Morocco
SubstantialLaw No. 09-08 on the Protection of Personal Data
Authority: Commission Nationale de Contrôle de la Protection des Données (CNDP) | Enforcement: Active | Enacted: February 2009
Overview
Morocco enacted data protection legislation in 2009, inspired by the French model. The CNDP is an active regulator. Morocco was the first African country to join Convention 108. The framework covers prior authorisation, data subject rights, and cross-border transfers.
14-Topic Coverage
Data Protection Authority
Fully AddressedCNDP independently oversees compliance, handles complaints, and issues authorisations.
Consent Requirements
Fully AddressedConsent or legitimate purpose required. Prior authorisation from CNDP for sensitive data.
Data Subject Rights
Fully AddressedRights to access, rectification, objection, and deletion.
Cross-Border Transfer
Fully AddressedTransfers to adequate countries per CNDP list, or with CNDP authorisation.
Breach Notification
Partially AddressedNo explicit statutory breach notification. CNDP guidance recommends notification.
DPO Requirements
Partially AddressedData controller must register processing with CNDP. No formal DPO role.
Children's Data
Partially AddressedGeneral provisions apply. No specific age-based provisions.
Penalties & Enforcement
Fully AddressedFines from MAD 10,000 to MAD 300,000. Criminal penalties including imprisonment.
Sector-Specific Rules
Fully AddressedBAM financial data rules, health data regulations, telecom provisions.
Cookie/Tracking
Partially AddressedCNDP guidance on cookies. General consent principles apply.
AI & Automated Decisions
Partially AddressedRight to not be subject to automated decisions. National AI strategy published.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Fully AddressedLaw applies to both public and private sector data processing.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Morocco's regulations.
Book a Consultation