Morocco: National Commission for the Protection of Personal Data adopted Deliberation No. 464-2013 concerning the conditions for exercising the right to access personal data

On 6 September 2013, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. 464-2013 concerning the conditions for exercising the right to access personal data. The deliberation establishes that data communication to an authorised third party, as permitted by legislation, must comply with specific conditions. The recipient must submit a written request specifying the legal basis for access, and the request must target identified or identifiable individuals, excluding entire datasets. It must be punctual, non-systematic, and detail the data categories sought, ensuring adequacy, relevance, and proportionality. Furthermore, the recipient’s data processing must adhere to Law No. 09-08, particularly regarding CNDP notification. Any data transfer requires prior CNDP authorisation.