Situation — Demanding clients and regulations

GDPR, NIS2, DORA… I don't know what applies to my company, or where to start.

Context

Every month, a new acronym: GDPR, NIS2, DORA, the AI Act. Your accountant talks about them, so do your clients, and your insurer asks questions.

You don't know which ones concern you. Or where to start.

The problem

  • The rules also hit small businesses: cameras, cookies, access requests from your clients, data security.
  • The rules keep changing: what was planned yesterday is postponed today.
  • Knowing what does not apply to you saves you a wasted investment.

Case study

Real-life case2025

Small businesses fined by the CNIL, France

In 2025, the CNIL (French data protection authority) fined many small businesses through a simplified procedure. Amounts most often range from 2,000 to 20,000 euros. Failing to cooperate with the CNIL is also penalised in its own right.

Published examples: a sporting goods shop, 20,000 euros (video surveillance and security); a road haulier, eight thousand euros (geolocation); a payroll software publisher, 15,000 euros (security); a management consultancy, 6,000 euros (video surveillance).

As for NIS2, more than 15,000 entities are covered in France. As of 6 October 2026, the law transposing it was still awaiting the National Assembly, with no date set (Leto (opens in a new tab)). The European Commission referred France to the Court of Justice of the EU on 8 July 2026 (IT-Connect (opens in a new tab)).

Read the sourcePenalties imposed by the CNIL — CNIL (opens in a new tab)

Why us?

  • We tell you which rules apply to your company, based on your sector and activity, and which do not.
  • We rank the gaps by priority: you know where to start.
  • We take into account rules that are still being adopted, so you are not caught off guard.
  • Free 30-minute video call, with no commitment, in French or English, then a quote.

Contact us

Talk to an expert

A free 30-minute video call with one of our experts, then your free quote, with no commitment.

Take the diagnostic

A few questions, the first already answered for your situation: your answers help us prepare the video call. Free, no sign-up, about 2 minutes.

Take the diagnostic