1. Introduction

Ancestry testing refers to the use of DNA analysis to identify a person's genetic heritage, geographical origins, ancestral relationships and possible biological connections with different populations.

In Morocco, ancestry testing raises important legal questions concerning consumer protection, genetic privacy, informed consent, scientific reliability, misleading advertising, data security and the commercial use of genetic information.

For example, a Moroccan consumer may purchase an online DNA ancestry-testing kit from a foreign company claiming to identify whether the consumer has Amazigh, Arab, Sub-Saharan African, European or other ancestral origins. The company may collect saliva, extract DNA, analyse genetic markers and provide an ancestry report.

However, such reports must not be confused with legally established nationality, ethnic identity, family status or judicially established parentage.

Morocco does not currently have a single comprehensive statute exclusively regulating direct-to-consumer ancestry DNA testing. Instead, the principal legal framework comes from:

Constitution of Morocco, particularly Article 24 (privacy).

Law No. 09-08 on personal data protection.

Law No. 31-08 on consumer protection.

Decree No. 2-09-165 implementing Law No. 09-08.

Family Code (Moudawana), Law No. 70-03.

General contractual, civil liability and judicial evidence principles.

The National Commission for the Control of Personal Data Protection (CNDP) plays a particularly important role in regulating the processing of genetic information.

cndp.ma+1

2. Legal Framework Governing Ancestry Testing

A. Constitution of Morocco

Article 24 of the Moroccan Constitution guarantees the right to privacy.

This constitutional protection is relevant because ancestry-testing companies collect information that may reveal:

Biological ancestry.

Family relationships.

Genetic similarities.

Ethnic or geographical origins.

Previously unknown biological relatives.

Potential hereditary characteristics.

The constitutional right to privacy provides an important foundation for protecting individuals against unjustified collection, disclosure or commercial exploitation of genetic information.

Article 24 must be considered alongside the statutory protections established by Law No. 09-08.

B. Law No. 09-08 on Personal Data Protection

Law No. 09-08, promulgated on 18 February 2009, is the principal legislation governing the processing of personal data in Morocco.

Its importance is particularly significant because genetic information is expressly treated as sensitive personal data.

Under Article 1, sensitive information includes information relating to health, including genetic data, and information revealing racial or ethnic origin.

Consequently, ancestry-testing companies cannot treat DNA information as ordinary consumer information.

Important regulatory requirements include:

Lawful processing of personal information.

Transparency regarding the purposes of collection.

Appropriate information and consent.

Data security and confidentiality.

Restrictions on subsequent use of collected information.

Individual rights concerning personal data.

Regulatory supervision by the CNDP.

cndp.ma+2

C. Prior CNDP Authorisation

A particularly important feature of Moroccan law is the requirement for prior authorisation for certain sensitive-data processing operations.

The CNDP expressly identifies genetic data as a category requiring prior authorisation, subject to the applicable statutory exceptions.

Its guidance distinguishes between genetic processing undertaken by healthcare professionals for medical purposes and other genetic-data processing.

Therefore, a commercial ancestry-testing business should not assume that ordinary business registration or a consumer's acceptance of website terms automatically satisfies the requirements of Law No. 09-08.

The applicable CNDP notification or authorisation requirements must be assessed before the processing begins.

cndp.ma+1

3. Consumer Protection Under Law No. 31-08

Law No. 31-08, promulgated on 18 February 2011, establishes the principal consumer protection framework in Morocco.

It is especially relevant where ancestry-testing services are sold through websites, mobile applications, laboratories or international genetic-testing companies.

A. Right to Accurate Information – Article 3

Article 3 requires suppliers to provide consumers with information concerning the essential characteristics of goods and services.

For ancestry-testing companies, this obligation should cover:

The scientific methodology used in DNA analysis.

The type of genetic markers examined.

The geographical reference populations used.

The limitations of ancestry estimates.

The accuracy and reliability of the testing process.

The total cost of the service.

The time required to deliver results.

The conditions governing the storage of biological samples.

For example, a company advertising a test as capable of identifying a consumer's exact Moroccan tribal ancestry should explain whether its database can genuinely support that conclusion.

A probabilistic genetic estimate must not be advertised as an established historical fact.

