You built your website to attract customers, showcase your products, and grow your business. Legal compliance probably wasn't the main brief.
That's understandable — but it's becoming costly. Across France and Germany, websites are subject to detailed legal requirements that span multiple overlapping regulations. And enforcement, once patchy, is now systematic.
In 2023 alone, the French data protection authority (CNIL) issued over €89 million in fines. German data protection authorities issued hundreds of enforcement actions. And Germany's Abmahnung system allows competitors and consumer organizations to sue non-compliant websites directly — no regulator required.
The reality: most websites operating in France or Germany have at least one compliance gap that could result in a fine or legal action. Our scans of over 19,500 business websites found that 82.4% had at least one issue — and 98.7% of French sites in the sample had at least one.
⚠️ Disclaimer: This article is for informational purposes only and does not constitute legal advice. Regulations and enforcement practices vary by jurisdiction and may change over time. Consult a qualified lawyer for advice specific to your situation.
Website developers don't handle legal compliance. Your web designer built a beautiful site — legal requirements weren't in scope.
Lawyers don't audit websites proactively. Unless you specifically asked a lawyer to review your site, they haven't.
Regulations change. A site that was compliant two years ago may not be today. New rules, new guidance, and new court decisions continuously shift what's required.
Requirements differ between countries. A site fully compliant in France may be exposed in Germany, and vice versa.
Enforcement was historically low — that era is over. Regulators now use automated scanning tools. Organized complainants file systematic complaints. German competitors use Abmahnung letters routinely, and CNIL has been explicit that it intends to investigate businesses of all sizes, not just large platforms.
| Exposure | France | Germany |
|---|---|---|
| Missing legal notices | Up to €75,000 / €375,000 | €50,000 + Abmahnung costs |
| Cookie consent violations | €20M or 4% of global turnover | €300,000 + Abmahnung |
| GDPR / privacy violations | €20M or 4% of global turnover | €20M or 4% of global turnover |
| Accessibility (EAA, June 2025) | Up to €25,000 per violation | Up to €100,000 (BFSG) |
| E-commerce / T&C violations | €15,000–€75,000 | Abmahnung + unenforceable contracts |
Beyond fines: a CNIL investigation is public record. German Abmahnung letters come with tight deadlines and escalate to court injunctions if ignored. Reputational damage and the cost of reactive legal response add significantly to the direct fine exposure.
For real examples of what happens when gaps go unaddressed, see our breakdown of actual enforcement cases across France and Germany.
You can't fix what you don't know is broken. Most business owners are surprised by their first compliance report — not because they were negligent, but because they didn't know what was required.
Our 30-second scan reveals exactly what's at risk on your website — checked against French and German requirements:
No legal jargon. No 200-page reports. Just clear findings.
Not sure if your website is compliant?
Scan your website now — results in 30 secondsDoes GDPR compliance mean my website is fully compliant in France and Germany?
Not necessarily. Both countries layer additional national requirements on top of GDPR — cookie consent specifics, legal notices, and e-commerce rules all vary by country. GDPR is the floor, not the ceiling.
What is an Abmahnung and how much does it cost?
An Abmahnung is a formal cease-and-desist letter sent by a competitor or consumer organization in Germany. No regulator needs to be involved. Typical costs to resolve one with legal counsel range from €1,000 to €5,000. If you're operating in Germany, see Why Small Businesses Are the #1 Target for Website Abmahnungen in Germany. If you've already received one, see our step-by-step Abmahnung response guide.
My website is small — am I still at risk?
Yes. German Abmahnung letters specifically target small businesses, because legal fees are predictable and many businesses settle quickly rather than litigate. CNIL in France accepts complaints from individuals and follows up systematically regardless of company size.
How does CNIL find non-compliant websites?
CNIL uses automated scanning tools deployed at scale, complaint submissions from individuals, and sector-wide investigation campaigns. See our full breakdown: How CNIL Finds Non-Compliant Websites.
What happens if CNIL contacts me?
There is a defined investigation process with formal stages, document requests, and the right to respond before any sanction is issued. Understanding the process matters — see What Happens During a CNIL Investigation.
Sources: CNIL Annual Report 2023, Sitetals scan data (19,507 sites, May 2026), LCEN, DDG §5, TTDSG, GDPR, European Accessibility Act (Directive 2019/882)