CNIL published a DPO survey this week. 70% of organisations are using or planning to use AI, and 81% already run generative AI. But only 27% of the DPOs meant to govern it say they know the AI rules well, and 85% have had no AI training at all. Handing someone AI Act compliance without training them on AI isn't governance. It's a box tick that collapses the first time a regulator asks a hard question. Would your DPO pass?