Laws and data licensing
France: privacy laws and AI data licensing
Short answer
If your records include people in France, the main rules are: EU GDPR plus the French Data Protection Act; the CNIL is the regulator.
What to know#
The CNIL has published guidance on AI training data.
For U.S. suppliers#
- SourceX works with U.S. businesses, but your records may include customers abroad
- Records tied to other countries are reviewed against their rules or excluded
- Personal details are removed before anything is shared
General information, not legal advice. Laws change and their application depends on your facts. SourceX assesses which rules apply deal by deal with your counsel. Last reviewed 2026-10-09.