Morocco: Prime Ministerial Decree No. 2-09-165 implementing Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data including data protection authority governance was signed by Prime Minister

On 18 June 2009, the Prime Minister signed Decree No. 2-09-165 implementing Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data. The decree established the governance framework for the National Commission for the Protection of Personal Data (CNDP), the CNDP responsible for enforcing data protection rules. The decree outlines the composition and appointment of the CNDP's members, who are selected for their expertise in legal, judicial, and technological domains, as well as their commitment to individual liberties. It defines the CNDP's operational rules, including its meeting frequency, budget management, and investigative powers. The decree grants the CNDP the authority to conduct investigations, issue authorisations, and ensure compliance with data protection laws.