1. Introduction: meaning of digital persona rights governance

Civil Law and Digital Persona Rights Governance in Morocco concerns the legal protection of a person's identity, image, reputation, personal information, privacy, and digital representation in online environments.

A person's digital persona may include their name, photograph, voice, online profile, social-media accounts, biometric identifiers, personal data, and other information through which they can be identified.

Digital persona rights governance involves rules and procedures for determining how that information may be collected, used, shared, altered, or removed, and what remedies may be available when a person's rights are infringed.

For example, if a business uses a person's photograph in an advertisement without proper authorisation, or an online account publishes false allegations about an identifiable individual, several legal questions may arise: privacy, image rights, defamation, data protection, consent, and civil liability.

Morocco does not have one comprehensive statute entitled a “Digital Persona Rights Act.” Instead, protection comes from a combination of constitutional guarantees, personal-data legislation, press and publishing law, civil-liability principles, intellectual-property rules, and applicable criminal law.

2. Principal legal framework in Morocco

A. Constitution of Morocco, 2011

Article 24 of the Moroccan Constitution protects the right to privacy. This constitutional guarantee is particularly relevant when digital technologies enable extensive collection, storage, or dissemination of information about individuals.

Article 27 addresses access to information and recognises legally permissible restrictions, including those intended to protect private life and other constitutionally protected interests.

CNDP

These principles help frame the balance between privacy, freedom of expression, public interest, and the rights of others.

B. Law No. 09-08 on personal-data protection

Law No. 09-08, promulgated on 18 February 2009, regulates the processing of personal data concerning natural persons. Its definition of personal data encompasses information relating to an identified or identifiable person, including sound and images.

BDJ

The law is relevant to:

Collection of personal information by online platforms.

Processing of photographs, recordings, and identity details.

Sharing personal data with third parties.

Accuracy and correction of personal records.

Security and confidentiality of stored information.

Rights of access and applicable rectification procedures.

The National Commission for the Control of Personal Data Protection (CNDP) is Morocco's national data-protection authority.

Article 11 is particularly important for automated systems: it restricts certain decisions with legal effects when they are based solely on automated processing intended to evaluate aspects of a person's personality. This is relevant to profiling, automated assessments, and some AI-based identity systems.

BDJ

C. Law No. 88-13 on the Press and Publishing

Law No. 88-13 provides specific protections concerning defamation, insult, privacy, and the right to one's image in the context of covered publications, including electronic newspapers.

Articles 87 and 89 are particularly relevant. Article 87 addresses compensation for harm caused by defamation, insult, invasion of privacy, or infringement of image rights. Article 89 addresses certain invasions of privacy involving identifiable persons and private facts, photographs, or videos.

WIPO

These provisions are important when an individual's digital persona is harmed through online journalism or covered publications. Their application depends on the content, circumstances, and applicable statutory requirements.

D. Civil liability under Moroccan law

The Moroccan Code of Obligations and Contracts provides the broader framework for civil liability, including the consequences of wrongful conduct that causes legally recognised harm.

Depending on the facts, a person whose digital identity or reputation has been harmed may consider seeking compensation, cessation of the wrongful conduct, or other remedies available under the applicable legislation.

Civil liability is not automatic whenever a photograph or personal detail appears online. The relevant legal basis, consent, context, harm, defences, and procedural requirements must be examined.

E. Electronic transactions and digital evidence

Law No. 53-05 on electronic exchange of legal data provides a framework relevant to electronic documents and transactions.

In digital-persona disputes, evidence may include original posts, URLs, account records, timestamps, messages, screenshots, metadata, and records showing the extent of publication. The evidentiary weight of such material depends on authenticity, integrity, context, and the applicable rules of evidence.

F. Copyright and related rights

Moroccan intellectual-property legislation may be relevant when a digital persona dispute also involves unauthorised reproduction of a photograph, video, recording, or other protected work.

However, copyright in a photograph and the photographed person's rights to privacy or image are distinct legal questions. Permission from a photographer does not necessarily resolve every issue concerning publication of the subject's image.

