The National Commission for the Control of the Protection of Personal Data (CNDP) of Morocco has published a list of ten mandatory rules to follow regarding data protection during electoral operations and consultations.

These requirements, based on law 09-08, include prior notification of processing to the CNDP (article 12) and compliance with the principles of purpose limitation, retention period, and fair collection (article 3). The document emphasizes that the use of political opinions (article 21, paragraphs 1 and 2) and direct solicitation (article 10) are subject to explicit or prior consent of the individuals. It also recalls the obligation to guarantee the rights of data subjects (chapter II, articles 5 to 9), to regulate subcontracting by contract (articles 23 and 25), and to comply with rules on data transfers (articles 15, 18, 43 and 44). A specific mention is made of the obligation to report any content produced by artificial intelligence, with reference to the Moroccan Penal Code (article 447-2) and organic law no. 53-25 (articles 39, 51 and 53).