France: Opened public consultation on CNIL guidance on the creation of training databases for artificial intelligence systems compliance with GDPR

On 11 October 2023, the National Commission for Informatics and Freedoms (NCIL) opened a public consultation on guidance on the creation of training databases for artificial intelligence (AI) systems compliance with GDPR (General Data Protection Regulation), until 16 November 2023. The guidance aims to clarify the GDPR obligations that apply to the development phase and exclude the deployment phase. The guide specifies that the processing of personal data has to be for a legitimate and specific purpose, and in case the processing poses a high risk and could infringe the rights and freedoms of individuals, the entity has to obtain approval.