France - Algorithmic Decision Rights (2017-330)

Overview

Decree No. 2017-330 (14 March 2017) concretises the right created by Article 4 of the Law for a Digital Republic (Loi n° 2016-1321 of 7 October 2016) by prescribing how individuals can obtain intelligible information when an administrative individual decision is taken on the basis of an algorithmic processing. The decree inserts two regulatory articles into the Code of Relations between the Public and the Administration (R.311-3-1-1 and R.311-3-1-2) and defines the items that administrations must communicate on request, subject to protected secrets. The official text is published on the French government legal portal: Decree n°2017-330 on Legifrance. It was published in the Journal Officiel on 16 March 2017 and entered into force on 1 September 2017.

Definitions

Key terms used in the decree and related CRPA provisions include: "decision individuelle" (an administrative act addressed to an identified person); "traitement algorithmique" (algorithmic processing used to produce results contributing to decision-making); "mention explicite" (the mandatory notice in the decision informing the person of the algorithmic basis); and "forme intelligible" (the obligation to provide explanations in an understandable way). The decree refers to "rules defining the processing" (rules and parameters that determine algorithm behaviour), "data and sources" (input items used by the algorithm), and "operations" (transformations, computations or steps performed by the system).

Governance and Institutional Framework

The decree falls within the CRPA and is administered by the French government with execution responsibilities allocated to the ministers named in Article 4 of the text (e.g., Minister of Economy and Finance, Minister for Overseas Territories, Secretary of State for State Reform and Simplification, Secretary of State for Industry, Digital and Innovation). It establishes information duties for public administrations and provides an administrative remedy route via the Commission d'accès aux documents administratifs (CADA). Relevant official resources include the primary decree text on Legifrance, the Law for a Digital Republic available through WIPO Lex and guidance on access procedures on Service-public.fr. The decree also interacts with other regulatory acts (notably Decree No. 2017-331) that address reference data publication and quality.

Key Focus Areas

The decree’s principal focus areas are: procedural transparency (requiring an explicit notice in algorithm-informed decisions), informational access (obligation to provide intelligible details on contribution, data, parameters/weights and operations), protection of legally-protected secrets (non-disclosure exceptions), remedies and administrative oversight (CADA as the first recourse in case of refusal), and territorial application (provisions extended in the CRPA tables to overseas collectivities). Practically, the decree is aimed at reducing the opacity of automated or algorithm-assisted administrative decisions so that affected persons can understand how an algorithm shaped a decision that concerns them and, where appropriate, contest it. It is complementary to data protection rules (notably the GDPR and French data-protection regime) and to public-sector transparency/publishing obligations introduced by the Digital Republic law and subsequent decrees (e.g., thresholds for online publication of algorithm rules and reference data defined in Decree No. 2017-331).

Implementation Framework

Administrations must include an explicit mention in any individual decision based on algorithmic processing indicating: the processing purpose, how to request communication of rules and main implementation characteristics, how to exercise that right and how to seize the CADA in case of refusal. Upon request, administrations shall communicate in a form intelligible the degree and mode of algorithm contribution to the decision, data and sources used, parameters and weighting applied to the requester, and the operations executed by the processing. Disclosures are to be made subject to protection of secrets established by law (e.g., national defence, judicial secrecy, protected trade secrets). The decree leverages existing CRPA procedural timeframes and administrative channels for handling access requests and appeals.

Monitoring and Evaluation

Monitoring relies on administrative oversight (internal PRADA correspondents in public bodies as applicable), CADA opinions and periodic reviews of practice by ministries and the Conseil d'Etat when requested. The CADA receives and issues opinions on refusals or tacit refusals; its findings are publicly accessible and provide a transparency-check on how administrations apply the decree. The decree does not create a new inspection body or reporting duty, but its operation can be assessed through CADA caseload metrics, judicial case law on refusals and administrative practice (publication of algorithm rules where applicable under complementary decrees).

Penalties, Liability, and Appeals

The decree itself does not establish new penal sanctions. Remedies for non-compliance are procedural: administrative silence or a refusal may be the subject of a mandatory referral to the CADA and thereafter contentieux devant le juge administratif (administrative litigation). The administrative judge can annul illegal refusals and, at the applicant’s request, can order communication under astreinte (court-ordered fines for non-compliance with injunctions). Separate liability or sanctions may emerge under other legal frameworks (data-protection enforcement by the CNIL, trade-secret protection or general administrative liability rules) depending on the facts.

Relationship to Other Instruments

Decree No. 2017-330 implements Article L.311-3-1 CRPA added by the Law for a Digital Republic (Loi n° 2016-1321). It is functionally linked to Decree No. 2017-331 (data reference publication and quality), Decree No. 2016-1922 (publication thresholds for document availability online), CRPA procedural provisions (silence, deadlines, recourse rules) and to the French (and EU) data-protection regime where personal data are involved. Together these instruments form a transparency and access ecosystem for algorithmic public decision-making while preserving legally protected secrets.

International Alignment

The decree is an early national measure addressing algorithmic transparency in public administration and aligns with international trends promoting explainability and administrative transparency. It complements EU-level data-protection law (GDPR) and broader OECD recommendations on AI and public-sector algorithm use. The approach — mandatory notice plus the right to intelligible information on the algorithm's role and inputs — is broadly consistent with emerging best practices in administrative law and human-rights focused governance of automated decision-making.

Implementation Timeline

Sources and References