in France must display a set of mandatory notices required by law for trust in the digital economy. These notices allow any visitor to identify who is behind the pages they are viewing, and under whose responsibility the content is disseminated.
Publisher Status and Identification Obligations on an Information Site
The amount of information to be published on a site directly depends on the legal status of its publisher. A company, a sole trader, an association, or an individual are not subject to the same requirements. This distinction is often overlooked by editorial sites, which sometimes settle for a vague paragraph in the footer.
For a publishing entity constituted as a company, the notices must include the company name, the registered office address, contact details, registration number, and, if applicable, the share capital. A sole trader must specify their first name, last name, and address. Associations add their RNA number or their registration reference with the prefecture.
Beyond the publisher, the law requires the identification of the publication director, a natural person responsible for the disseminated content. This obligation applies to any editorial site. The site’s host must also be mentioned with its company name and address. The official information on Passez l’info illustrates how a site can structure these elements to meet legal requirements.
Legal Notices and GDPR: Two Distinct Legal Frameworks
A common confusion is mixing legal notices and privacy policy. Legal notices fall under the law for trust in the digital economy and concern the identification of the publisher. The privacy policy falls under the GDPR and pertains to the processing of visitors’ personal data.
A compliant site therefore displays at least two separate documents. The first identifies the publisher, the publication director, and the host. The second details what data is collected, on what legal basis, for how long, and what rights the user has.
What the GDPR Specifically Requires from Editorial Sites
Any site that collects data, even limited to an email address via a contact form or audience measurement cookies, must inform visitors transparently. The CNIL reminds that this information must be permanently accessible, written in clear terms, and mention the rights of access, rectification, and deletion that each concerned person has.
- The legal basis for processing must be specified for each type of data collected (consent, legitimate interest, legal obligation).
- The data retention period must be indicated, even in the form of criteria allowing it to be determined.
- The contact details of the data controller or the data protection officer must be included in the document.
The absence of these elements exposes the publisher to sanctions from the CNIL, which has strengthened its controls on small and medium-sized sites in recent years.
Cookie Management: Consent is More Than Just a Banner
The issue of cookies and trackers is a recurring point of friction. A banner that does not offer a refusal button as visible as the acceptance button does not comply with CNIL guidelines. This situation led to documented complaints in 2026 regarding sites that circumvented consent refusal or imposed cookies without a clear alternative.
For an information site, the relevant trackers are often related to audience measurement or advertising. Even a simple traffic analysis tool may require consent if the data is transmitted to a third party or combined with other information.
Best Compliance Practices for Trackers
The consent collection mechanism must allow users to refuse cookies as easily as to accept them. The user’s choice must be recorded and respected for a reasonable duration, without asking for consent again on each visit.
Cookies strictly necessary for the operation of the site (authentication, shopping cart, language preference) are exempt from consent. All others, including non-anonymized audience measurement, require prior explicit agreement.
Checking a Site’s Legal Compliance: Concrete Control Points
Assessing whether a site meets its obligations does not require advanced legal expertise. A few simple checks can help identify the most common shortcomings.
- Is the legal notice page accessible from all pages of the site, usually via a link in the footer?
- Is the name of the publication director explicitly stated, along with a functional contact address?
- Does the privacy policy detail the types of data collected and the purposes of each processing?
- Does the cookie banner offer a visible refusal button at the same level as the acceptance button?
A site that checks these four points covers the fundamental obligations. Editorial sites that disseminate advertising or sponsored content must also clearly indicate the commercial nature of these elements, in accordance with the transparency rules applicable to online content.
The legal compliance of a site is not a fixed state. Regulations evolve, CNIL practices become clearer, and obligations may change depending on the services added over time. Regularly checking the alignment between what is displayed and what is actually practiced remains the most reliable reflex for any content publisher.
