Skip to content

Resources

Regulatory calendar 2025-2028

By KaperX Editorial Team7 min read

Contents

How to read this calendar

The dates are arranged in five domains: artificial intelligence in the European Union, data flows between the Union and Morocco, telemarketing to France, anti-money laundering in Morocco, and customer complaints. Each row gives the text, what it changes, who is affected and the guide to read. Some dates are earlier than 2025: they are included where an older text remains the foundation of current obligations.

To see how these rules fit together in your business, see our solutions by situation.

Artificial intelligence: the AI Act and the Omnibus regulation

DateTextWhat changesWho is affectedGuide
2 February 2025In forceAI Act, Article 5Prohibited practices, including inferring emotions in the workplaceProviders and deployers, including outside the EU where the output is used in the EUEmotion analysis
2 February 2025In forceAI Act, Article 4AI literacy measures for staff (a best-efforts obligation since the Omnibus)Providers and deployersAI Act and BPOs
4 February 2025In forceCommission guidelines on prohibited practicesPractical examples, including monitoring the emotions of call-centre employeesCall centres, employersEmotion analysis
10 June 2026In forceCode of practice on the transparency of generated content (final version)A voluntary tool for marking contentGenerative AI providersChatbots and voicebots
20 July 2026In forceFinal guidelines on Article 50A customer service AI agent must say that it is AI and on whose behalf it is actingCustomer services, contact centresChatbots and voicebots
27 July 2026In forceRegulation (EU) 2026/1744 (Digital Omnibus on AI)Entry into force; postponement of the high-risk rulesAll operatorsAI Act and BPOs
2 August 2026In forceAI Act, Article 50Inform people that they are talking to AI or are exposed to emotion recognition; disclose deepfakesProviders and deployersChatbots and voicebots
2 December 2026UpcomingArticle 50(2) and new prohibitionsEnd of the marking grace period for generative systems already on the market; ban on non-consensual intimate deepfakes and child sexual abuse materialProviders and deployersChatbots and voicebots
2 December 2027UpcomingAI Act, Annex III and Article 26High-risk rules: emotion recognition, recruitment, employee assessment; deployer obligationsProviders and deployers of these systemsProvider or deployer
2 August 2028UpcomingAI Act, Annex IHigh-risk rules for AI embedded in regulated productsManufacturers and providersAI Act and BPOs

Personal data: between the European Union and Morocco

A standing point, checked on 1 October 2026: Morocco does not benefit from an adequacy decision from the European Commission. Data flows from the Union to Morocco therefore rest on appropriate safeguards, in practice the standard contractual clauses.

DateTextWhat changesWho is affectedGuide
18 February 2009In forceLaw 09-08 (Dahir No. 1-09-15)The Moroccan framework: CNDP formalities, transfers governed by Articles 43 and 44Every controller in MoroccoTransfers from Morocco
1 September 2019In forceCouncil of Europe Convention 108 and its additional protocolEntry into force for Morocco, the 55th partyState, authorities, businessesLaw 09-08 and GDPR
4 June 2021In forceImplementing Decisions (EU) 2021/914 and 2021/915Standard contractual clauses: modules 1 to 4 for transfers; Article 28 clauses within the EEAEuropean clients and Moroccan providersProcessor for a European client
18 June 2021In forceEDPB Recommendations 01/2020, version 2.0A six-step method for assessing a transfer and its supplementary measuresData exporters and importersProcessor for a European client
2 February 2022In forceMoroccan Parliament adopts the bill approving the protocol modernising Convention 108A step towards Convention 108+State, CNDPLaw 09-08 and GDPR

Telemarketing to France

DateTextWhat changesWho is affectedGuide
18 February 2009In forceLaw 09-08, Article 10 (Morocco)Prior consent for marketing by automated calling system, fax or emailBusinesses carrying out marketing from MoroccoProof of consent
24 July 2020In forceLaw No. 2020-901Ban on telemarketing for energy renovationBusinesses in the sector and their service providersFrench telemarketing law
13 October 2022In forceDecree No. 2022-1313Calling hours (Monday to Friday, 10 am–1 pm and 2 pm–8 pm) and no more than four calls per consumer over 30 daysAll centres making telemarketing callsFrench telemarketing law
19 December 2022In forceLaw No. 2022-1587Ban on telemarketing for the personal training account (CPF)Training organisations and service providersFrench telemarketing law
30 June 2025In forceLaw No. 2025-594 (Article 13 for the opt-in)Adoption of the opt-in rule; the law also extends sector bans to text messages, emails and social mediaBusinesses and call centresFrench telemarketing law
23 July 2026In forceDecree No. 2026-662Content of consent, validity of no more than one year, proof kept for at least three yearsBusinesses and their service providersProof of consent
11 August 2026In forceOpt-in rule enters into force; end of BloctelTelemarketing calls to a consumer prohibited without prior consentBusinesses and call centres, including in MoroccoFrench telemarketing law

