Morocco: Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data including data protection regulation entered into force

On 18 February 2009, Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data entered into force following its publication in the official gazette. This law establishes rules for safeguarding personal data, defining "personal data" as any information related to an identified or identifiable individual. It mandates that data processing must be fair, lawful, and transparent, with clear purposes and limitations on data collection and usage. The law grants individuals the right to access, rectify, and oppose the processing of their data, ensuring that data subjects have control over their personal information. Responsibilities are placed on data controllers and processors to implement appropriate security measures and obtain consent for data processing activities.