WIPO+1

B. Protection Against Misleading Advertising – Articles 21 and 22

Articles 21 and 22 regulate misleading commercial advertising.

Article 21 prohibits advertisements containing false or misleading claims about products and services.

This provision is particularly important for ancestry-testing businesses.

Examples of potentially misleading advertising include:

Claiming that a DNA test identifies a person's exact ethnic identity.

Promising 100% accurate ancestral identification without scientific justification.

Claiming that a test can establish legally recognised family relationships.

Advertising an unvalidated genetic database as scientifically definitive.

Suggesting that ancestry results automatically establish nationality or citizenship.

A company making scientific claims must be able to justify the factual basis of its advertising.

Article 172 also gives authorised consumer-protection investigators powers to request evidence supporting advertising claims.

Articles 174 and 175 establish penalties and allow measures such as publication of corrective advertising in applicable cases.

WIPO+1

C. Protection Against Unfair Contractual Terms – Articles 15–19

Ancestry-testing companies generally require consumers to accept standard-form online agreements.

These agreements may contain provisions concerning:

Permanent storage of DNA samples.

Transfer of genetic information to research partners.

Commercial use of anonymised genetic data.

Disclosure to affiliated laboratories.

International transfers.

Restrictions on refunds.

Exclusion of liability for data breaches.

Articles 15–19 of Law No. 31-08 provide protection against unfair contractual clauses.

Under Article 19, unfair clauses are null and void, while the remainder of the contract may continue if it can operate without the offending provision.

A company should therefore not rely on a broad contractual clause to avoid responsibilities imposed by mandatory consumer-protection or data-protection legislation.

WIPO+1

D. Distance Selling and Withdrawal Rights

Many ancestry-testing services operate through international websites.

Consumers purchase kits online, receive collection materials, submit saliva samples and obtain digital reports.

Law No. 31-08 contains special provisions on distance selling.

Article 36 provides a seven-day withdrawal period in the circumstances covered by the legislation.

However, the application of withdrawal rights to ancestry-testing kits requires attention to the nature of the service, whether performance has begun and the applicable statutory exceptions.

A supplier should clearly explain the applicable withdrawal conditions before concluding the transaction.

The fact that a DNA sample has been collected does not automatically establish that every consumer right has disappeared.

WIPO+1

4. Genetic Privacy and Confidentiality Standards

Ancestry-testing services involve more than ordinary commercial transactions.

A DNA sample can reveal information about the consumer and biological relatives who never purchased the service.

A. Express Consent

Under the sensitive-data framework of Law No. 09-08, genetic-data processing requires an appropriate legal basis, including the applicable express-consent requirements or a statutory exception.

Consent should distinguish between different purposes:

Conducting the ancestry test.

Retaining the DNA sample.

Storing genetic profiles.

Conducting additional research.

Sharing results with third parties.

Commercial exploitation of genetic information.

Consent to receive an ancestry report should not automatically be interpreted as consent to unlimited scientific research or commercial disclosure.

B. Data Minimisation

Testing companies should collect only the information necessary to perform the service.

For example, a company should not collect unrelated medical histories or additional identity information without an appropriate purpose and legal basis.

C. Right of Access and Rectification

Individuals have statutory rights concerning their personal information, including access and rectification.

These rights are important where an ancestry report contains incorrect personal details or where a company associates the wrong genetic profile with an individual.

D. Data Security

Companies handling genetic information should implement appropriate technical and organisational security measures.

These should include:

Restricted employee access.

Secure storage of genetic profiles.

Encryption where appropriate.

Protection against unauthorised disclosure.

Secure sample transportation.

Incident-management procedures.

Appropriate deletion and retention policies.

E. International Transfer of Genetic Information

International ancestry-testing companies may transfer genetic information to laboratories or servers outside Morocco.

Law No. 09-08 regulates international transfers of personal data.

Such transfers must satisfy the statutory conditions, including applicable protection or authorisation requirements.

A company cannot avoid Moroccan data-protection obligations merely by storing genetic information in a foreign country.

cndp.ma+2

5. Scientific Reliability and Consumer Protection

Scientific accuracy is one of the most important consumer-protection issues in ancestry testing.

