The source page presents CNDP — Notification of personal-data processing as a service related to data protection. Its function is summarised as follows: Information and submission service relating to notification of personal-data processing. The exact features must be confirmed on the official portal.

How can you access CNDP online?

Use the link to the official portal shown on this page. Before entering personal information, check the domain name and make sure the selected feature exactly matches your need.

Which documents should you prepare for CNDP?

The source page does not provide a complete, universal regulatory list of documents to submit. First prepare the identification information and references relevant to your case, then consult the list displayed by the official portal for your specific procedure.

Does CNDP issue a document or certificate?

The result depends on the feature used. For this service, the identified use cases are: Notify processing, Prepare compliance, Learn about Law 09-08. Some features may produce a document, information, tracking status or a submission; always check the result described by the official service.

The listing links this service to Commission Nationale de contrôle de la protection des Données à caractère Personnel. e-services.ma is a private, independent directory and does not carry out the procedure on the user’s behalf.

What are CNDP processing times and fees?

Processing times and fees may depend on the procedure and your situation. Because they are not detailed on the source page, do not rely on a generic amount or timeframe: check the information displayed on the official portal when you submit your request.

How can you avoid a mistake before using CNDP?

Reread the exact service title, prepare the useful references, check the data controller, the right you are exercising, supporting documents, the request and the official channel, then use only the official portal. Also keep any confirmations, file numbers or receipts generated when available.

Data protection

CNDP — Notification of personal-data processing: practical guide

Information and submission service relating to notification of personal-data processing.

Self-employed entrepreneursSMEs

Organization: National Commission for Personal Data Protection Control
Category: Data protection
Profiles: Self-employed entrepreneurs, SMEs
Data verified: 2026-07-24

Independent directory. e-services.ma provides information and guidance without carrying out the procedure on your behalf. Always rely on the official website of the administration concerned to check requirements, required documents, processing times and any applicable fees.

Go to the official website ↗

Screenshot of the CNDP portal in Morocco — Notification of personal-data processing

Notifying a processing operation to the CNDP means declaring it, or requesting prior authorisation, before personal-data processing starts when Moroccan Law 09-08 requires that formality. The key point is to identify the correct notification regime: prior declaration, prior authorisation or, in some situations, a specific procedure.

Declaration or authorisation?

The CNDP states that processing operations are generally subject to a prior declaration unless they are excluded, exempted or fall under prior authorisation. Authorisation may be required for certain sensitive data, use of the national identity-card number, some file interconnections, data relating to offences, or a change in the purpose of an existing processing operation.

Situation	Procedure to check
Ordinary processing subject to notification	Prior declaration, often using form F211
Sensitive data / CIN / interconnection where the law requires it	Prior authorisation, including F112 depending on the case
Processing covered by a CNDP decision	The form or specific regime indicated by that decision
Transfer of personal data abroad	A separate transfer procedure must be examined

Documents to prepare

For a normal declaration, the CNDP asks in particular for information supporting the legal basis or consent, the information notice given to data subjects, the subcontracting agreement with confidentiality clauses where applicable, and proof that the signatory is authorised to act. An incomplete file can delay or prevent processing of the notification.

Time limits published by the CNDP

For a declaration, the CNDP announces a receipt within 24 hours and may notify the controller within eight days that the processing must instead undergo prior authorisation when it considers that obvious risks exist. For prior authorisation, the announced period is two months and can be extended once. These periods are suspended while the file remains incomplete.

Before submitting the notification

define a precise and legitimate purpose;
collect only data that are necessary and proportionate;
prepare the information provided to individuals and the process for exercising their rights;
document security measures, processors and any international transfers;
if the applicable regime is uncertain, use the procedures published by the CNDP before filing.

Official sources checked on 8 September 2026

Key point: do not choose a form simply because its title contains the word “declaration”. The type of data and the nature of the processing determine which CNDP regime applies.