CNPD and CNDP signed Memorandum of Understanding in the field of personal data protection, covering AI

La Présidente de la CNPD du Portugal (Comissão Nacional de Protecção de Dados) Mme Paula Meira Lourenço et le Président de la CNDP Maroc (Commission nationale de contrôle de la protection des données à caractère personnel) M. Omar Seghrouchni ont signé, le 25 février 2026 au siège de la CNPD à Lisbonne, un MoU (Mémorandum d’entente) dans le domaine de la protection des données à caractère personnel.

Primary legal sourceData Privacy & Protection ·DeepfakesOfficial source · cndp.ma ↗

02 NOV 2025 · Law / Act

Paris Charter on AI signed

To achieve the potential benefits and preventing and mitigating the risks of emerging technologies for people and the planet, AI development, deployment and governance must be in the public interest. Public interest manifests differently for different communities, countries, and contexts, it requires opportunities for public participation, and it must serve equity and equality. We acknowledge that the mission and vision of artificial intelligence in the public interest builds on and is strengthened by existing definitions and academic research, public sector approaches, and civil society effor

Primary legal sourceData Privacy & Protection ·Generative AIOfficial source · elysee.fr ↗

28 OCT 2024 · Other

Global data protection authorities issue statement on data scraping, covering AI

This Concluding Statement builds on the Joint statement on data scraping and the protection of privacy (the Initial Statement), published August 24, 2023, which highlighted the following key messages:

Official materialData Privacy & Protection ·Generative AI ·CybersecurityOfficial source · priv.gc.ca ↗

02 SEP 2021 · Executive Order

DGSSI Sensitive Information System Declaration Form (Version 1.0)

On 2 September 2021, the General Directorate of Information Systems Security (DGSSI) issued the Sensitive Information System Declaration Form (Version 1.0). This form outlines the requirements for entities responsible for critical infrastructure to declare and classify their sensitive information systems (SIS) in accordance with Moroccan Law 05-20 and Decree no. 2-21-406. The form mandates the provision of detailed information regarding the technical components, security measures, and operati...

Primary legal sourceNational StrategyOfficial source · dgssi.gov.ma ↗

30 APR 2021 · Law / Act

CNDP Deliberation No. D-110-2021 providing an opinion on the directive setting minimum rules for cloud outsourcing by credit institutions

On 30 April 2021, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. D-110-2021 providing an opinion on the draft directive setting minimum rules for cloud outsourcing by credit institutions. The opinion advises notification to the CNDP of all outsourced personal data processing, including cross-border data transfers, and adherence to Law No. 09-08 on personal data protection. It recommends that contracts with cloud providers include provisions ensuring...

Primary legal sourceNational StrategyOfficial source · cndp.ma ↗

30 DEC 2020 · Executive Order

CNDP Deliberation No. D-195-EUS/2020 relating to the definition of the use of facial recognition technologies

On 30 December 2020, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. D-195-EUS/2020 relating to the definition of the use of facial recognition technologies. The Deliberation specifies that while the use of such technologies is permitted, it requires prior authorisation by the CNDP, particularly for personal data processing. It recommends the adoption of a nationally trusted third-party system for authentication to avoid multiple biometric databases ...

Primary legal sourceNational StrategyOfficial source · cndp.ma ↗

14 DEC 2020 · Executive Order

CNDP Deliberation No. D-188-2020 on Data Protection Impact Analysis

On 14 December 2020, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. D-188-2020 dated 14/12/2020 governing the Data Protection Impact Analysis (DPIA). The Deliberation outlines requirements for evaluating risks associated with personal data processing, particularly for operations involving sensitive or large-scale data processing, as mandated by Law No. 09-08 on data protection. Data controllers are required to document processing activities, assess ...

Primary legal sourceNational StrategyOfficial source · cndp.ma ↗

29 JUL 2020 · Executive Order

CNDP Deliberation No. D-126-EUS/2020 relating to the definition of the use of facial recognition technologies by social welfare institutions for proof of life of beneficiaries

On 29 July 2020, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. D-126-EUS/2020 relating to the definition of the use of facial recognition technologies by social welfare institutions for proof of life of beneficiaries. The Deliberation emphasises the need for a unified national trusted third-party system for authentication, recommending against the creation of independent biometric databases by service providers, whether in the private or public sec...

Primary legal sourceNational StrategyOfficial source · cndp.ma ↗

08 JUL 2020 · Executive Order

CNDP Deliberation No. D-120-2020 relating to the architecture of identifiers

On 8 July 2020, the National Commission for the Protection of Personal Data (CNDP) issued deliberation No. D-120-2020 relating to the architecture of identifiers. The deliberation emphasises compliance with Morocco's constitutional privacy protections (Article 24), international commitments under Convention 108, and national legislation (Law No. 09-08). It recommends a secure architecture separating usage and authentication data and the adoption of sector-specific identifiers tailored to acti...

Primary legal sourceNational StrategyOfficial source · cndp.ma ↗

23 APR 2020 · Executive Order

National Commission for the Protection of Personal Data deliberation No. D-108-EUS/2020 on use of facial recognition technologies

On 23 April 2020, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. D-108-EUS/2020 on the definition of the use of facial recognition technologies in the context of the remote account system by banks and payment institutions. The CNDP confirmed its reservations regarding the creation of separate biometric databases by service providers and recommended the adoption of a nationally trusted third-party system for authentication to centralise and secure bi...

Primary legal sourceNational StrategyOfficial source · cndp.ma ↗

Report

Maroc : rapport d’évaluation de l’état de préparation à l’intelligence artificielle

Assesses Morocco's preparedness for responsible AI and translates national consultations into regulatory, institutional and capacity-building priorities. It highlights gaps in AI liability and public procurement, the need to update data-protection rules, and opportunities for inclusive, multi-stakeholder governance.

Official materialNational Strategy ·Research & DevelopmentOfficial source · unesdoc.unesco.org ↗