Entrepreneurs launching an online business face a web of legal obligations that far exceed the choice of status or the drafting of general terms and conditions. Three texts structure the core of the applicable framework: Law 2004-575 of June 21, 2004, for electronic commerce, the Consumer Code for sales to individuals, and the GDPR for data protection.
Understanding how these rules interrelate, and especially where the constraints differ according to the company’s profile, helps avoid costly mistakes from the very first months of operation.
Comparative Legal Obligations According to Legal Status in E-commerce
The choice of status determines the volume of accounting, tax, and reporting obligations. The micro-enterprise is appealing due to its simplicity, but this simplicity hides thresholds that, once crossed, require a shift to a heavier regime.
| Criteria | Micro-enterprise | SASU | SARL / EURL |
|---|---|---|---|
| Liability | Unlimited on personal assets | Limited to contributions | Limited to contributions |
| VAT | Exemption at base (under threshold), then mandatory collection | Subject from the start | Subject from the start |
| Electronic invoicing (reform) | Eventually concerned | Concerned | Concerned |
| Social regime of the manager | Self-employed | Assimilated employee | TNS (majority manager) or assimilated employee |
| Accounting obligations | Record of receipts | Full accounting | Full accounting |
A often underestimated point: the unlimited liability of the micro-enterprise exposes the personal assets of the entrepreneur in the event of a commercial dispute or unpaid debt. For an online sales activity with increasing volumes, this risk deserves to be assessed even before the first euro is collected.
Entrepreneurs seeking legal information on Biz Academy will find a structured overview of these differences between statuses, along with their concrete implications for online commerce.
Electronic Invoicing and VAT: What Changes for Small Online Businesses
The reform of electronic invoicing does not only concern large structures. A PDF sent by email does not constitute an electronic invoice in the sense of the reform. The expected format relies on structured data transmitted via a partner dematerialization platform or the public invoicing portal.
For micro-enterprises exempt from VAT, the obligation arrives with a staggered timeline compared to large companies, but it is coming. Anticipating compliance helps avoid the need to urgently adapt a billing system designed for artisanal operation.
VAT in Micro-enterprises: A Common Trap
The VAT exemption at base does not mean a total absence of VAT. As soon as the turnover exceeds the regulatory thresholds, collection and reporting become mandatory. However, many micro-entrepreneurs discover this shift too late, leading to adjustments and sometimes penalties.
Data Protection and Cookies: Obligations That Also Affect Modest Sites
The GDPR applies to any site collecting personal data, regardless of the size of the business. A contact form, a shopping cart system, or a newsletter signup is enough to trigger the obligation of compliance.
- Refusing cookies must be as simple as accepting them: a “Reject All” button visible at the same level as “Accept All,” without a discouraging process
- Consent must be withdrawable at any time, and access to the withdrawal mechanism should not require searching through the site’s settings
- The validity period of consent cannot exceed the framework set by the CNIL, and each cookie deposited must correspond to a declared purpose
- The collected data must be subject to a processing register, even for a sole trader
The temptation to copy a standard cookie banner found on another site exposes one to real risk. The CNIL also monitors small sites, and formal notices are not reserved for major web players.
Commercial Influence and Partnership Contracts: The Joint Liability of the Advertiser
Online entrepreneurs collaborating with content creators to promote their products are exposed to a specific legal framework. French commercial influence law provides for joint liability between the advertiser, their agent, the influencer, and their agent for damages caused to third parties in the execution of the partnership contract.
Specifically, if an influencer makes a misleading promise about a product, the entrepreneur who commissioned them can be held jointly responsible. This liability does not require a monetary payment: an offered product is enough to characterize a commercial collaboration. The mention of the advertising nature must then be clear and appropriate to the medium used.
Influence Contract: Clauses to Include
A written contract protects both parties. It should specify the nature of the compensation, prohibited messages (health claims, unproven result promises), the right of approval before publication, and the conditions for content withdrawal. Without a formalized contract, proof of mutual commitments relies on informal exchanges that are difficult to use in case of dispute.
Digital Accessibility: An Obligation Being Strengthened for E-commerce
The accessibility of online stores is no longer just an ergonomic recommendation. Identification and payment processes must meet accessibility criteria, particularly for people with disabilities. This requirement concerns login interfaces, order forms, and payment systems.
Ignoring these constraints exposes one to complaints and, ultimately, sanctions. Digital accessibility is becoming a criterion for legal compliance, not a marketing bonus. Entrepreneurs building their site today should integrate these standards from the design stage rather than having to overhaul their interface in a few months.
The legal framework for online commerce is becoming denser each year, with obligations gradually descending to smaller structures. Electronic invoicing, digital accessibility, and responsibility related to commercial influence are three areas that the majority of online entrepreneurs will need to address in the short term, regardless of their status or turnover.