An ancestry report generally compares a person's genetic markers with reference populations contained in a particular company's database.

The resulting percentages are estimates rather than definitive historical classifications.

For instance, a report may indicate:

40% North African genetic similarity.

25% Southern European genetic similarity.

20% West African genetic similarity.

15% West Asian genetic similarity.

These percentages should not be interpreted as proof of membership in a particular Moroccan tribe, ethnic community or historical family.

Principal legal concerns

1. Database limitations: Different companies may produce different ancestry estimates because their reference populations and analytical methods differ.

2. Scientific uncertainty: Genetic similarities do not necessarily establish the exact geographical location of ancestors.

3. Misrepresentation: Companies should not exaggerate the certainty of their results.

4. Family consequences: Unexpected biological relationships can cause serious personal and family disputes.

5. Consumer expectations: Customers should receive clear explanations of what the service can and cannot establish.

A testing company that materially misrepresents its scientific capabilities may face consumer-protection consequences under Law No. 31-08.

6. Relationship Between Ancestry Testing and Moroccan Family Law

The Moroccan Family Code, Law No. 70-03, contains important rules governing parentage and lineage (nasab).

The distinction between commercial ancestry testing and legally recognised parentage is essential.

Article 152: Establishment of Parentage

Article 152 identifies legally recognised grounds for establishing parentage under Moroccan family law.

A commercial DNA report does not automatically create legal parentage.

Article 158: Judicial Expertise

Article 158 provides that parentage may be established through the marital bed, acknowledgement by the father, testimony and other legally recognised means, including judicial expertise.

This provision is important because genetic evidence may be relevant in judicial proceedings.

However, a privately purchased ancestry report is not equivalent to a court-ordered genetic examination.

Article 159: Judicial Determination

Article 159 provides that the husband's paternity may be rebutted only through a judicial decision in accordance with the applicable statutory conditions.

Therefore, an ancestry-testing company's report cannot independently overturn legally established parentage.

IALAW+2

7. Regulation of Foreign Ancestry-Testing Companies

Foreign companies selling DNA-testing kits to Moroccan consumers create additional regulatory challenges.

For example, a company may:

Advertise its services to Moroccan consumers.

Receive online payments from Morocco.

Send saliva collection kits internationally.

Transfer biological samples to a foreign laboratory.

Store genetic information on overseas servers.

Provide ancestry reports through mobile applications.

Several legal questions arise.

The Ministry of Industry and Commerce has a consumer-protection enforcement structure, including investigators and a unit monitoring commercial websites.

This is relevant to foreign companies marketing services through digital platforms.

Ministère de l’Industrie et du Commerce+1

8. Important Moroccan Case Laws and Judicial Decisions

There is an important distinction in this area: Morocco has relevant judicial decisions concerning DNA evidence and parentage, but there is no clearly established body of reported Moroccan judgments specifically deciding consumer claims against commercial ancestry-testing companies.

The following decisions are therefore relevant by analogy, rather than direct ancestry-consumer precedents.

Case 1. Tangier Court of First Instance, 30 January 2017 – Extramarital Parentage and DNA Evidence

Important Moroccan DNA jurisprudence

Background:

A dispute concerning the establishment of parentage outside marriage reached the Court of First Instance in Tangier.

The court considered biological evidence and the legal significance of DNA testing in determining parentage.

Legal issue:

Whether biological DNA evidence could support the recognition of parentage outside the traditional legal framework governing Moroccan family relationships.

Decision:

The Court of First Instance adopted an approach recognising paternity through biological testing.

However, the decision was subsequently rejected at the appellate level.

Legal significance:

This case demonstrates that DNA evidence and legally recognised parentage are not necessarily identical.

It is relevant to ancestry-testing consumer protection because commercial companies must not represent an ancestry report as an automatic legal determination of biological parentage.

Reference: Salma El Ouazzani Chahdi, The Decision of the Court of First Instance of Tangier (Morocco) of January 30, 2017 about Extramarital Filiation: Affirmation of the Tradition or a Step Towards Innovation?, Cuadernos de Derecho Transnacional, Vol. 11, No. 2 (2019), pp. 592–603.

e-revistas.uc3m.es+1

Case 2. Moroccan Court of Cassation, 9 September 2014, Appeal No. 596/2014

Background:

The dispute involved the establishment of parentage and the use of genetic expertise.

