Morocco: complain to the CNDP about unlawful use of your personal data or an unresolved access, rectification or objection request under Law 09-08. Identify the data, the organisation responsible and the specific privacy remedy you want.
Article 2 links coverage to a controller established in Morocco or a foreign controller using processing means located there, subject to the transit exclusion. Moroccan nationality or residence alone does not automatically establish jurisdiction. Explain the relevant Moroccan connection and ask the CNDP if uncertain. Exclusively personal or domestic activities and specified public-sector processing are excluded or specially regulated. A platform ban, hacked account or objectionable post is not automatically a data-protection violation. This route does not guarantee account restoration or compensation.
What to do
Identify the personal-data problem and Moroccan connection. For an unresolved rights request, retain your prior request and the response or non-response.
Use the official online complaint form, email plainte@cndp.ma with relevant evidence, or arrange physical filing. Follow any identity requirements applicable to a rectification request.
Keep delivery proof and the CNDP reference. Answer clarification requests and use that reference for follow-up.
Describe a concrete personal-data issue, not only a request to restore an account. Separate the controller request from the CNDP complaint, establish the Moroccan connection and retain dated evidence. The 10-clear-day rule is for rectification, not all complaints.
Your connection to the country matters, not your account language. Individual bodies have additional requirements.
Morocco · Access or protect personal data
All options by goal
Different routes seek different outcomes. Use a data or payment complaint only when that is the actual issue.
Choose a suitable option
Check what the service helps with and its requirements. Open a suitable option to see the steps and a link to the official website.
Requirements need checkingMorocco: complain to the CNDP about unlawful use of your personal data or an unresolved access, rectification or objection request under Law 09-08. Identify the data, the organisation responsible and the specific privacy remedy you want.Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP)Describe a concrete personal-data issue, not only a request to restore an account. Separate the controller request from the CNDP complaint, establish the Moroccan connection and retain dated evidence.Cost: No initial complaint fee is specified on the reviewed filing page or blank form; an unconditional free-service guarantee was not verified. Access and rectification rights are generally free. Translation, document preparation or travel may have separate costs.Steps and full conditions
Regional route · check eligibility
Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP)
What this route offers: Morocco: complain to the CNDP about unlawful use of your personal data or an unresolved access, rectification or objection request under Law 09-08. Identify the data, the organisation responsible and the specific privacy remedy you want.
Describe a concrete personal-data issue, not only a request to restore an account. Separate the controller request from the CNDP complaint, establish the Moroccan connection and retain dated evidence. The 10-clear-day rule is for rectification, not all complaints.
Article 2 links coverage to a controller established in Morocco or a foreign controller using processing means located there, subject to the transit exclusion. Moroccan nationality or residence alone does not automatically establish jurisdiction. Explain the relevant Moroccan connection and ask the CNDP if uncertain. Exclusively personal or domestic activities and specified public-sector processing are excluded or specially regulated. A platform ban, hacked account or objectionable post is not automatically a data-protection violation. This route does not guarantee account restoration or compensation.
Why this result
Requirements need checking
Not all requirements for this route are represented in the matcher. Check the recipient’s full instructions.
This is preliminary matching, not eligibility confirmation or a success estimate.
Requirements, deadlines and documents
Possible remedy
The CNDP can investigate, seek documents and require justified corrections; Law 09-08 also provides powers to block, erase or destroy data and restrict processing within its statutory scope. It may refer offences for prosecution. Erasure is conditional, not an unrestricted right to remove any lawful publication. This is a privacy-enforcement route, not general platform moderation, account recovery or compensation adjudication.Sources for these requirementsConfirmed by the source
For an unresolved rights request, first contact the organisation controlling the data through its privacy channel and retain the request, delivery evidence and response. A general complaint about unlawful processing is distinct; the published complaint instructions do not impose this step universally. Prepare your name, address, city/country, telephone and email, the respondent, account/profile and content URLs, dated facts, relevant screenshots and correspondence, and the privacy remedy requested. Identify the controller from its current privacy notice rather than assuming every service uses the same legal entity. Share only necessary evidence; never include passwords or recovery codes. Written access and rectification requests have identity requirements under Decree 2-09-165. A written rectification request to the CNDP must be dated and signed and include your names, date of birth, identity-card copy and precise correction sought. A specially authorised representative must substantiate authority and identities. These requirements should not be mislabelled as an ID-upload requirement for every general online complaint. Ask about an accepted alternative if you lack the specified identity document.Sources for these requirementsPartly confirmed
Access is due without delay; rectification is normally due within 10 clear days (dix jours francs). Decree article 36(2) covers access not satisfied immediately; article 36(3) covers rectification not satisfied within 10 days. Each requires a dated, signed acknowledgement explaining the delay and immediate referral by the controller to the CNDP to set a response deadline, not an automatic unlimited extension. Under article 37, if a request is imprecise or lacks information needed to act, the controller must seek those details before the applicable deadline; that request suspends the access or rectification time limit. These are controller-rights timelines, not a CNDP complaint-resolution guarantee. No general initial-complaint cutoff or fixed investigation completion time was established from the reviewed sources. Act promptly and follow any case-specific notice.Sources for these requirementsPartly confirmed
