Morocco
Morocco Recording Laws: All-Party Consent Rules and Penalties (2026)

Morocco is an all-party consent jurisdiction. Article 447-1 of the Penal Code (Law No. 103-13, 2018) criminalizes recording any private conversation without every participant's consent, whether by phone, in person, or digitally, and carries six months to three years in prison plus fines of MAD 2,000 to MAD 20,000.
Quick Answer: Is Morocco an All-Party Consent Jurisdiction?
Morocco is an all-party consent jurisdiction for recording private conversations. Article 447-1 of the Penal Code (Dahir No. 1-59-413 of November 26, 1962, as amended through Law No. 103-13 of 2018) prohibits the interception, recording, broadcasting, or distribution of conversations or information shared in a private or confidential context without the consent of all parties involved. That prohibition applies regardless of whether the recording is made by a participant in the conversation or by a third party listening in. There is no one-party consent exception in Moroccan law: you cannot lawfully record your own call or meeting without informing the other participants and obtaining their agreement first. The constitutional basis for this rule is Article 24 of Morocco's 2011 Constitution, which declares that private communications, in whatever form, are secret, and that only the judiciary may authorize access to their contents. Violations are criminal, not merely civil, and carry penalties steep enough that the rule warrants attention from any individual or business operating on Moroccan territory.
Overview of Recording Laws in Morocco
Morocco treats the privacy of communications as a constitutional guarantee. Article 24 of the 2011 Constitution states that private communications, "under whatever form that may be, are secret," and that only the judiciary may authorize access to their content. That principle flows through the Penal Code, the Code of Criminal Procedure, and a standalone data protection statute (Law 09-08) to create one of North Africa's more protective legal frameworks around recording.

For practical purposes, Morocco operates as an all-party consent jurisdiction. You cannot lawfully record a phone call, an in-person conversation, or any other private exchange without the knowledge and agreement of every person involved. Violations are criminal, not just civil, and the penalties are steep enough that ignorance of the law is a costly mistake.
This guide covers what the statutes actually say, how enforcement works, and what businesses and individuals need to know to stay on the right side of Moroccan law.
Constitutional Foundation: Article 24
The starting point for any analysis of Moroccan recording law is the 2011 Constitution. Article 24 establishes three core protections:
- Every person has the right to protection of their private life.
- The home is inviolable, and searches may only occur under conditions provided by law.
- Private communications, in whatever form, are secret.
The constitution goes further than many comparable provisions by specifying that only justice (the courts) may authorize access to private communications. Law enforcement agencies cannot unilaterally intercept or record conversations. They must obtain a judicial order first. This constraint shapes every downstream statute.
Penal Code: Recording Without Consent
Article 447-1: The Core Prohibition
The most directly relevant provision is Article 447-1 of the Moroccan Penal Code (Code Penal, promulgated by Dahir No. 1-59-413 of November 26, 1962). This article, introduced through Law No. 103-13 on Eliminating Violence Against Women (2018), criminalizes the "interception, recording, broadcasting or distribution of conversations or information issued in a private or confidential context, without the consent of their authors."
The penalties are significant:
- Six months to three years in prison
- Fines ranging from MAD 2,000 to MAD 20,000 (approximately $200 to $2,000 USD)
This article applies broadly. It covers audio recordings, written communications, and any information shared in a private setting. The law does not distinguish between recording someone else's conversation (eavesdropping) and recording your own conversation with another person without telling them. Both are prohibited.
Article 447-2: Manipulated Content and False Attributions
Article 447-2 targets a distinct but related harm: distributing manipulated images, audio, or false claims about an individual through any means, including digital platforms and social media, with intent to harm their reputation. This article specifically covers fabricated or altered content, such as digitally manipulated images, doctored audio, and false statements attributed to a real person. Merely re-sharing an authentic recording of a private conversation is covered by Article 447-1, not 447-2. The two provisions address different forms of privacy violation.
This provision was introduced through Law No. 103-13 to address the rise of online harassment and viral sharing of manipulated private recordings.
