← Policy Information
compliance-dispute
Morocco: personal data protection (Law 09-08) and CNDP compliance overview
17 September 2026
View link- Law 09-08 governs the processing of personal data; the CNDP is the supervisory authority.
- Processing of personal data requires a legal basis and, where applicable, prior authorisation or declaration to the CNDP.
- A dedicated regime applies to transfers of personal data abroad (CNDP deliberation).
- Official source: CNDP (https://www.cndp.ma) and the official text via the Ministry of Justice portal (adala.justice.gov.ma).