Morocco: Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data establishing the National Commission for the Protection of Personal Data entered into force

On 18 February 2009, Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data entered into force following its publication in the official gazette. This law establishes the National Commission for the Protection of Personal Data (CNDP), an authority responsible for enforcing data protection rules. The Commission is empowered to receive declarations and authorization requests, conduct investigations, and ensure compliance with the law. It is composed of seven members, including a president appointed by the King, and operates with specific powers to issue guidelines, authorise data processing activities, and maintain a national registry of data processing operations. The CNDP's decisions and actions are integral to the governance and enforcement of data protection in the country.