Artificial Intelligence · France
AI regulation in France (2026)
France shaded by its artificial intelligence status
As an EU member state, France is governed by the EU AI Act, a comprehensive, risk-based AI law that is directly applicable and being phased in (prohibited practices since 2 Feb 2025, GPAI rules since 2 Aug 2025, high-risk Annex III rules from 2 Aug 2026). France is still completing national implementation: the DDADUE digital bill (validated by the Senate on 17 Feb 2026) designates the CNIL as reference authority plus a network of sectoral supervisors. The CNIL has also issued a substantial body of GDPR-based AI guidance, and France runs a well-funded national AI strategy under France 2030.
Key points
The EU AI Act is the primary, directly applicable framework. It entered into force in 2024 with phased application: bans on unacceptable-risk practices from 2 Feb 2025, general-purpose AI (GPAI) obligations from 2 Aug 2025, and high-risk (Annex III) rules from 2 Aug 2026.
France missed the 2 Aug 2025 deadline to formally designate competent authorities. The DDADUE digital bill, validated by the Senate on 17 Feb 2026, designates the CNIL as the reference (lead) authority and amends the 1978 Data Protection Act to give it AI Act powers.
About fifteen sectoral authorities share oversight by AI use case: DGCCRF (consumer protection), ARCOM (audiovisual/digital), ACPR (banking/insurance), AMF (financial markets), and ANSM/HAS (health), with DGCCRF and ARCOM enforcing the bans on manipulative/subliminal AI systems.
A shared pool of technical expertise drawing on ANSSI (cybersecurity agency) and PEReN (platform-regulation expertise centre) is planned to support the market-surveillance authorities in assessing AI system compliance.
The CNIL has issued extensive AI guidance under the GDPR: recommendations on informing data subjects and exercising rights (Feb 2025), legitimate interest as a legal basis for AI training (June 2025), and how-to sheets on data annotation, development security, and the GDPR status of AI models (July 2025), with further 2026 work planned on workplace and health AI.
France runs a national AI strategy launched in 2018, funded with ~EUR 2.5bn under France 2030; a third phase was launched after the 6 Feb 2025 interministerial committee, tied to the Paris AI Action Summit (10-11 Feb 2025) and a EUR 109bn private investment pledge focused on compute, the value chain, and training.
Timeline - major decisions & events
The Ministry of the Economy's Directorate-General for Enterprises (DGE) released a draft scheme designating ~17 national authorities (with CNIL, DGCCRF as single point of contact, and DGE on the European AI Board) to enforce the EU AI Act in France. It establishes how the country will supervise AI systems but still awaits parliamentary approval.
MIAI / ai-regulation.com ↗The CNIL published guidance on using the GDPR 'legitimate interest' legal basis to develop AI models and on collecting personal data via web scraping, clarifying how French/EU data-protection law applies to AI training.
CNIL ↗Hosted by France, the summit produced a joint declaration signed by 58 countries on inclusive, sustainable and trustworthy AI (notably not signed by the US and UK), positioning France as a convener of global AI governance.
Élysée ↗The CNIL released guidance on informing data subjects whose data trains AI models and on facilitating individuals' GDPR rights (access, erasure), giving practical compliance rules for AI developers in France.
CNIL ↗After public consultation, the CNIL finalised its first set of practical recommendations on building AI systems in compliance with the GDPR, establishing the French regulator's baseline guidance for lawful AI development.
CNIL ↗The French data-protection authority published a four-pillar action plan to regulate AI, especially generative AI and chatbots, and created a dedicated AI department, signalling proactive supervision ahead of the EU AI Act.
CNIL ↗The CNIL imposed its maximum fine on Clearview AI for unlawfully scraping facial images and processing biometric data without a legal basis, ordering deletion of French residents' data, a landmark French AI enforcement action.
CNIL ↗Following Cédric Villani's mission report, President Macron unveiled France's national AI strategy with €1.5bn in planned investment and an ethics-focused framework, laying the foundations of French AI policy.
European Commission AI Watch ↗Law No. 2016-1321 created a right for citizens to know the rules and main features of algorithms used by public administrations to make individual decisions, an early French legal foundation for algorithmic accountability.
Légifrance ↗France - other topics
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →