Guides
Reference pages we maintain: what the law requires, what it changes in software, and how to implement it. Every guide carries its last-reviewed date.

Compliance & regulation
Health data and the CNDP: prior authorisation, not declaration
Clinics, laboratories and health funds: health data falls under CNDP prior authorisation. What that changes in a project schedule and in the software.

Compliance & regulation
Law 09-08 and the GDPR: what overlaps, and what does not substitute
Being GDPR-compliant does not make you compliant in Morocco, and the reverse is also true. The differences that matter in practice: prior formality, authority, transfers.

Compliance & regulation
Consent to personal data in Morocco: collecting it, proving it, honouring withdrawal
Consent is not a checkbox: it is evidence you must keep and a withdrawal you must honour. What that means for a website, a form and a customer database.

Compliance & regulation
Employee data and the CNDP: payroll, badges, applications, video surveillance
HR management is a personal data processing activity that must be declared. What payroll, access control, cameras and received CVs cover — and what you must delete.
Newsletter
Get our new guides and their updates.

