DORA Compliance in Paris
Paris is the Eurozone's second-largest financial centre, home to five of the world's 30 globally systemically important banks (G-SIBs): BNP Paribas, Crédit Agricole, Société Générale, Groupe BPCE, and Crédit Mutuel. La Défense — Europe's largest purpose-built business district — houses the headquarters of most major French financial institutions. Euronext Paris is the continent's largest stock exchange by market capitalisation. As France's primary financial supervisory hub, Paris institutions face dual oversight from ACPR (Autorité de contrôle prudentiel et de résolution) and AMF (Autorité des marchés financiers), on top of ECB supervision for the largest groups.
Request a demoWhy DORA matters in Paris
The Digital Operational Resilience Act (DORA) requires financial entities to implement comprehensive ICT risk management frameworks, including incident reporting, resilience testing, and third-party oversight. Mandatory since January 17, 2025, it applies to over 22,000 financial entities across the EU.
With five G-SIBs headquartered in Paris and directly supervised by the ECB, the stakes of DORA non-compliance are enormous — fines from ACPR can reach 10% of annual turnover. BNP Paribas, processing billions of transactions daily across 65 countries, must demonstrate ICT resilience under DORA Art. 6-16. Société Générale's high-profile IT incidents (including the 2008 Kerviel affair) underscore how critical robust ICT governance is. France's AMF has been one of the most active securities regulators in Europe; combined with ACPR's banking supervision, Paris-based institutions operate under some of the strictest oversight in the EU. The Paris FinTech Forum draws 3,000+ attendees annually, reflecting a thriving ecosystem where compliance automation is rapidly becoming a competitive requirement.
Supervisory Bodies
ACPR, AMF, ECB (SSM)
Key Industries
- Universal Banking & G-SIBs
- Asset Management & Insurance
- Capital Markets & Euronext
- FinTech & PayTech