Category · Q&A index

Data Protection

Personal data protection (Law 09-08), CNDP, consent.

Governing law: FDL-45-2021

30DAYS
Response time for data access requests
MAD 50,000
Maximum fine for unauthorized data processing
CNDP
Authority to lodge complaints on data misuse
ExpressCONSENT
Required before processing health or marketing data

Start here

I'm receiving unwanted marketing emails and calls

Learn your right to opt-out of direct marketing and advertising communications in Morocco, including how to request removal from mailing lists and stop unsolicited calls.

A company misused my personal data

Understand how to file a complaint with Moroccan authorities when your data has been compromised or used without consent, and identify which regulatory body handles your case.

I'm unsure about health data privacy rules

Discover the strict consent requirements for processing sensitive health information in Morocco and what protections apply to your medical and biometric data.

5 answered questions

Provisional0 views
What are my data rights with Moroccan companies?
Moroccan law grants you free access to your data, rectification within 10 days, and objection rights. Exercise these by proving your identity to the company.
Provisional0 views
Do I have the right to refuse advertising emails and calls?
Yes. Direct marketing calls, faxes, and emails require your prior consent. You can object free of charge to marketing communications anytime.
Provisional0 views
Do you need permission to process health data?
Yes. Health data needs National Commission authorization, except when processed by licensed practitioners for medical purposes, which only requires declaration.
Provisional0 views
Whom can I complain to if my data is misused in Morocco?
Complain to Morocco's National Commission for Personal Data Protection, which investigates misuse, orders corrections, and can refer cases to prosecutors.
Provisional0 views
Can a company use my personal data without my consent in Morocco?
Companies need your explicit consent to use personal data in Morocco, except when legally required, fulfilling contracts, or serving vital interests.