France

Recommendation on session replay tools

On 22 April 2026, the National Commission on Informatics and Liberty (CNIL) closes the consultation on its draft recommendation on session replay tools. The draft recommendation is addressed to session replay tool providers and website and mobile application publishers. It sets out practical recommendations to ensure compliance with Article 82 of Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, the General Data Protection Regulation (RGPD), and Direct...

France CNIL issues guidance on AI system compliance with GDPR and EU AI Act

The French data protection authority CNIL published comprehensive guidance on the intersection of GDPR requirements and EU AI Act obligations for AI systems processing personal data, addressing data protection impact assessments, lawful bases for AI training data, and data subject rights in the context of AI.

National Commission on Informatics and Liberty investigation into KASPR for alleged unlawful data scraping

On 4 March 2026, the National Commission on Informatics and Liberty (CNIL) closed its case concerning KASPR, a company managing a database of approximately 160 million contacts, after confirming compliance with its previous decision. The CNIL found that KASPR had fulfilled the obligations set out in Decision no. SAN-2024-020 by deleting the database, ceasing the extraction of contact details from LinkedIn, removing the automatic five-year retention renewal, implementing an email notification ...

Decree No. 2026-209 amending provisions of the public health code relating to the hosting of personal health data

On 27 March 2026, Decree No. 2026-209 amending provisions of the public health code relating to the hosting of personal health data partially enters into force. Points 2° and 3° of Article 1 are subject to a deferred application period and will apply within six months of the decree’s publication, that is by 26 September 2026. The decree implements Article 32 of Law No. 2024-449 of 21 May 2024 on securing and regulating the digital space. It applies to patients, controllers processing personal...

Decree No. 2026-196 on the rental of furnished tourist accommodation

On 21 March 2026, Decree No. 2026-196 entered into force, regulating the transmission of activity data from rental intermediaries to government agencies. The decree designates the Directorate-General for Enterprises as the single public body responsible for collecting and making this data available. Rental intermediaries, including digital rental platforms, must electronically transmit specific data, including the registration number of the accommodation, the URL of the listing, the precise a...

French Courts Confront AI Hallucination Issues

French courts in 2026 are confronting AI-induced issues including hallucinations (false or non-existent case law references) and misuse of generative AI in legal filings, signaling emerging judicial responses to AI reliability in legal practice.

n° 25BX02906 (M. B. c. Préfet de la Vienne)

Lawyer appeared before the CAA Bordeaux. Fabricated: Case Law | Le conseil a cité « CE, 7 février 2018, n° 409302 », que la cour a constaté comme n'existant pas et a invité à vérifier la référence.

No. 25BX02906

Lawyer appeared before the CAA Bordeaux. Fabricated: Case Law | Counsel cited 'CE, 7 février 2018, n° 409302'; the court states this decision does not exist.

n° 25BX02906 (M. B. c. Préfet de la Vienne)

Fabricated: Case Law | Le conseil a cité « CE, 7 février 2018, n° 409302 », que la cour a constaté comme n'existant pas et a invité à vérifier la référence. || Fabricated: Case Law | Le conseil a cité « CE, 11 janvier 2007, Association SOS Racisme », que la cour a constaté comme n'existant pas et a invité à vérifier la référence.

No. 25BX02906

Fabricated: Case Law | Counsel cited 'CE, 7 février 2018, n° 409302'; the court states this decision does not exist. || Fabricated: Case Law | Counsel cited 'CE, 11 janvier 2007, Association SOS Racisme'; the court states this decision does not exist. || Misrepresented: Case Law | Counsel cited 'CE, 23 septembre 1987, Ministre du travail c/ Sté Ambulances 2000'; the court notes this decision concerns employment-training contract restrictions and is not relevant to the present matter (misapplied precedent). || Misrepresented: Case Law | Counsel cited 'CE, 14 novembre 2018, n° 420055'; the court states this decision concerns abusive requests to the administration and is not on point (misapplied precedent). || Misrepresented: Case Law | Counsel cited 'TC, 17 juin 2019, n° 4153'; the court observes this decision deals with jurisdictional competence regarding equality before public burdens and is not relevant to the appellant's claim (misapplied precedent). || Misrepresented: Case Law | Counsel cited 'CE, 25 août 2025, Commune de Massat'; the court notes this decision concerns freedom of worship in référé liberté and is not applicable to the case at hand (misapplied precedent).

