1. Introduction

Artificial Intelligence (AI) in genomic medicine refers to the use of machine-learning algorithms, deep-learning systems, predictive analytics and computational genomics to analyse human genetic information for medical diagnosis, disease prediction, personalised treatment and the identification of inherited disorders.

In Morocco, AI-assisted genomic medicine has significant potential in areas such as:

Early diagnosis of hereditary diseases.

Identification of genetic mutations associated with cancer.

Personalised medicine and pharmacogenomics.

Genetic screening for inherited disorders.

AI-assisted interpretation of DNA sequencing.

Prediction of individual responses to medicines.

Development of genomic databases for medical research.

However, these technologies raise important legal questions concerning genetic privacy, informed consent, discrimination, medical confidentiality, algorithmic accountability, patient safety and the transfer of genomic information outside Morocco.

Morocco's regulatory position: The principal legal framework is currently based on general legislation, particularly Law No. 09-08 on personal data protection, rather than a comprehensive AI-specific statute governing genomic medicine. The National Commission for the Control of Personal Data Protection (CNDP) plays a central supervisory role.

cndp.ma+2

2. Constitutional and Legal Framework

A. Constitution of Morocco, 2011

The Moroccan Constitution establishes important protections relevant to genomic medicine.

Article 24 – Right to privacy

Article 24 recognises the right to protection of private life. Genetic information can reveal highly personal information concerning an individual's biological identity, hereditary characteristics and susceptibility to disease.

Consequently, unauthorised disclosure of genomic information may interfere with constitutional privacy protections.

Article 27 – Right to information

The constitutional right to information must be balanced against the protection of private life and other constitutionally recognised interests.

In genomic medicine, this balance becomes particularly important when AI systems use confidential patient records for research or clinical prediction.

B. Law No. 09-08 on Personal Data Protection

Law No. 09-08, promulgated on 18 February 2009, is the principal legislation governing the processing of personal and genetic information in Morocco.

Its provisions are particularly important for AI-based genomic systems.

Article 1 – Definition of personal and sensitive data

The law expressly recognises genetic information as personal data when it identifies or makes an individual identifiable.

It also classifies health information, including genetic data, as sensitive personal data.

Therefore, the following information may fall within the law:

DNA sequencing results.

Genetic mutation profiles.

Hereditary disease information.

Genomic risk scores.

Genetic ancestry information linked to identifiable individuals.

AI-generated predictions about inherited diseases.

Article 4 – Consent and lawful processing

Personal data processing generally requires the individual's consent, subject to the statutory exceptions.

For genomic medicine, consent should clearly explain:

Why the patient's genetic information is collected.

Whether AI will analyse the information.

Whether information will be shared with hospitals or laboratories.

Whether the data will be used for secondary research.

Whether international data transfers will occur.

Article 7 – Right of access

Patients have rights to access information concerning the processing of their personal data.

This is important when an AI genomic platform maintains genetic profiles or produces disease-risk predictions.

Article 11 – Automated decision-making

Article 11 restricts decisions based exclusively on automated processing that evaluate personal aspects of an individual and produce legal or significant effects, subject to statutory exceptions.

This provision is relevant when an AI system automatically determines eligibility for medical services, insurance-related benefits or other decisions affecting patients.

Articles 21–24 – Sensitive data, confidentiality and security

These provisions establish additional requirements for sensitive information, including health and genetic data.

In particular, Articles 23 and 24 are important for cybersecurity, access controls, confidentiality and protection against unauthorised disclosure.

bdj.mmsp.gov.ma+1

3. Regulation of AI-Assisted Genomic Medical Research

A. Law No. 28-13 on Biomedical Research (2015)

Law No. 28-13 concerns the protection of individuals participating in biomedical research. It is relevant to research involving genomic sequencing, genetic testing and AI-based medical investigations.

Important provisions include:

Article 3: Establishes respect for life, health, physical and psychological integrity, dignity, privacy and voluntary participation.

Article 4: Requires free, informed and express consent before biomedical research involving a person.

