NIS2: the French Resilience bill is postponed again at the National Assembly

The bill transposing NIS2 (along with the CER directive and the directive accompanying DORA) was due for debate on 7 and 9 October. The Conference of Presidents removed it from the agenda on 6 October. No new date is set; the rapporteur hopes to reschedule it within two to three weeks. The Senate passed it at first reading on 12 March 2025.

What it means: NIS2 obligations do not yet legally apply in France. The EU transposition deadline (17 October 2024) has passed and the Commission has opened infringement proceedings. Entities in scope should prepare now: ANSSI plans a gradual ramp-up, but some obligations such as incident reporting are expected to apply soon after enactment.

Source: Next, 6 Oct 2026 (in French). Read on the Cyberbits regulatory watch · Book a free 30-min call