France is finally strengthening its arsenal in the face of cyberattacks
The text aims to strengthen the digital security of French organizations and to transpose the European NIS2 directive.
Quick Look
- The “resilience” bill arrives at the National Assembly to strengthen cybersecurity in France.
- This text, which transposes the European directive NIS2, targets 15,000 organizations and puts an end to a legislative delay exposing the country to European sanctions.
AI-generated summary
Why It Matters
France is behind in the transposition of the 2022 European directives on digital security, in particular NIS2. The bill was introduced in October 2024 and blocked for two years.
“It’s a text of general mobilization,” assures MP Éric Bothorel. As the number of computer attacks against businesses and administrations continues to increase, the so-called “resilience” bill, of which he is rapporteur, is being examined from Monday in the National Assembly. The culmination of an endless wait. Designed to raise the level of cybersecurity of French organizations, the text, tabled in October 2024 by the Barnier government, remained blocked for two years, despite adoption at first reading in the Senate at the beginning of 2025.
France is one of the very last European states not to have transposed several Brussels directives dating from 2022 related to digital security, including the highly anticipated NIS2. The delay is such that Paris is subject to a potential sanction from the Court of Justice of the European Union for failure to transpose.
Fifteen thousand organizations concerned.
“Good news, finally! », applauds lawyer Garance Mathias, administrator…
What to Watch
AI outlook — possibilities, not facts
Examination of the bill in the National Assembly
Very likely · Within days
Open Questions
- What will be the precise terms of application for the 15,000 organizations?
