Morocco Law 09-08 Articles 12 + 19 + 27 Prior Declaration and Authorisation Regime (NOTE: Morocco retains pre-GDPR registration model rather than GDPR accountability model). Standard processing requires prior declaration (declaration prealable) to CNDP via electronic portal cndp.ma + free of charge + within 30 days before processing commencement + describing categories + purposes + recipients + retention + safeguards + Cross-Border transfer destination. Sensitive personal data + interconnection + Cross-Border transfer + biometric + criminal record + medical research processing require prior authorisation (autorisation prealable) - CNDP review + 60-day response + may impose conditions + grant + refuse. Public Register of declarations and authorisations maintained by CNDP + freely accessible via website + searchable + transparency function. Single-window for multi-category declarations + simplified procedures for standard categories. Exemptions: purely personal/household activity + journalistic + literary + artistic expression + processing for vital interests + employment internal directory + temporary processing under 6 months. CNDP-published forms + guidance + Codes of Conduct (Healthcare + Banking + Telecom + Insurance + Marketing + Cloud + Outsourcing).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.