Penalties under Article 447-2:
- One to three years in prison
- Fines from MAD 2,000 to MAD 20,000
Posting a fabricated or doctored recording on social media, forwarding manipulated images through a messaging app, or attributing false statements to a real person through any digital channel all fall within this article's reach.
Article 447-3: Aggravated Circumstances
Article 447-3 increases the penalties when recording or distribution offenses are committed by someone in a position of trust or authority over the victim. This includes:
- Spouses and former spouses
- Family members and guardians
- Employers or supervisors
- Anyone with authority over the victim
The aggravated penalties:
- One to five years in prison
- Fines from MAD 5,000 to MAD 50,000
Repeat offenders face the same enhanced penalties. The law also provides stronger protections when victims are women or minors, reflecting amendments designed to combat domestic surveillance and intimate partner abuse.
Phone Recording Laws
Moroccan law does not create a separate regime for telephone recordings. The same rules apply whether a conversation happens face-to-face, over a landline, through a mobile phone, or via an internet-based calling platform.
Under Article 447-1, recording a phone call without the consent of all parties on the line is a criminal offense. There is no exception for participants who want to record their own calls for personal reference.
Businesses that record customer service calls must provide clear notice at the start of the call and obtain affirmative consent. Simply continuing the call after a recorded disclaimer is a legal gray area in Morocco. The safer approach, and the one the CNDP favors, is to obtain explicit consent before the recording begins.
In-Person Recording Laws
Recording a private, in-person conversation without the consent of everyone present violates Article 447-1. This applies in homes, offices, restaurants, private meetings, and any other setting where the participants have a reasonable expectation of privacy.
The law does recognize a distinction between private and public settings. A conversation held in a public square, a market, or a loud cafe where others can overhear it may not qualify as "private or confidential" under Article 447-1. But Moroccan courts interpret privacy broadly, and the burden falls on the person who made the recording to demonstrate that the conversation lacked a reasonable expectation of privacy.
Photographing or filming people in private spaces without their consent is also prohibited under Article 441 of the Penal Code, which covers capturing images in private settings.
Interception of Communications by Authorities
The Code of Criminal Procedure (Chapter V, Articles 108 through 116) sets out the rules for lawful interception of private communications by law enforcement.
Key requirements:
- A written warrant from the First President of the Appeals Court or Crown Prosecutor is mandatory.
- The interception must relate to a specific criminal investigation (state security crimes, terrorism, homicide, kidnapping, drug trafficking, or similar serious offenses).
- Judicial Police officers must keep a written record of the surveillance operation, including its start and end dates.
- All recordings must be kept under seal.
- Warrants are limited to four months, renewable once.
- Recordings must be destroyed after the statute of limitations expires on the related legal action, or after a final, non-appealable judgment is rendered.
Emergency procedures allow Crown Prosecutors to initiate surveillance before warrant issuance in "extreme emergency" cases, but Appeals Court confirmation is required within 24 hours.
Anti-Terrorism Exceptions (Law 03-03)
Morocco's anti-terrorism law, Law 03-03 (enacted in 2003, as amended by Act 86.14), broadens the government's authority to intercept communications in terrorism cases. Under this law, judicial authorities can request interception and seizure of communications in relation to terrorist investigations or in "extreme emergency" situations.
The penalties for unauthorized interception jump dramatically in the terrorism context:
- Up to 10 years in prison when the interception relates to a terrorism act
- Up to 10 years in prison when the offender is an official or employee of a telecommunications company who abuses their access
Outside the terrorism context, unauthorized interception or installation of listening devices by anyone (including government officials acting without authorization) carries a penalty of up to one year in prison.
Voyeurism and Image-Based Abuse
Morocco's Penal Code addresses both voyeurism (capturing images without consent) and image-based abuse (distributing those images to harm a victim).
Article 441: Unauthorized Image Capture
Article 441 of the Penal Code prohibits capturing images of a person in private spaces without their consent. This provision covers photography, video recording, and any other means of capturing a person's image in a location where they have a reasonable expectation of privacy: homes, changing rooms, hotel rooms, and similar private settings. The article is distinct from the Article 447 series, which focuses on recorded conversations and communications rather than visual images.
