France

Legal Framework

France applies the EU AI Act directly. Its Article 50 transparency duties have applied since 2 August 2026: providers must tell people when they are interacting with an AI system and mark generated content in a machine-readable way, and deployers must label deepfakes. Generative systems already on the market before 2 August 2026 have until 2 December 2026 to add marking, and new bans on AI systems that generate non-consensual sexual deepfakes or child sexual abuse material apply from the same date (Digital Omnibus on AI, Regulation (EU) 2026/1744). Rules for Annex III high-risk systems now apply from 2 December 2027. At EU level, the Commission said on 12 October 2026 that its AI Office has requested and received serious incident reports on recent loss-of-control incidents and will send further requests for information to the companies that developed the models involved. On 14 October 2026, Executive Vice-President Henna Virkkunen said the AI Office has started enforcing the AI Act's rules for general-purpose AI providers and has sent requests for information "addressing issues such as security, external evaluation and monitoring how models are used". None of these Commission statements addresses companies that deploy those models. In October 2026 the Official Journal cited EN 18286:2026, a quality management system standard, as the first harmonised standard supporting the AI Act; CEN-CENELEC says it gives providers of high-risk AI systems a route to a presumption of conformity with the Act's Article 17 quality management requirements. France has not finished designating its AI Act authorities. The bill adapting French law to EU law (DDADUE), adopted by the Senate on 18 February 2026 and before the National Assembly since 20 February 2026, would make the CNIL the market surveillance authority for most prohibited practices, for most Annex III high-risk uses (including biometrics, employment, education and law enforcement) and for the emotion-recognition and biometric-categorisation notices in Article 50(3). It would give the DGCCRF the chatbot disclosure, content marking and deepfake labelling duties in Article 50(1), (2) and (4). On 20 July 2026 the CNIL and the Conseil de l'IA et du numérique published an exploratory note on agentic AI and personal data. It says the GDPR and the AI Act already apply to agents, but that their autonomy, persistent memory and ability to act on the user's behalf call for adapted implementation. France is home to Mistral AI and runs a National AI Strategy with public investment. The PACTE Law (2019) simplified business creation. Sources: https://eur-lex.europa.eu/eli/reg/2026/1744/oj ; https://ai-act-service-desk.ec.europa.eu/en/ai-act/timeline/timeline-implementation-eu-ai-act ; https://digital-strategy.ec.europa.eu/en/policies/guidelines-ai-transparency-obligations ; https://digital-strategy.ec.europa.eu/en/news/special-meeting-ai-scientific-panel ; https://www.senat.fr/dossier-legislatif/pjl25-118.html ; https://www.assemblee-nationale.fr/dyn/17/textes/l17b2518_projet-loi.pdf ; https://www.cnil.fr/fr/ia-agentique-cnil-cianum-note ; https://ec.europa.eu/commission/presscorner/api/files/document/print/en/speech_26_2150/SPEECH_26_2150_EN.pdf ; https://www.cencenelec.eu/news-events/news/2026/en-in-the-spotlight/2026-10-15-en-18286-2026-published-in-ojeu

Key Laws & Regulations

• ◆EU AI Act (Regulation (EU) 2024/1689, amended by Regulation (EU) 2026/1744)
• ◆GDPR (Loi Informatique et Libertés)
• ◆DDADUE bill on AI Act authorities (adopted by the Senate 18 February 2026; pending at the National Assembly)
• ◆PACTE Law
• ◆Digital Republic Act
• ◆E-invoicing reform (receipt mandatory from 1 September 2026)

Business Formation

SAS (Société par Actions Simplifiée) is the preferred entity for startups due to its flexibility. SASU (single-shareholder variant) is also popular. The PACTE Law simplified formation requirements. La French Tech and BPI France provide startup support infrastructure. Since 1 September 2026 every business must be able to receive electronic invoices through an approved platform (plateforme agréée). Large companies and mid-size companies (ETI) must also issue them from that date; SMEs and micro-enterprises must issue them from 1 September 2027. Sales to consumers and to foreign customers are reported to the tax authority separately (e-reporting). Source: https://entreprendre.service-public.gouv.fr/actualites/A18953

Tax Implications

Corporate tax rate is 25%. France offers the Crédit Impôt Recherche (CIR), one of the most generous R&D tax credit programs in Europe, providing up to 30% credit on R&D expenditure.