The CNIL publishes its latest AI recommendations, clarifying GDPR applicability to models, security requirements, and conditions for annotating training data. It will continue its work through sector-specific analyses and tools for compliance assessment.