Image-Based Abuse and Law 103-13
Law 103-13 on Eliminating Violence Against Women (2018) significantly strengthened protections against image-based abuse by introducing Articles 447-1 through 447-3. Together, these provisions criminalize:
- Recording private conversations without consent (Art. 447-1)
- Distributing manipulated images or false attributions about a person (Art. 447-2)
- Aggravated offenses by authority figures, including domestic partners (Art. 447-3)
The combination creates a comprehensive legal framework targeting the cycle of intimate partner surveillance: unauthorized recording, manipulation of the captured content, and coercive distribution. The aggravated penalties under Article 447-3 are specifically designed for domestic abuse scenarios where the offender exploits a position of trust.
Non-Consensual Distribution of Intimate Images
The distribution of private sexual images without consent (commonly called revenge porn) falls within the scope of Articles 447-1 and 447-2 depending on whether the original recording was made with or without consent and whether the distributed content has been manipulated. Morocco does not have a standalone revenge-porn statute, but prosecutors have used the Penal Code's existing framework to pursue such cases. Penalties can reach five years imprisonment under the aggravated circumstances of Article 447-3 when the distribution is carried out by a former intimate partner.
Law 09-08: Data Protection and Recording
Law No. 09-08, enacted on February 18, 2009 (with implementing Decree No. 2-09-165 of May 21, 2009), is Morocco's primary data protection statute. While it addresses personal data processing broadly, its provisions directly affect recording because any audio or video recording of an identifiable person constitutes personal data under the law.
Consent Requirements
Law 09-08 requires the prior, freely given, specific, informed, and unambiguous consent of the data subject before any processing of their personal data. Recording a conversation qualifies as "processing" under the law's definition, which covers "any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available."
This means recording falls squarely within the law's scope.
Penalties Under Law 09-08
The penalty structure is tiered based on the type of violation:
| Violation | Imprisonment | Fine (MAD) |
|---|---|---|
| Processing without legal basis (Art. 56) | 3 months to 1 year | 20,000 to 200,000 |
| Failing to implement security measures | 3 months to 1 year | 20,000 to 200,000 |
| Continuing processing despite valid objection | 3 months to 1 year | 20,000 to 200,000 |
| Unlawful international data transfer | 3 months to 1 year | 20,000 to 200,000 |
| Refusing to comply with CNDP decisions | 3 months to 1 year | 10,000 to 100,000 |
| Most serious violations | Up to 4 years | Up to 600,000 |
For legal entities (companies, organizations), fines are doubled. Courts can also order property confiscation, asset seizure, or closure of the business.
Repeat offenses within one year of conviction result in doubled penalties across the board.
The CNDP: Morocco's Data Protection Authority
The Commission Nationale de Controle de la Protection des Donnees a Caractere Personnel (CNDP) is the autonomous administrative body responsible for enforcing Law 09-08. Established by the same legislation, the CNDP has broad authority:
- Investigating complaints related to personal data protection
- Conducting compliance audits
- Issuing guidance and educational materials
- Imposing penalties for violations
- Referring cases to the public prosecutor for criminal proceedings
Enforcement in Practice
As of 2026, the CNDP has not issued any fines. Its enforcement approach has focused on warning letters sent to organizations that handle large volumes of personal or sensitive data, including hotels, pharmaceutical companies, and public universities. The commission has also initiated investigations into data controllers handling significant amounts of personal data.
The CNDP's gradual escalation mirrors the approach taken by European data protection authorities in the early years of the GDPR. Organizations should not assume that warnings will continue indefinitely.
In November 2025, the CNDP issued five substantive compliance decisions dated November 28, 2025, its first operational frameworks for common data processing activities:
- Cookies: maximum data retention of six months for data collected via cookies
- Newsletters: simplified declaration route for subscriber mailing list management
- Patient follow-up: healthcare data processing for diagnosis, treatment, and telemedicine
- Healthcare CCTV: video surveillance in care settings; recordings must not be kept beyond six months
- Access control logs: visitor verification for private professional premises; maximum retention of one year
These decisions provide simplified declaration routes for compliant organizations but signal that the CNDP is building the infrastructure for active enforcement.