One party failed to attend the genetic examination despite being summoned.

The court considered the available documentary and testimonial evidence.

Legal issue:

Whether the court could establish parentage by evaluating other admissible evidence when a party failed to participate in genetic testing.

Decision and reasoning:

The Court of Cassation considered Article 158 of the Family Code and the evidentiary material available in the proceedings.

The judgment recognised the importance of judicial evaluation of the evidence rather than treating genetic testing as the exclusive means of proving parentage.

Legal significance:

The decision illustrates three principles:

DNA testing is not necessarily the only admissible evidence.

Judicial expertise must be assessed within the broader evidentiary framework.

A private commercial DNA report cannot automatically replace judicial assessment.

Reference: Moroccan Court of Cassation, Personal Status and Inheritance Chamber, Appeal No. 596/2014, judgment dated 9 September 2014.

[ رفض الطلب ]+1

Case 3. Moroccan Family Code – Article 158 and Judicial Genetic Expertise

Although Article 158 is a statutory provision rather than a judicial judgment, it is an important legal foundation for DNA-related disputes.

The provision expressly recognises judicial expertise among the means of establishing parentage.

Its importance for consumer ancestry testing is that it distinguishes between:

A commercial genetic report.

A medically conducted genetic examination.

A judicially ordered genetic examination.

The legal consequences of these three forms of testing are not interchangeable.

Legal principle: Commercial ancestry results may provide personal information, but they do not automatically establish legally recognised lineage.

IALAW+1

9. CNDP's 2026 Developments Concerning Genomic Information

Important recent development

On 11 May 2026, Morocco's CNDP announced the results of work undertaken between 2023 and 2025 by a group of genetic experts and relevant institutional representatives.

The group produced 17 recommendations concerning the protection of personal data and genomic information.

The recommendations were presented to relevant stakeholders.

The CNDP indicated that its commissioners could subsequently consider adopting a formal deliberation following further discussions.

This development is particularly relevant to ancestry-testing businesses because it recognises the broader implications of genomic information, including its potential geopolitical significance when combined into larger datasets.

However, the announcement of recommendations should not be confused with the enactment of a new binding ancestry-testing statute.

The existing Law No. 09-08 remains central to the legal analysis.

cndp.ma+1

10. Liability of Ancestry-Testing Companies

Companies providing ancestry-testing services may face several forms of legal responsibility.

Example 1: False Ancestry Claims

A company advertises that its test can identify a customer's exact tribal identity in Morocco.

The report subsequently proves unreliable.

The consumer may invoke Article 3 and the misleading-advertising provisions of Law No. 31-08, depending on the representations made and the evidence of loss.

Example 2: Unauthorised Genetic Data Sharing

A company collects saliva samples for ancestry analysis but subsequently provides genetic profiles to commercial research partners without an appropriate legal basis.

This may raise serious issues under Law No. 09-08, including the sensitive-data authorisation and consent requirements.

Example 3: Unexpected Family Information

A consumer receives an ancestry report suggesting an unexpected biological relationship.

The company must distinguish between a probabilistic genetic match and a legally established family relationship.

The report cannot itself alter the person's legal family status.

Example 4: Data Breach

A foreign testing provider experiences a security breach exposing genetic profiles belonging to Moroccan consumers.

The applicability of Moroccan data-protection obligations depends on the relevant processing and territorial circumstances. Where Law No. 09-08 applies, the company must comply with its security, confidentiality and other applicable requirements.

11. Regulatory Challenges in Morocco

Despite the existence of consumer and data-protection legislation, ancestry-testing regulation faces several challenges.

A. Absence of Specific Ancestry-Testing Legislation

Morocco does not currently have a dedicated comprehensive statute establishing a complete licensing and consumer-protection system specifically for commercial ancestry DNA testing.

The existing framework is distributed across several legal instruments.

B. Cross-Border Enforcement

Foreign companies may collect genetic information from Moroccan consumers while operating laboratories and servers abroad.