Anti-money laundering and counter-terrorist financing in Morocco

DateTextWhat changesWho is affectedGuide
24 April 2019In forceMENAFATF mutual evaluationWeaknesses identified for non-financial professionsState, supervisory authorities, professionsAML/CFT for professions
2 September 2021In forceLaw 12-18 (Dahir of 8 June 2021, Official Bulletin No. 7018)Amends Law 43-05; the UTRF becomes the ANRFAll obliged personsAML/CFT for professions
23 September 2021In forceDecree No. 2-21-708 (Official Bulletin No. 7024)25% threshold and public register of beneficial ownersCompanies and legal arrangementsBeneficial ownership
October 2021In forceDecree No. 2-21-633 (Official Bulletin No. 7026)Organisation of the ANRFObliged personsSuspicious transaction reports
20 January 2022In forceMinistry of Justice memorandumReminder of obligations to lawyers, notaries and adoulsLegal professionsAML/CFT for professions
24 February 2023In forceFATF plenaryMorocco removed from the grey listThe system as a wholeRisk-based approach
January 2025In forceThird national risk assessmentApproved by the Head of Government after adoption by the ANRF board on 27 June 2024All obliged personsRisk-based approach
21 August 2026In forceLaw 66.23 on the legal profession (Official Bulletin)Replaces Law 28-08; reaffirms professional secrecyLawyersAML/CFT for professions

Customer complaints: banking, credit and insurance

DateTextWhat changesWho is affectedGuide
18 February 2011In forceLaw 31-08 on consumer protectionConsumer information; complaints address for distance contractsSuppliers of goods and servicesComplaint management
June 2014In forceMoroccan Centre for Banking MediationMediation activities beginCustomers and credit institutionsBanking mediation
10 June 2016In forceBAM Circulars No. 10/W/16 and 9/W/16Complaint handling (immediate acknowledgement, reply within 40 working days, quarterly report) and the mediation frameworkCredit institutionsBanking complaints
14 September 2017In forcePublication in the Official Bulletin of the order of 20 September 2016Approval of Circular 10/W/16Credit institutionsBanking complaints
December 2017In forceACAPS complaints platformOnline filing with a tracking numberPolicyholders and beneficiariesInsurance complaints
1 March 2022In forceNew charter of the Insurance MediatorThe mediator appointed by the ACAPS and the FMSAR takes officePolicyholders and insurersInsurance complaints
23 March 2023In forceCMMB mediation rulesThresholds below which the proposal binds the institution (MAD 200,000 for banks)Customers and institutionsBanking mediation
April 2026In forceACAPS 2024 annual report4,941 insurance complaints in 2024InsurersInsurance complaints
July 2026In forceBAM report on banking supervision, 2025 financial yearNumber and nature of the complaints received by Bank Al-MaghribCredit institutionsBanking complaints

What to do with these dates

  1. Identify the domains that concern your business and the deadlines in the next twelve months.
  2. For each date, read the associated guide and check whether you are already compliant.
  3. Enter the deadlines in your compliance plan, with an owner and a check date.
  4. Review this calendar whenever a new text is published, and at least once a quarter.

Further reading

Frequently asked questions

Did the Omnibus regulation postpone the obligation to tell customers they are talking to AI?

No. Regulation (EU) 2026/1744, in force since 27 July 2026, postponed the rules for high-risk systems, but not Article 50. The obligation to inform people that they are interacting with AI has applied since 2 August 2026. Only the marking of generated content benefits from a delay until 2 December 2026 for systems already on the market.

When will the high-risk AI rules apply?

From 2 December 2027 for the stand-alone systems listed in Annex III, such as emotion recognition, recruitment or employee assessment. From 2 August 2028 for systems embedded in products covered by Annex I. Both dates were set by the Omnibus regulation of July 2026.

Since when have telemarketing calls in France required consent?

Since 11 August 2026, under Article 13 of Law No. 2025-594 of 30 June 2025. Decree No. 2026-662 of 23 July 2026 specifies that consent is valid for no more than one year and that proof of it must be kept for at least three years. The Bloctel scheme ended on the same day.

Is Morocco still on the FATF grey list?

No. Morocco was removed from the grey list at the FATF plenary session of 24 February 2023, by unanimous decision. The due diligence obligations of the professions subject to Law 43-05 remain in force, and the third national risk assessment was approved in January 2025.

Does this calendar replace reading the texts?

No. It flags the dates and points to the guides that explain each rule. For a binding decision, refer to the official text and, where necessary, a lawyer's advice.

General information, not legal advice.

Report an error

Share

Share on LinkedIn (opens in a new tab)Share on WhatsApp (opens in a new tab)

References (12)