Registration Requirements
Most data processing activities require filing a declaration with the CNDP before they begin. Processing of sensitive data (health records, political opinions, religious beliefs, genetic information, criminal records) demands prior authorization from the commission. Any change in the purpose of processing or transfer of data outside Morocco to a country without adequate data protection also requires fresh CNDP authorization.
Morocco is working toward EU adequacy recognition (requested since 2009) but has not yet received a formal adequacy decision from the European Commission. The French data protection authority (CNIL) has stated that Morocco does not yet provide adequate protection under French standards. The CNDP is currently preparing a decision on AI and personal data processing.
Workplace Recording and Employee Monitoring
Moroccan law imposes specific requirements on employers who want to record or monitor their employees.
CCTV and Video Surveillance
Any workplace CCTV system requires prior notification to the CNDP. Under CNDP guidelines:
- Cameras may be installed in areas necessary for the security of goods or persons.
- Cameras may never be placed in locations where they risk violating privacy: washrooms, meeting rooms, break areas, or places of worship.
- Cameras may not be used to monitor specific employees.
- Surveillance of workflow and productivity requires express prior authorization from the CNDP.
Employee Consent
Employers must advise employees in advance about any monitoring devices in the workplace. Employees must give free and informed consent to the monitoring. In practice, most employers include consent clauses in employment contracts, but the CNDP has signaled that blanket contractual consent may not satisfy the law's requirement that consent be specific and informed.
Call Recording in Business
Businesses that record phone calls for quality assurance, training, or compliance purposes must:
- Notify all parties at the start of the call
- Obtain explicit consent before recording begins
- File a declaration with the CNDP covering the recording activity
- Implement appropriate security measures to protect stored recordings
- Delete recordings when the stated purpose has been fulfilled
Recording in Public Spaces
Morocco does not have a blanket prohibition on recording in public spaces, but several restrictions apply.
Photographing or filming military installations, government buildings, embassies, and police is strictly prohibited. Tourists and journalists have been stopped and had equipment confiscated for photographing sensitive sites.
Filming individuals in public spaces for commercial purposes (music videos, films, advertisements) requires authorization from the Ministry of Communication. Even non-commercial filming of identifiable individuals should be done with their knowledge, as Article 447-1 could apply if the person considers the captured content to be private.
Photographing or filming people, particularly in traditional areas, without asking permission first is both a legal risk and a cultural consideration.
Law 88-13 on Press and Publishing (2016) provides an additional restriction: Article 88 of the Press Law prohibits revealing details, photos, or films of an individual's private life without their consent, unless the content is directly connected to public life or public affairs. This means that even lawfully obtained footage of a public figure can become unlawful to publish if it captures private rather than public conduct.
Recording Police and Public Officials
Recording police officers or other public officials in the performance of their duties is one of the most legally sensitive areas of Moroccan recording law. There is no explicit statutory right to record police. The combination of broadly drafted laws and a documented pattern of prosecutions creates real legal risk.
Legal Framework
No Moroccan statute expressly authorizes the public to film or record law enforcement. The general prohibition on recording in contexts where individuals have a reasonable expectation of privacy (Art. 447-1), combined with the criminal provisions of the 2016 Press and Publishing Law and the Anti-Terrorism Law, gives authorities discretion to pursue charges against anyone who records and publishes footage of police activity.
Law 88-13 on Press and Publishing (2016) introduced licensing requirements for online media and journalist registration that have been criticized by press freedom organizations for restricting online reporting of protests and police conduct.
Documented Prosecutions
The pattern of enforcement is well-documented:
- During the Hirak Rif Movement protests (2016-2019), eight journalists and citizen reporters were jailed. Most were charged with offenses including "threatening national security" or "insulting police officers" based in part on their video coverage of protests.
- In 2023, teacher Nezha Majdi was sentenced to three months in prison for sharing a video online that encouraged other teachers to protest an alleged case of sexual assault by a police officer (Freedom House Freedom on the Net 2024).
- In July 2024, King Mohammed VI issued a royal pardon releasing prominent journalists who had been sentenced to 15, 5, and 6 years respectively, including Taoufik Bouachrine, Souleimane Raissouni, and Omar Radi. The Committee to Protect Journalists reported in October 2024 that these journalists continued to face smears and harassment after release.
