On 18 December 2015, the National Commission for the Protection of Personal Data (CNDP) issued Deliberation No. 236-2015 amending Deliberation No. 465-2013 establishing the list of States ensuring sufficient protection of privacy and the fundamental rights and freedoms of individuals with regard to the processing of personal data. The Deliberation identifies 32 countries as providing adequate protection in accordance with Moroccan legislation on personal data protection, subject to prior notification to CNDP of any cross-border data transfers. The designated countries comprise EU member states as of 2015, along with Iceland, Liechtenstein, Norway, Switzerland, Canada, and the United Kingdom, all of which were determined to have implemented sufficient national legislation and internal mechanisms for personal data protection that meet Moroccan legal requirements.
Original source