OtherMorocco
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data
What is Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data?
Law No. 09-08 (2009) establishes Morocco's data protection framework, creating the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) as the supervisory authority. It comprises 28 controls organised across 6 domains, and applies in Morocco.
How Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data maps to other frameworks
All 28 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 6 domains Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data groups its controls into
DPO + Sanctions + Convention 108 + Modernisation
Security + Subcontractor + Retention + CCTV + Cookies
Cross-Border Transfer + CNDP Authorisation + Adequacy
Subject Rights + Access + Correction + Object + Article 7-11
Sensitive Data + Biometric + Whistleblower + Article 12
Where Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data overlaps with the standards you already hold
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data vs ISO 27001:2022View comparison →Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data vs SOC 2View comparison →Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data vs NIST CSF 2.0View comparison →Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data vs GDPRView comparison →Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data vs HIPAAView comparison →Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data vs PCI DSS 4.0View comparison →
What Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data means in your sector
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Healthcare→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Financial Services→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Technology→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Government→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Manufacturing→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Energy→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Retail→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Education→
What Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data means for your job
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for CISOs→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Compliance Officers→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Risk Managers→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for IT Directors→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for DPOs→Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data for Auditors→
Questions people ask about Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data
What is Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data?
Law No. 09-08 (2009) establishes Morocco's data protection framework, creating the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) as the supervisory authority.
How many controls does Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data have?
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data contains 28 controls organized across 6 domains.
Where does Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data apply?
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data is applicable in Morocco. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
How do I get started with Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data programmatically
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data, its 28 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data API reference and MCP config →How ready are you for Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .