Cybersecurity · New Caledonia
Cybersecurity regulation in New Caledonia (2026)
New Caledonia shaded by its cybersecurity status
New Caledonia is a sui generis French collectivity, so its cybersecurity obligations are a mix of directly applicable French national rules and locally adopted measures rather than one comprehensive law. Today the in-force regime is sectoral: ANSSI/CERT-FR oversight, the French critical-infrastructure (OIV) regime, GDPR-based breach notification, and a territorial security reference framework (RGSNC) for public administrations. A comprehensive NIS2-transposing law is proposed and expected to extend to New Caledonia but is not yet in force.
Key points
France's national cybersecurity agency ANSSI, with CERT-FR, provides policy, incident response and oversight that extends to overseas territories including New Caledonia; ANSSI can carry out controls on regulated entities.
New Caledonia adopted its own Référentiel général de sécurité de la Nouvelle-Calédonie (RGSNC) under articles 12 ff. of deliberation No. 140/CP of 16 April 2021, setting information-system security rules for exchanges between users and administrations.
The 'Résilience des infrastructures critiques et cybersécurité' bill (transposing NIS2/CER/DORA) was adopted by the Senate in March 2025 and examined in the Assemblée nationale special committee in September 2025; Article 40 extends Title II to overseas territories including New Caledonia. It is not yet enacted (timeline pointing to 2026).
The Conseil d'État noted the bill broadly uses directive options, making the regime applicable to all overseas collectivities, including those to which the EU directive itself does not apply (New Caledonia among them).
Since 1 June 2019 the GDPR-aligned French data-protection law applies to overseas collectivities including New Caledonia, with the CNIL competent; this brings GDPR Article 33/34 personal-data breach notification duties (to CNIL and affected individuals).
The New Caledonian government, via its Direction du numérique et de la modernisation (DINUM), created a Security Operation Centre in June 2021 and a Pacific Cyber Centre to structure the local cybersecurity ecosystem.
New Caledonia - other topics
Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →