Morocco: Adopted CNDP Deliberation No. D-188-2020 on Data Protection Impact Analysis

On 14 December 2020, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. D-188-2020 dated 14/12/2020 governing the Data Protection Impact Analysis (DPIA). The Deliberation outlines requirements for evaluating risks associated with personal data processing, particularly for operations involving sensitive or large-scale data processing, as mandated by Law No. 09-08 on data protection. Data controllers are required to document processing activities, assess privacy risks, and implement mitigation measures to address identified risks. The deliberation emphasises accountability, necessitating engagement with relevant stakeholders and ensuring compliance with established data protection principles.