These potential new obligations would apply to large-scale (i) platforms as defined by Article L111-7 of the French Consumer Code (i.e., marketplaces and referencing platforms), (ii) messaging services providers and (iii) videoconferencing services providers, i.e., operators whose activity exceeds specific thresholds which will be defined by decree. The new rules could apply to a wide range of operators and would most likely apply to those located outside of France but that target their services toward French consumers. Indeed, there is no specific territorial application provision in the current version of the bill, and these new obligations would be included in a section of the French Consumer Code that applies to precontractual information obligations—those rules being applicable regardless of the country where the operator is located, provided it directs its products or services toward French consumers.
In its current version, the text is broadly drafted and refers to a decree that will define the threshold of number of visitors that will trigger the applicability of these new obligations to operators and determine the criteria that will be taken into account to calculate the Cyberscore.
If finally adopted, the Cyberscore would have to be easily legible and understandable by the average user. For instance, it could be presented as follows (this an example posted on Twitter by the senator who proposed the law):
The Cyberscore is scheduled to come into effect on 1 October 2023. However, the legislative process is still ongoing, and, therefore, the text can still be amended or complemented before its enactment and provide additional information on its territorial scope.