[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzPSgyOslO6DN9pu82mZ0tQ5lOF5WG7arfPb9XRiONQ8":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":20,"creatorUser":180,"creatorUserId":25,"updatedBy":181,"updatedById":25,"publishedBy":27,"publishedById":27,"areaOwnerId":27,"owners":182,"customFields":183,"area":184,"entity":188,"mergedFrom":27,"workflowStep":189,"accountables":195,"responsibles":196,"informedOwners":197,"securityMeasures":198,"personCategories":408,"id":36,"source":54,"label":37,"state":194,"versionDescription":27,"processingType":43,"parentId":27,"areaId":42,"mergeType":27,"readonly":28,"editable":193,"workflowStepId":190,"dateDeployment":27,"dateCreation":41,"dateArchived":27,"datePublication":27,"archived":28,"dateUpdate":40,"reviewDate":27,"nextReviewDate":27,"ref":27,"processingState":27,"description":38,"descriptionHtml":437,"subjectRightProcessDescription":27,"rightOfInformation":438,"rightOfAccess":439,"rightOfRectification":439,"rightOfErasure":439,"rightOfRestriction":439,"rightOfOpposition":439,"rightOfDataPortability":440,"advanceDirectives":439,"advanceDirectivesDescription":27,"rightOfInformationDescription":441,"rightOfAccessDescription":27,"rightOfRectificationDescription":27,"rightOfErasureDescription":27,"rightOfRestrictionDescription":27,"rightOfOppositionDescription":27,"rightOfDataPortabilityDescription":442,"stakeHolders":443,"assessmentScoring":28,"automaticDecision":28,"systematicMonitoring":28,"specialCategoryData":27,"largeScaleCollection":28,"crossReferencing":193,"vulnerablePeople":27,"isDPIARequired":193,"dpiaDate":27,"dpiaExemption":28,"dpiaExemptionJustification":27,"innovativeUse":193,"exclusionBenefitRightContract":28,"recipients":444,"dataControllers":493,"purposes":494,"progression":515,"quality":516,"sensitivity":517,"visible":193,"workspaceId":39,"nbReferences":30,"referenceId":27},[],[],[],[8,13,16],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":12},"5494cd34-13e6-4954-81cd-000195723eb0","Organisme : Public",{"id":17,"label":18,"type":11,"color":19},"f77cd71f-6de1-4b33-ae56-15e8231ebafa","Fonction : Systèmes d'information","#B45309",[21,85,122,151],{"customFields":22,"tags":23,"creator":24,"readonly":28,"purposes":31,"dataProcessings":34,"dataFields":44,"asset":27,"subjectCategories":74,"id":75,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":76,"description":27,"dateCreation":77,"dateUpdate":78,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":79,"baseActiveLegalBasis":80,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":81,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":82,"destructionLegalBasis":27,"dataSetSource":83,"sourceDescription":84,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[32,33],"9f591bf3-6bd3-4d7d-ba3d-ca503d63a9f8","f5fc8ff7-652c-423c-8e70-9404fd005125",[35],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},"35cc4e34-7583-461e-36ba-08df38010b74","Développement et entraînement d'un système d'intelligence artificielle","Ce modèle de traitement est relatif à la constitution d'une base de données d'entraînement, à son annotation, à l'entraînement et à l'évaluation d'un système d'intelligence artificielle contenant des données personnelles, ainsi qu'à la sécurisation de ces opérations et à la gestion des droits des personnes concernées.",68,"2026-11-02T23:00:33.7769223","2026-11-02T23:00:32.6475543",354,"Default",[45,55,62,68],{"id":46,"customFields":47,"ref":27,"archivingPolicy":27,"required":28,"label":48,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":51,"dateUpdate":27,"creator":52,"workflowStepId":53,"workflowStep":27,"source":54},"0a6f51ba-1b5a-48a3-01e2-08df38010ba5",{},"Contenus d'entraînement (textes, images, sons, données tabulaires) pouvant contenir des données personnelles","Current","Other","2026-11-02T23:00:26.8098203",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},83450,"Api",{"id":56,"customFields":57,"ref":27,"archivingPolicy":27,"required":28,"label":58,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":59,"dataType":27,"dateCreation":60,"dateUpdate":27,"creator":61,"workflowStepId":53,"workflowStep":27,"source":54},"7f6cd5d4-4b34-4b64-01e3-08df38010ba5",{},"Identifiants ou pseudonymes des