Skip to main content

    AI by country · North Africa

    AI in Morocco: the rules, the readiness and where to start

    Last checked: 26 October 2026

    What should a company in Morocco know before starting with AI?

    Morocco has no AI law in force as of 26 October 2026. The rule that applies today is Law 09-08 on personal data, enforced by the CNDP, which covers automated decisions, transfers of data abroad and declarations to the regulator. A government framework law on AI is reported as a draft and we found no sign that it has been adopted.

    At a glance

    Morocco at a glance

    Key facts about Morocco
    Data protection lawLaw 09-08 (promulgated by Dahir of 18 February 2009), in force
    RegulatorCNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel)
    AI policyNo dedicated AI law as of 26 October 2026. Maroc IA 2030 roadmap presented 8 September 2026; framework law reported as a draft
    Time zoneUTC+0 since 20 September 2026 (5.5 hours behind India)
    CurrencyMAD (dirham)
    Business languageArabic and French

    Why now

    Why Morocco is worth watching

    Each point links to the document it comes from.
    • On 8 September 2026 the government presented its Maroc IA 2030 roadmap, with 2030 goals of 100 billion dirhams added to GDP, 50,000 direct and indirect jobs and 200,000 people trained and certified.[3]

    • The government named on 16 October 2026 includes a Ministry of Artificial Intelligence, Digital Transformation and Administrative Reform, headed by Ahmed Rahhou.[4]

    • Bank Al-Maghrib ran a 2025 study of AI in banks and found uses in chatbots, back-office automation, fraud and anti-money-laundering checks, and credit scoring.[5]

    • The outsourcing sector's federation head says a state circular aims at 130,000 additional jobs, with a hiring bonus of 17% of gross annual salary per new stable hire.[6]

    • The CNDP is active in 2026: its site lists data-protection agreements with a bank, a ministry and foreign regulators, and guidance for the 2026 elections.[2]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Law 09-08 on the protection of individuals regarding the processing of personal data

    In force2009Article 11 says no decision with legal effect on a person may rest only on automated processing meant to profile them or assess their personality. Decisions taken when concluding or running a contract are not treated that way if the person could present their observations. Article 12 requires a prior declaration or authorization from the CNDP for processing. Articles 43 and 44 allow transfers abroad only to a country with sufficient protection, or under listed exceptions such as the person's express consent or CNDP authorization. Article 23 requires security measures and a contract with any processor. Fines run from 10,000 to 100,000 DH for processing without the required declaration or authorization, and a wrongful transfer abroad can mean 3 months to 1 year in prison and 20,000 to 200,000 DH.[1]

    Draft framework law on AI and digital governance (reported as 'Digital X.0')

    Draft2025In November 2025 the press reported that this government draft, covering AI use in the public and private sectors, data governance and algorithm oversight, was under review at the General Secretariat of the Government. We found no official text and no sign that it has been adopted. Status unclear as of 26 October 2026, and the government changed on 16 October 2026. A separate bill to create a national AI agency, filed in the Chamber of Councillors in April 2024, was reported as pending in June 2026.[7]

    Bank Al-Maghrib work on a banking-sector AI charter

    In preparation2026The central bank's 2025 supervision report says it has started work on a market charter (charte de place) with the banks' association, setting principles for responsible, secure and controlled use of AI. It is described as work under way, not a binding rule.[5]

    Where AI fits first

    Where AI fits first

    Outsourcing and customer service

    Call summaries, quality checks and multilingual drafting for French-language customers, with human agents kept in charge.

    The federation head says voice work is losing share inside customer relationship services, and the state offer now pushes the sector toward higher-value work. Personal data of customers abroad may also be covered by their own country's law.[6]

    Banking

    Customer chatbots in several languages, document handling, fraud and anti-money-laundering checks.

    Credit scoring is a listed AI use in the central bank's study. If a decision is fully automated, article 11 of Law 09-08 applies. The bank charter on AI is in preparation.[5]

    Public administration services

    Assistants that help people with administrative procedures.

    The government presented Idarati AI, an assistant for administrative procedures, on 8 September 2026. Private firms selling to public bodies should expect the algorithm-transparency debate in the draft framework law to matter.[3]

    Your first steps

    Your first steps

    1. List the personal data your AI project will use, and check with the CNDP site whether it needs a declaration or an authorization under article 12 before you start.
    2. Check whether any decision about a person is made only by a model. If yes, add a human review or a way for the person to present observations (article 11).
    3. Find out where your AI vendor processes data. If it leaves Morocco, confirm the country's protection level or the exception you rely on (articles 43 and 44), because a wrongful transfer is an offence.
    4. Put a written contract and security measures in place with every processor, as article 23 requires.
    5. Plan for Arabic and French content. Test any model on both languages before using it with customers.
    6. Start with one low-risk process such as internal document search, and measure it before moving to decisions about customers.
    7. Follow the draft framework law and the new ministry's announcements. Do not assume current rules will stay the same.

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Morocco (UTC+0 since 20 September 2026) is 5.5 hours behind India (UTC+5:30). With Indian hours of 09:30 to 18:30 and Moroccan hours of 09:00 to 18:00, the overlap is 09:00 to 13:00 Moroccan time, which is 4 hours.

