Morocco: personal data protection (Law 09-08) and CNDP compliance overview
In force
- Effective date
- Per the official text
- Verification date
- 2026-08-14
- Source
- Official primary source (see link below)
- Law 09-08 governs the processing of personal data; the CNDP is the supervisory authority.
- Processing of personal data requires a legal basis and, where applicable, prior authorisation or declaration to the CNDP.
- A dedicated regime applies to transfers of personal data abroad (CNDP deliberation).
- Official source: CNDP (https://www.cndp.ma) and the official text via the Ministry of Justice portal (adala.justice.gov.ma).
Official sources
Facts in this record rely on an official primary source; texts may be amended, so refer to the official text and the latest Bulletin Officiel.
Need hands-on support (procedures, documents, dedicated follow-up)? View services · Contact us
#0a4e838d-b4c6-47ab-b8a8-9e6798f98989