1. Introduction

Rights Protection Automation in Morocco refers to the use of digital systems, artificial intelligence (AI), electronic registries and automated administrative or judicial procedures to identify, protect, enforce and remedy violations of civil rights.

It is an emerging legal concept rather than a separate, fully codified branch of Moroccan law. Its purpose is to make the protection of rights faster, more accessible, consistent and transparent, while ensuring that technology does not undermine human dignity, privacy, equality or the right to a fair hearing.

Examples include:

Automated detection of unlawful changes to land-registration records.

Digital systems that help people file civil claims and track court proceedings.

Automated alerts concerning limitation periods, unpaid obligations and enforcement deadlines.

AI-assisted identification of discriminatory practices in employment, housing or consumer transactions.

Digital protection of personal data and identity.

Online systems for complaints, compensation claims and administrative appeals.

The central legal principle is that automation should assist the protection of rights, not replace the legal responsibility of courts, public authorities or human decision-makers.

2. Legal foundations in Morocco

Morocco's future rights-protection automation framework must be built on existing constitutional, civil, procedural and data-protection law.

A. Constitution of Morocco, 2011

The Constitution provides the principal foundation for protecting individual rights.

Important provisions include:

Article 6: Legality, equality before the law and the obligation of public authorities to comply with the law.

Article 19: Equality between women and men and the State's responsibility to work towards its implementation.

Article 20: The right to life.

Article 21: The right to security and protection of persons.

Article 22: Protection of physical and moral integrity and prohibition of cruel, inhuman or degrading treatment.

Article 23: Personal liberty and safeguards against arbitrary detention.

Article 24: Protection of private life and freedom of movement.

Article 27: The right to access information, subject to lawful restrictions.

Article 28: Freedom of the press and expression within constitutional limits.

Article 35: Protection of property and freedom of enterprise, subject to constitutional and legal conditions.

Article 118: The right to challenge administrative decisions before the competent administrative courts.

Article 120: The right to a fair trial and judgment within a reasonable time.

Article 121: Legal assistance for persons without sufficient resources, under the conditions established by law.

These provisions mean that an automated public decision must remain lawful, reviewable and compatible with fundamental rights.

B. Dahir of Obligations and Contracts

The Moroccan Dahir of Obligations and Contracts (DOC) provides the general civil-law foundation for contractual obligations, liability and compensation.

Its principles are relevant where automated systems:

Produce incorrect information that causes financial loss.

Miscalculate contractual payments.

Generate misleading legal notices.

Incorrectly identify a debtor or creditor.

Cause a party to lose an opportunity to enforce a civil right.

The general rules on contractual responsibility and civil liability can apply where the legal requirements are established. Automation does not automatically exempt the operator, service provider or contracting party from liability.

C. Law No. 09-08 on personal-data protection

Law No. 09-08 is particularly important because rights-protection automation may involve sensitive personal information, identity records, financial data, family information and court-related records.

Its relevance includes:

Lawful processing of personal data.

Protection against improper use of personal information.

Requirements relating to the purpose of data processing.

Security and confidentiality obligations.

Rights of individuals in relation to their personal information.

Oversight by the National Commission for the Control of Personal Data Protection (CNDP).

An automated system that processes personal information must comply with the applicable requirements of Law No. 09-08.

D. Law No. 53-05 on electronic data exchange

Law No. 53-05 established an important legal framework for electronic data exchange and electronic documents. It is relevant to electronic transactions, digital evidence and the legal recognition of certain electronic records.

E. Law No. 41-90 establishing administrative courts

Administrative courts are important when rights are affected by public-authority decisions. Automated administrative procedures must not remove the individual's ability to challenge an unlawful administrative decision.

F. Law No. 39-08 on the Code of Real Rights

This law is relevant to property rights, ownership, real rights and the legal consequences of property transactions.

Digital land-registration and property-monitoring systems may help detect inconsistencies, fraudulent transactions and unlawful changes. However, the legal validity of a property right must still be determined under the applicable legislation and procedures.

