The Moroccan data protection authority ('CNDP') announced, on 6 April 2022, that the CNDP and Microsoft have worked together for several months to ensure compliance with Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data ('the Data Protection Law'), by Moroccan customers and data controllers who use the Office 365 platform. In particular, the CNDP noted that it had approved an expedited process to allow data controllers requesting the transfer of their data to the Office 365 platform to obtain a facilitated approval of transfer abroad. Furthermore, the CNDP stated that Microsoft will set up on its website an information section dedicated to Moroccan customers on the protection of personal data, which aims to remind data controllers of their responsibility in choosing a cloud service provider and how Microsoft supports Moroccan data controllers in their compliance with the Data Protection Law.

Moreover, the CNDP outlined that the website will also provide Microsoft customers with a practical sheet as well as a declaration model, the content of which is approved by the CNDP, that data controllers may submit, to the CNDP, in support of their request for transfer abroad in order to benefit from the accelerated procedure. Lastly, the CNDP highlighted that the issuing of an authorisation for the processing or transfer of personal data by the CNDP does not in any way replace any authorisations that may have to be issued by the competent third-party authorities or the legislative and regulatory texts in force.

You can read the press release, only available in French, here.