Morocco Recording Laws: All-Party Consent Rules and Penalties (2026)

Overview of Recording Laws in Morocco

Morocco treats the privacy of communications as a constitutional guarantee. Article 24 of the 2011 Constitution states that private communications, "under whatever form that may be, are secret," and that only the judiciary may authorize access to their content. That principle flows through the Penal Code, the Code of Criminal Procedure, and a standalone data protection statute (Law 09-08) to create one of North Africa's more protective legal frameworks around recording.

For practical purposes, Morocco operates as an all-party consent jurisdiction. You cannot lawfully record a phone call, an in-person conversation, or any other private exchange without the knowledge and agreement of every person involved. Violations are criminal, not just civil, and the penalties are steep enough that ignorance of the law is a costly mistake.

This guide covers what the statutes actually say, how enforcement works, and what businesses and individuals need to know to stay on the right side of Moroccan law.

Constitutional Foundation: Article 24

The starting point for any analysis of Moroccan recording law is the 2011 Constitution. Article 24 establishes three core protections:

• Every person has the right to protection of their private life.
• The home is inviolable, and searches may only occur under conditions provided by law.
• Private communications, in whatever form, are secret.

The constitution goes further than many comparable provisions by specifying that only justice (the courts) may authorize access to private communications. Law enforcement agencies cannot unilaterally intercept or record conversations. They must obtain a judicial order first. This constraint shapes every downstream statute.

Penal Code: Recording Without Consent

Article 447-1: The Core Prohibition

The most directly relevant provision is Article 447-1 of the Moroccan Penal Code (Code Penal). This article criminalizes the "interception, recording, broadcasting or distribution of conversations or information issued in a private or confidential context, without the consent of their authors."

The penalties are significant:

• Six months to three years in prison
• Fines ranging from MAD 2,000 to MAD 20,000 (approximately $200 to $2,000 USD)

This article applies broadly. It covers audio recordings, written communications, and any information shared in a private setting. The law does not distinguish between recording someone else's conversation (eavesdropping) and recording your own conversation with another person without telling them. Both are prohibited.

Article 447-2: Distribution of Recordings

Article 447-2 targets the next step: distributing manipulated images, audio, or false claims about an individual through any means, including digital platforms and social media. This provision was strengthened through Law No. 103.13 to address the rise of online harassment and viral sharing of private recordings.

Penalties under Article 447-2:

• One to three years in prison
• Fines from MAD 2,000 to MAD 20,000

Posting a secretly recorded conversation on social media, forwarding it through a messaging app, or uploading it to a website all fall within this article's reach.

Article 447-3: Aggravated Circumstances

Article 447-3 increases the penalties when recording or distribution offenses are committed by someone in a position of trust or authority over the victim. This includes:

• Spouses and former spouses
• Family members and guardians
• Employers or supervisors
• Anyone with authority over the victim

The aggravated penalties:

• One to five years in prison
• Fines from MAD 5,000 to MAD 50,000

Repeat offenders face the same enhanced penalties. The law also provides stronger protections when victims are women or minors, reflecting amendments designed to combat domestic surveillance and intimate partner abuse.

Phone Recording Laws

Moroccan law does not create a separate regime for telephone recordings. The same rules apply whether a conversation happens face-to-face, over a landline, through a mobile phone, or via an internet-based calling platform.

Under Article 447-1, recording a phone call without the consent of all parties on the line is a criminal offense. There is no exception for participants who want to record their own calls for personal reference.

Businesses that record customer service calls must provide clear notice at the start of the call and obtain affirmative consent. Simply continuing the call after a recorded disclaimer is a legal gray area in Morocco. The safer approach, and the one the CNDP favors, is to obtain explicit consent before the recording begins.

Cross-Border Calls

Morocco's laws apply when the recording occurs on Moroccan territory or when one of the parties is located in Morocco. If you are calling someone in Morocco from abroad, and you record the call without their consent, you could face prosecution if Moroccan authorities become aware of the recording and choose to pursue the matter. The practical likelihood of enforcement in cross-border scenarios is lower, but the legal exposure exists.

In-Person Recording Laws

Recording a private, in-person conversation without the consent of everyone present violates Article 447-1. This applies in homes, offices, restaurants, private meetings, and any other setting where the participants have a reasonable expectation of privacy.

The law does recognize a distinction between private and public settings. A conversation held in a public square, a market, or a loud cafe where others can overhear it may not qualify as "private or confidential" under Article 447-1. But Moroccan courts interpret privacy broadly, and the burden falls on the person who made the recording to demonstrate that the conversation lacked a reasonable expectation of privacy.