Morocco ranked 144th out of 180 countries in the 2023 RSF World Press Freedom Index.
Practical Caution
Recording police activity in Morocco carries a different risk profile than in many Western jurisdictions. The legal framework does not clearly protect bystander or citizen journalism. Individuals who record and publish footage of law enforcement operations, protests, or security incidents have faced prosecution. The safest approach is to avoid recording police in sensitive situations and to consult a Moroccan lawyer before publishing any footage involving state officials.
Law 43-20: Trust Services and Electronic Transactions
Law No. 43-20 on Trust Services for Electronic Transactions (adopted December 8, 2020, with implementing Decree No. 2-22-687 of November 16, 2022) governs the legal recognition of electronic signatures, electronic seals, timestamps, and registered electronic delivery services. The law is administered by the General Directorate of Information Systems Security (DGSSI) of the National Defense Administration, which serves as the national authority for trust services.
Law 43-20 does not regulate the act of recording conversations. Its relevance to recording law is indirect: it establishes the legal framework for the validity and evidentiary value of electronic communications and digitally authenticated documents. In litigation involving recording disputes, the authentication of digital evidence (including the integrity of a recording file and its chain of custody) may be governed by Law 43-20's provisions on electronic timestamps and seals.
The law distinguishes between qualified trust service providers (subject to strict accreditation criteria under DGSSI) and non-accredited providers (subject to a lighter authorization process). Electronic signatures created by qualified providers are recognized as legally equivalent to handwritten signatures for most purposes under Moroccan law.
Deepfake and AI-Generated Content
Current Legal Framework
Morocco does not yet have a standalone deepfake statute. However, the existing Penal Code already captures the most harmful uses of AI-generated content through two provisions:
- Article 447-1 covers the unauthorized recording, broadcasting, or distribution of private conversations or information shared in a confidential context. A synthetic audio recording designed to simulate a real person's voice in a private conversation would fall within this prohibition if distributed without the subject's consent.
- Article 447-2 directly targets the distribution of manipulated images or audio and false attributions about an individual with intent to harm their reputation. An AI-generated video placing a person in a fabricated scenario, or synthetic audio portraying someone as saying things they never said, squarely meets the definition of distributing manipulated content under this article. Penalties are one to three years imprisonment and fines of MAD 2,000 to MAD 20,000.
Pending AI Governance Framework
Morocco introduced an April 2024 bill proposing the creation of a National Agency for AI Governance to oversee AI activities, develop national AI strategies, and ensure ethical compliance. The bill has not yet been enacted into law as of early 2026.
Morocco joined the Paris AI Action Summit Statement on Inclusive and Sustainable AI in February 2025, signaling alignment with international efforts to develop responsible AI governance.
The CNDP is currently preparing a decision on AI and personal data processing, which is expected to provide guidance on when AI-generated or AI-processed content involving personal data requires CNDP authorization.
Practical Implication
Until dedicated deepfake legislation is enacted, victims of AI-generated image abuse should pursue remedies under Articles 447-1 and 447-2 of the Penal Code, combined with civil claims under the Dahir of Obligations and Contracts. The penalty ceiling of three to five years imprisonment (under the aggravated circumstances of Art. 447-3 when an intimate partner is involved) provides meaningful deterrence even without a specialist statute.
Civil Liability for Recording Violations
Criminal prosecution under the Penal Code and regulatory enforcement under Law 09-08 are not the only remedies available to victims of unauthorized recording in Morocco.
Civil Framework
Morocco's civil liability framework is governed by the Dahir of Obligations and Contracts (DOC) of August 12, 1913, the foundational civil law instrument derived from French civil law principles. The DOC establishes that any person who causes harm to another through a fault or wrongful act is obligated to compensate the victim. The three required elements are: (1) a fault or wrongful act; (2) actual harm to the victim; and (3) a causal link between the two.
Unauthorized recording of a private conversation satisfies all three elements in most cases. The fault is the violation of Article 447-1 (or the data protection obligations of Law 09-08). The harm may include reputational damage, emotional distress, economic loss from disclosure of business information, or damage to personal relationships. The causal link is the act of recording and any subsequent distribution.
