French online retailers and marketplaces can use AI agents to test cookie banners, check price reduction claims, verify repairability scores and French-language information, confirm marketplace traders' details and test subscription cancellation. Compliance keeps every takedown, remediation and regulator response. The CNIL, the national consumer authority, EU consumer and platform rules, GDPR and the EU AI Act apply.
What does e-commerce compliance involve in France?
Cookies and tracking draw close scrutiny. The CNIL expects consent before non-essential cookies are set, with refusing as easy as accepting. Compliance tests banners, tag behaviour before consent, and what happens when a visitor refuses.
Consumer information is detailed. Price reduction claims must be measured against the lowest price applied over a prior reference period. Certain electronic products must display a repairability score. Consumer information, terms and labelling must be available in French. Customers have an EU withdrawal right for most distance sales, and subscriptions taken online must be cancellable through a simple online function.
Marketplaces carry platform duties. Under EU rules, they must collect and check basic information on traders who sell through them and show consumers whether they are buying from a professional. Add product safety, payments with strong customer authentication, and data protection, and the compliance calendar is full.
Where do AI agents help?
- Cookie behaviour tests (depth 1). The agent loads key pages, records which trackers fire before consent and after refusal, and compares the banner's refusal path with its acceptance path.
- Price reduction checks (depth 1). For each promotion, the agent compares the reference price shown with the price history over the reference period and flags claims that overstate the discount.
- Product information checks (depth 1). The agent checks that electronics listings show the repairability score where required and that consumer information is in French.
- Trader verification (depth 2). The agent checks each marketplace seller's declared registration details, flags gaps and inconsistencies, and drafts the request to the seller for a person to send.
- Subscription cancellation tests (depth 1). The agent tests that customers can find and complete online cancellation without obstacles.
Each use is a control the company already runs, often by sampling. Our piece on whether an AI agent can test compliance controls explains how to turn these into repeatable tests with evidence, rather than one-off checks.
What stays with people?
Suspending a marketplace seller, removing listings, and responding to the CNIL or the consumer authority stay with named staff. Each has consequences for third parties and the company. The agent recommends and drafts; people act.
Remediation decisions stay human. If price reduction claims overstated discounts, deciding how to correct campaigns and whether to compensate customers is a judgement for compliance, legal and the business.
Customer-facing AI assistants need human escalation. Customers must be able to reach a person for complaints and withdrawal requests that the assistant cannot resolve. That reflects our general view that AI compliance agents are second line, never the last word.
Which rules apply in France?
The CNIL enforces GDPR and the rules on cookies and trackers. The national consumer protection authority enforces consumer law, including price reduction rules, consumer information, the withdrawal right and unfair commercial practices. French law adds the repairability score, the French-language requirement for consumer information, and the online cancellation function for subscriptions. EU platform rules require marketplaces to collect and check trader information. EU product safety rules apply to everything sold.
At checkout, PSD2 strong customer authentication applies to many card and account payments, and PCI DSS v4.0 applies if the merchant handles card data.
The EU AI Act (Regulation (EU) 2024/1689) entered into force on 1 August 2024. Under Article 50, people must be told when they are interacting with an AI system, which applies to shopping assistants and customer service chatbots, and certain AI-generated content must be marked. GDPR Article 22 limits decisions based solely on automated processing with significant effects, which can arise in fraud blocks that stop a customer buying.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
How should a French retailer start in the first 90 days?
Month one: run cookie behaviour tests on your main site and app. Fix any tracker firing before consent, then re-test. Keep the evidence; the CNIL may ask.
Month two: add price reduction checks on the next promotional campaign and product information checks across electronics categories.
Month three: for marketplaces, start trader verification at depth 2 with every seller request held for a person. As customers start using their own agents to shop, read our explainer on what agentic commerce is: price and information duties apply to what those agents see too.
Where Pryme fits
Pryme separates the agent that tests cookies from the agent that verifies traders, each certified by Attest on the retailer's own pages and sellers. Seller suspension is outside the verification agent's scope, so an attempt is refused and filed. Every test leaves a dated verdict in an append-only record.
Questions people ask
Must a shopping chatbot say it is an AI?
Under Article 50 of the EU AI Act, people must be told when they are interacting with an AI system unless it is obvious. Make the disclosure clear at the start of the conversation.
Can an agent check a seller's registration details?
It can compare declared details with sources the marketplace trusts and flag gaps. Decisions to restrict or suspend a seller stay with a person.
How does France compare with Australia for e-commerce compliance?
Australia centres on consumer guarantees and mandatory product standards, with no EU cookie or AI Act rules. See our brief on compliance agents in Australian e-commerce.