Technology law — Law 09-08 / 53-05

    Technology lawyer in Marrakech

    Personal data protection, e-commerce, electronic signature, cybercrime: the firm advises startups, e-merchants and companies in Marrakech on digital compliance and defends their rights against cyberattacks.

    Technology lawyer in Marrakech

    A constantly evolving legal framework

    Moroccan digital law rests on several complementary texts: Law 09-08 on personal data protection, Law 53-05 on electronic legal data exchange, Law 07-03 on cybercrime, Law 31-08 on consumer protection. The reference authority for personal data is the CNDP (National Commission).

    For a company operating in digital, compliance is not optional: administrative and criminal sanctions, reputation damage. For an individual cyberattack victim, response speed conditions evidence preservation.

    Areas of intervention

    Personal data protection

    Law 09-08, CNDP declaration, international transfers, individual rights, processing register and privacy policy.

    Cybercrime and online fraud

    Law 07-03: system intrusion, data integrity violation, identity theft, online fraud. Complaint and civil party constitution.

    E-commerce and T&Cs

    General Sales Conditions, legal mentions, withdrawal right (Law 31-08), electronic invoicing, secure payment.

    Electronic signatures and contracts

    Law 53-05 on electronic legal data exchange, evidentiary value of electronic signature, archiving with evidentiary value.

    Social networks and e-reputation

    Online defamation, privacy violation, content removal, right to be forgotten, platform counterfeiting.

    IT and SaaS contracts

    Hosting, IT management, software license, SaaS, development services, intellectual property of code and data.

    Digital compliance or cyberattack in Marrakech?

    GDPR/CNDP audit, T&Cs drafting, cybercrime complaint or removal contestation: the firm supports you on all digital matters.

    Questions fréquentes

    Yes, Law 09-08 requires prior declaration to the National Commission for the Control of Personal Data Protection (CNDP) for most processing. Some sensitive processing (health, offenses, biometrics) requires prior authorization. Otherwise, administrative and criminal sanctions apply.