Criminal and Civil Proceedings
Criminal and civil proceedings are independent in Morocco. A victim can simultaneously:
- File a criminal complaint with the public prosecutor (which triggers investigation under the Penal Code)
- Initiate a civil action (action civile) to claim compensatory damages
Moroccan criminal procedure permits victims to join the criminal proceedings as a civil party (partie civile), allowing them to claim damages within the criminal case rather than filing a separate civil lawsuit. This mechanism is commonly used in privacy violation cases.
Remedies Available
Courts can award:
- Compensatory damages for actual harm (reputational, economic, psychological)
- Injunctive relief to stop ongoing recording or prevent publication of a recording
- Under Law 09-08, courts can also order confiscation of equipment, asset seizure, and business closure for serious or repeat violations by legal entities
Cross-Border Rules and International Commitments
Territorial Scope
Morocco's recording laws apply when the recording occurs on Moroccan territory or when one of the parties to the conversation is located in Morocco. If you are calling someone in Morocco from abroad and record the call without their consent, you could face prosecution if Moroccan authorities become aware of the recording and choose to pursue the matter. The practical likelihood of enforcement in purely extraterritorial scenarios is lower, but the legal exposure is real.
For data protection purposes, Law 09-08 applies to any data controller that processes personal data of individuals located in Morocco, regardless of where the controller is established.
Convention 108 and Convention 108+
Morocco ratified Convention 108 (the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data) in May 2019, with the Convention entering into force for Morocco on September 1, 2019, making Morocco the 55th state party. Morocco also signed the modernized Convention 108+ (the 2018 Protocol amending Convention 108, which aligns the treaty with GDPR-era standards).
Accession to Convention 108+ establishes binding obligations for Morocco's personal data protection framework and provides a legal basis for cross-border data flows between Morocco and other state parties, supporting CNDP cooperation with foreign data protection authorities.
Budapest Convention on Cybercrime
Morocco ratified the Budapest Convention on Cybercrime on June 29, 2018, becoming one of the few North African countries to join this international framework. The convention criminalizes unauthorized access to systems and interception of communications, and it provides a framework for cross-border cooperation in cybercrime investigations.
Morocco also signed the Second Additional Protocol to the Budapest Convention in 2022, which streamlines cross-border requests for subscriber information from foreign service providers.
Law 88-13: Press and Media Recording
Law No. 88-13 governs the press sector and creates a framework for both protecting and restricting journalism in Morocco. Its key provisions relevant to recording are:
- Article 88 prohibits revealing details, photos, or films of an individual's private life without their consent, unless the content is directly connected to public life or public affairs management. This restriction applies even to lawfully obtained recordings.
- The law criminalizes offenses committed through audiovisual and electronic media, including the publication of illegally obtained recordings.
- The 2016 version of the law introduced licensing requirements for online media and journalist registration that have been criticized by press freedom organizations for restricting online journalism and citizen reporting.
Journalists conducting investigative reporting have limited protections under Law 88-13, but those protections do not extend to the recording of private conversations without consent. Recording a source's private statement without their knowledge violates Article 447-1 even when the journalist's purpose is in the public interest. Moroccan law does not recognize a broad public interest defense to recording without consent comparable to those available in some common-law jurisdictions.
Publication of a recording obtained in violation of Article 447-1 can result in prosecution under both the Penal Code and Law 88-13.
Practical Compliance Tips
For individuals and businesses operating in Morocco, the following practices reduce legal exposure:
- Always get consent first. Before recording any conversation, phone call, or meeting, inform every participant and get their agreement. Verbal consent is legally sufficient, but written consent provides stronger evidence if a dispute arises.
- Businesses should implement recording policies. Document your recording practices, train employees on consent requirements, and file declarations with the CNDP.
- Do not share recordings. Even if a recording was made legally with consent, distributing it to third parties without additional consent can violate both Article 447-2 and Law 09-08.
