CNIL plenary agenda (5 Nov 2026) covers AI guidance, automated decision communication, and draft decree on genetic/fingerprint databases

O que aconteceu

The CNIL plenary session on 5 November 2026 will discuss communication on fully automated individual decisions under article 22 of the GDPR. It will examine a draft decree amending the criminal procedure code concerning the national automated genetic and fingerprint databases (FNAEG and FAED). The session also includes the presentation of the final version of the guide “IA en contexte de soins” with input from the Haute autorité de santé.

Por que isso importa para confiança e conformidade

• Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
• The agenda signals upcoming CNIL guidance on AI in health and potential regulatory changes to biometric data registers, impacting data controllers and processors.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Inventory AI or automated decision systems in scope and their assessments.
3. Confirm handling of sensitive data categories meets the stricter rules.