With the ever-growing development of artificial intelligence (AI) tools and systems, France aims to position itself among leading countries in the field, in accordance with a national strategy established by the French government since 2018(1). The strategy is mainly focused on enhancing AI research capabilities, training and attracting the best AI talents, and accelerating the dissemination of AI in France’s economy.

In this context, and in parallel with the preparation of the recently adopted EU Regulation 2024/1689 of 13 June 2024 laying down harmonised rules on artificial intelligence (hereafter EU AI Act), France’s DPA (the CNIL) has been particularly active for some years supporting organisations in understanding the interaction between data protection and AI and how to meet their GDPR compliance requirements in this respect, taking into account the EU AI Act(2).