French NATIONAL DIGITAL SECURITY STRATEGY — objective 2 STAKES A lthough in general the French trust in digital technology, they are wary of its impact on their daily lives and especially their personal lives. But despite being generally careful in the use and preservation of their personal data, they entrust them to platforms for which the conditions of use are one-sided to users’ detriment. The technique noted during certain cyberattacks against businesses or administrations also shows a real difficulty separating private and professional life when using equipment and services. The objective of cyberattacks against individuals is usually financial gain. By taking control of the personal equipment used (computers, tablets, smartphones), usurping identity and stealing users’ banking or commercial website credentials, starting a friendly virtual relationship that ends with a request for a money transfer, or encoding data without the user’s knowledge resulting in the payment of a ransom, racketeering is today widely practised by a criminal element that has become organised and increasingly efficient. While no special technique of attack is used, harassment, which is facilitated and amplified by electronic communication networks, is a digital aggression against people with results that are sometimes tragic. Although the National Cybersecurity Agency (ANSSI) is the identified State contact in case of serious cybersecurity incidents that affect the administrations and operators of vital importance, there is far less clarity regarding the public offer for assistance to victims of cybermalevolence for the other stakeholders, whether it concerns intermediate-sized enterprises, small and medium-sized enterprises, liberal professions, territorial authorities or individuals. Victims of cybermalevolent acts are encouraged to file a complaint with the police or gendarmerie services which have adapted to the treatment of such disputes. Nevertheless, the response with 20 which they are provided in this framework is focused on the identification of those suspected of the cybermalevolent acts and on the commitment, if applicable, to filing proceedings against these suspects. Victims must be able to reach a service that is competent in the treatment of the cybersecurity incidents as these incidents are often the source of the cybermalevolent acts. Digital platforms, including social networks, can shape opinion more insidiously and are often vectors of values that are not those of the French Republic. In certain cases, they can be used for purposes of disinformation and spreading propaganda to French citizens, in particular the youngest ones. The opinions that are disseminated are therefore against France’s fundamental interests and are an attack on defence and national security which is sanctioned by law. Another area of concern is the recent and simultaneous developments of new uses and new data storage and processing techniques which contribute to the emergence of risks of economic imbalance and attacks on individual and national security. For example, the desire to introduce the free flow of data, including personal data collected by connected objects, through commercial treaties, does not successfully mask the intent to appropriate these data by oligopolies whose values and practices do not correspond with the French or European concept of privacy or with its legal framework. Massive and illicit appropriation of certain types of personal data, for example, health-related data, can actually affect individual and collective security, or simply result in abusive commercial exploitation (resale to insu- « Digital platforms, including social networks, can shape opinion more insidiously and are often vectors of values that are not those of the French Republic. »