3. The most important statutory safeguard: Article 11 of Law No. 09-08

One of the strongest legal foundations for rights-protection automation is Article 11 of Law No. 09-08.

It establishes two important safeguards:

A judicial decision involving an assessment of a person's behaviour cannot be based on automated processing of personal data designed to evaluate aspects of that person's personality.

Other decisions producing legal effects for a person cannot be based solely on automated processing intended to profile that person or evaluate aspects of their personality.

The law recognises limited exceptions, including certain contractual decisions where the individual has had an opportunity to present observations, and decisions that satisfy the individual's request.

This is especially important for AI-based rights-protection systems. For example, an automated system should not independently decide that a person is dishonest, unreliable, dangerous or undeserving of a legal benefit merely because a profile generated by the system gives that person a particular score.

Article 11 is therefore a significant barrier against fully automated decisions that affect legal rights. It supports a model in which human review, the opportunity to respond and legal accountability remain essential.

Other important provisions include:

Articles 3–4: Principles governing lawful, fair and purpose-specific processing and the conditions for processing personal data.

Article 7: Special safeguards for sensitive personal data.

Article 12: Prior authorisation or declaration requirements for specified categories of processing.

Article 23: Security obligations for personal-data processing.

Articles 46–50: Rules concerning registers and certain categories of public-authority data processing.

The exact applicable requirements depend on the nature of the data, the controller, the purpose and any statutory exception.

4. Six Moroccan judicial decisions relevant to rights-protection automation

Important qualification: Morocco has not yet developed a substantial body of reported case law specifically governing AI-based rights-protection systems. The following decisions concern established principles of administrative legality, judicial enforcement, procedural fairness, evidence and jurisdiction. They are relevant by analogy to future automated systems; they are not judgments approving or regulating AI.

Case 1: Court of Cassation, Administrative Chamber, Decision No. 132, 27 June 1979

Administrative file No. 55297

Subject: Failure by the administration to execute an enforceable judicial decision.

Legal principle: The reported decision addresses the administration's obligation to respect and implement enforceable judicial decisions. A public authority cannot ordinarily disregard a judgment simply because its implementation is inconvenient or because administrative difficulties exist.

Relevance to rights-protection automation:

Suppose an electronic system records that a court has ordered a public authority to restore a person's legal entitlement. The authority should not be able to avoid compliance because its automated records have not been updated.

A future enforcement system should therefore:

Register enforceable judgments.

Notify the responsible public authority.

Track implementation deadlines.

Record reasons for non-compliance.

Escalate unexplained delays for human and judicial review.

Key lesson: Digital administration must facilitate enforcement of judicial rights, not obstruct it.

Case 2: Court of Cassation, Administrative Chamber, Decision No. 191, 16 March 2005

Files Nos. 2233–2234/4/1/2003

Subject: Judicial examination of administrative decisions concerning termination of a public contract in the general interest.

Legal principle: The reported decision illustrates the importance of examining the factual basis for an administrative authority's stated reasons. Judicial review should not simply accept or dismiss an administrative explanation without adequate examination of the circumstances.

Relevance to rights-protection automation:

An automated administrative system might recommend terminating a contract, withdrawing a permit or suspending a benefit because of an alleged public-interest concern.

The authority must still establish that the relevant factual and legal conditions exist. An AI-generated risk score is not, by itself, proof that termination is lawful.

A rights-protection system should preserve:

The information used to generate the recommendation.

The legal basis for the proposed action.

The relevant factual evidence.

The identity of the responsible decision-maker.

The affected person's opportunity to challenge the decision.

Key lesson: Automated recommendations must remain open to meaningful factual and legal review.

Case 3: Court of Cassation, Administrative Chamber, Decision No. 1199, 21 January 2004

File No. 3403/4/1/2003

Subject: Establishing the existence of an administrative contract.

