1. Introduction

Agricultural data governance in Morocco refers to the legal rules, institutional arrangements, and technical safeguards governing the collection, storage, processing, sharing, ownership-related interests, and use of information generated by agricultural activities.

Agriculture is an important part of Morocco's economy and rural society. Farmers, agricultural cooperatives, irrigation authorities, agricultural technology companies, financial institutions, researchers, and government agencies increasingly rely on data to improve crop production, manage water resources, assess agricultural risks, and develop rural markets.

Agricultural data may include:

Farm and land data: cadastral information, land boundaries, ownership records, leases, and cultivation areas.

Production data: crop varieties, planting dates, yields, soil quality, and harvesting records.

Environmental data: rainfall, groundwater levels, irrigation consumption, temperature, and drought conditions.

Digital farming data: satellite imagery, GPS coordinates, drone images, sensor readings, and automated machinery records.

Commercial data: crop prices, supply contracts, farm expenses, insurance claims, and agricultural loans.

Personal data: farmers' names, identification details, contact information, financial records, and location data linked to identifiable individuals.

Moroccan law does not necessarily treat all these categories as a single form of legally owned property. Their treatment depends on the nature of the information, the rights involved, the contract governing its use, and whether personal, land, commercial, or public-sector information is concerned.

Central legal question: How can Morocco encourage agricultural innovation and data sharing while protecting farmers' privacy, property interests, contractual rights, commercial confidentiality, and access to justice?

2. Legal framework in Morocco

Morocco's agricultural data governance framework is derived from several overlapping bodies of law rather than one comprehensive agricultural data statute.

A. Personal data protection

Law No. 09-08 on the protection of individuals with regard to the processing of personal data is a principal legal instrument. It regulates the processing of personal information and establishes safeguards concerning lawful processing, specified purposes, data quality, security, and the rights of data subjects.

The National Commission for the Control of Personal Data Protection (CNDP) is the relevant supervisory authority.

Its relevance to agriculture includes:

Farm management applications containing identifiable farmer information.

Digital agricultural credit and insurance platforms.

GPS or sensor data that can be linked to a particular farmer.

Databases containing farmers' financial or identity records.

Transfers of personal data to service providers or entities outside Morocco.

Not every agricultural dataset is personal data. Anonymous regional crop-yield statistics, for example, may fall outside personal-data rules if individuals cannot reasonably be identified. Pseudonymized information, however, may remain personal data if re-identification is possible.

B. Civil obligations and contracts

Morocco's Dahir of Obligations and Contracts (DOC) provides the general foundation for contractual obligations, liability, performance, and compensation for legally recognized harm.

Agricultural data agreements may cover:

The farmer's permission to collect and use farm information.

Access to sensor readings and satellite imagery.

Rights to reuse, combine, or commercialize datasets.

Confidentiality and cybersecurity obligations.

Data retention, deletion, and transfer when a contract ends.

Compensation for unauthorized disclosure or contractual breach.

A contract may allocate access and usage rights, but it cannot automatically eliminate mandatory legal protections or confer exclusive ownership over information that the law does not recognize as privately owned.

C. Land and agricultural property

Land records and agricultural information must be distinguished. Ownership of a farm does not automatically confer ownership of every database, satellite image, or analytical model concerning that farm.

Moroccan land registration rules, including the legislation governing registered immovable property, are relevant where data relates to cadastral boundaries, registered rights, mortgages, or land transactions.

Disputes may concern inaccurate land information, unauthorized disclosure of land-related records, competing claims to farm access, or contractual use of geographical data.

D. Electronic transactions and digital evidence

Morocco's Law No. 53-05 on electronic data exchange in legal transactions provides a foundation for the legal treatment of electronic information and electronic transactions, subject to its scope and subsequent legal developments.

Electronic farm records, digital signatures, sensor logs, and electronically concluded supply contracts can become relevant evidence in civil proceedings. Their evidential value depends on applicable requirements concerning authenticity, integrity, reliability, and proof.

E. Other relevant legal fields

Agricultural data governance may also intersect with:

Intellectual property and database-related rights.

Competition law and restrictions on access to agricultural platforms.

Consumer protection where digital services are supplied to protected consumers.

Civil liability for negligence, misleading information, or harmful automated decisions.

Public administration rules governing government-held agricultural information.

