{"slug":"france-cnil-ai-how-to-sheets","title":"CNIL recommendations on the development of AI systems and the GDPR (AI how-to sheets)","short_title":"CNIL AI how-to sheets","jurisdiction":"france","instrument_type":"guidance","status":"guidance","is_binding":false,"issuing_body":"Commission nationale de l'informatique et des libertés (CNIL)","summary_plain":"A series of practical guidance sheets, first published in 2024 and extended since, explaining how organisations can develop and train AI systems in compliance with the GDPR: defining a purpose, choosing a legal basis (including legitimate interest for web-scraped training data), data minimisation, retention, data-protection impact assessments, informing people and honouring their rights, and security of training datasets and models.","adopted_on":"2024-04-08","in_force_on":null,"applies_from":null,"official_source_url":"https://www.cnil.fr/en/ai-how-sheets","last_verified_at":null,"review_status":"pending_review","confidence_level":"medium","updated_at":"2026-09-12T17:35:40+00:00","url":"https://aipolicytracker.org/policies/france-cnil-ai-how-to-sheets","status_note":null,"scope_summary":"Applies to any controller or processor developing or training AI systems with personal data under French and EU data-protection law.","who_it_applies_to":null,"key_dates_summary":null,"penalties_summary":null,"what_organizations_must_do":null,"published_on":null,"date_notes":"First set published 8 April 2024; further sheets in 2024–2025.","taxonomy":{"actor":["provider","deployer"],"ai_system_type":["general_purpose_ai_model","generative_ai"],"sector":["cross_sector"],"use_case":["generative_ai"]},"sections":[],"obligations":[],"applicability_rules":[],"deadlines":[],"versions":[],"enforcement_events":[],"procurement_rules":[],"sources":[{"title":"AI how-to sheets","publisher":"CNIL","url":"https://www.cnil.fr/en/ai-how-sheets","document_date":"2024-04-08","document_type":"guidance","tier":1,"tier_label":"Official primary source (government, legislature, regulator, court, standards body, intergovernmental)"}],"related_policies":[],"related_frameworks":[],"faq":[],"source":{"official_source_url":"https://www.cnil.fr/en/ai-how-sheets","source_title":"AI how-to sheets","source_publisher":"CNIL","source_document_date":"2024-04-08","source_reference":null,"source_tier":1,"last_checked_at":"2026-09-11","last_verified_at":null,"review_status":"pending_review","confidence_level":"medium","content_version":1,"change_summary":"Added in the September 2026 global coverage expansion from the official source listed; reviewer to confirm dates, status and scope against the source text.","reviewed_by":null}}