No initial complaint fee is specified on the reviewed filing page or blank form; an unconditional free-service guarantee was not verified. Access and rectification rights are generally free. Translation, document preparation or travel may have separate costs.Sources for these requirementsPartly confirmed
French and Arabic complaint interfaces are published. Acceptance of English or other filing languages, translation requirements and interpretation support were not verified. Ask the CNDP before relying on another language.Sources for these requirementsPartly confirmed
The CNDP publishes three channels: its online complaint form, email to plainte@cndp.ma, and physical filing. The clean online form was publicly readable without a login gate. It requires names, address, phone, email, city, country, complaint category, respondent and message; an earlier complaint reference is optional. For a social-media matter, select Autres if no listed category fits. Review the required terms/privacy acknowledgement before sending. No attachment control appeared in the inspected form: use the published email route for an evidence-bearing complaint, or ask the CNDP how to supply attachments against your reference. Physical contact: Avenue Al Arz, Secteur 4, M1, Hay Riad, Rabat, Morocco; confirm reception arrangements before travelling. Questions: +212 537 57 11 24. Public instructions and blank forms were read; submission and delivery were not tested.Sources for these requirementsPartly confirmed
Identify the personal-data problem and Moroccan connection. For an unresolved rights request, retain your prior request and the response or non-response.
Use the official online complaint form, email plainte@cndp.ma with relevant evidence, or arrange physical filing. Follow any identity requirements applicable to a rectification request.
Keep delivery proof and the CNDP reference. Answer clarification requests and use that reference for follow-up.
Ask about jurisdiction, documents, attachment delivery or physical reception. Complaint filing by telephone was not verified.
What to prepare
For an unresolved rights request, first contact the organisation controlling the data through its privacy channel and retain the request, delivery evidence and response. A general complaint about unlawful processing is distinct; the published complaint instructions do not impose this step universally. Prepare your name, address, city/country, telephone and email, the respondent, account/profile and content URLs, dated facts, relevant screenshots and correspondence, and the privacy remedy requested. Identify the controller from its current privacy notice rather than assuming every service uses the same legal entity. Share only necessary evidence; never include passwords or recovery codes. Written access and rectification requests have identity requirements under Decree 2-09-165. A written rectification request to the CNDP must be dated and signed and include your names, date of birth, identity-card copy and precise correction sought. A specially authorised representative must substantiate authority and identities. These requirements should not be mislabelled as an ID-upload requirement for every general online complaint. Ask about an accepted alternative if you lack the specified identity document.
What to do after applying
No reply yet
Access is due without delay; rectification is normally due within 10 clear days (dix jours francs). Decree article 36(2) covers access not satisfied immediately; article 36(3) covers rectification not satisfied within 10 days. Each requires a dated, signed acknowledgement explaining the delay and immediate referral by the controller to the CNDP to set a response deadline, not an automatic unlimited extension. Under article 37, if a request is imprecise or lacks information needed to act, the controller must seek those details before the applicable deadline; that request suspends the access or rectification time limit. These are controller-rights timelines, not a CNDP complaint-resolution guarantee. No general initial-complaint cutoff or fixed investigation completion time was established from the reviewed sources. Act promptly and follow any case-specific notice.
Your application was not accepted
Read the reason. A case outside the body’s powers, missing documents and a decision against your claim call for different next steps. Correct the stated gaps or follow the appeal instructions in the reply. Check the appeal deadline before submitting again.
You have a reply, but the issue remains
Keep the complete complaint, evidence, delivery confirmation and any CNDP reference. If none arrives, ask the CNDP to confirm receipt rather than assuming that opening or completing a form created a case. Use the earlier reference when following up and answer requests for clarification. Rectification or deletion measures must be communicated in writing under decree article 41. Follow case-specific review or appeal instructions promptly; a universal appeal deadline was not verified.
Official source and review details
We have reviewed the official instructions. Check the current requirements and whether the form is available before submitting.
Sources researched: No real complaints were submitted.
Latest source check: Official material was read. This does not test complaint submission or confirm that your case qualifies.
Does every country have an account-recovery route?
We have not confirmed that every country has an account-recovery process outside Meta. This directory covers the listed countries, with options for data, payments, harmful content and, where available, account restrictions and court claims. Several links do not mean several ways to restore an account. We state when no suitable option has been found.
The review covers the entries in this directory. It does not establish that every possible route has been found. An accessible page, an applicable procedure and a successful outcome are different things.
How to use this directory
Different bodies handle different issues. A refused data request, a payment dispute and an account appeal involve separate procedures. Choose the one that matches your situation. The body you contact decides whether to accept the case and what action to take.
Each card shows when its sources were researched. No real complaints were submitted.
Country and topic appear in the page address. Do not upload documents, passwords or codes here.