Environmental and water regulation where data concerns irrigation and natural resources.

These laws must be applied according to their respective scope; a general data-sharing agreement cannot override all the other legal regimes.

3. Core principles of agricultural data governance

3.1 Lawful collection and informed consent

Under Law No. 09-08, the collection and processing of identifiable farmers' personal data must have a lawful basis. Consent is important, although the law recognizes specified circumstances in which processing may occur without consent.

For example, a digital farming company that collects farmers' names, phone numbers, farm locations, and crop records should explain:

Who is collecting the information.

Why the information is needed.

Whether it will be shared with buyers, lenders, insurers, or researchers.

How long the information will be retained.

How farmers can exercise their rights.

A general clause buried in a lengthy contract may not adequately communicate the actual purposes of processing.

3.2 Purpose limitation

Information collected to provide irrigation recommendations should not automatically be repurposed for unrelated commercial activities.

Suppose a company collects soil moisture data to advise a farmer about irrigation. It subsequently sells identifiable farm-level information to an insurance company to calculate premiums. The legality of this secondary use must be assessed under the applicable data protection rules, including the original purpose, lawful basis, and any required authorization.

3.3 Data accuracy and correction

Incorrect agricultural information can have serious economic consequences. Errors in farm boundaries, land-use classifications, yield reports, or financial records can lead to loan refusals, insurance disputes, or the loss of subsidies.

Where personal data is inaccurate, Law No. 09-08 provides a framework for requesting access and correction. For other types of information, contractual rights, applicable land-registration procedures, administrative remedies, or civil liability may be relevant.

3.4 Security and confidentiality

Agricultural data may reveal commercially valuable or strategically important information, including crop disease outbreaks, production capacity, irrigation dependence, and planned harvesting dates.

Reasonable safeguards include encryption, access controls, secure backups, staff confidentiality obligations, vendor assessments, and documented procedures for responding to unauthorized access.

Law No. 09-08 imposes security obligations concerning personal data. Law No. 05-20 on cybersecurity may also apply to covered public entities and critical information systems. Its application should not be assumed for every private farm or agricultural application.

3.5 Cross-border data transfers

Agricultural platforms sometimes store data in foreign cloud services or transfer it to international buyers, researchers, and technology providers.

Where identifiable personal data is transferred abroad, the requirements of Law No. 09-08 concerning international transfers must be examined. A commercial contract alone does not necessarily authorize the transfer.

3.6 Data access and fair commercial relationships

A farmer may depend on a technology provider for years of sensor records, yield predictions, irrigation histories, and farm-management reports.

If the provider refuses access after the farmer changes service providers, the dispute may concern contractual interpretation, data portability agreed between the parties, confidentiality, intellectual property, or the availability of the information under applicable law.

Morocco does not have a general rule automatically granting farmers exclusive ownership of every item of data generated on their farms. This makes clear contractual arrangements particularly important.

4. Six major civil-law issues

The central distinction is that access to data, legal control over data, ownership of underlying property, and ownership of intellectual property are separate questions. A court should not assume that one automatically determines the others.

5. Six case laws relevant to agricultural data governance

Important qualification: The following cases provide legal guidance for agricultural data disputes, but they are not six Moroccan agricultural-data judgments. Morocco has relatively limited published privacy litigation, and the cases identified below address broader personal-data, confidentiality, and digital-governance principles. The comparative decisions are persuasive illustrations, not binding Moroccan precedents.

Jurisprudence

+1

Case 1: Casablanca Court of Appeal (Commercial), 25 November 2025 — Unauthorized commercial use of an individual's image

Legal issue: Whether appearing in a recorded event amounts to consent to subsequent commercial publication.

Principle: The court upheld liability relating to the commercial use of an individual's image without sufficiently explicit authorization. Participation in an event, wearing branded clothing, or receiving remuneration was not enough by itself to establish consent to advertising use. The decision also addressed compensation for the resulting harm.

Jurisprudence

Application to agriculture: A farm technology company should not assume that a farmer who agrees to have a demonstration recorded has also authorized the company to use identifiable images in advertisements, promotional campaigns, or commercial datasets.

Significance: Consent for one activity should not automatically be treated as authorization for every later use.