personnes","CivilStatus","2026-11-02T23:00:27.0931801",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":63,"customFields":64,"ref":27,"archivingPolicy":27,"required":28,"label":65,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":66,"dateUpdate":27,"creator":67,"workflowStepId":53,"workflowStep":27,"source":54},"495a33d7-ac85-4162-01e4-08df38010ba5",{},"Source et date de collecte des données","2026-11-02T23:00:27.3523214",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":69,"customFields":70,"ref":27,"archivingPolicy":27,"required":28,"label":71,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":72,"dateUpdate":27,"creator":73,"workflowStepId":53,"workflowStep":27,"source":54},"a30617a7-4131-47d3-01e5-08df38010ba5",{},"Version du jeu de données utilisé pour chaque modèle","2026-11-02T23:00:27.6133383",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"6d4236d9-8d1d-461e-dedb-08df38010b98","Base d'entraînement","2026-11-02T23:00:29.6842852","2026-11-02T23:00:30.1761668","Durée indicative, à fixer et à respecter par l'organisme selon la finalité (par exemple pendant la durée de développement du modèle), avec anonymisation ou pseudonymisation à bref délai après la collecte.","Aucune durée imposée. La CNIL demande de définir une durée de conservation et de la respecter, avec une suppression sécurisée en fin de cycle de vie.","","À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Les fiches CNIL n° 8 et n° 12 recommandent une pseudonymisation ou anonymisation à bref délai et la définition d'une durée, sans chiffre. Aucune source officielle retrouvée pour une durée précise.",{"customFields":86,"tags":87,"creator":88,"readonly":28,"purposes":89,"dataProcessings":91,"dataFields":93,"asset":27,"subjectCategories":114,"id":115,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":116,"description":27,"dateCreation":117,"dateUpdate":118,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":119,"baseActiveLegalBasis":120,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":81,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":82,"destructionLegalBasis":27,"dataSetSource":83,"sourceDescription":121,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[90],"f95f2a51-94e1-4199-9b51-17eb973f6326",[92],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[94,100,107],{"id":95,"customFields":96,"ref":27,"archivingPolicy":27,"required":28,"label":97,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":98,"dateUpdate":27,"creator":99,"workflowStepId":53,"workflowStep":27,"source":54},"ecc31d1a-1d71-46e9-01e6-08df38010ba5",{},"Étiquettes et métadonnées d'annotation","2026-11-02T23:00:27.9299024",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":101,"customFields":102,"ref":27,"archivingPolicy":27,"required":28,"label":103,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":104,"dataType":27,"dateCreation":105,"dateUpdate":27,"creator":106,"workflowStepId":53,"workflowStep":27,"source":54},"2aa2a401-07df-4e01-01e7-08df38010ba5",{},"Identifiant de l'annotateur","ProfessionalLife","2026-11-02T23:00:28.1693218",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":108,"customFields":109,"ref":27,"archivingPolicy":27,"required":28,"label":110,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":111,"dataType":27,"dateCreation":112,"dateUpdate":27,"creator":113,"workflowStepId":53,"workflowStep":27,"source":54},"d4368eef-b2ad-4d7d-01e8-08df38010ba5",{},"Historique des modifications d'annotation","ConnectionData","2026-11-02T23:00:28.4283247",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"a05c66e5-094c-45b8-dedc-08df38010b98","Annotations","2026-11-02T23:00:30.4135552","2026-11-02T23:00:30.9007937","Durée indicative, alignée sur celle de la base d'entraînement à laquelle les annotations se rattachent.","Aucune durée imposée.","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). La fiche CNIL sur l'annotation ne traite pas de durée de conservation. Aucune source officielle