The director general of ANSSI, Vincent Strubel, confirmed at the Hexatrust summer university that no sanctions for non-compliance with NIS 2 would be applied within three years after its transposition into French law. The ANSSI consulted extensively to build its transposition law, gathering over 70 organizations from both public and private sectors. Despite the upcoming deadline for the NIS 2 transposition law on October 17, ANSSI is not rushing into sanctioning companies
The lenient approach is reflected in the creation of the PortailNIS2 website aimed at helping businesses and administrations prepare for NIS 2. The rapporteur of the National Assembly working group on NIS 2, Anne Le Henanff, reassures about France's deployment timeline compared to other European countries. Only Belgium, Croatia, and Hungary have transposed NIS 2 so far, while Denmark plans to do so in 2025. The relaxed enforcement strategy is evident in the discussions at Hexatrust and the supportive role played by various professional associations. Despite the approach allowing a grace period, the emphasis remains on ensuring cyber compliance and readiness for the eventual application of NIS 2 regulations. https://www.silicon.fr/Thematique/cybersecurite-1371/Breves/nIS-2-pas-de-sanctions-prevues-avant-trois-ans-confirme-463589.htm