Case 2: Casablanca Court of Appeal (Commercial), 31 October 2024 — Commercial use of a former employee's image and personal data

Legal issue: Whether information originally obtained for employment purposes can be reused commercially after the employment relationship ends.

Principle: The court rejected the argument that the original employment relationship necessarily implied consent to later promotional use. It upheld liability and the removal of the disputed content, and increased compensation after considering the harm established in the proceedings.

Jurisprudence

Application to agriculture: An agricultural cooperative or technology provider should not assume that a farmer's details collected for registration, training, or service administration can automatically be used for advertising or unrelated commercial profiling.

Significance: The original purpose of collection and the scope of authorization matter when personal data is reused.

Case 3: Google Spain SL v Agencia Española de Protección de Datos, C-131/12 (Court of Justice of the European Union, 2014)

Legal issue: The responsibilities of a search engine processing personal information and the circumstances in which individuals may seek removal of certain search results.

Principle: The Court of Justice of the European Union recognized that search-engine processing can independently affect personal-data rights and that, in appropriate circumstances, individuals may seek delisting of results relating to them. The decision concerned EU law, not Moroccan law.

Application to agriculture: Searchable agricultural databases can expose identifiable farmers' financial difficulties, disputes, or personal circumstances. This case illustrates why the accessibility and continued publication of personal information should be assessed separately from the original collection of that information.

Significance: Making information searchable and widely accessible can create additional privacy consequences.

Case 4: Vidal-Hall v Google Inc [2015] EWCA Civ 311

Legal issue: Whether individuals could claim compensation for distress caused by unlawful misuse of personal data under the applicable UK legal framework.

Principle: The English Court of Appeal held, in the context of the then-applicable UK Data Protection Act 1998, that damages for distress were not necessarily dependent on proof of pecuniary loss.

Application to agriculture: A farmer whose personal information is improperly disclosed may suffer reputational harm or distress even if the farmer cannot immediately calculate a financial loss. Whether compensation is available in Morocco depends on Moroccan law and the facts established in the particular case.

Significance: Data-related harm is not always purely financial.

Case 5: Lloyd v Google LLC [2021] UKSC 50

Legal issue: Whether a representative claim could obtain damages for a large group of people whose browser-generated information had allegedly been collected unlawfully.

Principle: The UK Supreme Court rejected the proposed representative claim on the basis presented, emphasizing that compensation under the relevant legislation required proof of damage suffered by each individual rather than simply establishing unlawful processing across a group.

Application to agriculture: If a digital agricultural platform collects information about thousands of farmers, establishing that a common data practice was unlawful may not automatically establish identical compensable losses for every farmer.

Significance: Collective data disputes raise separate questions about the existence, proof, and quantification of individual harm.

Case 6: Google LLC v CNIL, C-507/17 (Court of Justice of the European Union, 2019)

Legal issue: The territorial reach of an obligation to remove search results under EU data protection law.

Principle: The Court held that EU law did not generally require worldwide delisting, although it required delisting across the EU under the circumstances governed by the applicable law and left room for measures capable of effectively protecting individuals' rights.

Application to agriculture: A Moroccan agricultural platform may serve users in several countries. A request to restrict information in one jurisdiction does not automatically determine what must happen in every other jurisdiction. Applicable national laws, international transfer rules, and contractual commitments must be considered separately.

Significance: Cross-border access to data creates jurisdictional questions that cannot be resolved by assuming one country's rules apply everywhere.

Cases 3–6 are comparative authorities from European Union or UK law. They illustrate possible analytical approaches; they do not establish the content of Moroccan law.

6. Practical agricultural data disputes in Morocco

A. Dispute between a farmer and a precision-agriculture company

Imagine that a company installs soil sensors on a Moroccan farm. Its contract allows it to provide irrigation recommendations, but the company subsequently sells identifiable production information to a commercial buyer.

The legal analysis would involve:

Determining whether the information identifies or can identify the farmer.

Examining the original purpose and lawful basis of collection.

Reviewing the agreement and any restrictions on reuse.

Determining whether the proposed disclosure is permitted under Law No. 09-08.

Assessing whether the farmer has suffered legally compensable harm.

The farmer may seek appropriate regulatory or civil remedies, depending on the facts and the available legal procedure.

B. Dispute involving inaccurate agricultural data

Suppose an agricultural lender relies on a digital report incorrectly showing that a farmer's production has declined substantially. The lender refuses a loan renewal.

