Online Reviews and French Law: What Businesses Must Know

August 30, 2026 Pierre MADI 10 min read

Summarize this article with AI:

ChatGPTPerplexityClaudeGrok

Disclaimer: this article is a general information summary, current as of August 30, 2026. It does not constitute legal advice. Any litigious situation should be submitted to a qualified attorney. This guide covers French law — relevant for any business operating in France or facing French-hosted review platforms.

Quiz: does your situation have legal grounds?

The French legal framework for online reviews

France is one of the countries with the strictest regulation of online reviews. Two blocks of legislation structure everything:

The Consumer Code (art. L.111-7-2 and following), from the 2016 Digital Republic Act and strengthened by the EU Omnibus Directive. It imposes transparency obligations on any platform that collects, moderates, or publishes reviews: displaying whether reviews are controlled and how, showing publication and experience dates, informing consumers whose review was rejected, and above all providing a free feature letting a business report doubts about a review's authenticity. Breaches expose the platform to administrative fines of up to 375,000 euros for a legal entity — enforced by the DGCCRF (the French competition and fraud authority), which has beefed up its detection capabilities.

General liability and press law: the July 29, 1881 Press Law (defamation, insult), article 1240 of the Civil Code (disparagement, unfair competition), article 312-10 of the Criminal Code (blackmail, applicable to review extortion), and the 2004 LCEN law on trust in the digital economy (host liability, procedures against illegal content).

The guiding principle: a negative review, even a harsh one, even one that feels unjust, is protected by free speech if it reflects a genuine experience. The law only steps in when a review crosses precise lines. That's the next section.

Defamation, disparagement, legitimate review: drawing the line

The entire legal strategy depends on the qualification. Three cases you must never confuse:

1. The legitimate review (not actionable). "Slow service, unfriendly waiter, waited 40 minutes." An opinion, a subjective assessment, a lived experience. Even if it hurts, it's protected. Your only weapons: a professional public response (see our guide to responding to negative reviews) and collecting positive reviews to dilute it.

2. Defamation (July 29, 1881 Press Law). The review alleges a precise, false fact that harms honor or reputation: "this restaurant serves spoiled meat," "this garage bills for repairs it never does." Two cumulative conditions: a precise fact (not an opinion) AND harm to honor. ⚠️ Statute of limitations: 3 months from publication — a brutally short window. Defamation can be defeated if the author proves the truth of the fact or their good faith (legitimate purpose, no personal hostility, serious investigation).

3. Disparagement and unfair competition (art. 1240 Civil Code). A review that discredits a competitor's products or services through inaccurate assertions. This is the right path when the author is an identified or identifiable competitor. Statute of limitations: 5 years. And recent case law is firm: the Paris Court of Appeal confirmed on March 14, 2025 (Le Wagon / La Capsule case) that fake anonymous testimonials published by a competitor's directors constitute a deceptive commercial practice (art. L.121-1 to L.121-3 Consumer Code), with damages and recognition of distinct moral prejudice.

The practical rule: negative opinion = public response. Precise false fact = possible defamation (act fast, 3 months). Competitor behind it = disparagement / unfair competition (5 years). Money demand = blackmail, criminal route — see our negative review attack protocol.

Fake reviews: sanctions for those who commission them

French law sanctions both sides of a fake review — the one who posts it and the one who commissions it:

Deceptive commercial practice (art. L.121-4 and L.132-2 Consumer Code). Publishing or commissioning fake consumer reviews — positive for yourself, negative against a competitor — is a criminal offense: up to 2 years' imprisonment and a 300,000-euro fine for a legal entity. The DGCCRF has strengthened its detection capabilities, and platforms cooperate: Google has blocked or removed over 240 million fraudulent reviews since 2024.

Unfair competition (art. 1240 Civil Code). Between professionals, a disparaging fake review triggers the civil liability of whoever commissioned it: content removal, damages (lost revenue, reputational harm, remediation costs), sometimes publication of the ruling.

