CNIL plenary agenda examines draft decree authorizing automated processing “PARCOURS” and creation of “DossierFacile”

What happened

On 22 October 2026 the French data‑protection authority CNIL scheduled a plenary session to review a draft deliberation on a decree authorising an automated personal data processing called “PARCOURS”. The agenda also includes a draft deliberation to create a personal data processing named “DossierFacile”. Additional items concern research on workplace discrimination and the use of cameras on aircraft by prison administration services.

Why it matters for trust and compliance

• Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
• The agenda signals upcoming regulatory scrutiny of new automated data‑processing tools and surveillance measures in France.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Map the security requirements to existing controls and close gaps.
3. Inventory AI or automated decision systems in scope and their assessments.