Enforcement per member state
AI Act enforcement in France
Last verification round: 2026-08-10
- Who supervises · in a bill
- DGCCRF as intended coordinator and single point of contact, with CNIL, Arcom and ACPR among sectoral supervisors (scheme announced, not yet enacted)
- Single point of contact
- DGCCRF (intended, Article 70(2); the statutory basis is still missing).
- Implementing law
- bill
The situation in this country
On 9 September 2025 France published a governance scheme with the DGCCRF as coordinator and single point of contact and a sectoral split in which the CNIL takes most sensitive use cases (prohibited practices, biometrics, workplace AI), alongside Arcom, ACPR and product authorities. However, the designation provisions were withdrawn from the DDADUE bill before its submission to parliament, leaving France still without formally designated authorities in early 2026.
Obligations at play here
What has happened
2026-01-20 | Franse regering
Designation dropped from DDADUE: France still without formal authorities
According to an analysis by the MIAI institute, the November 2025 DDADUE bill initially contained the provisions that would formally designate the French AI Act authorities, but these were withdrawn before submission to parliament. This left France in early 2026 among the member states without formally designated competent authorities.
2025-09-09 | Direction generale des Entreprises / DGCCRF
France announces governance scheme: DGCCRF to be contact point
The Directorate-General for Enterprises published the intended allocation of AI Act supervision: the DGCCRF coordinates the sectoral authorities and becomes single point of contact under Article 70(2). The CNIL takes prohibited practices, biometrics and workplace AI among others, Arcom manipulative and synthetic content, ACPR the financial sector. The scheme only takes effect after parliamentary approval.
2023-12-27 | Commission Nationale de l’Informatique et des Libertés (CNIL)
CNIL fines Amazon France Logistique 32 million euros for employee monitoring
The CNIL fined Amazon France Logistique 32 million euros for an excessively intrusive system that tracked warehouse workers’ activity via scanners down to the second. Under the AI Act, algorithmic monitoring of workers is a high-risk use (Annex III, employment), with obligations applying from 2 December 2027.
2022-10-20 | CNIL
GDPR case: CNIL fines Clearview AI 20 million euros
Explicitly a GDPR case, not AI Act enforcement. The CNIL imposed the maximum fine of 20 million euros on facial recognition company Clearview AI for unlawful processing of biometric data and ordered it to stop collecting data on persons in France. Illustrative of the French approach to biometric AI.