Which technologies have truly changed status in 2024, and which remain at the promise stage? The year has been marked by the implementation of European regulatory frameworks that transform how companies design, deploy, and secure their digital tools.
Rather than listing spectacular innovations, this article measures the concrete impact of three structural axes: the regulation of artificial intelligence, cybersecurity as a governance issue, and the material constraints that redefine the product life cycle in tech.
AI Act and NIS2 Directive: two regulations reshaping the European tech landscape
| Criterion | AI Act | NIS2 Directive |
|---|---|---|
| Adoption / Entry into force date | Adopted on June 13, 2024, in force on August 1, 2024 | National transposition by October 17, 2024 |
| Approach | Classification by risk level (prohibited, high risk, limited) | Expansion of the scope of concerned organizations |
| Initial obligations | Prohibition of certain practices and control of AI starting February 2, 2025 | Risk management, supply chain security, incident notification |
| Main target | Providers and deployers of AI systems | Critical sectors (energy, transport, health, digital) |
| Accountability | Mandatory transparency for chatbots and synthetic content | Increased accountability for executives |
These two texts share a common point: they shift the technical constraint towards governance. A company deploying an artificial intelligence tool can no longer be satisfied with algorithmic performance. It must document the risk level, ensure system transparency, and anticipate the obligations that will come into effect starting February 2025.
The gap between these two frameworks is also revealing. The AI Act targets the technologies themselves, whereas NIS2 aims at organizations as a whole. For structures that use sensitive data and digital services, simultaneous compliance with these two texts becomes a priority project.
Teams monitoring these regulatory developments and their concrete implications for the tech sector gather on specialized platforms like techmeup.fr, where the latest trends in technology are analyzed in real-time.
Generative artificial intelligence: from experimentation to industrial framing
Generative AI dominated tech conversations in 2023. In 2024, the topic shifted from fascination to structuring. Companies are no longer asking “what can generative AI do?” but “how can it be deployed without legal risks or operational drift?”.
The AI Act imposes transparency rules for chatbots and synthetic content. Any user interacting with an AI system must be informed. Generated content (text, image, audio) must be identifiable as such. This obligation changes the game for automated customer services, content creation tools, and voice assistants.
Classified risks, graduated obligations
The European framework distinguishes several levels. Some practices are purely prohibited: social scoring, subliminal manipulation, exploitation of vulnerabilities. High-risk systems (automated recruitment, credit scoring, assisted medical diagnosis) must meet enhanced documentary and technical requirements.
- Limited-risk systems (chatbots, text generators) are subject to transparency obligations, not prohibitions
- High-risk systems require a compliance assessment before market launch, with complete technical documentation
- Prohibited practices include behavioral manipulation and mass biometric surveillance in public spaces
The risk classification determines the level of investment in compliance. For an SME integrating a chatbot on its site, the effort remains manageable. For a recruitment software publisher, the cost of compliance represents a significant budget item.
Cybersecurity and governance: what NIS2 changes for the digital sector
The NIS2 directive significantly expands the number of organizations subject to cybersecurity obligations. The sectors concerned are no longer limited to traditional critical infrastructures. Digital, waste management, food industry, or postal services are now included in the scope.
The most notable change concerns the direct responsibility of executives in managing cyber risks. IT security is no longer delegated solely to the technical department. Boards of directors must validate security policies, and failures may engage the personal liability of decision-makers.
Supply chain under surveillance
NIS2 introduces an obligation to secure the digital supply chain. A cloud provider, a business software publisher, or an API supplier becomes a link whose failure can engage the liability of the client company.
This requirement pushes clients to audit their tech suppliers and integrate security clauses into their contracts. Conversely, digital providers that anticipate these expectations gain a measurable competitive advantage in tenders.
Right to repair and sustainability: the material constraint weighing on innovation
The right to repair is emerging as a structural constraint for tech product manufacturers. Recent European regulations require manufacturers to make spare parts available, facilitate disassembly, and extend the lifespan of devices.
This trend directly affects product design. A smartphone or laptop designed to be repairable involves different engineering choices: modular components, replaceable batteries, accessible technical documentation.
- Manufacturers must provide spare parts for a minimum duration after the end of marketing
- The reparability index, already in force in France, influences purchasing decisions of consumers and businesses
- Refurbishment services gain legitimacy against new products, supported by a more favorable legal framework
Sustainability is no longer a marketing argument but a regulatory obligation. Tech companies that integrate this constraint from the design phase reduce their exposure to future regulatory developments and respond to a growing demand in the French and European markets.
The common thread of 2024 is not a single technology but a fundamental movement: regulatory frameworks are catching up with innovation. The AI Act, NIS2, and the right to repair outline an environment where compliance becomes a competitiveness criterion as crucial as technical performance itself.