3. Six major Moroccan case laws on digital persona rights

Moroccan jurisprudence in this area is developing, and published decisions directly addressing digital privacy remain relatively limited. The following cases are especially relevant because they address image rights, online publication, privacy, reputation, consent, and civil compensation.

Case 1: Moroccan Court of Cassation, Civil Chamber — Decision No. 196, 25 March 2014

Subject: Unauthorised commercial use of a person's photograph.

Facts: A woman's photograph, originally taken for the promotion of a sports club, was subsequently used by a company manufacturing plastic utensils to advertise its products.

Legal issue: Whether a party involved in the unauthorised use of the photograph could avoid civil liability despite its contribution to the resulting harm.

Decision: The Court of Cassation quashed the challenged decision and remitted the case. The reported judgment recognised that unauthorised commercial publication of the claimant's image could justify compensation for moral harm. It also emphasised the relevance of the defendant's active contribution to that harm.

مجلة مغرب القانون

Application to digital persona governance: A company cannot necessarily avoid liability simply because another business operates the website or social-media account on which the image appears. Each party's role and contribution must be assessed.

Legal principle: A person's image is a protected personal interest, and its commercial exploitation without appropriate authorisation may give rise to civil liability.

Case 2: Casablanca Commercial Court — Judgment No. 9777, 26 October 2021

Subject: Unauthorised publication of an individual's photograph on a commercial website.

Facts: A company used the claimant's photograph on its website for commercial purposes without obtaining the claimant's prior consent. The claimant relied on evidence documenting the online publication and identifying the person shown.

Legal issue: Whether the unauthorised commercial use of the image constituted a civil wrong and whether the companies involved could be held liable.

Decision: The court found civil liability and ordered the defendants to pay MAD 50,000 in compensation for moral harm. It also ordered the cessation of the photograph's use, subject to a daily financial penalty for non-compliance.

Jurisprudence

Application to digital persona governance: Digital publishers and businesses should verify the identity of people depicted, establish the appropriate legal basis for using their images, and maintain records of the scope of any authorisation.

Legal principle: Online availability of a photograph does not itself confer permission to exploit it commercially.

Case 3: Casablanca Court of Appeal — Decision No. 2324, 24 June 2021

Subject: Defamatory content and manipulated photographs circulated on Facebook.

Facts: The proceedings concerned offensive and defamatory online publications, including manipulated photographic material. The dispute involved the effect of the publications on the claimants' privacy and reputation.

Legal issue: How criminal responsibility and civil compensation should be assessed when digital content is used to insult, defame, or harm identifiable people.

Decision: The Court of Appeal increased the penalties and civil compensation imposed in the underlying proceedings. The reported decision considered the seriousness of the conduct, the harm caused, and the evidence of the online publications.

Jurisprudence

Application to digital persona governance: An online identity-management framework should address fake images, manipulated photographs, impersonation, and the circulation of defamatory material.

It should also preserve reliable evidence of the original publication, its author where identifiable, and its subsequent distribution.

Legal principle: Digital publication does not eliminate the possibility of liability for unlawful harm to a person's reputation or privacy.

Case 4: Casablanca Court of Appeal — Decision No. 69, 9 January 2023

Subject: Online defamation, false allegations, and invasion of privacy.

Facts: The defendant appealed a criminal judgment concerning publications on social networks. The proceedings involved allegations of defamation, dissemination of false information, and conduct affecting a woman's private life and reputation.

Legal issue: Whether the first-instance court's findings and remedies were sufficiently supported by the evidence and applicable legislation.

Decision: The Court of Appeal upheld the first-instance judgment. The underlying judgment included a three-month custodial sentence, a fine of MAD 10,000, and civil compensation of MAD 60,000. It also required removal of the disputed posts and publication of the judgment under the specified conditions.

Jurisprudence

Application to digital persona governance: A platform's response to an alleged infringement may need to address both the continued availability of the harmful content and the preservation of evidence for legal proceedings.

Legal principle: Depending on the applicable law and facts, online violations of reputation and privacy may lead to remedies extending beyond monetary compensation.

Case 5: Casablanca Commercial Court of Appeal — Decision of 31 October 2024

Subject: Continued use of a former employee's photograph and personal data for advertising.

Facts: A dispute arose after a company continued to use a former employee's image and personal information for promotional purposes following the end of the employment relationship.