Photographing or filming people in private spaces without their consent is also prohibited under Article 441 of the Penal Code, which covers capturing images in private settings.

Interception of Communications by Authorities

The Code of Criminal Procedure (Articles 108 through 116, Chapter 5) sets out the rules for lawful interception of private communications by law enforcement.

Key requirements:

• A judicial order from the Crown Prosecutor or Investigating Judge is mandatory.
• The interception must relate to a specific criminal investigation.
• Judicial Police officers must keep a written record of the surveillance operation, including its start and end dates.
• All recordings must be kept under seal.
• Recordings must be destroyed after the statute of limitations expires on the related legal action, or after a final, non-appealable judgment is rendered.

Anti-Terrorism Exceptions (Law 03-03)

Morocco's anti-terrorism law, Law 03-03 (enacted in 2003), broadens the government's authority to intercept communications in terrorism cases. Under this law, judicial authorities can request interception and seizure of communications in relation to terrorist investigations or in "extreme emergency" situations.

The penalties for unauthorized interception jump dramatically in the terrorism context:

• Up to 10 years in prison when the interception relates to a terrorism act
• Up to 10 years in prison when the offender is an official or employee of a telecommunications company who abuses their access

Outside the terrorism context, unauthorized interception or installation of listening devices by anyone (including government officials acting without authorization) carries a penalty of up to one year in prison.

Law 09-08: Data Protection and Recording

Law No. 09-08, enacted on February 18, 2009, is Morocco's primary data protection statute. While it addresses personal data processing broadly, its provisions directly affect recording because any audio or video recording of an identifiable person constitutes personal data under the law.

Consent Requirements

Law 09-08 requires the prior, freely given, specific, informed, and unambiguous consent of the data subject before any processing of their personal data. Recording a conversation qualifies as "processing" under the law's definition, which covers "any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available."

This means recording falls squarely within the law's scope.

Penalties Under Law 09-08

The penalty structure is tiered based on the type of violation:

Violation	Imprisonment	Fine (MAD)
Processing without legal basis (Art. 56)	3 months to 1 year	20,000 to 200,000
Failing to implement security measures	3 months to 1 year	20,000 to 200,000
Continuing processing despite valid objection	3 months to 1 year	20,000 to 200,000
Unlawful international data transfer	3 months to 1 year	20,000 to 200,000
Refusing to comply with CNDP decisions	3 months to 1 year	10,000 to 100,000
Most serious violations	Up to 4 years	Up to 600,000

For legal entities (companies, organizations), fines are doubled. Courts can also order property confiscation, asset seizure, or closure of the business.

Repeat offenses within one year of conviction result in doubled penalties across the board.

The CNDP: Morocco's Data Protection Authority

The Commission Nationale de Controle de la Protection des Donnees a Caractere Personnel (CNDP) is the autonomous administrative body responsible for enforcing Law 09-08. Established by the same legislation, the CNDP has broad authority:

• Investigating complaints related to personal data protection
• Conducting compliance audits
• Issuing guidance and educational materials
• Imposing penalties for violations
• Referring cases to the public prosecutor for criminal proceedings

Enforcement in Practice

As of early 2026, the CNDP has not imposed major fines. Its enforcement approach has focused on warning letters sent to organizations that handle large volumes of personal or sensitive data. The commission has also initiated investigations into data controllers suspected of violations, particularly those processing significant amounts of personal data without proper authorization.

This does not mean the penalties are theoretical. The CNDP's gradual escalation mirrors the approach taken by European data protection authorities in the early years of the GDPR. Organizations should not assume that warnings will continue indefinitely.

Registration Requirements

Most data processing activities require filing a declaration with the CNDP before they begin. Processing of sensitive data (health records, political opinions, religious beliefs, genetic information, criminal records) demands prior authorization from the commission. Any change in the purpose of processing or transfer of data outside Morocco to a country without adequate data protection also requires fresh CNDP authorization.

Workplace Recording and Employee Monitoring

Moroccan law imposes specific requirements on employers who want to record or monitor their employees.

CCTV and Video Surveillance

Any workplace CCTV system requires prior notification to the CNDP. Under CNDP guidelines:

• Cameras may be installed in areas necessary for the security of goods or persons.
• Cameras may never be placed in locations where they risk violating privacy: washrooms, meeting rooms, break areas, or places of worship.
• Cameras may not be used to monitor specific employees.
• Surveillance of workflow and productivity requires express prior authorization from the CNDP.

