France – Three decrees reinforced the safety obligations of Operators of Vital Importance A year and a half following the promulgation of the French Military Programming Act (Act n°2013- 1168 of 18 December 2013), three implementation decrees dated 27 March 2015 have been issued which specify the actions and powers vested in the National Agency on Safety of Information Systems ("ANSSI") regarding digital safety of Operators of Vital Importance ("OVI"). An OVI is defined as an economic operator having a crucial importance in the functioning of the Nation. To date, approximately 200 operators have been designated as such by the French State. The list of OVIs cannot be disclosed since it is covered by the “defense secrecy”. However, twelve sectors of vital importance have been clearly defined : - State sectors : civil activities of the State, military activities, judiciary activities, space and research; - Public protection sectors : health, water resource management, food supply ; - Economic and social life sectors : energy, communications, electronic, audiovisual and information, transportation, finance and industry. The new decrees have the following three objectives: ● Prevention: Decree n° 2015-351 relates to the safety of OVI information systems. ● Detection: Decree n°2015-350 relates to the qualification of "safety products" and "trust service providers". ● Control : Decree n°2015-349 relates to the empowerment of ANSSI agents. For more information, please contact Denise Lebeau-Marianna or Elodie Roger.