French privacy watchdog launches AI Action Plan to address rapid AI development

French privacy watchdog, the ‘Commission Nationale de l’informatique et des Libertés’ (CNIL), launched the AI action plan to respond to issues raised by the rapid development of AI and generative AI in particular. The objective of CNIL’s AI action plan is to provide a framework for the development of generative AI while promoting the emergence of responsible AI that upholds personal data protection and human rights.

The first pillar focuses on developing an understanding of how AI systems work and their impact on various aspects. This includes raising fundamental questions about fairness, transparency, data protection, individual rights, bias, discrimination, and security challenges associated with AI.

The second pillar aims to enable and guide the development of privacy-friendly AI through doctrinal work. CNIL has published fact sheets on AI, educational content on AI principles, and a compliance guide. Additionally, they have provided a position on the use of AI in ‘enhanced’ video surveillance in public spaces.

The third pillar involves joining and supporting innovative players in the AI ecosystem in France and Europe. CNIL seeks to establish a continuous dialogue with research teams, R&D centres, and French enterprises involved in developing AI systems that align with personal data protection values and rules.

The final pillar focuses on auditing and controlling AI systems to protect individuals. CNIL’s control actions encompass ensuring compliance with their position on ‘enhanced’ video surveillance, addressing the use of AI in fraud detection (such as social insurance fraud), and investigating complaints lodged with the organization.