AI how-to sheets
What is the scope of the AI how-to sheets?
The CNIL provides concrete answers for the creation of databases used to train artificial intelligence (AI) systems, which involve personal data.
Determining the applicable legal regime
The CNIL can help you determine the legal regime applicable to the processing of personal data during the development phase.
Defining a purpose
The CNIL can help you define the purpose(s), taking into account the specificities of developing AI systems.
Determining the legal qualification of AI system providers
Data controller, joint controller or processor: the CNIL is helping suppliers of AI systems to determine their status.
Ensuring the lawfulness of the data processing
The CNIL helps you determine your obligations based on your responsibility and the means of collecting or reusing the data.
Carrying out a data protection impact assessment when necessary
Creating a dataset for the training of an AI system can lead to high risks to people’s rights and freedoms. In this case, a data protection impact assessment is mandatory. The CNIL explains how, and in which cases, it should be realised.
Taking data protection into account in the system design choices
To ensure the development of a privacy-friendly AI system, it is necessary to give careful thought to the design of the system. This sheet details the steps involved.
Take data protection into account in data collection and management
The CNIL explains how data protection principles apply to the management of learning data.