1. Introduction

Digital human rights expansion refers to the development, recognition, protection, and enforcement of fundamental rights in digital environments. It examines how traditional civil and constitutional rights apply to internet access, online expression, digital identity, personal-data protection, electronic surveillance, artificial intelligence, and access to digital public services.

In Morocco, this subject involves the interaction of constitutional law, civil obligations, administrative law, personal-data protection, electronic communications, and international human-rights standards.

The central legal question is:

How can Morocco's legal system protect individual rights as government institutions, businesses, and individuals increasingly rely on digital technologies?

Digital technologies can expand access to information, public services, education, and justice. However, they can also create risks involving unauthorized surveillance, misuse of personal information, online discrimination, unlawful restrictions on expression, and exclusion of people who lack digital access.

A comprehensive legal framework must therefore address both the opportunities created by technology and the remedies available when digital systems violate protected rights.

An important distinction is that Morocco's existing legislation does not necessarily establish every proposed digital right as a separate, independently enforceable legal entitlement. Many digital rights are instead derived from existing constitutional protections, statutory obligations, and applicable international commitments.

2. Constitutional Foundations of Digital Human Rights in Morocco

Morocco's Constitution of 2011 provides the principal constitutional foundation for examining human rights in digital environments.

2.1. Article 24: Privacy and private life

Article 24 protects private life and the inviolability of the home, subject to the constitutional and legal conditions governing restrictions.

Its principles are relevant to digital activities such as:

• Collection of personal information by public authorities.
• Monitoring of electronic communications.
• Processing of location information.
• Digital identity verification.
• Storage of personal records by private companies.
• Unauthorized disclosure of confidential communications.

For example, if an organization collects detailed information about a person's online activities, the legality of that processing must be examined under applicable privacy and data-protection rules.

Article 24 should not be interpreted as automatically prohibiting every form of digital monitoring. The legal basis, purpose, safeguards, and circumstances of the monitoring must be examined.

2.2. Article 25: Freedom of thought, opinion, and expression

Article 25 protects freedom of thought, opinion, and expression.

In digital environments, this protection is relevant to:

• Publishing opinions online.
• Participating in public discussions.
• Communicating through digital platforms.
• Sharing information about matters of public interest.
• Expressing criticism of public institutions.
• Participating in online academic and professional debate.

Digital expression may also engage other legal interests, including privacy, reputation, public safety, and the rights of other individuals.

The legal analysis must therefore distinguish protected expression from conduct that may lawfully be restricted under applicable legislation.

2.3. Article 27: Right of access to information

Article 27 recognizes the right to obtain information held by public administrations, elected institutions, and bodies performing public-service functions, subject to applicable legal exceptions.

This right has considerable significance in digital governance.

Electronic public records, online databases, digital administrative portals, and public information systems can make it easier for individuals to exercise their rights and scrutinize government decisions.

Morocco's Law No. 31-13 on the right of access to information provides a statutory framework for exercising this right.

However, access to information must be balanced against applicable confidentiality, privacy, and other lawful restrictions.

2.4. Article 118: Access to justice

Article 118 establishes the principle that acts of an administrative nature may be challenged before the competent administrative courts, subject to applicable procedural rules.

This is important where an administrative decision involving a digital system adversely affects an individual's rights.

Examples include:

• An unlawful refusal of a public service.
• An administrative decision based on inaccurate electronic records.
• A dispute concerning access to public information.
• A challenge to an administrative measure affecting an individual's legal position.

Whether a particular digital decision is reviewable depends on its legal character, the applicable procedural framework, and the remedy sought.

2.5. Articles 154–156: Public-service principles

These provisions establish principles concerning public services, including equality, continuity, quality, transparency, accountability, and responsiveness within the constitutional framework.

They are relevant to the expansion of digital public services because government institutions must consider how electronic systems affect access to services.

A digital-only procedure may create practical difficulties for people who lack internet access, digital literacy, accessible devices, or the ability to use a particular authentication system.

Digital transformation should therefore be assessed not only by its technical efficiency but also by its compatibility with applicable equality and public-service obligations.

3. Statutory Framework for Digital Human Rights Protection

3.1. Law No. 09-08: Protection of personal data

Law No. 09-08 regulates the protection of individuals in relation to the processing of personal data. It is one of the most important statutes for digital human rights in Morocco.

