Morocco: Prime Ministerial Decree No. 2-09-165 implementing Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data including data protection authority governance was implemented

On 21 May 2009, the Prime Ministerial Decree No. 2-09-165 implementing Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data was implemented following its publication in the official gazette. The decree established the governance framework for the National Commission for the Protection of Personal Data (CNDP), the CNDP responsible for enforcing data protection rules. The decree outlines the composition and appointment of the CNDP's members, who are selected for their expertise in legal, judicial, and technological domains, as well as their commitment to individual liberties. It defines the CNDP's operational rules, including its meeting frequency, budget management, and investigative powers. The decree grants the CNDP the authority to conduct investigations, issue authorisations, and ensure compliance with data protection laws.