France's March 15–22, 2026 municipal elections offered the first comprehensive stress-test of the country's layered election-integrity infrastructure. VIGINUM — the government's foreign digital interference watchdog — detected four distinct foreign interference operations. France's newly created RCPE (Réseau de coordination et de protection des élections, the national election protection network) was deployed for the first time. The results were instructive: three major platform operators cooperated and collectively removed nearly 200 inauthentic accounts and pages; one did not. The outlier was X.
The Threat Was Real
Before dismissing France's regulatory architecture as overcautious, it is worth sitting with what VIGINUM actually documented. The "Rokh Solis" technical report described a new AI-assisted content generation operation targeted at La France Insoumise (LFI) and specific candidates — an operational evolution in disinformation tradecraft. A second operation was linked to Storm-1516, a network attributed to Russia's GRU Unit 29155 that has run 205 separate informational operations since August 2023, using the CopyCop infrastructure. A third involved over a hundred fake .fr domain names imitating local French press sites, with content reformulated by generative AI tools; Afnic, France's national domain registry, suspended most of these domains after identity verification procedures.
The scale of public exposure to misinformation is not contested. ARCOM's survey published in March 2026 found that 97% of French adults report encountering false information and 80% believe fighting misinformation is essential. These are not conditions in which regulators can be blamed for taking the problem seriously.
A Framework Built in Layers
France's legal architecture for election misinformation is now three layers deep. The foundational layer is the Law of December 22, 2018 (the loi anti-fake news), which created an emergency judicial procedure allowing courts to order removal of content during election campaigns that constitutes "inaccurate or misleading allegations or statements likely to affect the sincerity of the vote" disseminated "on a massive scale in a deliberate, artificial or automated manner." It also imposed cooperation and transparency obligations on major platforms under Article 33-1-1 of the 1986 Freedom of Communication Act.
The second layer is the SREN Law (Loi n° 2024-449, May 21, 2024), which reinforced ARCOM's enforcement powers — including authority to order search engines to halt the broadcast of foreign propaganda channels within 72 hours — and criminalised the production and distribution of non-consensual deepfakes. The third layer is the EU's Digital Services Act, for which ARCOM serves as France's designated Digital Services Coordinator. Under DSA Article 39, major platforms must maintain accessible political advertising repositories; under Article 40, they must provide researchers with meaningful data access.
The Compliance Split
What distinguished the 2026 municipal elections from prior cycles was the formal coordination mechanism. Under the RCPE, platforms were invited to cooperate with ARCOM, VIGINUM, and electoral authorities to identify and remove inauthentic content. Google, Meta, and Microsoft collectively disabled nearly 200 inauthentic pages, accounts, and websites. X declined to participate.
This was not X's first DSA confrontation with French authorities. On December 5, 2025, the European Commission issued its first DSA fine against X: €120 million, for three violations — deceptive design of blue verification checkmarks that misled users about account authenticity, an advertising repository that lacked required transparency on content and financing, and barriers that prevented eligible researchers from accessing public platform data. ARCOM president Martin Ajdari described the fine as "a determined signal" that DSA compliance "is not an option but an obligation."
Yet the €120 million fine did not change X's posture toward France's election protection network three months later.
Where the Framework Falls Short
Two distinct weaknesses deserve acknowledgement. The first is timing. The DSA's enforcement machinery — investigation, decision, appeal — operates on timescales of years, not weeks. An election window is 10 days. ARCOM has stated explicitly that it lacks authority to impose specific measures on individual platforms within that window. The 2018 law's emergency judicial procedure theoretically fills this gap, but courts have been reluctant to order pre-election content removal, partly because the "sincerity of the vote" standard is genuinely difficult to apply to specific posts without chilling legitimate political speech.
The second is the voluntarism problem. The RCPE coordination mechanism that VIGINUM and ARCOM activated in 2026 is fundamentally based on platform cooperation. When a platform declines to engage — as X demonstrably did — the framework has no short-term remedy. The DSA provides a long-term remedy in the form of proportionate fines, and in extremis temporary access restrictions, but neither is usable within a live campaign window.
ARCOM's 2026 report on information manipulation, which examined ten platforms including Facebook, YouTube, TikTok, Snapchat, and Wikipedia, concluded with four structural recommendations: better operationalization of DSA data-access provisions for researchers, sustainable funding for fact-checkers, creation of a national misinformation observatory, and expanded media literacy programmes. These are the right long-run investments. They do not solve the 2027 presidential election window.
The Road to 2027
France's 2026 stress-test produced a reasonably honest result: the institutional infrastructure is real, the threat is real, and the compliance split is also real. Removing nearly 200 inauthentic accounts in coordination with major platforms is not nothing. VIGINUM's public attribution of Storm-1516 and the Rokh Solis operation contributes meaningfully to democratic transparency. And Afnic's suspension of over 100 fake local-news domains demonstrates that non-platform actors can be effective enforcement partners when legal frameworks are clear.
The remaining gap is the one that matters most heading into 2027: what France and the EU can do, within a compressed election window, when a major platform declines to participate. The €120 million Commission fine signals escalating willingness to act. Whether that escalation produces faster-moving enforcement tools before the first round of presidential voting in April 2027 is the question ARCOM's 2026–2028 strategic plan implicitly acknowledges — but does not yet answer.