The law is relevant to information collected through websites, mobile applications, government databases, online services, and commercial platforms.

Its principal areas of relevance include:

• Lawful processing of personal information.
• Specified purposes for data collection.
• Accuracy and appropriate use of personal information.
• Security of personal-data processing.
• Rights of individuals concerning their data.
• Regulatory supervision by the National Commission for the Control of Personal Data Protection (CNDP).

Example: A private company collects identity information through a mobile application and shares it with an unrelated third party without an appropriate legal basis. The circumstances may raise issues under Law No. 09-08, depending on the purposes of processing, the applicable legal basis, and any relevant exceptions.

The CNDP has an important supervisory role in the application of Morocco's personal-data protection framework.

3.2. Law No. 31-13: Right of access to information

Law No. 31-13 provides a statutory framework for exercising the constitutional right to access information held by covered public institutions.

Its relevance extends to digital human rights because public information is increasingly stored and distributed electronically.

Examples include:

• Public procurement information.
• Administrative decisions.
• Government statistics.
• Information about public-service delivery.
• Documents concerning public expenditure.
• Information needed to understand public policies.

Access remains subject to the law's scope, procedures, and exceptions.

A public authority cannot simply assume that information is exempt from disclosure because it is stored in an electronic database. The applicable statutory grounds must be considered.

3.3. Law No. 43-20: Electronic trust services

Law No. 43-20 regulates electronic trust services, including electronic signatures and related authentication mechanisms.

These mechanisms can help individuals exercise their rights electronically, conclude contracts, submit administrative documents, and authenticate transactions.

However, electronic authentication also creates risks if identity systems are insecure or if access to essential services depends on a method that certain individuals cannot use.

A rights-oriented framework should therefore address identity verification, protection against impersonation, correction of inaccurate records, and appropriate alternative procedures.

3.4. Criminal-law protections and digital communications

Digital human rights also intersect with criminal law.

Depending on the circumstances, conduct such as unauthorized access to computer systems, unlawful interception, fraudulent use of identity information, or certain forms of unlawful disclosure may engage Moroccan criminal legislation.

However, the classification of online conduct requires attention to the specific statutory elements of the alleged offence.

The existence of offensive or controversial online content does not, by itself, establish that a criminal offence has occurred.

Likewise, the fact that information is publicly accessible does not automatically authorize every form of collection, republishing, or commercial processing.

3.5. International human-rights commitments

Morocco's Constitution recognizes the importance of international human-rights instruments ratified by the Kingdom, within the constitutional framework.

International instruments relevant to digital human rights include:

• The International Covenant on Civil and Political Rights.
• The Universal Declaration of Human Rights.
• The Convention on the Rights of the Child.
• The Convention on the Rights of Persons with Disabilities.

These instruments provide important interpretive standards concerning privacy, expression, equality, children's rights, and access to information.

Their precise domestic legal effect depends on the instrument, its ratification status, relevant constitutional provisions, and the legal issue before the competent authority.

4. Six Case Laws Relevant to Digital Human Rights Expansion

Important jurisdictional clarification: The following are six genuine judgments from international or regional courts that address principles relevant to digital human rights. They are comparative authorities, not Moroccan judgments, and do not automatically establish binding rules in Morocco.

I have distinguished these cases from Moroccan constitutional and statutory law because the existence of a legal principle in another jurisdiction does not, by itself, establish that Morocco has adopted the same doctrine.

Case 1: Handyside v. United Kingdom (1976)

Court: European Court of Human Rights.
Application No.: 5493/72.
Judgment date: 7 December 1976.

Facts

The case concerned the publication of a book intended for young people. British authorities restricted its distribution under domestic obscenity legislation.

The publisher argued that the restrictions violated freedom of expression under Article 10 of the European Convention on Human Rights.

Legal principle

The Court emphasized that freedom of expression protects not only ideas that are favorably received but also those that may offend, shock, or disturb.

The judgment also recognized that restrictions on expression must be assessed within the framework of the Convention and the circumstances of the particular case.

Relevance to digital human rights in Morocco

The principle is relevant to online expression, digital journalism, academic debate, and public discussion.

Online content may be controversial without automatically losing protection as expression.