The lesson for your own collection: these texts are also what protects you... and what exposes you if your own practices slip. Buying reviews, incentivizing with perks, employee-written reviews: all of this falls under these sanctions. Our guide to forbidden practices details what's allowed and what isn't.

Identifying an anonymous reviewer

This is THE question every business owner asks. The 2026 answer: it's possible, but regulated — and the frame has been tightened.

What changed. Since the law of July 30, 2021, identification procedures against internet users are primarily reserved for the criminal route. The old petition-based identification order no longer works as before.

The current path: fast-track proceedings on the merits before the judicial court president (LCEN, art. 6, I, 8°). The judge can order any measure to prevent or stop harm caused by online content — including disclosure of identification data held by the host (Google, the review platform): name, email, account data. The Cour de cassation clarified on February 26, 2025 that this route requires manifestly illegal content, and that when the author is impossible to identify, the judge weighs whether removal is proportionate to the harm suffered.

The real limits, confirmed by the Rennes Court of Appeal (January 20, 2026):

• You must demonstrate a legitimate motive and a plausible link between the facts and the harm — mere suspicion isn't enough
• Technical data (IP addresses) is only disclosed for the most serious offenses
• If the contemplated criminal action is time-barred (3 months for defamation), the identification request falls with it
• A legal entity cannot invoke cyber-harassment (reserved for natural persons)

The pragmatic approach: before launching an identification procedure, exhaust platform routes (motivated reporting, extortion form where applicable), build evidence through a bailiff (commissaire de justice), and only seize the judge with a documented file. Our management and protection service prepares exactly this kind of file before handing it, if needed, to a partner attorney.

Right to be forgotten and content removal

Two distinct mechanisms, often confused:

The right to delisting (GDPR, Google Spain CJEU ruling 2014). A natural person can ask a search engine to delist pages about them (containing their personal data) when the public's interest in accessing them doesn't override theirs. Important: this covers natural persons, not companies — GDPR doesn't protect the data of legal entities. A director can request delisting of pages targeting them personally, not their company's listing.

Removal of illegal content (LCEN). For manifestly illegal content (defamation, insult), the path is notifying the host, then if needed, fast-track proceedings to order removal. Review platforms also have the legal obligation to offer motivated reporting of authenticity doubts (art. L.111-7-2): often the fastest channel, before any litigation. Our platform-specific guides: removing a Google review, reporting a fake review.

The caveat: removal is never guaranteed, even with a judge. When the author is anonymous and debate impossible, the judge weighs proportionality between the harm suffered and freedom of expression. Hence the importance of the parallel strategy: drowning illegal content under a volume of authentic, recent reviews — the purpose of our review collection service.

The evidence protocol before any action

No legal action survives without frozen evidence. The order of steps is critical:

1. Freeze before you report. As soon as the author senses you've spotted the maneuver, they can edit or delete their reviews. Capture every review with timestamps, every profile, every message.

2. The bailiff's report (constat par commissaire de justice). This is the gold standard in France: it crystallizes the exact state of the page at a given moment (content, chronology, apparent identity of profiles) and holds up in court. A screenshot shows an appearance; a bailiff's report documents a state.

3. Check the statute of limitations. Defamation: 3 months from publication (not from discovery — and changing the page holder's name doesn't constitute a new publication, as the Rennes Court of Appeal recalled in 2026). Civil disparagement: 5 years. A solid but time-barred file is a dead file.

4. Qualify before you act. Protected opinion, defamation, disparagement, blackmail: each qualification commands a different legal route, court, and calendar. A wrong qualification = a case lost before it starts.

5. Document the harm. Correlated revenue drop, remediation costs, identifiable lost customers: this is what turns a victory in principle into real compensation.

FAQ - Online reviews and French law

Pierre MADI

Founder & Online Reputation Expert, Saphek

Pierre MADI is the founder of Saphek, an online reputation agency for SMBs. For over 5 years, he has helped hundreds of businesses turn customer reviews into a growth engine.

Discuss my situation with Pierre