Under Moroccan law, personal data includes any information that directly or indirectly identifies a natural person.If your business collects, stores, uses, or transfers such information in Morocco, it is subject to Law 09-08 and oversight by the CNDP. This applies…
CNDP authorization is mandatory in Morocco whenever personal data processing presents a higher risk to individuals’ rights, particularly when sensitive data or international transfers are involved.Processing must not begin until authorization is formally granted by the CNDP. General principle under…
The CNDP is Morocco’s national authority responsible for supervising and enforcing personal data protection under Law 09-08.It has the power to review data processing activities, issue authorizations, conduct investigations, and impose sanctions. Its full name is the Commission Nationale de…