Artificial Intelligence · France
AI regulation in France: the EU AI Act (2026)
France shaded by its artificial intelligence status
AI in France: comprehensive law, anchored by EU Artificial Intelligence Act (Regulation (EU) 2024/1689), directly applicable in France, with national implementation via the DDADUE 'volet numérique' bill; CNIL designated as the lead reference authority alongside ~15 sectoral regulators..
As an EU member state, France is governed by the EU AI Act, a comprehensive, risk-based AI law that is directly applicable and being phased in (prohibited practices since 2 Feb 2025, GPAI rules since 2 Aug 2025, high-risk Annex III rules from 2 Aug 2026). France is still completing national implementation: the DDADUE digital bill (validated by the Senate on 17 Feb 2026) designates the CNIL as reference authority plus a network of sectoral supervisors. The CNIL has also issued a substantial body of GDPR-based AI guidance, and France runs a well-funded national AI strategy under France 2030.
The EU AI Act in France
In France, artificial intelligence is governed by the EU AI Act, the first comprehensive AI law, which applies directly as an EU regulation.
- Framework
- the EU AI Act (Regulation (EU) 2024/1689)
- Approach
- risk-based: unacceptable-risk AI is banned, high-risk AI faces strict duties, limited-risk AI has transparency rules
- General-purpose AI
- transparency duties for all GPAI models; systemic-risk models add safety and evaluation obligations
- Timeline
- phased: prohibitions from Feb 2025, GPAI rules from Aug 2025, most high-risk obligations from Aug 2026
- Maximum fine
- €35 million or 7% of global annual turnover for prohibited-AI breaches
- Oversight
- national market-surveillance authorities, coordinated by the EU AI Office
The AI Act is an EU regulation applied directly in France; national market-surveillance authorities handle enforcement.
The EU AI Act in France: FAQ
Yes. As an EU member, France is covered by the EU AI Act (Regulation (EU) 2024/1689), which applies directly.
It uses a risk-based approach: unacceptable-risk AI is banned, high-risk AI faces strict obligations, and general-purpose AI models carry transparency duties.
It is phased: prohibitions applied from February 2025, general-purpose-AI rules from August 2025, and most high-risk obligations from August 2026.
Up to €35 million or 7% of global annual turnover for breaching the prohibited-AI rules, with lower tiers for other breaches.
Key points
The EU AI Act is the primary, directly applicable framework. It entered into force in 2024 with phased application: bans on unacceptable-risk practices from 2 Feb 2025, general-purpose AI (GPAI) obligations from 2 Aug 2025, and high-risk (Annex III) rules from 2 Aug 2026.
France missed the 2 Aug 2025 deadline to formally designate competent authorities. The DDADUE digital bill, validated by the Senate on 17 Feb 2026, designates the CNIL as the reference (lead) authority and amends the 1978 Data Protection Act to give it AI Act powers.
About fifteen sectoral authorities share oversight by AI use case: DGCCRF (consumer protection), ARCOM (audiovisual/digital), ACPR (banking/insurance), AMF (financial markets), and ANSM/HAS (health), with DGCCRF and ARCOM enforcing the bans on manipulative/subliminal AI systems.
A shared pool of technical expertise drawing on ANSSI (cybersecurity agency) and PEReN (platform-regulation expertise centre) is planned to support the market-surveillance authorities in assessing AI system compliance.
The CNIL has issued extensive AI guidance under the GDPR: recommendations on informing data subjects and exercising rights (Feb 2025), legitimate interest as a legal basis for AI training (June 2025), and how-to sheets on data annotation, development security, and the GDPR status of AI models (July 2025), with further 2026 work planned on workplace and health AI.
France runs a national AI strategy launched in 2018, funded with ~EUR 2.5bn under France 2030; a third phase was launched after the 6 Feb 2025 interministerial committee, tied to the Paris AI Action Summit (10-11 Feb 2025) and a EUR 109bn private investment pledge focused on compute, the value chain, and training.
Timeline - major decisions & events
The Ministry of the Economy's Directorate-General for Enterprises (DGE) released a draft scheme designating ~17 national authorities (with CNIL, DGCCRF as single point of contact, and DGE on the European AI Board) to enforce the EU AI Act in France. It establishes how the country will supervise AI systems but still awaits parliamentary approval.
MIAI / ai-regulation.com ↗The CNIL published guidance on using the GDPR 'legitimate interest' legal basis to develop AI models and on collecting personal data via web scraping, clarifying how French/EU data-protection law applies to AI training.
CNIL ↗Hosted by France, the summit produced a joint declaration signed by 58 countries on inclusive, sustainable and trustworthy AI (notably not signed by the US and UK), positioning France as a convener of global AI governance.
Élysée ↗The CNIL released guidance on informing data subjects whose data trains AI models and on facilitating individuals' GDPR rights (access, erasure), giving practical compliance rules for AI developers in France.
CNIL ↗After public consultation, the CNIL finalised its first set of practical recommendations on building AI systems in compliance with the GDPR, establishing the French regulator's baseline guidance for lawful AI development.
CNIL ↗The French data-protection authority published a four-pillar action plan to regulate AI, especially generative AI and chatbots, and created a dedicated AI department, signalling proactive supervision ahead of the EU AI Act.
CNIL ↗The CNIL imposed its maximum fine on Clearview AI for unlawfully scraping facial images and processing biometric data without a legal basis, ordering deletion of French residents' data, a landmark French AI enforcement action.
CNIL ↗Following Cédric Villani's mission report, President Macron unveiled France's national AI strategy with €1.5bn in planned investment and an ethics-focused framework, laying the foundations of French AI policy.
European Commission AI Watch ↗Law No. 2016-1321 created a right for citizens to know the rules and main features of algorithms used by public administrations to make individual decisions, an early French legal foundation for algorithmic accountability.
Légifrance ↗France - other topics
Artificial Intelligence in other countries
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Methodology & how to cite · Explore the full world map →