Legal principle: The reported decision considered whether administrative correspondence was sufficient to establish a public contract. The legal significance of documents, the existence of required formalities and the authority of the person issuing an instruction had to be examined.

Relevance to rights-protection automation:

Automated legal systems often extract information from emails, letters, notices, electronic orders and official databases.

A system could incorrectly treat an informal message as a legally binding instruction. It might then record a person's rights or obligations incorrectly.

A reliable automated system should distinguish between:

A formal legal decision.

A draft or internal communication.

An informal administrative message.

A document issued by an authorised official.

A document that has not satisfied mandatory legal formalities.

Key lesson: Digital recognition of legal documents must not replace verification of their legal status.

Case 4: Court of Cassation, Administrative Chamber, Decision No. 149, 5 March 2006

Subject: Mandatory formal requirements for judicial decisions.

Legal principle: The reported decision concerns required information in judicial decisions, including details relating to the composition of the court and the clerk's name and signature. The omission of mandatory procedural information was treated as a serious defect under Article 50 of the Code of Civil Procedure.

Relevance to rights-protection automation:

Automated document-generation software may prepare judgments, notices, enforcement documents or administrative decisions. If the system omits a mandatory legal element, the document may be procedurally defective.

Future systems should include:

Mandatory-field validation.

Verification of judicial and administrative authority.

Authentication of electronic signatures.

A record of document approval.

Human review before legal issuance.

Key lesson: Efficiency cannot justify sacrificing mandatory legal formalities.

Case 5: Court of Cassation, Administrative Chamber, Decision No. 854/1, 13 July 2023

File No. 2023/1/4/2724

Subject: Mandatory rules concerning jurisdiction.

Legal principle: The reported decision concerns the allocation of jurisdiction and the limits of contractual arrangements purporting to confer jurisdiction on a particular court. Jurisdiction must be determined under the applicable legal rules, rather than simply by private agreement.

Relevance to rights-protection automation:

A digital complaint platform may automatically direct a claim to a court or administrative authority. Incorrect routing can delay the protection of a person's rights.

An automated platform must therefore distinguish between:

Civil disputes.

Commercial disputes.

Employment disputes.

Administrative disputes.

Matters assigned to specialised courts or tribunals.

Where jurisdiction is uncertain, the system should flag the issue for legal review rather than automatically reject the claim.

Key lesson: Automated access-to-justice systems must respect statutory jurisdiction.

Case 6: Court of Cassation, Civil Chamber, Decision No. 2900, 15 October 2003

File No. 1585/1/4/2001

Subject: Proof of notification and calculation of the time limit for appeal.

Legal principle: The reported decision concerned whether the time limit for an appeal could be calculated from a certificate indicating that no appeal or objection had been filed, instead of the appropriate certificate establishing notification of the judgment. The legally relevant notification had to be proved.

Relevance to rights-protection automation:

An automated court-management system might calculate appeal deadlines from the date a judgment is entered into a database. But the entry of a judgment and legally effective notification are not necessarily the same event.

The system must distinguish between:

Date of judgment.

Date of electronic registration.

Date of dispatch.

Date of legally effective service.

Date on which the applicable appeal period begins.

Key lesson: Automated deadline calculations must be based on the legally relevant procedural event, not merely on an available database timestamp.

These six decisions provide a useful judicial foundation for designing future rights-protection systems. Their precise holdings and present procedural application should be checked against the full judgments and current legislation before they are relied upon in court.

5. Main areas of future rights-protection automation

A. Automated protection of civil and contractual rights

Digital systems could identify breaches of contractual obligations and alert the affected party before a dispute becomes serious.

Examples:

Detecting missed contractual payments.

Identifying unauthorised contract amendments.

Tracking performance obligations.

Alerting parties to approaching limitation periods.

Maintaining records of contractual notices.

Assisting with calculation of compensation.

However, an automated system should not make a final determination of breach or liability without applying the relevant legal rules and allowing the parties to contest disputed facts.