Legal issue: Whether information supplied during employment amounted to consent to later commercial use of the employee's image and personal data.

Decision: The reported judgment rejected the argument that consent could simply be inferred from the employment relationship. It upheld the principle of liability, confirmed the requirement to remove the disputed information, and increased compensation to account for the harm identified in the proceedings.

Jurisprudence

Application to digital persona governance: Consent should be assessed in relation to the particular purpose for which information is used. Providing a photograph for an employment record does not automatically authorise indefinite promotional use on social media.

Legal principle: The purpose and scope of authorisation matter when personal data is reused for a new commercial objective.

Case 6: Casablanca Commercial Court — Judgment of 20 May 2024

Subject: Unauthorised use of a person's photograph on Instagram.

Facts: A commercial dispute concerned the use of an individual's photograph by a business on Instagram for advertising purposes without the required authorisation.

Legal issue: Whether the publication could give rise to civil liability and compensation for moral or material harm.

Reported significance: The court considered the claimant's right to control the commercial use of their image and the availability of civil remedies for unauthorised publication. The case is listed among Moroccan decisions concerning image rights and digital publication.

Jurisprudence

Application to digital persona governance: Businesses should review the legal basis for using photographs in online advertising, keep evidence of relevant permissions, and establish a procedure for responding to requests to remove disputed content.

Legal principle: Using an identifiable person's image for digital marketing may engage personal rights even where the publication does not disclose additional private information.

Case-law qualification: The decisions above are reported authorities, and some are available through secondary case summaries rather than complete published judgments. The precise procedural history and final remedies in each case should be checked against the full judgment before formal legal citation.

4. Additional relevant case law

Case 7: Casablanca Commercial Court — Judgment of 30 April 2024

Subject: Use of a former employee's photograph and personal information without authorisation.

The dispute concerned an employer's use of a former employee's photograph and personal details on social media for advertising purposes. The claimant also alleged that the publication contributed to professional harm.

The court reportedly awarded compensation and ordered removal of the disputed material. The judgment illustrates the importance of distinguishing consent to the use of personal information for administrative employment purposes from authorisation for public commercial promotion.

Jurisprudence

Relevance: Digital persona governance should require organisations to review the purpose, duration, and scope of permission before reusing employee photographs or personal details.

Case 8: Casablanca Commercial Court of Appeal — Judgment of 16 December 2021

Subject: Publication of a person's photograph without consent.

This reported appellate decision concerns the legal consequences of publishing an individual's photograph without appropriate consent. It is relevant to the assessment of image rights, privacy, and the responsibility of publishers for unauthorised publication.

Law Gratis

Relevance: A digital platform should not assume that a photograph may be republished simply because it was previously accessible to the public. The legal basis for the proposed use must be examined.

These additional decisions reinforce the same broad principles. They should not be understood as establishing an unrestricted right to remove any image or online statement: the applicable law, context, consent, public interest, and available defences remain relevant.

5. Legal principles emerging from the case law

6. Digital persona governance in different legal contexts

A. Social-media platforms

Social-media platforms can facilitate communication, but they can also be used to publish defamatory statements, disclose private information, impersonate individuals, or circulate manipulated images.

A governance framework should provide procedures for reporting alleged violations, reviewing complaints, preserving relevant evidence, and responding to lawful orders.

The legal position of the original poster, a platform operator, and a person who republishes content may differ depending on their conduct and the applicable law.

B. Artificial intelligence and digital impersonation

AI tools can generate realistic images, imitate voices, and create synthetic videos depicting identifiable people.

These technologies create new challenges for Moroccan law, particularly when generated content is presented as genuine, used to damage reputation, or distributed to expose private information.

Existing privacy, data-protection, image-rights, defamation, and criminal-law provisions may apply depending on the facts. The precise legal treatment of a particular synthetic-media use must be assessed under the relevant provisions rather than assuming that all AI-generated content is unlawful.

A responsible AI governance system should include consent checks where appropriate, provenance records, clear disclosure of synthetic content, and procedures for responding to impersonation complaints.

C. Employment and professional identity

Employers may hold employee photographs, contact details, professional biographies, and other personal information.