Article 5: Recognises the participant's right to refuse participation or withdraw consent.

Article 7: Requires protection of participants' health, integrity and dignity.

Article 8: Protects privacy and confidentiality of personal information obtained during biomedical research.

For example, a Moroccan hospital conducting an AI-based study involving 5,000 genomic records must consider both biomedical research requirements and personal-data protection obligations.

Consent to participate in a medical study should not automatically be treated as unrestricted permission to use genetic information for unrelated commercial AI training.

Ma Loi+2

B. Law No. 12-01 on Private Medical Biology Laboratories (2002)

This law regulates private laboratories conducting medical biological analyses.

Its relevance to AI genomic medicine includes:

Article 1: Defines medical biology laboratories by reference to analyses and examinations intended to facilitate diagnosis, treatment and prevention of human diseases.

Article 3: Generally requires medical analyses to be performed on the basis of a prescription from an authorised medical practitioner.

Article 11: Requires prior administrative authorisation for establishing, reopening or operating a private medical biology laboratory.

Article 21: Makes the laboratory's authorised director responsible for its organisation and proper functioning.

Article 29: Requires medical analysis reports to carry the signature and identification of the authorised biologist and the date of analysis.

Article 32: Requires participation in external quality control.

These provisions are important because AI-generated genomic reports should not simply replace the professional responsibility of authorised medical laboratory personnel.

For example, if an AI platform identifies a potentially harmful BRCA1 mutation, the result should be appropriately verified, interpreted and reported through the legally authorised medical laboratory framework.

Chambre Syndicale des Biologistes+1

C. Law No. 131-13 on the Practice of Medicine (2015)

Law No. 131-13 regulates the professional practice of medicine in Morocco.

It is relevant to AI genomic medicine because AI can assist doctors but does not independently become a licensed medical practitioner.

Important legal considerations include:

Medical diagnosis must remain within the legally regulated professional framework.

Doctors must exercise appropriate professional judgment.

AI-generated predictions should be clinically evaluated.

Medical decisions should consider the patient's actual clinical circumstances.

Responsibility for professional negligence cannot simply be transferred to an algorithm.

An AI platform that recommends cancer treatment based on genomic data should therefore operate as a clinical decision-support instrument under appropriate medical supervision.

Cnom+1

4. CNDP and the Protection of Genomic Information

The CNDP is Morocco's principal authority for supervising compliance with Law No. 09-08.

Its responsibilities include:

Monitoring personal-data processing.

Reviewing relevant processing declarations and authorisation applications.

Protecting individual privacy rights.

Supervising sensitive-data processing.

Addressing unlawful processing and data transfers.

Important development: CNDP's 17 recommendations of 2026

On 11 May 2026, the CNDP presented 17 recommendations concerning personal-data protection and genomic information.

The recommendations followed work conducted between 2023 and 2025 by a group involving genetic experts and representatives of relevant public institutions.

The CNDP indicated that its commissioners could subsequently adopt a formal deliberation following further discussions.

This is particularly significant because genomic information can reveal more than an individual's identity: it may also disclose hereditary relationships and information concerning biological relatives.

Legal significance: The 17 recommendations demonstrate that Morocco is actively developing its approach to genomic-data governance. They should not, however, be confused with an enacted AI statute or a binding legislative amendment.

cndp.ma+1

5. Legal Regulation of AI Algorithms in Genomic Medicine

AI systems used in genomic medicine can create several categories of legal risk.

A. Algorithmic diagnostic errors

An AI system may incorrectly identify a genetic mutation or predict a disease that the patient does not have.

Potential consequences include:

Unnecessary medical procedures.

Incorrect medication.

Delayed diagnosis.

Psychological harm.

Financial loss.

Inappropriate genetic counselling.

Legal responsibility may arise where a doctor, laboratory or technology provider fails to exercise the care required by its professional or contractual obligations.

B. Algorithmic bias and discrimination

AI genomic systems are often trained using datasets that may not adequately represent the Moroccan population.

