Images are considered personal data and are therefore subject to Law 09-08 relating to the protection of individuals with regard to the processing of personal data and its implementing decree.
The conditions necessary for the installation of a CCTV system in the workplace which purpose is to ensure the safety of property and people are:
a) Notification of the CNDP (Commission Nationale de contrôle de protection des Données à caractère Personnel): the sanction for installing CCTV in the workplace in violation of the notification, is a fine of MAD10,000 to MAD100,000.
b) The cameras can never be installed in a location that could compromise the privacy of the employees.
c) Data security and storage term
The controller has to take all the necessary actions to preserve the security and confidentiality of the images processed and, in particular, to prevent them from being destroyed, distorted, damaged or that they are disclosed to unauthorized third parties.
The term of storage of the images should not exceed three months.
The sanction for the violation of the provisions regarding storage is imprisonment of three months to one year and/or a fine of MAD 20,000 to MAD 200,000.
d) Transfer of data abroad and data reconciliation
Any transfer of data abroad must be notified in advance to the CNDP. Interconnection and data reconciliation with other files which main purposes are different from the purposes of CCTV must be the subject of a separate authorization request.
cabinet d'avocat