In Morocco, Article 25 of the Constitution protects freedom of thought, opinion, and expression. Article 28 addresses the freedom to communicate information, ideas, and opinions within the limits expressly established by law.

The comparative lesson is that restrictions should be analyzed according to their legal basis and circumstances rather than treating controversy alone as sufficient justification.

Civil-law significance

A dispute involving online expression may also involve civil claims concerning reputation, privacy, or damages. Courts must examine the relevant rights and applicable legislation rather than assuming that every conflict between expression and another right has the same outcome.

Limitation: This judgment interprets the European Convention on Human Rights, not Moroccan constitutional law.

Case 2: Ahmet Yıldırım v. Turkey (2012)

Court: European Court of Human Rights.
Application No.: 3111/10.
Judgment date: 18 December 2012.

Facts

Turkish authorities ordered the blocking of an internet-hosting service following content published on one website. The measure also prevented access to other websites hosted on the same service.

The applicant challenged the interference with access to his own website.

Legal principle

The Court found a violation of Article 10 of the European Convention on Human Rights.

The judgment emphasized the importance of a sufficiently clear legal framework and safeguards against excessive restrictions on internet access.

Relevance to Morocco

The case illustrates the relationship between digital access, freedom of expression, and proportionality.

A restriction affecting an entire platform or service may interfere with lawful communications beyond the specific content that prompted the measure.

When examining an internet restriction in Morocco, relevant questions include:

1. What legal provision authorizes the restriction?
2. Is the competent authority acting within its powers?
3. Is the scope of the restriction justified?
4. Are lawful users unnecessarily affected?
5. Is an effective legal challenge available?

These questions must be answered under Moroccan law and the applicable international obligations.

Civil-law significance

Where an unlawful restriction causes legally recognizable harm, questions of administrative legality, available remedies, and potentially compensation may arise.

The precise remedy depends on the responsible authority, the nature of the measure, and the applicable procedural law.

Case 3: Delfi AS v. Estonia (2015)

Court: European Court of Human Rights, Grand Chamber.
Application No.: 64569/09.
Judgment date: 16 June 2015.

Facts

Delfi, a commercial news portal, was held liable under domestic law for seriously offensive comments posted by users beneath an online article.

The company argued that imposing liability for third-party comments violated its freedom of expression.

Legal principle

The Grand Chamber found no violation of Article 10 in the particular circumstances.

It considered the nature and context of the comments, the portal's role, the measures taken to address the comments, and the consequences imposed on the company.

The decision does not establish that every online intermediary is automatically liable for every user comment.

Relevance to Morocco

Digital human-rights disputes can arise when platforms host defamatory statements, threats, or other potentially unlawful material.

The case demonstrates the need to distinguish between:

• The original author of the content.
• The person or organization operating the platform.
• The measures available to prevent or address harm.
• The legal basis for imposing liability.
• The proportionality of the resulting sanction.

Civil-law significance

A Moroccan dispute involving online defamation or platform responsibility would require application of the relevant Moroccan legislation and principles of liability.

The comparative judgment helps frame the questions but does not determine the outcome of a Moroccan case.

Case 4: Google Spain SL and Google Inc. v. Agencia Española de Protección de Datos and Mario Costeja González (2014)

Court: Court of Justice of the European Union.
Case No.: C-131/12.
Judgment date: 13 May 2014.

Facts

Mario Costeja González objected to search-engine results linking his name to older newspaper notices concerning financial difficulties and property proceedings.

He sought the removal of the links from search results associated with his name.

Legal principle

The Court interpreted the European Union's then-applicable data-protection framework.

It held that search-engine operators could, in appropriate circumstances, be required to remove links to personal information when the legal conditions were satisfied and the individual's data-protection interests outweighed the relevant public-interest considerations.

The judgment did not establish that every person can demand the removal of any accurate information from the internet.

Relevance to Morocco

The case highlights a significant issue in digital human-rights expansion: how to balance personal-data protection with access to information.

A person may have legitimate concerns about the continuing accessibility of old personal information. At the same time, information about public responsibilities or matters of continuing public interest may remain important to society.

Morocco's Law No. 09-08 provides the domestic statutory framework for examining personal-data processing. The European Union's specific search-engine doctrine should not automatically be imported into Moroccan law.