Employee Consent

Employers must advise employees in advance about any monitoring devices in the workplace. Employees must give free and informed consent to the monitoring. In practice, most employers include consent clauses in employment contracts, but the CNDP has signaled that blanket contractual consent may not satisfy the law's requirement that consent be specific and informed.

Call Recording in Business

Businesses that record phone calls for quality assurance, training, or compliance purposes must:

• Notify all parties at the start of the call
• Obtain explicit consent before recording begins
• File a declaration with the CNDP covering the recording activity
• Implement appropriate security measures to protect stored recordings
• Delete recordings when the stated purpose has been fulfilled

Recording in Public Spaces

Morocco does not have a blanket prohibition on recording in public spaces, but several restrictions apply.

Photographing or filming military installations, government buildings, embassies, and police is strictly prohibited. Tourists and journalists have been stopped and had equipment confiscated for photographing sensitive sites.

Filming individuals in public spaces for commercial purposes (music videos, films, advertisements) requires authorization from the Ministry of Communication. Even non-commercial filming of identifiable individuals should be done with their knowledge, as Article 447-1 could apply if the person considers the captured content to be private.

Photographing or filming people, particularly women and older individuals in traditional areas, without asking permission first is both a legal risk and a cultural transgression.

Budapest Convention and International Cooperation

Morocco ratified the Budapest Convention on Cybercrime on June 29, 2018, becoming one of the few North African countries to join this international framework. The convention criminalizes unauthorized access to systems and interception of communications, and it provides a framework for cross-border cooperation in cybercrime investigations.

Morocco also signed the Second Additional Protocol to the Budapest Convention on May 12, 2022, which streamlines cross-border requests for subscriber information from foreign service providers.

These international commitments reinforce Morocco's domestic legal framework and provide mechanisms for pursuing recording offenses that cross national borders.

Law 88-13: Press and Media Recording

Law No. 88-13 governs the press sector and criminalizes offenses committed through audiovisual and electronic media. Journalists have specific protections for investigative reporting, but the recording of private conversations for media purposes still falls under Article 447-1. Publication of illegally obtained recordings can result in prosecution under both the Penal Code and the press law.

Practical Compliance Tips

For individuals and businesses operating in Morocco, the following practices reduce legal exposure:

• Always get consent first. Before recording any conversation, phone call, or meeting, inform every participant and get their agreement. Verbal consent is legally sufficient, but written consent provides stronger evidence if a dispute arises.
• Businesses should implement recording policies. Document your recording practices, train employees on consent requirements, and file declarations with the CNDP.
• Do not share recordings. Even if a recording was made legally with consent, distributing it to third parties without additional consent can violate both Article 447-2 and Law 09-08.
• Review workplace surveillance regularly. Ensure CCTV systems comply with CNDP guidelines. Remove cameras from prohibited areas. Do not repurpose security cameras for employee monitoring without CNDP authorization.
• Retain recordings only as long as necessary. Law 09-08 requires that personal data not be kept longer than the purpose for which it was collected demands.
• Be cautious when traveling. Morocco's recording laws apply to everyone on Moroccan territory, regardless of nationality. Tourist recordings of people in markets, homes, or private settings can trigger legal issues.

Penalties Summary

The following table summarizes the key penalties under Moroccan law for recording-related offenses:

Offense	Legal Basis	Prison Term	Fine
Recording private conversation without consent	Penal Code Art. 447-1	6 months to 3 years	MAD 2,000 to 20,000
Distributing private recordings	Penal Code Art. 447-2	1 to 3 years	MAD 2,000 to 20,000
Recording offense by person in authority	Penal Code Art. 447-3	1 to 5 years	MAD 5,000 to 50,000
Unauthorized interception of communications	Code of Criminal Procedure	Up to 1 year	Varies
Terrorism-related interception	Law 03-03	Up to 10 years	Varies
Unlawful personal data processing	Law 09-08 Art. 56	3 months to 1 year	MAD 20,000 to 200,000
Most serious data protection violations	Law 09-08	Up to 4 years	Up to MAD 600,000

Conclusion

Morocco's recording laws are built on a constitutional guarantee of communications secrecy that flows through multiple statutes. The all-party consent requirement means that recording any private conversation without the agreement of every participant is a criminal act. Penalties range from six months in prison for a basic recording offense to 10 years for terrorism-related interception.

The combination of the Penal Code, Law 09-08, and an active (if still developing) data protection authority in the CNDP creates a legal environment where recording without consent carries real risk. Businesses face additional obligations around CNDP registration, workplace surveillance rules, and data retention limits.

For anyone operating in Morocco, the safest approach is straightforward: ask before you record, document the consent, and do not share the recording without permission.