This creates difficulties concerning jurisdiction, regulatory supervision and enforcement of consumer rights.

C. Protection of Family Relationships

Ancestry reports can reveal unexpected biological relationships, creating disputes concerning parentage, inheritance and family identity.

The legal framework must distinguish genetic relationships from legally established family relationships.

D. Scientific Transparency

Companies may use different reference databases and statistical methods.

Without adequate disclosure, consumers may misunderstand ancestry percentages as scientifically definitive conclusions.

E. Genetic Data Commercialisation

Genetic information may have commercial value for pharmaceutical research, population studies and biotechnology development.

Its commercial exploitation raises questions about consent, secondary processing, confidentiality and individual control over personal information.

12. Recommendations for Strengthening Moroccan Ancestry-Testing Regulation

Morocco could improve consumer protection through the following measures:

1. Specific licensing framework: Establish clear regulatory requirements for commercial ancestry-testing providers.

2. Mandatory scientific disclosures: Require companies to disclose testing methodologies, reference databases and accuracy limitations.

3. Separate consent mechanisms: Distinguish consent for ancestry analysis from consent for medical research and commercial data sharing.

4. Sample destruction rights: Establish clear procedures for consumers requesting destruction of retained biological samples, subject to applicable legal obligations.

5. International data-transfer safeguards: Strengthen monitoring of foreign laboratories receiving Moroccan genetic information.

6. Advertising supervision: Monitor claims concerning ethnic identity, tribal ancestry and biological relationships.

7. Independent complaint mechanisms: Improve access to the CNDP and consumer-protection authorities.

8. Protection of minors: Introduce stronger safeguards for DNA testing involving children and parental authority.

9. Collective consumer protection: Encourage recognised consumer associations to address widespread misleading advertising and unfair contractual practices.

10. Genomic governance: Consider the CNDP's 2026 recommendations when developing future legislation and regulatory guidance.

13. Important Legal Provisions: Summary Table

14. Conclusion

The regulation of ancestry-testing consumer protection standards in Morocco involves an intersection of consumer law, genetic privacy, biotechnology regulation, contractual responsibility and family law.

Law No. 09-08 establishes important safeguards because genetic information is sensitive personal data. Law No. 31-08 protects consumers against misleading advertising, inadequate information and unfair contractual terms. The Moroccan Family Code separately regulates legally recognised parentage and judicial genetic expertise.

The Tangier Court of First Instance decision of 30 January 2017 and the Court of Cassation judgment of 9 September 2014 demonstrate the legal importance of distinguishing biological evidence from judicially established parentage.

The CNDP's genomic-information initiative of May 2026 also indicates growing regulatory attention to genetic privacy and genomic governance.

Ultimately, the central principle is that a commercial ancestry-testing company must not transform uncertain scientific estimates into definitive claims about an individual's ethnicity, family relationships or legal identity. Stronger regulatory standards, transparent commercial practices and effective genetic-data safeguards are essential for protecting Moroccan consumers.

15. References and Further Legal Research

The following materials are particularly useful for academic research:

Constitution of the Kingdom of Morocco, 2011, Article 24.

Law No. 09-08 of 18 February 2009 concerning personal data protection.

Decree No. 2-09-165 of 21 May 2009.

Law No. 31-08 on Consumer Protection, 18 February 2011.

Family Code, Law No. 70-03, particularly Articles 152, 158 and 159.

Moroccan CNDP, Protection des Données à caractère personnel et Information Génomique, 11 May 2026.

Salma El Ouazzani Chahdi (2019), The Decision of the Court of First Instance of Tangier (Morocco) of January 30, 2017 about Extramarital Filiation.

Useful official and academic sources:

Moroccan CNDP – Data Protection Legislation

CNDP – Genomic Information and Personal Data Protection, 2026

WIPO – Moroccan Consumer Protection Law No. 31-08

Academic analysis of the Tangier DNA parentage judgment

Moroccan Court of Cassation – Judgment No. 596/2014

Academic qualification: The case-law discussion above identifies relevant DNA-parentage jurisprudence, not direct judgments on commercial ancestry-testing consumer disputes. The distinction is important when preparing a legal dissertation or research paper.