retrouvée.",{"customFields":123,"tags":124,"creator":125,"readonly":28,"purposes":126,"dataProcessings":127,"dataFields":129,"asset":27,"subjectCategories":142,"id":143,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":144,"description":27,"dateCreation":145,"dateUpdate":146,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":147,"baseActiveLegalBasis":148,"baseActiveRetentionDuration":149,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":81,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":82,"destructionLegalBasis":27,"dataSetSource":83,"sourceDescription":150,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[33],[128],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[130,136],{"id":131,"customFields":132,"ref":27,"archivingPolicy":27,"required":28,"label":133,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":111,"dataType":27,"dateCreation":134,"dateUpdate":27,"creator":135,"workflowStepId":53,"workflowStep":27,"source":54},"f1d3d097-3656-4ef5-01e9-08df38010ba5",{},"Identifiant de l'utilisateur ayant accédé aux données ou aux modèles","2026-11-02T23:00:28.6810769",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":137,"customFields":138,"ref":27,"archivingPolicy":27,"required":28,"label":139,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":111,"dataType":27,"dateCreation":140,"dateUpdate":27,"creator":141,"workflowStepId":53,"workflowStep":27,"source":54},"e6236f26-a639-498c-01ea-08df38010ba5",{},"Date et heure, type d'opération (accès, ajout, modification, suppression)","2026-11-02T23:00:28.9333568",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"0d482341-c35c-4ed5-dedd-08df38010b98","Journaux d'accès et de sécurité","2026-11-02T23:00:31.1587189","2026-11-02T23:00:31.6383428","6 mois à 1 an dans le cas général (recommandation CNIL sur la journalisation), plus longtemps seulement si c'est justifié et documenté.","Recommandation CNIL (délibération n° 2021-122 du 14 octobre 2021), non une obligation légale.",525600,"Recommandation CNIL relative à la journalisation : conservation de 6 mois à 1 an dans la plupart des cas. Ce n'est pas une obligation légale.",{"customFields":152,"tags":153,"creator":154,"readonly":28,"purposes":155,"dataProcessings":157,"dataFields":159,"asset":27,"subjectCategories":172,"id":173,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":174,"description":27,"dateCreation":175,"dateUpdate":176,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":177,"baseActiveLegalBasis":178,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":81,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":82,"destructionLegalBasis":27,"dataSetSource":83,"sourceDescription":179,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[156],"0935b482-a440-4661-ad1c-cb50bfa16bc1",[158],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[160,166],{"id":161,"customFields":162,"ref":27,"archivingPolicy":27,"required":28,"label":163,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":59,"dataType":27,"dateCreation":164,"dateUpdate":27,"creator":165,"workflowStepId":53,"workflowStep":27,"source":54},"dddb4d74-ba9d-44b3-01eb-08df38010ba5",{},"Identité et coordonnées du demandeur","2026-11-02T23:00:29.196554",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":167,"customFields":168,"ref":27,"archivingPolicy":27,"required":28,"label":169,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":170,"dateUpdate":27,"creator":171,"workflowStepId":53,"workflowStep":27,"source":54},"612197d0-5cb4-447b-01ec-08df38010ba5",{},"Objet de la demande et réponse apportée","2026-11-02T23:00:29.4467497",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"ec0aafce-a7ab-4895-dede-08df38010b98","Demandes d'exercice des droits","2026-11-02T23:00:31.9034756","2026-11-02T23:00:32.3860972","Durée indicative, à fixer par l'organisme (par exemple le temps du traitement de la demande, puis conservation limitée comme preuve).","Aucune durée imposée par les sources consultées.","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée.",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],{},{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":42,"type":185,"parentId":27,"ref":27,"label":186,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":187,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},"Entity","Entité","FR",{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":42,"type":185,"parentId":27,"ref":27,"label":186,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":187,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},{"id":190,"label":191,"color":192,"order":30,"itemLimit":27,"type":11,"finalStep":28,"initialStep":193,"authorizedRole":27,"authorizedRoleId":27,"descriptionHtml":27,"mappedState":194},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[199,213,225,236,249,260,271,281,291,302,313,323