What is the CNIL doing about AI?
The CNIL is the French data protection authority and a central player in AI regulation: recommendations on GDPR compliance for AI systems, a dedicated AI service created in 2023, investigation and sanction powers. It is also slated to be among the oversight authorities for the national component of the AI Act.
The Commission nationale de l'informatique et des libertés, the CNIL, is the French data protection authority and a central player in AI regulation. It ensures the application of the GDPR, including to AI systems, publishes recommendations to help with compliance, has a dedicated artificial intelligence service created in 2023, and has control and sanction powers. It is also expected to be among the authorities tasked with monitoring the application of the European AI regulation in France.
Its missions regarding AI
Support. The CNIL publishes practical recommendations on the compliance of AI systems with the GDPR, particularly on model training, legal bases, informing individuals and respecting their rights.
Control. It can verify compliance of processing, following complaints or on its own initiative.
Sanction. It has sanction powers, including fines, in case of non-compliance with the GDPR.
Inform the public and stakeholders. It publishes analyses, tools and positions on AI issues for freedoms.
The dedicated AI service
The CNIL created in 2023 a service dedicated to artificial intelligence, to develop its expertise, support stakeholders and handle AI-related cases. This service reflects the importance the subject has taken on.
How it protects you
You can contact the CNIL if you believe your data rights are not being respected by an AI service. It investigates complaints and can act against non-compliant data controllers. This is a concrete and free remedy.
Frequently Asked Questions
Can I contact the CNIL against an AI service?
Yes, if your personal data rights are not respected. The process is free.
Can the CNIL ban an AI system?
It can order compliance, restrict or stop non-compliant processing, and impose sanctions.
Does the CNIL apply the AI regulation?
It applies the GDPR and should play a role in national monitoring of the AI regulation.
ICIA Resource
ICIA offers MentivisOS ICIA, a free lifelong platform to learn AI with a personalized learning path.
Discover MentivisOS ICIA