One thing is clear: France’s investment in compliance is paying dividends. A decade of regulatory change, combined with sustained focus on governance, ethics and risk management, has helped French organizations achieve a high level of compliance maturity. Compared with global peers, they report fewer regulatory actions, fewer ethics-related incidents and stronger overall compliance performance.
But the findings also point to a new reality. The challenge is no longer building compliance frameworks, but ensuring they consistently influence decisions, behaviors and culture across the organization. Organizations that continue to experience compliance issues often have robust governance structures in place, yet struggle to translate them into consistent action across the business.
This report is designed to help compliance leaders, executives and boards understand where France stands today, identify emerging opportunities and risks, and benchmark their organizations against both French and global peers as they navigate the next phase of compliance maturity.
When compliance is tested by real-world business pressures
French organizations demonstrate strong compliance foundations, with 30% of respondents classifying their programs at the highest maturity level, compared with a global average of 25%. This reflects significant investment in governance, oversight and formal compliance infrastructure.
Yet the findings suggest that compliance effectiveness is increasingly determined by behavior rather than structure. While many respondents say senior leaders promote ethics and compliance, far fewer believe that commitment holds when business objectives compete. The gap is even more pronounced among first-line managers, highlighting the challenge of translating ethical expectations into consistent day-to-day decision-making.
What separates the most effective compliance programs?
French organizations report fewer compliance issues in the past two years than their global peers and are more likely to report no compliance issues at all. Yet the findings suggest that stronger compliance outcomes are closely linked to leadership engagement and governance.
Board oversight emerges as a key differentiator: nearly half (46%) of organizations reporting no compliance issues say their board provides strategic oversight of the compliance program, compared with just 19% of organizations reporting two or more compliance issues. The data reveal a clear pattern: organizations with the strongest compliance outcomes are more likely to treat compliance as a strategic business priority rather than a standalone control function.
The critical role managers play in organizational culture
Managers are at the heart of France’s speak-up culture, serving as the primary channel through which employees raise concerns. While this can encourage more personal conversations, it also makes speak-up culture heavily dependent on managerial capability and trust.
The findings reveal a clear vulnerability: fear of retaliation remains one of the biggest barriers to reporting concerns. Among organizations reporting two or more compliance issues in the previous two years, 86% cite real or perceived retaliation as a challenge, compared with 39% of organizations reporting no issues. The message is clear: when employees do not feel safe speaking up, compliance risks are more likely to go unseen until they escalate.
Navigating a more demanding regulatory environment
Regulatory change is now the top compliance challenge for French organizations. The issue is not only the pace of new rules, but the strain of turning overlapping EU and national requirements into consistent business practices, especially in areas such as ESG and AI governance.
That pressure falls hardest on organizations already facing compliance issues: 52% of respondents from organizations with two or more issues cite internal confusion or compliance fatigue caused by overlapping rules, compared with just 15% of those reporting no issues. The result is a widening gap between organizations that can adapt to regulatory change and those overwhelmed by its operational demands.
Building trust in the age of AI
French organizations are embracing AI in compliance, particularly in areas such as training, where adoption exceeds global averages. But the findings suggest that technology alone does not solve compliance challenges. In fact, the most aggressive adopters are often the organizations facing the greatest difficulties. The contrast is especially striking in speak-up systems, where organizations reporting two or more compliance issues are three times more likely to use AI in hotlines and reporting channels than those reporting no issues (31% vs. 10%).
As AI governance requirements continue to evolve, the challenge will be ensuring technology strengthens trust, transparency and accountability rather than replacing the human foundations that make compliance programs effective.
Overall, French organizations appear broadly aligned with global sentiment around AI. Over half of respondents expect moderate positive improvement or significant positive transformation impact as a result of AI.
Final thoughts
Get the reportFrance’s compliance landscape remains strong. Years of investment in governance, ethics, compliance training and risk management have helped organizations build mature compliance programs and achieve favorable outcomes compared with many global peers.
Yet the findings suggest France is entering a new phase of compliance maturity. The challenge is no longer implementing frameworks and controls, but ensuring they consistently influence decisions, behaviors and culture across the organization. As regulatory demands expand and technologies such as AI reshape the risk landscape, organizations must translate compliance expectations into everyday business practice.
The strongest organizations will be those that align leadership behavior with company values, reinforce accountability at every level and maintain employee trust in reporting systems. In these organizations, compliance is not a standalone function but an integral part of decision-making, helping build resilience, strengthen culture and reduce risk before issues escalate.
Download the full State of Risk & Compliance in France to explore detailed findings, benchmarks and recommendations for strengthening your compliance program.