Civil-law significance

Depending on the circumstances, disputes may concern unlawful processing, disclosure of personal information, reputational harm, or requests for correction and other available remedies.

Case 5: Roman Zakharov v. Russia (2015)

Court: European Court of Human Rights, Grand Chamber.
Application No.: 47143/06.
Judgment date: 4 December 2015.

Facts

The applicant challenged Russian legislation and practices concerning the interception of mobile telephone communications.

The case examined whether the legal framework governing secret surveillance provided adequate safeguards against abuse.

Legal principle

The Court found a violation of Article 8 of the European Convention on Human Rights.

It examined the legal framework for interception, the scope of surveillance powers, authorization procedures, supervision, and safeguards against arbitrary or excessive interference.

Relevance to Morocco

The case is relevant to the protection of private communications and the risks associated with digital surveillance.

Article 24 of Morocco's Constitution protects private life and the secrecy of private communications. It provides that access to the content of private communications, their disclosure, or their use against a person requires judicial authorization under the conditions and procedures established by law.

The judgment illustrates why surveillance frameworks need clear legal rules, appropriate authorization, oversight, and safeguards.

Civil-law significance

Unlawful access to private communications may raise questions about privacy violations, the legality of evidence, and potential remedies, depending on the applicable Moroccan rules and the circumstances.

Limitation: The case concerns Russian surveillance law and the European Convention on Human Rights. It does not determine the legality of a particular surveillance measure in Morocco.

Case 6: Big Brother Watch and Others v. United Kingdom (2021)

Court: European Court of Human Rights, Grand Chamber.
Applications: 58170/13, 62322/14, and 24960/15.
Judgment date: 25 May 2021.

Facts

The applications challenged aspects of the United Kingdom's bulk interception, intelligence-sharing, and acquisition of communications data.

The applicants raised concerns about privacy, freedom of expression, and the protection of journalistic communications.

Legal principle

The Grand Chamber found violations of Article 8 in relation to the bulk-interception regime and of Article 10 in relation to aspects of the regime's safeguards for journalistic material.

The Court emphasized the importance of safeguards throughout the surveillance process, including authorization, selection of material, supervision, and protection of confidential journalistic sources.

The judgment did not declare that every form of bulk interception is automatically unlawful.

Relevance to Morocco

Digital human-rights protection must account for the scale at which modern communications can be collected and analyzed.

Large-scale data collection can affect people who are not suspected of wrongdoing. A sound legal framework therefore needs safeguards addressing the purpose, scope, authorization, handling, and oversight of surveillance.

For Morocco, Article 24 of the Constitution and applicable legislation provide the domestic legal starting point for evaluating such questions.

Civil-law significance

The judgment is relevant to understanding how digital surveillance can affect privacy and communications rights. Any claim for compensation or other relief in Morocco must nevertheless be grounded in the applicable domestic legal framework.

Comparative case-law table

These cases collectively illustrate six important dimensions of digital human-rights protection. They should be used as comparative authorities, not as substitutes for Moroccan statutes or verified Moroccan judicial decisions.

5. Expansion of Specific Digital Human Rights in Morocco

Digital human-rights expansion does not necessarily mean creating an entirely new set of rights. It can also mean applying established rights to new technological situations and strengthening the remedies available when those rights are violated.

5.1. Right to digital privacy

Digital privacy concerns the collection, storage, analysis, sharing, and disclosure of personal information.

It extends to information such as:

• Identity and contact details.
• Private electronic communications.
• Location records.
• Financial and commercial information.
• Online activity and browsing records.
• Biometric identifiers.

Article 24 of the Moroccan Constitution and Law No. 09-08 are central to the domestic legal framework.

Example: A company collects location data from a mobile application and uses it for an unrelated purpose without an appropriate legal basis. This may raise issues concerning the lawfulness of processing, transparency, security, and the rights of the affected individual.

The expansion of digital privacy protection requires more than obtaining a user's acceptance of lengthy terms and conditions. Organizations must also comply with applicable legal obligations.

5.2. Right to freedom of online expression

Freedom of expression enables people to exchange ideas, criticize public decisions, participate in discussions, and communicate information.

Online platforms have expanded the practical opportunities for exercising this freedom.

