National Commission for Personal Data Protection sets rules for 2026 elections on personal data, AI, and prospecting
Ahead of the legislative elections on September 23, 2026, the National Commission for Personal Data Protection CNDP has issued guidelines for political parties regarding the use of personal data during the electoral process. The CNDP emphasizes adherence to legal provisions and data protection principles, informing both political entities and the general public, especially the electorate. Key directives include compliance with Law 09-08, requiring notification to the CNDP before processing personal data, and respecting data retention periods. The Commission explicitly prohibits the exploitation of political opinions without explicit consent and direct prospecting without prior consent. For artificial intelligence, the CNDP mandates the reporting of all AI-generated content, referencing articles from the Moroccan Penal Code and organic law. Furthermore, the CNDP stresses the importance of collecting personal data fairly and transparently, safeguarding individuals' rights, and ensuring that subcontracting agreements comply with Law 09-08. Any data transfers must also adhere to the law's provisions. The CNDP urges all involved parties to cooperate and uphold their responsibilities in personal data protection. To support this democratic phase, the Commission has established a direct hotline, 3020, for clarifications and to monitor data protection issues throughout the electoral process.