,333,344,355,366,377,387,397],{"date":200,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":202,"id":203,"ref":27,"label":204,"type":205,"description":206,"relatedRisk":27,"moreDetailsUrl":207,"dateCreation":208,"dateUpdate":27,"tags":209,"attachments":210,"creatorUser":211,"workflowStepId":212,"workflowStep":27},"2026-11-03T11:38:03.6256155Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},90384,{"date":214,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":215,"id":216,"ref":27,"label":217,"type":205,"description":218,"relatedRisk":27,"moreDetailsUrl":219,"dateCreation":220,"dateUpdate":221,"tags":222,"attachments":223,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.625619Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":226,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":227,"id":228,"ref":27,"label":229,"type":205,"description":230,"relatedRisk":27,"moreDetailsUrl":231,"dateCreation":232,"dateUpdate":233,"tags":234,"attachments":235,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256196Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":237,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":238,"id":239,"ref":27,"label":240,"type":241,"description":242,"relatedRisk":243,"moreDetailsUrl":244,"dateCreation":245,"dateUpdate":246,"tags":247,"attachments":248,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256201Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":250,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":251,"id":252,"ref":27,"label":253,"type":205,"description":254,"relatedRisk":27,"moreDetailsUrl":255,"dateCreation":256,"dateUpdate":257,"tags":258,"attachments":259,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256205Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":261,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":262,"id":263,"ref":27,"label":264,"type":241,"description":265,"relatedRisk":27,"moreDetailsUrl":266,"dateCreation":267,"dateUpdate":268,"tags":269,"attachments":270,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256214Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":272,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":273,"id":274,"ref":27,"label":275,"type":241,"description":276,"relatedRisk":27,"moreDetailsUrl":277,"dateCreation":232,"dateUpdate":278,"tags":279,"attachments":280,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.625622Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":282,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":283,"id":284,"ref":27,"label":285,"type":241,"description":286,"relatedRisk":27,"moreDetailsUrl":287,"dateCreation":232,"dateUpdate":288,"tags":289,"attachments":290,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256227Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":292,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":293,"id":294,"ref":27,"label":295,"type":296,"description":297,"relatedRisk":27,"moreDetailsUrl":298,"dateCreation":232,"dateUpdate":299,"tags":300,"attachments":301,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256231Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":303,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":304,"id":305,"ref":27,"label":306,"type":205,"description":307,"relatedRisk":27,"moreDetailsUrl":308,"dateCreation":309,"dateUpdate":27,"tags":310,"attachments":311,"creatorUser":312,"workflowStepId":212,"workflowStep":27},"2026-11-03T11:38:03.6256238Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":314,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":315,"id":316,"ref":27,"label":317,"type":241,"description":318,"relatedRisk":27,"moreDetailsUrl":319,"dateCreation":232,"dateUpdate":320,"tags":321,"attachments":322,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256243Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":324,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":325,"id":326,"ref":27,"label":327,"type":241,"description":328,"relatedRisk":27,"moreDetailsUrl":329,"dateCreation":232,"dateUpdate":330,"tags":331,"attachments":332,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.625625Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":334,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":335,"id":336,"ref":27,"label":337,"type":241,"description":338,"relatedRisk":27,"moreDetailsUrl":339,"dateCreation":340,"dateUpdate":27,"tags":341,"attachments":342,"creatorUser":343,"workflowStepId":212,"workflowStep":27},"2026-11-03T11:38:03.6256256Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":345,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":346,"id":347,"ref":27,"label":348,"type":205,"description":349,"relatedRisk":27,"moreDetailsUrl":350,"dateCreation":351,"dateUpdate":27,"tags":352,"attachments":353,"creatorUser":354,"workflowStepId":212,"workflowStep":27},"2026-11-03T11:38:03.6256261Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":356,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":357,"id":358,"ref":27,"label":359,"type":205,"description":360,"relatedRisk":27,"moreDetailsUrl":361,"dateCreation":362,"dateUpdate":27,"tags":363,"attachments":364,"creatorUser":365,"workflowStepId":212,"workflowStep":27},"2026-11-03T11:38:03.6256265Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":367,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":368,"id":369,"ref":27,"label":370,"type":241,"description":371,"relatedRisk":27,"moreDetailsUrl":372,"dateCreation":373,"dateUpdate":27,"tags":374,"attachments":375,"creatorUser":376,"workflowStepId":212,"workflowStep":27},"2026-11-03T11:38:03.6256269Z",{},"72ae0e0e-a9ae-4999-69b7-08df38010b92","Sécurité de l'intelligence artificielle","Qu’il s’agisse de l’entraînement d’un nouveau modèle ou de l’intégration d’un modèle existant dans un logiciel ou un écosystème d’applications, le développement d’un système d’intelligence artificielle (IA) nécessite la mise en œuvre de certaines mesures de sécurité spécifiques.","https://www.cnil.fr/fr/securite-intelligence-artificielle-conception-et-apprentissage","2026-11-02T20:57:45.237474",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":378,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":379,"id":380,"ref":27,"label":381,"type":205,"description":382,"relatedRisk":27,"moreDetailsUrl":383,"dateCreation":232,"dateUpdate":384,"tags":385,"attachments":386,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256276Z",{},"5c75cb90-f2b8-43c2-8bcf-808d92f00aa6","Encadrement des développements informatiques","La protection des données à caractère personnel doit être intégrée dans le cycle de développement informatique dès les phases de conception et pour les configurations par défaut afin d’offrir aux personnes concernées une meilleure maîtrise de leurs données et de limiter les erreurs, pertes, modifications non autorisée, ou mauvais usages de celles-ci dans les applications.","https://www.cnil.fr/fr/securite-encadrer-les-developpements-informatiques","2026-11-02T20:57:27.2009232",[],[],{"date":388,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":389,"id":390,"ref":27,"label":391,"type":205,"description":392,"relatedRisk":27,"moreDetailsUrl":393,"dateCreation":232,"dateUpdate":394,"tags":395,"attachments":396,"creatorUser":27,"workflowStepId":224,"workflowStep":27},"2026-11-03T11:38:03.6256281Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":398,"state":201,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":399,"id":400,"ref":27,"label":401,"type":205,"description":402,"relatedRisk":27,"moreDetailsUrl":403,"dateCreation":404,"dateUpdate":27,"tags":405,"attachments":406,"creatorUser":407,"workflowStepId":212,"workflowStep":27},"2026-11-03T11:38:03.6256287Z",{},"eba73701-684c-4de3-69ba-08df38010b92","RGS : référentiel général de sécurité des autorités administratives","Appliquer le référentiel général de sécurité (RGS) de l'ANSSI : homologation de sécurité des systèmes d'information des autorités administratives (ordonnance n° 2005-1516).","https://cyber.gouv.fr/le-referentiel-general-de-securite-rgs","2026-11-02T20:57:48.3845718",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[409,419,428],{"subjectCategory":410,"displayName":412,"id":417,"subjectCategoryId":411,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":418},{"id":411,"label":412,"ref":27,"dateCreation":413,"dateUpdate":27,"creatorUserId":25,"creatorUser":414,"description":27,"minorConcerned":28,"workflowStepId":415,"workflowStep":27,"dataRetentionRules":416},"082fe41e-4bee-44c4-373a-08df38010be4","Personnes dont les données servent à