Cyber Attack in France: What to Do in the First Hours
Key points The first hours determine the evidence, compensation and compliance with legal time limits.Isolate the affected systems without reinstalling them: reinstalling destroys the evidence.For insured professionals, compensation for cyber losses requires a criminal complaint within 72 hours (Article L. 12-10-1 of the French Insurance Code).The CNIL must be notified without undue delay and, where […]
CEO Fraud in France (Fake Transfer Order): How to Respond and Obtain Redress
Key points CEO fraud (fraude au président) relies on impersonating a company director to obtain an urgent and confidential transfer.It constitutes fraud (escroquerie), punishable by 5 years’ imprisonment and a €375,000 fine, up to 10 years and €1,000,000 when committed by an organised gang (Articles 313-1 and 313-2 of the French Criminal Code).First steps: alert […]
Cyber Insurance Claim Denied in France? Cover, Exclusions and Remedies
Complaint within 72 hours, formal and limited exclusions, two-year limitation period: the legal framework of cyber insurance and the remedies when a claim is refused.
Should You Pay a Ransomware Ransom? What French Law Says
This article in brief No French provision prohibits, as such, paying a ransom after a ransomware attack.ANSSI (French national cybersecurity agency) and Cybermalveillance.gouv.fr (French government cyber-assistance platform) recommend not paying: there is no assurance of recovery, and payment finances crime.Paying becomes unlawful if the recipient is targeted by the European restrictive measures against cyberattacks (Regulation […]
DORA Regulation: Obligations, Incident Reporting Deadlines, ICT Contracts and Register
Mandatory clauses in ICT contracts, register of information submitted to the ACPR, major incidents, TLPT: what the DORA regulation actually requires of financial entities and their providers.
