FRANCE Trends and Developments Contributed by: Prudence Cadio and Lobna Boudiaf, LPA Law
In response to the challenges posed by AI, the key commitments of the authorities in this joint statement are: • to clarify the legal bases for data processing within AI; • to share information and establish appropri - ate security measures; • to monitor the technical and societal impacts of AI by involving various stakeholders; • to encourage innovation while reducing legal uncertainties; and • to strengthen cooperation with other relevant authorities (consumer protection, competi - tion, intellectual property). A global approach to AI regulation The collaboration of these five data protection authorities highlights the necessity of a global approach to AI regulation. As AI continues to evolve, both innovation and privacy protection must move forward in tandem. Challenges in Consent and Data Privacy As digital technologies evolve, consent and data privacy are becoming pressing issues in France. Companies collect personal data, often without clear user consent, raising concerns about pri - vacy rights. Despite regulations like the GDPR requiring transparent, informed consent, inci - dents of unauthorised data collection continue. Recent developments in France highlight the ongoing challenges of ensuring user consent and privacy in the tech industry, with new cases and trends shaping data protection laws. CNIL fines telecom provider The CNIL has imposed a EUR50 million fine on a major telecommunications provider for insert - ing advertisements directly into users’ email inboxes without proper consent. The investiga - tion revealed that these ads were displayed as
regular emails but were, in fact, targeted adver - tising, requiring prior user consent under French and EU data protection laws (GDPR). The regulatory authority found that the company failed to obtain valid, informed, and explicit user consent before delivering these ads. Since they were not traditional service messages but mar - keting content, the CNIL ruled that users should have been given a clear choice to opt in or out. The lack of proper transparency and user control over their data led to a significant penalty. This decision highlights the crucial need for strict adherence to GDPR’s consent requirements, especially in digital advertising. Companies that manage user data must similarly ensure they provide clear information and obtain explicit consent from users to avoid regulatory penalties. The controversial collection of voice data by tech giants A criminal complaint has been filed in France against a large tech company due to allegations of unauthorised collection of audio recordings from user devices. The legal action targets the massive collection of voice data without properly informing users, which is a violation of privacy laws. The French complaint is largely based on infor - mation provided by a former subcontractor (who has benefited from the whistle-blower’s status) who worked for a data analysis firm responsible for reviewing recorded audio snippets. The whis - tle-blower, who accessed thousands of record - ings daily, claims that analysts could sometimes link voice data to specific users by cross-ref - erencing additional app information from the device. The data allegedly included highly sen - sitive content, such as children’s voices, dis - cussions about health issues, political views, or
143 CHAMBERS.COM
Powered by FlippingBook