The farmer would need to identify the source of the error, obtain relevant records where legally available, and establish whether the data was inaccurate and whether that inaccuracy caused the adverse decision.

If personal data is involved, correction rights under Law No. 09-08 may be relevant. A claim for compensation would require a separate assessment of the applicable legal basis, causation, and loss.

C. Dispute involving an agricultural cooperative

A cooperative may collect members' crop forecasts, delivery volumes, farm locations, and sales prices.

If a member leaves the cooperative and requests copies of historic records, the outcome may depend on the membership agreement, data protection rights, confidentiality obligations, applicable accounting rules, and any intellectual property rights.

The member does not necessarily acquire unrestricted rights to every dataset held by the cooperative merely because the member contributed information to it.

D. Dispute involving foreign cloud storage

A Moroccan agricultural software provider transfers identifiable farmer information to a cloud provider abroad.

The parties should determine whether the transfer complies with Law No. 09-08, including applicable CNDP requirements, and whether the contracts adequately address security, confidentiality, permitted uses, and deletion. They should also assess whether other cybersecurity obligations apply.

7. Civil liability and remedies

Agricultural data disputes may give rise to several different forms of legal responsibility.

Contractual liability: Where a party breaches an enforceable data-sharing, confidentiality, or service agreement, the injured party may seek remedies available under the contract and the Dahir of Obligations and Contracts.

Civil liability outside the contract: Where unlawful conduct causes legally recognized harm, the rules governing civil liability may permit compensation, subject to the applicable requirements.

Data protection remedies: Affected individuals may exercise applicable rights of access and correction and submit complaints to the CNDP. The Commission has statutory supervisory and investigative powers.

cndp.ma

+1

Judicial remedies: Depending on the claim and applicable procedure, a court may be asked to consider compensation, cessation of unlawful conduct, or other legally available relief.

Criminal consequences: Certain violations of Law No. 09-08 may also attract statutory criminal penalties. The applicable provision and its elements must be established before concluding that a particular act is a criminal offence.

A successful claim generally depends on the relevant legal rule, the defendant's conduct, the evidence, and—where compensation is sought—the legally required connection between the conduct and the harm.

8. Recommendations for stronger agricultural data governance

Morocco could strengthen agricultural data governance through the following measures:

Standardized farm-data agreements: Establish clear rules governing collection, permitted use, disclosure, retention, and termination of agricultural technology services.

Farmer access and correction procedures: Make it easier for farmers to inspect and correct inaccurate personal information held by service providers.

Cooperative data-sharing policies: Clarify how members' information may be shared with researchers, buyers, lenders, and government institutions.

Security standards: Encourage risk-based safeguards for agricultural platforms, particularly those handling sensitive commercial information or large amounts of identifiable data.

Transparent automated decisions: Encourage lenders, insurers, and agricultural service providers to maintain records explaining significant decisions based on farm data.

Clear cross-border arrangements: Require appropriate legal review before transferring identifiable farmer information to foreign service providers.

Accessible dispute resolution: Develop affordable complaint procedures and specialized expertise in agricultural technology, data protection, and civil liability.

Protection of small farmers: Provide understandable contracts and practical guidance for farmers who lack the resources to negotiate complex technology agreements.

These measures should balance innovation with fair treatment of farmers. Excessively restrictive data-sharing rules could impede agricultural research, whereas unrestricted commercial reuse could undermine trust and create unfair bargaining relationships.

9. Conclusion

Civil law and agricultural data governance in Morocco involve the interaction of personal data protection, contract law, property rights, intellectual property, cybersecurity, and civil liability.

Law No. 09-08 is especially important when agricultural information relates to identifiable individuals. The Dahir of Obligations and Contracts provides a broader foundation for contractual and civil liability questions, while land and electronic-transaction rules may become relevant depending on the dispute.

The six cases discussed above offer useful illustrations of consent, purpose limitation, data-related harm, collective claims, and cross-border governance. However, only the first two are identified Moroccan decisions, and neither is specifically an agricultural-data judgment. The remaining four are comparative authorities and should not be presented as binding Moroccan precedent.

The central conclusion is that effective agricultural data governance requires clear legal responsibilities, transparent contracts, appropriate security, meaningful protection for farmers, and remedies that are accessible when agricultural information is misused.