Cyber Law at Morocco

14 Apr 2025 --
0 Comments

Morocco has established a comprehensive legal and institutional framework to address cybersecurity and cybercrime, aligning with international standards and enhancing public engagement.

🛡️ Cybersecurity Legislation

Law No. 05-20 on Cybersecurity, promulgated on July 25, 2020, serves as the cornerstone of Morocco's cybersecurity policy, Key provisions include:

Scope of Application: The law applies to state administrations, local authorities, public institutions, enterprises, and other public law legal entities of the state, as well as critical infrastructures with sensitive information systems

Security Measures: It prescribes a set of rules and security measures to ensure and enhance the security and resilience of information systems

Data Localization:A Prime Ministerial Decree (No. 2.21.406) mandates that sensitive data related to cybersecurity services must be stored exclusively within Morocco

Implementation Timeline:Critical agencies and infrastructure were required to classify their information systems and inform the General Directorate of Information Systems Security (DGSSI) by August 9, 2022

🧑‍⚖️ Cybercrime and International Cooperation

Morocco is a signatory to the Budapest Convention on Cybercrime and its Second Additional Protocol, enhancing international cooperation and the disclosure of electronic evidenc. The country has developed a draft criminal law to address cybercrimes, criminalizing various acts related to cybercrime that previously posed significant challenges to Moroccan justice.

📱 **E-Blagh Platform for Public Reporting*

Launched in June 2024, the E-Blagh platform enables citizens to report illegal online content 247, Reports can include online fraud, child sexual exploitation, sextortion, terrorism-related content, hate speech, and threats of violene, Within its first three months, the platform received over 7,000 reports, leading to the identification of 82 individuals suspected of cybercrimes.

🔐 **Data Protection and Privacy*

While Morocco's cybersecurity laws address various aspects of data protection, there is no comprehensive national data protection law akin to the European Union's GP.. However, the implementation of data localization requirements and the focus on securing sensitive information systems indicate a growing emphasis on data protection within the country's cybersecurity framewrk.

For more detailed information, you can visit the official website of the General Directorate of Information Systems Security (DGSSI) or write to us.