AI Regulation in France
France has 5 tracked AI regulatory updates across 1 frameworks. This page provides an overview of the current regulatory landscape, upcoming deadlines, and recent enforcement activity.
Recent Regulatory Updates
CNIL guidance on legitimate interests for AI development
CNIL’s 2026 legitimate-interests guidance makes balancing tests, risk mitigation, and documentation mandatory building blocks for AI development decisions that rely on Article 6(1)(f) GDPR.
CNIL guidance on when AI models fall within GDPR scope
CNIL’s January 2026 guidance clarifies that AI models can themselves fall within GDPR scope when they store personal data from training or enable reasonably likely extraction, so model-governance evidence is now essential.
CNIL finalizes recommendations on AI system development
CNIL finalized AI development recommendations and announced further work on roles and responsibilities, so governance mappings should be refreshed even though no new legal deadline was set.
CNIL guidance on whether an AI model is subject to the GDPR
CNIL’s January 2026 guidance gives providers a method to determine when an AI model falls under GDPR, making model-scoping and memorization analysis an immediate compliance task.
CNIL guidance on AI system development under GDPR
CNIL published detailed AI-development guidance that operationalizes GDPR obligations for training data, model status analysis, rights handling, and security, so AI teams should update controls now rather than waiting for enforcement.
Applicable Frameworks
Key Topics
Weekly digest — coming soon
Leave your email to get the first issue when it ships. Free, no account required.
We use your email only for the digest. Privacy policy