1. Home
  2. Knowledge Center
  3. Cyber A to Z
  4. Chapter 16
Law and governanceChapter 16

Cyber law in France and Europe

GDPR, NIS2, DORA, the Cyber Resilience Act and the AI Act: who is covered, what to do, which deadlines and penalties apply, as of 2 October 2026.

Belinda
Presented byBelinda
12 min readUpdated on 7 October 2026

What you will learn

  • Identify which laws apply to your organisation: GDPR, NIS2, DORA, the Cyber Resilience Act, the AI Act
  • Know the notification deadlines: 72 hours for the CNIL; 24 hours, 72 hours and one month under NIS2
  • Understand where France stands on transposing NIS2 as of 7 October 2026
  • Gauge the penalties at stake and the accountability of senior management
  • Know where to start if you run a small or mid-sized business

Free chapter with your account

Chapter 1 is free to read. Chapters 2 to 21, like the Junior, Senior and Expert levels of the Cyber Quiz, are free too: all you need is a free KrakenShield account with a confirmed email address.

Checking your access…

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Create your account Audit my domains See capabilities
Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.