However, digital expression may conflict with other rights, including privacy, reputation, and protection against unlawful threats.

A balanced legal framework should distinguish between lawful criticism and conduct that satisfies the legal requirements for a restriction or sanction.

The comparative cases Handyside and Ahmet Yıldırım illustrate the importance of examining the nature and proportionality of restrictions on expression.

5.3. Right to personal-data protection

Personal-data protection is especially important because digital systems can collect and combine information on a scale that would be difficult to achieve through traditional records.

The legal framework should address:

1. The purpose for which information is collected.
2. The legal basis for processing.
3. The accuracy and relevance of the information.
4. Security and confidentiality.
5. Appropriate retention and deletion.
6. Individual rights and available remedies.

In Morocco, Law No. 09-08 provides the principal statutory framework.

The Google Spain judgment demonstrates the importance of balancing data-protection interests with public access to information. Its specific doctrine, however, arises from European Union law.

5.4. Right to digital equality

Digital equality concerns equal access to digital opportunities and protection against unjustified discrimination in technology-enabled services.

Potential barriers include:

• Limited internet connectivity.
• Disability-related accessibility barriers.
• Low digital literacy.
• Language limitations.
• Inadequate access to devices.
• Biased automated decision-making.

Article 19 of Morocco's Constitution establishes equality principles, while Article 34 addresses public policies for people and groups with particular needs.

These constitutional provisions are relevant when evaluating whether digital systems create unjustified barriers to participation or access to services.

Example: If a public institution provides an essential service exclusively through a digital platform that is inaccessible to certain users, the institution should assess whether the arrangement complies with applicable equality, accessibility, and public-service requirements.

The precise legal remedy will depend on the institution, the service, and the applicable law.

5.5. Right to digital access to justice

Digital access to justice involves using technology to help people understand legal procedures, submit documents, obtain information, and communicate with courts or administrative institutions.

Article 118 of the Moroccan Constitution establishes the right of access to justice.

Digital services can support that right by reducing travel requirements, improving access to procedural information, and making administrative processes more convenient.

However, technological efficiency should not undermine procedural fairness.

Digital justice systems should consider:

• Secure submission and preservation of documents.
• Reliable notification of proceedings.
• Protection of confidential information.
• Opportunities to challenge inaccurate records.
• Accessibility for people with disabilities.
• Appropriate assistance for people who cannot use digital procedures independently.

The constitutional right of access to justice does not, by itself, establish an unconditional right to conduct every judicial procedure electronically. The applicable procedural legislation remains important.

5.6. Protection against discriminatory algorithms

Artificial intelligence may be used to evaluate applications, identify patterns, prioritize complaints, or support administrative decisions.

These systems can reproduce discrimination when their training data or design reflects existing inequalities.

For example, an automated system used to assess applications for public assistance might consistently assign lower scores to a particular group because of an inappropriate proxy variable.

A rights-oriented approach should require appropriate testing, review, transparency, and mechanisms for correcting errors.

In Morocco, constitutional equality principles and applicable sector-specific laws provide the starting point for analyzing these risks. The legal consequences of an algorithmic decision depend on the circumstances and the rules governing the particular service.

6. Civil Liability for Digital Human-Rights Violations

Civil liability becomes relevant when a digital activity causes legally recognizable harm and the applicable requirements for responsibility are satisfied.

6.1. Unauthorized disclosure of personal information

Suppose a service provider accidentally publishes confidential information about its customers.

The affected individuals may have grounds to seek a remedy if the facts establish a breach of an applicable legal duty and the requirements for relief are met.

Relevant questions include:

• What information was disclosed?
• Was the processing lawful?
• Which party was responsible for protecting the information?
• Did the disclosure cause harm?
• What remedies are available under the applicable law?

6.2. Unlawful monitoring

Unlawful monitoring of private communications may engage constitutional privacy protections and relevant statutory rules.

Depending on the circumstances, the dispute may involve administrative legality, the admissibility of evidence, personal-data protection, or civil liability.

The existence of monitoring alone does not determine whether it was unlawful. The applicable legal authorization, purpose, procedures, and safeguards must be examined.

6.3. Online defamation and reputational harm

False statements published online can cause financial, professional, or personal harm.