- Review workplace surveillance regularly. Ensure CCTV systems comply with CNDP guidelines. Remove cameras from prohibited areas. Do not repurpose security cameras for employee monitoring without CNDP authorization.
- Retain recordings only as long as necessary. Law 09-08 requires that personal data not be kept longer than the purpose for which it was collected demands. The CNDP's November 2025 decisions set specific maximum retention periods for common activities (six months for most video surveillance, one year for access control logs).
- Be cautious when traveling. Morocco's recording laws apply to everyone on Moroccan territory, regardless of nationality. Tourist recordings of people in markets, homes, or private settings can trigger legal issues.
- Exercise particular caution near protests or police. Recording law enforcement operations, security incidents, or political protests carries legal risks beyond those of ordinary recording. Seek legal advice before publishing any such footage.
Penalties Summary
The following table summarizes the key penalties under Moroccan law for recording-related offenses:
| Offense | Legal Basis | Prison Term | Fine |
|---|---|---|---|
| Recording private conversation without consent | Penal Code Art. 447-1 | 6 months to 3 years | MAD 2,000 to 20,000 |
| Distributing manipulated images or false attributions | Penal Code Art. 447-2 | 1 to 3 years | MAD 2,000 to 20,000 |
| Recording/distribution offense by person in authority | Penal Code Art. 447-3 | 1 to 5 years | MAD 5,000 to 50,000 |
| Unauthorized image capture in private space | Penal Code Art. 441 | Varies | Varies |
| Unauthorized interception of communications | Code of Criminal Procedure | Up to 1 year | Varies |
| Terrorism-related interception | Law 03-03 | Up to 10 years | Varies |
| Unlawful personal data processing | Law 09-08 Art. 56 | 3 months to 1 year | MAD 20,000 to 200,000 |
| Most serious data protection violations | Law 09-08 | Up to 4 years | Up to MAD 600,000 |
Conclusion
Morocco's recording laws are built on a constitutional guarantee of communications secrecy that flows through multiple statutes. The all-party consent requirement means that recording any private conversation without the agreement of every participant is a criminal act. Penalties range from six months in prison for a basic recording offense to 10 years for terrorism-related interception.
The combination of the Penal Code, Law 09-08, and an increasingly active data protection authority in the CNDP creates a legal environment where recording without consent carries real risk. Businesses face additional obligations around CNDP registration, workplace surveillance rules, data retention limits, and the November 2025 compliance frameworks. The pending AI Governance Agency bill and the CNDP's forthcoming AI decision signal that the framework will continue to develop around emerging technologies.
For anyone operating in Morocco, the safest approach is straightforward: ask before you record, document the consent, and do not share the recording without permission.
Frequently Asked Questions
Is Morocco a one-party or all-party consent jurisdiction for recording?
Morocco is an **all-party consent** jurisdiction. Article 447-1 of the Penal Code prohibits the recording of private conversations without the consent of all parties involved. This applies to phone calls, in-person conversations, and digital communications. Unlike one-party consent countries, you cannot legally record your own conversation with someone without telling them first. The constitutional basis is Article 24 of Morocco's 2011 Constitution, which declares private communications secret and reserves access to judicial authorization only.
What are the penalties for illegally recording someone in Morocco?
Under Article 447-1 of the Penal Code, recording a private conversation without consent carries **six months to three years in prison** and fines of MAD 2,000 to 20,000. Distributing manipulated images or false attributions adds penalties of one to three years under Article 447-2. If the offender holds a position of authority over the victim (employer, spouse, guardian), Article 447-3 increases the sentence to one to five years. Terrorism-related interception can result in up to 10 years imprisonment under Law 03-03. Data protection violations under Law 09-08 carry separate fines up to MAD 600,000 and up to four years in prison.
Can businesses record phone calls in Morocco?
Yes, but only with **explicit prior consent** from all parties on the call. Businesses must also file a declaration with the CNDP (National Data Protection Commission) before beginning any recording activities. Recorded data must be stored securely and deleted when the stated purpose has been fulfilled. The CNDP's November 2025 compliance frameworks set retention limits for common recording activities. Failure to comply can result in fines of MAD 20,000 to 200,000 and up to one year in prison under [Law 09-08](https://www.dgssi.gov.ma/en/loi-09-08-relative-la-protection-des-personnes-physiques-legard-du-traitement-des).
