Morocco and Portugal have formalised closer cooperation on personal data protection, signing a memorandum of understanding aimed at addressing the growing challenges posed by artificial intelligence, deepfakes and digital violence.
The agreement was signed on February 25 in Lisbon by Paula Meira Lourenço, president of Portugal’s Comissão Nacional de Proteção de Dados (CNPD), and Omar Seghrouchni, head of Morocco’s Commission nationale de contrôle de la protection des données à caractère personnel (CNDP).
Signed at the CNPD headquarters, the memorandum establishes a structured framework for institutional cooperation, including intensified exchanges of technical expertise and information sharing between the two regulators.
The partnership comes as both countries confront rapid technological change and increasingly complex cross-border data flows. Artificial intelligence systems, generative tools and image manipulation technologies such as deepfakes have raised mounting concerns about privacy breaches, misinformation and online abuse.
Under the agreement, the two authorities will prioritise collaboration on issues linked to AI-driven data processing, synthetic media and digital violence. Officials said the goal is to strengthen regulatory oversight and enhance legal certainty as digital practices evolve.
The memorandum also outlines plans for joint training programmes, educational initiatives and the exchange of best practices in enforcement. By pooling expertise, both sides aim to improve their capacity to monitor emerging risks and ensure compliance with national and international data protection standards.
The move reflects the growing digital footprint of both nations. In Morocco, internet penetration surpassed 92 percent at the end of 2025, according to DataReportal, placing the North African kingdom among the most connected markets on the continent. The rapid expansion of online services, e-commerce and mobile applications has heightened the need for robust safeguards around personal information.
Portugal, for its part, has reported high adoption rates of generative artificial intelligence tools, according to a recent study by Bain & Company. As a member of the European Union, the country has also developed advanced expertise in implementing and enforcing the bloc’s General Data Protection Regulation (GDPR), widely regarded as one of the world’s most stringent data privacy frameworks.
More Read
Analysts say cooperation between regulators is increasingly necessary as digital platforms operate across borders, often outpacing national oversight mechanisms. Cross-border data transfers, cloud computing and AI training models frequently involve multiple jurisdictions, complicating enforcement efforts.
The memorandum provides for annual bilateral meetings to ensure regular follow-up and assessment of joint initiatives. Each authority will also draw on its respective regional and international networks to reinforce cooperation.
Portugal’s CNPD plans to leverage the Ibero-American Data Protection Network and the Lusophone Data Protection Network, broadening dialogue with regulators in Latin America and Portuguese-speaking countries. Morocco’s CNDP will activate channels within the Network of African Data Protection Authorities and the Francophone Association of Data Protection Authorities, strengthening ties across Africa and the French-speaking world.
By anchoring their partnership in these broader networks, Rabat and Lisbon aim to contribute to more harmonised standards and coordinated responses to digital risks.
As AI technologies expand and online activity deepens across societies, regulators are under pressure to balance innovation with the protection of fundamental rights. The Morocco–Portugal accord signals a shared determination to adapt oversight frameworks to a rapidly changing digital environment, while reinforcing institutional links between Europe and North Africa.
