NIS 2 — France
NIS 2 IN FRANCE
Loi n° 2025-1024 relative à la résilience des activités d'importance vitale (loi REIV) — titre NIS 2 — the national act transposing Directive (EU) 2022/2555 in France. Supervised by Agence nationale de la sécurité des systèmes d'information (ANSSI).
TRANSPOSED — IN FORCE
Key facts
In force
30 October 2025
National law
Primary supervisor
Max fine — essential entities
Up to EUR 10 million or 2% of global annual turnover, whichever is higher
Max fine — important entities
Up to EUR 7 million or 1.4% of global annual turnover, whichever is higher
Registration deadline
Entités essentielles and entités importantes must register on ANSSI's MonEspaceNIS2 portal; deadline aligned to entry into force.
Scope and national nuance
France folded NIS 2 transposition into a broader resilience law (REIV) covering both critical infrastructure protection and cybersecurity. ANSSI keeps the central coordinating role and operates the MonEspaceNIS2 portal for registration and reporting.
Sector supervisors
| Sector | Authority | Acronym |
|---|---|---|
| Banking and financial market infrastructure | Autorité de contrôle prudentiel et de résolution | ACPR |
| Health | Agence du Numérique en Santé | ANS |
| Electronic communications | Autorité de régulation des communications électroniques | ARCEP |
What is specific to France
- NIS 2 was transposed inside the broader résilience des activités d'importance vitale law, which co-regulates critical-infrastructure protection (OIV regime) and cyber resilience — entities may sit under both regimes simultaneously.
- ANSSI operates MonEspaceNIS2 as the central registration and incident-reporting portal; sector regulators (ACPR for banking, ANS for health, ARCEP for telecom) coordinate via ANSSI.
- The act preserves France's pre-existing OIV (opérateurs d'importance vitale) classification, which carries heavier obligations than the directive's essential-entity tier — a France-only super-class.
- Reporting is in French through MonEspaceNIS2; English-language documentation is published in parallel but the official obligation is in French.
DSI Advisory — NIS 2 Programme
Move from reading the law to evidencing compliance
Start with the free NIS 2 Scorecard to score your organisation across the twelve Article 21 security domains and receive a paragraph-cited PDF report. Then book a structured NIS 2 scope and gap assessment tailored to ANSSI’s supervisory expectations.