Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data 18: Article 18: public registers exempt from declaration still need a named controller

What does 18 require?

Processing whose sole purpose is keeping a register that is by law intended to inform the public and open to consultation is exempt from declaration, but a controller must be designated, its identity published and notified to the CNDP, and it is responsible for the data subject rights of Chapter II; it must tell anyone who asks the name and purpose of the processing, the controller, the data processed, recipients and planned transfers abroad.