Blog
AI, automation and compliance
Practical articles for executives and teams: what AI can do, how to deploy it, and how to stay on the right side of the law.
Cookies in Morocco: what deliberation D-939-2025 really requires
Since 28 November 2025, the CNDP regulates cookies through a simplified-declaration model. Which cookies need consent, which are exempt, the maximum retention, and what must not be confused with European doctrine.
All articles
Hosting abroad is transferring: reading articles 43 and 44 of Law 09-08
A host in France, an emailing tool in the United States, an AI API in the cloud: every flow leaving Morocco is a transfer subject to a precise regime. What the law, the decree and the adequacy list actually say.
Law 09-08: what your website must display, and what it must not collect
A Moroccan website with a contact form is already a “processing of personal data”. Here, article by article, is what Law 09-08 requires before the very first submission.
Articles on regulatory topics are technical and documentary analysis, not legal advice. Excerpts from legal texts are reproduced from official publications; our interpretations are flagged as such.