Egypt has issued the Executive Regulations to its Personal Data Protection Law No. 151 of 2020, providing the detail needed for the law to be enforced after a transition period.
Key points
- Licences or permits are required for controllers and processors.
- Breaches must be notified within 72 hours.
- A DPO is required.
- A one-year transition applies.
- Breaches must also be notified to data subjects within 3 working days, and criminal penalties apply.
UK organisations processing personal data of Egyptian citizens or residents should prepare for licensing, DPO appointment and breach notification before full enforcement.
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
