France's Liste d'Opposition (Bloctel) and AI Voice Agents: A 2026 Compliance Guide

France's Bloctel list is being abolished. Not reformed, not tightened up a bit — abolished. The law passed in May 2025, and as of August 11, 2026, any business making outbound marketing calls to French consumers needs explicit opt-in consent. No list you could file away as "Bloctel-checked" will protect you. If you're running AI voice agents for B2C markets in France, you have until that deadline to rebuild your consent architecture from scratch.

For B2B operators, the picture is different and considerably simpler. Bloctel AI voice agent compliance only applies to consumer calls — business-to-business outreach is entirely outside the framework. But GDPR isn't, and the CNIL has been getting stricter about AI voice calls specifically.

Here's what you actually need to know — current rules, what changes in 2026, the CNIL's position on AI consent, and a pre-launch checklist for any outbound campaign targeting France.

What Bloctel Is and Who It Applies To

Bloctel is France's national do-not-call registry, officially the Liste d'Opposition au Démarchage Téléphonique. Any French resident can register their number for free. Once registered, businesses can't call that number for commercial purposes — with one exception: companies that already have an existing contractual relationship with the person.

The registry launched in 2016. By 2024, over 4 million numbers were registered. Businesses are required to scrub their lead lists against Bloctel within 30 days before each campaign — not once on setup, before every campaign. Both the DGCCRF (France's consumer protection authority) and the CNIL (data protection regulator) have enforcement powers, and they've been using them. The DGCCRF issued over €4 million in fines in 2023 alone.

Bloctel covers B2C calls to personal numbers. It doesn't cover B2B calls, journalists, non-profits, or pollsters. Those categories operate under different frameworks.

The B2B Exemption: Why Most Sales Teams Aren't Affected

Bloctel only applies to calls made to consumers on personal numbers. Business phone numbers — landlines or mobiles used professionally — are completely outside the scope of the law. If you're running AI voice agents for B2B lead qualification in France — calling companies to qualify prospects, book demos, or reactivate lapsed accounts — Bloctel simply doesn't apply.

That said, GDPR still applies to B2B calling. You need a legitimate interest basis for processing contact data, a clear opt-out mechanism, and in most cases call recording consent. The French CNIL has been stricter than most EU regulators on documenting legitimate interest properly. Vague claims won't hold up during an audit. "We need to call prospects to grow our business" isn't documentation. A completed Legitimate Interest Assessment (LIA) is.

Also worth noting: the August 2026 opt-in requirement applies to B2C marketing calls specifically. B2B outbound calling isn't being swept up in the new law. So if your target market is French businesses rather than consumers, the 2026 deadline changes nothing for you.

Current French Calling Rules (Until August 2026)

Until the new law takes effect, the existing Bloctel framework sets strict constraints on outbound calling. These aren't guidelines.

• Allowed hours: 10 AM to 1 PM, 2 PM to 8 PM (CET)
• Allowed days: Monday through Friday only — no Saturdays, no Sundays, no public holidays
• Bloctel scrub frequency: Must check the registry within 30 days before each campaign launch
• Caller ID requirement: Must display a valid, callable French number — hidden or non-geographic numbers are prohibited for B2C marketing
• Existing customer exemption: Companies with an active contractual relationship can call outside the restricted windows

For AI autodialers running high-volume campaigns, the timezone scheduling piece matters most. A campaign that dials at 8:05 PM CET is already in violation. At scale, those edge-case errors happen constantly if timezone enforcement isn't built into the platform itself.

CNIL Rules for AI Voice Agents: The Consent Problem

The CNIL has published specific guidance on AI voice agents and consent. Their position has sharpened since 2022. A few things they've been explicit about:

• Staying on the line is not consent. A consumer who doesn't hang up hasn't agreed to anything. GDPR consent requires a positive, unambiguous act — a form submission, a signed document, or a clear verbal agreement that can be documented.
• Voice can be biometric data. If your AI system uses voice characteristics to identify callers — even as a secondary function — that triggers GDPR Article 9, the highest-protection category. This applies even if caller identification isn't the primary purpose of the system.
• Automated profiling during calls. If your AI scores lead intent or analyzes sentiment during the call and uses that to make routing decisions or CRM updates, you may need to inform the caller under GDPR Article 22. Real-time CRM scoring based on call content falls into this category.
• AI disclosure on the call. The call must identify itself as automated and disclose that the caller is speaking with an AI. Passing an AI off as a human agent violates French consumer protection law independently of GDPR.

Teams already running AI calling in regulated financial environments know this CNIL consent friction well. France is applying the same logic to voice that financial regulators have been applying to digital contact for years.

