France

France has not yet conclusively designated its competent authorities. The Directorate-General for Enterprise (DGE) published a draft designation of market surveillance authorities in September 2025.

A decentralised model with up to 17 market surveillance authorities is envisaged. Three authorities are expected to carry the main load:

• CNIL (data protection authority) — lead for AI involving personal data
• DGCCRF (consumer protection / competition / fraud control)
• ARCOM (audiovisual and digital regulator)

Status

Formal designation is still pending (as of June 2026). The CNIL already acts in practice as the central point of contact for AI matters involving personal data.