PANAME Audit Tool AMI - Test RGPD des modeles d'IA

CNIL lance appel a manifestation d'interet pour tester l'outil PANAME d'audit RGPD des modeles d'IA. Initiative conjointe CNIL, ANSSI, PEReN, Inria pour evaluer la confidentialite des modeles AI et conformite RGPD.

n° 25BX02906 (M. B. c. Préfet de la Vienne)

No. 25BX02906

Arcom and CNM inquiry into discovery, exhibition, and publishing of musical works in audiovisual media and digital platforms

On 19 February 2026, the Audiovisual and Digital Communication Regulatory Authority (Arcom) and the National Music Centre (CNM) close a public consultation as part of an inquiry into discovery, exhibition, and publishing of musical works in audiovisual media and digital platforms. The consultation asks for stakeholder input on the impact of audiovisual media and digital platforms on music discovery, talent promotion, and editorial practices, including through the role of algorithms, paid prio...

Competition Authority inquiry into competition dynamics in the online video content creation sector

On 18 February 2026, the French Competition Authority published an opinion on the competitive functioning of the online video content creation sector, following an inquiry launched in May 2024. The Authority observes that the sector is concentrated around a limited number of platforms, notably YouTube, TikTok, Instagram and, to a lesser extent, Twitch. Barriers to entry and limited substitutability between platforms contribute to creators’ dependence on a small number of intermediaries, resul...

India and France sign joint statement, covering AI

1. At the invitation of Hon’ble Prime Minister of India, Shri Narendra Modi, President of the French Republic H.E. Mr. Emmanuel Macron paid an official visit to India from 17 to 19 February 2026 and participated in the Artificial Intelligence Impact Summit 2026. During the visit, the two leaders held bilateral talks and jointly inaugurated the 2026 India-France Year of Innovation in Mumbai on 17 February. This is President Macron’s 4th visit to India and it follows Prime Minister Modi’s visit to France in February 2025. 2. On this occasion, both leaders agreed to elevate relations to a “Specia

National Commission on Informatics and Liberty lawsuit into GERS, Santestat, and Cegedim Sante over allegations of unlawful health data processing

On 13 February 2026, the Council of State rejected three appeals brought by GERS, including as successor to Santestat, and by Cegedim Santé against administrative fines imposed by the National Commission on Informatics and Liberties (CNIL) for unlawful processing of health data. The Court held that pseudonymised data contained in the two health databases, “Thin” and “Gers Études clients”, remained personal data under the General Data Protection Regulation (GDPR) because reidentification was p...

French Data Protection Authority publishes guidance on deepfakes including protection and reports of illegal content

De plus en plus réalistes, les vidéos, images et sons truqués peuvent porter atteinte à la vie privée et à la réputation. Les créer ou les partager n’est pas sans risques et peut engager la responsabilité de leurs auteurs. Quels enjeux, quels risques et quels bons réflexes à adopter ?

Government investigation into X over the generation of sexist and sexual content by Grok

On 2 January 2026, the French Government announced an investigation concerning content generated by the generative artificial intelligence service Grok and disseminated on the platform X. The Government reported manifestly unlawful content to the public prosecutor and to the Pharos platform pursuant to Article 40 of the Code of Criminal Procedure in order to obtain immediate removal. The press release states that, in recent days, Grok enabled the generation and dissemination of sexist and sex...

Mme Y

Pro Se Litigant appeared before the TA Rennes.

Mme Y

Mme Y

Competition Authority inquires into competitive state of the conversational agent sector

Following the decision to start inquiries ex officio into the competitive functioning of the conversational agents sector, as announced on 9 January 2026 , the Autorité de la concurrence is launching a public consultation, as part of the preparation of its opinion.

SAS La Volumerie

Lawyer appeared before the TA Rennes. Fabricated: Case Law

SAS La Volumerie

Fabricated: Case Law

SAS La Volumerie

Content moderation regulation in Bill on protecting minors from the risks arising from the use of social networks

On 26 January 2026, the National Assembly passed at first reading, under the accelerated procedure, the Bill aimed at protecting minors from the risks associated with the use of social networks. The adopted text provides that, where information is suggested or ranked for accounts identified as belonging to minors through profiling-based recommendation systems, the service provider is deemed to exercise editorial activity. It also specifies the presentation formats concerned, including persona...