For example, a genomic prediction model developed predominantly using European genetic datasets might produce less reliable results for certain Moroccan population groups.

This can result in unequal access to diagnosis or inaccurate predictions.

The relevant legal principles include equality, privacy, medical ethics and the requirement to use scientifically appropriate diagnostic methods.

C. Transparency and explainability

Patients should receive understandable information about:

The purpose of genetic testing.

The role of AI in interpreting results.

The limitations of predictive models.

The possibility of false-positive and false-negative results.

The involvement of medical professionals.

An AI system should not be treated as infallible merely because it uses sophisticated computational methods.

D. Human oversight

Human oversight is particularly important in:

Cancer genomic diagnosis.

Rare-disease identification.

Reproductive genetic counselling.

Pharmacogenomic treatment selection.

Hereditary disease screening.

The doctor should assess the clinical significance of an AI-generated result before relying on it for treatment.

6. Cross-Border Transfer of Genomic Data

AI genomic medicine frequently relies on international cloud platforms and foreign research databases.

A Moroccan hospital may transmit genomic records to a foreign AI company for sequencing interpretation or predictive analysis.

Such activities raise issues under Law No. 09-08.

The relevant provisions include:

Article 2: Territorial scope of application.

Article 12: Prior authorisation or declaration requirements.

Article 23: Security obligations.

Article 24: Additional security requirements for sensitive information.

The international-transfer provisions of the law.

Genomic data cannot be transferred internationally without examining the applicable legal requirements and safeguards.

The responsible institution should consider:

Whether the foreign recipient is legally authorised to receive the data.

Whether the transfer complies with Moroccan data-protection requirements.

Whether the necessary CNDP formalities have been completed.

Whether the foreign AI provider can reuse information for commercial purposes.

Whether appropriate contractual and technical safeguards exist.

bdj.mmsp.gov.ma+1

7. Important Case Laws Relating to AI and Genomic Medicine

A significant legal distinction must be made: the following international judgments are comparative authorities. They are not binding Moroccan precedents. I have not identified a reported Moroccan judgment directly deciding liability for AI-assisted genomic diagnosis or algorithmic genetic-data processing.

Nevertheless, these cases provide useful principles for interpreting privacy, genetic testing, medical decision-making and human dignity.

Case 1: S. and Marper v. United Kingdom (2008)

Important genetic privacy precedent

Citation: Applications Nos. 30562/04 and 30566/04, European Court of Human Rights, Grand Chamber, 4 December 2008.

Facts:

The applicants challenged the retention of their fingerprints, cellular samples and DNA profiles by British authorities despite the discontinuation of their criminal proceedings.

Judgment:

The European Court of Human Rights held that the indiscriminate retention of DNA samples and profiles interfered with the applicants' right to respect for private life under Article 8 of the European Convention on Human Rights.

Legal principles:

Genetic information is exceptionally sensitive personal information.

DNA samples can reveal extensive information about individuals.

Genetic information may reveal relationships between family members.

Retention and future use of genetic information require appropriate safeguards.

Application in Morocco:

This judgment is relevant to AI genomic databases operated by Moroccan hospitals and research institutions.

It supports the argument that storing genetic information for indefinite periods without a legitimate purpose and adequate safeguards creates serious privacy concerns.

Bailii

Case 2: Costa and Pavan v. Italy (2012)

Citation: Application No. 54270/10, European Court of Human Rights, 28 August 2012.

Facts:

The applicants were healthy carriers of cystic fibrosis and wanted access to preimplantation genetic diagnosis to avoid transmitting the disease to their children.

Italian legislation restricted their access to the procedure.

Judgment:

The Court found a violation of Article 8 of the European Convention on Human Rights because the legal restrictions were disproportionate in the circumstances.

Legal principles:

Genetic testing can directly affect reproductive autonomy.

Access to genetic diagnosis may form part of private and family life.

Restrictions on reproductive genetic technologies require proper justification.

Medical and reproductive decisions must respect individual dignity.

Application in Morocco:

This judgment is relevant to AI-supported embryo screening, reproductive genomics and genetic counselling.

It demonstrates the importance of balancing public health interests, reproductive autonomy and ethical safeguards.

HUDOC+1

Case 3: Peruzzo and Martens v. Germany (2013)

Citation: Applications Nos. 7841/08 and 57900/12, European Court of Human Rights, 4 June 2013.

Facts:

The applicants challenged orders requiring the collection and storage of DNA material for potential future criminal investigations.

Judgment:

The Court declared the applications inadmissible, accepting the relevant legal framework and safeguards in the circumstances.

Legal principles:

The case illustrates that genetic-data retention is not automatically unlawful. Its legality depends on the purpose, legal basis, proportionality and safeguards surrounding the collection and retention.

Application in Morocco:

It provides a useful comparative framework for evaluating genomic databases maintained for legitimate medical research, provided that the processing complies with Moroccan law and appropriate privacy protections.

Case 4: Costa and Pavan – Relevance to Algorithmic Reproductive Medicine

A further implication of the 2012 judgment concerns AI-assisted reproductive decisions.

Suppose an AI system analyses the genetic profiles of prospective parents and recommends whether embryos should be implanted.

Such a system raises questions about:

Reproductive autonomy.

Genetic discrimination.

Medical necessity.

Accuracy of genetic predictions.

The ethical limits of embryo selection.

The judgment supports the importance of proportionality and respect for private and family life when regulating reproductive genetic technologies.

It does not, however, establish a general legal entitlement to every AI-based reproductive procedure.

8. Legal Liability for AI-Related Genomic Medical Errors

Liability is an important issue where AI produces incorrect genomic predictions.

Different parties may have different legal responsibilities.

Example: Incorrect cancer prediction

Suppose a Moroccan patient undergoes genomic testing.

An AI algorithm incorrectly identifies a mutation associated with hereditary breast cancer. The doctor relies on this prediction and recommends unnecessary surgery.

The following legal questions arise:

Was the genetic test scientifically validated?

Did the laboratory follow appropriate quality standards?

Did the doctor independently assess the AI-generated result?

Was the patient adequately informed?

Did the hospital maintain proper supervision?

Did the software developer contribute to the error through a defect?

Depending on the evidence, liability may arise under applicable medical, civil, contractual, professional or data-protection rules.

The existence of an AI system does not automatically eliminate the responsibility of the medical professionals and institutions involved.

9. Ethical and Human Rights Issues

AI genomic medicine in Morocco also raises important ethical questions.

A. Genetic discrimination

Employers, insurers or other institutions might misuse genetic predictions to discriminate against individuals.

For example, an individual with an AI-predicted hereditary cancer risk could face unfair treatment despite having no current symptoms.

Moroccan constitutional equality and privacy principles, together with applicable legislation, are relevant to addressing such conduct.

B. Genetic confidentiality

Genetic information may reveal information about relatives who never directly participated in testing.

Consequently, medical institutions should establish strict access controls and confidentiality procedures.

C. Informed consent

Patients should understand the distinction between ordinary medical testing and AI-based genomic analysis.

Consent arrangements should address secondary research, international transfers, commercial reuse and the possible discovery of unexpected hereditary risks.

D. Protection of vulnerable individuals

Special safeguards are necessary when AI genomic testing involves:

Children.

Individuals lacking legal capacity.

Pregnant patients.

Individuals participating in clinical trials.

Patients with serious hereditary disorders.

E. Scientific reliability

An AI system should undergo appropriate clinical validation before its outputs are used to support consequential medical decisions.

10. Institutional Responsibilities in Morocco

Several institutions have important roles in the regulatory framework.

These institutions may have overlapping responsibilities depending on whether the activity involves medical treatment, biomedical research, laboratory testing or personal-data processing.

11. Major Regulatory Challenges

Morocco faces several challenges in regulating AI genomic medicine.

1. Absence of comprehensive AI-specific legislation

General data-protection and medical laws do not provide a complete framework for algorithmic medical accountability.