    Questions

    Common questions about AI in Morocco

    Is there an AI law in Morocco?

    Not in force as of 26 October 2026. A government framework law on AI and digital governance was reported as a draft under review in November 2025. Until something is adopted, Law 09-08 and sector rules apply.

    Do I need to tell the CNDP before using AI on personal data?

    Law 09-08 requires a prior declaration or authorization for personal data processing, depending on the case. Whether your project needs one depends on the data and the purpose, so ask the CNDP or a local lawyer.

    Can I use AI to approve or reject customers automatically?

    Article 11 says a decision with legal effect cannot rest only on automated profiling. Contract decisions are treated differently if the person could present observations. Keeping a human in the loop is safest.

    Can I use a foreign AI service with Moroccan customer data?

    Articles 43 and 44 allow transfers abroad only to countries with sufficient protection or under listed exceptions such as express consent. Breaking this can lead to fines and prison. Check the vendor's data location first.

    What time zone is Morocco in now?

    Morocco returned to the legal time (UTC+0) on 20 September 2026 under a decree published in June 2026, ending the permanent UTC+1 of 2018. Press reports describe this as permanent, so it matters for meetings with partners abroad.

    Free tools

    Try these first

    Three free tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.

    Read next

    Sources

    Sources

    Facts checked on 26 October 2026. Numbers in square brackets above match this list.
    1. [1] Ministry of Justice of Morocco (adala.justice.gov.ma), 2009-02-18. Protection des personnes physiques à l'égard du traitement des données…(adala.justice.gov.ma)
      Full title and what we used it for

      Protection des personnes physiques à l'égard du traitement des données à caractère personnel (Law 09-08 with Decree 2-09-165). Read the law text for articles 11, 12, 23, 43, 44, 52 and 60. The date is the date of the Dahir that promulgated Law 09-08 (18 February 2009). The text is in French and the reading is ours, not a translation by the publisher.

    2. [2] CNDP, read on 2026-10-26. CNDP home page and news(cndp.ma)
      Full title and what we used it for

      CNDP home page and news. Used to confirm the CNDP's role, that it still points to Law 09-08 as its framework, and its 2026 activity. It had no AI-specific guidance. The date is the day we read the page, not a publication date.

    3. [3] Government of Morocco (maroc.ma, MAP dispatch), 2026-09-09. Les principales avancées de la feuille de route Maroc IA 2030 présentée…(maroc.ma)
      Full title and what we used it for

      Les principales avancées de la feuille de route Maroc IA 2030 présentées à Rabat. Used for the roadmap goals (100 billion DH, 50,000 jobs, 200,000 talents) and Idarati AI. It mentions no law.

    4. [4] Government of Morocco (maroc.ma), 2026-10-16. SM le Roi préside la cérémonie de nomination des membres du nouveau gou…(maroc.ma)
      Full title and what we used it for

      SM le Roi préside la cérémonie de nomination des membres du nouveau gouvernement. Used for the ministry title and the minister's name.

    5. [5] Bank Al-Maghrib, undated. Rapport annuel sur la supervision bancaire, Exercice 2025(bkam.ma)
      Full title and what we used it for

      Rapport annuel sur la supervision bancaire, Exercice 2025. Section 2.2 on AI: the 2025 study of bank AI use and the charter work. The report states no publication date in the text we read, so none is given here.

    6. [6] Finances News Hebdo (interview with Youssef Chraibi, president of FMES), 2025-12-10. Offshoring: la nouvelle offre vise à repositionner le Maroc non plus su…(fnh.ma)
      Full title and what we used it for

      Offshoring: la nouvelle offre vise à repositionner le Maroc non plus sur le coût, mais sur la valeur. Press interview, used for the 130,000-job circular goal, the 17% hiring bonus and the declining share of voice work. Not an official document.

    7. [7] Ecofin Agency (secondary news), 2025-11-05. Morocco advances with Digital X.0 law to regulate artificial intelligen…(ecofinagency.com)
      Full title and what we used it for

      Morocco advances with Digital X.0 law to regulate artificial intelligence. Used for the draft framework law and its status in November 2025. The pending national AI agency bill (no. 53, filed 17 April 2024) comes from Le Brief, 16 June 2026, https://www.lebrief.ma/projet-loi-agence-nationale-ia-100156120/. No official text was found.

    8. [8] Finances News Hebdo, 2026-09-18. Le Maroc repasse définitivement à l'heure GMT ce dimanche 20 septembre(fnh.ma)
      Full title and what we used it for

      Le Maroc repasse définitivement à l'heure GMT ce dimanche 20 septembre. Used for Decree no. 2.26.530, published in Bulletin officiel no. 7521 of 29 June 2026, and the permanent return to GMT on 20 September 2026. Press report; Hespress (5 July 2026) agrees on the decree number and date. The timeanddate page was blocked (403) and not used.

    This is general information, not legal advice. Laws change, and Morocco's AI framework is still being drafted. Check your plans with a qualified Moroccan lawyer. Facts were checked on 26 October 2026.

    Starting with AI in Morocco?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.