Search
Respect and facilitate the exercise of data subjects’ rights
Individuals whose data is collected, used or reused to develop an AI system have rights over their data that allow them to maintain control over it. The controllers are responsible to comply with…
02 July 2024
Respect and facilitate the exercise of data subjects’ rights
Individuals whose data is collected, used or reused to develop an AI system have rights over their data that allow them to maintain control over it. The controllers are responsible to comply with…
02 July 2024
The legal basis of legitimate interests: Focus sheet on open source models
In view of their potential benefits, open source practices should be considered when assessing legitimate interests of an AI system provider. However, it is necessary to adopt safeguards to limit the…
02 July 2024
The legal basis of legitimate interests: Focus sheet on open source models
In view of their potential benefits, open source practices should be considered when assessing legitimate interests of an AI system provider. However, it is necessary to adopt safeguards to limit the…
02 July 2024
Ensuring the security of an AI system’s development
The security of AI systems is an issue too often overlooked by their designers. However, it remains an obligation to guarantee data protection both during the development of the system and in…
02 July 2024
Ensuring the security of an AI system’s development
The security of AI systems is an issue too often overlooked by their designers. However, it remains an obligation to guarantee data protection both during the development of the system and in…
02 July 2024
Informing data subjects
Organizations that process personal data to develop AI models or systems must inform concerned data subjects. The CNIL specifies the obligations in this regard.
02 July 2024
Informing data subjects
Organizations that process personal data to develop AI models or systems must inform concerned data subjects. The CNIL specifies the obligations in this regard.
02 July 2024
Determining the legal qualification of AI system providers
AI system providers who intend to create training datasets with personal data must determine their qualification under the GDPR: they may be qualified as controllers, joint controllers or processors…
07 June 2024
Determining the legal qualification of AI system providers
AI system providers who intend to create training datasets with personal data must determine their qualification under the GDPR: they may be qualified as controllers, joint controllers or processors…
07 June 2024
Status & Composition
Created in 1978 by the Data Protection Act, the CNIL is an independent administrative authority, composed of a College of 18 members and a team of contractual State employees.
29 April 2025
Status & Composition
Created in 1978 by the Data Protection Act, the CNIL is an independent administrative authority, composed of a College of 18 members and a team of contractual State employees.
29 April 2025