What Are the Rights Around AI in Morocco?
Morocco has no specific artificial intelligence law yet. Rights related to AI use rest on existing texts: Law 09-08 on personal data protection, Law 53-05 on electronic exchange, and the Maroc Digital 2030 Strategy guidelines. A dedicated framework is under construction but has not yet been adopted.
What Moroccan Law Says Today
Morocco has no AI law. That is the starting point. Everything that governs AI use today is indirect.
Law 09-08 protects personal data processed by automated systems. The National Commission for Personal Data Protection (CNDP) is the competent authority. If an AI system processes data on Moroccan citizens, this law applies. It requires consent, declared purpose, and rights of access and correction.
Law 53-05 governs electronic exchanges and digital signatures. It indirectly touches contracts concluded through automated systems.
The Labor Code makes no mention of AI. But recruitment or performance decisions made by algorithm fall into a legal void that Moroccan courts have not yet had to address.
The National AI Assizes: A Strong Political Signal
In 2023, Morocco held its first National Artificial Intelligence Assizes. The stated objective: lay the foundations for national AI governance. These assizes produced recommendations on ethics, data sovereignty, and training.
This is not a law. It is a direction. But it signals that the Moroccan state is taking the subject seriously.
The Maroc Digital 2030 Strategy integrates AI as a competitiveness lever. It plans investments in infrastructure, training, and attractiveness for technology companies. What I observe among my clients in Morocco is that this strategy creates expectations without yet creating obligations.
I have built a diagnostic framework to help executive teams assess their AI regulatory exposure, in Europe and in Africa. Download the AI Board Pack 2026.
The EU AI Act: A Constraint Arriving from Outside
The most concrete signal for Moroccan companies comes from Europe. The EU AI Act, which entered into force in 2024 and applies progressively until 2027, has extraterritorial reach.
If a Moroccan company provides an AI system to a European client, or uses an AI system whose effects are felt on European territory, it is subject to the AI Act. This is not a hypothesis. It is what recent reporting has documented: Moroccan players are being caught by European rules.
Concretely, this means:
- High-risk AI systems (recruitment, credit, access control) must be documented, auditable, and compliant.
- Systems prohibited in Europe (social scoring, behavioral manipulation) cannot be used in value chains touching European citizens.
- Moroccan companies that export to Europe or work with European groups must align.
As I explained in my analysis on integrating AI in recruitment, automated selection tools fall precisely in the high-risk category under the AI Act. A Moroccan HR director using an AI-powered CV screening tool for a Franco-Moroccan group is already affected.
User Rights: What Exists, What Is Missing
Today, a Moroccan citizen or employee facing a decision made by an algorithm has few formal recourses.
The CNDP can be contacted if personal data is mishandled. But there is no right to algorithmic explanation equivalent to Article 22 of the European GDPR. No right to contest an automated decision. No obligation for the company to disclose that an algorithm made the decision.
This is a structural gap. And it creates risks for Moroccan companies that also operate in Europe, where these rights exist and are enforceable.
The question HR directors and legal directors ask me: how far do I need to go to be compliant? My answer: align with the highest standard you are exposed to. If you work with Europe, the AI Act and GDPR set the floor.
To structure this response in your organization, request a free diagnostic.
What Will Change in the Coming Months
Morocco is working on an update to Law 09-08, expected for several years. A framework law on AI is discussed in institutional circles, but no text has been submitted to Parliament as of this date.
Pressure will come from two directions. First, European commercial partners who will require compliance guarantees. Then, incidents: a discriminatory credit decision, a contested dismissal based on an algorithmic score. These concrete cases are what accelerate legislators.
Companies waiting for the law to act will fall behind. Those building their AI governance now, based on available international standards, will be in a strong position when the Moroccan framework is adopted.
As I analyzed in my article on AI jobs hiring in 2026, legal profiles specialized in AI are already under tension in the market. That is not a coincidence.
FAQ
Does Morocco have an artificial intelligence law?
No. As of September 22, 2026, Morocco has no specific AI law. Existing texts (Law 09-08, Law 53-05) apply partially. A dedicated framework is under discussion but has not yet been adopted.
Does the EU AI Act apply to Moroccan companies?
Yes, partially. If a Moroccan company provides AI systems to European clients or if its systems produce effects on people in Europe, it is subject to AI Act obligations. The extraterritorial scope is explicit in the European text.
What rights does a Moroccan employee have against an algorithmic decision?
Today, few formal rights. The CNDP can be contacted for personal data violations. But there is no right to explanation or right to contest an automated decision equivalent to the European GDPR.
What did the National AI Assizes produce concretely?
Recommendations on ethics, data sovereignty, and training. No legislative text. The assizes established a reflection framework and signaled political will, without yet creating enforceable legal obligations.