Checklist: Bringing a Website into Legal Compliance

Legal notices, cookies, GDPR: check if your site complies with French and European legal obligations.

Why bring your site into compliance?

A professional website (showcase, e-commerce, institutional) is not a lawless space. The site editor is responsible for the content published and the way in which visitor data is processed. Failure to comply with these obligations exposes the publisher to financial sanctions (CNIL, DGCCRF) and a loss of user confidence.

Checklist of legal obligations (France / EU)

1. Legal Notices (LCEN)

The Law for Confidence in the Digital Economy (LCEN) requires all professional publishers to clearly identify themselves. A dedicated, easily accessible page (generally at the bottom of the page) must contain:

  • For a company: Company name, legal form, head office address, RCS number, share capital.
  • For an association: Name, address, RNA number.
  • For everyone: Name of the publication director, full contact details of the host (name, company name, address, telephone).

2. The Privacy Policy (GDPR)

As soon as your site collects data (contact form, newsletter, account creation), you must inform users via a clear Confidentiality Policy, specifying:

  • The identity of the data controller.
  • The purpose of the collection (why you are collecting this data).
  • The legal basis (consent, legitimate interest, contract).
  • The duration of data retention.
  • The terms of exercise of rights (access, rectification, deletion) and the contact of the DPO if there is one.

3. Management of Cookies (ePrivacy & CNIL Directives)

You cannot place advertising or social network trackers without the explicit consent of the Internet user. Your site must integrate:

  • A cookie banner allowing you to accept everything, Refuse everything (at the same level), or Customize.
  • A “Cookies Policy” page listing the trackers used.
  • A floating button or link allowing the user to change their choices at any time.

4. E-commerce: General Terms and Conditions and Mediation

If you sell products or services online, additional obligations apply (Hamon Law):

  • General Conditions of Sale (CGV) must be validated before payment.
  • Explicit order button (eg: "Order with payment obligation").
  • Mention of a consumer mediation system (contact details of the mediator).

The ANRDI approach

Compliance is not just a legal constraint, it is a guarantee of transparency and security for your visitors. ANRDI encourages the integration of compliance by design (Privacy by Design) when creating or redesigning any digital project.