Health websites are proliferating, run by independent healthcare professionals, care facilities and medical information platforms. In France, each of these sites must display legal notices that comply with the French Law on Confidence in the Digital Economy. For patients, these few lines, often tucked away in the footer, are the only way to find out who is really behind online health content.
Operator identity: what patients can check on a health website
The first thing to look for in a health website’s legal notices is the publisher’s full identity. For an independent practitioner, this includes their first and last name, practice address and registration number with the relevant professional body (the Medical Council, the Pharmacists’ Council or the Dental Surgeons’ Council).
This registration number is a useful point of reference. Patients can cross-check it against the relevant professional body’s online directory to confirm that the practitioner is currently practising and holds the qualifications listed on the site. If the number is missing, caution is advised.
For a company or association, the legal notices must specify its registered name, registered office address, registration number (RCS or RNA) and the name of the publication director. A health website run by a company that omits this information is operating outside the legal framework. For example, Résolution Santé’s legal notices present these details in a structured format, making it easy to identify the entity responsible for the published content.
Health data hosting: a specific regulatory requirement
The name and contact details of the website host are among the required legal notices. For a health website, this information takes on added significance whenever patients’ personal data is collected or stored.
French regulations require personal health data to be hosted by an HDS-certified provider (Health Data Host). This certification, issued by an accredited body, guarantees a level of technical and organisational security suited to the sensitive nature of this information. Under the GDPR, health data is classified as sensitive data, the processing of which is generally prohibited except in specific cases, such as providing care or obtaining explicit consent.
Patients can therefore check the legal notices to see whether the host is identified and, where applicable, look up its HDS certification. If the site offers an appointment booking form, a patient portal or any feature that involves entering medical information, the absence of a reference to a certified host is a warning sign.
Contact forms and data collection
One often-overlooked issue concerns the contact forms found on practitioners’ websites. The French National Medical Council and the CNIL remind practitioners that these forms must not prompt patients to provide a reason for their appointment or describe their symptoms. Collecting this kind of information through an unsecured web form may put the practitioner in breach of regulations.
The legal notices or associated privacy policy must specify what data is collected, for what purpose and on what legal basis. Without these details, patients have no assurance about what will happen to the information they submit.
Legal notices and medical ethics: rules specific to doctors’ websites
Medical ethics add another layer of requirements to standard legal notices. The French National Medical Council regulates practitioners’ online presence through recommendations that supplement general legal obligations.
The central principle remains the prohibition of advertising. A doctor’s website must inform, not promote. Legal notices support this transparency by clearly identifying the practitioner and reminding visitors that the content is not a substitute for a consultation. The French National Authority for Health also reviews the compliance of online communications, particularly during audits of healthcare facilities.
- The practitioner’s name, specialty and registration number with the Medical Council must be clearly visible—not only in the legal notices, but also on the website’s home or profile page.
- Published medical content must not include patient testimonials for promotional purposes or comparisons with other practitioners.
- Where fees are displayed, they must comply with the current legal requirements for providing information about medical procedure costs.
The fact that France has no official label for doctors’ websites does not mean there are no penalties. The CNOM has disciplinary powers and can take action if a website breaches its ethical recommendations.
Complaints and contact details: who to turn to if there’s a problem
A health website’s legal notices must give visitors a practical way to contact the publisher. A postal address, email address or dedicated contact form: at least one direct means of communication must be available.
For data protection matters, the website must provide the contact details of its data protection officer (DPO), if it has one, or those of the data controller. Patients have the right to request access to, correction of or deletion of their personal data. The legal notices or privacy policy must explain this right and set out how to exercise it.
- For a dispute concerning medical content or professional ethics, patients can contact the relevant practitioner’s professional council.
- For a breach involving personal data, a complaint can be filed with the CNIL.
- For a commercial dispute (such as buying health products online or a subscription), the competent courts are those specified in the terms and conditions of sale, which must be accessible on the website.
Listing the available avenues for redress is more than a formality. It shows that the website operates within a framework of trust. A health website that omits this information leaves patients with no recourse if something goes wrong, whether they encounter misleading content, a data breach or a refusal to respond to an access request.
Before following advice from a health website or sharing personal information with it, taking a few seconds to check the legal notices can help distinguish an identifiable, accountable publisher from an opaque website. This remains the simplest and most reliable check available to patients online.
