Data Protection and Privacy 2026

MOROCCO Trends and Developments Contributed by: Mehdi Kettani, Adil Mouline, Othman Sentissi and Kawtar Mouti, DLA Piper Casablanca

Conclusion For data controllers, these developments provide more predictable parameters for compliance. The models clarify what is expected and reduce guess - work. For data subjects, they make rights more tan - gible. A person can better understand why a website asks for consent, why a clinic needs certain informa - tion, why a camera should not be placed everywhere, or why a receptionist should not photocopy an iden - tity card. In this sense, the 2025 decisions and the announced work on AI and surveillance underline a basic expectation people have today – that per - sonal data should be used carefully, the reasons for use should be explained, and unnecessary intrusion should be avoided.

that uses personal data, and on ensuring that citizens have access to remedies. This upcoming decision is expected to address a subject that is increasingly vis - ible to ordinary people, even when it remains invisible in daily interactions: automated decisions that can shape access to services, prioritisation, recommen - dations, or risk assessments. A surveillance decision also announced The CNDP website also announced that a surveillance decision is in the pipeline. This comes in a context where cameras have multiplied and where surveil - lance systems can now be connected, searched, and sometimes combined with advanced analytics. Morocco already has a first decision on video surveil - lance issued in 2013, which addressed the conditions necessary to implement a video surveillance system in workplaces and in private common areas. That 2013 framework set a security purpose as the main justifi - cation, required camera placement that avoids intru - sion into private spaces, required visible information to people, and limited retention of images to a defined period. A new decision may cover areas that were not covered by the previous text, reflecting how surveil - lance has expanded in scope and technical capacity. It may also take a more targeted form, focusing on CCTV cameras within a specific activity, much like the CNDP did in 2025 for healthcare establishments. The healthcare model shows how general technology can be treated differently depending on context, with rules tailored to the sensitivity of the environment and the concrete needs of an activity. A future surveillance decision could similarly clarify what safeguards are required in settings beyond workplaces and private common areas, or it could define stricter conditions for certain uses that raise particular concerns for pri - vacy.

338 CHAMBERS.COM

Powered by