Morocco: personal data protection (Law 09-08) and CNDP compliance overview
0a4e838d-b4c6-47ab-b8a8-9e6798f98989
In force
Issuing authority
—
Level
—
Effective date
Per the official text
Verification date
2026-08-14
Scope
—
Source
Official primary source (see link below)
• Law 09-08 governs the processing of personal data; the CNDP is the supervisory authority. • Processing of personal data requires a legal basis and, where applicable, prior authorisation or declaration to the CNDP. • A dedicated regime applies to transfers of personal data abroad (CNDP deliberation). • Official source: CNDP (https://www.cndp.ma) and the official text via the Ministry of Justice portal (adala.justice.gov.ma).
Official source
Facts in this record rely on an official primary source; texts may be amended, so refer to the official text and the latest Bulletin Officiel.
https://adala.justice.gov.ma/api/uploads/2024/04/30/Protection%20des%20personnes%20physiques-1714464099884.pdf ↗