France

France missed the August 2025 deadline for designating national AI Act authorities by over five months — implementation runs through a DDADUE bill still pending in the Assemblée nationale as of April 2026

France's proposed governance model distributes AI Act oversight across 17 separate market surveillance authorities — the most decentralised enforcement architecture in the EU, with coordination mechanisms untested in practice

CNIL is the EU's second-highest fining data protection authority with €888 million in cumulative GDPR fines — its dual GDPR and AI Act mandate creates a unified enforcement pipeline already active against OpenAI, Mistral AI and DeepSeek

France hosts Mistral AI (€11.7B), Hugging Face, and Poolside AI ($12B) — the densest concentration of GPAI providers in the EU, all subject to Articles 51–56 obligations and potential systemic risk classification

The 2023 Olympic surveillance law made France the first EU country to legalise algorithmic video surveillance, extended through 2027 — creating the EU's most acute collision point between national security policy and AI Act Article 5 prohibitions

55% of French SMEs now use generative AI yet 57% have no AI strategy and 43% have no data analytics capability — the compliance documentation gap is structural, not technical