Such records should be used for legitimate, clearly defined purposes. A separate assessment may be required before using the same information in advertising, promotional videos, or social-media campaigns.

The reported Moroccan employment-image decisions demonstrate the practical importance of reviewing consent and the continued use of personal data after employment ends.

D. E-commerce and digital advertising

Businesses may use photographs, customer testimonials, names, and profile information to promote products and services.

Digital persona governance can help businesses maintain authorisation records, manage requests to withdraw or limit permission where legally applicable, and avoid misleading or unauthorised representations.

A business should also distinguish its rights in the advertising material from the rights of the person depicted.

E. Digital identity and biometric information

Facial images, voiceprints, and other biometric identifiers can create significant privacy risks when used for authentication, surveillance, or profiling.

Law No. 09-08 provides the relevant personal-data framework, including special treatment for certain categories of sensitive data. Whether a particular biometric operation falls within a specific legal category depends on the information processed and the purpose of processing.

Appropriate safeguards include access controls, security testing, limited retention, and compliance with applicable CNDP procedures.

7. Remedies available for digital persona infringements

Depending on the facts and applicable legislation, a person affected by an infringement may consider several forms of relief.

Data access or rectification

A person may exercise applicable rights under Law No. 09-08 to access or seek correction of personal data, subject to the relevant legal requirements.

Civil compensation

Where the elements of civil liability are established, a claimant may seek compensation for legally recognised moral or material harm.

Removal or cessation

A claimant may request removal of harmful content or cessation of unauthorised use where a legal basis for that remedy exists.

Judicial proceedings

Depending on the conduct, proceedings may involve civil liability, applicable press-law remedies, or criminal provisions.

The appropriate remedy depends on the legal basis of the claim, the evidence, the nature of the harm, and the competent forum. A data-protection complaint and a civil damages action are not necessarily interchangeable.

8. Evidence in digital persona disputes

Evidence is often central to determining whether an infringement occurred and who was responsible.

Useful evidence may include:

Original URLs and screenshots showing the content and publication date.

Copies of relevant emails, messages, or authorisation forms.

Records identifying the account or business responsible, where available.

Evidence of the extent of distribution and resulting harm.

Requests for removal and the responses received.

Relevant contracts, licences, and consent records.

Screenshots can be useful, but they may not independently establish authorship, authenticity, or the complete context of a publication. Where appropriate, preservation of original records and formal documentation of online content can strengthen the evidentiary record.

9. Recommendations for a Moroccan digital persona governance framework

A practical framework should include the following measures:

Clear consent management: Record the purpose, scope, and duration of authorisations for using images, recordings, and other personal information.

Purpose limitation: Assess whether proposed reuse of personal data is compatible with the purpose for which it was collected and lawful under the applicable framework.

Privacy by design: Minimise unnecessary data collection and limit access to personal information.

AI accountability: Establish safeguards against impersonation, misleading synthetic media, and unjustified automated profiling.

Effective complaint procedures: Provide clear channels for individuals to challenge misuse of their digital identity.

Evidence preservation: Maintain appropriate records of consent, publication, access, and changes to digital content.

Proportionate remedies: Distinguish between correction of inaccurate data, removal of unlawful content, compensation, and criminal proceedings.

Regular legal review: Update internal procedures as legislation, regulatory guidance, and judicial interpretation develop.

10. Conclusion

Civil Law and Digital Persona Rights Governance in Morocco concerns the protection of identity, privacy, image, reputation, and personal information in an increasingly digital environment.

Moroccan legislation provides a framework through constitutional privacy protections, Law No. 09-08, Law No. 88-13, civil-liability rules, and applicable criminal and intellectual-property provisions. The reported case law demonstrates that unauthorised commercial use of photographs, harmful social-media publications, and misuse of personal information can lead to judicial remedies.

The eight decisions discussed above provide examples of how these principles have been applied, although their precise holdings and procedural details should be confirmed against the complete judgments before formal legal use.

The central principle is that digital identity is not merely a commercial resource or a collection of data points. Its use must respect the legal interests of the individual, including applicable privacy, image, and reputation protections, while also taking account of lawful expression, public interest, and the rights of others.