FranceLaw 2023-380, Article 10, Experimental Algorithmic Processing of Video-Protection Images, Extended to 31 December 2030
Loi n° 2023-380 du 19 mai 2023 art. 10, expérimentation du traitement algorithmique d'images de vidéoprotection, prolongée par la loi visant à offrir des réponses immédiates aux phénomènes troublant l'ordre public, la sécurité et la tranquillité de nos concitoyens
In force.
An AI sector rules rule binding government bodies.
- Obligation class
- Prohibition, Governance
As of .
What it requires
- This experiment lets State services run algorithmic processing of video-protection images under a prefect's authorisation and sets conditions on that processing; it is a framework for public-sector video analysis, not a general rule for private operators.
- If you run algorithmic processing of video-protection or aircraft-camera images under this experiment, use it only to detect predetermined events that may present or reveal risks of acts of terrorism or serious harm to the safety of persons (Article 10 of Law 2023-380, paragraph I).
- Use no facial recognition technique, no biometric identification system and no biometric data, and make no matching, interconnection or automated linking with other processing of personal data.
What it makes you log
Logging duty
The provisions described in the decision authorise and limit the processing and require a reasoned authorisation, and the decision records no duty to keep logs of the processing.
- Kind
- None
- As of
What this law does
Article 10 of Law 2023-380 of allows, as an experiment, the images collected by video-protection systems or aircraft-mounted cameras to undergo algorithmic processing in order to detect and signal certain events. The use of the processing must be authorised by the State's representative in the département or, in Paris, by the prefect of police, for a period of no more than one month that can be renewed.
An earlier law renewed the experiment until , as the Constitutional Council recorded in decision 2026-902 DC. The provisions reviewed in decision 2026-915 DC move the end of the experiment to . They also allow the processing where the images are captured in certain buildings or places open to the public. The processing may only detect predetermined events likely to present or reveal risks of acts of terrorism or serious harm to the safety of persons.
The processing uses no facial recognition technique, no biometric identification system and no biometric data. It cannot involve any matching, interconnection or automated linking with other processing of personal data. The authorisation decision must be reasoned and state the controller, the building or place, the reasons for the processing, the geographic perimeter and the duration of the authorisation.
The Constitutional Council held that, for buildings and places exposed to a permanent risk, the duration of an authorisation may not exceed three months, renewable on the same terms. The Constitutional Council ruled on , and its decision was published in the Journal officiel of .
When LexLint raises it
When your app profile says your app processes biometric data.