<ul><li><a href=https://www.legifrance.gouv.fr/jorf/article_jo/JORFARTI000036644801 target=_blank>Law on measures of network and IT system security(LOI n° 2018-133 du 26 février 2018 portant diverses dispositions d'adaptation au droit de l'Union européenne dans le domaine de la sécurité, JORF du 27 février 2018,  Article 11)</a></li><li><a href=https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016L1148&from=EN target=_blank>DIRECTIVE (EU) 2016/1148(DIRECTIVE (EU) 2016/1148 of 6 July 2016concerning measures for a high common level of security of network and information systemsacross the Union, Article 18)</a></li><li><a href=http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 target=_blank>Regulation (EU) 2016/679 (General Data Protection Regulation)(Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, OJ L 119, 27 April 2016, in force 25 May 2018, Article 27)</a></li></ul>