Morocco: Prime Ministerial Decree No. 2-09-165 implementing Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data including data protection regulation was implemented

On 18 June 2009, the Prime Ministerial Decree No. 2-09-165 implementing Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data was implemented following its publication in the official gazette. The decree outlines the rights of individuals concerning their personal data, including the right to access, rectify, and oppose the processing of their data. It mandates that data controllers provide clear information about data processing activities and ensures that individuals can exercise their rights by submitting written requests, either directly to the data controller or through the National Commission for the Protection of Personal Data (CNDP). The decree also specifies the responsibilities of data processors and controllers, requiring them to adhere to strict procedures for data handling and security.