ps must be carried out in compliance with the principles of the French Data Protection Act and the GDPR. The purpose of the AI system must be established at the design stage, and it must be legitimate and clear. Respect for this principle is especially important when large amounts of personal data are involved. Implementation of an AI system requires two phases: learning and production. Both phases must comply with data protection principles.