Contents
What already applies
- Law 09-08 governs any AI system that processes personal data: legal basis, information, individuals' rights, formalities with the CNDP (Morocco's data protection authority), transfers abroad. Its Article 11 prohibits basing a court decision on automated processing that assesses a person's behaviour. It also prohibits basing any other decision with legal effects solely on the result of automated profiling, subject to exceptions, for example in the context of a contract where the person has been able to present their point of view.
- Law 05-20 on cybersecurity applies to public administrations and critical infrastructure operators that deploy AI systems.
- General law still applies: civil liability, consumer protection, employment law.
According to several legal analyses, the CNDP considers any AI system that processes personal data to be fully subject to Law 09-08, with particular vigilance over online data collection without consent, data flows to models hosted abroad, and the intelligibility of algorithms.
What is in preparation
| Initiative | Nature | Known status |
|---|---|---|
| Digital X.0 | Draft framework law led by the Ministry of Digital Transition: data governance, sector-specific digital identity, interoperability based on traceable consent | Under review at the General Secretariat of the Government (November 2025) |
| National AI agency | Private member's bill tabled on 17 April 2024 in the House of Councillors, aiming to create a public agency to steer the development of AI | Tabled, with no known adoption to date |
Some analyses suggest that the Digital X.0 bill would include provisions on algorithmic transparency and a right to an explanation of automated decisions. As the final text has not been made public, these points remain to be confirmed.
The strategy: Maroc IA 2030
The "Maroc IA 2030" roadmap, presented on 12 January 2026 by the Ministry of Digital Transition and Administrative Reform, is part of the Maroc Digital 2030 strategy. It provides, among other things, for a network of AI centres of excellence, the Al-Jazari Institutes, and a directorate-general dedicated to AI and emerging technologies. Trust in the use of AI is among its priorities.
Internationally, Morocco is one of the UNESCO member states that adopted the Recommendation on the Ethics of Artificial Intelligence in 2021.
What businesses should do now
Waiting for a dedicated law would be a mistake. The obligations already exist, and European clients are applying the AI Act.
- Apply Law 09-08 to every AI system that processes personal data.
- Keep a human decision-maker for any decision with legal effects on a person.
- Check your exposure to the AI Act if outputs are used in the European Union.
- Structure your governance with ISO/IEC 42001, which will adapt to any future Moroccan legislation.
Updates
This page is updated whenever the Moroccan framework changes.
Further reading
- 5 min read
- 4 min read
- 4 min read
Frequently asked questions
Is there an AI law in Morocco?
No AI-specific law was in force as of 25 September 2026. Existing legislation applies, first and foremost Law 09-08 on personal data protection.
What is Digital X.0?
A draft framework law led by the Ministry of Digital Transition, focused on data governance, sector-specific digital identity and interoperability based on traceable consent. It was under review at the General Secretariat of the Government at the end of 2025.
Does Law 09-08 govern decisions made by AI?
Yes. Its Article 11 prohibits basing a decision with legal effects solely on the result of automated processing intended to define a person's profile or assess their personality, subject to the exceptions provided for by law.
General information, not legal advice.
Report an errorReferences (7)
- Law No. 09-08 on the protection of individuals with regard to the processing of personal data (Dahir No. 1-09-15 of 18 February 2009), in particular Articles 4, 11, 43 and 44. (opens in a new tab)
- Law No. 05-20 on cybersecurity (2020).
- Agence Ecofin (4 November 2025). Le Maroc avance sur la loi-cadre Digital X.0.
- Ouhdi, B. (2026). La construction d'un droit de l'IA au Maroc. Village de la Justice.
- Le Brief. IA : un projet de loi propose de créer une agence dédiée (bill tabled on 17 April 2024 in the House of Councillors).
- Maghrebnaute (19 January 2026). Intelligence artificielle : le Maroc lance sa feuille de route 2030.
- UNESCO (2021). Recommendation on the Ethics of Artificial Intelligence. (opens in a new tab)