{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","AI Legislative Guide"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Gide Loyrette Nouel A.A.R.P.I.","Julien Guinot-Deléry"]
[]
[]
[]
["AI Legislative Guide"]
[]
["Report Generated: 11/19/2025"]
[]
["View your report results on next tab"]

{"sheet":"AI Legislative Guide","index":1,"n_rows":5,"n_cols":2,"rows_kept":5,"cut":false,"hidden":false,"merged":[]}
["Question","France"]
["Overview"]
["Has specific legislation, final regulations or other formal regulatory guidance addressing the use of AI in your jurisdiction been implemented (vs reliance on existing legislation around IP, cyber, data privacy, etc.)?\n\n*Please note that EU rules are applicable in all EU Member States*","Yes. \n"]
["Please provide a short summary of the legislation/regulations/guidance and explain how legislators aim to strike the balance between innovation and regulation.\n\n*Please note that EU rules are applicable in all EU Member States*","As of today, there is no specific legislation on AI in France. However, transversal or sectorial regulatory guidelines have helped market players anticipate the regulatory expectations that French competent authorities may have in relation to the use of AI.\nIn general, to avoid imposing constraints that (i) could be too strict for market developments that continue to evolve quickly and (ii) may not be adapted to the latest technological trends, the regulators publish this type of guidance only after a public consultation (giving the various stakeholders the opportunity to contribute to framing the most appropriate regulatory framework). Once finalized, this type of guidance generally does not give rise to new binding pieces of legislation or regulation, but rather serves as guidelines highlighting key legal and regulatory issues to consider in relation to AI. For example, the \nCommission nationale de l'informatique et des libertés (\"\nCNIL\") published its first AI development recommendations on April 8, 2024, aiming to balance innovation and respect for individuals' rights. The 7 fact sheets provide legal insights for \nGDPR-compliant AI development, focusing solely on the development phase for now. Building on this, the \nCNIL issued additional recommendations on February 8, 2025, clarifying how to properly inform individuals and ensure the exercise of their rights when their data is processed by AI systems. On June 6, 2025, the \nCNIL also released guidance on the use of legitimate interest as a legal basis for data processing in AI development (including the use of web scraping to train AI models). Finally, on July 15, 2025, the \nCNIL published a consolidated and final version of its recommendations for AI development, supplemented with practical tools such as checklists and a methodology to help developers assess compliance risks. These publications confirm the \nCNIL’s strategy of gradually issuing sector-specific and operational guidelines to support responsible innovation while ensuring compliance with \nGDPR principles. Similarly, the \nAutorité de Contrôle Prudentiel et de Résolution (\"\nACPR\") published a discussion paper on the governance of AI in Finance. The French Autorité de la concurrence has opened for public consultation on a future opinion on the specific challenges raised by AI in competition law.\n"]
["Which agency regulates the use of AI in your jurisdiction?\n\n*Please note that EU rules are applicable in all EU Member States*","As of today, no authority has been specifically appointed to regulate AI in France.\nThe \nCommission nationale de l'informatique et des libertés (\"\nCNIL\") is competent to supervise personal data and privacy-related issues. It supports professionals in their compliance efforts and helps individuals to control their personal data and exercise their rights. As part of this mission, it closely monitors technological developments to ensure that its regulatory approach is fit for the latest digital evolutions and market trends. As such, the CNIL is considered a transversal authority on AI-related topics.\nIn addition, sectoral regulators may also be competent on AI-related topics in their respective fields of action. For example, in the banking and financial sectors, the sectoral \nAutorité des marchés financiers (\"\nAMF\") and the \nAutorité de contrôle prudentiel et de résolution (\"\nACPR\"), which supervise the financial, banking and insurance sectors in France, are also competent to regulate how the supervised entities develop, integrate and/or use AI in their activities. Another illustration of this sectoral approach to AI is the role played by the \n\nFrench Autorité de la concurrence, which is competent on the specific challenges raised by AI in competition law (see above).\n"]