AI how-to sheets

What is the scope of the AI how-to sheets?


The CNIL provides concrete answers for the creation of databases used to train artificial intelligence (AI) systems, which involve personal data.

Determining the applicable legal regime

Sheet 1

The CNIL can help you determine the legal regime applicable to the processing of personal data during the development phase.

Defining a purpose

Sheet 2

The CNIL can help you define the purpose(s), taking into account the specificities of developing AI systems.

Determining the legal qualification of AI system providers

Sheet 3

Data controller, joint controller or processor: the CNIL is helping suppliers of AI systems to determine their status.

Ensuring the lawfulness of the data processing

Sheet 4

The CNIL helps you determine your obligations based on your responsibility and the means of collecting or reusing the data.

Carrying out a data protection impact assessment when necessary

Sheet 5

Creating a dataset for the training of an AI system can lead to high risks to people’s rights and freedoms. In this case, a data protection impact assessment is mandatory. The CNIL explains how, and in which cases, it should be realised.

Taking data protection into account in the system design choices

Sheet 6

To ensure the development of a privacy-friendly AI system, it is necessary to give careful thought to the design of the system. This sheet details the steps involved.

Take data protection into account in data collection and management

Sheet 7

The CNIL explains how data protection principles apply to the management of learning data.