AIPolicyTracker
Menu

Country · Europe

AI regulation in France

Source-linked · checked 11 Sep 2026 2 instruments · 0 binding

Overview

France applies the EU AI Act and has built its national approach around a national AI strategy launched in 2018 (successive phases to 2025), strong involvement of the data-protection authority CNIL, which publishes practical how-to sheets on AI and data protection, and the AI Action Summit hosted in Paris in February 2025. France has proposed CNIL, the competition and consumer authority (DGCCRF) and ARCOM among its AI Act competent authorities.

What is the current regulatory status?

EU AI Act applies; national AI strategy (phases since 2018) as policy; CNIL AI guidance; competent-authority designation in progress.

Binding rules versus guidance

Binding: none recorded. Strategy or guidance: National AI strategy; CNIL AI how-to sheets.

Key policy instruments

France Guidance Guidance

CNIL AI how-to sheets

CNIL recommendations on the development of AI systems and the GDPR (AI how-to sheets)

A series of practical guidance sheets, first published in 2024 and extended since, explaining how organisations can develop and train AI systems in compliance with the GDPR: defining a purpose, choosing a legal basis (including legitimate interest for web-scraped training data), data minimisation, retention, data-protection impact assessments, informing people and honouring their rights, and security of training datasets and models.

Adopted 8 Apr 2024 Source-linked · checked 11 Sep 2026 Official source
France National strategy Adopted

National AI strategy

Stratégie nationale pour l'intelligence artificielle (National AI Strategy, phases 1–3, 2018–2025)

Launched in March 2018 following the Villani report, the national AI strategy funds research institutes (3IA then AI clusters), talent, compute and business adoption. The second phase (2021) focused on training and diffusion into the economy; the third phase (2024–2025) emphasises sovereign generative-AI models, compute and public-sector use, and framed France's hosting of the AI Action Summit in February 2025.

Adopted 29 Mar 2018 Source-linked · checked 11 Sep 2026 Official source

Upcoming deadlines

No scheduled future dates recorded. Past milestones are listed on each policy page.

Current priorities

AI Act authority designation, compute and sovereign model investment, public-sector AI use, CNIL guidance on training data and GDPR compliance.

Latest changes

No change events recorded yet.

Applicable sectors, use cases and obligation areas

Obligation areas

How to use this information

  1. Start from the EU AI Act record for obligations; use this page for the national authorities, penalties and strategy.
  2. Open the official source on each instrument before relying on any date or obligation.
  3. Check national data-protection, employment and consumer law that applies to AI systems regardless of the AI Act.

Official government and regulator sources

  1. CNIL: AI how-to sheets
    CNIL · Tier 1 source
  2. Stratégie nationale pour l'intelligence artificielle
    Ministère de l'Économie · Tier 1 source

Frequently asked questions

Who supervises AI in France?
The EU AI Act applies directly. France has proposed CNIL, DGCCRF and ARCOM among its competent authorities; CNIL already publishes practical guidance on AI systems and the GDPR.

Follow by email

Get every dated, source-linked change to this jurisdiction in a weekly email.

Double opt-in; one-click unsubscribe in every email. Choose jurisdictions

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.