2. Lack of specific genomic AI standards

Clearer requirements are needed for validating AI systems used in genetic diagnosis and predictive medicine.

3. International data governance

Foreign cloud services and genomic databases create challenges concerning data transfers, foreign jurisdiction and commercial reuse.

4. Algorithmic discrimination

AI systems trained using insufficiently representative datasets may produce unequal diagnostic outcomes.

5. Medical responsibility

The allocation of liability between doctors, laboratories, hospitals and AI developers requires greater legal clarity.

6. Protection of family genetic information

Genomic information can reveal hereditary relationships, creating privacy interests beyond the individual patient.

12. Recommendations for Strengthening Moroccan Law

The following reforms could improve the governance of AI in genomic medicine.

1. Dedicated AI legislation: Introduce specific legal provisions for high-risk medical AI systems.

2. Mandatory clinical validation: Require appropriate testing and independent validation before clinical deployment.

3. Human oversight: Establish clear requirements for medical-professional review of consequential AI-generated diagnoses.

4. Genomic-data safeguards: Introduce detailed standards for collection, storage, processing and destruction of genetic information.

5. Algorithmic transparency: Require meaningful explanations of diagnostic limitations and relevant risk predictions.

6. Genetic non-discrimination: Strengthen protections against misuse of genetic information in employment, insurance and other decision-making.

7. Research governance: Improve consent procedures for secondary genomic research and AI model training.

8. International cooperation: Establish safeguards for cross-border genomic-data sharing and international medical research.

9. Clear liability rules: Clarify responsibilities among healthcare providers, laboratories, AI developers and hospitals.

10. CNDP supervision: Develop specific regulatory guidance for AI-based genomic data processing.

13. Overall Legal Analysis

The regulation of artificial intelligence in genomic medicine in Morocco is developing through the interaction of constitutional privacy protections, personal-data legislation, biomedical research law and medical professional regulation.

Law No. 09-08 provides the principal foundation because it expressly recognises genetic information as sensitive personal data. Law No. 28-13 protects individuals participating in biomedical research, while Laws No. 12-01 and 131-13 provide important regulatory frameworks for medical laboratories and medical practice.

The CNDP's presentation of 17 recommendations on genomic information on 11 May 2026 represents an important development in Morocco's genomic-data governance.

Nevertheless, significant gaps remain concerning AI algorithm validation, explainability, clinical accountability, genetic discrimination and the allocation of responsibility for automated medical errors.

The central legal principle is that artificial intelligence should assist genomic medicine without replacing patient rights, medical accountability, informed consent and human dignity.

For Morocco, the future challenge is to establish a regulatory framework that encourages scientific innovation while ensuring that genomic information is processed lawfully, medical decisions remain professionally accountable and patients retain meaningful control over their genetic information.

14. Important Legal References and Research Sources

Constitution of Morocco, 2011 – Articles 24 and 27.

Law No. 09-08 – Personal Data Protection.

Decree No. 2-09-165 – Implementation of Law No. 09-08.

Law No. 28-13 (2015) – Protection of Persons Participating in Biomedical Research.

Decree No. 2.20.326 (2021) – Implementation of Law No. 28-13.

Law No. 12-01 (2002) – Private Medical Biology Laboratories.

Law No. 131-13 (2015) – Practice of Medicine.

S. and Marper v. United Kingdom (2008).

Costa and Pavan v. Italy (2012).

Peruzzo and Martens v. Germany (2013).

Official and research sources:

Moroccan CNDP – Data Protection Legislation.

Full text of Law No. 09-08.

Moroccan Ministry of Health – Medical Regulations.

CNDP – Genomic Information Recommendations, 2026.

Law No. 28-13 – Biomedical Research.

S. and Marper v. United Kingdom.

Costa and Pavan v. Italy.

Academic qualification: The international cases above are comparative jurisprudence, not Moroccan Supreme Court decisions. No directly applicable Moroccan AI-genomic medicine precedent has been established in the sources reviewed. This distinction is important when using the material in a legal dissertation or research paper.