On 21 September 2022, the French data protection authority (Commission Nationale de l'Informatique et des Libertés – CNIL) published a set of resources on artificial intelligence. The CNIL states that the use of systems using artificial intelligence (AI) has grown and, in consequence, new data protection issues have appeared.
One of the documents is a questionnaire for data controllers which allows for the assessment whether an AI-based solution complies with the GDPR. The other document is a self-assessment guide for AI systems.
The CNIL has addressed both documents to professionals, i.e. data controllers or processors, who have implemented personal data processing based on AI systems, or wish to do so, and who are wondering how to comply with the GDPR.
Both documents are available at: https://www.cnil.fr/en/artificial-intelligence-cnil-publishes-set-resources-professionals