Skip to content

AI governance

Part of: Data & AI

AI Governance in Morocco: The Complete Guide

By KaperX Editorial Team4 min read

Contents

Why the issue is becoming urgent in Morocco

Three developments are converging in 2026:

  • Adoption is accelerating. The national "Maroc IA 2030" roadmap, presented in January 2026 by the Ministry of Digital Transition, is driving the use of AI across government and the economy.
  • The EU AI Act applies beyond Europe. A company established in Morocco is in scope as soon as the output produced by its AI system is used in the European Union. That is the case for many call centres, service providers and software vendors.
  • Moroccan law already applies. Law 09-08 governs any AI system that processes personal data. Its Article 11 notably prohibits basing a decision with legal effects solely on the result of automated processing designed to assess a person's personality.

The three frameworks to know

FrameworkNatureWhat it brings
Law 09-08Moroccan law, in forceLegal basis, information, individuals' rights, limits on automated decisions, data transfers
AI Act (Regulation (EU) 2024/1689)EU regulation with extraterritorial reachProhibited practices, transparency obligations, requirements for high-risk systems
ISO/IEC 42001:2023Voluntary international standardAn AI management system, with 38 reference controls and the option of certification

The risk-based approach

The AI Act sorts AI systems into four levels:

  1. Unacceptable risk: prohibited practices, for example emotion recognition in the workplace, except for medical or safety reasons.
  2. High risk: systems used in areas such as recruitment, workforce management, creditworthiness assessment, or life and health insurance pricing. They are subject to strict requirements from 2 December 2027.
  3. Limited risk: transparency obligations, for example telling a person that they are interacting with a chatbot. These have applied since 2 August 2026.
  4. Minimal risk: no specific obligations.

What AI governance changes for your customers

A chatbot that makes up information, a credit score that turns a customer away without explanation, voice analytics that judge a caller without their knowledge: every failure of an AI system shows up first in the customer relationship. Sound governance protects trust, the foundation of any lasting customer experience (CX), and rests on compliant data protection.

Pages in this domain

  • The EU AI Act and Moroccan BPOs: What You Need to Know

    The EU AI Act applies to Moroccan call centres and BPOs whenever the output of their AI systems is used in the European Union, for example a chatbot or voicebot answering French customers. Since 2 August 2026, such systems must tell people they are interacting with AI. Obligations for high-risk systems were postponed to 2 December 2027 by Regulation (EU) 2026/1744.

    5 min read

  • ISO 42001 Certification: A Guide for Moroccan Businesses

    ISO/IEC 42001:2023 is the first certifiable international standard for an artificial intelligence management system. It applies to any organisation that develops, provides or uses AI. It requires an AI policy, a risk and impact assessment, a statement of applicability and a treatment plan, supported by 38 reference controls grouped into nine domains.

    4 min read

  • AI in Customer Service: Risks and Safeguards

    AI in customer service carries six main risks: inaccurate answers, bias, lack of transparency, data leaks, no handover to a human, and weak performance in local languages. The essential safeguards are a limited scope, answers grounded in a validated knowledge base, informing the customer, an easy handover to a human, testing in French, Arabic and darija, event logging, and an incident procedure.

    4 min read

  • The AI System Life Cycle: From Design to Retirement

    The life cycle of an AI system runs from its design to its retirement. ISO/IEC 22989 offers a generic model: inception, design and development, verification and validation, deployment, operation and monitoring, continuous validation, re-evaluation, and retirement. ISO/IEC 42001 requires documented requirements and controls to be defined for each stage.

    4 min read

  • AI Law in Morocco: Where Does the Legal Framework Stand?

    As of 25 September 2026, Morocco has no AI-specific law in force. AI remains governed by existing legislation, first and foremost Law 09-08 on personal data protection, whose Article 11 restricts automated decisions. A draft digital framework law, Digital X.0, is in preparation, and the Maroc IA 2030 roadmap was presented in January 2026.

    4 min read

  • AI Governance in Banking and Insurance in Morocco

    In banking and insurance, AI is involved in decisions with significant effects: granting credit, pricing, fraud detection. In Morocco, Article 11 of Law 09-08 on personal data protection restricts decisions based solely on automated processing. The AI Act classifies creditworthiness assessment of individuals and life and health insurance pricing as high risk, with obligations applying from 2 December 2027 where the regulation applies.

    4 min read

Guides by situation

Our other domains

Further reading

Frequently asked questions

Is a Moroccan company subject to the EU AI Act?

In some cases, yes. The AI Act applies to providers and deployers established outside the European Union when the output produced by their AI system is used in the Union. This is common for call centres, service providers and software vendors serving European clients.

Is there an AI law in Morocco?

There is no AI-specific law in force to date. Law 09-08 does, however, apply to any AI system that processes personal data, and a draft digital framework law (Digital X.0) is in preparation.

Is ISO 42001 certification mandatory?

No, it is a voluntary standard. It provides a recognised framework for organising AI governance and demonstrating your seriousness to clients, partners or regulators.

This guide is for information only and does not constitute legal advice.

Share

Share on LinkedIn (opens in a new tab)Share on WhatsApp (opens in a new tab)

References (6)