A civil claim may require consideration of the statement's meaning, its factual basis, the identity of the publisher, applicable defences, and the harm caused.

The liability of an intermediary must be assessed separately under the applicable law. The Delfi judgment is useful for comparative analysis but does not establish automatic platform liability in Morocco.

6.4. Discriminatory digital services

Where a digital service unlawfully discriminates against an individual, the legal analysis may involve equality guarantees, sector-specific legislation, administrative review, or civil liability.

A claimant would need to establish the relevant facts and identify an applicable legal basis for the remedy sought.

7. Institutional Framework for Digital Human-Rights Protection

Several Moroccan institutions have functions relevant to digital rights.

Their powers are not interchangeable.

For example, the CNDP's mandate concerns personal-data protection. It does not replace the courts in every dispute involving freedom of expression, damages, or administrative action.

Similarly, the Institution of the Mediator has a role in relations between the public administration and service users but does not replace judicial remedies available under the law.

An effective digital-rights framework requires clear procedures for complaints, appropriate institutional coordination, and access to the competent authority.

8. Principal Challenges in Expanding Digital Human Rights

A. The gap between legal recognition and enforcement

A right may be recognized in constitutional or statutory terms while practical enforcement remains difficult.

People may lack awareness of complaint procedures, access to legal assistance, or the technical knowledge needed to explain how a digital system caused harm.

B. Cross-border data processing

Digital services frequently transfer or process information across national borders.

This creates questions about applicable law, regulatory oversight, international transfers, and the availability of remedies against foreign service providers.

C. Rapid technological development

Artificial intelligence, biometric identification, automated profiling, and new surveillance technologies can develop faster than existing legal rules.

Legal systems must determine how established rights apply to new uses without assuming that every new technology requires an entirely separate right.

D. Limited digital access

Digital-only procedures may disadvantage people who lack internet access, devices, digital literacy, or accessible interfaces.

An inclusive approach should preserve appropriate alternatives and ensure that digital transformation does not unnecessarily restrict access to essential services.

E. Balancing competing rights

Privacy, freedom of expression, access to information, and public safety may sometimes conflict.

A legal framework must provide procedures for identifying the applicable rights, assessing legitimate restrictions, and obtaining review where required.

9. Recommendations for Strengthening Digital Human Rights in Morocco

The following measures could help strengthen protection within the existing legal framework.

1. Improve enforcement of personal-data protection. Organizations should assess the lawfulness of processing, strengthen information security, and provide effective procedures for handling data-subject requests.

2. Improve transparency. Public institutions should provide accessible information about how digital services operate, what personal data they collect, and how decisions can be challenged.

3. Strengthen safeguards for automated decisions. High-impact systems should be subject to appropriate testing, human oversight, and mechanisms for correcting inaccurate or discriminatory outcomes.

4. Preserve access to justice. Digital procedures should provide reliable notifications, secure document handling, and appropriate opportunities to challenge decisions.

5. Improve accessibility. Digital public services should be designed to accommodate people with disabilities and users with differing levels of digital literacy.

6. Clarify remedies. Individuals should be able to identify the competent authority and understand the available procedures for challenging alleged violations.

7. Improve legal and digital literacy. Public education can help individuals understand privacy settings, recognize fraudulent activity, and identify the legal mechanisms available when their rights are infringed.

8. Improve judicial transparency. Publication of appropriately anonymized judicial decisions can help lawyers, researchers, businesses, and individuals understand how existing legal principles apply to digital disputes.

10. Conclusion

Civil Law and Digital Human Rights Expansion Frameworks in Morocco concerns the application and development of fundamental rights in an increasingly digital society.

Morocco's Constitution provides important foundations through privacy protections, freedom of expression, access to information, equality, and access to justice. Law No. 09-08, Law No. 31-13, and other applicable legislation provide additional statutory safeguards.

The six comparative judgments discussed above demonstrate how courts have addressed online expression, internet restrictions, intermediary liability, personal-data protection, and digital surveillance. They are useful for legal analysis, but they should not be presented as Moroccan precedents.

The principal challenge is to ensure that technological development does not weaken existing rights or make them practically inaccessible.

The central legal principle is that digital transformation should strengthen the effective exercise of human rights while preserving legality, equality, privacy, freedom of expression, and access to justice.