l'entraînement","2026-11-02T23:00:26.5265073",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},97318,[],"b0118bab-b8cc-45b3-e6ad-08df38010be0",[],{"subjectCategory":420,"displayName":422,"id":426,"subjectCategoryId":421,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":427},{"id":421,"label":422,"ref":27,"dateCreation":423,"dateUpdate":27,"creatorUserId":27,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":424,"workflowStep":27,"dataRetentionRules":425},"8b9dd7e2-2eb8-4ef5-2689-08dac757bbf1","Employés","2022-11-15T22:21:35.8123871",97319,[],"d2cff91c-cde6-4b91-e6ae-08df38010be0",[],{"subjectCategory":429,"displayName":431,"id":435,"subjectCategoryId":430,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":436},{"id":430,"label":431,"ref":27,"dateCreation":432,"dateUpdate":27,"creatorUserId":433,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":424,"workflowStep":27,"dataRetentionRules":434},"1342173f-ef7e-432a-a1b8-01a0b9b1dd9e","Utilisateurs","2023-03-22T17:20:52.1013434",31,[],"b0ecb66f-0c25-4613-e6af-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Le règlement (UE) 2024/1689 sur l'IA n'a pas pu être lu à la source et n'est pas repris ici : à compléter selon le niveau de risque de votre système.\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/base-legale-interet-legitime-developpement-systeme\">CNIL, Fiche IA n° 8 : Mobiliser la base légale de l'intérêt légitime pour développer un système d'IA\u003C/a>. Les trois conditions de l'intérêt légitime et les mesures de réduction des risques (pseudonymisation rapide, limitation de la mémorisation, droit d'opposition préalable). Aucune durée chiffrée.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/ia-informer-les-personnes-concernees\">CNIL, Fiche IA n° 9 : Informer les personnes concernées\u003C/a>. Contenu et moment de l'information (articles 13 et 14 du RGPD), exceptions pour efforts disproportionnés, information publique générale.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/ia-respecter-lexercice-des-droits-des-personnes\">CNIL, Fiche IA n° 10 : Respecter et faciliter l'exercice des droits des personnes concernées\u003C/a>. Exercice des droits sur la base d'apprentissage et sur le modèle, réentraînement, filtres de sortie, dérogations.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/ia-annoter-les-donnees\">CNIL, Fiche IA n° 11 : Annoter les données\u003C/a>. Minimisation des annotations, accès limités, journalisation des modifications, encadrement des sous-traitants annotateurs. Aucune durée.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/ia-garantir-la-securite-du-developpement\">CNIL, Fiche IA n° 12 : Garantir la sécurité du développement d'un système d'IA\u003C/a>. Contrôle des accès, journalisation des accès et modifications, versionnement des jeux de données, audits, définition et respect d'une durée de conservation sans chiffre.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/realiser-une-analyse-dimpact-si-necessaire\">CNIL, Fiche IA n° 5 : Réaliser une analyse d'impact si nécessaire\u003C/a>. Critères d'AIPD applicables au développement d'IA (usage innovant, grande échelle, croisement, données sensibles), précisions propres à l'IA.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/securite-intelligence-artificielle-conception-et-apprentissage\">CNIL, Sécurité : Intelligence artificielle, conception et apprentissage (guide de la sécurité des données personnelles)\u003C/a>. Mesures de sécurité pour les jeux de données, les accès, les tests et les audits. Aucune mesure de journalisation précise ni durée.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044283637\">CNIL, Délibération n° 2021-122 du 14 octobre 2021 portant adoption d'une recommandation relative à la journalisation (texte lu sur Légifrance, rubrique CNIL)\u003C/a>. Conservation des journaux de 6 mois à 1 an dans le cas général, contenu des journaux, séparation du système principal.