The photograph was taken at a street market on the Rue Dejean in Château Rouge. A resident had posted it to a local neighbourhood Facebook group, a candid shot of her daughter and a friend browsing vegetables. Six months later, a version of the same image — faces clearly visible, slightly colour-corrected — turned up in a promotional flyer for a catering company she had never heard of, distributed in letterboxes across the 10th arrondissement. She had never given permission. Nobody asked.
This is the quiet, accumulating crisis that digital rights advocates have been warning French regulators about for two years. Automated image-scraping tools, many of them bundled into affordable AI packages marketed to small businesses, are pulling photographs from semi-public social media posts, local event pages, and community forums. They then reuse, recolour, and redistribute those images — sometimes as advertising material, sometimes to populate fake review profiles on platforms like Google Maps and Pages Jaunes. The practice sits in a legal grey zone that France's updated data protection framework, brought under CNIL oversight following the European AI Act's June 2025 provisional application, is only beginning to address.
The timing matters. Paris is in the middle of a major post-Olympics identity project: the Mairie de Paris has spent the past eighteen months pushing the 'Paris en Commun' legacy programme, which encourages neighbourhood associations and local traders to build a digital presence linked to the Grand Paris Express corridor communities. That well-intentioned push has put thousands of new, lightly moderated photographs of ordinary Parisians online. Scammers and unscrupulous marketing firms have noticed.
Communities at the Sharpest End
The complaints are not evenly distributed. Residents in the northern banlieues — particularly around the Saint-Denis Plaine commune, one of the most intensively photographed areas during the Paris 2024 construction boom — report a disproportionate volume of unauthorised image use. The association Droit au Logement Seine-Saint-Denis, based in Saint-Denis, began fielding queries about duplicate images in late 2024. By March 2026, it had logged more than 140 separate complaints from residents across 93, many of them connected to housing platform listings where photographs of their homes — taken without consent during neighbourhood surveys — had reappeared on unrelated rental advertisements.
In the 18th arrondissement, the volunteer-run digital literacy workshop Numérique en Partage, which operates out of a community centre on the Rue Ordener, has run three emergency sessions since January specifically on image rights. Facilitators there say attendance at those sessions has doubled compared with the equivalent period in 2025, with participants ranging in age from teenagers to retirees in their seventies. One session in April drew 47 people to a room designed for 30.
What the Numbers Show — and What Comes Next
CNIL, the French data protection authority, received 3,200 complaints related to unauthorised image use in 2025, a 38 percent rise on 2024 figures. The authority issued its first formal fines under the AI Act's image-scraping provisions in April 2026, penalising two French-registered marketing firms a combined €280,000. Enforcement, advocates say, remains far behind the scale of the problem.
The European AI Act's Article 53 obligations — requiring providers of general-purpose AI systems to publish summaries of training data — formally take full effect for smaller operators in August 2026. That deadline is creating pressure on platforms to act before regulators do.
For anyone who suspects their image has been duplicated and used without consent, CNIL's online complaint portal at cnil.fr accepts submissions in French and English and typically acknowledges cases within 15 working days. The Rue Ordener workshop at Numérique en Partage runs its next image-rights session on July 18th, and registration is free. The woman from Château Rouge said she eventually got the catering flyer pulled after filing a CNIL notice — it took eleven weeks. Her advice, offered at the April session, was direct: watermark everything, even photographs you think are only for friends.