Is workplace surveillance legal in Morocco?
Workplace CCTV is permitted but tightly regulated. Employers must notify the CNDP before installing any surveillance system. Cameras may be placed in areas needed for security of goods or persons, but they are **prohibited** in washrooms, break areas, meeting rooms, and places of worship. Monitoring employee workflow or productivity requires express CNDP authorization. The CNDP's November 2025 healthcare CCTV decision confirmed that recordings in care settings should not be retained beyond six months. Employees must be informed in advance and must give free and informed consent to any monitoring.
Does Morocco's recording law apply to tourists and foreign nationals?
Yes. Morocco's recording laws apply to **everyone on Moroccan territory**, regardless of citizenship or residency. Tourists who record private conversations, [film people without consent](/is-it-illegal-to-video-record-someone-without-their-consent) in private settings, or photograph military and government installations can face criminal prosecution. Filming identifiable individuals in public spaces for commercial purposes requires authorization from the Ministry of Communication.
Is it legal to record police or public officials in Morocco?
There is no explicit legal right to record police in Morocco, and doing so carries real legal risk. Morocco ranked 144th out of 180 countries in RSF's 2023 World Press Freedom Index. Multiple journalists and activists were prosecuted for recording and publishing footage related to the 2016-2019 Hirak protests. In 2023, a teacher was sentenced to three months in prison for sharing a video about an alleged police assault. No broad public interest defense to recording without consent exists under Moroccan law. The safest approach is to avoid recording law enforcement in sensitive situations and to seek legal advice before publishing any footage involving state officials.
Does Moroccan law cover deepfakes and AI-generated content?
Morocco has no dedicated deepfake statute as of 2026, but existing provisions cover the most harmful uses. Article 447-2 of the Penal Code criminalizes distributing **manipulated images or audio** and spreading false attributions about a person with intent to harm their reputation, which covers AI-generated video and synthetic voice content. Penalties are one to three years imprisonment. An April 2024 bill proposed creating a National Agency for AI Governance, and the CNDP is preparing a guidance decision on AI and personal data. Victims can also pursue civil damages under Morocco's Dahir of Obligations and Contracts.
What civil remedies are available for unauthorized recording in Morocco?
Victims of unauthorized recording in Morocco can pursue civil damages independently of any criminal prosecution. Morocco's civil liability framework (Dahir of Obligations and Contracts of 1913) requires proof of fault, harm, and causation. Victims can file a criminal complaint and simultaneously join criminal proceedings as a civil party (partie civile) to claim damages. Courts can award compensatory damages for reputational, economic, and psychological harm, and may also grant injunctive relief to stop ongoing recording or prevent publication. Under Law 09-08, courts can additionally order confiscation of equipment, asset seizure, or business closure for serious violations.
Sources and References
- Constitution of Morocco (2011) - Article 24(constituteproject.org)
- Law No. 09-08 on Personal Data Protection - DGSSI (Government)(dgssi.gov.ma).gov
- Morocco Penal Code (Dahir No. 1-59-413, 1962, amended 2019) - WIPO Lex(wipo.int)
- Morocco Penal Code (Consolidated July 2018) - ONOUSC(onousc.ma).gov
- Data Protection Laws - Morocco - DLA Piper(dlapiperdataprotection.com)
- Morocco - Budapest Convention on Cybercrime - Council of Europe(coe.int)
- Convention 108 State Parties - Council of Europe(coe.int)
- Data Protection and Privacy 2026 - Morocco - Chambers and Partners(practiceguides.chambers.com)
- Law No. 43-20 on Trust Services for Electronic Transactions - DGSSI(dgssi.gov.ma).gov
- Freedom on the Net 2024 - Morocco - Freedom House(freedomhouse.org)
- Morocco Pardoned Journalists Face Threats - CPJ (October 2024)(cpj.org)
- DPA Digital Digest: Morocco 2025 Edition - Digital Policy Alert(digitalpolicyalert.org)
- State of Privacy Morocco - Privacy International(privacyinternational.org)