According to Royal Decree No. 50/2019, foreign investment is prohibited in those activities included in a so-called “negative list.” Ministerial Decision No. 209/2020 of the Ministry of Commerce, Industry and Investment Promotion (MOCIIP) establishes this negative list of investments, which restricts foreign participation in specific sectors to safeguard national security interests. The list currently comprises 128 activities, including the retail sale of mobile phones, their accessories, and telecommunications service cards licensed in the Sultanate.

Morocco has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Morocco has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

Morocco has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

According to Art. 13 of Law No. 53-05, relating to the electronic exchange of legal data, the import, export, supply, operation, or use of means or cryptographic services is subject to a prior statement and prior approval from the authority.
Moreover, pursuant to Art. 46 of Law No. 43-20 on Trusted Services for Electronic Transactions, in order to safeguard national defence and state security, the import, export and supply of cryptographic means, as well as the provision of cryptographic services, are subject to regulatory control. Specifically: (i) a prior declaration to the national authority is required where the sole purpose of such means or services is to authenticate a transmission or ensure the integrity of electronically transmitted data; and (ii) prior authorisation from the national authority is required where their purpose differs from that set out in point (i) above.

According to Art. 14 of Law 24-09 of 2011, relating to the safety of products, declaration of conformity for industrial products to their relevant Moroccan standards (NM) is the sole responsibility of the manufacturer or importer. In the absence of Moroccan standards, the producer can rely on international standards. If the producers do not have the means to evaluate their products, they are allowed to rely on an external body. This body must, however, be recognised by Morocco.
With effect from 1 February 2020, it is reported that the Government, in pursuance of Law 24-09, complemented by Decree No 2-212-502 and Order No 3873-12, introduced a new Verification of Conformity Program for goods imported into Morocco. Under the new program, the verification is supposed to take place in the country of export or on arrival at the border in Morocco. Products subject to border control include electrical items such as mobile phone chargers and circuit breakers, while goods subject to verification prior to export include electrical equipment within certain voltage limits and equipment related to electromagnetic compatibility and are required to be accompanied by a Certificate of Conformity (CoC). The transitional period during which manufacturers could continue to export in Morocco without the CoC was until April 2020. Organisations officially recognised as having the relevant certifications of conformity include Bureau Veritas, TUV Rheinland, Applus Fomento, and SGS.

According to Decree 2-13-881, adopted in 2015, the responsibility for authorising and monitoring “electronic certifications,” including encryption, shifted from the Telecommunications Regulator 'ANRT' to the military’s General Directorate for the Security of Information Systems. It is reported that the civil society advocates found the change of authorities problematic, given the lack of accountability and oversight at military institutions.
Moreover, according to Art. 13 of Law No. 53-05, relating to the electronic exchange of legal data, the import, export, supply, operation, or use of means or cryptographic services is subject to a prior statement and prior approval from the authority.
Moreover, pursuant to Art. 46 of Law No. 43-20 on Trusted Services for Electronic Transactions, in order to safeguard national defence and state security, the import, export and supply of cryptographic means, as well as the provision of cryptographic services, are subject to regulatory control. Specifically: (i) a prior declaration to the national authority is required where the sole purpose of such means or services is to authenticate a transmission or ensure the integrity of electronically transmitted data; and (ii) prior authorisation from the national authority is required where their purpose differs from that set out in point (i) above.

Online purchases for individuals in Morocco are capped at 15,000 dirhams (about USD 1,500) per recipient per calendar year, which is in line with Art. 151 of the 2022 General Instruction of Foreign Exchange Operations. The current limit was revised under the 2019 General Instructions from 10,000 dirhams in 2013 and remains the same in 2022.

Under Art. 151 of the 2022 General Instruction of Foreign Exchange Operations, innovative start-ups are permitted to pay up to MAD 1,000,000 (approx. USD 100,000) annually for the import of services related to their business using international payment cards, an increase from the MAD 500,000 (approx. USD 50,000) limit established in the 2019 General Instruction. Additionally, Art. 151 stipulates that for entities incorporated under Moroccan law, payments for current e-commerce transactions are capped at MAD 200,000 (approx. USD 20,000) per calendar year and per beneficiary. This cap applies to entities that do not hold an account in foreign currency or convertible dirhams and is determined based on the amount of corporate or personal income tax (IS or IR) paid or the minimum contribution for the last fiscal year.

It is reported that the de minimis threshold, that is the minimum value of goods below which customs do not charge duties, is MAD 1,213 (approx. USD 120), below the 200 USD threshold recommended by the International Chamber of Commerce (ICC).

Registration of the ".ma" domain name is unrestricted. However, it is required that an administrative contact who must be a natural person established in Morocco manages the domain name with the registrar and Telecommunications Authority (ANRT). According to Art. 27 of ANRT/DG Decision No. 02/2024 of 24 Rejeb, the holder of a “.ma” domain name, whether domiciled in Morocco or abroad, must be represented by a natural person, designated as the administrative contact and duly mandated for that purpose. Where the holder is a natural person, they may act as their own administrative contact. The administrative contact must be established in Morocco and must provide a valid postal address and email address to the service provider, which are used for official communications between the ANRT and the domain name holder.

Law No. 31/08 on the protection of consumers, promulgated by the Royal Decree No. 1-11-03, provides a comprehensive consumer protection framework that applies to online transactions.

Under the Telecommunications Authority (ANRT) decision of 11 February 2014 concerning the identification of mobile subscribers, purchasers of SIM cards must register their names and national identity numbers with telecommunications operators. The ANRT enforces a ban on unregistered SIM cards, reportedly in accordance with Law no. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data.

The indicator "7.2.4 - Government Internet shut down in practice" of the V-Dem Dataset, which measures whether the government has the technical capacity to actively make internet service cease, thus interrupting domestic access to the internet or whether the government has decided to do so, has a score of 3 in Morocco for the year 2024. This corresponds to "Rarely but there have been a few occasions throughout the year when the government shut down domestic access to Internet."