Monaco's 2027 Digital Deadlines

Most Monaco businesses are setting their 2027 budgets this autumn. The most useful thing you can put next to that spreadsheet is a calendar, because 2027 is unusually crowded. Four of the dates that matter most fall in the last four months of the year: structured e-invoicing for small firms on 1 September, the last paid Windows 10 extension year in October, the EU Cyber Resilience Act on 11 December and, three days later, the end of the transition period for impact assessments under Monaco's data protection law.

None of these is a surprise. All of them get expensive if they arrive at the same time as your busiest season. Here is the year in order, with what each date means for an ordinary Monaco company, and where the work and the money should go.

January to March: housekeeping that saves money

12 January 2027 — cloud switching fees end in the EU. Under the EU Data Act, cloud and SaaS providers serving EU customers may no longer charge for switching to another provider or moving your data out. Monaco is not an EU member state, so check how your own contracts are written, but most of the tools Monaco firms rely on are sold under EU terms. If you have been putting off leaving an expensive hosting plan, CRM or file platform because of exit costs, early 2027 is a sensible moment to look again.

15 March 2027 — SSL certificates shrink to 100 days. The maximum lifetime of the certificates that put the padlock on your website drops from 200 to 100 days, under rules set by the browser makers and certificate authorities. Renewals done by hand become a monthly risk. If your site, booking engine or client portal does not renew automatically, fix it in the first quarter. It takes an afternoon, not a project, and a lapsed certificate shows visitors a security warning instead of your homepage.

If you sell batteries or products containing them into the EU, note 18 February 2027 as well: battery passports become mandatory for certain categories. For most service businesses it is not relevant.

September: e-invoicing reaches small firms

1 September 2027 is the date that will touch the largest number of Monaco companies. Because the Principality applies the French VAT system, the French e-invoicing timetable applies here too. Since 1 September 2026, every VAT-registered business has had to be able to receive structured electronic invoices. From September 2027, small and micro-enterprises must also issue them, through an approved platform.

The work is not technical so much as organisational: choosing a platform, cleaning customer data, and making sure your website, online shop or booking system passes clean data to your invoicing tool. If your e-commerce site generates orders that someone re-types into accounting software, that manual step is what September 2027 will expose. Confirm the details of your own situation with your accountant, and do not leave the platform choice until the summer, when every other small firm will be doing the same.

October to December: the year-end pile-up

Mid-October 2027 — Windows 10 runs out of road. Consumer Extended Security Updates end on 12 October 2027. For organisations, the third and final paid year of updates starts at roughly four times the first-year price per device, according to Microsoft's published terms. Any office or reception PC still on Windows 10 in 2027 should be in your hardware budget now, not in October.

11 December 2027 — the Cyber Resilience Act fully applies. This EU regulation covers products with digital elements sold on the EU market: apps, connected devices, software. If your company makes or sells such products to EU customers, secure-by-design requirements, documentation and CE marking apply from this date. If you only use software, ask your suppliers how they will comply rather than assuming they will.

14 December 2027 — Monaco's data protection transition ends. Law No. 1.565 of 3 December 2024, supervised by the APDP, gave businesses three years to carry out impact assessments for high-risk processing and to reassess risks on existing processing. Website tracking, CRM profiling, AI tools fed with client data and video surveillance are typical candidates. An assessment often reveals something to fix, such as a retention period that is too long or a tool with weak safeguards, so plan the fix as well as the paperwork. Our data protection compliance work starts with exactly this mapping.

Funding: assume less help, apply earlier

Monaco's draft 2027 budget, now before the National Council, reduces the credits allocated to the Fonds Bleu by €2.6 million compared with 2026. It is a draft and the figures can change before the vote, but the direction is clear: the scheme that co-finances many digital projects in the Principality will probably be more competitive next year.

Two practical consequences follow. First, if a project is ready, file early in the year rather than late. Second, connect your projects to the deadlines above: a website rebuild that also fixes your data flows and automates invoicing makes a stronger case than a cosmetic redesign. We explain how eligible projects are put together on our Fonds Bleu page.

How to turn the calendar into a budget

1. Write the dates into your 2027 plan now, each with an owner. A deadline with no name next to it gets handled in December.
2. Move work forward. Book certificate automation and cloud contract reviews for Q1, e-invoicing for Q2, and impact assessments for the summer, so the last quarter stays free for sales.
3. Bundle projects. One digital strategy review can cover website, data, invoicing and hardware together, rather than four separate suppliers solving four problems.
4. Get professional confirmation on anything legal, tax-related or contractual. Several of these rules are EU texts that reach Monaco indirectly, and how they apply to your company depends on what you sell and to whom.

A crowded 2027 is only a problem for the businesses that discover it in September.

If you want help turning these dates into a realistic 2027 roadmap and budget, get in touch.