Under Moroccan Law 09-08, sensitive personal data refers to specific categories of information whose processing presents a higher risk to individuals’ fundamental rights and therefore requires stricter legal control, often including prior CNDP authorization.Any company processing such data in Morocco…
Under Moroccan law, personal data includes any information that directly or indirectly identifies a natural person.If your business collects, stores, uses, or transfers such information in Morocco, it is subject to Law 09-08 and oversight by the CNDP. This applies…
CNDP authorization is mandatory in Morocco whenever personal data processing presents a higher risk to individuals’ rights, particularly when sensitive data or international transfers are involved.Processing must not begin until authorization is formally granted by the CNDP. General principle under…
In Morocco, CNDP declaration and CNDP authorization are two distinct legal procedures under Law 09-08, and choosing the wrong one can place a company in non-compliance.A declaration applies to standard data processing, while authorization is mandatory for high-risk or sensitive…
Any entity that processes personal data in Morocco must comply with CNDP rules, whether it is a Moroccan company, a foreign company, or a public body.Compliance is mandatory and supervised by the CNDP. The CNDP’s scope of authority The CNDP…
Law 09-08 is Morocco’s core data protection law and applies to any business that processes personal data in Morocco, regardless of its size or nationality.It sets out the legal rules for collecting, using, storing, and transferring personal data and is…
The CNDP is Morocco’s national authority responsible for supervising and enforcing personal data protection under Law 09-08.It has the power to review data processing activities, issue authorizations, conduct investigations, and impose sanctions. Its full name is the Commission Nationale de…
Any company that processes personal data in Morocco must either file a CNDP declaration or obtain prior CNDP authorization under Law 09-08.This obligation applies to Moroccan and foreign companies alike and covers activities as simple as operating a website with…
CNDP in Morocco is the legal and institutional framework that governs how personal data is collected, processed, stored, and transferred. If you operate a business, manage a website, run digital marketing campaigns, handle HR data, or work with customer databases,…