AI Act, CNIL, AI & GDPR
The laws and rulings that govern AI, summarized simply.
Upcoming deadlines
- No dateRèglement européen sur l'IA (AI Act)
To do · Evaluate your AI systems' risk levels now and adjust your processes to meet legal requirements before 2025. Refer to the European Commission's guidelines for GPAI models.
- No dateTransparence des systèmes d'IA générative (AI Act art. 50)
To do · You must integrate machine-readable metadata tags into your synthetic content and consistently inform users when AI is being used. You’ll also need to provide technical documentation to prove compliance.
- No dateRecommandations de la CNIL sur l'IA et le RGPD
To do · Review your AI systems to ensure GDPR compliance by conducting a compliance audit, documenting your purposes and lawful bases, and setting up procedures to handle individuals' rights. Refer to the CNIL’s practical sheets for detailed guidance.