Duty LXD-3409
Makes education decisions, in France
Each law's tag says when it binds: since in force proposed proposed
GDPR Article 22, Right Against Automated Individual Decision-Makingsince 4 lines
Regulation (EU) 2016/679, Arts. 13(2)(f), 14(2)(g), 15(1)(h) and 22 · Read the law's page
- Give a person in France a path to obtain human intervention, express their view, and contest a decision made solely by automated processing, including profiling, that produces a legal or similarly significant effect on them.
- Do not subject a person in France to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a contract with them, is authorised by Union or Member State law that also lays down suitable measures to safeguard their rights, or rests on their explicit consent, under GDPR Article 22(1) and (2).
- Do not base a solely automated decision with legal or similarly significant effects on a person in France on the special categories of personal data in GDPR Article 9(1), unless they gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of proportionate Union or Member State law, and suitable measures to safeguard their rights are in place, under GDPR Article 22(4).
- If you make solely automated decisions about a person in France of the kind GDPR Article 22(1) and (4) describe, including profiling, tell them so and give them meaningful information about the logic involved and the significance and envisaged consequences for them: when you collect their data, within the Article 14(3) period where you obtained it from someone else, and in answering their access request, under GDPR Articles 13(2)(f), 14(2)(g) and 15(1)(h).
EU Artificial Intelligence Act — directly applicable in France (Articles 5, 50, 53, 26)since 2 lines
Regulation (EU) 2024/1689 — directly applicable in France without national transposition; calendar amended by the Digital Omnibus, Regulation (EU) 2026/1744 of (OJ , in force )
- Disclose to users when they are interacting with an AI chatbot.
- Mark generative AI system outputs in machine-readable form.
Projet de loi portant diverses dispositions d'adaptation au droit de l'Union européenne (DDADUE), Articles 24 to 24 terdecies, Authorities Competent Under the AI Actproposed4 lines
Articles 24 à 24 terdecies, texte adopté n° 63 (2025-2026), Sénat, 18 février 2026 (autorités compétentes, règlement sur l'intelligence artificielle) · Read the law's page
- This bill is not in force: the Sénat adopted it in first reading on and the Assemblée nationale has not adopted it. Read the lines below as what would apply if it is enacted as the Sénat's text stands.
- If you provide, import, distribute or deploy a high-risk AI system used as a safety component in the management and operation of critical infrastructure (digital infrastructure, road traffic, or the supply of water, gas, heating or electricity), comply with the AI Act obligations that the market surveillance authority designated for that domain by a Conseil d'État decree supervises (proposed Articles L. 1340-1 and L. 1340-2 of the Code de la défense).
- Carry out, within the time the authority sets, any measure it orders for a high-risk AI system used in critical infrastructure under proposed Article L. 1340-4 of the Code de la défense: ending the non-conformity, suspending or ceasing marketing or use, recalling or withdrawing the system, or publishing warnings (proposed Article L. 1340-5(V)).
- Where you are an economic operator concerned by the bringing into conformity, recall or withdrawal of a high-risk AI system that is a safety component of a product or equipment covered by Chapter VII of Title V of Book V of the Code de l'environnement, inform the other economic operators you supplied, and the operators and users of the system (Article 24 quater, 4°, b)).