B. Automated protection of property rights

Property rights are especially suitable for carefully controlled digital protection systems.

Possible functions include:

Monitoring changes in land-registration records.

Identifying duplicate or inconsistent ownership information.

Alerting owners to suspicious transactions.

Checking whether required documents have been submitted.

Tracking mortgages, charges and registered rights.

Maintaining auditable records of property transactions.

In Morocco, such systems must operate consistently with the land-registration framework, including the 1913 land-registration Dahir as amended, and Law No. 39-08 on the Code of Real Rights.

An algorithm cannot independently create ownership or invalidate a registered real right merely by identifying an inconsistency.

C. Automated protection of privacy and personal identity

Rights-protection automation can help individuals discover and challenge misuse of their personal information.

Possible functions include:

Detecting unauthorised publication of photographs.

Identifying duplicate or inaccurate personal records.

Monitoring unauthorised access to protected databases.

Supporting requests for access or rectification.

Recording complaints concerning misuse of personal data.

Generating alerts when information is disclosed outside its authorised purpose.

Law No. 09-08 and the CNDP's supervisory role are central to this area.

D. Automated protection against discrimination

AI systems can help detect potentially discriminatory patterns in:

Recruitment.

Housing applications.

Credit assessment.

Insurance.

Education admissions.

Public-service delivery.

For example, a monitoring system could identify whether an automated recruitment tool consistently excludes applicants with comparable qualifications.

However, statistical differences are indicators requiring investigation, not automatic proof of unlawful discrimination. The system must take account of the applicable legal standard, relevant facts and possible explanations.

E. Automated access to justice

Digital justice systems could make legal remedies more accessible, especially for people who face geographical, financial or administrative barriers.

They could provide:

Online filing of civil claims.

Electronic case-status tracking.

Digital appointment scheduling.

Assistance in identifying the competent court.

Notifications of hearings and procedural deadlines.

Information about legal aid.

Secure access to judgments and procedural documents.

These systems should not make access to a court conditional on owning a smartphone, having advanced digital skills or using a particular private platform. Non-digital alternatives remain important.

F. Automated protection of family and inheritance rights

Digital systems could assist with the administration of family and inheritance matters by:

Organising supporting documents.

Tracking maintenance payments.

Monitoring compliance with court orders.

Identifying missing inheritance documentation.

Supporting calculations under applicable inheritance rules.

Protecting confidential information concerning children and family members.

Final decisions concerning custody, parental responsibility, maintenance and inheritance must remain subject to the relevant Moroccan legal rules and competent judicial authority. Sensitive family data requires particularly strong safeguards.

6. Civil liability when automated systems violate rights

A rights-protection system can itself cause harm. Moroccan civil-law principles must therefore determine who is responsible when an automated system produces an unlawful result.

Potentially responsible parties include:

Under the DOC, Articles 77 and 78 are particularly relevant to extra-contractual liability for fault causing harm. Contractual liability may also arise where a party fails to perform its obligations.

Three questions are particularly important:

Fault: Was there an unlawful act, negligent operation, failure to verify information or breach of a legal obligation?

Damage: Did the affected person suffer financial, reputational, physical or moral harm?

Causation: Is there a legally sufficient connection between the conduct and the harm?

For example, if an automated database wrongly identifies a person as the owner of a debt and the institution uses that information to block a lawful transaction, the circumstances may give rise to a claim. Liability would depend on the evidence, applicable legal duties and the causal connection between the error and the loss.

7. Fundamental safeguards for future automation

Morocco's future system should follow several minimum safeguards.

1. Human review

A decision that significantly affects an individual's rights should not be made solely by an opaque automated profile where Article 11 of Law No. 09-08 applies. A competent human decision-maker must be able to examine the facts and legal basis.

2. Explanation

An affected person should receive understandable information about the decision, its legal basis and the procedure for challenging it, subject to lawful restrictions.

3. Correction of inaccurate records

Individuals should have practical means to request correction of inaccurate personal information under the applicable data-protection framework.

