News

Development of Artificial Intelligence Systems: CNIL Recommendations for GDPR Compliance

DATE:
September 1, 2025
READING TIME:
10min

On July 22, 2025, CNIL published valuable recommendations to ensure AI development respects GDPR and fundamental rights.

Here are the key takeaways we see as most relevant for our work in tech recruitment:

Clear purpose: Every AI project must have a defined and legitimate purpose. When we connect developers with clients, we emphasize clarity on why data is being used and how it supports the project.

Transparency of roles: Defining who is the data controller, who is the processor. In our hiring processes, we ensure developers understand whether they act for the client or via our agency when handling data in AI projects.

Proper legal basis: Consent, contractual need, or legitimate interest. We encourage both clients and candidates to always evaluate whether data use is necessary, proportionate, and explainable to the people affected.

Data minimization: Collect only what is strictly necessary. In our agency, we apply this to candidate profiles: we keep information lean, anonymize when possible, and recommend anonymized test data for technical assessments.

Reasonable retention: No endless storage. We set clear timelines for how long candidate data is kept and make sure it’s deleted or anonymized once its purpose is fulfilled.

Clear information: People must know how their data is used. We commit to making sure every candidate understands the purpose of processing and their rights to access, correct, or delete data.

Security and risk management: Tech recruitment also means safeguarding data. We require secure testing environments (encryption, access controls, audit trails), and encourage developers to perform DPIAs (Data Protection Impact Assessments) when building AI systems that handle sensitive or large-scale data.

For us, these recommendations highlight what should guide our sector: helping clients build strong AI teams while ensuring data privacy is never compromised.

Building trust in recruitment and in technology goes hand in hand. Ethical hiring practices and responsible AI aren’t just legal obligations, they’re a competitive advantage.

Read more (in French): https://www.cnil.fr/fr/developpement-des-systemes-dia-les-recommandations-de-la-cnil-pour-respecter-le-rgpd

READ MORE ON OUR BLOG
Discover similar posts
Web3 and AI: Possibilities, Benefits, Challenges

Read More
What Is Web3 Technology, How Does It Work, Benefits

The internet has evolved drastically since its inception—from static pages to dynamic platforms, it has transformed the way we interact, communicate, and conduct business. Now, we stand on the brink of another revolution: Web3. But what is Web3 technology? This new era of the internet promises a radical shift away from centralized control towards a decentralized ecosystem where users have greater ownership and control over their data and digital assets. Fueled by blockchain technology, Web3 aims to create a more open, secure, and equitable digital world. Join us as we explore the foundations of Web3, its key technologies, and the potential impact it will have on individuals, businesses, and society as a whole.

Read More
What Digital Transformation in Manufacturing Means for Your Business

If you thought digital transformation in manufacturing is only about adopting new technologies and simplifying the manufacturing process, think again—it's about rethinking how you deliver value to your customers. Basically, it is the bridge to the future, offering manufacturers a roadmap to innovate, optimize, survive and thrive in an increasingly competitive market.

Read More