The updated draft SecNumCloud reference framework (version 3.2.a) plays an important role in supporting robust and harmonized cybersecurity standards across industry, and implementing France’s new Cloud Strategy. However, it contains new requirements related to localization requirements and immunity to extraterritorial legislation that raise significant concerns for the cloud industry.