\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","NonApplicable","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).","Droit à la portabilité non applicable : il ne vise que les traitements automatisés fondés sur le consentement ou un contrat (art. 20 du RGPD).",[],[445,453,459,465,471,486],{"purposes":446,"dataRetentionRules":27,"parentId":27,"children":447,"displayName":448,"label":448,"transfers":449,"recipientType":450,"type":451,"jobTitle":27,"id":452,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Équipe de data science et d'ingénierie IA",[],"InternalService","Recipient","2e2cdf89-c6b7-4508-a08e-08df38010bcb",{"purposes":454,"dataRetentionRules":27,"parentId":27,"children":455,"displayName":456,"label":456,"transfers":457,"recipientType":450,"type":451,"jobTitle":27,"id":458,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Annotateurs internes habilités",[],"eb6cedd6-9dc2-450e-a08f-08df38010bcb",{"purposes":460,"dataRetentionRules":27,"parentId":27,"children":461,"displayName":462,"label":462,"transfers":463,"recipientType":450,"type":451,"jobTitle":27,"id":464,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Délégué à la protection des données et service juridique",[],"a9780e06-5690-4d71-a090-08df38010bcb",{"purposes":466,"dataRetentionRules":27,"parentId":27,"children":467,"displayName":468,"label":468,"transfers":469,"recipientType":450,"type":451,"jobTitle":27,"id":470,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Service informatique et responsable de la sécurité",[],"a3d3cccc-b948-4158-a091-08df38010bcb",{"purposes":472,"dataRetentionRules":27,"parentId":27,"children":473,"displayName":474,"label":475,"transfers":476,"recipientType":477,"type":451,"jobTitle":27,"id":478,"actorId":479,"actor":480,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Sous-traitant à préciser","Prestataire d'annotation de données",[],"Vendor","fbf4237e-deab-450f-a092-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":474,"id":479,"ref":27,"dateCreation":481,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":482,"actorType":483,"description":484,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":485,"areaId":27,"source":54},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,{"purposes":487,"dataRetentionRules":27,"parentId":27,"children":488,"displayName":474,"label":489,"transfers":490,"recipientType":477,"type":451,"jobTitle":27,"id":491,"actorId":479,"actor":492,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Hébergeur ou fournisseur de capacité de calcul",[],"54351f8d-90b4-46f1-a093-08df38010bcb",{"label":474,"id":479,"ref":27,"dateCreation":481,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":482,"actorType":483,"description":484,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":485,"areaId":27,"source":54},[],[495,501,505,509],{"id":496,"key":32,"label":497,"description":498,"legalBasis":499,"legalBasisText":500,"legalBasisDescription":27,"readonly":28},"70a1e836-c1eb-4e4c-106f-08df38010b80","Constitution et gestion de la base d'entraînement","Collecte, tri, nettoyage, pseudonymisation et versionnement des données utilisées pour entraîner le modèle. La CNIL indique que l'intérêt légitime est une base légale possible pour le développement d'un système d'IA, à condition de remplir trois conditions (intérêt légitime, nécessité, mise en balance) et de prévoir des garanties. Si ces conditions ne sont pas réunies, le consentement ou une autre base doit être recherché.","LegitimateInterest","Intérêts légitimes du responsable du traitement ou d'un tiers",{"id":502,"key":90,"label":503,"description":504,"legalBasis":499,"legalBasisText":500,"legalBasisDescription":27,"readonly":28},"ab354323-9c48-4b9c-1070-08df38010b80","Annotation des données","Ajout d'étiquettes ou de commentaires aux données pour l'apprentissage. L'annotation doit se limiter à ce qui est nécessaire à l'entraînement et rester dans la finalité définie au départ (fiche CNIL sur l'annotation).",{"id":506,"key":33,"label":507,"description":508,"legalBasis":499,"legalBasisText":500,"legalBasisDescription":27,"readonly":28},"67c5aca9-fedd-491a-1071-08df38010b80","Entraînement, évaluation et sécurisation du modèle","Entraînement, tests de performance et de biais, contrôle des sorties, audits de sécurité et traçabilité des accès aux données et aux modèles, comme le recommande la fiche CNIL sur la sécurité du développement.",{"id":510,"key":156,"label":511,"description":512,"legalBasis":513,"legalBasisText":514,"legalBasisDescription":27,"readonly":28},"a68f4345-abb9-4015-1072-08df38010b80","Information des personnes et gestion de leurs droits","Publication de l'information, traitement des demandes d'accès, d'opposition, d'effacement ou de rectification portant sur les données d'apprentissage ou sur le modèle (articles 12 à 22 du RGPD).","LegalCommitment","Obligation légale",100,56,23]