4. Evidence preservation

Systems should preserve relevant documents, timestamps, system logs and decision records so that a disputed action can be investigated.

5. Data minimisation

Only information necessary for the lawful purpose should be collected and processed.

6. Cybersecurity

Government and private systems should be protected against unauthorised access, alteration, destruction and disclosure. Law No. 05-20 on cybersecurity is relevant to covered information systems and entities.

7. Equality and accessibility

Digital services should be usable by persons with disabilities and people with limited digital access. Automated systems should be assessed for discriminatory effects.

8. Judicial remedies

Individuals must retain the ability to bring disputes before the competent courts. Automation must not eliminate judicial review or make an algorithm's output conclusive evidence of legal liability.

8. Institutional governance in Morocco

A successful rights-protection automation system requires coordination between public institutions, courts, regulators and private organisations.

Proposed future model

Morocco could develop a rights-protection framework based on five connected stages:

Stage 1 — Digital identification

Identify the right, the affected person and the relevant legal record.

Stage 2 — Automated monitoring

Detect missing documents, suspicious transactions, deadlines and potential violations.

Stage 3 — Human legal assessment

Verify evidence, apply the law and hear the affected person's explanation.

Stage 4 — Legal remedy

Enable correction, compensation, administrative appeal or judicial proceedings.

Stage 5 — Compliance monitoring

Verify that the remedy is implemented and prevent recurrence of the violation.

This model would combine technological efficiency with human judgment and judicial supervision.

9. Challenges and limitations

Morocco may encounter several difficulties in implementing this framework.

Legal challenges: Existing laws were not necessarily drafted with advanced AI systems, predictive algorithms and automated legal assessments in mind. Clearer rules may be required for transparency, accountability and review.

Technical challenges: Inaccurate databases, incompatible government systems and cybersecurity weaknesses can cause automated errors.

Privacy challenges: Linking court, identity, banking, health and property databases may create risks of excessive surveillance and unauthorised disclosure.

Social challenges: Rural populations, people with disabilities and individuals with limited digital literacy may find automated services difficult to access.

Judicial challenges: Judges and lawyers may need specialised training to evaluate algorithmic evidence, automated recommendations and digital records.

Accountability challenges: When an automated system causes harm, it may be difficult to identify whether responsibility lies with the public authority, data controller, contractor or another participant.

10. Recommendations for Morocco

To develop a reliable future rights-protection framework, Morocco should consider:

Introducing clear legal standards for high-impact automated decisions.

Establishing independent human review for decisions affecting fundamental rights.

Strengthening the practical enforcement of Law No. 09-08.

Requiring regular audits of automated systems used by public authorities.

Providing accessible procedures for challenging inaccurate digital records.

Improving electronic court filing and notification while preserving non-digital access.

Creating clear rules on responsibility for AI-related civil harm.

Requiring secure and traceable digital records for legally consequential decisions.

Providing training for judges, lawyers, public officials and data-protection professionals.

Ensuring that technological systems support equality, privacy and access to justice.

11. Conclusion

Civil Law and Future Rights Protection Automation in Morocco represents the development of a legal environment in which digital technology supports the identification, prevention and remedy of violations of civil rights.

The Moroccan Constitution, the Dahir of Obligations and Contracts, Law No. 09-08, Law No. 53-05, administrative-court legislation and the relevant procedural and property laws provide important foundations for this development.

The six judicial decisions discussed above demonstrate why enforcement of judgments, factual examination, legal formalities, jurisdiction and proper notification must remain central to any automated legal system.

The most important conclusion is that Morocco should adopt human-centred rights-protection automation: technology may identify risks, organise evidence and improve access to remedies, but legal responsibility, meaningful review and the authority to determine disputed rights must remain governed by law.

Research qualification: The six cases are relevant Moroccan judicial authorities by analogy, not six direct precedents on AI or automated rights protection. Their full texts, file references and current procedural relevance should be verified before academic publication or litigation.