August 2026: Bloctel Ends, Opt-In Becomes the Default

The legislation passed May 21, 2025. As of August 11, 2026, Bloctel is gone and replaced by a full opt-in requirement. Any business wanting to make outbound marketing calls to French consumers needs prior written consent. Not opt-out — opt-in.

That's a significant shift for outbound teams. Right now, the default is "call unless blocked." After August 2026, the default is "don't call unless you have documented consent." B2C lead lists built without explicit consent records become useless for outbound calling in France on that date.

Existing customer relationships still allow outbound contact. The contractual relationship exemption survives the new law. But cold outreach to prospects without prior consent is over for B2C. For AI-powered campaigns targeting French consumers, the consent collection process has to start before the first call is ever made — not during it.

If you're planning outbound campaigns into France and need to understand what's compliant now versus after August 2026, book a 15-minute compliance walkthrough with the TopCalls team. We've built GDPR-compliant voice calling architectures for European markets.

Fines and Enforcement: The Numbers Are Climbing

Current Bloctel violations carry fines of €75,000 for individuals and €375,000 for companies. Those aren't theoretical limits. The DGCCRF issued over €4 million in Bloctel-related penalties in 2023. Enforcement is active.

The 2026 framework increases those caps substantially. The new maximum penalties are €500,000 or 20% of annual global turnover — whichever is higher. For a company with €10M in annual revenue, a serious violation could cost €2 million. CNIL GDPR fines sit on top of that as a completely separate exposure.

France is following a pattern visible elsewhere. UAE and Saudi Arabia's outbound calling regulations similarly escalated from administrative warnings to substantial fines between 2024 and 2025. The direction is consistent: regulators are moving from opt-out registries toward opt-in consent requirements, and penalties are rising.

What a Compliant AI Calling Setup Looks Like for France

The compliance burden isn't just about checking a list. A platform running AI voice agents into French markets needs end-to-end compliance infrastructure built into the calling stack — not patched in after a violation lands.

• Timezone-aware campaign scheduling. The platform has to enforce the 10 AM to 8 PM window (with the 1-2 PM break) automatically. Manual timezone management at volume is a compliance risk — it breaks the first time someone misconfigures a list.
• Consent management with audit trail. Every number dialed needs a timestamped consent record — source, date, method — queryable during a CNIL audit. This can't be a spreadsheet. It needs to be searchable by phone number at minimum.
• AI disclosure on first contact. The system must identify itself as automated at the start of the call. This goes in the opening script — not buried in a disclosure URL you mention after the pitch.
• Data residency and DPA. If call recordings are stored and the caller is a French resident, you need a signed Data Processing Agreement with your vendor and EU-based data storage. Using a US-hosted platform without a DPA is a GDPR violation on its own.
• Valid caller ID. French regulations require displaying a real, callable French number for B2C marketing calls. Anonymous numbers or international numbers without a local overlay violate current law.

Legal industry teams have been managing these disclosure and consent requirements for years. AI voice agents for legal client intake already operate under some of the strictest consent rules in any industry. The technical requirements for French B2C calling compliance look almost identical.

Pre-Launch Checklist for AI Calling in France

Before running any AI voice campaign targeting French B2C numbers, work through this:

1. Scrub the lead list against the Bloctel registry — must be within 30 days before launch
2. Verify consent records for all numbers (document source, date, and consent method)
3. Confirm campaign schedule stays inside 10 AM to 1 PM and 2 PM to 8 PM CET, Monday to Friday
4. Verify caller ID displays a valid, callable French number
5. Add AI disclosure to the call opening (e.g. "This is an automated call from [Company]...")
6. Enable call recording disclosure in the script (required under French consumer law)
7. Confirm your platform vendor has signed a DPA covering French resident call data

1. Check that call recordings and transcripts are stored in EU infrastructure
2. Start building your August 2026 opt-in consent flows now — retrofitting a consent program in the final months is chaotic

Teams already operating in regulated industries have a head start here. Healthcare operators who've navigated HIPAA-compliant AI calling already maintain the consent documentation and audit trail infrastructure that French law now requires. The underlying systems transfer directly.

Build Your Consent Architecture Before August 2026

Bloctel compliance in 2026 isn't about checking a list. It's about rebuilding how you collect consent from French consumers before you ever dial the first number. The companies that treat the August 2026 deadline as someone else's future problem will find themselves sitting on lead lists that have zero legal basis for outbound calling in France.

TopCalls ships with GDPR-ready calling infrastructure that includes consent tracking, call recording disclosure, complete audit trail logging, and EU data residency. That covers the current Bloctel framework and positions you for the 2026 opt-in transition.

If you're planning AI-powered outbound campaigns in France, talk to the team before you build the list.