Question 17975 — businesses

Summary

Ms Pauline Cestrières questions the Minister of Action and Public Accounts on the guarantees provided to companies in the face of the risks linked to approved electronic invoicing platforms. Since September 1, 2026, companies must be able to receive their electronic invoices via an approved platform, before the gradual generalization of electronic issuance on September 1, 2027. While a public invoicing portal had initially been planned, the State ultimately chose to rely on approved private platforms. Companies, particularly VSEs and SMEs, must therefore pass through these operators sensitive commercial and financial data relating to their activity, their customers and their suppliers. By relying on private operators for the transmission and reception of invoices electronic, the State requires companies to depend on platforms whose security or operation they have no direct control over. In a context of increasing cyberattacks targeting companies and French administrations, it is clear that zero risk in terms of cybersecurity is illusory. While, in theory, approved platforms are subject to strict security requirements, the question of liability in the event of an incident remains, in practice, decisive. It therefore asks it to specify what guarantees are provided so that companies victims of a cyber attack or a failure of an approved platform can obtain compensation for their damage and that the continuity and restoration of the service are effectively ensured, without making them bear the consequences of an incident which they have, in fact, no control.

Machine translation from French. The official text remains authoritative.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

No documents linked.

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.