Law: Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data (only available in French here) ('the Law')
Regulator: Moroccan data protection authority ('CNDP')
Summary: The Law provides a general framework for personal data protection and is particularly comprehensive with respect to the circumstances under which consultation with the CNDP is required before companies engage with data processing activities. The CNDP is responsible for monitoring compliance with the Law and has been active in issuing guidance on several topics, such as biometric data and direct marketing, to assist companies with the same. More recently, the CNDP has focused on its extension of a moratorium on facial recognition and on introducing new measures to comply with international data protection requirements. The CNDP is also working on a project of revising the national data protection law to further align it with global standards and to enhance protection of citizens' personal data. In addition, the CNDP has been closely cooperating with the National Telecommunications Regulatory Agency ('ANRT') as well as with the Moroccan Advertisers Associations ('GAM') with respect to direct marketing matters. Morocco is also a signatory to Convention 108 and the Protocol amending Convention 108.