AI chatbots to be scrutinized by French antitrust sector inquiry

Following on from Opinion 24-A-05 of 28 June 2024, which analysed the competitive functioning of the generative artificial intelligence (AI) sector, in particular the upstream segment of the value chain where generative AI models are designed and trained, and its study on the competition issues surrounding the energy and environmental impact of AI, the Autorité de la concurrence is now starting inquiries ex officio into the competitive functioning of the conversational agent sector, located downstream in the value chain. While the downstream segment of the value chain currently appears dynamic

National Commission for Information Technology and Freedoms investigation into unnamed company over unlawful transmission of loyalty programme member data to social network for targeted advertising

On 30 December 2025, the National Commission for Information Technology and Freedoms (CNIL), acting through its restricted panel, issued Ruling SAN-2025-017 in relation to its investigation into an unnamed company, referred to as company X, which transmitted data of loyalty programme members to a social network for the purpose of targeted advertising. The CNIL imposed an administrative fine of EUR 3’500’000, identifying infringements of Articles 6, 12, 13, 32 and 35 of Regulation (EU) 2016/67...

N° 2506461

Lawyer appeared before the TA Orléans. Fabricated: Case Law | Court states this cited CAA Lyon decision with number/date does not exist or numbers do not correspond to dates. Outcome: Admonishment.

N° 2506461

Fabricated: Case Law | Court states this cited CAA Lyon decision with number/date does not exist or numbers do not correspond to dates. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited CAA Paris decision with number/date does not exist or numbers do not correspond to dates. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited CAA Bordeaux decision with number/date does not exist or numbers do not correspond to dates. || Misrepresented: Case Law | Court notes this Conseil d'État decision exists but is not on point for an assignation à résidence (misplaced citation). || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited Conseil d'État decision with number/date does not exist as indicated. || Fabricated: Case Law | Court states this cited CNDA decision with number/date does not exist or numbers do not correspond to dates. || Fabricated: Case Law | Court states this cited CNDA decision with number/date does not exist or numbers do not correspond to dates. || Fabricated: Case Law | Court states this cited CNDA decision with number/date

N° 2506461

CNIL investigation into Nexpublica over alleged failure to provide sufficient security measures for PCRM software

On 22 December 2025, the French data protection authority (CNIL) fined Nexpublica France EUR 1'700'000 for failing to implement sufficient security measures for its PCRM software. Nexpublica specialises in software and computer design. The PCRM software is a tool for social workers to manage client relationships, and is used, for example, by departmental houses serving disabled people. The decision followed data breach notifications in late November 2022, where users gained access to third-pa...

M. [C] c/ CAF de la [Dpt CAF]

Lawyer appeared before the TJ Périgueux. Fabricated: Case Law | The claimant cited jurisprudence references that did not correspond to published decisions; the court flagged the references as likely AI-generated 'hallucinations' and gave pourvoi n°16-26694 as an example of a misreferenced decision. Outcome: Warning.

M. [C] c/ CAF de la [Dpt CAF]

Fabricated: Case Law | The claimant cited jurisprudence references that did not correspond to published decisions; the court flagged the references as likely AI-generated 'hallucinations' and gave pourvoi n°16-26694 as an example of a misreferenced decision.

CNIL outil tracabilite modeles IA open source

CNIL publie un outil demonstrateur pour naviguer dans la genealogie des modeles IA open source et etudier la tracabilite de cet ecosysteme, facilitant la conformite RGPD.

M. [C] c/ CAF de la [Dpt CAF]

Competition Authority study on competition-related issues concerning impact of artificial intelligence

On 17 December 2025, the Competition Authority published a report on competition-related issues concerning the energy and environmental impact of artificial intelligence (AI). In the report, the Authority examined the electricity consumption of data centres and the environmental impact of AI in relation to resources such as water, rare metals, and land. On the basis of these findings, the Authority points out three competition-related issues, namely access to energy and its cost control, the ...

Competition Authority publishes a report on competition-related issues concerning the energy and environmental impact of AI

Primary source (autoritedelaconcurrence.fr) dated 17 December 2025 in FR. See linked source for full text.

Case n° 2512468

Pro Se Litigant used Unidentified in proceedings before the TA Grenoble.